last executing test programs: 4m48.995773528s ago: executing program 4 (id=2834): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x800c4153, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0x2, 0x200042}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x800}, 0xc) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, {0x0, r4}}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a000005"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000140)={0x0, 0x6, 0xd55, 0x3}) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x5, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4m47.184623166s ago: executing program 4 (id=2851): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x4002}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000029dc35cc6300000033000000000000ff2400000029000000050000000002020100000000fe8000000000000000000000000000aa140000"], 0x4c}, 0x24004091) 4m47.019621391s ago: executing program 4 (id=2853): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="0001010000400000", 0x8}], 0x1}, 0x48005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x96) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x188}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x803}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{0x0, 0x3f, &(0x7f0000000640)=[{&(0x7f0000000440)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {&(0x7f0000002a00)="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", 0x22c}], 0x2}}, {{0x0, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000f80)="98f340d7d411d8246d2376b46f752b2f4f8cfec8e533ce1e22c2944972cd3dd55ad124822ee54d829e4f5c15f4a7784d47687ad9163b0edb6ffb8112bac220281b4049a62f348d48efc5e90943f97f786e63e40f3b55318f369eb5f68438fe39530bb23e6e00f80236234f04c8dd72c8a03878f60c511e40d66c1257d1f15ce551024c67e95dc19e90408d9f197b19ed8fb730fabea10176d842314fa7e06030eee01dfb8612a72cc7015e195e20174c363da5fbeb99de86fb8b85f86f83cf7d928b8f70c8772ba9fddd163485d3e8c03bdf366f2aa2f9d6", 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)="2575dfd48edfc963ce1a848a5d172c613652e63a8090a620078e9f5476a9eb98a39ebfc8d8c02dae3b97a288ccbe4c8186ae5e77f26373199790578dbb032450c9a309c8e06e9bffc5536d6c34c48b6b79fc0b60bf3a2b006be52c65771a0c6d49cf0151ff62ec797298ea55a782955282adbcdae0e0ab7c1254e116fa43d4d0ae47bf606edb21632bd545a2bfabc196d70159cbf86de6e1e40c20ecd802c79ea5869819cc6f723f2aee3b10a3cc323c65d6050e607783a8fed372fae8353c7f5c27e167f8694e54ebeb9f7d00c99684f23fb4fcae84c6801c73beace844678a6c11", 0xe2}, {&(0x7f0000000800)="39e739706597825dcfd2ef562e7e3bad96f5596d84007a56496370d206eb1428b54277fa5d38c7650f0de64f33c87946f950b06ef875a4d8943f834f520b75a9fc62f56f89b5bedc543630a04e20dc4b8bf7d7578085f7b845c41c580bfcb112419284fc8a3b619bf27a9f14769d5adb0a6e7c3e2d0560759c5f7c5220788435ef9b7597147c", 0x86}], 0x2}}], 0x3, 0x4040001) r4 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000d40)={0x52, 0x0, 'client1\x00', 0x0, "24db67818b4014fd", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f00000004c0), &(0x7f0000000500)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0xee00, r6, 0x0, 0xd4, 0x6}, 0x0, 0x0, 0x783, 0x3, 0x971, 0x5, 0x6, 0x8, 0x3, 0x0, r5, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@remote, @in=@broadcast, 0x4e24, 0x2, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x33, 0x0, r6}, {0x9, 0x4, 0x4, 0xc4, 0xffffffff, 0x8, 0x2, 0x7fffffffffffffff}, {0x8001, 0x3, 0x3}, 0x5, 0x6e6bbf, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x0, @in=@local, 0x3500, 0x4, 0x2, 0x2, 0x7, 0x1, 0x3}}, 0xe4) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000005c0)) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) 4m45.992936103s ago: executing program 4 (id=2861): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_FD(r5, 0x4c00, r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000180)={0x0, 0xe, 0x1, "8a"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000440)={0x40, 0x31}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x96}, 0x0, 0x0, 0x0}) dup2(r4, r2) write$6lowpan_enable(r1, &(0x7f0000000080)='0', 0xe6) 4m40.726484454s ago: executing program 4 (id=2882): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="0001010000400000", 0x8}], 0x1}, 0x48005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x96) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x188}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x803}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a00110000060a0b04000000000000000002000000d4100480240001800b000100736f636b6574000014000280080002400000000308000140000000029c1001800a0001006d617463680000008c1002800a00010073746174650000000b000100726563656e7400005b000300240de55c7e19ba2d0bda197b61b75aabe0fd70b0ca4560ab2d0e8be38a624695253dfa6cae8799305bda20cf62b6ed9bc1ca5801aed8faacc5e04170c1c59b912dca41565911a6497e1e2de3ede03d056202fa53366947000800024000000000080002400000000004100300237a7f1371d167825283c76bea4a6935cf874876782d54ffb7c7c0551f89e8346def38843bf25a9c896ee3dd20184bd8e2103b725c8c120a90e9dc253aa1faf928de44aaafa7871de19b3bfc9beae44b2cf63b027f358363d769fbabd235e851182c2f2a2a8832891d5594fd6ab0006e49e3dc77e7aeefcc7f00b3ee600e935ffc91e359aebf3266ae56ed3f0284ed1fb960a2e4d77d006ed6d084e4aa3fae17452253ddd30ba894d0e97f27c8827fc72eb89c8677fb79edd412e0999e7c1d1c3437bba1876cf039620c2620506e884a3209d69bafd2095d9121f42dadc3562032f96d6b130e320d26dd5882a3d3e948202d89cb9f70a78922993a430730fabe6dae9b45dc4a9b8e7dcd9ea35c46afdaa8ea2928eec7985cffaa0d51bae69a8de7cc3638fa4f85431f7e5c78d8d77949f134719b2df72bc5b1fedf1cf2d03af0dd7cbcfd624f5c8309d2e0800f3d5f420a9c7ef09a747efbfcdd20a7d1d9672a0a319e56cbf15679d7f1533beb654b02e85d4fb1873ab3c2d023b5795afbfb60f01c40b919484f988ab1593196f63bf0a13f5ea20ca122709ff045733dfe0341b9a6c14d7e09af703848ed7d6ed5b622deafeb219b4e8039a85c976f851053b67d9fa15b70341eaaaf1467cbd5ddf5557d83930e291655c8a902263f67dac5c7c2ec7da95d5042df89e84501130a416fdb5f0547858e6fea67d2be55f3549e2fa8cc5b985682fb0acfb7bf783e74de81589d097566acac527c188f68fb5ef488d555af096a5f885ef891d8d7931140ab33304b5466de3d658025e15f732c0de391cb801c3a9d7817a19d4689451b67e7a12a394eee8b3fcd88f6b050bbc4fd83bc8ab0f0c101f6d17ec3490af13a0e37b153a716831ff10e40974773c5d499b8f221e28ba3e1d73d30b401d692a6d4dd702c8e9c462c53df8266d794d391f063cfe5e90e4994be040cdaece15d21492f37f4a84182026d86da33f3c0b35727ce4f0ed916aacdd89d8e3c590220867e9d9a5a16880960019daa6203c8da683df1e661dc41ce5b7d031e974129c354f97f2865d055265dbf18b00ecdef41c12186912e3dd8532e2340d3e7f986d8721ccde74552d294d070d01cb0515ef45c9012b9143f91e156e60f5ea338dfd683a82792acf05edc73bc1a7fecbe859aea3272a4a19c5e6299eb6342d9a885335d742e111b971f8de2269bb1dce04eba40dad5953c7016988a1abc9b26990c966b9fa56de6b29fb75a5ef67c8b1504f18bc8f503e78ba2660863108d9d0f204a3f1e8bed63bd0f82cea7883b0fd0f3a7cc96b1592c29f0eca3b05cb263e6e7d232d4fa004ed68382c790bae22c81bdbac44c5461d54a7432d87b44782e6fdf25fe59102b9fbf61515e8fa8c144b6b3fe1be66ebada1430d159f98b4f04949abe1558de304503e9e3f0cc1cf3640a7e27c696b226e9b24e5ed5cef7609d8c3bc5f7e300367d50d826d467cb9c6b577f962c299a6c89a0c207b27a1fe4847b263be9b10e964c2269a7371e901184e2a0ba9c4b6a130f554eaf1e534603c4eed190db5a0ed2a9e822edd2835336002e9bd9d18c1dfa6cb3eea288ecf65271541fc398c232729fb2d6c245dd96d42a8f956a8bf474fb1def1cfe40b857875462a9153137fb264f3cf280a36ee3366efd834c5822af576d7ff7acfbe649258299160f0eb437db937b187c2b70385362b4a2abcfb69185b13e988579990e7e2b3773f8c9fcfda709ebce9423e7bcdbbfa134b3bfb74b310e2a6342289bc05dc21b4859d2f9569b48775a5d24397cf22699672baf7927c31a534c7ea1f5d8f7e04567a071f6cda7cf2a3451cc5ca82a545e3f93edc6330f1094faa5fe71f507f66e780514cac4f48311a922094f2582e84c558f78db986f728ef0c5243b3d2752aea6f5b41b73cfe3647cac6e360355d1b43092b162eb3c0f813b501112563a2f87070ef69f73624c3f47be135808a6a4cf487b53ab7b46b230932da9543b390d0a661913b38621eb7ccc90bb5b384346dafd9347a4dc9cc3ae9e8b6b06b1bcdef331e0c08734caee8d0dd9d296982506d15357eae349744ca914a396e80b5fed6e4b0d4a7523773750f6f2e470159a932f28ffc0bfffe533ac52d7f734745aebdfec74d24aa4aeef1dac32eab1d6d02eb6c214f0845383c43963fd0d81ebdfd90d6b9affa979759a9dd6140e5cd705799d002cecc557a3f2435d0dcc10d4d69a34843decfdf2d2ce71e55835a73339beaa6c94eb83849e09b3e3031c959e2a17820b6be7570cdd735c71e192412ea132d1d66c8b67425d8232c3517a6597a1e10d792776b299698de7a80fb8dcafc292af1e3338900bfc020f46f939323d8c21ca0a322d6241c8691cd8ca4c3a66c01caec402647ec695763a2beae4025efc32176ad9ed55768585e59b700ebf3db2eb7acd036cdd82a07ddc2f95c5c9e809792594ec191c56e926226c59802dbc35ef82d9d601bf704167544f37ab3bf86afd3c455936bce54f21252cf545db6be2576e2b449781a1122ee6c9a81833d6586944c6d1c82760e6ffddb68f6d46d44d937bb83b50902e2bb432234fae1ddb033cec96c928ea6c618fc0d881f489ec9478cfe843f5372f00fd32b40ef3f505f65406033f8d421ecc166310073c9887c4c37eadbae40f1b2631bfda13d66b380fe799724763590e1188b6838fae2390ebff20a066eeaac1a9fe878da781aee4a5300bb433fdfc848f0eac3250485eb525d87759830dc5d1b4575ae2fd058961b96ec2a3791ed84eaafaf2e69920e7572fb162aa1b3cd9928607c036ac8364f96d39f389c3a2e040cfdfc59a43eece6f8cd8c1a1e8979563091ab94f16aebb67ca3f569bec8a88e05cbd33e50b92e37f3e44fad08dfe1259a9fdc0b098fcf7984ad6894eeccccb4c8f9f3bc09c3eb058dc29bd9cb0b5129cac8f13804c7779a6c1bcdf8803b17408667baa2507c0c3b76e3265eb568928d09f0de198cfb668e3d8746443ba8d99e61e1da9649ebfcac533ac171bf3c3e0c6e30679611d88277860d12f19ad635e85b5c307d4e870ae70b1ade7c65e0dbafc0155e5c350a083fa2a20835e8c64e07c901be4e0c34fb4e8a24f9d9fa0b7819b8d42f1af4ee5e789cca8e3e241db19a24410c93c743e342a948a452e2fe06135d0dcbe4461feb788383d2b8a21ced5431f6eb0d0ef8933278c1c5826c153aedd42de26bed3752c5a9157e3f3ce4ad95ecd25f2849c50147b83780458006b501e5797e81dca0df0e0b156aed4bde27498de8f9830be5739a984c4a38cbbca4e6cca6bcfd1856527b9d202beaab6cd0cfcc2cffc6d007933ae954395b68ac321b56fbbcbe1d042b82eb5ab78bf22136e77f2c53ad6deab214b3b469fa9da3c2eac1505e6517cd296232f7873e9e41b23c6c5c0bc08cf645c750cdc8a6b693e928939e7e75682054bb1ad9d43b1ef497a1c8cc22d67b8d98c1772f908c753c493e079c2cff2d4b854aa3ca853dc2de3d64eb1f153f9ece76cac4d4b559ec751f63fd404eadc12df7743122dfc8c9288ef72bd86604ef2858fa38859dd9178cb907f41a7fc58529d6dd95897d18b23bdd83decef117707322b523308b16601941b8db52707f08a25b2ceea451c7d77d8b9fb18497d813db16420911401ca109675fba09fc645b42351a6e3774d662e9b0a1d4b8f0612c054d5b39293a4a6414b3115167c1f121cbce0feeeebdf824012a47e72a2a1d674b3c2f672b07b05bd346c1874b275d2d2d5436b21c4958c75a588be4b51c583902d2b724dec14239ef6b7d056d841087f480a1e31eb648e1cde46f905e40cee1746bdbae412899a3a171a1a296e5afd1d20bc648bd73dc254edaab2fe23276eb29e7e875754c347a00da9b9542b527181145fcd7d7c65030125d6ab03dbd8d34dc04f28f1faf45b9a4d85f0c8a34ab0ef767fbac30cb769f65848219a2587bfa707851029f5377242a4596680de9f5f5cefbbf7fa17ebf2411a37609d7e647c2ebe5046582f744c5ed90d89d8d78edf80f53a9d5dbc9e2298e6da95695170b5cfe74adec23b9d0fbadc784cfc724eda88ecaf660b758773f01baafe3b0801bb6231386477f344dfed9030fb155ac06be46594744c218439e831cd4aa70de3332a0b7fc730c5505056c31153291a224be8b7e7fd750b97caf1aaf27a9f53464282b3f7a062c7a1ef523d93b6b5d0c6dd31cf7472665cd1abada98e0cdf634438a83f6bf8ab2b8017ff8399c0b7e575a34048c1adffca3da863c3d46f7a103322d5de896ba908e7cf4194ae1093ea325ad99972fdc634abe3a5156912b2f50a028a7c8ef2b3cbd30b2e8a39c1e46a185b77fcb2c2b87cd2645518f20a58d3d78b47c99b094350b5b343385a0b64885b765ba602627455bc06d54d4bca10382681650f99c3f63b4e17ed29651b3c65a9c2523cc0a37693c7c1cd931a653c0de9550db33fe26fbcdc89070ba8602643f98be014ff23a99471bcb7a78b494593dcfe1d498525884deb94d05d2c6dea6e5397567cb2623f7e2b7fec60e15de2302de29fbe6b799119b1d81622c009f7be6562fe63b2e68c4149e102f6bc055957a73a91f3c5e722e2618ee01ac203be5436170eebaa8cbd41b8f5bd8741e5117d6805d16bbb0e9a14eedc9e1b932b48bb19b36adffdba560e9703ad888eb4f49fd849a09653561050cfe6fabf2f92800df2272346e11ac9f08e27f8d93c38e50bd8cbfaf68409167cc47272ffd24735ab44599fa6961985a853b7d81ae35de63c5ba837abcef35c68b157535a3d146e5be915f7e4ca5ccfaea54570354a0041c42451c9d84ce999ad06096526f99a43db6d4644c8ab3afa5baf1ea43e6c45df8abf274a305a58521de0d095c5316321d3735cf357e6e3e22770847baaf396be5a23227ea15b749edd8ee65b65adddd0310ab5cf4f2476ee198ca1f3c021fb12f879c79337c729dad021377233f2d16019c28b9f25671208a71b49c0ad646a11a18861238db3db510d920eb9cfda6a0033c851bdb868311a31dedf869196337e8efd9c6762805f81f7fee941403e4385bb"], 0x1128}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{0x0, 0x3f, &(0x7f0000000640)=[{&(0x7f0000000440)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {&(0x7f0000002a00)="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", 0x22c}], 0x2}}, {{0x0, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000f80)="98f340d7d411d8246d2376b46f752b2f4f8cfec8e533ce1e22c2944972cd3dd55ad124822ee54d829e4f5c15f4a7784d47687ad9163b0edb6ffb8112bac220281b4049a62f348d48efc5e90943f97f786e63e40f3b55318f369eb5f68438fe39530bb23e6e00f80236234f04c8dd72c8a03878f60c511e40d66c1257d1f15ce551024c67e95dc19e90408d9f197b19ed8fb730fabea10176d842314fa7e06030eee01dfb8612a72cc7015e195e20174c363da5fbeb99de86fb8b85f86f83cf7d928b8f70c8772ba9fddd163485d3e8c03bdf366f2aa2f9d6", 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)="2575dfd48edfc963ce1a848a5d172c613652e63a8090a620078e9f5476a9eb98a39ebfc8d8c02dae3b97a288ccbe4c8186ae5e77f26373199790578dbb032450c9a309c8e06e9bffc5536d6c34c48b6b79fc0b60bf3a2b006be52c65771a0c6d49cf0151ff62ec797298ea55a782955282adbcdae0e0ab7c1254e116fa43d4d0ae47bf606edb21632bd545a2bfabc196d70159cbf86de6e1e40c20ecd802c79ea5869819cc6f723f2aee3b10a3cc323c65d6050e607783a8fed372fae8353c7f5c27e167f8694e54ebeb9f7d00c99684f23fb4fcae84c6801c73beace844678a6c11", 0xe2}, {&(0x7f0000000800)="39e739706597825dcfd2ef562e7e3bad96f5596d84007a56496370d206eb1428b54277fa5d38c7650f0de64f33c87946f950b06ef875a4d8943f834f520b75a9fc62f56f89b5bedc543630a04e20dc4b8bf7d7578085f7b845c41c580bfcb112419284fc8a3b619bf27a9f14769d5adb0a6e7c3e2d0560759c5f7c5220788435ef9b7597147c", 0x86}], 0x2}}], 0x3, 0x4040001) r4 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000d40)={0x52, 0x0, 'client1\x00', 0x0, "24db67818b4014fd", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f00000004c0), &(0x7f0000000500)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0xee00, r6, 0x0, 0xd4, 0x6}, 0x0, 0x0, 0x783, 0x3, 0x971, 0x5, 0x6, 0x8, 0x3, 0x0, r5, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@remote, @in=@broadcast, 0x4e24, 0x2, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x33, 0x0, r6}, {0x9, 0x4, 0x4, 0xc4, 0xffffffff, 0x8, 0x2, 0x7fffffffffffffff}, {0x8001, 0x3, 0x3}, 0x5, 0x6e6bbf, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x0, @in=@local, 0x3500, 0x4, 0x2, 0x2, 0x7, 0x1, 0x3}}, 0xe4) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000005c0)) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) 4m40.260054172s ago: executing program 4 (id=2885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}, 0x1, 0xffffffff}, 0x0) 4m39.603392162s ago: executing program 32 (id=2885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}, 0x1, 0xffffffff}, 0x0) 8.051878618s ago: executing program 2 (id=4145): syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804a74d989e030109022400010000000009040000022ec25d00090509000000000000090503010000000000"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0xfffffff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@overlay={0x543, 0x2, 0x4, 0x400, 0x46, {}, {0x1, 0xc, 0x6, 0x5, 0x7f, 0x4, "10a2aaec"}, 0x4, 0x3, {}, 0x9}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x6, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0xda45, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x601, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x0, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0xfffffffd, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0x7f, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x8, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x800, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x5, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}}, 0x0) r5 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r5) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r6, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r6, 0x407, 0xc000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'load '}, 0x1a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) shmdt(r5) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$vim2m(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000005c0)={0x3, @win={{0x8, 0x4, 0x50424752, 0x3}, 0x4, 0x6, 0x0, 0x5, 0x0, 0xe}}) socket$tipc(0x1e, 0x2, 0x0) 6.193396243s ago: executing program 5 (id=4155): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() socket$inet6(0xa, 0x3, 0x3c) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4.944808612s ago: executing program 2 (id=4156): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x60086603, &(0x7f0000000040)) 4.944259521s ago: executing program 5 (id=4157): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73", 0x2dd}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef", 0x96}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f00000000c0)='qL', 0x2}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 4.824041028s ago: executing program 5 (id=4158): socket$kcm(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'cpu'}]}, 0x5) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x406f413, 0x0) 4.757874632s ago: executing program 5 (id=4159): syz_open_dev$dri(0x0, 0x6, 0x22041) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 4.212598533s ago: executing program 1 (id=4162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000240)=[{&(0x7f0000001040)="4aa9", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "0300", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "c1799d70", "bb0001000100"}, 0x28) ppoll(&(0x7f0000000300)=[{r4, 0x200}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000000000000000000000000000007baa3aa0d0667891afd0f0331b213ddf9376b41fa7be641071b95d72609053a60ca87081b5532bd931f585e76fb9e8c4df5ee5472c0b9e49b8d380b3e41372c64a6a70ecae2aa6ccee594d0524ca4d04263687e9e53b9174eba6a99e820d4d22a6ba2054ff35139e02ebdd705d0269", @ANYRES32=r3, @ANYBLOB="0800090001ac0f00"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x9c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9b, 0x46}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfffffffb}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xff}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x40}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x49, 0x2a, [@mic={0x8c, 0x10, {0x903, "3e198818ec23", @short="0cafc34d73e3b4fd"}}, @rann={0x7e, 0x15, {{0x1}, 0x4, 0x10, @broadcast, 0x9, 0xffff, 0xfffffff3}}, @mesh_chsw={0x76, 0x6, {0x3, 0x7, 0x40, 0x3}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @broadcast}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2404000c}, 0x40000) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) r5 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper, 0xff}, {@host}, 0x400, "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"}, 0x418, 0x9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000008062e872523000000001ac06d43a2ff65df020073797a3100000000050001000700090000000000000000003f3f14ebe394e4"], 0x30}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000080) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000008c0)={0xe, 0x8, 0xe, 0x93f}) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff0401"], 0x0) 4.022535205s ago: executing program 2 (id=4164): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.85181821s ago: executing program 2 (id=4166): syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804a74d989e030109022400010000000009040000022ec25d00090509000000000000090503010000000000"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0xfffffff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@overlay={0x543, 0x2, 0x4, 0x400, 0x46, {}, {0x1, 0xc, 0x6, 0x5, 0x7f, 0x4, "10a2aaec"}, 0x4, 0x3, {}, 0x9}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x6, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0xda45, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x601, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x0, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0xfffffffd, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0x7f, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x8, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x800, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x5, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) r5 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r5) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r6, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r6, 0x407, 0xc000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'load '}, 0x1a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) shmdt(r5) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$vim2m(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000005c0)={0x3, @win={{0x8, 0x4, 0x50424752, 0x3}, 0x4, 0x6, 0x0, 0x5, 0x0, 0xe}}) socket$tipc(0x1e, 0x2, 0x0) 3.436594729s ago: executing program 5 (id=4169): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="ba64c916abad6b"], 0x0, 0x0}) 3.119975537s ago: executing program 3 (id=4173): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() socket$inet6(0xa, 0x3, 0x3c) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.006071585s ago: executing program 3 (id=4174): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f00000005c0)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000102c0)=""/50, 0x32, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000004b00)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003f40)=@newtfilter={0x2b0c, 0x2c, 0xd27, 0x70bd2a, 0x8008, {0x0, 0x0, 0x0, r2, {0xfff2, 0x7}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2adc, 0x2, [@TCA_CGROUP_EMATCHES={0x2358, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_LIST={0x2310, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x16a, 0x1, 0x843}, {0x401, 0xe9a, 0xf, 0x4, 0xb, 0x1, 0x3}}}, @TCF_EM_IPT={0x78, 0x3, 0x0, 0x0, {{0x2, 0x9, 0xe}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x5d, 0x5, "ae630ff98fbc8ca756880781bf534ed64e00be73e19be3d6c4dfde688110710784576ce677ec483d902c7c2013ca01f56c082902f2ee2823e5be783465ee296717328076f8ca93406546c1a3d74cde9d01e8151f28026c1670"}]}}, @TCF_EM_CONTAINER={0xffc, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x9}, "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"}}, @TCF_EM_IPT={0x10d8, 0x1, 0x0, 0x0, {{0x10, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x56, 0x5, "8e426280b3b1a40b44d1eb49be757267faef48f7d53f319887ddbc0b29404a28f8e98f1d5bcb5b739d7235a7fe6c28ca4e870ce074c80c469bc888c8fa096016d735fb3cbe7ba692c77f48637780b8c6ed50"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x38, 0x5, "c50ff203de0e0c591f5ee90fc40431941db71b6eb004e116e0add130f27912566ce49969b7972d52df913ffc75458ad2bba366cb"}]}}, @TCF_EM_IPT={0xa4, 0x3, 0x0, 0x0, {{0x50, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x6e, 0x5, "51f605d0eeedc43d196c866a8edda3714a8b0d79c4bd8db6237719fdcfb1aa82afa39276821de0a9fe11acd2c9b9054015db8ed339cfb0da7ff7aae1ab7a1a505222daaf489ac84b5d46725f578b5ac640ae4d20fc6641f2fa1bb3d573c5956ebef4344c6a2b76f157c6"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x38c, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="16ff26eee72c", @TCF_META_TYPE_VAR='\a\x00', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b577101d20"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xaa, 0x2, 0x2}, {0x800, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0x78, 0x2}, {0x7, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7}, {0x1, 0x0, 0x2}}}]}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x1e5, 0x4, 0xc}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xba, 0x1}, {0xfd26, 0x1, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff}, {0x5, 0x5, 0xdc}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0xc00, 0x0, 0x6}, "53dd3564e8bbca55b24b15ad42160206a2b8b455d763f690dd54d1b1eea3817041ae786d6ac3241c6bca80af5db21affb4ce1759cf1205edebfb65f525adb59d09212d3baf27b539a8495a4e33a8f20a51e361c5e870693c04cf2d7a5f3fbb36e9bd533df615cc31ab"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe6c}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x1}, {0xe, 0x2, 0xd, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xff5c, 0x7, 0x8001}, {{0x3, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_EMATCHES={0x128, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xb3, 0x1, 0x1}, {0x3, 0x1c, 0x6b, 0x1, 0x0, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x6}, {0xfebf, 0x7, 0x800, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0xc, 0x0, 0xcbb}, "ebb316f2dc60f0c1771f76cb2c2819b0f37edd707c997df5cb54e591850c8a46d6a05e64238d45e07e4f9e5a307422558baee1cec7833e7b781614f4cab41c4ba732722d0cb3baff13bb96935f96102c6a8044e42d76dcb5f7efbff23ad188348b7ded77378acedc7b64bf619b6290af70936c72f2c52b6ad46acd0d24605313ccfdcb0e0bc52be4815a8ac766455dc41ae276d62911d7f740ecd7da9737f18ec7de9f1f8089919bbd681a28999431a9b887804880caf2a273179b164907dfe338c9d68768"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffb, 0x3, 0xe}, {0x0, 0x40e20, 0x1, 0x2}}}]}]}, @TCA_CGROUP_ACT={0x658, 0x1, [@m_csum={0x1f4, 0x14, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x34, 0xffffffffffffffff, 0x0, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x6, 0x10000000, 0xd, 0x6}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x2, 0x88, 0xfffffffb}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x6, 0x8, 0x10001}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x0, 0x4}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2f2d, 0x4, 0xd, 0x25e2}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6d53, 0x4, 0x2, 0xffffffff}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0xffffffffffffffff, 0x738, 0x1}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xe5e7, 0xffffffffffffffff, 0x3, 0x5900}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4c, 0x3, 0x3, 0x4}, 0x5e}}]}, {0xae, 0x6, "7a015bb99cfc93b5c3b587f870a1967a8cf4711336275fe1b7c36bc4a4d4223d9b9555e2f274c11b2eb3d5ff20806d93c0e4a3ff78e5d08254dc505d3c9086d59062d3dbadfb5d852937272f9c655e8dd4d118d24467728684634b05ed55f787e250baa41ca16530b92550a77a84eb2a3cdcb8de339f2744a840b7654495976888b014a031f6674e87c14e2f1df2340233d930d0f2770528b3212d5abd1b59b57500ac2c192a5fd0b0cd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x6c, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xffffff81, 0x4, 0x10000000, 0x9, 0xa8be}, 0x10}}]}, {0x6, 0x6, "8b66"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x13c, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc0000000, 0x3, 0x10000000, 0x5, 0x6}, 0x2, r2}}]}, {0xef, 0x6, "1193b08b79313320ff9fd6a8597d6002244062e11742656d231138278f86b3aac30596c6ac3c9c3f66897084bf2c3597ddba7810e19602d0279ab055821db5924d3f766250117f38f12661615f251606b0f919b50290175b514988a67eef9caf64bc94a980676f3cf48da5e4203574590093b787487377c01c81d24eb0e98f808d96a726161e979bab24f93ab7f7c574859270462d44f044be6d065996e0aff739dec19d071bc9f7590c4c7d14b5978bcbdd9ccc5bc1544427bcac30f93f5a4767406956bc789dda9390bfd7e75024d0a654bae05f1857a1fbebe8daea11fd11c2f1cde62ff6fc59a899e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x208, 0x1f, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x625162fb, 0x2, 0x5, 0xf, 0x5}, @broadcast, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1bb000, 0x0, 0x0, 0x657, 0xed50}, @rand_addr=0x64010102, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff5, 0x0, 0x3, 0x9, 0x1}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x40dd, 0x3, 0x202, 0x37f8}, @empty, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x7, 0x2, 0x6}, @private=0xa010101, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x7, 0x2, 0x1ff}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0xfffffff5, 0xffffffffffffffff, 0x596, 0x96}, @broadcast, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9b79, 0x8, 0x6, 0x401, 0x6de}, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x14}, 0xff000000}}]}, {0x9e, 0x6, "7f0769df5d3a4aec975323cb62cd49a012a8fdc21169bb841f9ebe64b5e5f5c6a1afa986e6667f66a37ca9bbec660936b4fb2aebc49fcdd148345036985b04d43a839bd13233e7e0ab07dba02793a724531adee35adcaf9b7dc1a08411fbeb625f85a17a278683be39e8bf23bd83ff90ce7a5378a2c0ab8375be3df9fa8e231eaa028ae56692e06df2955dc13d4011abe944edd1781931996261"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_gact={0xb0, 0x11, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x200, 0x5, 0x9, 0x9}}]}, {0x6b, 0x6, "17268d23d8eda857008fdafcea6239405ab4e1bf337fae63aa8f4a15d423d7c6cbfbe28ec715506d0194216aeb3dc7e2e2d3aad557b77899347e70989371d49a83c8f3abfcd2304b1734980948e03092317e9f2feabd541b21f032edc5081c192509ac018483d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x2b0c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002f00090027bd700009000000000000001000180005ac0f0009ac0f000dae0f00"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160039030000000000000000e000000100000000000000000000000000000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0xf8}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="781002000000025f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x1e3, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000484d8e40da0b290145d4010203010902d10101000000000904a2000b7730550009050b150000029908090509004000004105090507034000200506072501010301000725018106560909050f15000207080807250100ca030009050313000006180c07250182400100072501417a990909050a001000081c0007250181070200090501"], 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x7b, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r8 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x420000, 0x0) flistxattr(r8, &(0x7f0000000180)=""/72, 0x48) fcntl$setstatus(r7, 0x4, 0x2400) 2.463930752s ago: executing program 1 (id=4177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0xfff5}, 0x0) 2.185472772s ago: executing program 1 (id=4180): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) 2.03023133s ago: executing program 1 (id=4181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) set_thread_area(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r4, 0x0, 0x0) move_mount(r4, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, "3d1ea872b5634a8a3c016e8dc6fd233b2f98f4f13acabd035f68a1b2046f7a28", 0x5, 0xc983, 0xb, 0x7f}, 0x3c) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) (async) set_thread_area(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') (async) read$alg(r4, 0x0, 0x0) (async) move_mount(r4, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, "3d1ea872b5634a8a3c016e8dc6fd233b2f98f4f13acabd035f68a1b2046f7a28", 0x5, 0xc983, 0xb, 0x7f}, 0x3c) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 1.5930352s ago: executing program 1 (id=4185): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="0001010000400000", 0x8}], 0x1}, 0x48005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x96) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x188}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x803}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000f80)="98f340d7d411d8246d2376b46f752b2f4f8cfec8e533ce1e22c2944972cd3dd55ad124822ee54d829e4f5c15f4a7784d47687ad9163b0edb6ffb8112bac220281b4049a62f348d48efc5e90943f97f786e63e40f3b55318f369eb5f68438fe39530bb23e6e00f80236234f04c8dd72c8a03878f60c511e40d66c1257d1f15ce551024c67e95dc19e90408d9f197b19ed8fb730fabea10176d842314fa7e06030eee01dfb8612a72cc7015e195e20174c363da5fbeb99de86fb8b85f86f83cf7d928b8f70c8772ba9fddd163485d3e8c03bdf366f2aa2f9d6", 0xd8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040001) r4 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000d40)={0x52, 0x0, 'client1\x00', 0x0, "24db67818b4014fd", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f00000004c0), &(0x7f0000000500)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0xee00, r6, 0x0, 0xd4, 0x6}, 0x0, 0x0, 0x783, 0x3, 0x971, 0x5, 0x6, 0x8, 0x3, 0x0, r5, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@remote, @in=@broadcast, 0x4e24, 0x2, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x33, 0x0, r6}, {0x9, 0x4, 0x4, 0xc4, 0xffffffff, 0x8, 0x2, 0x7fffffffffffffff}, {0x8001, 0x3, 0x3}, 0x5, 0x6e6bbf, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x0, @in=@local, 0x3500, 0x4, 0x2, 0x2, 0x7, 0x1, 0x3}}, 0xe4) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000005c0)) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) 1.332121059s ago: executing program 3 (id=4186): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() socket$inet6(0xa, 0x3, 0x3c) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.159164477s ago: executing program 3 (id=4188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 978.938152ms ago: executing program 0 (id=4189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0xfffffffffffffc00}, {}, {0x0, 0x19}, 0x0, 0x3502, 0xa, 0x0, 0x0, 0x18}, [@offload={0xc, 0x1c, {0x0, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 907.888954ms ago: executing program 3 (id=4190): syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="00146b00000093cc867d9f02c63589e05460dfbf7b816389ef1bc51b7911720b618ecc2abc99be76aecad822a7f52f0225a6cc8aede18ac33f050f6b4ccd840100c1e78d113d85e65d4ad1974033510a627c81bcde561e04ea2a3a0706f3660d5b2d"], 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x80, 0xbbba, 0x0, 0x18, 0xffffffff, {}, {0xaa9d, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x80000, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x7f, 0x0, 0x0, 0x8, 0x5, 0x3, 0x3, 0x6, 0x2, 0x25, 0x6, 0x0, 0x8001, 0x1, 0x9, 0x40, 0x9, 0xfa, '\x00', 0x1, 0x80000000}) (async) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 828.908117ms ago: executing program 0 (id=4191): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) 741.354633ms ago: executing program 0 (id=4192): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000ef0600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) 624.144389ms ago: executing program 0 (id=4193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 601.014598ms ago: executing program 2 (id=4194): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2003, @loopback, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x12, 0x0, &(0x7f0000000280)) sendfile(r0, r1, 0x0, 0x2) 592.811842ms ago: executing program 1 (id=4195): socket$kcm(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) syz_usb_connect$uac1(0x2, 0xc2, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003090000406b1d01014000010203010902b00003010e10040904000000010100000a24010100050201020c24070510b5c6a1cfd29608090401000001020000090401010101020000072401090600000c240201fe02090404d875b1082402011004060c0905010910005209060725010008ff01090402000001020000090402010101020000072401010801000d24020104020501ceb739b26b0724012b8a05000724010900071008240201000208a209058209fc725215e49bb2a440ea9a52a8c93373"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x72e, @private0, 0x8}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x10008c, 0x100008, 0x100000, {r2}}, 0x20) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0xfc, 0x0, 0x2, 0x8, 0x0, 0x64, 0xf8, 0x0, 0x0, 0x0, 0x88, 0x1, 0xfd, 0x2}, 0xe) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002240)=""/4095, 0xfff}], 0x1}, 0xffffffff}], 0x1, 0x406, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000280), 0x8) splice(r1, 0x0, r3, 0x0, 0x406f413, 0x0) 428.119941ms ago: executing program 2 (id=4196): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa6, 0xce, 0xb0, 0x10, 0x424, 0xcf19, 0x22f1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xfd, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xd3, 0x0, 0x0, 0x6a, 0x94, 0x74, 0x0, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x2, "", "41ef74"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x8, 0x6}]}]}}]}}]}}, 0x0) 426.922445ms ago: executing program 0 (id=4197): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f00000005c0)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x2b1c, 0x2c, 0xd27, 0x70bd2a, 0x8008, {0x0, 0x0, 0x0, r1, {0xfff2, 0x7}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2aec, 0x2, [@TCA_CGROUP_EMATCHES={0x2368, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_LIST={0x2320, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x16a, 0x1, 0x843}, {0x401, 0xe9a, 0xf, 0x4, 0xb, 0x1, 0x3}}}, @TCF_EM_IPT={0x78, 0x2003, 0x0, 0x0, {{0x2, 0x9, 0xe}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x5d, 0x5, "ae630ff98fbc8ca756880781bf534ed64e00be73e19be3d6c4dfde688110710784576ce677ec483d902c7c2013ca01f56c082902f2ee2823e5be783465ee296717328076f8ca93406546c1a3d74cde9d01e8151f28026c1670"}]}}, @TCF_EM_CONTAINER={0xffc, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x9}, "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"}}, @TCF_EM_IPT={0x10d8, 0x1, 0x0, 0x0, {{0x10, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "03dd03969f94f3566cd137f17cedf061ab7ba9f79913d573129dd02621c9090621eaeb8eed5b0ad13ec5ee1ce71d0ccaa7a5c1691494ea035d56564c8edb7065c8864a5ee5c875178d56aa51af2609f0895604b8482b257d8e7180a6db01689384b68cc27ec3f3a0c6671123dc1c474782de47a898faf1cc2f10e6385f5b455ee7b33eb2a7ec2e9de5925197cd74be66d9e0c5929c0ed5bc646a7bfd69108416dd5472cf00ce9ad3f038cc1bc09b0548ec3e9a5b6e8e5950d9262ad3458a2b2c9588769fc0021f5524031d1a2d08abd772839b0d20ac6c8ae6384ce3616b9c16d51a34082ba83c326032071dd59b1ea1a57f439e293d1b1ddc9348d13638915a8aaca09eadce10e7d1686f6e9888d66f460c038464aa4158a04a3ae757abc24b83acc2b94c27c57ae5ea01477b6f3c815554cfe9273dafce8f0b5452a863d77c93a36744990f0904bc5b271770bc65b49bd770f25e5d26459dec1116c67faa5c539015690b270238086176cc752607a74c3b0f4ad5ede787c027b261917cbe0cb67ec06e92959105375db914547c3406e725e6fea94e899c22febf60ff88e87fcbf440a371bec150f2df4ac910ef96ee0ce8282d1b602d390264a9faeb757fb0f5854b6a2f96dd1f515efae70c35ffe0885eccff041a06a1c6b8cd73db211545ecc57629e829324f4ec9c79380bbfb5136acd95493047f2b615625bd91cccbd89d3ed3e70111242d9f88fc426ef09acd4be3f276de9d2ba10e95bce31bb5eaf8ea11facba6eb4897c2c12790a51585d1e8c078168d7dafc0e489eac51572a16f443a9eb8db8dba230dbf3790707a12bde7697ea38391747cdc4b61e203ed1b69919f6d0f8651b39217d5de8e04b6e155d8fc87ae7de19b15d5d98797967e2c299237cafda6e0be264caf43997e9e4766b277e8d4037c98ef5c8daa47efc4e2fd8d3183ccc71f6517f3cc506f87097871d6d0ad88cf963c4fc2738625ca79821aa499aaa7f10f00f4a01388861633bd018f3d2de46420630d2f379659425193e794c71174ec33b7eb34184f9ae79a87ef25b1571237bde597b9c9c631a304d1d8a6a97cda232ed870642e71e6589615b817379a41755a62fe54c95c42cd991d3055c183b278fdf34fa52bb0e9ecc68d5d7c851f1b7712762ed00ea489fb422b5bec1dc9a4bfc9af10f3eba6c060341447ee88d9c8f5f7ab97b755916dc902d59d6a87072b71937845e54cb9f96bda5c62769423d1b9c8a954dd51bc3539c70264029bb6d4d6425c8000d6210207d200827d6121f23a56ae4d31a001ecfc551bda0919bb81e40c81544a83a51a0455787dd4fd24e129ed64030405e317ef3166cc01ec3ab8b0d2ce44b0383ffc4bd121ce56b4e47f94d896c11b53741903d53f73804facc079f6269b6ae94cebd676587b0c7bc5bbc276d0daeaf4784f23cf1a53e36555c9d1f90ed8770492d72039f2dec0ced6973b5167dad50d295d5bd8470a3d62a1c9d8537ab35c4eb06877cd7aa58e22c187cc7e9fba07739f8c0b020c7922f2af0744aa62c4f797a22445f7936208c5715da93ff5116619a9388c2c0cb186c16fdad91a244a1fb398ff5e63cf20805dfee5c99c3586dba130d4af55d346737060c9bd025f6b1504e1624bbe99eb257bb243518603410aeb9c3675a94145bc1c1afd7ff47abc0d683172670f13024388bd3e1258895d9fac66a9081fbe0a1c410dab33dc807bd8e293e8cdd1863ec9899bb79a4be7a41e38d0d57b78fbb30621b18b6052ffe3715fecf3b84a3cf1ea6924af3c12e6832815303bafb873e5ac8f478dda278dc3a63b63ff599c40f02391ee25600d48d04cfd295c50a25497786b75c7a73c4508ed5d94409019dad7486b4606ea3c60a9ebf3a8f2ba0bb40e6da096aebb846ad3d2570d862693f1312b7a05e6c52a411b8dbec8452917cf390b84a0948b81af593fd8ff02cfa1e424e92003e5343c1879137cf666987c9324e2040f76e3bdebdab28c8b1c9b3cb34fcc938bd8dc3330307aba8edda4771a8508ef1f710d0196f72cb1abfc6a8af02fcd95e410f42a8c31129ed6fa743cac7e8a4bb42ed28a9e6faa59a6d1846481349f4013c773dd315dcd9518ccafd03589d97f5e72faf7cce87b3f3bd7a87bfa78152813ece10fa03083724ce948d324450ba6ea08bcbe663107ce303491283648e3d071707b3f2b91c88a525330bf6842dd5d499ff72e52f9098bfa752e7171ab4c5deb0aa03efd615c62779716cf8c5b26f42bbffd11d7cb9238de7f691286c18a325b59248b5e55c74ba7315640e6d5978043d6dfd302b8202095e97f1cf59008e11cdbe6f35b846769355bda17ac22868beadc38aeef74c8c4e46e3312212247a48bdbf58377f24d5118961ea7b6d6427b9ad0833ef728c71cdfd3d438d9224b794cc8b00212fd10d6e93728773b76f13d70be2a1974ace5aa9d355e435d2ddb88317dca07107911da2d552757abf5a5000ad0c9d3494662aff7638b48bb5b048bc3aff8fe38d6d31776b080e9c0b794302693e15ccbad99b5e4b3f85cd568cdc8e5fd61461c06dd6d7838534f335289f17ca54dfbbb03745b722024b7fe31cc7815e4eadfd37032d96175ed292578ccfde84b5d9f216fc149552fe152c177c44ba468d1e39500e0c3748e38ddf83351d1c03681b24e05902b4b00cd9731096686a5a3e428a34eb6497de68bd4b36efc7ea9c3172bfc49e2fba9c674b5eef48dcd91d5189858db6770b69e79e8218ec2de52476060574a4a5bd73e2a10d9e15148625ffac55a85e6906208eaa472e5a6eb0ed74a605b52d60fd8b9d80c9c2597f522a4fa42938828dc1136b1f1684031eaff143bb6e1c2059cf6c991dba7788830d8e603fa03c300f08c9cdba5cec34b23fdd0b08ff665877e13e13a71198e4c79401bbd6d8ddd4c70b059f0a5da60b381f7b787ffb5c65f833ffc9dd584d2939cb8ef827e5888998d2721f05a40d8b12aea10dbb7c74fb06db109f1e7a23aa1dfeac95afdd0a5e10d329d030597cd1dae54602738149cce10f705b66e25dc04c2423b76ac43168fe37e7cc036d90e67b0259dd23622acdab0bfab58fd7fffcbe7884901158d58ab5992bf95001015e9b98c8fe6ef64eb1445f020b100a9abc11e3777d2beb61e96f18c2d7f10e57061951f4132fd7e7aa67b79e124e0357ac7c2c7f4cba6e5c2bb0c6bb3d0842f22b082d15a53eab65b4c0c4a4449d314b0e5bdc6f498b2a92f131e33157047b2e9f323005c25fb22cae0dfc460d4b4c7193d97ecaed2c38c063b71b53c5976e80acbbc376b3432197388eaa50e9c4ed2b5e8e4ffc1bf9879c7a08dd9675448cb29d29d6d82c2cbc5bb3890f1b26aacb6446474d9e30e138d9a66261e31f3b29e376ac772cb2526ab695ac6c12bfad96e659502acb5a7433ff20a47484b55eac1afcd80678f3631b0b8710103a234be67a5877c95107ca6a754863c26acd57d764bfdb432e5e923844ea1008973115778d4608d215e727cef44ae88d328fdaa33fa7d8155b92920c3474ae1f15ac5b01a4cf70739036ad64c34c4236205b5d84f31f87086de20c7efc7bd65d2df68be79bcef4257e9f3abc61ecc03abc32c6b62d78e37042655effdf38aeb5c5d25492903315583fa218081085b42e8af05469a6e054c6f370f2e166316132b8e49f59c7fffed6131aec8ba414f99215600058e03a0e7f93a77a05a7f6397566a42fbc05459ab84707cc68ec6abc42ccc58396f016861448a72047815187a0859a30c40ebb0abe23038b304f7d90a1fb1d0d43922e78cba33b55d0a9f764944e621d9bc544c856fea0e8fba49459923f4fd759619cf728c70c743f558c23746179478b8172ae77d8de3b9c8665cd49e8c78a9249583b5ee49978718be54a58d8a96238637bdbfbdcb656d37532ac85db2909ebf81fd1ca50c3a8d8326e583cfba0335d81b1881ba87f4ae1f9a214f2467e078d462767cd13ed85796da63bc235dc4d61724f5c6afd6e50b0e93e41719db6d0bba8a985097b6f79ffb2784d4240d903ac06130cc413addf4f0d26f81c6fb1278174c02d048b41b6523074e99de6a2a14b573c066dc92ed21cf6e9d97adc7b2f4e5b4775a07a96b9e906fa6702500811f53ad985510174eff0bb487ceb761d08b170ba8e717176252278de27f19bc00a28a2207e64e79cb2f24ab2d4fb1982fec038ff1b90732b5d34af3da364c8ea0b3b9fa8da9559b8455dd5c7ee06939c933af23df9db3a3b38e23222c1dff9865e70eba982f6b958cd67a22059df1e37457d253b7254ff3fd1625a9542e6b9170f84446fe922c21b2e1e109630c30a5377980d6cf4b67a3aa79fdc19aaac235bf584c35f098db44bac89c456237e52107f7d094a64a7fd8f7a9525875d671de8c8858b192d254028c44d4bf4be6d9dae6df6bb9d2b6ab6202ccbcae3741612eba8c35078e59ba3c60e183ef0afa5d0bd58cec44abc58d3181eb145a5af9f4d311dbf8170afa552929eca6ecb28e1f2a471b8d58f9088c1f45646222c7b25c00566c0b16f90a19c5df1d94772703d619c28fa62a090021c61a26ae884283baf393f0405d3b752983f84499f6b70702a4c70fb4225cd234c7a0fd6bf6d7863a0c46091f5fcfc1cdec57b786fd2d4ccfd06c9e09f547536321f39776f06c498412bc31ab1fd9270f5e83b8606b4278226806071114b88a03f465a83aa440aa23c51df091abbe4dd84a5d73df599539363bdfe3eed0eadee173ccd286f1ebf0c17b458e2f8d546316e5452efc7c21d388027d4b0955cd37de8e8f0f6bba431ba0dd0fbffa843b8c3e9f102266ddfe5ba941a78eeeab8460979393f7bbe7ac2e5821e1ecb1e10b5a9b723d907ff97173d562dfcb669168a1b04dc924142ac0d79caf65087dbe253a4269143636d1a48eae6f786eb80de742bf342a0325e211056d002e77036791e6930ee7ea954b1ff04b6de879a4b8b7431e952289b33f66dd0884c41bbd4d776ce982c7acb1f3c58fe80a985d15c847e6d9303e7f44687c4608d072f7c110dc96cc2f501742a3401de2b3fec0c09dd8e15ac432cdab3aa18f06c21bc0029fbd0d2587494305b985a9e3edf8cd13714871f18bd980950b7794d19b22ed9d860055746e4a46f58c8edcd336d318e2e7b2a35714fc6bd751aa8d65f9fac19107e8fa5991707119cec674c0d8569095c9d0a230e9180de30187c091689af4c3de4460a4525b303c1e1e91506019b281572c8a33931b8fe8f4cfe35261eb377cf963bca33d919de45f119ab1828fd0c14f75d09c4535d0e46e1206bd69fbae764767a17e1f15adf32fdd6f11438d1abcaf2c1f1815f9fc44ef4514c35c48e090aeb20c6c4882c87565ce85074f9f5273b655048c2fe629ce78a5218f3e77a3730fd260abb94ed2f66b6c5260ca5f1921ca11fd5ce656fe9f8527fa1176a33f1dfc1202655308cbc36342a434ced2d0e35e71f1d5c684b439dd3fbfb629f6182de233165d48435f7ec35746643e3a2ce2e5d963766705c03762d613ee90677f37bc0fc101dacc5cd61ac9cdf56c000bd54a92ebeebe39aa155a78ea39dec8e83b5317a8ec8e5cf767793abdfc704b88c4aebd25d37125e221270ee00d95ee483fd5ba427079c1180c0ac858e5cfadf48d4a31414b324dfc58277ab277c1418a55fcdcb370ad679cade2c9bc4764f7ea59faa8ff351216d1949f5d3591f2303efcc70ac79255a578f5b6631a77a228af71f850635a356d96f3363d6a346c571c1199f1986da0661dfb7307549108ac30b15b"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x56, 0x5, "8e426280b3b1a40b44d1eb49be757267faef48f7d53f319887ddbc0b29404a28f8e98f1d5bcb5b739d7235a7fe6c28ca4e870ce074c80c469bc888c8fa096016d735fb3cbe7ba692c77f48637780b8c6ed50"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x38, 0x5, "c50ff203de0e0c591f5ee90fc40431941db71b6eb004e116e0add130f27912566ce49969b7972d52df913ffc75458ad2bba366cb"}]}}, @TCF_EM_IPT={0xa4, 0x3, 0x0, 0x0, {{0x50, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x6e, 0x5, "51f605d0eeedc43d196c866a8edda3714a8b0d79c4bd8db6237719fdcfb1aa82afa39276821de0a9fe11acd2c9b9054015db8ed339cfb0da7ff7aae1ab7a1a505222daaf489ac84b5d46725f578b5ac640ae4d20fc6641f2fa1bb3d573c5956ebef4344c6a2b76f157c6"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x38c, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="16ff26eee72c", @TCF_META_TYPE_VAR='\a\x00', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b577101d20"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xaa, 0x2, 0x2}, {0x800, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x10, 0x78, 0x2}, {0x7, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7}, {0x1, 0x0, 0x2}}}]}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x1e5, 0x4, 0xe}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="80b8630d1a162426a1", @TCF_META_TYPE_VAR="e4a89901c527c5a0ae"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff}, {0x5, 0x5, 0xdc}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0xc00, 0x0, 0x6}, "53dd3564e8bbca55b24b15ad42160206a2b8b455d763f690dd54d1b1eea3817041ae786d6ac3241c6bca80af5db21affb4ce1759cf1205edebfb65f525adb59d09212d3baf27b539a8495a4e33a8f20a51e361c5e870693c04cf2d7a5f3fbb36e9bd533df615cc31ab"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x725}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x1}, {0xe, 0x2, 0xd, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xff5c, 0x7, 0x8001}, {{0x3, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_EMATCHES={0x128, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xb3, 0x1, 0x1}, {0x3, 0x1c, 0x6b, 0x1, 0x0, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x6}, {0xfebf, 0x7, 0x800, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0xc, 0x0, 0xcbb}, "ebb316f2dc60f0c1771f76cb2c2819b0f37edd707c997df5cb54e591850c8a46d6a05e64238d45e07e4f9e5a307422558baee1cec7833e7b781614f4cab41c4ba732722d0cb3baff13bb96935f96102c6a8044e42d76dcb5f7efbff23ad188348b7ded77378acedc7b64bf619b6290af70936c72f2c52b6ad46acd0d24605313ccfdcb0e0bc52be4815a8ac766455dc41ae276d62911d7f740ecd7da9737f18ec7de9f1f8089919bbd681a28999431a9b887804880caf2a273179b164907dfe338c9d68768"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffb, 0x3, 0xe}, {0x0, 0x40e20, 0x1, 0x2}}}]}]}, @TCA_CGROUP_ACT={0x658, 0x1, [@m_csum={0x1f4, 0x14, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x34, 0xffffffffffffffff, 0x0, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x6, 0x10000000, 0xd, 0x6}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x2, 0x88, 0xfffffffb}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x6, 0x8, 0x10001}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x0, 0x4}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2f2d, 0x4, 0xd, 0x25e2}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6d53, 0x4, 0x2, 0xffffffff}, 0x41f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0xffffffffffffffff, 0x738, 0x1}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xe5e7, 0xffffffffffffffff, 0x3, 0x5900}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4c, 0x3, 0x3, 0x4}, 0x5e}}]}, {0xae, 0x6, "7a015bb99cfc93b5c3b587f870a1967a8cf4711336275fe1b7c36bc4a4d4223d9b9555e2f274c11b2eb3d5ff20806d93c0e4a3ff78e5d08254dc505d3c9086d59062d3dbadfb5d852937272f9c655e8dd4d118d24467728684634b05ed55f787e250baa41ca16530b92550a77a84eb2a3cdcb8de339f2744a840b7654495976888b014a031f6674e87c14e2f1df2340233d930d0f2770528b3212d5abd1b59b57500ac2c192a5fd0b0cd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x6c, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xffffff81, 0x4, 0x10000000, 0x9, 0xa8be}, 0x10}}]}, {0x6, 0x6, "8b66"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x13c, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc0000000, 0x3, 0x10000000, 0x5, 0x6}, 0x2, r1}}]}, {0xef, 0x6, "1193b08b79313320ff9fd6a8597d6002244062e11742656d231138278f86b3aac30596c6ac3c9c3f66897084bf2c3597ddba7810e19602d0279ab055821db5924d3f766250117f38f12661615f251606b0f919b50290175b514988a67eef9caf64bc94a980676f3cf48da5e4203574590093b787487377c01c81d24eb0e98f808d96a726161e979bab24f93ab7f7c574859270462d44f044be6d065996e0aff739dec19d071bc9f7590c4c7d14b5978bcbdd9ccc5bc1544427bcac30f93f5a4767406956bc789dda9390bfd7e75024d0a654bae05f1857a1fbebe8daea11fd11c2f1cde62ff6fc59a899e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x208, 0x1f, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x625162fb, 0x2, 0x5, 0xf, 0x5}, @broadcast, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1bb000, 0x0, 0x0, 0x657, 0xed50}, @rand_addr=0x64010102, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff5, 0x0, 0x3, 0x9, 0x1}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x40dd, 0x3, 0x202, 0x37f8}, @empty, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x7, 0x2, 0x6}, @private=0xa010101, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x7, 0x2, 0x1ff}, @multicast1, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0xfffffff5, 0xffffffffffffffff, 0x596, 0x9a}, @broadcast, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9b79, 0x8, 0x6, 0x401, 0x6de}, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x14}, 0xff000000}}]}, {0x9e, 0x6, "7f0769df5d3a4aec975323cb62cd49a012a8fdc21169bb841f9ebe64b5e5f5c6a1afa986e6667f66a37ca9bbec660936b4fb2aebc49fcdd148345036985b04d43a839bd13233e7e0ab07dba02793a724531adee35adcaf9b7dc1a08411fbeb625f85a17a278683be39e8bf23bd83ff90ce7a5378a2c0ab8375be3df9fa8e231eaa028ae56692e06df2955dc13d4011abe944edd1781931996261"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_gact={0xb0, 0x11, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x200, 0x5, 0x9, 0x9}}]}, {0x6b, 0x6, "17268d23d8eda857008fdafcea6239405ab4e1bf337fae63aa8f4a15d423d7c6cbfbe28ec715506d0194216aeb3dc7e2e2d3aad557b77899347e70989371d49a83c8f3abfcd2304b1734980948e03092317e9f2feabd541b21f032edc5081c192509ac018483d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x2b1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="05ac0f0009ac0f000dac0f00"}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) getpeername$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000600)=0x10) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x80000004, 0x800}) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x7b, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x420000, 0x0) flistxattr(r5, &(0x7f0000000180)=""/72, 0x48) fcntl$setstatus(r4, 0x4, 0x2400) 418.92928ms ago: executing program 5 (id=4198): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRES32=r5, @ANYRESHEX=r5, @ANYRESHEX=r4, @ANYBLOB="1d2a01ef36ebfd636e9b12be35a0951d3e476ecc847bd9d5fb1c9808cea1ff0e80e752e1f35c11bed6a715b38f2762c178a21b707163d0a3ee3eb08005cad444df229a1f3c94bb458feb93cc900124693447d52976a36323ed03c81a1d3be6b0bbea074d3c9b09ab677566c46709443ad06fa4e9ce77102bb28519133021faa115f8d85119e8b3eca1ce63b62ea354f4740eb14a1e5e181c98c7d19b875ce9020b338446887e60ad374e1c1995380f82cedfa3eb01f1d8fd88bb859f2891c7e63fa7000a14ccee72983e0327e0bdb9008c808e9d6d18b8cf0281eb52cad818259f89165a6a794c2b4790b258f116b362b8667973de5a"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x9}, 0x10}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 338.624344ms ago: executing program 0 (id=4199): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) (async) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) (rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12) (async, rerun: 64) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendmmsg$inet(r7, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) (async) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) 0s ago: executing program 3 (id=4200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 905.001490][T17923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.022157][T17405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.030881][T17923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.056029][T17405] usb 1-1: Product: syz [ 905.065567][T17410] usb 4-1: config 0 descriptor?? [ 905.084234][T17405] usb 1-1: Manufacturer: syz [ 905.094008][T17391] usb 2-1: USB disconnect, device number 114 [ 905.141709][T17405] usb 1-1: SerialNumber: syz [ 905.185317][T17405] usb 1-1: config 0 descriptor?? [ 905.485377][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 905.485397][ T30] audit: type=1400 audit(1756486584.461:985): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17926 comm="syz.0.3559" [ 905.701539][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3560'. [ 906.346749][T17933] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3561'. [ 906.448078][T17411] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 906.690334][T17411] usb 2-1: device descriptor read/64, error -71 [ 906.823815][T17929] team0 (unregistering): Port device team_slave_0 removed [ 906.847650][T17929] team0 (unregistering): Port device team_slave_1 removed [ 907.008821][T17411] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 907.045340][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3564'. [ 907.070687][T17410] usbhid 4-1:0.0: can't add hid device: -71 [ 907.081028][T17410] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 907.095493][T17410] usb 4-1: USB disconnect, device number 16 [ 907.168007][T17411] usb 2-1: device descriptor read/64, error -71 [ 907.299544][T17411] usb usb2-port1: attempt power cycle [ 907.546033][T17951] hub 9-0:1.0: USB hub found [ 907.553795][T17951] hub 9-0:1.0: 1 port detected [ 907.661204][T17411] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 907.688684][T17411] usb 2-1: device descriptor read/8, error -71 [ 907.928099][T17410] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 907.935793][T17411] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 908.038942][T17390] usb 1-1: USB disconnect, device number 18 [ 908.088661][T17411] usb 2-1: device descriptor read/8, error -71 [ 908.157133][T17410] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 908.206090][T17410] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 908.225109][T17411] usb usb2-port1: unable to enumerate USB device [ 908.247977][T14876] Bluetooth: hci4: command 0x0406 tx timeout [ 908.271345][T17410] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 908.389294][T17390] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 908.474990][T17410] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 908.518555][T17391] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 908.557130][T17410] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 908.571017][T17390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.586720][T17390] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 908.599197][T17410] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 908.599679][T17390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.617285][T17410] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 908.629307][T17390] usb 1-1: config 0 descriptor?? [ 908.643797][T17410] usb 6-1: Product: syz [ 908.648887][T17410] usb 6-1: Manufacturer: syz [ 908.678892][T17391] usb 3-1: Using ep0 maxpacket: 32 [ 908.681532][T17410] cdc_wdm 6-1:1.0: skipping garbage [ 908.690730][T17391] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.704569][T17391] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 908.715131][T17391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.724942][T17391] usb 3-1: Product: syz [ 908.731043][T17391] usb 3-1: Manufacturer: syz [ 908.736317][T17391] usb 3-1: SerialNumber: syz [ 908.736359][T17410] cdc_wdm 6-1:1.0: skipping garbage [ 908.751855][T17410] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 908.757341][T17391] usb 3-1: config 0 descriptor?? [ 908.764302][T17410] cdc_wdm 6-1:1.0: Unknown control protocol [ 908.773404][T17391] cdc_ether 3-1:0.0: skipping garbage [ 908.779820][T16567] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 908.804780][T17391] usb 3-1: bad CDC descriptors [ 908.820404][T17391] usb 3-1: unsupported MDLM descriptors [ 909.008542][T16567] usb 4-1: Using ep0 maxpacket: 32 [ 909.028991][T16567] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 909.038989][T16567] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.046315][T17967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.066304][T17964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.076817][T17964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.085647][T16567] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 909.096460][T17967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.114674][T17390] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0 [ 909.123822][T17390] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0 [ 909.125000][T17410] usb 3-1: USB disconnect, device number 119 [ 909.153556][T17390] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0 [ 909.162678][T17390] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0 [ 909.194242][T16567] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 909.224581][T17390] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0 [ 909.233837][T16567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.242965][T17390] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0 [ 909.251185][T16567] usb 4-1: Product: syz [ 909.271689][T16567] usb 4-1: Manufacturer: syz [ 909.276349][T16567] usb 4-1: SerialNumber: syz [ 909.293818][T17390] konepure 0003:1E7D:2DBE.0019: unknown main item tag 0x0 [ 909.362639][T16567] usb 4-1: config 0 descriptor?? [ 909.374434][T17390] konepure 0003:1E7D:2DBE.0019: hidraw0: USB HID v0.02 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 909.452589][T17390] usb 1-1: USB disconnect, device number 19 [ 909.567892][T17408] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 909.627285][T17976] fido_id[17976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 909.748664][T17408] usb 2-1: Using ep0 maxpacket: 32 [ 909.761971][T17408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 909.778533][T17408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 909.821580][T17408] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 909.844654][T17408] usb 2-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 909.863410][T17408] usb 2-1: Product: syz [ 909.867712][T17408] usb 2-1: Manufacturer: syz [ 909.875492][T17408] usb 2-1: SerialNumber: syz [ 909.894907][T17408] usb 2-1: config 0 descriptor?? [ 909.916883][T17408] usb 2-1: no audio or video endpoints found [ 910.326919][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3575'. [ 910.742780][T16567] usb 4-1: USB disconnect, device number 17 [ 911.851211][T16567] usb 6-1: USB disconnect, device number 31 [ 911.906629][T18000] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 911.969755][T17390] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 912.138432][T17390] usb 4-1: Using ep0 maxpacket: 8 [ 912.158689][T17390] usb 4-1: config 162 has an invalid interface number: 97 but max is 0 [ 912.170546][T17390] usb 4-1: config 162 has no interface number 0 [ 912.239234][T17390] usb 4-1: config 162 interface 97 has no altsetting 0 [ 912.315524][T17390] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 912.331138][T17390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.346625][T17390] usb 4-1: Product: syz [ 912.355180][T17390] usb 4-1: Manufacturer: syz [ 912.373812][T17390] usb 4-1: SerialNumber: syz [ 912.423388][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 912.474276][T18011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3584'. [ 912.625052][T17999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.676037][T17999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.940051][T17410] usb 2-1: USB disconnect, device number 119 [ 913.730718][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 913.977309][T17390] metro_usb 4-1:162.97: Metrologic USB to Serial converter detected [ 914.023819][T17390] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 914.091936][T17390] usb 4-1: USB disconnect, device number 18 [ 914.139523][T17390] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 914.186698][T17390] metro_usb 4-1:162.97: device disconnected [ 916.673557][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 916.721165][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 917.665362][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3624'. [ 917.766332][T18115] netlink: 'syz.5.3624': attribute type 10 has an invalid length. [ 917.797026][T18115] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 917.831684][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'. [ 918.562786][T18142] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3633'. [ 918.593156][T18142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3633'. [ 918.760437][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3627'. [ 919.003449][T18159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.013213][T18159] batadv_slave_0: entered promiscuous mode [ 919.745997][T18175] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 919.758449][T18174] IPVS: stopping master sync thread 18175 ... [ 921.258975][ T30] audit: type=1326 audit(1756486600.251:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.289552][T16567] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 921.340514][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3659'. [ 921.350584][ T30] audit: type=1326 audit(1756486600.251:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.435265][ T30] audit: type=1326 audit(1756486600.291:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.468917][T18214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3660'. [ 921.527606][T16567] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 921.538856][T16567] usb 3-1: can't read configurations, error -71 [ 921.547694][ T30] audit: type=1326 audit(1756486600.291:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.595495][ T30] audit: type=1326 audit(1756486600.291:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.654957][ T30] audit: type=1326 audit(1756486600.291:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.723449][ T30] audit: type=1326 audit(1756486600.291:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.773718][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3665'. [ 921.777064][ T30] audit: type=1326 audit(1756486600.291:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.853494][T18223] netlink: 'syz.5.3665': attribute type 10 has an invalid length. [ 921.873672][ T30] audit: type=1326 audit(1756486600.301:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 921.903005][ T30] audit: type=1326 audit(1756486600.301:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18208 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 922.112939][T18233] binder: 18230:18233 unknown command 0 [ 922.118919][T18233] binder: 18230:18233 ioctl c0306201 80000080 returned -22 [ 922.740745][T18261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3681'. [ 922.753530][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3681'. [ 922.798061][T17410] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 922.973701][T17410] usb 3-1: config index 0 descriptor too short (expected 12336, got 18) [ 922.982684][T17410] usb 3-1: config 32 has too many interfaces: 48, using maximum allowed: 32 [ 922.997604][T17410] usb 3-1: config 32 has an invalid descriptor of length 100, skipping remainder of the config [ 923.036443][T17410] usb 3-1: config 32 has 0 interfaces, different from the descriptor's value: 48 [ 923.059743][T17410] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 923.069770][T17410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.511661][T17410] usb 3-1: string descriptor 0 read error: -71 [ 923.519842][T17410] usb 3-1: USB disconnect, device number 122 [ 925.337195][T18310] tipc: Started in network mode [ 925.366735][T18310] tipc: Node identity 4, cluster identity 4711 [ 925.405799][T18310] tipc: Node number set to 4 [ 928.512103][T18367] tipc: Started in network mode [ 928.539216][T18367] tipc: Node identity 4, cluster identity 4711 [ 928.578926][T18367] tipc: Node number set to 4 [ 929.024120][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3717'. [ 929.798825][ T5934] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 929.962087][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.990549][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.023764][ T5934] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 930.051716][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.086535][ T5934] usb 2-1: config 0 descriptor?? [ 930.333763][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 930.352159][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 930.383801][ T5934] usb 2-1: USB disconnect, device number 120 [ 930.614154][T18399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3730'. [ 932.005542][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.015015][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.398862][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3734'. [ 933.928959][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 934.104281][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3735'. [ 934.123702][T18448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3745'. [ 934.418986][ T5934] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 934.509221][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'. [ 934.523137][T18422] wlan1: mtu less than device minimum [ 934.618868][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 934.649134][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.662531][ T5934] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 934.672755][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.692751][ T5934] usb 1-1: Product: syz [ 934.700855][ T5934] usb 1-1: Manufacturer: syz [ 934.705644][ T5934] usb 1-1: SerialNumber: syz [ 934.716913][ T5934] usb 1-1: config 0 descriptor?? [ 934.724974][ T5934] cdc_ether 1-1:0.0: skipping garbage [ 934.735291][ T5934] usb 1-1: bad CDC descriptors [ 934.745880][ T5934] usb 1-1: unsupported MDLM descriptors [ 934.884423][T18463] tipc: Started in network mode [ 934.911051][T18463] tipc: Node identity 4, cluster identity 4711 [ 934.923894][T18463] tipc: Node number set to 4 [ 934.928722][T16567] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 934.990757][T18446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.002591][T18446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.032774][ T5934] usb 1-1: USB disconnect, device number 20 [ 935.079297][T16567] usb 4-1: Using ep0 maxpacket: 8 [ 935.113432][T16567] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 935.125239][T16567] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 935.142840][T16567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.152193][T16567] usb 4-1: Product: syz [ 935.165088][T16567] usb 4-1: Manufacturer: syz [ 935.175130][T16567] usb 4-1: SerialNumber: syz [ 935.206282][T16567] usb 4-1: config 0 descriptor?? [ 935.263221][T16567] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 935.285250][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 935.285270][ T30] audit: type=1326 audit(1756486614.281:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.332527][ T30] audit: type=1326 audit(1756486614.281:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.354938][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.383641][ T30] audit: type=1326 audit(1756486614.281:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.405886][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.474667][ T30] audit: type=1326 audit(1756486614.281:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.503230][ T30] audit: type=1326 audit(1756486614.281:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.532633][ T30] audit: type=1326 audit(1756486614.281:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.554835][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.572219][ T30] audit: type=1326 audit(1756486614.281:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.645632][ T30] audit: type=1326 audit(1756486614.281:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.785092][ T30] audit: type=1326 audit(1756486614.281:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 935.943716][ T30] audit: type=1326 audit(1756486614.281:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18418 comm="syz.5.3735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7fc00000 [ 936.327120][T18489] fuse: Unknown parameter 'g' [ 936.327165][T18487] fuse: Unknown parameter 'g' [ 936.552013][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3760'. [ 937.134169][T17410] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 937.176333][T18513] fuse: Unknown parameter '00000000000000000000006k;•ý}Øêú †¾á}yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 953.485092][T18841] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 953.508825][T18841] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 953.520125][T18841] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 953.532031][T18841] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 953.590498][T18841] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 953.590514][T18841] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 953.613543][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 953.643068][T18841] [U] 22½“Æ©Ðû©x?0;3u± [ 953.643097][T18841] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 953.643119][T18841] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 953.643133][T18841] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 953.643145][T18841] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 953.643159][T18841] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 953.643170][T18841] [U] ¹ ec [ 953.643182][T18841] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 953.650645][ T5934] uclogic 0003:28BD:0074.001B: interface is invalid, ignoring [ 953.751152][ T5919] usb 1-1: config 0 has no interface number 0 [ 953.751209][ T5919] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.751235][ T5919] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.751278][ T5919] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 953.751301][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.764613][ T5919] usb 1-1: config 0 descriptor?? [ 953.971197][T18840] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 954.037708][ T5934] usb 4-1: USB disconnect, device number 25 [ 954.466469][ T5919] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.001C/input/input38 [ 954.603301][ T5919] uclogic 0003:28BD:0094.001C: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 954.759266][T18836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.841851][T18836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.855786][T17408] usb 2-1: USB disconnect, device number 122 [ 954.928883][ T5934] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 954.942138][ T5919] usb 1-1: USB disconnect, device number 23 [ 954.956522][T18852] fido_id[18852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 955.118956][ T5934] usb 4-1: device descriptor read/64, error -71 [ 955.358311][ T5934] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 955.488466][ T5934] usb 4-1: device descriptor read/64, error -71 [ 955.599430][ T5934] usb usb4-port1: attempt power cycle [ 955.707893][ T5919] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 955.842477][ T5919] usb 2-1: device descriptor read/64, error -71 [ 955.958748][ T5934] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 955.979140][ T5934] usb 4-1: device descriptor read/8, error -71 [ 956.228402][ T5934] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 956.252514][ T5919] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 956.269854][ T5934] usb 4-1: device descriptor read/8, error -71 [ 956.370639][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'. [ 956.398433][T17408] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 956.403816][ T5934] usb usb4-port1: unable to enumerate USB device [ 956.423919][ T5919] usb 2-1: device descriptor read/64, error -71 [ 956.547082][ T5919] usb usb2-port1: attempt power cycle [ 956.567988][T17408] usb 1-1: Using ep0 maxpacket: 32 [ 956.579278][T17408] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.609794][T17408] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 956.635792][T17408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.655623][T17408] usb 1-1: Product: syz [ 956.667820][T17408] usb 1-1: Manufacturer: syz [ 956.678116][T17408] usb 1-1: SerialNumber: syz [ 956.692517][T17408] usb 1-1: config 0 descriptor?? [ 956.711051][T17408] cdc_ether 1-1:0.0: skipping garbage [ 956.717033][T17408] usb 1-1: bad CDC descriptors [ 956.727090][T17408] usb 1-1: unsupported MDLM descriptors [ 956.844129][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3904'. [ 956.918480][ T5919] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 956.959134][ T5919] usb 2-1: device descriptor read/8, error -71 [ 956.984560][T18870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.998591][T18870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.019410][T17408] usb 1-1: USB disconnect, device number 24 [ 957.198185][ T5919] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 957.229016][ T5919] usb 2-1: device descriptor read/8, error -71 [ 957.338207][ T5919] usb usb2-port1: unable to enumerate USB device [ 957.731414][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3913'. [ 957.814430][T18920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3914'. [ 957.850388][ T5934] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 958.009124][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 958.023778][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 958.032382][ T5934] usb 3-1: can't read configurations, error -61 [ 958.169150][ T5934] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 958.189962][T17408] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 958.338602][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 958.353367][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 958.362394][ T5934] usb 3-1: can't read configurations, error -61 [ 958.379731][ T5934] usb usb3-port1: attempt power cycle [ 958.388047][T17408] usb 1-1: device descriptor read/64, error -71 [ 958.652324][T17408] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 958.732709][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 958.767345][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 958.781740][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 958.792575][ T5934] usb 3-1: can't read configurations, error -61 [ 958.797883][T17408] usb 1-1: device descriptor read/64, error -71 [ 958.944308][ T5934] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 958.952174][T17408] usb usb1-port1: attempt power cycle [ 959.129301][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 959.191482][ T5934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 959.199846][ T5934] usb 3-1: can't read configurations, error -61 [ 959.206443][ T5934] usb usb3-port1: unable to enumerate USB device [ 959.308285][T17408] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 959.403243][T17408] usb 1-1: device descriptor read/8, error -71 [ 959.599507][ T5934] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 959.647841][T17408] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 959.670103][T17408] usb 1-1: device descriptor read/8, error -71 [ 959.678803][T17391] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 959.776205][ T5934] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 959.788642][T17408] usb usb1-port1: unable to enumerate USB device [ 959.795154][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.805290][ T5934] usb 4-1: Product: syz [ 959.811578][ T5934] usb 4-1: Manufacturer: syz [ 959.816556][ T5934] usb 4-1: SerialNumber: syz [ 959.838238][T17391] usb 2-1: Using ep0 maxpacket: 32 [ 959.858893][ T5934] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 959.872781][T17391] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.902483][T17391] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 959.913048][ T5871] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 959.939536][T17391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.951673][T17391] usb 2-1: Product: syz [ 959.959199][T17391] usb 2-1: Manufacturer: syz [ 959.965311][T17391] usb 2-1: SerialNumber: syz [ 959.981564][T17391] usb 2-1: config 0 descriptor?? [ 960.013501][T17391] cdc_ether 2-1:0.0: skipping garbage [ 960.049589][T17391] usb 2-1: bad CDC descriptors [ 960.056518][T17391] usb 2-1: unsupported MDLM descriptors [ 960.243303][T18948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.254141][T18948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.265591][T17411] usb 2-1: USB disconnect, device number 127 [ 960.338366][T17408] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 960.363844][T17391] usb 4-1: USB disconnect, device number 30 [ 960.509142][T17408] usb 6-1: Using ep0 maxpacket: 32 [ 960.516771][T17408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 960.527618][T17408] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 960.542433][T17408] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 960.544900][T18957] program syz.2.3930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 960.553180][T17408] usb 6-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 960.572805][T17408] usb 6-1: Product: syz [ 960.577005][T17408] usb 6-1: Manufacturer: syz [ 960.582761][T17408] usb 6-1: SerialNumber: syz [ 960.591019][T17408] usb 6-1: config 0 descriptor?? [ 960.608857][T17408] usb 6-1: no audio or video endpoints found [ 960.830983][T16567] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 960.969154][ T5871] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 961.000499][ T5871] ath9k_htc: Failed to initialize the device [ 961.023641][T16567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.049838][T17391] usb 4-1: ath9k_htc: USB layer deinitialized [ 961.068866][T16567] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.108767][T16567] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 961.146979][T16567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.216747][T16567] usb 3-1: config 0 descriptor?? [ 961.262717][T16567] qmi_wwan 3-1:0.0: bogus CDC Union: master=8, slave=0 [ 961.301756][T16567] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 961.315280][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3936'. [ 961.742113][T18972] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 961.841628][T18982] fuse: Unknown parameter '0x0000000000000003' [ 962.079178][T17408] usb 3-1: USB disconnect, device number 5 [ 963.038878][T16567] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 963.198763][T16567] usb 1-1: Using ep0 maxpacket: 32 [ 963.229910][T16567] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.257011][T16567] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 963.271936][T16567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.283230][T16567] usb 1-1: Product: syz [ 963.293924][T16567] usb 1-1: Manufacturer: syz [ 963.308940][T16567] usb 1-1: SerialNumber: syz [ 963.345394][T16567] usb 1-1: config 0 descriptor?? [ 963.366022][T16567] cdc_ether 1-1:0.0: skipping garbage [ 963.390501][T16567] usb 1-1: bad CDC descriptors [ 963.406120][T16567] usb 1-1: unsupported MDLM descriptors [ 963.540930][T16567] usb 6-1: USB disconnect, device number 41 [ 963.752509][T18996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.846838][T18996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.901130][ T5919] usb 1-1: USB disconnect, device number 29 [ 964.123692][T19016] fuse: Unknown parameter '5øÅ~û¼|§ÙÛ [ 964.123692][T19016] ·½íRÆØ ñÜ´ƒæÜ]òë´Í­ºÂpÚ–3ÉYÑ7ƒ”Óeä#Ë7eÀ\Ž€œÌ ßk1DÛ;JèMžÅÈÐý{þõQ*Œ%Ø#5æCY·{JÀ©nQ»“y‹^àߣÕýßïuüòLNx¬f¸Eª®I? ' [ 964.192819][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3952'. [ 965.046329][T16567] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 965.348583][T16567] usb 6-1: Using ep0 maxpacket: 8 [ 965.361045][T16567] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 965.397181][T16567] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 965.426594][T16567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.538640][T16567] usb 6-1: Product: syz [ 965.556874][T16567] usb 6-1: Manufacturer: syz [ 965.689584][ T5871] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 965.820723][T16567] usb 6-1: SerialNumber: syz [ 965.883325][T16567] usb 6-1: config 0 descriptor?? [ 965.906138][T16567] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 965.982041][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 965.992651][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 966.027235][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 966.055989][ T5871] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 966.071135][ T5871] usb 4-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 966.090184][ T5871] usb 4-1: Product: syz [ 966.098680][ T5871] usb 4-1: Manufacturer: syz [ 966.109115][ T5871] usb 4-1: SerialNumber: syz [ 966.131388][ T5871] usb 4-1: config 0 descriptor?? [ 966.195601][ T5871] usb 4-1: no audio or video endpoints found [ 966.952521][T19054] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 967.424153][ T5919] usb 4-1: USB disconnect, device number 31 [ 967.514684][T19070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3966'. [ 967.569481][T19072] netlink: 'syz.0.3965': attribute type 10 has an invalid length. [ 967.691671][T19072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 967.765642][T19069] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3965'. [ 967.792669][T19069] bond_slave_0: entered promiscuous mode [ 967.798770][T19069] bond_slave_1: entered promiscuous mode [ 967.805837][T19069] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 967.820149][T19069] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 967.895227][T19077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3968'. [ 967.915366][T16567] gspca_zc3xx: reg_r err -32 [ 968.406721][T19085] fuse: Unknown parameter '5øÅ~û¼|§ÙÛ [ 968.406721][T19085] ·½íRÆØ ñÜ´ƒæÜ]òë´Í­ºÂpÚ–3ÉYÑ7ƒ”Óeä#Ë7eÀ\Ž€œÌ ßk1DÛ;JèMžÅÈÐý{þõQ*Œ%Ø#5æCY·{JÀ©nQ»“y‹^àߣÕýßïuüòLNx¬f¸Eª®I? ' [ 968.508367][T16567] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 968.514791][T16567] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 969.284112][T17411] usb 6-1: USB disconnect, device number 42 [ 970.217621][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3979'. [ 970.438549][T16567] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 970.591479][T16567] usb 3-1: Using ep0 maxpacket: 32 [ 970.602463][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 970.645758][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 970.684436][T16567] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 970.702819][T16567] usb 3-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 970.747257][T16567] usb 3-1: Product: syz [ 970.756645][T16567] usb 3-1: Manufacturer: syz [ 970.777493][T16567] usb 3-1: SerialNumber: syz [ 970.799987][T16567] usb 3-1: config 0 descriptor?? [ 970.816309][T16567] usb 3-1: no audio or video endpoints found [ 970.918079][T17411] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 970.929015][T19135] loop6: detected capacity change from 0 to 7 [ 970.936123][T19135] Dev loop6: unable to read RDB block 7 [ 970.943104][T19135] loop6: unable to read partition table [ 970.957274][T19135] loop6: partition table beyond EOD, truncated [ 971.015330][T19135] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 971.134223][T17411] usb 2-1: Using ep0 maxpacket: 8 [ 971.178628][T17411] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 971.201035][T17411] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 971.220516][T17411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.236729][T17411] usb 2-1: Product: syz [ 971.273593][T17411] usb 2-1: Manufacturer: syz [ 971.307915][T17411] usb 2-1: SerialNumber: syz [ 971.328731][T17411] usb 2-1: config 0 descriptor?? [ 971.418077][T17411] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 971.670945][T19145] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 971.695956][T19151] fuse: Unknown parameter '5øÅ~û¼|§ÙÛ [ 971.695956][T19151] ·½íRÆØ ñÜ´ƒæÜ]òë´Í­ºÂpÚ–3ÉYÑ7ƒ”Óeä#Ë7eÀ\Ž€œÌ ßk1DÛ;JèMžÅÈÐý{þõQ*Œ%Ø#5æCY·{JÀ©nQ»“y‹^àߣÕýßïuüòLNx¬f¸Eª®I? ' [ 972.063870][T19153] pim6reg: entered allmulticast mode [ 972.348774][T16567] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 972.512442][T16567] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 972.521843][T16567] usb 4-1: config 0 has no interface number 0 [ 972.536789][T16567] usb 4-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 972.553041][T16567] usb 4-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 972.582442][T16567] usb 4-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 972.604178][T16567] usb 4-1: config 0 interface 87 has no altsetting 0 [ 972.620978][T16567] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 972.632720][T16567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.642864][T16567] usb 4-1: Product: syz [ 972.647228][T16567] usb 4-1: Manufacturer: syz [ 972.653488][T16567] usb 4-1: SerialNumber: syz [ 972.669611][T16567] usb 4-1: config 0 descriptor?? [ 972.694721][T16567] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 972.895421][T19153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3994'. [ 972.911736][ T12] usb 4-1: Failed to submit usb control message: -71 [ 972.920922][T16567] usb 4-1: USB disconnect, device number 32 [ 972.933757][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 972.961689][ T12] usb 4-1: unable to get target info from device [ 972.974695][ T12] usb 4-1: could not get target info (-71) [ 972.987536][ T12] usb 4-1: could not probe fw (-71) [ 973.271267][ T5871] usb 3-1: USB disconnect, device number 6 [ 973.403283][T17411] gspca_zc3xx: reg_r err -32 [ 973.968329][ T5871] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 973.998175][T17411] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 974.004738][T17411] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 974.151485][T19189] netlink: 'syz.0.4004': attribute type 2 has an invalid length. [ 974.154230][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 974.181215][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.195834][ T5871] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 974.207253][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.233425][ T5871] usb 3-1: Product: syz [ 974.239532][ T5871] usb 3-1: Manufacturer: syz [ 974.244472][ T5871] usb 3-1: SerialNumber: syz [ 974.282565][ T5871] usb 3-1: config 0 descriptor?? [ 974.420350][ T5871] cdc_ether 3-1:0.0: skipping garbage [ 974.471929][ T5871] usb 3-1: bad CDC descriptors [ 974.473862][T19193] delete_channel: no stack [ 974.483942][ T5871] usb 3-1: unsupported MDLM descriptors [ 974.494900][T19191] delete_channel: no stack [ 974.559818][T17411] usb 2-1: USB disconnect, device number 2 [ 974.781967][T19175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.819338][T19175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.854892][T17411] usb 3-1: USB disconnect, device number 7 [ 975.105497][T19214] netlink: 'syz.1.4013': attribute type 10 has an invalid length. [ 975.125091][T19214] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.136144][T19214] bond0: (slave team0): Enslaving as an active interface with an up link [ 975.200990][ T5919] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 975.347642][T19213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.423640][T19214] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4013'. [ 975.468328][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 975.482236][T19213] bond_slave_0: entered promiscuous mode [ 975.488400][T19213] bond_slave_1: entered promiscuous mode [ 975.494369][T19213] team_slave_0: entered promiscuous mode [ 975.500481][T19213] team_slave_1: entered promiscuous mode [ 975.518758][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 975.530324][T19213] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 975.545227][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 975.576087][ T5919] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 975.585400][ T5919] usb 1-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 975.596676][T19213] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 975.616904][ T5919] usb 1-1: Product: syz [ 975.627064][ T5919] usb 1-1: Manufacturer: syz [ 975.654501][ T5919] usb 1-1: SerialNumber: syz [ 975.709050][ T5919] usb 1-1: config 0 descriptor?? [ 975.735365][ T5919] usb 1-1: no audio or video endpoints found [ 975.813457][T19219] netlink: 'syz.5.4015': attribute type 25 has an invalid length. [ 975.833592][T19219] netlink: 'syz.5.4015': attribute type 25 has an invalid length. [ 976.484588][T19229] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 976.490853][T19238] tipc: Enabled bearer , priority 0 [ 976.507570][T19237] tipc: Enabling of bearer rejected, already enabled [ 976.518467][T19236] syzkaller0: entered promiscuous mode [ 976.524012][T19236] syzkaller0: entered allmulticast mode [ 976.557977][T19236] tipc: Resetting bearer [ 976.580092][T19235] tipc: Resetting bearer [ 976.636153][T19235] tipc: Disabling bearer [ 976.643557][ T5871] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 976.658634][ T5919] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 976.777656][T17408] usb 1-1: USB disconnect, device number 30 [ 976.808895][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 976.822274][ T5871] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 976.838296][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 976.842018][ T5871] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 976.870437][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.881864][ T5871] usb 4-1: Product: syz [ 976.889240][ T5919] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 976.903137][ T5919] usb 2-1: config 0 has no interface number 0 [ 976.904526][ T5871] usb 4-1: Manufacturer: syz [ 976.916237][ T5871] usb 4-1: SerialNumber: syz [ 976.931101][ T5871] usb 4-1: config 0 descriptor?? [ 976.944653][ T5919] usb 2-1: config 0 interface 184 has no altsetting 0 [ 976.959250][ T5919] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 976.974417][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.979054][ T5871] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 977.017905][ T5919] usb 2-1: Product: syz [ 977.022197][ T5919] usb 2-1: Manufacturer: syz [ 977.027006][ T5919] usb 2-1: SerialNumber: syz [ 977.062123][ T5919] usb 2-1: config 0 descriptor?? [ 977.076956][ T5919] smsc75xx v1.0.0 [ 977.129642][T16567] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 977.308691][T16567] usb 3-1: Using ep0 maxpacket: 8 [ 977.342724][T16567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 977.362365][T16567] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 977.387501][T16567] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 54240, setting to 1024 [ 977.405770][T16567] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 977.417111][T16567] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 977.489692][T16567] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 977.501599][T16567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.511439][T16567] usb 3-1: Product: syz [ 977.515801][T16567] usb 3-1: Manufacturer: syz [ 977.529509][T16567] usb 3-1: SerialNumber: syz [ 977.560515][T19246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 977.569486][T19246] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 977.588741][ T5934] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 977.600649][T16567] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 977.633216][T16567] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 977.670454][T16567] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 977.700367][ T5919] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 977.770100][ T5919] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 977.773443][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 977.855863][ T5934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.878708][ T5919] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 977.894454][ T5934] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 977.936843][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.976139][ T5919] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 977.985160][ T5934] usb 6-1: Product: syz [ 977.985186][ T5934] usb 6-1: Manufacturer: syz [ 977.985204][ T5934] usb 6-1: SerialNumber: syz [ 978.050687][ T5934] usb 6-1: config 0 descriptor?? [ 978.076997][ T5934] cdc_ether 6-1:0.0: skipping garbage [ 978.094641][ T5934] usb 6-1: bad CDC descriptors [ 978.103927][ T5934] usb 6-1: unsupported MDLM descriptors [ 978.210964][ T5919] usb 2-1: USB disconnect, device number 3 [ 978.231074][T11866] udevd[11866]: setting mode of /dev/bus/usb/002/003 to 020664 failed: No such file or directory [ 978.259137][T11866] udevd[11866]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 978.333270][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.342793][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.356635][T17405] usb 6-1: USB disconnect, device number 43 [ 978.577995][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 978.771935][ T5919] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 978.786364][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.796520][ T5919] usb 2-1: Product: syz [ 978.801043][ T5919] usb 2-1: Manufacturer: syz [ 978.805865][ T5919] usb 2-1: SerialNumber: syz [ 979.071863][ T5871] gspca_zc3xx: reg_r err -32 [ 979.658735][ T5871] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 979.665201][ T5871] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 979.844769][ T5934] usb 3-1: USB disconnect, device number 8 [ 980.169944][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4034'. [ 980.194457][ T5919] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 980.208684][ T5919] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 980.233684][ T5919] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 980.264259][ T5919] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 980.289155][ T5871] usb 4-1: USB disconnect, device number 33 [ 980.331605][ T5919] usb 2-1: USB disconnect, device number 4 [ 980.392691][ T5934] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 980.418194][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4036'. [ 980.561583][ T5934] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 980.582781][ T5934] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 980.602540][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.635596][ T5934] usb 1-1: Product: syz [ 980.656760][ T5934] usb 1-1: Manufacturer: syz [ 980.668601][ T5934] usb 1-1: SerialNumber: syz [ 980.716174][ T5934] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 980.768864][ T5871] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 980.878526][ T5919] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 980.928895][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 980.956208][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 980.979924][ T5934] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 981.005320][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 981.028827][ T5871] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 981.044211][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.056397][ T5934] usb 1-1: USB disconnect, device number 31 [ 981.058765][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 981.070014][ T5871] usb 4-1: Product: syz [ 981.075805][ T5871] usb 4-1: Manufacturer: syz [ 981.084372][ T5871] usb 4-1: SerialNumber: syz [ 981.094303][ T5919] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 981.132878][ T5871] usb 4-1: config 0 descriptor?? [ 981.138913][T17390] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 981.139569][ T5919] usb 2-1: config 0 has no interface number 0 [ 981.157340][ T5871] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 981.187077][ T5919] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 981.215623][ T5919] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 981.237318][ T5919] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 981.263144][ T5919] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 981.274987][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.286455][ T5919] usb 2-1: Product: syz [ 981.293476][ T5919] usb 2-1: Manufacturer: syz [ 981.298808][T17390] usb 6-1: Using ep0 maxpacket: 8 [ 981.301043][ T5919] usb 2-1: SerialNumber: syz [ 981.306248][T17390] usb 6-1: unable to get BOS descriptor or descriptor too short [ 981.320677][T17390] usb 6-1: config 1 has an invalid interface number: 65 but max is 0 [ 981.325766][ T5919] usb 2-1: config 0 descriptor?? [ 981.334191][T17390] usb 6-1: config 1 has no interface number 0 [ 981.341597][T19298] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 981.359012][ T5934] usb 4-1: USB disconnect, device number 34 [ 981.381091][T17390] usb 6-1: too many endpoints for config 1 interface 65 altsetting 139: 128, using maximum allowed: 30 [ 981.394196][T16567] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 981.414380][T17390] usb 6-1: config 1 interface 65 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 981.439783][T17390] usb 6-1: config 1 interface 65 has no altsetting 0 [ 981.451938][T17390] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 981.462262][T17390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.471992][T17390] usb 6-1: Product: syz [ 981.476733][T17390] usb 6-1: Manufacturer: syz [ 981.486615][T17390] usb 6-1: SerialNumber: syz [ 981.548350][T16567] usb 3-1: Using ep0 maxpacket: 8 [ 981.561900][ T5919] usb-storage 2-1:0.20: USB Mass Storage device detected [ 981.569104][T16567] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 981.571997][T16567] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 981.589849][T16567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.600411][T16567] usb 3-1: Product: syz [ 981.604657][T16567] usb 3-1: Manufacturer: syz [ 981.611071][T16567] usb 3-1: SerialNumber: syz [ 981.637612][T16567] usb 3-1: config 0 descriptor?? [ 981.673059][ T5919] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 981.673972][T16567] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 981.723706][ T5919] scsi host1: usb-storage 2-1:0.20 [ 981.804966][ T5919] usb 2-1: USB disconnect, device number 5 [ 982.129898][T19337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4050'. [ 982.288154][ T5919] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 982.458666][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 982.471917][ T5919] usb 2-1: no configurations [ 982.486982][ T5919] usb 2-1: can't read configurations, error -22 [ 982.493917][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'. [ 982.628238][ T5919] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 982.699489][T19333] delete_channel: no stack [ 982.717575][T19333] delete_channel: no stack [ 982.734344][T19333] delete_channel: no stack [ 982.750267][T19333] delete_channel: no stack [ 982.755142][T19333] delete_channel: no stack [ 982.779222][T19333] delete_channel: no stack [ 982.786414][T19333] delete_channel: no stack [ 982.792189][T19333] delete_channel: no stack [ 982.797136][T19333] delete_channel: no stack [ 982.803559][T19333] delete_channel: no stack [ 982.809495][T19333] delete_channel: no stack [ 982.814722][T19333] delete_channel: no stack [ 982.818515][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 982.820932][T19333] delete_channel: no stack [ 982.835923][T19357] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 982.846823][ T5919] usb 2-1: no configurations [ 982.847175][T19333] delete_channel: no stack [ 982.859069][ T5919] usb 2-1: can't read configurations, error -22 [ 982.871493][ T5919] usb usb2-port1: attempt power cycle [ 982.903269][T19333] delete_channel: no stack [ 982.932521][T19333] delete_channel: no stack [ 982.937325][T19333] delete_channel: no stack [ 982.943352][T19333] delete_channel: no stack [ 982.949757][T19333] delete_channel: no stack [ 982.954971][T19333] delete_channel: no stack [ 982.960769][T19333] delete_channel: no stack [ 982.965615][T19333] delete_channel: no stack [ 982.973341][T19333] delete_channel: no stack [ 982.979549][T19333] delete_channel: no stack [ 982.984538][T19333] delete_channel: no stack [ 982.990531][T19333] delete_channel: no stack [ 982.995351][T19333] delete_channel: no stack [ 983.000929][T19333] delete_channel: no stack [ 983.005800][T19333] delete_channel: no stack [ 983.016783][T19333] delete_channel: no stack [ 983.023581][T19333] delete_channel: no stack [ 983.028996][T19333] delete_channel: no stack [ 983.034174][T19333] delete_channel: no stack [ 983.041260][T19333] delete_channel: no stack [ 983.046093][T19333] delete_channel: no stack [ 983.051682][T19333] delete_channel: no stack [ 983.056759][T19333] delete_channel: no stack [ 983.062201][T19333] delete_channel: no stack [ 983.067039][T19333] delete_channel: no stack [ 983.072695][T19333] delete_channel: no stack [ 983.079911][T19333] delete_channel: no stack [ 983.084679][T19333] delete_channel: no stack [ 983.090400][T19333] delete_channel: no stack [ 983.095063][T19333] delete_channel: no stack [ 983.101295][T19333] delete_channel: no stack [ 983.105969][T19333] delete_channel: no stack [ 983.111606][T19333] delete_channel: no stack [ 983.116343][T19333] delete_channel: no stack [ 983.122394][T19333] delete_channel: no stack [ 983.127189][T19333] delete_channel: no stack [ 983.133630][T19333] delete_channel: no stack [ 983.139094][T19333] delete_channel: no stack [ 983.144698][T19333] delete_channel: no stack [ 983.152479][T19333] delete_channel: no stack [ 983.154898][T17391] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 983.157656][T19333] delete_channel: no stack [ 983.186469][T19333] delete_channel: no stack [ 983.202679][T17390] kalmia 6-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 983.224557][T17390] kalmia 6-1:1.65: probe with driver kalmia failed with error -22 [ 983.248366][ T5919] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 983.265835][T17390] usb 6-1: USB disconnect, device number 44 [ 983.280654][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 983.296641][ T5919] usb 2-1: no configurations [ 983.318932][ T5919] usb 2-1: can't read configurations, error -22 [ 983.326187][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4062'. [ 983.353726][T17391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.366542][T17391] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 983.390524][T17391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 983.402994][T17391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 983.414326][T17391] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 983.435334][T17391] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 983.447074][T17391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 983.456821][T17391] usb 4-1: Product: syz [ 983.462138][T17391] usb 4-1: Manufacturer: syz [ 983.466829][T17391] usb 4-1: SerialNumber: syz [ 983.482969][ T5919] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 983.484126][T17391] usb 4-1: config 0 descriptor?? [ 983.529363][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 983.535661][ T5919] usb 2-1: no configurations [ 983.545071][ T5919] usb 2-1: can't read configurations, error -22 [ 983.552817][ T5919] usb usb2-port1: unable to enumerate USB device [ 983.568521][T17405] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 983.704597][T16567] gspca_zc3xx: reg_r err -32 [ 983.721686][T17391] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 983.738094][T17405] usb 1-1: Using ep0 maxpacket: 32 [ 983.739343][T17391] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 983.770171][T17405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 983.789256][T17405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 983.812393][T17405] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 983.831023][T17405] usb 1-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 983.848964][T17405] usb 1-1: Product: syz [ 983.859777][T17405] usb 1-1: Manufacturer: syz [ 983.900413][T17405] usb 1-1: SerialNumber: syz [ 983.925161][T17405] usb 1-1: config 0 descriptor?? [ 983.927397][T17391] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 983.946755][T17391] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 983.946948][T17405] usb 1-1: no audio or video endpoints found [ 984.008692][T17391] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 984.298820][T16567] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 984.305726][T16567] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 984.471607][T19370] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 984.556385][T17391] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 984.572613][T17391] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 984.589115][T17391] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 984.606387][T17391] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 984.662662][T17391] usb 4-1: USB disconnect, device number 35 [ 984.897437][ T5934] usb 3-1: USB disconnect, device number 9 [ 985.022780][T17390] usb 1-1: USB disconnect, device number 32 [ 985.590847][T19401] FAULT_INJECTION: forcing a failure. [ 985.590847][T19401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.664760][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 985.678699][T19401] CPU: 0 UID: 0 PID: 19401 Comm: syz.2.4070 Not tainted syzkaller #0 PREEMPT(full) [ 985.678721][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 985.678729][T19401] Call Trace: [ 985.678735][T19401] [ 985.678741][T19401] dump_stack_lvl+0x189/0x250 [ 985.678761][T19401] ? __pfx____ratelimit+0x10/0x10 [ 985.678779][T19401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 985.678792][T19401] ? __pfx__printk+0x10/0x10 [ 985.678821][T19401] should_fail_ex+0x414/0x560 [ 985.678840][T19401] _copy_to_user+0x31/0xb0 [ 985.678857][T19401] simple_read_from_buffer+0xe1/0x170 [ 985.678878][T19401] proc_fail_nth_read+0x1b3/0x220 [ 985.678894][T19401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 985.678909][T19401] ? rw_verify_area+0x2a6/0x4d0 [ 985.678923][T19401] ? __lock_acquire+0xab9/0xd20 [ 985.678939][T19401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 985.678956][T19401] vfs_read+0x1fd/0xa30 [ 985.678970][T19401] ? fdget_pos+0x247/0x320 [ 985.678984][T19401] ? __pfx___mutex_lock+0x10/0x10 [ 985.679002][T19401] ? __pfx_vfs_read+0x10/0x10 [ 985.679019][T19401] ? __fget_files+0x2a/0x420 [ 985.679040][T19401] ? __fget_files+0x3a0/0x420 [ 985.679060][T19401] ? __fget_files+0x2a/0x420 [ 985.679081][T19401] ksys_read+0x145/0x250 [ 985.679098][T19401] ? __pfx_ksys_read+0x10/0x10 [ 985.679115][T19401] ? lockdep_hardirqs_on+0x9c/0x150 [ 985.679133][T19401] __do_fast_syscall_32+0xb6/0x2b0 [ 985.679145][T19401] ? lockdep_hardirqs_on+0x9c/0x150 [ 985.679166][T19401] do_fast_syscall_32+0x34/0x80 [ 985.679183][T19401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 985.679199][T19401] RIP: 0023:0xf7f02539 [ 985.679212][T19401] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 985.679225][T19401] RSP: 002b:00000000f5426590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 985.679240][T19401] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5426620 [ 985.679248][T19401] RDX: 000000000000000f RSI: 00000000f7394ff4 RDI: 0000000000000000 [ 985.679255][T19401] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 985.679262][T19401] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 985.679269][T19401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 985.679286][T19401] [ 986.185290][T19417] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4074'. [ 986.194658][ T5934] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 986.435528][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4071'. [ 986.466063][T19403] veth0: entered promiscuous mode [ 986.486068][T19403] batman_adv: batadv0: Adding interface: macvlan3 [ 986.505505][T19403] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.534203][T19403] batman_adv: batadv0: Interface activated: macvlan3 [ 986.594279][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 986.605029][ T5934] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 986.614599][ T5934] usb 4-1: can't read configurations, error -71 [ 986.787844][T17405] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 986.798477][T17391] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 986.957857][T17405] usb 3-1: Using ep0 maxpacket: 8 [ 987.024625][T17405] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 987.028633][T17391] usb 6-1: Using ep0 maxpacket: 16 [ 987.058540][T17405] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 987.063367][T19426] FAULT_INJECTION: forcing a failure. [ 987.063367][T19426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.067937][T17405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.083855][T17391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.168231][T19426] CPU: 1 UID: 0 PID: 19426 Comm: syz.0.4079 Not tainted syzkaller #0 PREEMPT(full) [ 987.168260][T19426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 987.168272][T19426] Call Trace: [ 987.168281][T19426] [ 987.168291][T19426] dump_stack_lvl+0x189/0x250 [ 987.168320][T19426] ? __pfx____ratelimit+0x10/0x10 [ 987.168348][T19426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.168370][T19426] ? __pfx__printk+0x10/0x10 [ 987.168397][T19426] ? __might_fault+0xb0/0x130 [ 987.168435][T19426] should_fail_ex+0x414/0x560 [ 987.168464][T19426] _copy_from_iter+0x1de/0x1790 [ 987.168492][T19426] ? rcu_is_watching+0x15/0xb0 [ 987.168514][T19426] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 987.168541][T19426] ? __pfx__copy_from_iter+0x10/0x10 [ 987.168562][T19426] ? __build_skb_around+0x257/0x3e0 [ 987.168596][T19426] ? netlink_sendmsg+0x642/0xb30 [ 987.168623][T19426] ? skb_put+0x11b/0x210 [ 987.168645][T19426] netlink_sendmsg+0x6b2/0xb30 [ 987.168682][T19426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.168747][T19426] ? __import_iovec+0x5d4/0x7f0 [ 987.168765][T19426] ? aa_sock_msg_perm+0xf1/0x1d0 [ 987.168785][T19426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 987.168805][T19426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.168831][T19426] __sock_sendmsg+0x21c/0x270 [ 987.168859][T19426] ____sys_sendmsg+0x505/0x830 [ 987.168885][T19426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.168921][T19426] ___sys_sendmsg+0x21f/0x2a0 [ 987.168939][T19426] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.168971][T19426] ? __fget_files+0x2a/0x420 [ 987.168987][T19426] ? __fget_files+0x3a0/0x420 [ 987.169010][T19426] __sys_sendmsg+0x164/0x220 [ 987.169024][T19426] ? __pfx___sys_sendmsg+0x10/0x10 [ 987.169045][T19426] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.169063][T19426] __do_fast_syscall_32+0xb6/0x2b0 [ 987.169074][T19426] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.169092][T19426] do_fast_syscall_32+0x34/0x80 [ 987.169109][T19426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 987.169123][T19426] RIP: 0023:0xf70be539 [ 987.169135][T19426] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 987.169145][T19426] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 987.169159][T19426] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 987.169168][T19426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.169175][T19426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.169181][T19426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 987.169188][T19426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.169205][T19426] [ 987.178582][T17391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.199902][T17405] usb 3-1: Product: syz [ 987.249776][T17391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 987.554125][T17405] usb 3-1: Manufacturer: syz [ 987.567286][T17391] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 987.604629][T17391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.613865][T17405] usb 3-1: SerialNumber: syz [ 987.669087][T17405] usb 3-1: config 0 descriptor?? [ 987.676022][T17391] usb 6-1: config 0 descriptor?? [ 987.686476][T17405] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 987.891906][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'. [ 988.017934][ T5919] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 988.132569][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4087'. [ 988.156782][T17391] hid (null): unknown global tag 0xd [ 988.163856][T17391] hid (null): unknown global tag 0xc [ 988.170919][T17391] hid (null): bogus close delimiter [ 988.176599][T17391] hid (null): unknown global tag 0xc [ 988.178450][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 988.189311][T17391] hid (null): global environment stack underflow [ 988.196243][T17391] hid (null): global environment stack underflow [ 988.203565][T17391] hid (null): global environment stack underflow [ 988.206044][ T5919] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 988.211037][T17391] hid (null): global environment stack underflow [ 988.227681][T17391] hid (null): unknown global tag 0x2a [ 988.242977][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.258035][ T5919] usb 1-1: Product: syz [ 988.262396][ T5919] usb 1-1: Manufacturer: syz [ 988.269530][ T5919] usb 1-1: SerialNumber: syz [ 988.279091][ T5919] usb 1-1: config 0 descriptor?? [ 988.291058][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 988.297643][T17391] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 988.336277][T17391] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 988.348874][T16567] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 988.511003][T16567] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 988.525137][T16567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.550459][T16567] usb 2-1: config 0 descriptor?? [ 988.986144][T16567] waltop 0003:172F:0032.001F: item fetching failed at offset 3/5 [ 988.995944][T16567] waltop 0003:172F:0032.001F: probe with driver waltop failed with error -22 [ 989.183856][T19443] warning: `syz.1.4086' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 989.455158][T19443] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4086'. [ 989.519030][T17410] usb 6-1: USB disconnect, device number 45 [ 989.525657][T19443] vlan3: entered allmulticast mode [ 989.693152][T17405] gspca_zc3xx: reg_r err -32 [ 989.798121][ T5919] gspca_sonixj: reg_w1 err -110 [ 989.812777][ T5919] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 989.839259][T19464] FAULT_INJECTION: forcing a failure. [ 989.839259][T19464] name failslab, interval 1, probability 0, space 0, times 0 [ 989.862125][T19464] CPU: 1 UID: 0 PID: 19464 Comm: syz.5.4092 Not tainted syzkaller #0 PREEMPT(full) [ 989.862160][T19464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 989.862172][T19464] Call Trace: [ 989.862182][T19464] [ 989.862191][T19464] dump_stack_lvl+0x189/0x250 [ 989.862221][T19464] ? __pfx____ratelimit+0x10/0x10 [ 989.862250][T19464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.862273][T19464] ? __pfx__printk+0x10/0x10 [ 989.862307][T19464] ? __pfx___might_resched+0x10/0x10 [ 989.862325][T19464] ? fs_reclaim_acquire+0x7d/0x100 [ 989.862358][T19464] should_fail_ex+0x414/0x560 [ 989.862390][T19464] should_failslab+0xa8/0x100 [ 989.862419][T19464] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 989.862455][T19464] ? __pfx_stack_trace_save+0x10/0x10 [ 989.862475][T19464] ? __alloc_skb+0x112/0x2d0 [ 989.862500][T19464] __alloc_skb+0x112/0x2d0 [ 989.862524][T19464] netlink_ack+0x146/0xa50 [ 989.862550][T19464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.862591][T19464] netlink_rcv_skb+0x28c/0x470 [ 989.862617][T19464] ? __lock_acquire+0xab9/0xd20 [ 989.862645][T19464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.862670][T19464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.862719][T19464] ? down_read+0x1ad/0x2e0 [ 989.862741][T19464] genl_rcv+0x28/0x40 [ 989.862762][T19464] netlink_unicast+0x82f/0x9e0 [ 989.862798][T19464] ? __pfx_netlink_unicast+0x10/0x10 [ 989.862827][T19464] ? netlink_sendmsg+0x642/0xb30 [ 989.862853][T19464] ? skb_put+0x11b/0x210 [ 989.862877][T19464] netlink_sendmsg+0x805/0xb30 [ 989.862917][T19464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.862949][T19464] ? __import_iovec+0x5d4/0x7f0 [ 989.862968][T19464] ? aa_sock_msg_perm+0xf1/0x1d0 [ 989.862989][T19464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 989.863009][T19464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.863036][T19464] __sock_sendmsg+0x21c/0x270 [ 989.863064][T19464] ____sys_sendmsg+0x505/0x830 [ 989.863091][T19464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.863127][T19464] ___sys_sendmsg+0x21f/0x2a0 [ 989.863150][T19464] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.863215][T19464] ? __fget_files+0x2a/0x420 [ 989.863242][T19464] ? __fget_files+0x3a0/0x420 [ 989.863282][T19464] __sys_sendmsg+0x164/0x220 [ 989.863307][T19464] ? __pfx___sys_sendmsg+0x10/0x10 [ 989.863347][T19464] ? lockdep_hardirqs_on+0x9c/0x150 [ 989.863379][T19464] __do_fast_syscall_32+0xb6/0x2b0 [ 989.863398][T19464] ? lockdep_hardirqs_on+0x9c/0x150 [ 989.863439][T19464] do_fast_syscall_32+0x34/0x80 [ 989.863468][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 989.863491][T19464] RIP: 0023:0xf70de539 [ 989.863509][T19464] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 989.863526][T19464] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 989.863548][T19464] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 989.863561][T19464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 989.863574][T19464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 989.863584][T19464] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 989.863597][T19464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 989.863628][T19464] [ 990.189580][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.548451][T17405] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 990.556452][T17405] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 990.800864][T16567] usb 1-1: USB disconnect, device number 33 [ 990.838606][T17405] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 990.915787][T17391] usb 3-1: USB disconnect, device number 10 [ 991.021581][T19478] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4095'. [ 991.134857][T17405] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 991.153387][T17405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 991.201666][T17405] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 991.229763][T17405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 991.303679][T17405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 991.335985][T17411] usb 2-1: USB disconnect, device number 10 [ 991.431069][T17405] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 991.455771][T17405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 991.477565][T17405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 991.510760][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'. [ 991.520100][T17405] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 991.656790][T17405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 991.672523][T17405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 991.717898][T17405] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 991.729969][T17405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 991.738676][T17405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 991.760425][T17405] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 991.796983][T17405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 992.052652][T17405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 992.062843][T17405] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 992.084361][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 992.111806][T17405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 992.132054][T17405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 992.151503][T17405] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 992.208190][T17405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 992.237211][T17405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 992.258156][T17405] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 992.279334][T17405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 992.296301][T17405] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 992.310843][T17405] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 992.323464][T17405] usb 6-1: Product: syz [ 992.339537][T17405] usb 6-1: Manufacturer: syz [ 992.347938][T17405] usb 6-1: SerialNumber: syz [ 992.377673][T17405] usb 6-1: config 0 descriptor?? [ 992.404025][T17405] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 992.670276][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 992.680808][ T5919] usb 6-1: USB disconnect, device number 46 [ 992.699436][ T5919] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 993.278719][T17391] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 993.290137][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.296750][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.465829][T17391] usb 4-1: Using ep0 maxpacket: 32 [ 993.483703][T17391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 993.522247][T17391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 993.559038][T17391] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 993.579554][T17391] usb 4-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 993.737056][T17391] usb 4-1: Product: syz [ 993.742197][T17391] usb 4-1: Manufacturer: syz [ 993.755391][T17391] usb 4-1: SerialNumber: syz [ 993.846111][T17391] usb 4-1: config 0 descriptor?? [ 994.170668][T17391] usb 4-1: no audio or video endpoints found [ 994.225680][T19516] 8021q: VLANs not supported on lo [ 994.588952][T16567] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 994.743158][T19529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4112'. [ 994.753641][T16567] usb 3-1: Using ep0 maxpacket: 8 [ 994.773030][T16567] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 994.796505][T16567] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 994.822675][T16567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.861860][T16567] usb 3-1: Product: syz [ 994.885089][T16567] usb 3-1: Manufacturer: syz [ 994.913016][T16567] usb 3-1: SerialNumber: syz [ 994.951980][T16567] usb 3-1: config 0 descriptor?? [ 994.964864][T16567] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 994.988697][T19530] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 995.203685][T19539] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4113'. [ 995.586690][ T5919] usb 4-1: USB disconnect, device number 38 [ 996.379185][T19550] loop6: detected capacity change from 0 to 7 [ 996.390103][T19550] Dev loop6: unable to read RDB block 7 [ 996.395737][T19550] loop6: unable to read partition table [ 996.403295][T19550] loop6: partition table beyond EOD, truncated [ 996.422655][T19550] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 996.458485][T17390] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 996.628434][T17390] usb 2-1: Using ep0 maxpacket: 32 [ 996.656353][T17390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 996.702756][T17390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 996.730818][T17390] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 996.765458][T17390] usb 2-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 996.782046][T17390] usb 2-1: Product: syz [ 996.802810][T17390] usb 2-1: Manufacturer: syz [ 996.814699][T17390] usb 2-1: SerialNumber: syz [ 996.850844][T17390] usb 2-1: config 0 descriptor?? [ 996.886834][T17390] usb 2-1: no audio or video endpoints found [ 997.000886][T19559] tipc: Enabled bearer , priority 0 [ 997.013143][T19559] syzkaller0: entered promiscuous mode [ 997.019634][T19559] syzkaller0: entered allmulticast mode [ 997.045796][T19559] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4122'. [ 997.061856][T16567] gspca_zc3xx: reg_r err -32 [ 997.074303][T19558] tipc: Resetting bearer [ 997.401953][T19558] tipc: Disabling bearer [ 997.445316][T19561] pim6reg: entered allmulticast mode [ 997.658731][T16567] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 997.666913][T16567] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 997.771585][ T30] audit: type=1326 audit(1756486676.731:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19573 comm="syz.3.4125" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 997.924334][T19572] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 997.967194][ T30] audit: type=1326 audit(1756486676.961:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.000858][ T30] audit: type=1326 audit(1756486676.991:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.023978][ T30] audit: type=1326 audit(1756486676.991:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.046833][ T30] audit: type=1326 audit(1756486676.991:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.069136][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.104249][ T30] audit: type=1326 audit(1756486676.991:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.129722][ T30] audit: type=1326 audit(1756486676.991:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.151849][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.174579][ T30] audit: type=1326 audit(1756486676.991:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.240785][ T30] audit: type=1326 audit(1756486676.991:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.263807][T17410] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 998.311336][ T5919] usb 3-1: USB disconnect, device number 11 [ 998.377563][ T30] audit: type=1326 audit(1756486676.991:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19582 comm="syz.5.4127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 998.437896][T17410] usb 6-1: Using ep0 maxpacket: 16 [ 998.465203][T17405] usb 2-1: USB disconnect, device number 11 [ 998.476155][T17410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.554854][T17410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.591660][T17410] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 998.607979][T17410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.639668][T17410] usb 6-1: config 0 descriptor?? [ 998.828190][ T5919] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 998.924486][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4132'. [ 998.978194][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 999.017421][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.067208][T19598] fuse: Unknown parameter 'dd' [ 999.103370][T17410] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 999.130478][T17410] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 999.144887][T17410] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x4 [ 999.145910][ T5919] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 999.164231][T17410] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 999.172848][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.181377][T17410] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 999.188734][ T5919] usb 3-1: Product: syz [ 999.193147][ T5919] usb 3-1: Manufacturer: syz [ 999.198973][T17410] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 999.210033][ T5919] usb 3-1: SerialNumber: syz [ 999.231517][ T5919] usb 3-1: config 0 descriptor?? [ 999.251178][ T5919] cdc_ether 3-1:0.0: skipping garbage [ 999.256635][ T5919] usb 3-1: bad CDC descriptors [ 999.262459][ T5919] usb 3-1: unsupported MDLM descriptors [ 999.348863][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4135'. [ 999.418873][T17410] usb 6-1: USB disconnect, device number 47 [ 999.587496][T19585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.649781][T19585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.701801][T17410] usb 3-1: USB disconnect, device number 12 [ 999.889200][T16567] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1000.048906][T16567] usb 4-1: Using ep0 maxpacket: 8 [ 1000.061270][T16567] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.076261][T16567] usb 4-1: config 0 has no interfaces? [ 1000.091044][T16567] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 1000.095670][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4141'. [ 1000.109346][T16567] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1000.109375][T16567] usb 4-1: Manufacturer: syz [ 1000.109392][T16567] usb 4-1: SerialNumber: syz [ 1000.115966][T16567] usb 4-1: config 0 descriptor?? [ 1000.218421][T17410] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1000.229683][T17390] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1000.393057][T16567] usb 4-1: USB disconnect, device number 39 [ 1000.417947][T17410] usb 1-1: Using ep0 maxpacket: 8 [ 1000.418623][T17390] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1000.448052][T17410] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1000.460996][T17390] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1000.476594][T17390] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1000.533846][T17410] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1000.540128][T17390] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1000.562462][T17410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.591224][T17410] usb 1-1: Product: syz [ 1000.593814][T17390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.595604][T17410] usb 1-1: Manufacturer: syz [ 1000.622637][T17390] usb 2-1: Product: syz [ 1000.626994][T17390] usb 2-1: Manufacturer: syz [ 1000.645183][T17390] usb 2-1: SerialNumber: syz [ 1000.672332][T17410] usb 1-1: SerialNumber: syz [ 1000.675315][T17390] usb 2-1: config 0 descriptor?? [ 1000.705717][T19616] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1000.715957][T17410] usb 1-1: config 0 descriptor?? [ 1000.734791][T19616] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1000.737071][T17410] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1000.759981][T17390] usb 2-1: ucan: probing device on interface #0 [ 1000.988787][T16567] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1000.996577][T17390] usb 2-1: ucan: could not read protocol version, ret=0 [ 1001.005307][T17390] usb 2-1: ucan: probe failed; try to update the device firmware [ 1001.102796][T19635] netlink: 'syz.5.4146': attribute type 10 has an invalid length. [ 1001.112339][T19635] syz_tun: entered promiscuous mode [ 1001.158621][T16567] usb 3-1: Using ep0 maxpacket: 32 [ 1001.165670][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1001.180137][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1001.195361][T16567] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 1001.230116][T16567] usb 3-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 1001.262552][T17390] usb 2-1: USB disconnect, device number 12 [ 1001.269966][T16567] usb 3-1: Product: syz [ 1001.274302][T16567] usb 3-1: Manufacturer: syz [ 1001.302026][T16567] usb 3-1: SerialNumber: syz [ 1001.332010][T16567] usb 3-1: config 0 descriptor?? [ 1001.343026][T19637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1001.363245][T16567] usb 3-1: no audio or video endpoints found [ 1001.798846][T17390] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1001.939190][T19648] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1001.957077][T17390] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1001.975540][T17390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.984984][T17390] usb 4-1: Product: syz [ 1001.995822][T17390] usb 4-1: Manufacturer: syz [ 1002.001882][T17390] usb 4-1: SerialNumber: syz [ 1002.019900][T17390] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1002.026327][T17390] r8152-cfgselector 4-1: config 0 descriptor?? [ 1002.079496][T16567] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1002.291082][T16567] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1002.310617][T16567] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1002.325235][T16567] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1002.348956][T16567] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1002.361942][T16567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.371447][T16567] usb 2-1: Product: syz [ 1002.375718][T16567] usb 2-1: Manufacturer: syz [ 1002.381390][T16567] usb 2-1: SerialNumber: syz [ 1002.410211][T16567] hub 2-1:1.0: bad descriptor, ignoring hub [ 1002.416786][T16567] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1002.607178][T16567] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1002.742829][T17410] gspca_zc3xx: reg_r err -32 [ 1002.859522][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4152'. [ 1003.338286][T17410] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1003.344861][T17410] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1003.520093][T19650] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 1003.755219][T17405] usb 3-1: USB disconnect, device number 13 [ 1003.920549][ T5934] usb 2-1: USB disconnect, device number 13 [ 1003.942034][ T5934] usblp0: removed [ 1003.960010][T16567] usb 1-1: USB disconnect, device number 34 [ 1004.591023][T16567] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 1004.822325][T19685] tipc: Started in network mode [ 1004.827828][T19685] tipc: Node identity 4, cluster identity 4711 [ 1004.834223][T19685] tipc: Node number set to 4 [ 1005.004784][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4165'. [ 1005.038119][ T5919] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1005.248148][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 1005.285176][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.297218][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1005.327028][ T5919] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1005.338864][T16567] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1005.346894][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1005.365517][ T5919] usb 2-1: Product: syz [ 1005.375917][ T5919] usb 2-1: Manufacturer: syz [ 1005.384795][ T5919] usb 2-1: SerialNumber: syz [ 1005.401806][ T5919] usb 2-1: config 0 descriptor?? [ 1005.414485][ T5919] usb 2-1: NFC: intf ffff88805a26c000 id ffffffff8eb54320 [ 1005.482295][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4171'. [ 1005.508871][T16567] usb 3-1: Using ep0 maxpacket: 32 [ 1005.516176][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1005.529070][T16567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1005.544090][T16567] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 1005.554909][T16567] usb 3-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 1005.566957][T16567] usb 3-1: Product: syz [ 1005.572508][T16567] usb 3-1: Manufacturer: syz [ 1005.577333][T16567] usb 3-1: SerialNumber: syz [ 1005.593865][T16567] usb 3-1: config 0 descriptor?? [ 1005.605623][T16567] usb 3-1: no audio or video endpoints found [ 1005.620134][T17410] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1005.805113][T17410] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1005.814689][T17410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.823396][T17410] usb 6-1: Product: syz [ 1005.831971][T17410] usb 6-1: Manufacturer: syz [ 1005.836705][T17410] usb 6-1: SerialNumber: syz [ 1005.845271][T17410] usb 6-1: config 0 descriptor?? [ 1005.969237][T16567] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1006.075402][T17410] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1006.150557][T16567] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1006.162105][T16567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.166715][ T5919] usb 2-1: USB disconnect, device number 14 [ 1006.193467][T16567] usb 4-1: config 0 descriptor?? [ 1006.264614][T19712] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1006.420073][T19722] netlink: 'syz.0.4178': attribute type 2 has an invalid length. [ 1006.430084][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4174'. [ 1006.469914][T16567] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1006.674971][T19708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.709782][T19708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.763796][T16567] [drm:udl_init] *ERROR* Selecting channel failed [ 1006.827197][T16567] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1006.840895][T19733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1006.845513][T16567] [drm] Initialized udl on minor 2 [ 1006.883325][T16567] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1006.903341][T19733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1006.916545][T16567] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1006.934369][T17390] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1006.947353][T16567] usb 4-1: USB disconnect, device number 41 [ 1006.960955][T17390] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1007.064445][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4183'. [ 1007.169121][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 1007.183112][T19741] netlink: 'syz.0.4184': attribute type 5 has an invalid length. [ 1007.192423][T19741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4184'. [ 1007.203338][T19743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4185'. [ 1007.217405][T19741] geneve2: entered promiscuous mode [ 1007.228992][T19741] geneve2: entered allmulticast mode [ 1007.236877][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1007.246816][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1007.262667][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1007.272681][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1007.721854][T17410] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1007.745337][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4189'. [ 1007.753574][T17410] usb 6-1: USB disconnect, device number 48 [ 1008.096242][T17390] usb 3-1: USB disconnect, device number 14 [ 1008.458491][T17410] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1008.598877][T17390] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1008.700372][T17410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1008.720347][T17410] usb 2-1: not running at top speed; connect to a high speed hub [ 1008.788923][T17390] usb 3-1: Using ep0 maxpacket: 16 [ 1008.797262][T17390] usb 3-1: config 253 has an invalid interface number: 211 but max is 0 [ 1008.807235][T17410] usb 2-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 1008.830342][T17390] usb 3-1: config 253 has no interface number 0 [ 1008.837462][T17390] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=22.f1 [ 1008.864724][T17390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.940636][T17410] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1009.024364][T17410] usb 2-1: config 1 has no interface number 1 [ 1009.046105][T17410] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1009.075039][T17410] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 1009.120540][ T5919] usb 3-1: USB disconnect, device number 15 [ 1009.154303][ T5919] ================================================================== [ 1009.162547][ T5919] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 1009.170365][ T5919] Read of size 8 at addr ffff8880649418a0 by task kworker/1:3/5919 [ 1009.178326][ T5919] [ 1009.180679][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1009.180710][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1009.180725][ T5919] Workqueue: usb_hub_wq hub_event [ 1009.180757][ T5919] Call Trace: [ 1009.180766][ T5919] [ 1009.180774][ T5919] dump_stack_lvl+0x189/0x250 [ 1009.180799][ T5919] ? __kasan_check_byte+0x12/0x40 [ 1009.180826][ T5919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.180848][ T5919] ? lock_release+0x4b/0x3e0 [ 1009.180881][ T5919] ? __virt_addr_valid+0x4a5/0x5c0 [ 1009.180908][ T5919] print_report+0xca/0x240 [ 1009.180926][ T5919] ? hdm_disconnect+0x10d/0x1c0 [ 1009.180947][ T5919] kasan_report+0x118/0x150 [ 1009.180974][ T5919] ? hdm_disconnect+0x10d/0x1c0 [ 1009.180999][ T5919] hdm_disconnect+0x10d/0x1c0 [ 1009.181021][ T5919] usb_unbind_interface+0x26e/0x910 [ 1009.181051][ T5919] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1009.181078][ T5919] device_release_driver_internal+0x4d9/0x800 [ 1009.181107][ T5919] bus_remove_device+0x34d/0x410 [ 1009.181138][ T5919] device_del+0x511/0x8e0 [ 1009.181159][ T5919] ? __pm_runtime_barrier+0x212/0x460 [ 1009.181183][ T5919] ? __pfx_device_del+0x10/0x10 [ 1009.181202][ T5919] ? __pfx___mutex_lock+0x10/0x10 [ 1009.181235][ T5919] usb_disable_device+0x3e9/0x8a0 [ 1009.181263][ T5919] usb_disconnect+0x330/0x950 [ 1009.181288][ T5919] hub_event+0x1cf5/0x4a20 [ 1009.181323][ T5919] ? do_raw_spin_lock+0x121/0x290 [ 1009.181347][ T5919] ? register_lock_class+0x51/0x320 [ 1009.181382][ T5919] ? __pfx_hub_event+0x10/0x10 [ 1009.181406][ T5919] ? process_scheduled_works+0x9ef/0x17b0 [ 1009.181429][ T5919] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.181453][ T5919] ? process_scheduled_works+0x9ef/0x17b0 [ 1009.181471][ T5919] ? process_scheduled_works+0x9ef/0x17b0 [ 1009.181500][ T5919] process_scheduled_works+0xae1/0x17b0 [ 1009.181533][ T5919] ? __pfx_process_scheduled_works+0x10/0x10 [ 1009.181560][ T5919] worker_thread+0x8a0/0xda0 [ 1009.181591][ T5919] kthread+0x70e/0x8a0 [ 1009.181616][ T5919] ? __pfx_worker_thread+0x10/0x10 [ 1009.181635][ T5919] ? __pfx_kthread+0x10/0x10 [ 1009.181659][ T5919] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.181684][ T5919] ? lockdep_hardirqs_on+0x9c/0x150 [ 1009.181711][ T5919] ? __pfx_kthread+0x10/0x10 [ 1009.181735][ T5919] ret_from_fork+0x3f9/0x770 [ 1009.181756][ T5919] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.181778][ T5919] ? __switch_to_asm+0x39/0x70 [ 1009.181804][ T5919] ? __switch_to_asm+0x33/0x70 [ 1009.181828][ T5919] ? __pfx_kthread+0x10/0x10 [ 1009.181852][ T5919] ret_from_fork_asm+0x1a/0x30 [ 1009.181882][ T5919] [ 1009.181891][ T5919] [ 1009.434313][ T5919] Allocated by task 17390: [ 1009.438734][ T5919] kasan_save_track+0x3e/0x80 [ 1009.443426][ T5919] __kasan_kmalloc+0x93/0xb0 [ 1009.448028][ T5919] __kmalloc_cache_noprof+0x230/0x3d0 [ 1009.453597][ T5919] hdm_probe+0x96/0x1400 [ 1009.457843][ T5919] usb_probe_interface+0x665/0xc30 [ 1009.462978][ T5919] really_probe+0x26d/0x9e0 [ 1009.467661][ T5919] __driver_probe_device+0x18c/0x2f0 [ 1009.472953][ T5919] driver_probe_device+0x4f/0x430 [ 1009.477985][ T5919] __device_attach_driver+0x2ce/0x530 [ 1009.483368][ T5919] bus_for_each_drv+0x24e/0x2e0 [ 1009.488228][ T5919] __device_attach+0x2b8/0x400 [ 1009.493004][ T5919] bus_probe_device+0x185/0x260 [ 1009.498123][ T5919] device_add+0x7b6/0xb50 [ 1009.502471][ T5919] usb_set_configuration+0x1a87/0x20e0 [ 1009.508236][ T5919] usb_generic_driver_probe+0x8d/0x150 [ 1009.514062][ T5919] usb_probe_device+0x1c1/0x390 [ 1009.518943][ T5919] really_probe+0x26d/0x9e0 [ 1009.523547][ T5919] __driver_probe_device+0x18c/0x2f0 [ 1009.528850][ T5919] driver_probe_device+0x4f/0x430 [ 1009.533902][ T5919] __device_attach_driver+0x2ce/0x530 [ 1009.539458][ T5919] bus_for_each_drv+0x24e/0x2e0 [ 1009.544329][ T5919] __device_attach+0x2b8/0x400 [ 1009.549108][ T5919] bus_probe_device+0x185/0x260 [ 1009.553965][ T5919] device_add+0x7b6/0xb50 [ 1009.558299][ T5919] usb_new_device+0xa39/0x16f0 [ 1009.563079][ T5919] hub_event+0x2958/0x4a20 [ 1009.567512][ T5919] process_scheduled_works+0xae1/0x17b0 [ 1009.573058][ T5919] worker_thread+0x8a0/0xda0 [ 1009.577652][ T5919] kthread+0x70e/0x8a0 [ 1009.581760][ T5919] ret_from_fork+0x3f9/0x770 [ 1009.586384][ T5919] ret_from_fork_asm+0x1a/0x30 [ 1009.591267][ T5919] [ 1009.593705][ T5919] Freed by task 5919: [ 1009.597696][ T5919] kasan_save_track+0x3e/0x80 [ 1009.602409][ T5919] kasan_save_free_info+0x46/0x50 [ 1009.607447][ T5919] __kasan_slab_free+0x5b/0x80 [ 1009.612220][ T5919] kfree+0x18e/0x440 [ 1009.616134][ T5919] device_release+0x99/0x1c0 [ 1009.620903][ T5919] kobject_put+0x22b/0x480 [ 1009.625360][ T5919] hdm_disconnect+0xf3/0x1c0 [ 1009.629954][ T5919] usb_unbind_interface+0x26e/0x910 [ 1009.635163][ T5919] device_release_driver_internal+0x4d9/0x800 [ 1009.641255][ T5919] bus_remove_device+0x34d/0x410 [ 1009.646229][ T5919] device_del+0x511/0x8e0 [ 1009.650604][ T5919] usb_disable_device+0x3e9/0x8a0 [ 1009.655643][ T5919] usb_disconnect+0x330/0x950 [ 1009.660327][ T5919] hub_event+0x1cf5/0x4a20 [ 1009.664760][ T5919] process_scheduled_works+0xae1/0x17b0 [ 1009.670306][ T5919] worker_thread+0x8a0/0xda0 [ 1009.674897][ T5919] kthread+0x70e/0x8a0 [ 1009.678965][ T5919] ret_from_fork+0x3f9/0x770 [ 1009.683554][ T5919] ret_from_fork_asm+0x1a/0x30 [ 1009.688330][ T5919] [ 1009.690673][ T5919] The buggy address belongs to the object at ffff888064940000 [ 1009.690673][ T5919] which belongs to the cache kmalloc-8k of size 8192 [ 1009.705008][ T5919] The buggy address is located 6304 bytes inside of [ 1009.705008][ T5919] freed 8192-byte region [ffff888064940000, ffff888064942000) [ 1009.719433][ T5919] [ 1009.721853][ T5919] The buggy address belongs to the physical page: [ 1009.728353][ T5919] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64940 [ 1009.737211][ T5919] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1009.745717][ T5919] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1009.753870][ T5919] page_type: f5(slab) [ 1009.757859][ T5919] raw: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001 [ 1009.766458][ T5919] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1009.775244][ T5919] head: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001 [ 1009.784009][ T5919] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1009.792692][ T5919] head: 00fff00000000003 ffffea0001925001 00000000ffffffff 00000000ffffffff [ 1009.801485][ T5919] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1009.810154][ T5919] page dumped because: kasan: bad access detected [ 1009.816653][ T5919] page_owner tracks the page as allocated [ 1009.822364][ T5919] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18523, tgid 18522 (syz.1.3767), ts 940007576908, free_ts 939926685899 [ 1009.844277][ T5919] post_alloc_hook+0x240/0x2a0 [ 1009.849102][ T5919] get_page_from_freelist+0x21e4/0x22c0 [ 1009.854716][ T5919] __alloc_frozen_pages_noprof+0x181/0x370 [ 1009.860528][ T5919] alloc_pages_mpol+0x232/0x4a0 [ 1009.865392][ T5919] allocate_slab+0x8a/0x370 [ 1009.869901][ T5919] ___slab_alloc+0xbeb/0x1410 [ 1009.874589][ T5919] __kmalloc_cache_noprof+0x296/0x3d0 [ 1009.879962][ T5919] audit_log_d_path+0xb5/0x190 [ 1009.884732][ T5919] audit_log_d_path_exe+0x42/0x70 [ 1009.889760][ T5919] audit_log_task+0x2b3/0x3c0 [ 1009.894439][ T5919] audit_seccomp+0x86/0x190 [ 1009.898945][ T5919] __seccomp_filter+0x17d0/0x1a40 [ 1009.903964][ T5919] syscall_trace_enter+0xaa/0x160 [ 1009.909087][ T5919] __do_fast_syscall_32+0x99/0x2b0 [ 1009.914200][ T5919] do_fast_syscall_32+0x34/0x80 [ 1009.919064][ T5919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1009.925657][ T5919] page last free pid 18523 tgid 18522 stack trace: [ 1009.932594][ T5919] __free_frozen_pages+0xbc4/0xd30 [ 1009.937802][ T5919] __slab_free+0x303/0x3c0 [ 1009.942314][ T5919] qlist_free_all+0x97/0x140 [ 1009.946924][ T5919] kasan_quarantine_reduce+0x148/0x160 [ 1009.952488][ T5919] __kasan_slab_alloc+0x22/0x80 [ 1009.957356][ T5919] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1009.962824][ T5919] audit_log_start+0x126/0x870 [ 1009.967688][ T5919] audit_seccomp+0x64/0x190 [ 1009.972190][ T5919] __seccomp_filter+0x17d0/0x1a40 [ 1009.977214][ T5919] syscall_trace_enter+0xaa/0x160 [ 1009.982247][ T5919] __do_fast_syscall_32+0x99/0x2b0 [ 1009.987638][ T5919] do_fast_syscall_32+0x34/0x80 [ 1009.992499][ T5919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1009.998850][ T5919] [ 1010.001189][ T5919] Memory state around the buggy address: [ 1010.006815][ T5919] ffff888064941780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1010.014976][ T5919] ffff888064941800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1010.023052][ T5919] >ffff888064941880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1010.031135][ T5919] ^ [ 1010.036298][ T5919] ffff888064941900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1010.044480][ T5919] ffff888064941980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1010.052545][ T5919] ================================================================== [ 1010.060691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1010.068143][T17410] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 1010.190498][T17410] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1010.210487][T17410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.253219][T17410] usb 2-1: Product: syz [ 1010.257606][T17410] usb 2-1: Manufacturer: syz [ 1010.263504][ T5919] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1010.270728][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1010.280273][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1010.290605][ T5919] Workqueue: usb_hub_wq hub_event [ 1010.295647][ T5919] Call Trace: [ 1010.298924][ T5919] [ 1010.301862][ T5919] dump_stack_lvl+0x99/0x250 [ 1010.306461][ T5919] ? __asan_memcpy+0x40/0x70 [ 1010.311229][ T5919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1010.316430][ T5919] ? __pfx__printk+0x10/0x10 [ 1010.321020][ T5919] vpanic+0x281/0x750 [ 1010.325005][ T5919] ? preempt_schedule+0xae/0xc0 [ 1010.329860][ T5919] ? __pfx_vpanic+0x10/0x10 [ 1010.334471][ T5919] ? preempt_schedule_common+0x83/0xd0 [ 1010.339930][ T5919] ? preempt_schedule+0xae/0xc0 [ 1010.344885][ T5919] ? __pfx_preempt_schedule+0x10/0x10 [ 1010.350437][ T5919] panic+0xb9/0xc0 [ 1010.354150][ T5919] ? __pfx_panic+0x10/0x10 [ 1010.358642][ T5919] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1010.364539][ T5919] ? hdm_disconnect+0x10d/0x1c0 [ 1010.369393][ T5919] check_panic_on_warn+0x89/0xb0 [ 1010.374352][ T5919] ? hdm_disconnect+0x10d/0x1c0 [ 1010.379200][ T5919] end_report+0x78/0x160 [ 1010.383531][ T5919] kasan_report+0x129/0x150 [ 1010.388033][ T5919] ? hdm_disconnect+0x10d/0x1c0 [ 1010.392896][ T5919] hdm_disconnect+0x10d/0x1c0 [ 1010.397744][ T5919] usb_unbind_interface+0x26e/0x910 [ 1010.403056][ T5919] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1010.408962][ T5919] device_release_driver_internal+0x4d9/0x800 [ 1010.415021][ T5919] bus_remove_device+0x34d/0x410 [ 1010.420387][ T5919] device_del+0x511/0x8e0 [ 1010.424712][ T5919] ? __pm_runtime_barrier+0x212/0x460 [ 1010.430075][ T5919] ? __pfx_device_del+0x10/0x10 [ 1010.434922][ T5919] ? __pfx___mutex_lock+0x10/0x10 [ 1010.439940][ T5919] usb_disable_device+0x3e9/0x8a0 [ 1010.444980][ T5919] usb_disconnect+0x330/0x950 [ 1010.449651][ T5919] hub_event+0x1cf5/0x4a20 [ 1010.454065][ T5919] ? do_raw_spin_lock+0x121/0x290 [ 1010.459133][ T5919] ? register_lock_class+0x51/0x320 [ 1010.464341][ T5919] ? __pfx_hub_event+0x10/0x10 [ 1010.469114][ T5919] ? process_scheduled_works+0x9ef/0x17b0 [ 1010.474929][ T5919] ? _raw_spin_unlock_irq+0x23/0x50 [ 1010.480344][ T5919] ? process_scheduled_works+0x9ef/0x17b0 [ 1010.486079][ T5919] ? process_scheduled_works+0x9ef/0x17b0 [ 1010.491888][ T5919] process_scheduled_works+0xae1/0x17b0 [ 1010.497527][ T5919] ? __pfx_process_scheduled_works+0x10/0x10 [ 1010.503527][ T5919] worker_thread+0x8a0/0xda0 [ 1010.508145][ T5919] kthread+0x70e/0x8a0 [ 1010.512297][ T5919] ? __pfx_worker_thread+0x10/0x10 [ 1010.517433][ T5919] ? __pfx_kthread+0x10/0x10 [ 1010.522032][ T5919] ? _raw_spin_unlock_irq+0x23/0x50 [ 1010.527243][ T5919] ? lockdep_hardirqs_on+0x9c/0x150 [ 1010.532550][ T5919] ? __pfx_kthread+0x10/0x10 [ 1010.537253][ T5919] ret_from_fork+0x3f9/0x770 [ 1010.542054][ T5919] ? __pfx_ret_from_fork+0x10/0x10 [ 1010.547162][ T5919] ? __switch_to_asm+0x39/0x70 [ 1010.552010][ T5919] ? __switch_to_asm+0x33/0x70 [ 1010.556767][ T5919] ? __pfx_kthread+0x10/0x10 [ 1010.561443][ T5919] ret_from_fork_asm+0x1a/0x30 [ 1010.566207][ T5919] [ 1010.569625][ T5919] Kernel Offset: disabled [ 1010.574052][ T5919] Rebooting in 86400 seconds..