last executing test programs: 2m42.038771974s ago: executing program 0 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a300000000005000100070000000800094000"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 2m41.829020789s ago: executing program 0 (id=686): write$snddsp(0xffffffffffffffff, &(0x7f0000000440)="726ae2c3a2123e4c5d70e9348897cf7f8f1d67f25d289736df28b935fec2e884450e89395ba301af2ed105ce86781cce15cc40bdb6d1a3b9e2d9b35c55b11c487a8cbe39c043e8df81e58d4a779be7fac2db28afca6bb74eb421cc70486cb932a38c6df66c79310d9e2d52b8c9930f77ee1886ae63ac3ef2fccb3a86aa22cd269a36d7eeff2010987f366512ab2ed465850add735aa12df5994413df281950af3c1492163877730e0853fdc68f0a5ec568559fefec7a15fc3a1a355410a8f28e52c604cf32b7bbb4ab0672", 0xcb) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x8, 0x40) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a}) syz_usb_connect$midi(0x0, 0x7e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0xbf, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xf, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x2, 0x2, [{0x4e, 0xfc}, {0x1, 0x73}], 0x4}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0x0, 0x1}, {0x6, 0x5}], 0x1f}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xfffa, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xfe, 0x71}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x8, 0x1, 0xb, {0x9, 0x25, 0x1, 0x5, "ed03d4aa10"}}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x4, 0x8, 0x1, {0x8, 0x25, 0x1, 0x4, "708b0a2f"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0xe, 0x0, 0xff, 0x8}, 0x41, &(0x7f0000000100)={0x5, 0xf, 0x41, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "881ec305d5b231f49e177ccdbae256f2"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "0aa1d980aea9701defb5fbb45901e509"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7fffffd, 0xf00, 0x1, [0xff000f, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x459}}, {0x56, &(0x7f0000000280)=@string={0x56, 0x3, "288f1084a060213dc0b526d308945aaa5ac0c3550399d4351c2783e2414dd0fc13b1e9b5b6d132e3dfaa9cb380f864ecddaacfa7b21d40eee2f6ecf2872e0d5fa890bb6b4479d330ab978abdad2e76d18d24b9b2"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$snddsp(0xffffffffffffffff, &(0x7f0000000440)="726ae2c3a2123e4c5d70e9348897cf7f8f1d67f25d289736df28b935fec2e884450e89395ba301af2ed105ce86781cce15cc40bdb6d1a3b9e2d9b35c55b11c487a8cbe39c043e8df81e58d4a779be7fac2db28afca6bb74eb421cc70486cb932a38c6df66c79310d9e2d52b8c9930f77ee1886ae63ac3ef2fccb3a86aa22cd269a36d7eeff2010987f366512ab2ed465850add735aa12df5994413df281950af3c1492163877730e0853fdc68f0a5ec568559fefec7a15fc3a1a355410a8f28e52c604cf32b7bbb4ab0672", 0xcb) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x8, 0x40) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) (async) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000300)=ANY=[@ANYBLOB="120110030000001082057d030109026b000301f140020904000000010100000a2401c0ff0a000201020904010000010200000904010101010200000b2402010b0402012b601e09050109400003810407250104fe00000904020000010200000904020101010200000905820940007f08ad07250100000600639fcbf856b70b514c8ecb70cb958a1d2e019fa7d741bfc9ea92f03d4a1927929f1fac4874ab6fd5f8a28e4540d5d4dea30000000000e8f414a32b2334cb74147b846ffe28713de4730c320a7281e13d49cfcc61f8b8bf74e4559a0248487165aa7f8b333ce78abf158d1373790a26d26ee332218add0595a034bd36cbdd5f67a2cd3a5632faa2e22f24af373168a1f3"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a}) (async) syz_usb_connect$midi(0x0, 0x7e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0xbf, 0x40, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xf, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x2, 0x2, [{0x4e, 0xfc}, {0x1, 0x73}], 0x4}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0x0, 0x1}, {0x6, 0x5}], 0x1f}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xfffa, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xfe, 0x71}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x8, 0x1, 0xb, {0x9, 0x25, 0x1, 0x5, "ed03d4aa10"}}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x4, 0x8, 0x1, {0x8, 0x25, 0x1, 0x4, "708b0a2f"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x7, 0xe, 0x0, 0xff, 0x8}, 0x41, &(0x7f0000000100)={0x5, 0xf, 0x41, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "881ec305d5b231f49e177ccdbae256f2"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "0aa1d980aea9701defb5fbb45901e509"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7fffffd, 0xf00, 0x1, [0xff000f, 0xff0000]}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x459}}, {0x56, &(0x7f0000000280)=@string={0x56, 0x3, "288f1084a060213dc0b526d308945aaa5ac0c3550399d4351c2783e2414dd0fc13b1e9b5b6d132e3dfaa9cb380f864ecddaacfa7b21d40eee2f6ecf2872e0d5fa890bb6b4479d330ab978abdad2e76d18d24b9b2"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}]}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) 2m38.596935616s ago: executing program 0 (id=703): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x800, 0x1, 0xf, 0x0, {0xfffffffffffffffd, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x6a9f0190c8d7f4e7}}}, 0x0, 0x0}) ioctl$TCSBRKP(r1, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) (async) r6 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) 2m38.391623599s ago: executing program 0 (id=705): openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x400a00}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a80), 0x0, 0x0, 0x77, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'tunl0\x00', 0x0}) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r4, 0x1}}, 0x18) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x2, 0xaa, 0xfa11, 0xffffffff}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r5) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000400)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2m36.855313205s ago: executing program 0 (id=711): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0xf, 0x1b, {0x1b, 0xc, "a175eec94dc77550713cd180a8565fd2fbfd26f59cf5cf5c65"}}, &(0x7f0000000480)={0x0, 0x3, 0x68, @string={0x68, 0x3, "4532062ac82f2d69706b18f1af840ded3795a43c13c1566a57ba567b4084edfcd61fe832ac1eed9386fd3ef4ce622d4c83411b95cd22bc6f2fb32627c19cbdd47d4cbc2303e718c15af382b8b309bddf301f4d207bed1bc36c4d351644dfb1dc2f494ddde4b1"}}}, &(0x7f0000000440)={0x2c, &(0x7f00000000c0)={0x20, 0x5, 0x4c, "c3b460bcfc681ec1047f896352597d6bb4738700c42595574d2561d8875780f28c857903b500eba45ad9073745a7486b0fc8c5428363f96a978dc63a8c1c5813677519d302dab7db37fb9556"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x64}, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000200)={0xc0, 0x5, 0x4, "b4dd5000"}, &(0x7f0000000400)={0x40, 0x5, 0x6, "a99e2908cbfa"}}) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0006280000002831f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc2c5b54b4436"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m35.464910882s ago: executing program 3 (id=716): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x100) (async, rerun: 32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r2, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async, rerun: 64) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f0000000280)={&(0x7f0000000200)}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) (async) r4 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x6}, 0xb6}}}, 0x7) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffff, r5, 0x0}]) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb0f, 0xda, &(0x7f0000000080)) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) (async) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r9) 2m35.359838997s ago: executing program 3 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x59}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe1, 0x8}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x811) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m34.869134945s ago: executing program 3 (id=720): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x84c) 2m33.67689963s ago: executing program 0 (id=723): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x5c) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_macvtap\x00', &(0x7f0000000640)=@ethtool_rx_ntuple={0x35, {0xd, @esp_ip4_spec={@empty, @private=0xa010100, 0x80000001, 0x2}, @usr_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x30}, 0x2400, 0xf7, 0x1, 0x2}, 0x1000, 0x0, 0x1200000000000000, 0x6, 0xfffffffffffffffe}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206030000000000020073797a310000000005000100070000000500050002000000050004000000000011000300686173683a6e65742c6e657400"/76], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) userfaultfd(0x800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x2, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r4], 0x50) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xdff, 0x3f, 0x0, 0xffffffff, 0x0}) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) 2m33.198439591s ago: executing program 3 (id=725): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0xc480, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x9, 0x81, 0x7, 0x2}}}}]}, 0x48}}, 0xc0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) close(0x3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) 2m32.927520976s ago: executing program 3 (id=726): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c670000000004000000030000000005f2250dbb08444b", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb0000000103915300020000"], 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x10, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r6, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0xa, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect(r4, &(0x7f0000000200)=@ax25={{0x3, @default, 0x8}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80) r7 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r7, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1f, 0x0, 0x4, 0x8) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) 2m31.095442905s ago: executing program 3 (id=730): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x994, 0x800) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x3012}}) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="18", 0x1}, 0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e00000080600"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r7, &(0x7f00000001c0)=""/4068, 0xfe4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r9, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x0, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.544135211s ago: executing program 32 (id=723): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0x5c) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_macvtap\x00', &(0x7f0000000640)=@ethtool_rx_ntuple={0x35, {0xd, @esp_ip4_spec={@empty, @private=0xa010100, 0x80000001, 0x2}, @usr_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x30}, 0x2400, 0xf7, 0x1, 0x2}, 0x1000, 0x0, 0x1200000000000000, 0x6, 0xfffffffffffffffe}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206030000000000020073797a310000000005000100070000000500050002000000050004000000000011000300686173683a6e65742c6e657400"/76], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) userfaultfd(0x800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x2, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r4], 0x50) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0xdff, 0x3f, 0x0, 0xffffffff, 0x0}) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) 2m16.012327537s ago: executing program 33 (id=730): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x994, 0x800) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x3012}}) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="18", 0x1}, 0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e00000080600"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r7, &(0x7f00000001c0)=""/4068, 0xfe4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r9, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x0, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.885578123s ago: executing program 2 (id=1308): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x6) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) close(r2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) 9.762302592s ago: executing program 2 (id=1321): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0xc480, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x9, 0x81, 0x7, 0x2}}}}]}, 0x48}}, 0xc0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) close(0x3) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) 9.586427659s ago: executing program 2 (id=1323): socket(0x14, 0x2, 0x3a) r0 = open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000021c0)}) r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = io_uring_setup(0x2e28, &(0x7f0000002300)={0x0, 0x1e28, 0x4000, 0xfffffffd, 0x28e}) flock(r0, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) syz_io_uring_setup(0x6b6a, &(0x7f00000021c0)={0x0, 0xba72, 0x2000, 0x0, 0x308, 0x0, r4}, &(0x7f0000002400), &(0x7f0000002380)=0x0, &(0x7f00000023c0)) syz_io_uring_complete(0x0, r6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\x03\x00\x00\x00\x00\x00\x00\x00\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r7, @ANYRES32], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x7fff, 0xf3, 0x2, 0x19, 0x8, 0x6, 0x8, 0x7fff, 0x3f, 0x31, {0x0, 0x7}, 0x3, 0xed}}) 8.83343845s ago: executing program 4 (id=1325): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) userfaultfd(0x80801) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) getsockopt(r0, 0x7, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) fanotify_init(0x200, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@remote, @private=0xa010101, 0x2, 0x11}}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x40020, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfa9f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0xc00}}]}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r5, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 6.745085402s ago: executing program 4 (id=1330): socketpair$unix(0x1, 0xf7ddabe4e6dda, 0x0, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) close(0x3) r1 = socket$inet(0x2, 0x6, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000380)="b805000000b9df0000000f01d90f33f42ef6470f01dfdfbaf80cb814aa7d83ef66bafc0cb081ee66b8970066410f38017b00460f001d5e1a7f960f20d8ad080000000f22d82664420f06b9800000da0f3235008000000f30", 0x5b}], 0xaaaaaaaaaaaacd2, 0x32e58d89aca06e8f, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_MCE_KILL(0x23, 0x52368b9646fd642e, 0x110c230000) userfaultfd(0x1) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/116}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r8, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/123, 0x7b}], 0x1) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r7, 0x0, 0x1002) 6.005290761s ago: executing program 2 (id=1331): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001040)={&(0x7f0000000040)=[0x400, 0x6, 0x6, 0x5, 0x0, 0x3, 0x9, 0x6, 0x4, 0x1, 0xda8, 0xb, 0xfffffffe, 0x4, 0x22, 0x4, 0x10, 0x7, 0x2, 0x7, 0x6, 0x2, 0x3, 0x9, 0x2, 0x2755, 0x2, 0x2, 0x37, 0x9, 0x4, 0x6, 0x8, 0x0, 0x7, 0x0, 0x7, 0xdd, 0x0, 0x5, 0x1000, 0xfffffff7, 0x3, 0x8, 0x3, 0x2, 0x9d, 0x506bba0, 0x3, 0x1ff, 0x692, 0x22, 0x1ff, 0xe95, 0x8, 0x7ff, 0x62e, 0x40, 0x4, 0x713, 0x6, 0x400, 0x1, 0x68, 0x80000000, 0x829c, 0x2, 0x8001, 0x2, 0x3ff, 0x9, 0x0, 0xc0, 0x8, 0x1ff, 0x7, 0x6, 0x40, 0xfffffbdc, 0xffff6c18, 0x5, 0x4, 0x4, 0x6, 0x6, 0xa, 0xffffffff, 0xd, 0x5, 0xf51, 0x3, 0x0, 0x2, 0xe4a, 0x9, 0x9, 0x9, 0x6b13319f, 0x2, 0x2, 0x10000, 0x1, 0xfffffffb, 0x4, 0xfffffffd, 0x7, 0x8, 0x7, 0xd8b, 0x10001, 0x6, 0x10000, 0x3, 0xb3a, 0xe968, 0x2a, 0x7f, 0x0, 0x1, 0x3, 0x10000, 0xda7, 0xa2, 0xd, 0x9, 0x2, 0x400, 0x7, 0x9, 0xfffffffb, 0x8000, 0x5, 0x30, 0x7, 0x100, 0x831, 0x75d, 0xffff, 0x7f, 0x2, 0x4, 0xebf, 0x6, 0xfffffe01, 0x0, 0x7, 0x9, 0x2e, 0x9, 0x3ff, 0x2a3, 0x7, 0x400, 0x0, 0x10000, 0x4, 0xfffff001, 0x8, 0xb0c6, 0x5, 0x6, 0x6df, 0x6, 0x3, 0x101, 0x1, 0x6, 0x10001, 0x8, 0x8, 0x0, 0x4, 0x24ca, 0x3, 0x8, 0x1, 0x1, 0x94, 0x1, 0x9f, 0x4, 0x1, 0x5, 0x6, 0xc, 0x7fffffff, 0x9d2, 0x7, 0x7, 0x1, 0x6, 0x8283, 0x5, 0x4, 0x2, 0x7, 0x64, 0xd, 0xfffffffd, 0x7, 0xed51, 0x8, 0x2, 0x0, 0x9, 0xb83, 0x94, 0x1ff, 0x8, 0x7ff, 0x4, 0xe2, 0x9, 0x81, 0xffffffff, 0x7, 0x1, 0x5, 0x8001, 0xb1, 0x0, 0x8, 0x0, 0x7, 0x7, 0x40, 0x401, 0x5, 0x4, 0xac000000, 0x80, 0x0, 0x0, 0x3, 0x3, 0x1, 0x8, 0x90, 0x47000000, 0x9, 0xe, 0x7, 0x2, 0x5, 0x7f, 0x80, 0x24000000, 0x2, 0x9cf, 0x6, 0xb, 0x8, 0x10, 0x4, 0x1, 0xffff, 0xbe, 0x2ec7e5f4, 0x8, 0x2, 0xf, 0x5, 0x4, 0x0, 0xea, 0x9, 0x7c6, 0x3, 0x3, 0x4, 0x6, 0x7, 0x9, 0x8, 0x4, 0xfffffe01, 0x4, 0x7, 0x80000001, 0x0, 0x1, 0x9, 0x3, 0x1, 0x4d6b, 0x0, 0xfffffffd, 0x10001, 0x5, 0x7f, 0x2, 0x3ff, 0x8001, 0x1, 0xff, 0x1, 0x0, 0x7, 0x4, 0x5, 0x3, 0xfffffff9, 0xc, 0x90d, 0x0, 0x7, 0x7, 0x2000000, 0x6, 0x2, 0x8, 0x5b, 0x9, 0x5, 0xa82a, 0x7, 0x0, 0x9, 0x2, 0xc, 0x7ff, 0x9, 0x1, 0x5, 0xa, 0x4, 0xb, 0x0, 0xfffffffc, 0x9, 0xa, 0x8001, 0x3, 0x4, 0x80000001, 0x4, 0x0, 0x63e, 0x1, 0x87c, 0x1, 0x4, 0x2a, 0x1, 0xfffffff8, 0xd, 0x7fff, 0x67, 0xf8, 0x1, 0x1, 0x47, 0x1, 0x3, 0x71, 0x3, 0xbaf, 0x9, 0x9, 0x7, 0xffff, 0x1, 0x9, 0x6, 0x200, 0x0, 0x3, 0x1, 0x7, 0x1, 0xffffffff, 0x7, 0x5, 0x9000000, 0xff, 0x1, 0xffff0000, 0x1, 0x40, 0x727f, 0x0, 0x1, 0x2, 0xc, 0x100, 0x9, 0x1, 0xfffff3e8, 0xffff, 0x6, 0x1, 0xcf, 0x0, 0xb, 0x306, 0x9, 0x1, 0x6, 0x3, 0x9, 0x6, 0x1, 0xfff, 0x1, 0xf76, 0x0, 0xf, 0x1, 0x7a4f, 0x7fffffff, 0x5, 0x80000000, 0x2, 0x3ff, 0x2, 0x3a39, 0x3, 0x3e, 0x100, 0x4, 0x65d, 0x1, 0x0, 0x80, 0x400, 0x7, 0x3, 0x101, 0x7, 0x0, 0x890, 0x10, 0xff, 0x1, 0x401, 0x7, 0x400, 0x3, 0x3, 0x8cd, 0x3, 0x5, 0x7, 0x6, 0x40, 0x0, 0x0, 0x3c, 0x1, 0x7fff, 0x8, 0x4, 0x2, 0x5, 0x9, 0x5, 0xc7dd, 0x6, 0x2, 0xfffffffa, 0xc, 0xfffffffe, 0x1213, 0x9, 0x12, 0x9, 0x1, 0x8, 0x2, 0x80000000, 0xefdb, 0x7ff, 0xeaf, 0x8, 0xffff, 0x4, 0xc8, 0x4, 0xf3, 0xf, 0x10, 0x4, 0xffffffff, 0xff, 0xf, 0x6, 0x51b2, 0x3, 0x7, 0x9, 0x200, 0x0, 0x8, 0x40, 0x6e6e, 0x2, 0x2, 0x7, 0x7, 0x2, 0x8, 0x3, 0x7fffffff, 0x7, 0x6, 0x0, 0x6, 0xfffffff9, 0x1, 0x0, 0x9213, 0x5, 0x9, 0x7c80, 0x134, 0x5, 0xfffffffa, 0x80000001, 0x2, 0x1, 0x4, 0x3, 0x800, 0x3, 0xfffffe01, 0xff, 0x3, 0x1000, 0x8, 0x400, 0x2, 0x9, 0x6, 0x10, 0x5, 0x3, 0x1, 0x1, 0x728, 0x51, 0x1, 0xf015, 0x1, 0x8, 0x4, 0x80000001, 0x2, 0x7, 0x9, 0x6, 0x40, 0x3ff, 0x0, 0x727, 0x6, 0x6, 0x2, 0x3, 0x3, 0xffffffa1, 0x8, 0x4, 0x9, 0x7, 0x4, 0x3, 0x5, 0x8, 0x3, 0xffffff5e, 0xa7e8, 0x400000, 0x9, 0x0, 0x65, 0x9, 0x2, 0xfffffffb, 0xdf6, 0x7, 0x1, 0x53, 0x800, 0xd8, 0xfffffff5, 0x0, 0x1, 0x1, 0xaa, 0xac, 0x1, 0x2, 0xfffffff8, 0x3, 0x8923, 0x1, 0x400, 0x101, 0x81, 0x0, 0x5, 0x9c8, 0x9, 0x200, 0x9, 0xffffffff, 0x5, 0x5, 0x5, 0x7, 0xc, 0x4, 0x7fffffff, 0x9, 0x7ff, 0x8, 0xb7fe, 0x15, 0x5, 0x100, 0x6, 0x7, 0x3, 0x1, 0x58, 0xd9, 0x1, 0xa0, 0x55, 0x1, 0x9, 0xdf1a, 0x5, 0x9, 0xa45, 0x99c, 0x125b, 0x10001, 0x8000, 0x5, 0x0, 0x56, 0x1, 0xc, 0x6, 0xd4, 0xe, 0x7, 0xd, 0xff, 0x36e8, 0x8, 0x2, 0x6, 0x80000000, 0x10001, 0xfff, 0x2, 0x5, 0x5, 0xffffffff, 0x590, 0x2, 0x80000000, 0x2, 0x3, 0x8a000000, 0x101, 0x8, 0x1, 0x91, 0x7, 0x7, 0xffff, 0x3, 0xfffffff8, 0x5, 0x7fff, 0x879f, 0x8, 0x8, 0x2, 0x2, 0x8, 0x6, 0x8, 0x3, 0x9, 0x90, 0x8, 0xffff, 0xfffffff7, 0x4, 0x7fffffff, 0x7, 0x4, 0x7, 0x4, 0x400, 0x0, 0xab, 0x0, 0x81, 0x80000001, 0x6, 0xd, 0xd, 0x7fffffff, 0xffffff84, 0xd023000, 0xdb8, 0x7, 0x7, 0xfffffffc, 0x80000001, 0x7, 0xbf63, 0x8, 0x5, 0x6, 0x2, 0xd72f, 0xbd1, 0x81, 0x1000, 0x5, 0x252, 0x7, 0xd, 0x1, 0x0, 0x8000, 0x1, 0x0, 0x3, 0x1, 0x6, 0x6, 0xffff, 0x0, 0x0, 0x81, 0x3, 0x3, 0x1, 0xffffff00, 0x3, 0xffffffff, 0xcfcc, 0x4, 0x4, 0x4, 0x6d02, 0x3, 0x7fff, 0x502dde87, 0xff, 0xfffffff8, 0x8, 0x2, 0x2, 0xef, 0x9, 0x9, 0x2, 0x7, 0x7, 0x5, 0x8, 0x200, 0xd, 0x1, 0xf34, 0xd6, 0x0, 0xfffffff6, 0x1, 0x9, 0x6, 0x80000000, 0x7, 0x5, 0x4, 0x8001, 0x401, 0x80, 0xaa, 0xfffffffb, 0x1, 0x10000, 0xa94, 0xfff, 0x6, 0x2, 0x1, 0x4, 0x9, 0x8001, 0xffffffff, 0x0, 0x4, 0x5, 0xdb4, 0x2, 0x2b8b1419, 0xbbe, 0xc, 0x0, 0x16, 0x6, 0x0, 0x5, 0x8, 0xd, 0x7, 0x7, 0x1, 0xdb, 0x100, 0x7, 0x9, 0x10000, 0x7f, 0x6, 0x4e, 0x0, 0x7, 0x2, 0x6, 0xff, 0x621, 0x7, 0xfffffffd, 0x2, 0x3, 0x9, 0x4, 0x5, 0x6, 0x7, 0x9, 0x9, 0x0, 0x5, 0x380000, 0x99d4, 0x8, 0x9, 0x3, 0x2, 0x6, 0x7, 0x7, 0x2, 0x81, 0x9, 0x1, 0x8e, 0x10000, 0xfffffffb, 0x80, 0xc, 0x1, 0x9, 0x0, 0x8, 0x5, 0x5, 0x2, 0x5, 0x800, 0x53d9, 0x8, 0x1, 0x7, 0x1, 0x8, 0x400, 0x7, 0x0, 0x3, 0x0, 0x80000000, 0xfffffc00, 0xfff, 0x8, 0x3, 0x0, 0x8, 0x0, 0x7c, 0x1000, 0x5, 0x5, 0x401, 0xc83a, 0x3, 0x6, 0x5f2f, 0x5, 0x1, 0xfffffffc, 0x3, 0x1, 0x4, 0xf6a8, 0x2, 0x0, 0xfffffff9, 0x3, 0x2cb, 0x1b2, 0xc2d9, 0x499ad3dd, 0x8b2f, 0x0, 0x2, 0x6, 0x6, 0x7, 0x2f, 0x53a, 0x501, 0x3, 0x5, 0x5a, 0x4, 0x7, 0x9e0f, 0x6, 0x3, 0x5, 0x2, 0x3, 0xd, 0xa0, 0x3, 0x4, 0x5, 0x16f, 0x1, 0x10000, 0x0, 0xfc95, 0x1, 0xe69f, 0x1, 0xd6, 0xdf3b, 0x5, 0x4, 0xa, 0x8, 0x6, 0xfffffffc, 0x3, 0x80000000, 0x1, 0x6, 0x10000000, 0x0, 0x4, 0x2f6a, 0xb, 0x5, 0x3, 0xf, 0xfffffffa, 0x2, 0x8001, 0x8, 0x9, 0x2, 0xc2b, 0x1, 0x900, 0x8, 0x200, 0x1, 0x31, 0x1000, 0x10001, 0x6, 0x0, 0x7ff, 0x9, 0x5, 0x0, 0xdf74, 0x2, 0x9, 0x4, 0xfffffffb, 0x6, 0x4, 0x4, 0x7da, 0x6024, 0x400, 0x5, 0x6, 0x6, 0x800, 0x1000, 0x800, 0x9, 0x9, 0x4, 0x3, 0xea9, 0x9, 0xe01, 0x3ff, 0x100, 0x10000, 0x1, 0x4800000, 0x3, 0x7da, 0x9, 0x3, 0x1], 0x4, 0x400, 0xfffffffa}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x6, &(0x7f0000001080)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f00000010c0)) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000001180)={&(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000012c0)={0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000001340)={0x7, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000013c0)={&(0x7f0000001380)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000001500)={&(0x7f0000001440)="b45fd274ef89d2078ce3a5444abdd8a57768f6d577de301cef089214725b36f7d6d222a082fee1859a60e36d05a55164790e57df2494907dbeb691ede0eb08e4f4041de1f38e0f77f797cb13b1a5411eafbf446052fe75a187c02080cabe2e464e0ba684a05cd220bc8388b6ad11b205e262e8be67befe62c103a1198f2c8f2726a32f4fc2fe46a2d57dfd7c598a92dde57cd6dd9bd99ba1941140c257", 0x9d, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000015c0)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001700)={&(0x7f0000001680)=[0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001880)={&(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[{}], &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001a80)={&(0x7f0000001900)=[0x0, 0x0, 0x0], &(0x7f0000001940)=[{}, {}], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0], 0x2, 0x6, 0x3}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001b80)={&(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xe0e0e0e0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001ec0)={&(0x7f0000001bc0)=[0x0], &(0x7f0000001c00)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001e40)=[0x0, 0x0], &(0x7f0000001e80)=[0x0], 0x8, 0x2, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000002080)={&(0x7f0000001f40)=[0x0], &(0x7f0000001f80)=[{}], &(0x7f0000002000)=[0x0], &(0x7f0000002040)=[0x0], 0x1, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000002180)={0x200, 0x8, &(0x7f0000001600)=[r2, r3, r4, r5, r6, r7, r8, r9], &(0x7f0000001640)=[0x2, 0x9, 0x5, 0x9, 0x2], &(0x7f0000002100)=[0x0, r10, r11, r12, r13, r14, r15], &(0x7f0000002140)=[0x5, 0x7fff, 0x100000000, 0x7ff], 0x0, 0x4}) (async) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000021c0)=""/43) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000002200)={0x100, r0, 'id1\x00'}) bind$inet6(r16, &(0x7f0000002280)={0xa, 0x4e20, 0x8, @mcast1, 0xfffffffb}, 0x1c) (async) syz_emit_ethernet(0x8e, &(0x7f00000022c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "d7", "c5fe80", 0x8100, "f7aa499bc176c796122f41356b85518d43e9982d51125d833d0c5bb06d7d8cccf794b5412c83857a22135894a2241ffae6a22be8242a14425f1e9c5b537f8bc6ca4a928d8b7c8531935ef0939000f9ab1311fc6acf116f325ff0ece31561441019cddec4a38c447e17372e12dfa7f479"}}}}}, &(0x7f0000002380)={0x0, 0x4, [0xed5, 0xfd, 0x107, 0xdcd]}) (async) eventfd2(0x10, 0x81000) (async) fsetxattr(r0, &(0x7f00000023c0)=@known='security.apparmor\x00', &(0x7f0000002400)='-\x00', 0x2, 0x1) (async, rerun: 64) ioctl$TCXONC(r0, 0x540a, 0x3) (async, rerun: 64) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002440)=0x0) process_vm_readv(r17, &(0x7f0000002500)=[{&(0x7f0000002480)=""/74, 0x4a}], 0x1, &(0x7f0000002600)=[{&(0x7f0000002540)=""/14, 0xe}, {&(0x7f0000002580)}, {&(0x7f00000025c0)=""/48, 0x30}], 0x3, 0x0) fremovexattr(r0, &(0x7f0000002640)=@random={'osx.', '\x00'}) 4.727494478s ago: executing program 1 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @broadcast}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) 4.698631822s ago: executing program 4 (id=1336): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, 0x8) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="00220f000000540b8a50f8209501758483"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r8, 0x7}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r10, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, 0x0) 4.346633242s ago: executing program 1 (id=1338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000160000008500000083000000bf0900000000007b55090100000000008900000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.18809862s ago: executing program 1 (id=1339): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r7 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r7, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r1, 0x9dc0d000) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x4103, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x33ccc}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x101c, 0xffffffffffffffff, 0x0, 0x0}) 3.70505677s ago: executing program 2 (id=1340): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002000400baacfb276a25ebe4d93aac0d19979f7212adafdb410a3298736a09f57af39f8ec0f6606712e9c849dd3ea40ae50999d3270a627578f296ba8fc3aec66edce39d03acf3616afad8b0"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110011837fb106d0481c2da5c010203012402"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@ipv6_newrule={0x58, 0x20, 0x1, 0x2000, 0x25dfdbf6, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'netdevsim0\x00'}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xc8}}, 0x0) 2.753613105s ago: executing program 5 (id=1344): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0xc480, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x9, 0x81, 0x7, 0x2}}}}]}, 0x48}}, 0xc0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) close(0x3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) 2.58911526s ago: executing program 5 (id=1345): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x0, 0x3, 0x2}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 2.438712438s ago: executing program 1 (id=1346): timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f", 0x99, 0xfffffffffffffffe) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "0a2abebee0a06865543b9a0c12c5db022e19dd0473964b02c05f90ca5412b684841d9a832b89172f873e550f48af1defeda2b397a337abb207cb1e98d6466c63", 0x1c}, 0x48, 0xfffffffffffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x2, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x8, 0x5, 0x109, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbc, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0xffff30a5, 0xfffffff5, 0x405, 0x4, 0x81, 0x7ff, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x2, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc68, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x809, 0x4, 0xa7, 0x8, 0x0, 0x200b398, 0x400080, 0x1, 0x2, 0x1c, 0x7, 0x1, 0xffff8001, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x8ae6, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffff00, 0x1cb, 0x0, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x20000095, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e51, 0x4005, 0xd3, 0x8, 0x4097f7, 0x3, 0xc, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x8, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x31be16df, 0x6, 0xfffc, 0xfffffffd, 0x5, 0x1], [0xa776, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x18, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0xc, 0x140f2, 0x5396, 0x3, 0x80000001, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x110009, 0xc, 0x3, 0x3, 0x200, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x4, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0xfffffffffffffcbb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) writev(r5, &(0x7f0000000340), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) keyctl$search(0xa, r0, &(0x7f00000000c0)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x2}, r1) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r9, 0x8004587d, &(0x7f0000000000)=0x4e) 2.301677156s ago: executing program 5 (id=1347): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/../file0/file0/file0\x00', r1, &(0x7f0000000140)='./file0\x00') unlinkat(r1, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) 2.245553662s ago: executing program 1 (id=1348): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09"], 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1, 0x0, 0x1800}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) munlock(&(0x7f00002d9000/0x1000)=nil, 0x1000) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x1e, 0x4, "b9b04712"}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x7, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.221277188s ago: executing program 5 (id=1349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x3e, 0x2ef4, 0x3d6, 0x40, 0x0, 0x0, 0x8000, 0x38, 0x1, 0xfffe, 0x12, 0xed86}, [{0x3, 0x5, 0x8, 0xd, 0x1, 0xe5, 0x10000000003, 0x450c}]}, 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bc2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.044427934s ago: executing program 4 (id=1350): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x33c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x808001, 0x0, 0x7, 0x0, 0xfffffe0000000005, 0x9, 0xfff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000c11", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf2503000000050002000a000000060001004e230000"], 0x24}}, 0x800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00', 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r6, &(0x7f0000000300)=""/56, 0x38) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={r8, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x3, 0x1, 0x5, 0x0, {{0x15, 0x4, 0x0, 0x8, 0x54, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x4, [{@broadcast}, {@local}, {@remote, 0x91}, {@multicast2, 0xeb12}, {@multicast1, 0x1}, {@empty, 0x2}, {@loopback, 0x200}]}, @rr={0x7, 0x3, 0x4f}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000000000000000000000097d000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES8=r8, @ANYRESDEC], 0x34}}, 0x24048180) 1.900809883s ago: executing program 5 (id=1351): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r7 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r7, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r1, 0x9dc0d000) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x4103, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x33ccc}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x101c, 0xffffffffffffffff, 0x0, 0x0}) 1.790677061s ago: executing program 6 (id=1352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) migrate_pages(0x0, 0x100000000000, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYBLOB, @ANYBLOB], 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x7) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r4, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000003, 0x3, 0x5, 0x41, 0x40000000000007, 0x4000000000000000, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x2, 0x9, 0x4, 0x4], 0x10000, 0x202}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000002c0)={0xd, 0xaa2, &(0x7f0000000040)="6626f2f7ae104b", 0x0, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.285189308s ago: executing program 6 (id=1353): sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "0097683d856f1ea0e8ae7a8600", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0ff00", "0000efffffffffffbfff00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x63, 0xfffffffffffffff7, 0x2, 0x3, 0x2, 0x6, "0b0909d70c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, &(0x7f00000000c0)=""/70, &(0x7f0000000240)=0x46) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) recvfrom(r5, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r3, 0x8002}], 0x1, 0x0, 0x0, 0x0) r6 = dup2(r2, r3) fcntl$setown(r6, 0x8, r0) tkill(r0, 0x13) 1.094085624s ago: executing program 6 (id=1354): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) (async) prlimit64(0x0, 0x4, &(0x7f0000000180)={0x20000008000002, 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = userfaultfd(0x801) (async) r3 = getpid() (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000002200)) (async) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000040)=@mmap={0x9, 0x1, 0x4, 0x0, 0x2e, {}, {0x2, 0x2, 0x4, 0x6, 0x26, 0xc4, "f33261f4"}, 0xd, 0x1, {}, 0xfffffffb}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000002900)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r5, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) 911.748286ms ago: executing program 6 (id=1355): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0xc480, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x9, 0x81, 0x7, 0x2}}}}]}, 0x48}}, 0xc0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) close(0x3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) 825.117274ms ago: executing program 2 (id=1356): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @tick=0x1, {0x10, 0x49}, {0xe}, @result={0x6, 0x5}}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x7fffffff, 0x36, 0x0, 0x11}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000ffff7f000001ac1414aa0000000000000000000000000000000000040000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000146c0000000000001400000000000000000000000000000000000000007f000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000000000000000000006000000000000000010000000000000fdffffffffff"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x50c0) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x1000, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x40000}, {}, 0x0, 0x6e6bbe, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYBLOB="000828bd7000fbdbdf250f0000000400038048000180060004004e23000008000800925c0000060002002b0000000c00070020000000020000000600020016000000060002002f00000007000600666f000008000600776c6300080006000600000014000300000000050008020700000008000600b06e5689e448de8c7947769f646600000000"], 0x84}, 0x1, 0x0, 0x0, 0x892}, 0x4) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 701.017362ms ago: executing program 6 (id=1357): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f00000002c0)="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", 0x200, 0x200}]) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xffffffffffdffffa, 0xa, 0x3) lseek(r2, 0x1000004, 0x0) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r3, @ANYBLOB="010044bd7000ffffffff3900000008000300", @ANYRES32=r4, @ANYBLOB="20005a801c0001800500070001000000050006"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) (async) io_setup(0x222, &(0x7f0000000180)) (async) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f00000002c0)="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", 0x200, 0x200}]) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xffffffffffdffffa, 0xa, 0x3) (async) lseek(r2, 0x1000004, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r3) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r3, @ANYBLOB="010044bd7000ffffffff3900000008000300", @ANYRES32=r4, @ANYBLOB="20005a801c0001800500070001000000050006"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 318.804159ms ago: executing program 4 (id=1358): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000080)={0xfffffffd, 0xce, 0x28b, 0x4, 0x18, 0x8000000000000001}) (async) r1 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="230065ec4b0b"]) fcntl$notify(r1, 0x402, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) r5 = gettid() (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) sendmmsg$unix(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}}], 0x1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r2, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000c00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x10, 0x0, 0x0, 0x2, 0x2c}, @fda={0x66646185, 0x0, 0x0, 0x1f}, @fda={0x66646185, 0x3, 0x1, 0x800000000000000}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) (async) setrlimit(0x7, &(0x7f0000000300)={0x2, 0x7fffffc0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="444aef551c0ba3c7fb2a2eba57ceb82c16bd3e8158acd92d1f1a29d8777c63e3dfe38d5adfcd7b1aa5ac3d2d4ad374eff95c7cf9256afb1ba243186526173d48da4560014857d1ed3c3483cbd737de2cb7b803af0306d72ebaf8da991224c710a5d1168642bed523d9f585fa7e0f00"/120, @ANYRES16=r12, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r14, @ANYBLOB="24000380040001001c0003800c00018008000100040000000c0001800800010004000000"], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1f) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) 248.131349ms ago: executing program 5 (id=1359): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09"], 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) munlock(&(0x7f00002d9000/0x1000)=nil, 0x1000) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="201e04000000b9b84712"], 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x7, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 157.327467ms ago: executing program 1 (id=1360): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000004780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xc1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 63.068639ms ago: executing program 4 (id=1361): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000180)="92", 0x1) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x2eb, 0x0, 0x80}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth0_macvtap\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'pimreg\x00', 0x1}, 0x18) 0s ago: executing program 6 (id=1362): r0 = socket(0x10, 0x803, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x10, 0x7, 0x9}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x3, 0x7, 0x0, 0x9, 0x6, 0xff, 0x835d, 0x4, r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0xb}, {0x8, 0x6}, {0xb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c809}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_virt_wifi\x00'}, @TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x9, 0x7, 0x3e, 0x800}, {0x7, 0x10, 0x5, 0x7}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1, 0x5, 0x5127, 0x10001}]}}]}}]}, 0xc0}}, 0x20044004) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x4, 0x2, 0x7f, 0x9, 0xe0, 0xfe, 0x55, 0x3, 0x2, 0x38, 0x4, 0x3, 0x1}, 0xe) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x40000200) kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5667b9ce59 code=0x7ffc0000 [ 337.121483][ T29] audit: type=1326 audit(1779569495.895:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5667b9ce59 code=0x7ffc0000 [ 337.179024][ T10] mos7840 6-1:0.0: required endpoints missing [ 337.215365][ T29] audit: type=1326 audit(1779569495.895:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.1078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5667b9ce59 code=0x7ffc0000 [ 337.265299][ T10] usb 6-1: USB disconnect, device number 29 [ 337.500915][ T5716] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 337.635748][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 337.663601][ T5716] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 337.672848][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.681626][ T5716] usb 7-1: Product: syz [ 337.691070][ T5716] usb 7-1: Manufacturer: syz [ 337.696624][ T5716] usb 7-1: SerialNumber: syz [ 337.726393][ T5716] usb 7-1: config 0 descriptor?? [ 337.795678][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 337.804577][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.817407][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 337.840166][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 337.852209][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.860769][ T10] usb 3-1: Product: syz [ 337.868876][ T10] usb 3-1: Manufacturer: syz [ 337.875242][ T10] usb 3-1: SerialNumber: syz [ 337.936544][ T5716] usb 7-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 337.947915][ T5716] f81604 7-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 337.956680][ T5716] f81604 7-1:0.0: probe with driver f81604 failed with error -121 [ 338.147571][ T10] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 338.162739][ T809] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 338.197473][ T10] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 338.270058][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 338.291650][ T10] usb 3-1: USB disconnect, device number 87 [ 338.306955][ T809] usb 2-1: device descriptor read/64, error -71 [ 338.319097][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.585670][ T809] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 338.686696][ T5716] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 338.755650][ T809] usb 2-1: device descriptor read/64, error -71 [ 338.840268][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.868338][ T5716] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 338.880509][ T5686] usb 7-1: USB disconnect, device number 23 [ 338.887478][ T809] usb usb2-port1: attempt power cycle [ 338.894897][ T5716] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 338.917943][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.939051][ T5716] usb 5-1: config 0 descriptor?? [ 338.949626][ T5716] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 338.964325][ T5716] dvb-usb: bulk message failed: -22 (3/0) [ 338.972603][ T5716] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 338.981918][ T5716] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 338.989666][ T5716] usb 5-1: media controller created [ 338.996037][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.013781][ T5716] dvb-usb: bulk message failed: -22 (6/0) [ 339.020124][ T5716] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 339.029223][ T5716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 339.043266][ T5716] dvb-usb: schedule remote query interval to 150 msecs. [ 339.050880][ T5716] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 339.105610][ T5729] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 339.151600][ T9856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.160558][ T9856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.170302][ T9856] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1086'. [ 339.181375][ T9856] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1086'. [ 339.216991][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 339.223650][ T5716] dvb-usb: error while querying for an remote control event. [ 339.255754][ T809] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 339.257700][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.263449][ T5686] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 339.274797][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.293136][ T5729] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 339.302438][ T5729] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 339.306229][ T809] usb 2-1: device descriptor read/8, error -71 [ 339.310523][ T5729] usb 3-1: Manufacturer: syz [ 339.323422][ T5729] usb 3-1: config 0 descriptor?? [ 339.395883][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 339.403782][ T5716] dvb-usb: error while querying for an remote control event. [ 339.430343][ T5686] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.441503][ T5686] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.453332][ T5686] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.463774][ T5686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.485948][ T9867] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 339.511460][ T5686] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.568775][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 339.574619][ T809] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 339.590829][ T5716] dvb-usb: error while querying for an remote control event. [ 339.617974][ T809] usb 2-1: device descriptor read/8, error -71 [ 339.705233][ T5686] usb 5-1: USB disconnect, device number 79 [ 339.746770][ T809] usb usb2-port1: unable to enumerate USB device [ 339.761800][ T5686] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 339.786046][ T5709] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 339.788213][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.806128][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.937615][ T5729] usbhid 3-1:0.0: can't add hid device: -71 [ 339.945173][ T5729] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 339.957307][ T5709] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 339.962144][ T5729] usb 3-1: USB disconnect, device number 88 [ 339.966804][ T5709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 339.985058][ T5709] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 339.995441][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.004981][ T5709] usb 6-1: Product: syz [ 340.009481][ T5709] usb 6-1: Manufacturer: syz [ 340.014087][ T5709] usb 6-1: SerialNumber: syz [ 340.021676][ T5709] usb 6-1: config 0 descriptor?? [ 340.028619][ T9867] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1090'. [ 340.044646][ T809] usb 7-1: USB disconnect, device number 24 [ 340.115768][ T5686] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 340.231629][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.240537][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.266187][ T5686] usb 5-1: Using ep0 maxpacket: 32 [ 340.273399][ T5686] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.282630][ T5686] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 340.296948][ T5686] usb 5-1: language id specifier not provided by device, defaulting to English [ 340.309537][ T5686] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 340.319144][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.327236][ T5686] usb 5-1: Product: syz [ 340.331473][ T5686] usb 5-1: Manufacturer: 得㇩ឈ謆⿢ [ 340.337534][ T5686] usb 5-1: SerialNumber: syz [ 340.559501][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.581791][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.640839][ T5744] usb 5-1: USB disconnect, device number 80 [ 340.816581][ T9877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1093'. [ 340.826476][ T9877] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1093'. [ 340.839603][ T9877] netlink: 'syz.2.1093': attribute type 6 has an invalid length. [ 340.849688][ T9877] netlink: 'syz.2.1093': attribute type 5 has an invalid length. [ 340.858174][ T9877] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1093'. [ 340.905704][ T5686] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 341.067619][ T5686] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 341.079356][ T5686] usb 7-1: config 1 interface 0 has no altsetting 0 [ 341.095242][ T5686] usb 7-1: string descriptor 0 read error: -22 [ 341.111899][ T5686] usb 7-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 341.124100][ T5686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.157492][ T9876] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 341.498255][ T5716] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 341.576444][ T9876] trusted_key: encrypted_key: insufficient parameters specified [ 341.599164][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.615612][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.627705][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.648767][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.661239][ T9893] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1099'. [ 341.676518][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.683980][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.691489][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.699060][ T5716] usb 5-1: not running at top speed; connect to a high speed hub [ 341.708129][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.717033][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.724337][ T5686] logitech 0003:046D:C298.0015: unknown main item tag 0x0 [ 341.734462][ T5716] usb 5-1: config 6 has an invalid interface number: 174 but max is 0 [ 341.743921][ T5716] usb 5-1: config 6 has no interface number 0 [ 341.758296][ T5716] usb 5-1: config 6 interface 174 has no altsetting 0 [ 341.777373][ T5686] logitech 0003:046D:C298.0015: hidraw0: USB HID vff.7f Device [HID 046d:c298] on usb-dummy_hcd.6-1/input0 [ 341.790263][ T5716] usb 5-1: New USB device found, idVendor=0711, idProduct=0918, bcdDevice=75.9b [ 341.825297][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.839117][ T5686] logitech 0003:046D:C298.0015: no inputs found [ 341.848191][ T5716] usb 5-1: Product: syz [ 341.853334][ T5716] usb 5-1: Manufacturer: syz [ 341.864569][ T5686] usb 7-1: USB disconnect, device number 25 [ 341.874544][ T5716] usb 5-1: SerialNumber: syz [ 341.963010][ T9894] fido_id[9894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 342.149094][ T5716] sisusb 5-1:6.174: Invalid USB2VGA device [ 342.163732][ T5716] sisusb 5-1:6.174: probe with driver sisusb failed with error -22 [ 342.214670][ T5716] usb 5-1: USB disconnect, device number 81 [ 342.586561][ T5709] mos7840 6-1:0.0: required endpoints missing [ 342.629497][ T5709] usb 6-1: USB disconnect, device number 30 [ 342.711511][ T5744] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 342.721591][ T808] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 342.885774][ T808] usb 2-1: device descriptor read/64, error -71 [ 342.927105][ T5744] usb 7-1: Using ep0 maxpacket: 16 [ 342.940781][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 342.942792][ T5744] usb 7-1: config 3 has an invalid interface number: 231 but max is 0 [ 342.967634][ T5744] usb 7-1: config 3 has no interface number 0 [ 342.973923][ T5744] usb 7-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 342.986689][ T5744] usb 7-1: config 3 interface 231 has no altsetting 0 [ 342.996622][ T5744] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 343.009410][ T5744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.019136][ T5744] usb 7-1: Product: syz [ 343.023597][ T5744] usb 7-1: Manufacturer: syz [ 343.029789][ T5744] usb 7-1: SerialNumber: syz [ 343.113948][ T9911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.131678][ T9911] program syz.4.1104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.147650][ T808] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 343.246090][ T5744] kvaser_usb 7-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 343.275096][ T5744] usb 7-1: USB disconnect, device number 26 [ 343.296526][ T808] usb 2-1: device descriptor read/64, error -71 [ 343.336378][ T5716] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 343.405934][ T808] usb usb2-port1: attempt power cycle [ 343.505737][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 343.518264][ T5716] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 343.528680][ T5716] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 343.540516][ T5716] usb 6-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 343.549962][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.564635][ T5716] usb 6-1: Product: syz [ 343.578703][ T5716] usb 6-1: Manufacturer: syz [ 343.590459][ T5716] usb 6-1: SerialNumber: syz [ 343.747339][ T808] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 343.776638][ T808] usb 2-1: device descriptor read/8, error -71 [ 343.863765][ T5716] usb 6-1: unit 8 not found! [ 343.953321][ T5716] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 343.981057][ T5716] usb 6-1: USB disconnect, device number 31 [ 344.025640][ T808] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 344.107224][ T808] usb 2-1: device descriptor read/8, error -71 [ 344.226108][ T808] usb usb2-port1: unable to enumerate USB device [ 344.706321][ T808] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 344.733006][ T9937] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 344.751691][ T9937] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 344.768079][ T5716] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 344.897566][ T808] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 344.923915][ T808] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 344.938410][ T808] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 344.947803][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.957514][ T808] usb 6-1: Product: syz [ 344.961836][ T808] usb 6-1: Manufacturer: syz [ 344.966819][ T808] usb 6-1: SerialNumber: syz [ 344.980664][ T808] usb 6-1: config 0 descriptor?? [ 345.111862][ T9944] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1115'. [ 345.196315][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.219736][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.816866][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 345.977167][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 345.985757][ T5709] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 346.001784][ T24] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 346.020471][ T24] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 346.043147][ T24] usb 2-1: config 166 has no interface number 0 [ 346.057625][ T24] usb 2-1: config 166 has no interface number 1 [ 346.075486][ T24] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 346.103697][ T24] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 346.132201][ T24] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 346.162567][ T24] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 346.166614][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 346.205153][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 346.227138][ T5709] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.230519][ T24] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 346.257608][ T5709] usb 3-1: config 3 has an invalid interface number: 166 but max is 0 [ 346.281265][ T5709] usb 3-1: config 3 has no interface number 0 [ 346.293890][ T5709] usb 3-1: config 3 interface 166 has no altsetting 0 [ 346.303679][ T24] usb 2-1: config 166 interface 177 has no altsetting 0 [ 346.320755][ T5709] usb 3-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 346.322898][ T24] usb 2-1: config 166 interface 34 has no altsetting 0 [ 346.349939][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.375377][ T5709] usb 3-1: Product: syz [ 346.377337][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 346.399000][ T5709] usb 3-1: Manufacturer: syz [ 346.399756][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.413696][ T24] usb 2-1: Product: syz [ 346.424247][ T5709] usb 3-1: SerialNumber: syz [ 346.442297][ T24] usb 2-1: Manufacturer: syz [ 346.448606][ T24] usb 2-1: SerialNumber: syz [ 346.464870][ T9955] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1120'. [ 346.477942][ T9955] openvswitch: netlink: Flow key attr not present in new flow. [ 346.664618][ T5709] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 346.673240][ T5709] gspca_sn9c20x: Write register 1000 failed -71 [ 346.679567][ T5709] gspca_sn9c20x: Device initialization failed [ 346.685888][ T5709] gspca_sn9c20x 3-1:3.166: probe with driver gspca_sn9c20x failed with error -71 [ 346.700628][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.706884][ T5709] usb 3-1: USB disconnect, device number 89 [ 346.711016][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.776304][ T5716] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 346.785674][ T5729] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 346.798069][ T24] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 346.937887][ T5716] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x2C, changing to 0xC [ 346.949813][ T5716] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xC has invalid wMaxPacketSize 0 [ 346.955591][ T5729] usb 7-1: Using ep0 maxpacket: 16 [ 346.960133][ T5716] usb 5-1: config 0 interface 0 has no altsetting 0 [ 346.970118][ T5729] usb 7-1: config 3 has an invalid interface number: 231 but max is 0 [ 346.979834][ T5716] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.981413][ T5729] usb 7-1: config 3 has no interface number 0 [ 346.995231][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 346.995452][ T5729] usb 7-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 347.004621][ T5716] usb 5-1: Product: syz [ 347.016196][ T5729] usb 7-1: config 3 interface 231 has no altsetting 0 [ 347.019682][ T5716] usb 5-1: Manufacturer: syz [ 347.029638][ T5729] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 347.030450][ T5716] usb 5-1: SerialNumber: syz [ 347.039682][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.052405][ T5729] usb 7-1: Product: syz [ 347.053330][ T5716] usb 5-1: config 0 descriptor?? [ 347.061972][ T5729] usb 7-1: Manufacturer: syz [ 347.068866][ T5729] usb 7-1: SerialNumber: syz [ 347.076087][ T5716] usb 5-1: selecting invalid altsetting 0 [ 347.308647][ T5729] kvaser_usb 7-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 347.356849][ T5729] usb 7-1: USB disconnect, device number 27 [ 347.415453][ T5745] usb 5-1: USB disconnect, device number 82 [ 347.439269][ T9955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.554070][ T808] mos7840 6-1:0.0: required endpoints missing [ 347.575448][ T808] usb 6-1: USB disconnect, device number 32 [ 347.799826][ T5616] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 347.816642][ T5616] dvb_usb_dibusb_mb 1-1:4.183: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 347.842178][ T5616] cdc_acm 1-1:4.162: skipping garbage [ 347.848071][ T5616] cdc_acm 1-1:4.162: skipping garbage [ 347.854110][ T5616] cdc_acm 1-1:4.162: skipping garbage [ 347.862560][ T5616] cdc_acm 1-1:4.162: skipping garbage [ 347.875680][ T5616] cdc_acm 1-1:4.162: skipping garbage [ 347.886924][ T5616] cdc_acm 1-1:4.162: skipping garbage [ 347.898767][ T5616] cdc_acm 1-1:4.162: skipping garbage [ 347.921338][ T5616] cdc_acm 1-1:4.162: skipping garbage [ 347.941815][ T5616] dvb-usb: found a 'VideoWalker DVB-T USB' in cold state, will try to load a firmware [ 347.959264][ T5616] usb 1-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 347.969526][ T5616] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 347.981065][ T9972] syz_tun: entered allmulticast mode [ 348.218337][ T5745] syz_tun: left allmulticast mode [ 348.386621][ T5716] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 348.559051][ T24] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 348.570258][ T5716] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.591966][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.616042][ T5745] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 348.618623][ T5716] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.643207][ T5716] usb 5-1: string descriptor 0 read error: -22 [ 348.651383][ T5716] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 348.651486][ T24] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 348.660983][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.678426][ T24] uvcvideo 2-1:166.34: No valid video chain found. [ 348.697645][ T24] usb 2-1: USB disconnect, device number 81 [ 348.698285][ T809] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 348.715155][ T5716] usb 5-1: selecting invalid altsetting 1 [ 348.725304][ T5716] usb 5-1: unit 3 not found! [ 348.781058][ T5745] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 348.798721][ T5745] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 348.819130][ T5745] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 348.822169][T10002] netlink: 'syz.1.1135': attribute type 21 has an invalid length. [ 348.844734][ T5745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.856273][ T5745] usb 7-1: Product: syz [ 348.860514][ T5745] usb 7-1: Manufacturer: syz [ 348.865224][ T5745] usb 7-1: SerialNumber: syz [ 348.875664][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 348.879760][ T5745] usb 7-1: config 0 descriptor?? [ 348.890085][ T5716] usb 5-1: unit 110 not found! [ 348.900426][ T5716] usb 5-1: unit 116 not found! [ 348.907497][ T809] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 348.934616][ T809] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49791, setting to 1024 [ 348.979835][ T809] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 349.009609][ T809] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 349.041518][ T809] usb 3-1: Product: syz [ 349.047402][ T5716] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 349.058886][ T809] usb 3-1: Manufacturer: syz [ 349.080543][ T809] hub 3-1:4.0: USB hub found [ 349.091813][ T5716] usb 5-1: USB disconnect, device number 83 [ 349.125885][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.147357][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.281522][ T809] hub 3-1:4.0: 2 ports detected [ 349.496954][ T809] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 349.509587][ T809] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 349.562503][ T809] usb 3-1: USB disconnect, device number 90 [ 350.039759][T10017] Invalid argument reading file caps for ./file0 [ 350.178805][T10021] FAULT_INJECTION: forcing a failure. [ 350.178805][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 350.218717][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.1.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.218744][T10021] Tainted: [L]=SOFTLOCKUP [ 350.218751][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.218761][T10021] Call Trace: [ 350.218768][T10021] [ 350.218776][T10021] dump_stack_lvl+0xe8/0x150 [ 350.218800][T10021] should_fail_ex+0x412/0x560 [ 350.218823][T10021] should_failslab+0xa8/0x100 [ 350.218847][T10021] __kmalloc_noprof+0xe8/0x760 [ 350.218868][T10021] ? fib_nl2rule+0x2e9/0x1a00 [ 350.218889][T10021] fib_nl2rule+0x2e9/0x1a00 [ 350.218909][T10021] ? __pfx_fib_nl2rule+0x10/0x10 [ 350.218928][T10021] ? __nla_parse+0x40/0x60 [ 350.218952][T10021] fib_newrule+0x321/0x1030 [ 350.218973][T10021] ? __pfx_fib_newrule+0x10/0x10 [ 350.218987][T10021] ? __dev_queue_xmit+0x2b6/0x3950 [ 350.219032][T10021] ? __pfx_fib_nl_newrule+0x10/0x10 [ 350.219048][T10021] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 350.219069][T10021] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 350.219087][T10021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.219106][T10021] ? ref_tracker_free+0x693/0x840 [ 350.219127][T10021] ? __pfx_ref_tracker_free+0x10/0x10 [ 350.219156][T10021] netlink_rcv_skb+0x232/0x4b0 [ 350.219179][T10021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.219200][T10021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.219229][T10021] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.219248][T10021] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.219273][T10021] netlink_unicast+0x75c/0x8e0 [ 350.219302][T10021] netlink_sendmsg+0x813/0xb40 [ 350.219332][T10021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.219360][T10021] ? aa_sock_msg_perm+0xf1/0x1b0 [ 350.219383][T10021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.219407][T10021] ____sys_sendmsg+0x972/0x9f0 [ 350.219429][T10021] ? __might_fault+0xaf/0x130 [ 350.219454][T10021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.219484][T10021] ? import_iovec+0x73/0xa0 [ 350.219509][T10021] ___sys_sendmsg+0x2a5/0x360 [ 350.219530][T10021] ? __lock_acquire+0x6b5/0x2cf0 [ 350.219551][T10021] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.219609][T10021] ? __fget_files+0x2a/0x420 [ 350.219627][T10021] ? __fget_files+0x3a0/0x420 [ 350.219655][T10021] __x64_sys_sendmsg+0x1bd/0x2a0 [ 350.219680][T10021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.219710][T10021] ? __pfx_ksys_write+0x10/0x10 [ 350.219739][T10021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.219757][T10021] do_syscall_64+0x15f/0xf80 [ 350.219773][T10021] ? trace_irq_disable+0x3b/0x140 [ 350.219795][T10021] ? clear_bhb_loop+0x40/0x90 [ 350.219815][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.219830][T10021] RIP: 0033:0x7fb12139ce59 [ 350.219847][T10021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.219861][T10021] RSP: 002b:00007fb11f5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.219879][T10021] RAX: ffffffffffffffda RBX: 00007fb121615fa0 RCX: 00007fb12139ce59 [ 350.219891][T10021] RDX: 000000002004c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 350.219901][T10021] RBP: 00007fb11f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 350.219911][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.219920][T10021] R13: 00007fb121616038 R14: 00007fb121615fa0 R15: 00007fb12173fa48 [ 350.219944][T10021] [ 350.608904][T10025] RDS: rds_bind could not find a transport for 100::ff00:0:0:0, load rds_tcp or rds_rdma? [ 351.366596][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 351.422760][ T5745] mos7840 7-1:0.0: required endpoints missing [ 351.443487][ T5745] usb 7-1: USB disconnect, device number 28 [ 351.476831][ T809] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 351.506061][ T24] usb 3-1: device descriptor read/64, error -71 [ 351.609892][ T5744] IPVS: starting estimator thread 0... [ 351.645635][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 351.658380][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.681377][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.702542][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 351.718201][T10050] IPVS: using max 53 ests per chain, 127200 per kthread [ 351.735910][ T809] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.754157][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.765625][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 351.786410][ T809] usb 5-1: config 0 descriptor?? [ 351.916215][ T24] usb 3-1: device descriptor read/64, error -71 [ 351.955595][ T5745] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 352.038088][ T24] usb usb3-port1: attempt power cycle [ 352.119193][ T5745] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 352.141795][ T5745] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.153305][ T5745] usb 7-1: New USB device found, idVendor=04f3, idProduct=0001, bcdDevice= 0.00 [ 352.162784][ T5745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.178112][ T5745] usb 7-1: config 0 descriptor?? [ 352.248472][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1154'. [ 352.267292][ T809] hid_parser_main: 338 callbacks suppressed [ 352.267307][ T809] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 352.283323][ T809] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 352.285617][ T5744] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 352.290692][ T809] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 352.323362][ T809] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 352.338552][ T809] microsoft 0003:045E:07DA.0017: no inputs found [ 352.344928][ T809] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 352.373558][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 352.373573][ T29] audit: type=1326 audit(1779569511.615:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 352.412521][ T29] audit: type=1326 audit(1779569511.655:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a53b5d68e code=0x7ffc0000 [ 352.418323][T10049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.438868][ T29] audit: type=1326 audit(1779569511.655:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 352.475442][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 352.483343][ T5744] usb 2-1: device descriptor read/64, error -71 [ 352.496080][T10049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.510034][ T5716] usb 5-1: USB disconnect, device number 84 [ 352.530415][ T24] usb 3-1: device descriptor read/8, error -71 [ 352.567632][ T29] audit: type=1326 audit(1779569511.655:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 352.601270][ T29] audit: type=1326 audit(1779569511.655:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 352.644520][T10049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.655669][ T809] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 352.673862][ T29] audit: type=1326 audit(1779569511.655:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 352.713959][ T29] audit: type=1326 audit(1779569511.655:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 352.752471][ T29] audit: type=1326 audit(1779569511.655:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a53b5d68e code=0x7ffc0000 [ 352.793989][ T29] audit: type=1326 audit(1779569511.655:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a53b9caeb code=0x7ffc0000 [ 352.827262][ T5744] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 352.827876][ T29] audit: type=1326 audit(1779569511.655:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a53b9caeb code=0x7ffc0000 [ 352.836706][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 352.889091][ T809] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 352.901817][ T809] usb 6-1: config 0 has no interface number 0 [ 352.911997][ T809] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 98, changing to 10 [ 352.923393][ T809] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 10239, setting to 1024 [ 352.935369][ T5745] usbhid 7-1:0.0: can't add hid device: -71 [ 352.949095][ T5745] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 352.957121][ T24] usb 3-1: device descriptor read/8, error -71 [ 352.972628][ T5745] usb 7-1: USB disconnect, device number 29 [ 352.979087][ T809] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 352.998084][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.012910][ T809] usb 6-1: Product: syz [ 353.015679][ T5744] usb 2-1: device descriptor read/64, error -71 [ 353.028786][ T809] usb 6-1: Manufacturer: syz [ 353.037272][ T809] usb 6-1: SerialNumber: syz [ 353.062434][ T809] usb 6-1: config 0 descriptor?? [ 353.074808][T10068] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 353.087390][ T24] usb usb3-port1: unable to enumerate USB device [ 353.127627][ T5744] usb usb2-port1: attempt power cycle [ 353.145383][ T809] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 353.445586][ T5745] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 353.476380][ T5744] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 353.516055][ T5744] usb 2-1: device descriptor read/8, error -71 [ 353.610036][ T5745] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 353.628136][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.649703][ T5745] usb 5-1: config 0 descriptor?? [ 353.775684][ T5744] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 353.802286][ T5744] usb 2-1: device descriptor read/8, error -71 [ 353.868725][ T5745] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 353.927311][ T5744] usb usb2-port1: unable to enumerate USB device [ 353.937723][ T809] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 353.972879][ T5745] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 353.986817][ T5745] [drm] Initialized udl on minor 2 [ 354.093639][ T5745] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 354.109555][ T5745] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 354.112985][ T809] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 354.128304][ T809] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 354.147653][ T809] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 354.158521][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.175691][ T5729] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 354.185188][ T809] usb 7-1: Product: syz [ 354.190827][ T809] usb 7-1: Manufacturer: syz [ 354.197260][ T809] usb 7-1: SerialNumber: syz [ 354.205451][ T809] usb 7-1: config 0 descriptor?? [ 354.220855][ T5686] usb 5-1: USB disconnect, device number 85 [ 354.226996][ T5744] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 354.243257][ T5744] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 354.329175][ T5729] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 354.338635][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.346705][ T5729] usb 3-1: Product: syz [ 354.351046][ T5729] usb 3-1: Manufacturer: syz [ 354.355742][ T5729] usb 3-1: SerialNumber: syz [ 354.421628][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.432893][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.772777][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 354.785765][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 354.858818][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 354.890550][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 354.901826][ T5729] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 354.913995][ T5729] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 354.931516][ T5729] usb 3-1: USB disconnect, device number 95 [ 355.238112][ T5716] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 355.398331][ T5716] usb 5-1: Using ep0 maxpacket: 16 [ 355.416763][ T5716] usb 5-1: config 3 has an invalid interface number: 231 but max is 0 [ 355.429562][ T5716] usb 5-1: config 3 has no interface number 0 [ 355.435952][ T5716] usb 5-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 355.447085][ T5716] usb 5-1: config 3 interface 231 has no altsetting 0 [ 355.458022][ T5716] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 355.467612][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.480463][ T5716] usb 5-1: Product: syz [ 355.487962][ T5716] usb 5-1: Manufacturer: syz [ 355.495186][ T5716] usb 5-1: SerialNumber: syz [ 355.534554][ T5745] usb 6-1: USB disconnect, device number 33 [ 355.559133][ T5745] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 355.615662][ T5729] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 355.720200][ T5716] kvaser_usb 5-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 355.741781][ T5716] usb 5-1: USB disconnect, device number 86 [ 355.785552][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 355.795120][ T5729] usb 3-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config [ 355.816657][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 355.866567][ T5729] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 355.878940][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.887873][ T5729] usb 3-1: Product: syz [ 355.892482][ T5729] usb 3-1: Manufacturer: syz [ 355.898587][ T5729] usb 3-1: SerialNumber: syz [ 355.907454][ T5729] usb 3-1: config 0 descriptor?? [ 355.922929][T10122] syzkaller0: entered promiscuous mode [ 355.930217][ T5729] radioshark 3-1:0.0: Invalid radioSHARK device [ 355.936573][ T5729] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 355.945109][T10122] syzkaller0: entered allmulticast mode [ 355.952128][ T5729] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 355.994971][T10122] tipc: Enabled bearer , priority 0 [ 356.001864][ T5745] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 356.011190][T10121] tipc: Resetting bearer [ 356.030840][T10121] tipc: Disabling bearer [ 356.122359][ T5729] usb 3-1: USB disconnect, device number 96 [ 356.167370][ T5745] usb 6-1: Using ep0 maxpacket: 8 [ 356.178796][ T5745] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 356.189874][ T5745] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.203118][ T5745] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.212298][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.233650][ T5745] usbtmc 6-1:16.0: bulk endpoints not found [ 356.430427][ T5716] usb 6-1: USB disconnect, device number 34 [ 356.716550][ T5686] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 356.769714][ T809] mos7840 7-1:0.0: required endpoints missing [ 356.803295][ T809] usb 7-1: USB disconnect, device number 30 [ 356.898786][ T5686] usb 5-1: config 0 has no interfaces? [ 356.909758][ T5686] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 356.926345][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.943483][ T5686] usb 5-1: Product: syz [ 356.957990][ T5686] usb 5-1: Manufacturer: syz [ 356.971472][ T5686] usb 5-1: SerialNumber: syz [ 356.992264][ T5686] usb 5-1: config 0 descriptor?? [ 357.005747][ T5729] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 357.036797][T10140] netlink: 'syz.5.1177': attribute type 2 has an invalid length. [ 357.175834][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 357.186227][ T5729] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 357.195811][ T5729] usb 3-1: config 0 has no interface number 0 [ 357.204595][ T5729] usb 3-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 357.223513][ T5729] usb 3-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 357.225603][ T809] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 357.266390][ T5729] usb 3-1: config 0 interface 101 has no altsetting 0 [ 357.277266][ T5729] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 357.286683][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.295657][ T5729] usb 3-1: Product: syz [ 357.301792][ T5729] usb 3-1: Manufacturer: syz [ 357.309098][ T5729] usb 3-1: SerialNumber: syz [ 357.323598][ T5686] usb 5-1: USB disconnect, device number 87 [ 357.350572][ T5729] usb 3-1: config 0 descriptor?? [ 357.462434][ T809] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 357.485670][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.499574][ T809] usb 7-1: Product: syz [ 357.508527][ T809] usb 7-1: Manufacturer: syz [ 357.519272][ T809] usb 7-1: SerialNumber: syz [ 357.872754][ T809] usb 7-1: USB disconnect, device number 31 [ 358.121842][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.259724][ T5729] gspca_main: se401-2.14.0 probing 047d:5003 [ 358.365715][ T5716] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 358.541687][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.554057][ T5716] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 358.571090][ T5716] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.580581][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.588710][ T5716] usb 5-1: Product: syz [ 358.593319][ T5716] usb 5-1: Manufacturer: syz [ 358.598048][ T5716] usb 5-1: SerialNumber: syz [ 358.735747][ T5729] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 358.745684][ T809] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 358.813834][T10156] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 358.865782][ T5729] usb 3-1: device descriptor read/64, error -71 [ 358.910166][ T809] usb 6-1: Using ep0 maxpacket: 16 [ 358.923390][ T809] usb 6-1: config 3 has an invalid interface number: 231 but max is 0 [ 358.944918][ T809] usb 6-1: config 3 has no interface number 0 [ 358.965709][ T809] usb 6-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 358.984879][ T809] usb 6-1: config 3 interface 231 has no altsetting 0 [ 359.008403][ T809] usb 6-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 359.024265][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.040149][ T809] usb 6-1: Product: syz [ 359.044827][ T809] usb 6-1: Manufacturer: syz [ 359.049986][ T809] usb 6-1: SerialNumber: syz [ 359.147376][ T5729] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 359.292313][ T809] kvaser_usb 6-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 359.307998][ T5729] usb 3-1: device descriptor read/64, error -71 [ 359.343249][ T809] usb 6-1: USB disconnect, device number 35 [ 359.440492][T10156] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 359.565648][ T5729] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 359.619080][ T5729] usb 3-1: device descriptor read/8, error -71 [ 360.097759][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1187'. [ 360.106940][T10179] bridge_slave_1: entered promiscuous mode [ 360.342241][T10188] tipc: Enabled bearer , priority 0 [ 360.350991][T10188] syzkaller0: entered promiscuous mode [ 360.356808][T10188] syzkaller0: entered allmulticast mode [ 360.365663][ T5745] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 360.395550][ T809] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 360.411479][T10188] FAULT_INJECTION: forcing a failure. [ 360.411479][T10188] name failslab, interval 1, probability 0, space 0, times 0 [ 360.435751][T10188] CPU: 0 UID: 0 PID: 10188 Comm: syz.6.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.435779][T10188] Tainted: [L]=SOFTLOCKUP [ 360.435786][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.435796][T10188] Call Trace: [ 360.435803][T10188] [ 360.435810][T10188] dump_stack_lvl+0xe8/0x150 [ 360.435838][T10188] should_fail_ex+0x412/0x560 [ 360.435864][T10188] should_failslab+0xa8/0x100 [ 360.435896][T10188] __kmalloc_noprof+0xe8/0x760 [ 360.435918][T10188] ? tomoyo_encode+0x28b/0x550 [ 360.435944][T10188] tomoyo_encode+0x28b/0x550 [ 360.435971][T10188] tomoyo_realpath_from_path+0x58d/0x5d0 [ 360.435993][T10188] ? tomoyo_domain+0xd7/0x130 [ 360.436019][T10188] ? tomoyo_path_number_perm+0x219/0x630 [ 360.436038][T10188] tomoyo_path_number_perm+0x246/0x630 [ 360.436060][T10188] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 360.436077][T10188] ? __lock_acquire+0x6b5/0x2cf0 [ 360.436108][T10188] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 360.436145][T10188] ? __fget_files+0x2a/0x420 [ 360.436166][T10188] ? __fget_files+0x2a/0x420 [ 360.436183][T10188] ? __fget_files+0x3a0/0x420 [ 360.436200][T10188] ? __fget_files+0x2a/0x420 [ 360.436221][T10188] security_file_ioctl+0xc3/0x2a0 [ 360.436242][T10188] __se_sys_ioctl+0x47/0x170 [ 360.436264][T10188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.436283][T10188] do_syscall_64+0x15f/0xf80 [ 360.436298][T10188] ? trace_irq_disable+0x3b/0x140 [ 360.436320][T10188] ? clear_bhb_loop+0x40/0x90 [ 360.436341][T10188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.436357][T10188] RIP: 0033:0x7fab62d9ce59 [ 360.436374][T10188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.436388][T10188] RSP: 002b:00007fab63cb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.436406][T10188] RAX: ffffffffffffffda RBX: 00007fab63015fa0 RCX: 00007fab62d9ce59 [ 360.436418][T10188] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004 [ 360.436428][T10188] RBP: 00007fab63cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.436439][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.436448][T10188] R13: 00007fab63016038 R14: 00007fab63015fa0 R15: 00007fab6313fa48 [ 360.436475][T10188] [ 360.436516][T10188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.517675][ T5729] gspca_se401: read req failed req 0x06 error -19 [ 360.521933][T10188] tipc: Resetting bearer [ 360.548020][ T5729] usb 3-1: USB disconnect, device number 97 [ 360.702598][T10187] tipc: Resetting bearer [ 360.709420][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 360.710300][ T5745] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.730099][ T809] usb 2-1: config 0 has no interfaces? [ 360.731908][ T5745] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 360.763647][ T809] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 360.768022][ T5745] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 360.781960][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.792444][T10187] tipc: Disabling bearer [ 360.803098][T10192] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1190'. [ 360.805268][ T809] usb 2-1: config 0 descriptor?? [ 360.815171][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.832223][ T5745] usb 6-1: config 0 descriptor?? [ 360.842844][ T5745] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 360.854017][ T5745] dvb-usb: bulk message failed: -22 (3/0) [ 360.874259][ T5745] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 360.892200][ T5745] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 360.907353][ T5745] usb 6-1: media controller created [ 360.920804][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.970399][ T5745] dvb-usb: bulk message failed: -22 (6/0) [ 360.987436][ T5745] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 361.006474][ T5745] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 361.039232][ T5745] dvb-usb: schedule remote query interval to 150 msecs. [ 361.051964][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.066725][ T5745] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 361.084386][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.225612][ T5745] dvb-usb: bulk message failed: -22 (1/0) [ 361.242562][ T5745] dvb-usb: error while querying for an remote control event. [ 361.285638][ T5716] cdc_ncm 5-1:1.0: failed to get mac address [ 361.302190][ T5716] cdc_ncm 5-1:1.0: bind() failure [ 361.324554][ T5686] usb 6-1: USB disconnect, device number 36 [ 361.351872][ T5716] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 361.379545][ T809] usb 2-1: string descriptor 0 read error: -71 [ 361.393119][ T5716] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 361.407273][ T809] usb 2-1: USB disconnect, device number 86 [ 361.428751][ T5716] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 361.440209][ T5686] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 361.459339][ T5716] usb 5-1: USB disconnect, device number 88 [ 361.632904][T10204] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10204 comm: syz.4.1194) [ 361.658533][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 361.658559][ T29] audit: type=1800 audit(1779569520.905:1198): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1194" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=20046 res=0 errno=0 [ 361.852311][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 361.922228][T10207] hsr_slave_0 (unregistering): left promiscuous mode [ 362.240716][T10219] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1201'. [ 362.264225][T10219] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1201'. [ 362.282285][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1201'. [ 362.395617][ T5745] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 362.405288][T10224] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1200'. [ 362.445594][ T808] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 362.547121][ T5745] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.565641][ T5745] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.595017][ T5745] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 362.604407][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 362.616589][ T808] usb 6-1: config 3 has an invalid interface number: 231 but max is 0 [ 362.627026][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 362.645242][ T808] usb 6-1: config 3 has no interface number 0 [ 362.653112][ T5745] usb 3-1: SerialNumber: syz [ 362.657926][ T808] usb 6-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 362.682437][ T5745] cdc_ether 3-1:1.0: skipping garbage [ 362.691423][ T808] usb 6-1: config 3 interface 231 has no altsetting 0 [ 362.702188][ T5745] usb 3-1: No union descriptors [ 362.717522][ T808] usb 6-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 362.726919][ T5745] usb-storage 3-1:1.0: USB Mass Storage device detected [ 362.736799][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.761879][ T808] usb 6-1: Product: syz [ 362.767836][ T5745] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 362.782035][ T808] usb 6-1: Manufacturer: syz [ 362.818549][ T808] usb 6-1: SerialNumber: syz [ 362.883343][ T5745] usb 3-1: USB disconnect, device number 98 [ 363.055873][ T5729] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 363.066285][ T808] kvaser_usb 6-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 363.088588][ T5744] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 363.102020][ T808] usb 6-1: USB disconnect, device number 37 [ 363.226908][ T5729] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.238114][ T5729] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 363.249877][ T5729] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.259178][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.269134][ T5744] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 363.277844][ T5729] usb 7-1: Product: syz [ 363.282137][ T5729] usb 7-1: Manufacturer: syz [ 363.286820][ T5744] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 363.295991][ T5729] usb 7-1: SerialNumber: syz [ 363.307814][ T5744] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 363.317037][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.325053][ T5744] usb 2-1: Product: syz [ 363.329295][ T5744] usb 2-1: Manufacturer: syz [ 363.333902][ T5744] usb 2-1: SerialNumber: syz [ 363.341179][ T5744] usb 2-1: config 0 descriptor?? [ 363.436028][ T5745] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 363.510377][T10237] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 363.554297][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.563275][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.599325][ T5745] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 363.618323][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.639740][ T5745] usb 5-1: config 0 descriptor?? [ 363.651532][ T5745] cp210x 5-1:0.0: cp210x converter detected [ 363.851670][ T5745] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 363.864689][ T5745] cp210x 5-1:0.0: querying part number failed [ 363.881556][ T5745] usb 5-1: cp210x converter now attached to ttyUSB0 [ 363.965917][ T5686] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 364.115618][ T5686] usb 3-1: Using ep0 maxpacket: 16 [ 364.125119][T10237] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 364.128289][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 364.135534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 364.148787][ T5686] usb 3-1: can't read configurations, error -61 [ 364.170102][ T809] usb 5-1: USB disconnect, device number 89 [ 364.188671][ T809] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 364.204234][ T809] cp210x 5-1:0.0: device disconnected [ 364.299937][ T5686] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 364.455844][ T5686] usb 3-1: Using ep0 maxpacket: 16 [ 364.468137][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 364.477954][ T5686] usb 3-1: can't read configurations, error -61 [ 364.484792][ T5686] usb usb3-port1: attempt power cycle [ 364.828469][ T5686] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 364.876196][ T5686] usb 3-1: Using ep0 maxpacket: 16 [ 364.887513][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 364.895974][ T5686] usb 3-1: can't read configurations, error -61 [ 365.020437][T10266] dvmrp12: entered allmulticast mode [ 365.036726][ T5686] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 365.068158][ T5686] usb 3-1: Using ep0 maxpacket: 16 [ 365.079852][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 365.100210][ T5686] usb 3-1: can't read configurations, error -61 [ 365.121640][ T5686] usb usb3-port1: unable to enumerate USB device [ 365.373694][T10280] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10280 comm: syz.4.1216) [ 365.414489][ T29] audit: type=1800 audit(1779569524.645:1199): pid=10280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1216" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=20046 res=0 errno=0 [ 365.453779][T10283] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 365.715810][ T5686] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 365.832756][ T5729] cdc_ncm 7-1:1.0: failed to get mac address [ 365.857919][ T5729] cdc_ncm 7-1:1.0: bind() failure [ 365.866887][ T5686] usb 6-1: Using ep0 maxpacket: 32 [ 365.883157][ T5686] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.895394][ T5686] usb 6-1: config 0 has no interfaces? [ 365.903765][ T5686] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 365.914256][ T5686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.930481][ T5686] usb 6-1: config 0 descriptor?? [ 365.951540][ T5729] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 365.978544][ T5744] mos7840 2-1:0.0: required endpoints missing [ 365.999732][ T5729] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 366.010235][ T5729] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 366.050437][ T5744] usb 2-1: USB disconnect, device number 87 [ 366.069184][ T5729] usb 7-1: USB disconnect, device number 32 [ 366.405608][ T5729] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 366.496239][ T5745] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 366.565897][ T5744] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 366.587886][ T5729] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 366.599371][ T5729] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 366.618958][ T5729] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 366.628601][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.638392][ T5729] usb 7-1: Product: syz [ 366.642769][ T5729] usb 7-1: Manufacturer: syz [ 366.648028][ T5729] usb 7-1: SerialNumber: syz [ 366.656260][ T5729] usb 7-1: config 0 descriptor?? [ 366.669410][ T5745] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 366.678982][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.679651][ T5729] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 366.694180][ T5745] usb 5-1: Product: syz [ 366.699400][ T5745] usb 5-1: Manufacturer: syz [ 366.704223][ T5745] usb 5-1: SerialNumber: syz [ 366.717822][ T5745] usb 5-1: config 0 descriptor?? [ 366.735691][ T5744] usb 2-1: Using ep0 maxpacket: 16 [ 366.747189][ T5744] usb 2-1: config 3 has an invalid interface number: 231 but max is 0 [ 366.756015][ T5744] usb 2-1: config 3 has no interface number 0 [ 366.762253][ T5744] usb 2-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 366.774048][ T5744] usb 2-1: config 3 interface 231 has no altsetting 0 [ 366.792670][ T5744] usb 2-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 366.807681][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.816408][ T5744] usb 2-1: Product: syz [ 366.820804][ T5744] usb 2-1: Manufacturer: syz [ 366.842026][ T5744] usb 2-1: SerialNumber: syz [ 367.072645][ T5744] kvaser_usb 2-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 367.088739][ T5744] usb 2-1: USB disconnect, device number 88 [ 367.127646][ T5686] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 367.157506][ T5745] usb 5-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 367.285611][ T5686] usb 3-1: Using ep0 maxpacket: 32 [ 367.292161][ T5686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.304665][ T5686] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 367.313902][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.321970][ T5686] usb 3-1: Product: syz [ 367.326182][ T5686] usb 3-1: Manufacturer: syz [ 367.330775][ T5686] usb 3-1: SerialNumber: syz [ 367.338129][ T5686] usb 3-1: config 0 descriptor?? [ 367.345477][ T5686] cdc_ether 3-1:0.0: missing cdc ether descriptor [ 367.353162][ T5686] usb 3-1: unsupported MDLM descriptors [ 367.374703][ T5745] usb 5-1: Firmware: build [ 367.580671][ T5745] usb 5-1: no permanent extended address found, random address set [ 367.592869][ T5745] usb 5-1: atusb_probe: initialization failed, error = -524 [ 367.595428][T10301] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 367.601998][ T5745] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 367.608708][T10301] CPU: 0 UID: 0 PID: 10301 Comm: syz.2.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.608733][T10301] Tainted: [L]=SOFTLOCKUP [ 367.608739][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.608750][T10301] Call Trace: [ 367.608757][T10301] [ 367.608764][T10301] dump_stack_lvl+0xe8/0x150 [ 367.608791][T10301] sysfs_warn_dup+0x8e/0xa0 [ 367.608813][T10301] sysfs_do_create_link_sd+0xc0/0x110 [ 367.608837][T10301] device_add_class_symlinks+0x1cf/0x240 [ 367.608861][T10301] device_add+0x475/0xbb0 [ 367.608885][T10301] wiphy_register+0x1dc5/0x2dc0 [ 367.608916][T10301] ? __pfx_wiphy_register+0x10/0x10 [ 367.608934][T10301] ? __pfx_netdev_run_todo+0x10/0x10 [ 367.608953][T10301] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 367.608981][T10301] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 367.609009][T10301] ieee80211_register_hw+0x3d82/0x4a70 [ 367.609041][T10301] ? ieee80211_register_hw+0x1941/0x4a70 [ 367.609081][T10301] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 367.609103][T10301] ? __asan_memset+0x22/0x50 [ 367.609123][T10301] ? __hrtimer_setup+0x1b7/0x260 [ 367.609142][T10301] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 367.609174][T10301] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 367.609223][T10301] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 367.609242][T10301] ? kstrndup+0xbf/0x160 [ 367.609269][T10301] hwsim_new_radio_nl+0xf6a/0x1c00 [ 367.609311][T10301] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 367.609339][T10301] ? rcu_is_watching+0x15/0xb0 [ 367.609359][T10301] ? trace_kmalloc+0x2a/0xf0 [ 367.609385][T10301] ? __nla_parse+0x40/0x60 [ 367.609412][T10301] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 367.609431][T10301] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 367.609458][T10301] genl_family_rcv_msg_doit+0x22a/0x330 [ 367.609483][T10301] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 367.609515][T10301] ? bpf_lsm_capable+0x9/0x20 [ 367.609530][T10301] ? security_capable+0x7e/0x2c0 [ 367.609556][T10301] genl_rcv_msg+0x61c/0x7a0 [ 367.609581][T10301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.609599][T10301] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 367.609619][T10301] ? __pfx_ref_tracker_free+0x10/0x10 [ 367.609651][T10301] netlink_rcv_skb+0x232/0x4b0 [ 367.609674][T10301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.609694][T10301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.609731][T10301] ? down_read+0x270/0x2e0 [ 367.609748][T10301] ? genl_rcv+0xd/0x40 [ 367.609768][T10301] genl_rcv+0x28/0x40 [ 367.609783][T10301] netlink_unicast+0x75c/0x8e0 [ 367.609815][T10301] netlink_sendmsg+0x813/0xb40 [ 367.609846][T10301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.609876][T10301] ? aa_sock_msg_perm+0xf1/0x1b0 [ 367.609898][T10301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.609922][T10301] ____sys_sendmsg+0x972/0x9f0 [ 367.609946][T10301] ? __might_fault+0xaf/0x130 [ 367.609973][T10301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.610005][T10301] ? import_iovec+0x73/0xa0 [ 367.610031][T10301] ___sys_sendmsg+0x2a5/0x360 [ 367.610052][T10301] ? __lock_acquire+0x6b5/0x2cf0 [ 367.610074][T10301] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.610103][T10301] ? futex_wait+0x2a2/0x390 [ 367.610151][T10301] ? __fget_files+0x2a/0x420 [ 367.610176][T10301] ? __fget_files+0x3a0/0x420 [ 367.610206][T10301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 367.610231][T10301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.610263][T10301] ? rcu_is_watching+0x15/0xb0 [ 367.610291][T10301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.610309][T10301] do_syscall_64+0x15f/0xf80 [ 367.610325][T10301] ? trace_irq_disable+0x3b/0x140 [ 367.610347][T10301] ? clear_bhb_loop+0x40/0x90 [ 367.610368][T10301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.610384][T10301] RIP: 0033:0x7fdfe8d9ce59 [ 367.610402][T10301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.610416][T10301] RSP: 002b:00007fdfe9d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.610434][T10301] RAX: ffffffffffffffda RBX: 00007fdfe9015fa0 RCX: 00007fdfe8d9ce59 [ 367.610446][T10301] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000006 [ 367.610457][T10301] RBP: 00007fdfe8e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 367.610467][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.610476][T10301] R13: 00007fdfe9016038 R14: 00007fdfe9015fa0 R15: 00007fdfe913fa48 [ 367.610505][T10301] [ 367.631286][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.877022][ T5745] usb 5-1: USB disconnect, device number 90 [ 367.915345][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.101448][ T29] audit: type=1326 audit(1779569527.345:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12139ce59 code=0x7ffc0000 [ 368.147218][ T809] usb 3-1: USB disconnect, device number 103 [ 368.156338][ T29] audit: type=1326 audit(1779569527.375:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb12139ce59 code=0x7ffc0000 [ 368.192122][ T29] audit: type=1326 audit(1779569527.385:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12139ce59 code=0x7ffc0000 [ 368.222961][ T29] audit: type=1326 audit(1779569527.385:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12139ce59 code=0x7ffc0000 [ 368.254399][ T29] audit: type=1326 audit(1779569527.395:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb12135d68e code=0x7ffc0000 [ 368.279198][ T29] audit: type=1326 audit(1779569527.395:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb12139ce59 code=0x7ffc0000 [ 368.311740][ T29] audit: type=1326 audit(1779569527.395:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12139ce59 code=0x7ffc0000 [ 368.341292][ T29] audit: type=1326 audit(1779569527.395:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12139ce59 code=0x7ffc0000 [ 368.381497][ T809] usb 6-1: USB disconnect, device number 38 [ 368.388522][ T29] audit: type=1326 audit(1779569527.395:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb12135d68e code=0x7ffc0000 [ 368.414228][ T29] audit: type=1326 audit(1779569527.395:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.1.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12139ce59 code=0x7ffc0000 [ 368.471483][T10313] kvm: pic: single mode not supported [ 368.471658][T10313] kvm: pic: non byte read [ 368.485412][T10313] kvm: pic: non byte read [ 368.494260][T10313] kvm: pic: non byte read [ 368.509621][T10313] kvm: pic: non byte read [ 368.523094][T10313] kvm: pic: non byte read [ 368.531426][T10314] ALSA: mixer_oss: invalid OSS volume '' [ 368.538201][T10314] ALSA: mixer_oss: invalid OSS volume '' [ 368.554601][T10314] ALSA: mixer_oss: invalid OSS volume '' [ 368.563593][T10314] ALSA: mixer_oss: invalid OSS volume '' [ 368.569501][T10314] ALSA: mixer_oss: invalid OSS volume '' [ 368.575990][T10314] ALSA: mixer_oss: invalid OSS volume '' [ 368.599666][T10314] ALSA: mixer_oss: invalid OSS volume '' [ 368.865801][T10332] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1231'. [ 368.908071][ T808] usb 7-1: USB disconnect, device number 33 [ 368.986236][ T5745] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 369.045743][ T5729] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 369.157735][ T5745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.170826][ T5745] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 369.189750][ T5745] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.204657][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.219396][ T5729] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 369.230136][ T5745] usb 6-1: Product: syz [ 369.234333][ T5729] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 369.246606][ T5745] usb 6-1: Manufacturer: syz [ 369.252787][ T5745] usb 6-1: SerialNumber: syz [ 369.262958][ T5729] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 369.272957][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.282667][ T5729] usb 3-1: Product: syz [ 369.287602][ T5729] usb 3-1: Manufacturer: syz [ 369.292337][ T5729] usb 3-1: SerialNumber: syz [ 369.306374][ T5729] usb 3-1: config 0 descriptor?? [ 369.502152][T10328] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 369.523481][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.542214][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.785648][ T809] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 369.936156][ T809] usb 7-1: Using ep0 maxpacket: 16 [ 369.943534][ T809] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 369.954269][ T809] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 369.967073][ T5744] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 369.968929][ T809] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 369.991984][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.000154][ T809] usb 7-1: Product: syz [ 370.004443][ T809] usb 7-1: Manufacturer: syz [ 370.024221][ T809] usb 7-1: SerialNumber: syz [ 370.115625][ T5744] usb 5-1: Using ep0 maxpacket: 16 [ 370.124860][T10328] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 370.142054][ T5744] usb 5-1: config 3 has an invalid interface number: 68 but max is 0 [ 370.150553][ T5744] usb 5-1: config 3 has no interface number 0 [ 370.157478][ T5744] usb 5-1: config 3 interface 68 altsetting 188 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.172175][ T5744] usb 5-1: config 3 interface 68 has no altsetting 0 [ 370.190027][ T5744] usb 5-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice= f.ab [ 370.199543][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.208445][ T5744] usb 5-1: Product: syz [ 370.213017][ T5744] usb 5-1: Manufacturer: syz [ 370.218818][ T5744] usb 5-1: SerialNumber: syz [ 370.253329][ T809] usb 7-1: USB disconnect, device number 34 [ 370.452022][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. [ 370.725716][ T808] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 370.752158][ T5744] usb 5-1: Could not find all expected endpoints [ 370.765328][ T5744] usb 5-1: USB disconnect, device number 91 [ 370.865786][ T808] usb 2-1: device descriptor read/64, error -71 [ 371.115870][ T808] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 371.265675][ T808] usb 2-1: device descriptor read/64, error -71 [ 371.375973][ T808] usb usb2-port1: attempt power cycle [ 371.725625][ T808] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 371.746333][ T808] usb 2-1: device descriptor read/8, error -71 [ 371.755994][ T5745] cdc_ncm 6-1:1.0: failed to get mac address [ 371.763478][ T5745] cdc_ncm 6-1:1.0: bind() failure [ 371.775298][ T5745] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 371.793717][ T5745] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 371.808910][ T5745] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 371.842595][ T5745] usb 6-1: USB disconnect, device number 39 [ 371.980109][ T5729] mos7840 3-1:0.0: required endpoints missing [ 371.998104][ T808] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 372.017244][ T5729] usb 3-1: USB disconnect, device number 104 [ 372.031972][T10390] netlink: 'syz.2.1250': attribute type 8 has an invalid length. [ 372.047636][ T808] usb 2-1: device descriptor read/8, error -71 [ 372.165952][T10394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.187781][ T808] usb usb2-port1: unable to enumerate USB device [ 372.285613][ T5745] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 372.421445][T10402] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 372.437884][ T5745] usb 6-1: Using ep0 maxpacket: 16 [ 372.452415][ T5745] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 372.467848][ T5745] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 372.478238][ T5745] usb 6-1: config 166 has no interface number 0 [ 372.484526][ T5745] usb 6-1: config 166 has no interface number 1 [ 372.491367][ T5745] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 372.503695][ T5745] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 372.515883][ T5745] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 372.526777][ T5745] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 372.540170][ T5745] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 372.560016][ T5745] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 372.574857][ T5745] usb 6-1: config 166 interface 177 has no altsetting 0 [ 372.582812][ T5745] usb 6-1: config 166 interface 34 has no altsetting 0 [ 372.593008][ T5745] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 372.602589][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.611712][ T5745] usb 6-1: Product: syz [ 372.617550][ T5745] usb 6-1: Manufacturer: syz [ 372.622942][ T5745] usb 6-1: SerialNumber: syz [ 372.856211][ T809] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 372.888819][ T5745] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 373.008514][ T809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 373.017534][ T809] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 373.026974][ T809] usb 5-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 373.036153][ T809] usb 5-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 373.046986][ T809] usb 5-1: config 63 has no interface number 0 [ 373.053237][ T809] usb 5-1: config 63 interface 66 has no altsetting 0 [ 373.062987][ T809] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 373.072272][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.080580][ T809] usb 5-1: Product: syz [ 373.084901][ T809] usb 5-1: Manufacturer: syz [ 373.090083][ T809] usb 5-1: SerialNumber: syz [ 373.210522][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 373.210539][ T29] audit: type=1326 audit(1779569532.455:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.246546][ T29] audit: type=1326 audit(1779569532.455:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.273575][ T29] audit: type=1326 audit(1779569532.485:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.283614][T10411] Option ''MO' to dns_resolver key: bad/missing value [ 373.299000][ T29] audit: type=1326 audit(1779569532.485:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.353978][ T29] audit: type=1326 audit(1779569532.485:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.354931][ T809] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 373.379068][ T29] audit: type=1326 audit(1779569532.485:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.388288][ T809] uvcvideo 5-1:63.66: No valid video chain found. [ 373.411442][ T29] audit: type=1326 audit(1779569532.485:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.427771][ T809] usb 5-1: USB disconnect, device number 92 [ 373.444207][ T29] audit: type=1326 audit(1779569532.485:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.473007][ T29] audit: type=1326 audit(1779569532.485:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.581672][ T29] audit: type=1326 audit(1779569532.485:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.2.1256" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfe8d9ce59 code=0x7ffc0000 [ 373.805609][ T5716] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 373.875624][ T809] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 373.915611][ T5717] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 373.915611][ T808] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 373.957569][ T5716] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.967889][ T5716] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 373.977409][ T5716] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 373.986570][ T5716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.997411][ T5716] usb 7-1: config 0 descriptor?? [ 374.007621][ T5716] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 374.014664][ T5716] dvb-usb: bulk message failed: -22 (3/0) [ 374.026450][ T5716] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 374.035919][ T5716] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 374.043325][ T5716] usb 7-1: media controller created [ 374.049333][ T809] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 374.059767][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.068330][ T809] usb 5-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 374.079174][ T809] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 374.087713][ T808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.093938][ T809] usb 5-1: config 63 has 2 interfaces, different from the descriptor's value: 1 [ 374.109087][ T808] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 374.110028][ T5716] dvb-usb: bulk message failed: -22 (6/0) [ 374.125279][ T809] usb 5-1: config 63 has no interface number 1 [ 374.129680][ T808] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.131775][ T5716] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 374.141792][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.148335][ T5717] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.148374][ T5717] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 374.154073][ T809] usb 5-1: too many endpoints for config 63 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 374.157484][ T808] usb 2-1: Product: syz [ 374.171812][ T809] usb 5-1: config 63 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 374.208575][ T808] usb 2-1: Manufacturer: syz [ 374.209995][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.217505][ T808] usb 2-1: SerialNumber: syz [ 374.224740][ T5716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31 [ 374.237644][ T5717] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.246950][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.248407][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.255316][ T5717] usb 3-1: Product: syz [ 374.268750][ T5717] usb 3-1: Manufacturer: syz [ 374.273811][ T5716] dvb-usb: schedule remote query interval to 150 msecs. [ 374.282375][ T5716] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 374.293572][ T5717] usb 3-1: SerialNumber: syz [ 374.314139][ T5716] usb 7-1: USB disconnect, device number 35 [ 374.325418][ T809] usb 5-1: config 63 interface 66 has no altsetting 0 [ 374.342134][ T809] usb 5-1: config 63 interface 0 has no altsetting 0 [ 374.362122][ T809] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=e4.df [ 374.373604][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.389902][ T5716] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 374.473359][T10415] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 374.537431][T10417] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 374.617177][ T809] usb 5-1: string descriptor 0 read error: -71 [ 374.637376][ T809] uvcvideo 5-1:63.66: Found UVC 0.07 device (0471:0307) [ 374.645292][ T809] uvcvideo 5-1:63.66: No valid video chain found. [ 374.656536][ T809] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 374.664640][ T809] pwc: send_video_command error -71 [ 374.671148][ T809] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 374.679378][ T809] Philips webcam 5-1:63.0: probe with driver Philips webcam failed with error -71 [ 374.698746][ T809] usb 5-1: USB disconnect, device number 93 [ 374.882835][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1260'. [ 374.897340][T10420] tc_dump_action: action bad kind [ 374.970407][ T5745] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 375.029074][ T5745] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 375.037120][ T5745] uvcvideo 6-1:166.34: No valid video chain found. [ 375.069690][ T5745] usb 6-1: USB disconnect, device number 40 [ 375.090253][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1261'. [ 375.095483][T10415] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 375.149411][T10417] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 375.226628][T10433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.260788][T10430] program syz.6.1261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.370300][T10432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1262'. [ 375.489981][T10432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.515289][T10432] program syz.5.1262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.595583][ T5745] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 375.775730][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 375.785296][ T5745] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 375.802219][ T5745] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 375.823427][ T5745] usb 5-1: config 166 has no interface number 0 [ 375.839957][ T5745] usb 5-1: config 166 has no interface number 1 [ 375.855758][ T5745] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 375.885051][ T5745] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 375.899004][ T5745] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 375.920346][ T5745] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 375.941202][ T5745] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 375.957320][ T5745] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 375.978633][ T5745] usb 5-1: config 166 interface 177 has no altsetting 0 [ 375.989593][ T5745] usb 5-1: config 166 interface 34 has no altsetting 0 [ 376.006238][ T5745] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 376.017723][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.030064][ T5745] usb 5-1: Product: syz [ 376.038175][ T5745] usb 5-1: Manufacturer: syz [ 376.050033][ T5745] usb 5-1: SerialNumber: syz [ 376.340515][ T5745] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 376.543935][ T5745] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 376.637353][ T5745] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 376.663054][ T5745] uvcvideo 5-1:166.34: No valid video chain found. [ 376.718443][ T5745] usb 5-1: USB disconnect, device number 94 [ 376.752621][ T5717] cdc_ncm 3-1:1.0: failed to get mac address [ 376.793498][ T808] cdc_ncm 2-1:1.0: failed to get mac address [ 376.813879][ T5717] cdc_ncm 3-1:1.0: bind() failure [ 376.820064][ T808] cdc_ncm 2-1:1.0: bind() failure [ 376.892368][ T808] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 376.892729][ T5717] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 376.949878][ T808] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 376.964739][ T5717] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 376.988490][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 377.009526][ T808] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 377.026507][ T5717] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 377.057387][ T808] usb 2-1: USB disconnect, device number 93 [ 377.086684][ T5717] usb 3-1: USB disconnect, device number 105 [ 377.308453][T10456] tls_set_device_offload_rx: netdev not found [ 377.319597][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1267'. [ 377.436339][ T5717] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 377.605604][ T5717] usb 3-1: Using ep0 maxpacket: 8 [ 377.606820][ T808] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 377.642657][ T5717] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 377.681463][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.713608][ T5717] usb 3-1: Product: syz [ 377.727710][ T5717] usb 3-1: Manufacturer: syz [ 377.745139][ T5717] usb 3-1: SerialNumber: syz [ 377.767133][ T5717] usb 3-1: config 0 descriptor?? [ 377.789436][ T808] usb 7-1: Using ep0 maxpacket: 16 [ 377.830517][ T808] usb 7-1: config 0 has no interfaces? [ 377.856459][ T808] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.875407][ T808] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.906530][ T808] usb 7-1: Manufacturer: syz [ 377.930412][ T808] usb 7-1: config 0 descriptor?? [ 377.953972][T10485] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10485 comm: syz.5.1275) [ 377.989421][ T5717] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 378.016180][ T5716] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 378.177737][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.206718][ T5716] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 378.233813][ T5716] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.249992][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.270285][ T5716] usb 5-1: Product: syz [ 378.285816][ T5716] usb 5-1: Manufacturer: syz [ 378.302466][ T5716] usb 5-1: SerialNumber: syz [ 378.460835][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.467286][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.533535][T10481] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 378.826077][ T5717] usb write operation failed. (-71) [ 378.851300][ T5717] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 378.874413][ T5717] dvbdev: DVB: registering new adapter (Terratec H7) [ 378.894163][ T5717] usb 3-1: media controller created [ 378.900325][ T5717] usb read operation failed. (-71) [ 378.906088][ T5717] usb write operation failed. (-71) [ 378.951539][ T5717] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 379.008175][ T5717] usb 3-1: USB disconnect, device number 106 [ 379.167495][T10481] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 379.181454][T10496] fuse: Unknown parameter 'f' [ 379.269335][T10499] fuse: Bad value for 'fd' [ 379.503365][T10507] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1279'. [ 379.514251][T10506] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1279'. [ 379.815707][ T5729] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 379.965738][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 379.976208][ T5729] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 379.985773][ T5729] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 379.994307][ T5729] usb 2-1: config 166 has no interface number 0 [ 380.002971][ T5729] usb 2-1: config 166 has no interface number 1 [ 380.009992][ T5729] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 380.022177][ T5729] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 380.033597][ T5717] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 380.034697][ T5729] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 380.052452][ T5729] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 380.065920][ T5729] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 380.078788][ T5729] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 380.089472][ T5729] usb 2-1: config 166 interface 177 has no altsetting 0 [ 380.097020][ T5729] usb 2-1: config 166 interface 34 has no altsetting 0 [ 380.109441][ T5729] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 380.139254][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.158180][ T5729] usb 2-1: Product: syz [ 380.170657][ T5729] usb 2-1: Manufacturer: syz [ 380.181422][ T5729] usb 2-1: SerialNumber: syz [ 380.195634][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 380.203119][ T5717] usb 3-1: config 3 has an invalid interface number: 231 but max is 0 [ 380.222842][ T5717] usb 3-1: config 3 has no interface number 0 [ 380.234992][ T5717] usb 3-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 380.262743][ T5717] usb 3-1: config 3 interface 231 has no altsetting 0 [ 380.294647][ T5717] usb 3-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 380.322555][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.348742][ T5717] usb 3-1: Product: syz [ 380.359960][ T5717] usb 3-1: Manufacturer: syz [ 380.367946][ T5717] usb 3-1: SerialNumber: syz [ 380.464001][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.478183][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.624979][ T5717] kvaser_usb 3-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 380.699705][ T5717] usb 3-1: USB disconnect, device number 107 [ 380.823660][T10521] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10521 comm: syz.5.1283) [ 380.863515][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 380.863526][ T29] audit: type=1800 audit(1779569540.095:1337): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1283" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27592 res=0 errno=0 [ 380.902359][ T5716] cdc_ncm 5-1:1.0: failed to get mac address [ 380.915994][ T5716] cdc_ncm 5-1:1.0: bind() failure [ 380.927884][ T5716] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 380.936331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 380.947777][ T5716] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 380.957968][ T5716] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 380.972123][ T5716] usb 5-1: USB disconnect, device number 95 [ 381.154133][ T5709] usb 7-1: USB disconnect, device number 36 [ 381.409391][T10518] netlink: 'syz.1.1280': attribute type 33 has an invalid length. [ 381.417391][T10518] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1280'. [ 381.465939][T10518] `: renamed from team0 (while UP) [ 381.606029][ T5709] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 381.616039][ T5716] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 381.756659][ T5716] usb 3-1: device descriptor read/64, error -71 [ 381.777415][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.796055][ T5709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.807905][ T5709] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 381.818021][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.836037][ T5709] usb 7-1: config 0 descriptor?? [ 381.995719][ T5716] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 382.125817][ T5716] usb 3-1: device descriptor read/64, error -71 [ 382.236606][ T5716] usb usb3-port1: attempt power cycle [ 382.251798][ T5709] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 382.261976][ T5709] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 382.268831][ T5709] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 382.275961][ T5709] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 382.282750][ T5709] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 382.290398][ T5709] elan 0003:04F3:0755.0018: failed to start in urb: -90 [ 382.298995][ T5717] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 382.309074][ T5709] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 382.460575][ T5744] usb 7-1: USB disconnect, device number 37 [ 382.479291][ T5717] usb 6-1: unable to get BOS descriptor or descriptor too short [ 382.489504][ T5717] usb 6-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 382.507628][ T5717] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7 [ 382.520417][ T5717] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50432, setting to 1024 [ 382.537568][ T5717] usb 6-1: string descriptor 0 read error: -22 [ 382.544081][ T5717] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 382.554235][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.575607][ T5716] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 382.606796][ T5716] usb 3-1: device descriptor read/8, error -71 [ 382.845687][ T5716] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 382.866328][ T5716] usb 3-1: device descriptor read/8, error -71 [ 382.926746][ T5729] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 382.977699][ T5716] usb usb3-port1: unable to enumerate USB device [ 383.020093][ T5729] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 383.125134][ T5729] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 383.141677][ T5729] uvcvideo 2-1:166.34: No valid video chain found. [ 383.163978][ T5729] usb 2-1: USB disconnect, device number 94 [ 383.356388][T10555] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1291'. [ 383.411812][ T5717] usb 6-1: USB disconnect, device number 41 [ 384.175622][ T5729] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 384.345629][ T5729] usb 5-1: Using ep0 maxpacket: 16 [ 384.374134][ T5729] usb 5-1: config 3 has an invalid interface number: 231 but max is 0 [ 384.390097][T10576] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1297'. [ 384.409259][ T5729] usb 5-1: config 3 has no interface number 0 [ 384.419489][ T5729] usb 5-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 384.440375][ T5729] usb 5-1: config 3 interface 231 has no altsetting 0 [ 384.468510][ T5729] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 384.510910][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.543984][ T5729] usb 5-1: Product: syz [ 384.553019][ T5729] usb 5-1: Manufacturer: syz [ 384.563039][ T5729] usb 5-1: SerialNumber: syz [ 384.801288][ T5729] kvaser_usb 5-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 384.851564][ T5729] usb 5-1: USB disconnect, device number 96 [ 385.657268][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 386.135803][ T5729] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 386.297192][ T5729] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 386.320274][ T5729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.358387][ T5729] usb 7-1: config 0 descriptor?? [ 386.404508][ T5729] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 386.655627][ T5709] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 386.797058][ T5709] usb 2-1: device descriptor read/64, error -71 [ 387.045821][ T5709] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 387.195835][ T5709] usb 2-1: device descriptor read/64, error -71 [ 387.318503][ T5709] usb usb2-port1: attempt power cycle [ 387.675703][ T5709] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 387.706670][ T5709] usb 2-1: device descriptor read/8, error -71 [ 387.956346][ T5709] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 387.986493][ T5709] usb 2-1: device descriptor read/8, error -71 [ 388.097793][ T5709] usb usb2-port1: unable to enumerate USB device [ 388.435593][ T5709] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 388.481145][T10632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1315'. [ 388.576749][ T5709] usb 6-1: device descriptor read/64, error -71 [ 388.805605][ T5717] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 388.815683][ T5709] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 388.920629][ T5729] gspca_stv06xx: I2C: Read error writing address: -71 [ 388.939838][ T5729] usb 7-1: USB disconnect, device number 38 [ 388.957797][ T5709] usb 6-1: device descriptor read/64, error -71 [ 388.975640][ T5717] usb 5-1: Using ep0 maxpacket: 32 [ 388.983263][ T5717] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 389.006495][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 389.027519][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 389.037624][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 389.048906][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 389.062384][ T5717] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 389.074586][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.083096][ T5709] usb usb6-port1: attempt power cycle [ 389.089867][ T5717] usb 5-1: Product: syz [ 389.094596][ T5717] usb 5-1: Manufacturer: syz [ 389.103091][ T5717] usb 5-1: SerialNumber: syz [ 389.113559][ T5717] usb 5-1: config 0 descriptor?? [ 389.425912][ T5709] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 389.469033][ T5709] usb 6-1: device descriptor read/8, error -71 [ 389.523190][ T5717] input input32: Device does not respond to id packet M [ 389.544756][T10643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.725655][ T5709] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 389.767637][ T5709] usb 6-1: device descriptor read/8, error -71 [ 389.877822][ T5709] usb usb6-port1: unable to enumerate USB device [ 389.928230][ T5717] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 389.953251][ T5717] input input32: Device does not respond to id packet P [ 389.971090][ T5717] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 390.016484][ T5717] input input32: Device does not respond to id packet B [ 390.056037][ T5717] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 390.074742][ T5717] input input32: Device does not respond to id packet N [ 390.098335][ T5717] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 390.113315][ T5717] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 390.129072][ T5717] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 390.143162][ T5717] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 390.164997][ T5717] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32 [ 390.210627][ T5717] usb 5-1: USB disconnect, device number 97 [ 390.255640][ T5745] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 390.415879][ T5745] usb 7-1: Using ep0 maxpacket: 16 [ 390.428100][ T5745] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 390.447418][ T5745] usb 7-1: config 166 has an invalid interface number: 34 but max is 1 [ 390.464138][ T5745] usb 7-1: config 166 has no interface number 0 [ 390.497367][ T5745] usb 7-1: config 166 has no interface number 1 [ 390.512108][ T5745] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 390.529901][ T5745] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 390.579092][ T5745] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 390.614413][ T5745] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 390.643981][ T5745] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 390.656823][ T809] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 390.684013][ T5745] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 390.710598][ T5745] usb 7-1: config 166 interface 177 has no altsetting 0 [ 390.731559][ T5745] usb 7-1: config 166 interface 34 has no altsetting 0 [ 390.786702][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 390.803548][ T5745] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 390.828210][ T5745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.867906][ T5745] usb 7-1: Product: syz [ 390.882567][ T5745] usb 7-1: Manufacturer: syz [ 390.888759][ T809] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 390.899920][ T5745] usb 7-1: SerialNumber: syz [ 390.921676][ T809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.960630][ T809] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 390.995827][ T809] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.034929][T10664] fuse: Bad value for 'fd' [ 391.039536][ T809] usb 3-1: Product: syz [ 391.051329][ T809] usb 3-1: Manufacturer: syz [ 391.062179][ T809] usb 3-1: SerialNumber: syz [ 391.083893][ T809] usb 3-1: config 0 descriptor?? [ 391.110318][T10657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 391.162045][ T809] usb 3-1: selecting invalid altsetting 0 [ 391.296012][ T5745] ums-realtek 7-1:166.177: USB Mass Storage device detected [ 391.504864][ T5745] ums-realtek 7-1:166.34: USB Mass Storage device detected [ 391.680306][ T5745] uvcvideo 7-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 391.720328][ T5745] uvcvideo 7-1:166.34: No valid video chain found. [ 391.752225][ T5745] usb 7-1: USB disconnect, device number 39 [ 391.847310][ T29] audit: type=1326 audit(1779569551.085:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 391.861811][T10678] fuse: Invalid uid '8' [ 391.959620][ T29] audit: type=1326 audit(1779569551.095:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 392.081766][ T29] audit: type=1326 audit(1779569551.095:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 392.157116][ T29] audit: type=1326 audit(1779569551.095:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 392.239659][ T29] audit: type=1326 audit(1779569551.095:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 392.309537][ T29] audit: type=1326 audit(1779569551.095:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 392.398093][ T29] audit: type=1326 audit(1779569551.095:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 392.494561][ T29] audit: type=1326 audit(1779569551.095:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 392.590582][ T29] audit: type=1326 audit(1779569551.095:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 392.615805][ T29] audit: type=1326 audit(1779569551.095:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.5.1327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a53b9ce59 code=0x7ffc0000 [ 393.145586][ T809] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 393.195650][ T5709] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 393.306088][ T809] usb 7-1: Using ep0 maxpacket: 16 [ 393.329173][ T809] usb 7-1: config 3 has an invalid interface number: 231 but max is 0 [ 393.363934][ T809] usb 7-1: config 3 has no interface number 0 [ 393.370442][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 393.379925][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.395609][ T809] usb 7-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 393.408513][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 393.429468][ T809] usb 7-1: config 3 interface 231 has no altsetting 0 [ 393.450486][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.484644][ T5709] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 393.495462][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 393.503798][ T809] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 393.528788][ T5709] usb 5-1: Product: syz [ 393.533024][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.545691][ T5709] usb 5-1: Manufacturer: syz [ 393.555625][ T809] usb 7-1: Product: syz [ 393.559820][ T5709] usb 5-1: SerialNumber: syz [ 393.568139][ T5745] usb 3-1: USB disconnect, device number 112 [ 393.579731][ T809] usb 7-1: Manufacturer: syz [ 393.601050][ T5709] usb 5-1: config 0 descriptor?? [ 393.609707][ T809] usb 7-1: SerialNumber: syz [ 393.698488][ T5709] rc_core: IR keymap rc-imon-rsc not found [ 393.719735][ T5709] Registered IR keymap rc-empty [ 393.766896][ T5709] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 393.806945][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 393.807971][ T5709] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 393.938521][ T809] kvaser_usb 7-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 394.017930][ T809] usb 7-1: USB disconnect, device number 40 [ 394.219223][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.262262][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.318239][ T5744] usb 5-1: USB disconnect, device number 98 [ 394.480346][T10706] fuse: Invalid uid '8' [ 395.028124][T10711] sctp: [Deprecated]: syz.4.1336 (pid 10711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.028124][T10711] Use struct sctp_sack_info instead [ 395.078375][T10708] bond3 (unregistering): Released all slaves [ 395.203599][T10714] loop3: detected capacity change from 0 to 7 [ 395.267402][T10714] Dev loop3: unable to read RDB block 7 [ 395.297881][T10714] loop3: unable to read partition table [ 395.336944][T10714] loop3: partition table beyond EOD, truncated [ 395.355587][ T5744] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 395.376062][T10714] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 395.547789][ T5744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.572724][ T5744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.614972][ T5744] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.664651][ T5744] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.673929][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.697743][ T5744] usb 5-1: config 0 descriptor?? [ 395.767407][T10722] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10722 comm: syz.1.1339) [ 396.156116][ T5744] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 396.696814][ T5744] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 396.825592][ T5729] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 396.869385][ T5744] usb 7-1: config 0 has no interfaces? [ 396.902431][ T5744] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 396.922849][ T5744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.943804][ T5744] usb 7-1: Product: syz [ 396.954982][ T5716] usb 5-1: USB disconnect, device number 99 [ 396.963896][ T5744] usb 7-1: Manufacturer: syz [ 396.971176][ T5744] usb 7-1: SerialNumber: syz [ 396.989772][ T5744] usb 7-1: config 0 descriptor?? [ 396.997293][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 397.013140][ T5729] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 397.042189][ T5729] usb 3-1: config 0 has no interface number 0 [ 397.067886][ T5729] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 397.093954][ T5709] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 397.102912][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.103993][ T5709] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 397.121548][ T5729] usb 3-1: Product: syz [ 397.129484][ T5729] usb 3-1: Manufacturer: syz [ 397.137435][ T5729] usb 3-1: SerialNumber: syz [ 397.158848][ T5729] usb 3-1: config 0 descriptor?? [ 397.169012][ T5729] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 397.169255][ T5709] hid-generic 0000:0000:0003.001A: hidraw0: HID v0.02 Device [syz0] on syz0 [ 397.248979][ T808] usb 7-1: USB disconnect, device number 41 [ 397.331286][T10746] fido_id[10746]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 397.382850][ T5729] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 397.439789][ T5729] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 397.506969][T10754] tipc: Enabled bearer , priority 0 [ 397.514806][T10754] syzkaller0: entered promiscuous mode [ 397.520900][T10754] syzkaller0: entered allmulticast mode [ 397.560567][T10754] tipc: Resetting bearer [ 397.569684][T10753] tipc: Resetting bearer [ 397.576875][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.587028][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.612146][T10753] tipc: Disabling bearer [ 397.655653][ T5709] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 397.811283][T10733] xt_TCPMSS: Only works on TCP SYN packets [ 397.821403][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 397.851994][ T5709] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 397.885188][ T5709] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 397.889713][T10762] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10762 comm: syz.5.1351) [ 397.915319][ T5709] usb 2-1: config 166 has no interface number 0 [ 397.922915][ T5709] usb 2-1: config 166 has no interface number 1 [ 397.945319][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 397.945334][ T29] audit: type=1800 audit(1779569557.175:1383): pid=10762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1351" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27592 res=0 errno=0 [ 397.992871][ T5709] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 398.006119][ T5709] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 398.017442][ T5709] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 398.028329][ T5709] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 398.089447][ T5709] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 398.108897][ T5709] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 398.146948][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 398.154844][ T5729] usb 3-1: USB disconnect, device number 113 [ 398.190205][ T5709] usb 2-1: config 166 interface 177 has no altsetting 0 [ 398.200443][ T5729] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 398.224831][ T5709] usb 2-1: config 166 interface 34 has no altsetting 0 [ 398.242583][ T5729] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 398.266877][ T5709] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 398.289169][ T5729] quatech2 3-1:0.51: device disconnected [ 398.304673][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.322237][ T5709] usb 2-1: Product: syz [ 398.340445][ T5709] usb 2-1: Manufacturer: syz [ 398.355591][ T5709] usb 2-1: SerialNumber: syz [ 398.646195][ T5709] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 398.844374][ T5709] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 398.971485][ T5709] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 399.003942][T10787] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1356'. [ 399.024117][ T5709] uvcvideo 2-1:166.34: No valid video chain found. [ 399.045655][ T5709] usb 2-1: USB disconnect, device number 99 [ 399.290939][ T29] audit: type=1800 audit(1779569558.535:1384): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1357" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 399.419988][T10795] binder: BINDER_SET_CONTEXT_MGR already set [ 399.444056][T10795] binder: 10794:10795 ioctl 4018620d 200000000040 returned -16 [ 399.575812][ T30] INFO: task syz.0.723:8393 blocked for more than 143 seconds. [ 399.598111][ T30] Tainted: G L syzkaller #0 [ 399.614658][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.634571][ T30] task:syz.0.723 state:D stack:22024 pid:8393 tgid:8390 ppid:5641 task_flags:0x400140 flags:0x00080002 [ 399.668353][ T30] Call Trace: [ 399.679394][ T30] [ 399.691360][ T30] __schedule+0x1821/0x5740 [ 399.699185][ T30] ? __pfx___schedule+0x10/0x10 [ 399.705590][ T5709] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 399.715404][ T30] ? schedule+0x90/0x360 [ 399.723006][ T30] schedule+0x164/0x360 [ 399.725595][ T808] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 399.739892][ T30] schedule_preempt_disabled+0x13/0x30 [ 399.745764][ T30] __mutex_lock+0x7f7/0x1550 [ 399.750465][ T30] ? __mutex_lock+0x608/0x1550 [ 399.755325][ T30] ? usbdev_open+0x182/0x770 [ 399.760069][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 399.765186][ T30] ? bus_find_device+0x27d/0x2d0 [ 399.770310][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 399.775805][ T30] ? usbdev_open+0xa7/0x770 [ 399.780426][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 399.788299][ T30] usbdev_open+0x182/0x770 [ 399.792744][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.797886][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 399.802832][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 399.808364][ T30] chrdev_open+0x4cd/0x5e0 [ 399.812823][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 399.817822][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 399.824165][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 399.829158][ T30] do_dentry_open+0x785/0x14e0 [ 399.833944][ T30] vfs_open+0x3b/0x340 [ 399.838079][ T30] ? path_openat+0x2df0/0x3860 [ 399.842857][ T30] path_openat+0x2e08/0x3860 [ 399.847685][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 399.869842][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 399.879616][ T30] ? stack_depot_save_flags+0x33/0x810 [ 399.885682][ T5709] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 399.900599][ T30] ? __pfx_path_openat+0x10/0x10 [ 399.910003][ T808] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.915614][ T5716] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 399.927989][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.928009][ T5709] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 399.944316][ T808] usb 2-1: Product: syz [ 399.944382][ T30] ? __x64_sys_openat+0x138/0x170 [ 399.948691][ T808] usb 2-1: Manufacturer: syz [ 399.958371][ T808] usb 2-1: SerialNumber: syz [ 399.963307][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 399.971915][ T30] do_file_open+0x23e/0x4a0 [ 399.976996][ T5709] usb 6-1: config 166 has no interface number 0 [ 399.978167][ T808] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.996995][ T30] ? __pfx_do_file_open+0x10/0x10 [ 399.999725][ T5744] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.014926][ T5709] usb 6-1: config 166 has no interface number 1 [ 400.024824][ T30] ? _raw_spin_unlock+0x28/0x50 [ 400.036404][ T5709] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 400.048007][ T30] ? alloc_fd+0x64b/0x6c0 [ 400.059619][ T30] do_sys_openat2+0x113/0x200 [ 400.080186][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.085901][ T5709] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 400.101523][ T30] ? exc_page_fault+0x6a/0xc0 [ 400.109630][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 400.119516][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 400.124601][ T5709] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 400.135708][ T30] __x64_sys_openat+0x138/0x170 [ 400.140801][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.150707][ T30] do_syscall_64+0x15f/0xf80 [ 400.151038][ T5709] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 400.151603][ T5716] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 400.155634][ T30] ? trace_irq_disable+0x3b/0x140 [ 400.181554][ T30] ? clear_bhb_loop+0x40/0x90 [ 400.189051][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.190304][ T5709] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 400.190342][ T5709] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 400.196678][ T30] RIP: 0033:0x7fe80315d68e [ 400.225456][ T30] RSP: 002b:00007fe8013d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 400.235671][ T5716] usb 5-1: config 0 has no interface number 0 [ 400.235740][ T30] RAX: ffffffffffffffda RBX: 00007fe8013d56c0 RCX: 00007fe80315d68e [ 400.252908][ T30] RDX: 000000000002a401 RSI: 00007fe8013d4c00 RDI: ffffffffffffff9c [ 400.261126][ T5716] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.272302][ T5709] usb 6-1: config 166 interface 177 has no altsetting 0 [ 400.282404][ T30] RBP: 00007fe8013d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 400.282421][ T5716] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.301871][ T5709] usb 6-1: config 166 interface 34 has no altsetting 0 [ 400.309261][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.319960][ T5709] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 400.329365][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.343532][ T5709] usb 6-1: Product: syz [ 400.348241][ T5709] usb 6-1: Manufacturer: syz [ 400.354050][ T5716] usb 5-1: config 0 descriptor?? [ 400.359559][ T5709] usb 6-1: SerialNumber: syz [ 400.379158][ T5716] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 400.391954][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 400.435745][ T30] R13: 00007fe803416218 R14: 00007fe803416180 R15: 00007fe80353fa48 [ 400.459255][ T30] [ 400.489099][ T30] INFO: task syz.3.730:8431 blocked for more than 144 seconds. [ 400.511020][ T30] Tainted: G L syzkaller #0 [ 400.535765][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.538028][T10801] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 400.572840][ T30] task:syz.3.730 state:D stack:25208 pid:8431 tgid:8430 ppid:5643 task_flags:0x400040 flags:0x00080002 [ 400.600140][T10807] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 400.610583][T10803] IPVS: stopping backup sync thread 10807 ... [ 400.617002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 400.627245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 400.657862][ T5709] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 400.682744][ T5716] usb 5-1: USB disconnect, device number 100 [ 400.683362][ T808] usb 2-1: USB disconnect, device number 100 [ 400.708443][ T30] Call Trace: [ 400.713793][ T30] [ 400.742195][ T30] __schedule+0x1821/0x5740 [ 400.754465][ T30] ? __pfx___schedule+0x10/0x10 [ 400.765546][ T30] ? schedule+0x90/0x360 [ 400.778324][ T30] schedule+0x164/0x360 [ 400.782530][ T30] schedule_preempt_disabled+0x13/0x30 [ 400.793945][ T30] __mutex_lock+0x7f7/0x1550 [ 400.798694][ T30] ? __mutex_lock+0x608/0x1550 [ 400.804302][ T30] ? usbdev_open+0x182/0x770 [ 400.814072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 400.824251][ T30] ? bus_find_device+0x27d/0x2d0 [ 400.829321][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 400.834702][ T30] ? usbdev_open+0xa7/0x770 [ 400.854688][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 400.860847][ T30] usbdev_open+0x182/0x770 [ 400.874051][ T30] ? kobject_get_unless_zero+0x167/0x1f0 [ 400.881731][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 400.895026][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 400.905632][ T30] chrdev_open+0x4cd/0x5e0 [ 400.915631][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 400.921587][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 400.927967][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 400.932920][ T30] do_dentry_open+0x785/0x14e0 [ 400.938093][ T30] vfs_open+0x3b/0x340 [ 400.942189][ T30] ? path_openat+0x2df0/0x3860 [ 400.946971][ T30] path_openat+0x2e08/0x3860 [ 400.951571][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 400.957011][ T30] ? stack_depot_save_flags+0x33/0x810 [ 400.962493][ T30] ? __pfx_path_openat+0x10/0x10 [ 400.967463][ T30] ? __x64_sys_openat+0x138/0x170 [ 400.972491][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 400.977558][ T30] do_file_open+0x23e/0x4a0 [ 400.982095][ T30] ? __pfx_do_file_open+0x10/0x10 [ 400.987180][ T30] ? _raw_spin_unlock+0x28/0x50 [ 400.992040][ T30] ? alloc_fd+0x64b/0x6c0 [ 400.996549][ T30] do_sys_openat2+0x113/0x200 [ 401.001336][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.006596][ T30] ? exc_page_fault+0x6a/0xc0 [ 401.011300][ T30] __x64_sys_openat+0x138/0x170 [ 401.016376][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.022464][ T30] do_syscall_64+0x15f/0xf80 [ 401.027093][ T30] ? trace_irq_disable+0x3b/0x140 [ 401.032134][ T30] ? clear_bhb_loop+0x40/0x90 [ 401.036883][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.042790][ T30] RIP: 0033:0x7f59abb5d68e [ 401.047226][ T30] RSP: 002b:00007f59ac9d3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.055746][ T30] RAX: ffffffffffffffda RBX: 00007f59ac9d46c0 RCX: 00007f59abb5d68e [ 401.063717][ T30] RDX: 000000000000a401 RSI: 00007f59ac9d3c00 RDI: ffffffffffffff9c [ 401.071700][ T30] RBP: 00007f59ac9d3c00 R08: 0000000000000000 R09: 0000000000000000 [ 401.079717][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 401.087730][ T30] R13: 00007f59abe16038 R14: 00007f59abe15fa0 R15: 00007f59abf3fa48 [ 401.095838][ T5744] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 401.102707][ T30] [ 401.105860][ T30] [ 401.105860][ T30] Showing all locks held in the system: [ 401.113754][ T5744] ath9k_htc: Failed to initialize the device [ 401.125099][ T30] 1 lock held by khungtaskd/30: [ 401.130717][ T808] usb 2-1: ath9k_htc: USB layer deinitialized [ 401.136937][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 401.148512][ T30] 5 locks held by kworker/1:2/808: [ 401.153816][ T30] #0: ffff888021ed6d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 401.165322][ T30] #1: ffffc9000479fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 401.188962][ T30] #2: ffff88802a71a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 401.192063][ T5709] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 401.200530][ T30] #3: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 401.223523][ T30] #4: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 401.233046][ T30] 2 locks held by getty/5384: [ 401.237911][ T30] #0: ffff888036e7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 401.247892][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 401.260196][ T30] 6 locks held by kworker/0:3/5616: [ 401.265424][ T30] #0: ffff888021ed6d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 401.277355][ T30] #1: ffffc9000386fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 401.289396][ T30] #2: ffff88823beb29d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 401.298415][ T30] #3: ffff888034dcc1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 401.307886][ T30] #4: ffff88807ba061a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 401.317393][ T30] #5: ffffffff8e7f99e8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 401.329700][ T30] 4 locks held by udevd/5635: [ 401.334386][ T30] #0: ffff888056471098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 401.343364][ T30] #1: ffff8880577be480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 401.353695][ T30] #2: ffff88803767d5a8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 401.363224][ T30] #3: ffff8880217011d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 401.372609][ T30] 4 locks held by udevd/5645: [ 401.377413][ T30] #0: ffff888034a60ab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 401.386267][ T30] #1: ffff888056b04480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 401.395764][ T30] #2: ffff88805686f878 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 401.405291][ T30] #3: ffff888034dcc1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 401.414671][ T30] 6 locks held by kworker/0:7/5709: [ 401.420509][ T30] #0: ffff888021ed6d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 401.431866][ T30] #1: ffffc900045ffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 401.443870][ T30] #2: ffff88802a8941d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 401.452804][ T30] #3: ffff8880217011d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 401.462174][ T30] #4: ffff88807b69f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 401.471427][ T30] #5: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 401.481388][ T30] 1 lock held by syz.0.723/8393: [ 401.486353][ T30] #0: ffff88823beb29d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 401.495327][ T30] 1 lock held by syz.3.730/8431: [ 401.500718][ T30] #0: ffff88823beb29d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 401.509732][ T30] 1 lock held by syz.4.1361/10802: [ 401.514821][ T30] #0: ffffffff8e962e78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 401.524821][ T30] [ 401.527239][ T30] ============================================= [ 401.527239][ T30] [ 401.535706][ T30] NMI backtrace for cpu 1 [ 401.535723][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 401.535743][ T30] Tainted: [L]=SOFTLOCKUP [ 401.535748][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.535758][ T30] Call Trace: [ 401.535765][ T30] [ 401.535772][ T30] dump_stack_lvl+0xe8/0x150 [ 401.535796][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 401.535817][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 401.535836][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 401.535856][ T30] sys_info+0x135/0x170 [ 401.535872][ T30] watchdog+0xfd3/0x1030 [ 401.535898][ T30] ? watchdog+0x1c9/0x1030 [ 401.535922][ T30] kthread+0x389/0x470 [ 401.535941][ T30] ? __pfx_watchdog+0x10/0x10 [ 401.535958][ T30] ? __pfx_kthread+0x10/0x10 [ 401.535977][ T30] ret_from_fork+0x514/0xb70 [ 401.535996][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 401.536013][ T30] ? __switch_to+0xc79/0x1410 [ 401.536036][ T30] ? __pfx_kthread+0x10/0x10 [ 401.536056][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.536095][ T30] [ 401.536102][ T30] Sending NMI from CPU 1 to CPUs 0: [ 401.651183][ C0] NMI backtrace for cpu 0 [ 401.651202][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.651223][ C0] Tainted: [L]=SOFTLOCKUP [ 401.651229][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.651240][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 401.651268][ C0] Code: 7b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 11 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 401.651282][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 401.651297][ C0] RAX: 0000000000932ccf RBX: ffffffff819a858a RCX: 0000000080000001 [ 401.651309][ C0] RDX: 0000000000000001 RSI: ffffffff8dfacebe RDI: ffffffff8c28b660 [ 401.651320][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 401.651332][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 401.651343][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 401.651354][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 401.651367][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.651379][ C0] CR2: 00007fb1215ea2f8 CR3: 0000000074eac000 CR4: 00000000003526f0 [ 401.651393][ C0] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 401.651402][ C0] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 401.651413][ C0] Call Trace: [ 401.651421][ C0] [ 401.651427][ C0] default_idle+0x9/0x20 [ 401.651444][ C0] default_idle_call+0x72/0xb0 [ 401.651461][ C0] do_idle+0x36a/0x5f0 [ 401.651480][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 401.651503][ C0] ? __pfx_do_idle+0x10/0x10 [ 401.651524][ C0] cpu_startup_entry+0x43/0x60 [ 401.651541][ C0] rest_init+0x2de/0x300 [ 401.651560][ C0] start_kernel+0x38a/0x3e0 [ 401.651584][ C0] x86_64_start_reservations+0x24/0x30 [ 401.651603][ C0] x86_64_start_kernel+0x143/0x1c0 [ 401.651620][ C0] common_startup_64+0x13e/0x147 [ 401.651647][ C0] [ 401.855008][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 401.861865][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 401.872525][ T30] Tainted: [L]=SOFTLOCKUP [ 401.876830][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.886875][ T30] Call Trace: [ 401.890138][ T30] [ 401.893055][ T30] vpanic+0x56c/0xa60 [ 401.897025][ T30] ? __pfx___schedule+0x10/0x10 [ 401.901883][ T30] ? __pfx_vpanic+0x10/0x10 [ 401.906372][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 401.912517][ T30] panic+0xc5/0xd0 [ 401.916224][ T30] ? __pfx_panic+0x10/0x10 [ 401.920624][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 401.925990][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 401.932134][ T30] watchdog+0x102c/0x1030 [ 401.936462][ T30] ? watchdog+0x1c9/0x1030 [ 401.940868][ T30] kthread+0x389/0x470 [ 401.944922][ T30] ? __pfx_watchdog+0x10/0x10 [ 401.949585][ T30] ? __pfx_kthread+0x10/0x10 [ 401.954162][ T30] ret_from_fork+0x514/0xb70 [ 401.958738][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 401.963833][ T30] ? __switch_to+0xc79/0x1410 [ 401.968500][ T30] ? __pfx_kthread+0x10/0x10 [ 401.973078][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.977841][ T30] [ 401.981341][ T30] Kernel Offset: disabled [ 401.985677][ T30] Rebooting in 86400 seconds..