last executing test programs: 7m3.996168713s ago: executing program 3 (id=883): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500fffd0900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a320000000044000000060a050400000000000000000500000008000b40000000001c0004801800018008000100667764000c00028008000240000000040900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x4000) syz_open_dev$sg(0x0, 0x0, 0x8401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x6, 0xa, 0x20, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x3, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r5, &(0x7f00000002c0), 0x0, 0xffe0) socket$kcm(0x10, 0x2, 0x4) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10480, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r8 = fsopen(&(0x7f00000002c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7], 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 7m2.915126642s ago: executing program 3 (id=886): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x78) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="780000001000ffff2f3d7000fcdbdf25000033e1", @ANYRES32=0x0, @ANYBLOB="17200000212001004400128009000100766c616e00000000340002800600010001000000280003800c00010000000000000000000c000100f0ff0700400000000c0001000000000005000000140035006970766c616e30000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x48}, 0xc000042) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r10, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}) io_uring_enter(r8, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r5, &(0x7f0000000080)={0x10000000}) r12 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r12, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0xa2c65) 7m1.787656458s ago: executing program 3 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x18, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x7}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x4000004) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902760002010420040904"], 0x0) r1 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12000059770c40c009000232d3000000010b021200010085dd4fea"], 0x0) (async) userfaultfd(0x80001) (async) r2 = syz_io_uring_setup(0x22f, &(0x7f00000001c0)={0x0, 0x5322, 0x8, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_disconnect(r1) (async) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x12c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8884d}, 0x40108c1) (async) syz_usb_control_io$uac2(r5, 0x0, 0x0) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 7m1.473324923s ago: executing program 3 (id=895): r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, 0x0) 7m1.014042328s ago: executing program 3 (id=897): openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4243c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05fa651ba00000000000010000000900010073797a30000000002c000000030a03000000000000400000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c00048028000180080001006e6174001c00028008000540000000040800014000000001080002404d89000208000b40000000000900010073797a30"], 0xc8}}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d4, &(0x7f0000000540)={0x0, 0x1b8e, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x273c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) 6m56.66722167s ago: executing program 3 (id=909): pipe(&(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/120, 0x78}], 0x1, 0x67, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x0, 0x6, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80400, 0x0) open$dir(0x0, 0x400001, 0x20) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r8}) fcntl$notify(r5, 0x402, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/sockstat\x00') read$FUSE(r9, &(0x7f000001a140)={0x2020}, 0x2020) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$igmp6(0xa, 0x3, 0x3a) r10 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x800, 0x105, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r10, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 6m41.52001494s ago: executing program 32 (id=909): pipe(&(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/120, 0x78}], 0x1, 0x67, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x0, 0x6, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80400, 0x0) open$dir(0x0, 0x400001, 0x20) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r8}) fcntl$notify(r5, 0x402, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/sockstat\x00') read$FUSE(r9, &(0x7f000001a140)={0x2020}, 0x2020) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$igmp6(0xa, 0x3, 0x3a) r10 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x800, 0x105, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r10, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 11.146838547s ago: executing program 5 (id=2386): r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000600)=0x100, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x9, @loopback, 0x8}, 0x1c, 0x0}}], 0x2, 0x4001c00) syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94) fanotify_init(0x200, 0x0) (async) r2 = fanotify_init(0x200, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa010006030700f606040003aaaaaaaaaaaa4b3175bcaaaaaaaaaa2e5b8f0a30"], 0x0) r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r3) (async) r4 = dup(r3) fanotify_mark(r2, 0x10, 0x48000047, r4, 0x0) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x383, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x20000000, 0x0, 0x7, 0x8, 0x0, r6, 0x0}]) (async) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x20000000, 0x0, 0x7, 0x8, 0x0, r6, 0x0}]) dup(r5) (async) r8 = dup(r5) write$binfmt_elf32(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) (async) write$binfmt_elf32(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11.056633916s ago: executing program 1 (id=2389): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000040)=ANY=[], 0x0) 10.804533603s ago: executing program 5 (id=2390): socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB="0400000003000000", @ANYRES16=r0, @ANYRES32, @ANYBLOB, @ANYRESDEC=r0], 0x20) add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/154, 0x9a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fallocate(r1, 0x0, 0x9, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000c0) madvise(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x19) shutdown(r4, 0x1) syz_usbip_server_init(0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f0000000340)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x50, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x25, 0x30, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x0, 0x7, {0xa, 0x25, 0x25, 0x247, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x70, 0x0, 0x3, {0xa, 0x25, 0x25, 0x1, 0x1, 0x2}}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, 0x0) 9.68340115s ago: executing program 4 (id=2396): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x23, 0x8001, 0x0, 0x6, 0xfffffffffffffffe, 0x4, 0xfa11, 0xbf}, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc80201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x4000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000a80000000000"], 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r5], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008820) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000053c0)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffe0, 0x4}, {0xf, 0xfff3}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0xf, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x5}, {0x7ff, 0x9}, {0x10000001, 0x1}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) (async) write$binfmt_aout(r9, &(0x7f0000000280)=ANY=[], 0xff2e) 8.938772949s ago: executing program 1 (id=2397): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x400, 0x1, 0x161}, 0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) syz_open_dev$dvb_demux(0x0, 0xfffffffffffffffe, 0x140c3) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r7 = syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, &(0x7f0000000380)={0x14, 0x0, 0x0}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r10 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) fcntl$dupfd(r9, 0x406, r9) readv(r10, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) 7.696231089s ago: executing program 5 (id=2399): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x80000) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1154c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x121000, 0x0) read$FUSE(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000c0000000080000004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000600), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) 7.595351237s ago: executing program 2 (id=2400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x2c, r3, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00') setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x22) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x4, 0x2bcc8a97, 0x0}) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x100, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4) 7.509259949s ago: executing program 2 (id=2401): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001800)={{r0, &(0x7f0000000000)='.\x00', 0x24802, &(0x7f0000000040)={@align=0x8, {0x4, 0x504, 0x417a, 0xb56}}, 0xfffffffc, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}, 0x7, &(0x7f0000001700)=[{0x2, 0x9, &(0x7f0000000100)='\xf3!', &(0x7f0000000140), 0x0, 0x20}, {0x1, 0x5, &(0x7f0000000180)='$[&^{$@]\x00', &(0x7f00000001c0)="4af3dfb3dccf6f338a34b64b263ea27b16c0f7ad7fd4e011660308522eae813158626ac26030bc01803db4bdbdf9b46ae98ce552464f4748e5657fc2901317af443c5b3df40bf9845c24be5af8beb8fe22f1090e543079c52d449b3dab35fdf791eac4bc440be3df5a294b50916122afaf5064a75dab306ea19748838ba6c739d8bfad2d8f4192d10620d2a3ef6eb7aa267efb5590cfe06cfd8f66a57b8cc71e7157e685cb2c2ad48aa3fc6bb4ed3c05f570aceb9881800979d9b5a4beaa0f897f", 0xc1, 0x26184bf27aa11890}, {0x2, 0x8, &(0x7f00000002c0)='-,!\x00', &(0x7f0000000300)="134fa5f6fe29d6be6b051659c2d78f4be0b8898cdda370a89ea4", 0x1a, 0xa}, {0x0, 0x8, &(0x7f0000000340)='^\'\x00', &(0x7f0000000380)="0f9ce3c070646ad30ab50388fb7986b94488f024ab94997e83f9fd11f7d098ab00b975dcdda2601f02fbb75b5d99faa5b021e69165582a41497a4af2f7c4a628f08173a90715dd6807b0b96b1ae9f7e7d834d037493625a776551cd03173ff9abcc4a9828d1e7bafaad257d4d3bc3a3e758c645a613ef6cf3762844fa6e084f1cdd60e50842efd5ba5cf215b168f61b513bd6c3c2acd35f111f6300b08396f35a7baede6552385bce2bf38fb4f5e11ee9cd79b55acf9cfffd8f442c785391b4ef53bd4bae8b9baddad2008afb1ed93b319b2f13b613e946a6270d1c8e77d2b022be59face8f1d4760d482c5e4576", 0xee}, {0x1, 0x81, &(0x7f0000000480)='$&\x00', &(0x7f00000004c0)="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", 0x1000, 0x30}, {0x1, 0x6, &(0x7f00000014c0)='\xb4^\x00', &(0x7f0000001500)="3027a05f75d0ff484f124ce6d3e8c7061e3f08b0bb1750e5f65d8497db81909a36e8ac6dac480ae5a3dbe474fc5cbd5816ece3d9d21e4624e3ca03f4d3f980bf9011a034f9edf196f8f5b173274bb93977fc16ddfce13bf3545b4f64e5bb891c052f2aa86f1262712b3dfbccf566d4edb33bddd1405ea37ed489223c8e6825f07b55e1c197e02dc26ea74c5556d624a8f8eeebbef258188a656d73dad432195295e11ff5c01e1b642bbaad57ed7881088a402c42417f4c941d76f72f7cb2437d4fe9cba2b10f33d6a90b4a19e1169a6321d9f4e9bce18e3624740b2a1d3205b00b7b3232c2dae4e98ca0e309643ac03b0d", 0xf1, 0x38}, {0x1, 0x401, &(0x7f0000001600)='-\x00', &(0x7f0000001640)="1653ee677c965e2f4f9fe4998ab7466617b1e320a8c97607206a385c3cea2e52d41b266fd2f0e836db53034b7a08cd6ae968da836ced6721bedb33da25c9253a9a75e1e310e5d0c840fb83ad21b31e9b594ee2bea5707f77205dabd0529c672f3bd118800e7ef66cbb665f3b728c8baf2d1efc1b8e1cf2e18596f840ec491b8bb49e049e7e80", 0x86, 0x3a}]}) r2 = socket(0x11, 0x5, 0x1ff) r3 = syz_open_dev$vim2m(&(0x7f0000001880), 0x8000000000000000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001940)=@multiplanar_mmap={0x3, 0x2, 0x4, 0x800, 0x3, {0x77359400}, {0x2, 0x0, 0x7, 0x0, 0x3, 0x5, "7a57ccb5"}, 0x0, 0x1, {&(0x7f00000018c0)=[{0x4a61, 0x7, {0xa}, 0xc}, {0x5, 0xd, {0x2000000000}, 0x8}]}, 0x2}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x8000000000000001) getsockopt$inet_int(r1, 0x0, 0xe, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40), 0x22800, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001a80), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b40)=@o_path={&(0x7f0000001b00)='./file0\x00', r1, 0x4000, r3}, 0x18) r7 = creat(&(0x7f0000001b80)='./file0\x00', 0x100) ioctl$BLKOPENZONE(r7, 0x40101286, &(0x7f0000001bc0)={0x9ff, 0xfffffffffffffffa}) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001c00)={{r8}, 0x0, 0x6, @unused=[0x2, 0x7, 0x7fff, 0x5], @name="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"}) r9 = syz_usb_connect$midi(0x6, 0x87, &(0x7f0000002c00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x499, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x7, 0x80, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xa, 0x3}], [{{0x9, 0x5, 0x9, 0x2, 0x8, 0x6, 0x3, 0x8, {0x9, 0x25, 0x1, 0x5, "eb9afbed6f"}}}, {{0x9, 0x5, 0x8eb15d2072c14133, 0x2, 0x197, 0x1, 0x36, 0x8, {0xd, 0x25, 0x1, 0x9, "44ba0e54286471b9a1"}}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x7, 0x80, 0x3, {0x6, 0x25, 0x1, 0x2, 'Q#'}}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0x81, 0xd3, {0xe, 0x25, 0x1, 0xa, "e4800759db5dfb5e13f9"}}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x31, 0x2, 0x1, {0x6, 0x25, 0x1, 0x2, "dbec"}}}]}}}}}]}}, &(0x7f0000003180)={0xa, &(0x7f0000002cc0)={0xa, 0x6, 0x110, 0x0, 0x6, 0xd2, 0x8, 0x2b}, 0xd3, &(0x7f0000002d00)={0x5, 0xf, 0xd3, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4a, 0x23, 0x0, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xb3, "f2d53f411e65aa29ab809b5818abd6ad"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7a32986, 0xf000, 0x1, [0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x6, 0xf000, 0x910b, [0xffc0c0, 0x0, 0x410f, 0x41c0, 0xf0]}, @generic={0x7f, 0x10, 0x3, "59bec6d4c46b05cf20a8abab9166d6d706f765be67dbafcc28e4c89d3f32da7cecd2667e75709098de3b88abf5fc4afdec54ed7acf193d4aeb6c60ccd2e17f3201070ec39e360f66a886fc6b2a40a8bf221fe57d4364478d3cf20ebd0d352e9f9dc725c42892639cb32079b0f7c75e8db5e5be125c0a8c0c42c029c4"}]}, 0x7, [{0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x40f}}, {0x54, &(0x7f0000002e80)=@string={0x54, 0x3, "9398a6740acdfc8fd7fafaf66a545770ddb3997ce10703950542a9f7180fb01c09df86da46b5faebf6224be0f01e19d3b1bbb9ef749ca9762042a313ff4ad6103803ff5a81ff833740902c29bf9a132d7d4c"}}, {0x49, &(0x7f0000002f00)=@string={0x49, 0x3, "5710d74501d1e70f72b2971b0c78b2f81e76c7c31c7dc126046bf56b188606173595d38e76aec07d434985f3586ccdec02726c6d42f2538b1cdaaa5ce9fe561dd3ef6697873700"}}, {0x28, &(0x7f0000002f80)=@string={0x28, 0x3, "1897575940f7486223a2e37e2ca9b401ab8574badaec36d76d45603c2f6b73baa72fdcde46fb"}}, {0x91, &(0x7f0000002fc0)=@string={0x91, 0x3, "1b14e417f2fe43de5e2eeb2cc6a9fb6b049348074f2aa820b90b3f78b3de8cf676eee9b133a65a29218af59a2bd46c4765d5fd8ede463575fd18b6b1b55bb65584f65d7a949db404d2a724843e51f5547b8d19fc515bb27ebc62f6bf3c5ecee9abf777794ef52872645c3ee85037fd33f45f15ff275d4285d4c91a8f7fb5616109be28f556ab911bab312ec6439bae"}}, {0xea, &(0x7f0000003080)=@string={0xea, 0x3, "734b5cb879c356dcdc1c1e2380d24c350deaf8f09a4d25bb9a775311ae0e93008ebf7e5ff31a348fc8a818eeeb367b1a820e6e2e1b358777e3becb2515cd1971eeb85145d9ce2888d63f0c4d21a57ad5be12074437cba83ce638bdfe7c6372550f6a820b409466959e268522bc080286cf49fd6b6171359c0ccf1d1869463bbc90c3836519b6652550eb2e85aa372d7710a48e5c829ca6dda6f6284f1c8f5529715d29a3a4270edee315fbeeaa9250425d5bb028b5a8ff20c4755492c6bc2d7d5ae6bede5dc3f4c60a0281b53de2b88028ba5e91e11e59291c8465f031865e17f02945bd87001a42"}}]}) syz_usb_control_io$uac3(r9, &(0x7f0000003400)={0x14, &(0x7f0000003200)={0x20, 0x31, 0xeb, {0xeb, 0xc, "c9d5a09295e2bb88ef510626782dbe9d3e95a5a7c1e8ca50fff5355bcb5971e15ec71a98e2fc5216ca7ecae10220a7919a9ef19e2cacd33f7a384e67b7dd05e8eabc02ea80512abb126e889d340aaf234ef84ed5672c9e6b058153170a7f99ae840e1f09b4ed87562e13bce9c4c7b2aefbda7c3e8a77c105d69a9247ac9c2b71b4fcd17d8545cf553c55d82e5d370f793c600bbdd157963a1f6d6370d33814b783b5bcab27c1b626bd26b4dcdc9d26091acb329abbfede7309ae185e01fa15bb82404ee6c1bcb51802e00494eefa7970d9caaddaa0456f58299d3d8baf218db3fdedbad02abfcf5262"}}, &(0x7f0000003300)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "dcfb105c67206f104b97836fde11f6b46ed168f4a85f3dc6fe86f9c4417983e5feb6a01f5a97ef1076593df323ae4bfc6c0f93931033c1be3a25037db297528a96cfb0487311105c4b473f3de2271fea70df8ecd9251b42cd43182ff0c1782465dbb4a4bc5c01375a8d54d2e19bacbfa4e4ad28b65df2fda78fb247e44a9f3e69cb8d105e06b3fc2d88047c961e2a55e3e05bfa9e80f3f19364064c9b5c6d775444460a0324c9708543e83588b5fa641f5db9f512d242ebf10e77ff83b8bf9a9782105a55a3780e6d3bd6af5f25d19c3d6e407972fa5f0ca69617f4a437ef4a0209add3f49516d9106b28364523a31fbc997894211e89630"}}}, &(0x7f0000003640)={0x44, &(0x7f0000003440)={0x40, 0x11, 0x28, "e7473b645eafe51bf1cb04c7054a2cebbc4ae16e743a2896edf0d9c969c01286f9a19b21aeaeaf6d"}, &(0x7f0000003480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000034c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003500)={0x20, 0x81, 0x2, "1874"}, &(0x7f0000003540)={0x20, 0x82, 0x3, "d175c9"}, &(0x7f0000003580)={0x20, 0x83, 0x1, "b7"}, &(0x7f00000035c0)={0x20, 0x84, 0x2, "6e0f"}, &(0x7f0000003600)={0x20, 0x85, 0x3, "d12900"}}) ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, &(0x7f00000036c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000003700)={0x48, 0x5, r10}) r11 = fsmount(r1, 0x0, 0x81) write$tcp_congestion(r1, &(0x7f0000003780)='scalable\x00', 0x9) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r12, 0x8954, &(0x7f00000037c0)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x306, @broadcast}, 0x6c, {0x2, 0x4e23, @private=0xa010102}, 'lo\x00'}) ioctl$SNDCTL_DSP_SYNC(r11, 0x5001, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000038c0)=@multiplanar_overlay={0x7ff, 0x0, 0x4, 0x100, 0x200, {0x77359400}, {0x2, 0x8, 0x1, 0x2, 0x9, 0x2, "e3d833b1"}, 0x4, 0x3, {&(0x7f0000003840)=[{0x401, 0x1, {0x40}, 0xfff}, {0x8, 0x800, {0x1}, 0x2}]}, 0x40}) openat$dsp(0xffffffffffffff9c, &(0x7f0000003940), 0x100181, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000003a40)={0x28, 0x3, 0x0, r10, 0x0, 0x0, 0x0, 0x9c, &(0x7f0000003980)="acacd154e6bc35cb2cd3337cbbcc1777c1dbbc65d6157a0023b871238ad3c266d17c3808a0728bf26065dabc093788e1ed745705ab41772eded7acd6765f622718d76647be42a40065e9dbede1ecc033f39cffa4a3b44c43e44d2050ead23297d0c90d7b41ad6098c217e5b11e289a55f8f79780b2dc3620749617614e5fd5426476f58e415cfe95ba5ede5d9bd61292aeb39aa995f55a12c527aea5"}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000003ac0)={0x30, r13, 0x1, 0x0, 0x1, 0xb, 0xfffffffffffffffc, &(0x7f0000003a80)=""/44}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000003b00), &(0x7f0000003b40)=0x4) 7.046885134s ago: executing program 4 (id=2403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x1fff) mprotect(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.7874731s ago: executing program 2 (id=2405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0x3, 0x0, 0x7fffefff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r4, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x8040, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @private=0xa210101}, 0xfffffffffffffff7) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x40040) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904"], 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000340)={0x4, 0x54485746, 0x2, @stepwise={0x7fffffff, 0x0, 0x7, 0x4d4, 0x6b2, 0x662}}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) 6.682317442s ago: executing program 4 (id=2406): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x200301, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x8, 0xfffffffe, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$key(r2, 0x0, 0x40408c0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x0, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) 5.506039783s ago: executing program 2 (id=2407): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="4015040000000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40c0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x8452, 0x7, 0x0, 0x7, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x7, @mcast2}}, 0x7f, 0x1, 0x5e, 0x4, 0x7f}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x8000}, &(0x7f0000000200)=0x8) sendmmsg$unix(r3, 0x0, 0x1f, 0x44001) socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getpid() ioctl$sock_FIOSETOWN(r4, 0x8901, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) read$FUSE(r8, &(0x7f00000022c0)={0x2020}, 0x2020) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) 5.364238782s ago: executing program 1 (id=2408): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f000032e000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc8, &(0x7f0000000340)=""/200, 0x41000}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.217111521s ago: executing program 5 (id=2409): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="9f") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x101) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x81}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r1, 0x0) r5 = userfaultfd(0x1) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000180)=0x4, 0x9, 0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_open_dev$I2C(&(0x7f0000000000), 0x361c, 0x802) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 4.02949044s ago: executing program 1 (id=2412): shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4, 0x25dfdbfd, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x265, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x1ffd, 0x0, 0x0, 0x0) 3.946407431s ago: executing program 0 (id=2413): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r3, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_proto_private(r5, 0x89e8, &(0x7f0000000300)="5cd04ec25e966fab1f0bba171a51ab4b2987f4749c7d58c459173f8fb1252ea4a16b8d7f60c3bef03e7b491b0517d7ece3c8c32e4b1be207678af1f6a2797bfe9c0825e194d24c2deec24a18bc32d1073c50cf2f2f9488c5675e7357d5184d8b97922acb5552c3edfcaa73b1fa3ab7bd05d3fa387b6ddc5c085071cfc9fe07205483de01d41eeaf8d69f7c8c9efccf293296f9d9f89df7026c69e498ab4ec48b3296177bfd7a51cca51025243d4f97125c3ec1316120d5fb14ff32210ca8fc84540d2cf2aae6292adadc30cfdf3ae14787578de65c881575fa75d0a2e8f59c") r6 = dup(r1) r7 = socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffd, 0x3) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) sendto$inet6(r10, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r11, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) fanotify_mark(r0, 0x1, 0x48000046, r6, 0x0) r12 = dup(r1) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$input_event(r13, &(0x7f0000000280)={{r14, r15/1000+10000}, 0x5, 0x8, 0x9}, 0x18) write$binfmt_elf64(r12, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x3, 0xa3, 0x8, 0x3, 0x3e, 0xc9, 0x3c9, 0x40, 0x2ea, 0x7, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0x7, 0x200000000ff5, 0x7, 0x80, 0x3, 0xe098}], "ee12a062e2a05e1ff68ba8512df3385ceba93a14441aa7f19175b4dffcd1f1927b528dfc02e04b198be83c487a2900ad712941cca9764eb9ba8ede9dad952920fe7623db05ee485a06c91120d35c9522209cfda079ecddc1641dd8f1fea1004d1724f013658d5581cc79213085a1525022bf5c7bd965d3fcc102299122390fa05ba9525069a55bc8af43f5ff08b5341810856c0dcf71a98832e1eb4117b26ffa8181387d459ca5e1202730e6835d4a6284d17a01a6b4cdc6897b1f17666299b34eb8d5427155776a3d9858a4f8748796f9147a278ddbfe2386261a1f67dc214fd51aaf4639aa6a"}, 0x15f) execveat(r12, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x100) 3.56377398s ago: executing program 1 (id=2414): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000008c40)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/121, 0x79}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000500)=""/81, 0x51}, 0x1}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/105, 0x69}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000780)=""/85, 0x55}, {&(0x7f0000000840)=""/27, 0x1b}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/253, 0xfd}, {&(0x7f00000009c0)=""/19, 0x13}, {&(0x7f0000000a00)=""/17, 0x11}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/4096, 0x1000}], 0x9}, 0x540f}, {{&(0x7f0000000b00)=@qipcrtr, 0x80, &(0x7f0000000c00)=[{&(0x7f0000008e00)=""/70, 0x46}, {&(0x7f00000054c0)=""/4096, 0x1000}], 0x2, &(0x7f00000064c0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/153, 0x99}, {&(0x7f0000000d00)=""/107, 0x6b}, {&(0x7f0000000d80)=""/156, 0x9c}, {&(0x7f0000000e40)=""/48, 0x30}, {&(0x7f0000000e80)=""/106, 0x6a}, {&(0x7f0000000f00)=""/138, 0x8a}], 0x7}, 0xaeac}, {{&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000008580)=[{&(0x7f00000010c0)=""/252, 0xfc}, {&(0x7f00000011c0)=""/5, 0x5}, {&(0x7f0000001200)=""/118, 0x76}, {&(0x7f0000008e80)=""/260, 0x104}, {&(0x7f0000001380)=""/71, 0x47}, {&(0x7f0000001400)=""/80, 0x50}, {&(0x7f00000084c0)=""/169, 0xa9}], 0x7, &(0x7f0000008600)=""/246, 0xf6}, 0xb78}, {{&(0x7f0000008700)=@un=@abs, 0x80, &(0x7f0000008b80)=[{&(0x7f0000008780)=""/8, 0x8}, {&(0x7f00000087c0)=""/189, 0xbd}, {&(0x7f0000008880)=""/120, 0x78}, {&(0x7f0000008900)=""/28, 0x1c}, {&(0x7f0000008940)=""/234, 0xea}, {&(0x7f0000008a40)=""/152, 0x98}, {&(0x7f0000008b00)=""/122, 0x7a}], 0x7, &(0x7f0000008c00)=""/4, 0x4}, 0xffffffff}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8007ffd, 0x0, 0x9, 0xbe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) socket$tipc(0x1e, 0x2, 0x0) getdents64(r3, 0x0, 0x0) memfd_create(&(0x7f0000000b80)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 3.35722169s ago: executing program 0 (id=2415): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000513000/0x4000)=nil, 0x4000, 0x3}) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000300000020532b240040000102030109026900030104007f080b0100010a20020910000000010120000924010700060900b2090401000001022000090401010101022000090501"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 2.966738169s ago: executing program 4 (id=2416): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) (async) mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) (async) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) sched_setattr(r2, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6ce2c9b0, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x4010, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000640)={0x8, {{0x29, 0x4e22, 0x2, @mcast2, 0xe}}}, 0x88) socket$inet(0x2, 0x1, 0xb1de) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x3000001, 0x4, 0x800) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0xb299b000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') read$FUSE(r4, 0x0, 0x0) (async) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x2e, '\x00', @data=0x5, 0x1000002}]}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x10000000724e66f2, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x3) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000200)={0x0, 0x4, 0x1, 0x0}) 2.700057766s ago: executing program 5 (id=2417): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @empty}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000300)=@ethtool_ringparam={0x10, 0xfffffff8, 0xffff52f5, 0xffff, 0x5, 0x9994, 0xc2, 0x5a, 0x4}}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)="668bf3e1206472c367bb852cbb748af08f5b696a893b05796ecf4ac39552e464f7a710485026090d67c92989529277ab08b48e138abe58990d9e6b51823e66b0df2219f2a31e0d114496afde238d8348531e758332a3547867024efea550e736d255ac4a2ea987ee0b08dcc38a003f122fe84c6fa084d225c72ef9cce6d2079c1cf841a21bab2b33d986665a0c33928b5dcfe28ddb3d072f7184ee13d59997761c68dbd5f962a24cb728"}, {&(0x7f0000000140)="fc6c3b0b8ca86c2af6685e35b54dad268bfd74e0ef5a6e390fcf44374729bd4368fb4458a553"}, {&(0x7f0000000180)="3ba6cebc63ef6429b8d3123a239d78aa988e78341ca2b7a8e08350374d75ced7eb6276452d9ede462042a5f07f5ec7ec1a4c171d0e064351770d708bebf48d63834d5a7b649c419c877d8020cca76646190570d2650a1ebd57d0c524146c38e8706609c5a324f532ef2802ba91343a4b8729443b6e309c93a9ef8f5cc6ddc2a6d0abff1720831a41eeb6201a2047ef16b24c2a3177b21086303cd708689093d579ca8c211bbe"}, {&(0x7f00000005c0)="52bf337bda77c89322257fe206eea502bb81d4d820ed750df7783dcabfd857d29c6780c6084c72467c78f18180c58ade20e3c2382c3c5e7bc48d53484f110ec529f6f24ea23a2080e4e1c967836c12d8982ace4538e621bea11ee7236df78dd7633f04a04b7297545a582b512e6f470a4a2e9ace16343221927c8879c6c5df470e7a0983e6f601ba09d30c4f0b22a7e7cab228b48115594a69498494f832e34b1cbd807720a265bdcb0f2a99bac972dcda519cfa3ccd3345c20422c5fb0233dc12c85956ca41da267e6047632f"}, {&(0x7f0000000340)="7abbbf061346330a388d913d604824baa9a5960ad553bd04be773e107a823ee642346a37678443dcf7a4317d118a85aa83f590211b75f50d04f4ea28e4e850b9b79ce3e094b6ab6e504bc0cb064e460598cf62a1c091d164455555e2dd9bc77c3efa86528d281bed4d5c9f26badd04f9aca0ebae7ec7f026d0adc0b076900c67d5c34d86cc6a17d2505021f5115762ef260d454812da954d5573aef4916c7061e31155972785"}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.492592926s ago: executing program 5 (id=2418): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x400, 0x1, 0x161}, 0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) syz_open_dev$dvb_demux(0x0, 0xfffffffffffffffe, 0x140c3) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r7 = syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, &(0x7f0000000380)={0x14, 0x0, 0x0}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r9, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) 1.744391279s ago: executing program 0 (id=2419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r0, &(0x7f0000000040)=0x800000000001e8, 0x12) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="00f9c5a0d023daef93fcc600"/23], 0x17) (async) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000003c0)={0xa20000, 0x8001, 0x45, r0, 0x0, &(0x7f0000000380)={0x9a0904, 0x9, '\x00', @p_u8=&(0x7f00000002c0)=0x1}}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000006140)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002180)=[{&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000840)=""/196, 0xc4}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000f40)=""/195, 0xc3}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/180, 0xb4}, {&(0x7f0000002100)=""/74, 0x4a}, {&(0x7f0000000940)=""/56, 0x38}], 0xa, &(0x7f0000002240)=""/148, 0x94}}, {{&(0x7f0000002300)=@qipcrtr, 0x80, &(0x7f0000002380), 0x0, &(0x7f00000023c0)=""/131, 0x83}, 0xe}, {{&(0x7f0000002480), 0x80, &(0x7f0000002b00)}, 0x6}, {{&(0x7f0000002b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002c00)=""/164, 0xa4}, {&(0x7f0000002cc0)=""/170, 0xaa}, {&(0x7f0000002d80)=""/49, 0x31}, {&(0x7f0000002dc0)=""/203, 0xcb}], 0x4, &(0x7f0000002f00)=""/41, 0x29}, 0x1}, {{&(0x7f0000002f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002fc0)=""/197, 0xc5}, {&(0x7f00000030c0)=""/126, 0x7e}, {&(0x7f0000003140)=""/203, 0xcb}, {&(0x7f0000002500)=""/125, 0x7d}], 0x4, &(0x7f0000003300)=""/237, 0xed}, 0x2}, {{&(0x7f0000003400)=@isdn, 0x80, &(0x7f0000005880)=[{&(0x7f0000003480)=""/150, 0x96}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/75, 0x4b}, {&(0x7f00000045c0)=""/101, 0x65}, {&(0x7f0000004640)=""/195, 0xc3}, {&(0x7f0000004740)=""/177, 0xb1}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/123, 0x7b}], 0x8, &(0x7f0000005900)=""/47, 0x2f}, 0x8cf}, {{&(0x7f0000005940)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002600)=[{&(0x7f00000059c0)=""/135, 0x87}, {&(0x7f0000005a80)=""/214, 0xd6}, {&(0x7f0000005b80)=""/163, 0xa3}, {&(0x7f0000005c40)=""/218, 0xda}, {&(0x7f0000005d40)=""/180, 0xb4}, {&(0x7f0000005e00)=""/234, 0xea}, {&(0x7f0000005f00)=""/247, 0xf7}, {&(0x7f0000006000)=""/104, 0x68}, {&(0x7f0000002380)=""/43, 0x2b}, {&(0x7f0000002580)=""/100, 0x64}], 0xa, &(0x7f0000006100)=""/48, 0x30}, 0x8}], 0x7, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async) sendmmsg$unix(r7, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) (async) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000980)="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", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) (async) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000000)) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x6, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0xff, 0x0, 0x40, 0x64, 0x5}}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2000000000000000, 0x20, 0x3, 0x5, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x4, 0x8, 0x0, 0x73, 0x0, 0x8001], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) sendfile(r10, r10, 0x0, 0x20004) 1.386118876s ago: executing program 2 (id=2420): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000002040)="16", 0x1}], 0x1, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = dup2(r2, r2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) syz_fuse_handle_req(r3, &(0x7f0000003400)="c351d85125eaaa5c15332f0bfe0a462713550cbd5f86a0e33940d0befa7c6f9a16c7536908372f9c091bc95aec3fc5e436416b5a11018fb255cd509b4b443c1b6967a679ccdbbd456fa46115ca60b03342c03204f080b84a525d42869a72d4e9270460ea686348d8a41501c8145e6cfeee17b52261ecf169f4393274f9475c5186313634a89300240f0759e7342887bce34813ea6b1e143e049e903a5546f8d2a774d570790556bef58588adf79ebce9519545074a8668e2b52f8a9b197872e19d32187d4966cfd5dbb138a5e75637640968b339ab02906f31c9584ece58267c80e967c366da2eeb965b78e73099c1d7bbb544ea2a4e7808af1d5b4d0ecf33373d7ca643616a8268546f3d0cb1af572fb8f25b2200caf4d7262dfd00089115c22cf0885581b802c4a99db3d869ed68b15e284983c5b4dd49d3879254faa9d382ad5126fd78c72ff00b391e8e0f8531e415bb020472ff862208ed8d41c5af0766cc5adeb20f59c022ca974dc9134aca8e86a15e927aace116f2c10a900e2d8837155ac0e91cb5f5f72bbfccdaf2591c6190682703bf1431d408c2d082dbd5bb3d699fe0d33f93242bbd6897ed7133dc281940db2fb74b002bf589de9056b60c627abf50762cda383f53297cd534ff156fda6bb9abe13cc9eb09669f7f1d7102ff0bd7fab9c3a02b96628265f5f303804bdc72aa732fc2aa489d69131722693d9a2751cd21340f8059489e2e344063969f08c1bf078ac9d17859e46396312738925d6e7ab1a643f305f677d9fdc40f61e3cbde8b3251f31032c4154ae0bfea447ac98b66b32819c4da38a761ec572200fc20a15b2e3ceddf4ffbf0ad45b08d15f436ed0c27ef1c5c9c5538f98b4b0cd61abcd9173e39b03dfa639a55484582e5e055da0b67caaa48eb31bc1bf6d0d412bf7981b5d1ebab674bc47c5a181e2e7585c936e1f4df7c5aa17869d89ae28b08fdfe9ba4d153f8de7789ffee325f461c042d792b43930023a441f751f3efc3b5fa7a30e1b2621d442c78859e761c90509ba010a0613ee161d9f2624dd3a7a42ee6471ec166d8d7df3035f2bdbb3cebd627c0b2e324788681a0ce25170ab6df538e2f6d5917a89df23588d33947adb34434d1213e086e599ead29918a4aed688b42fb10a726b436b324cf4fc5a856eb8be1cd33a2f20c80dfa68d3dfc7b7a81c1ff2f0e759001a02274f794f46fbc8a593d78c6e4bc99be5634be39fd5ef507bdcde6910f0df2e3f482c95338021d60ce030a442e99f73b74e7981673bf35ae3444099e5dd01ba8f31b72c410169fa356bf11a07e2d991a9b7284e20a699e4f128a41cb3b54f3669f638f06ab9e4aeaf2d558dc4eb32a141aa90ed6c8017d2ad4a3a58b0ca5f0741616654b87602078faca553b19fd6758156feb455f90d039f1e003c8145f7670b66a9bc3e429a962e2978527f200fafd039c98cce02eee1814ef689be19a6f79b17729acb56dc1c241ce4e80e385f2e0dc455f05a86e47c2221fa08acc1f453844a714c810a8bbef689619f6ca6ac7e0cd15a73545b8abd636685378a6d2b4b7c87c0fa1541fe5b71ce951fd30aaa081f96a1225c835d2522962fe37cd6e856a36af1921cf2e852e9a1a3c6143b651e6e9ebfaa350fd117f449ae29676808d076d39fce2f733a97928fdcf6f5286e9df822cc3d3b068389f9f76616cceba1a796997633128bbf6b34448784ef22a715002f59b8992f6aa2104aeaf6f1b8863680e7d44641e0e84620b297db0f3d650385f48d2814257343337734c0a0d04a9cea3d9eb465d7dbe45bfbb16e5bcf3dcd0122ed4745dc7b5b160e0332af945f9d9748c9b87ff3f740b1c416993df759b931ef36e7b9fa53076bdbcfe303246a2360c55cbfd7bc5fe975dc32f40eb0b01a611370a619cb84ce9d6afb5db5da242a610020865f181a482fef61a369c1f58365797a127ab0bfe38464b56aa14d84792b7823e4c6d75e81787fb843d403bc824176041a46cbd971170962ae387f8ec040ab83abf4ba6e89d6012cd858883006caefb77f85e71b46b79580c440053270c5379c0b7436cf292dc183d4529677970ad28d160901dc2b4812bda885be50d66d3cb48d48baf5778250ff3de0912c3d84fa793b72353bdb8a614c8db810e7e4454d20ce297e1fb8bf24913ca37a61e454128bcf6affbcdd1d000865139b0597b33a1347f12a7b1a887b8bd82de245a1382826264897c6a48aec2cd7539cfeab1a9843ff6dbc01d2a4113f8182e9a9fb8a6f79b2a8e4bfff077618b43a0627cb711adfaef8b451a2f815cd7a7dc579f4542a9cfe894df99b8716692fcd10c980aad814457946dcd400794cc3a2f07b824d81688e6bab4380b372785515d85730dcc2b29524c27adffa8898df44e4fd8ba1ab2ee7f78f77d1f05b48a73583d3bc9e9be9ccb174328d154cb553cefa1d52177669f88ed16bf1cf4db500ab4afd2b020c64aa08f164c5dcebd8c1e3eaccbf651cd6f99d29d2e9c1307a66a5e961a31124b8a8beacccde6b675841a616bed007017a6bc4bcf819b0153b5e185521f88dda45ae4b1a6af111a484e797cab005c70ce2ac776bcc9b6573728d80a428c6991c7e681730dde75722b73c04b89084af97b05814e0ff3559e8d1d051cd7694291913df8a84d91beab8e4648377c328fe6e52158b640f77b0fb586d0edd53114d2de31ce2808ebb6fadbfa72716ca0b7fd1bfde4fdc4e48bfc06c5ff81d23ec579a31403acb84c95ce6667715d5f2c8544d68dc50a991183af5d65ea9790f5e9bc2217df011d797b151feb2792b07393618ae548d6167c6e1daa756a1537348ca3b5b20cfed62e4618791990467dd3ea10616ab65e2727bcf3f8a014162bb0d6af8b8dba3fba3a8faee08d2fed5f03c82c8944e8fc9f37473ec3ba846e8877417931cfe9283e625eb43f99de49fec2cdb0ae05ea02745b303cf5d1aa5e8911d427b9a3b676cd35eec64a1531ebcd1adb10257e0ad431c684893b06f4cec9ce5c1c065e9d63499ae69eb25855ac3b1daa6b4d88edf4761e61bf32e080f891f865301b64340068e87f33cd3764f547e9b4973443bb4a92519a79c85033425b1e493b3d11d8a51bef269ef41ef399208ae4bd15cea24faba9c4f65aaa08d3da173d323fc5190b25c893df8605414237d538928c0babbf9ad6ebe2a81bbc342bbb2115a5e279b6a4568303e9e4a571ce5b0ca32c9b6cc136e1656d9dca7616ba8a9f1639b3b7de0b26cf4680edee63efe6ca889d0b05b1bdda3f433953e56d2929ec86c9555c2c24708b1294ffaa2644a9eea819babc00e85a573a04494e8e1baee394fa4f94004fd129edc9131056298062a296527553a56a48f66cb474c705ff2d269ab068d6a2177dfa0d566860bcca3f74c2c2aa6de4e59c3a5394dea7ccc3fa4fc5323994a38738a90eab5d2bf9ed69345be2daf0c91e3fb65ca642a681b17a7b7eb6b7c92907c4c6ed889bbd4aa618c540be5fe898708eb4bcfa3bcb03631c76fa0d77efe06a55523da2e1850669fd2253977c5902a0d8496657f217734ba717c45b33b4aa51d0c6dc1a8d29d4e2b93c1289df3e9a305389c8e86677af93d5b0b72f48250dccb0cbd50f27d5433fcf76a4ffbd50ef8ed62dab6b847f59d8a2eda07c0c222b39ef5f2f61e696e1bc8a776b122c72a8938d3688fe14e15ad14da35a25b8922e2e72d0539590cb6106bf44feb0adbb280bc5218edd2a3c06ff2fed2f51922f8d341829839ca2d4cbcd2cb66a83ac080ee95640b592c5f1d7fe437043acebe8cf4399dbd332dddc6a9973a854b035aeefd4c42e7bb809e63dce1422d71259a826b7e48acc8d9110c15dc19ff9888be88fae9100cce257658ba7c21e24dd22a9837f0e400c11a676e8aece6afee802ed0d41298733bd9b727d6b9919878797e44281d4a581cb4c3a0027e2dc5a7fa6c60644cb98160f5ce9481e1df64eea2efa2ec0cf48a8bc8286029450ea7f597ff4cfd1c20b76dde301ec80710e3bbd0ae318836e5c32edadbc55916b2ff84c3ba7f8161b987bec95115102d12f5ae5c8d1c82c96761b2e70e23d6774793fc7e7ef74939c109bc9ac4a55011cf9f8b58eb8e2f852460f7d411922d188cdf935024f09cd78527c6909cbfdb754f50cc7afd1789afcea405fb8099ac6a65c2bffacd342267d9e2521c0f98b4d2d6df8e9b1858018c18d418b0e33679f70ab754c65fe126fae513f4155970fef845c4f625f2d000da89f563542132fcb1b85e0ce4b068f1fb962d4ebb9723ae3fd949d387da67546eb383390e9955fe7a0f5fb617861038238304bc372ceeb7aa260931248cfcdcb0ab821b2cca78f60e45eb4aed2c76bbc748b42e38786e91e0a4bf8f7495f5e252400ae5862e96aeaa3c5a6b8160c83f0ccd4b425042107fda92f8a2c00e6f9c9ddf7b2081569f40a3fe3b93a2463011bb55f5f81a6207613182ba988edf5bb255f7120c29fef8a2477c0f8b6057e47b825feb294fc9bf1c5bf284a05572d88f92da7b363ffea88872fc0073839586406d185e9554113dae86a0182e492da02b5f6d033b6ed22ff4a922c1ea5a5da90463a506b6cc71533978da0fd077cf3332b9931ede21520653ba5efe0fc6a6e17564d5e321c261a12733b5e31ccb71a4a28fb8d95b2c7240bad8c5145d3e66d7a3a7466f03c772763740a7807550a9f19e80d04bdddd3342bad1a9ce91efbd87d5fcbd79a7818584e527e083cd75756467afd819de85a7034b8880834fbe557a188ac58be49cbe05504032a4d3e9c598e57954da0015f0548ead903af30f2072bc461f3070ff15d8711008dcee7355223d1635e1be208a8b4c6fd9885287cbcc77e31d54f03c48c6ffb33b27d03991e01b51558eb5f50522d5df4b77486ac5044a492a894487450ec59b789a5d00a0184fb7decb459387e7a4f62aac86ad3076e9ec6919adf0042231c438ae2ac5e87d2e28c4acead86eae7bb6486d5005686c1ac7d159af6ae12d7b931b2b690cde30814418dbeeb25c1e0b8d0665ede9ff941c7c621af56ab5372391b843bf75866863cc8b6f2fe70dfc6d4207fc46d541c0fc73a4c451274e223b00a69ff484bfbe526fe220ddc8c47236ad75fd787dde67500ddd16c575b9453314d2540b1a15b9d8dc0e0e9a8df2bc8f5faff8cc69fa0dbc688e11012cf4b7feb4b6c16f7ffc0d3367c82a6d4b681be6b6fb53ba0afa00f985ca641a368f2c7bf12f68fce88dbe2ec7fdf2eb2ec2f7713c1d96b94101c0ece8ac97df080584fd68c7ee4756ca519219b44b0a9b1685b2b3d70c3c9330c1d3a5bdc6e5a79ae91927b0b32b65f8f2dce10e6543ace8b679add3c40e82ba540f8e13fdeca4977afa6e4ae8c2d2edf80ee5430799ae1369a067938ebefe832e9da9a2ae3fffe00a94bb9534af1b9a2af3898fad89c78ab9d04663a2ae0d1e8acc18d3423ba14a37654741e8741618747a8f9272e5a33d91dc99feb6669b662523384303e33f79ebb5fc9092b8ea1280f718d7283347b6641df8393f8271e1c9512f3b11c61cf43a0d26e02549665b888e9ca46bfe346fbf99988348a11d07d1f9f0d17fbbe2d05d33d74ac8c93f6f51a0c1afa8e9b139dab50c746f174252a648f453d29f99342347a3e0e1707ed9e74a41c2acaddf5c94229da3bafd67d976a7b15a354a207397a5cb90b58f81c57dd819876bf77032e758f2b0034af73270e5ea460ea19c73e869a4d5a3fda062c5b5650cc9e2f1c76d4a35e5835387d72831296e878edeace9052901e09f5f16c2d67c74e841b7e79500cf582bd1ef9274076c933d9d9df9cc8e18f48e68868a3cb390b5be2a9a4fb5fdada491edec82334c4be931edc6d0b934e7b557b334dbf7793c1421b64f4d7568bc628e8cb88e2efd6933dc92f87eda05d63be8a518da5585ec9e6b08d409517c052326fa8b37580c235105833c669ab0403877dd60cb6a41ec21bf488065070ab9c4c336a7a6cf6f7dd8751e92f66cff87608f892d0c3b7256f2ee508245b372e79cad4b7a8c965fc852c3c9a2975b58d95f033af9750cde6febc770b24c6a5ea11f5ac07982bef3927d91a2869caed8786bacfbd8a55138d3ed212d7493e514773b8ef50f615fbe520cebd1f876b4d612242cea1de97941f5747922a5646f9cdc253e83c020fa6884335a8fec90f0ccb1728381dae27f5515d1e6da8644636a51dd030122ea89bac78ea262b2153a1438967764cbd481188f5372eff1208120c8766456365379a11bea4421a659e2310de1119a16e381a88d06bd941da25f206978d9f5b393966e592eca0c430b6e98bdfd974d130fb1e79ea646b8c0de4324aef69f134395ee9294f014eeb26c1b039b5c8dbd59289de846a61bccc507145538c6f2f17af65d6abd68c90b44bc42da530ce613a6f30b3304244108295230f3dc22001042db7f0dbfefa7aa411f7031a969e89a2fdb3370a34b6752dc5141ab5ce772ff5e7efe458ca67cba5197db990568bc0ddef6bb9170febacb3e9c995279dd2194c394813a9c2abea9a64d1a2b3d81a4b0493df903fff03acab2c3f9f37cc4cd7ab44bc8699b1473835e7eae083ff5daa373f89ffec79171942a2f6f7009cbea0f4be415ba8716d2519cda35aa22b905c36d0939e615f42bfc093b5aa18929b3013c9afaee4bbaa44b8dda206814e7e1607ff05737140749645c09091c4d5fdb73cf464c0dc0c0840d897a032ada06a9d3ef3b0f2aa6c6a6543c37d4c77619d9464b8826072c1339043baf1cfa91116c0bdbc07c49f918619d04a638580d8a07615afeff3e8409b78d7ec412712c43ff70ebad1d5b2f6f28281f581a3a066ca09030ff3ab159185a0a594950d90bec70affb89e145387b070ef0051ac335a2b4268a754683f444c85d5289e572b18d181b09d072f12663ab70e6009bbb4a98422e4308319b819192b16761ac725f19b096200584ac46cc41e81733932543cefada04c3a6e1fba3636a0aeef581a426a607e8c5360b2f003987c5fc7701df513cc5e45771ce297084089d09f80c240cbb9de3abf000c032953a9ff144724517f9044af9bb2eb5b66a0b79861d31b2c4b49758405edb5143b0853e1a9adba14e5ce03768dc2b04fae84cbe2e68e2b887b3f029dd30a31de9b756b69acf76737b071f9f722ed568c324b4a8733ee645a4d71a610ce68dd4cab2786bb1e8c167cb573306da3fa24b345dda843a6bb5868429f9c8dee7815774e51f017dae899ffeedeb9658e49ebdf1764bbb42ef6dd01bc65b2995a85ab8355cf1bf837db194b1ad5ae688de32d0ce1dfc8066423525232271f97678d4d6f8e47f12b90cf969d2191f051e4b1152b376a37ff2cc989dffccc9d0c05517e0a66ea1f694317f5ec5bb69ac7a0fd235eda9dfc4d017b48384118603dd6b71ce544b46dc96fd64d0f1776fe9bc059b2533c5e3a93df984781fbb7d0ceae872b0274a942ad90626fdacc4008b7dfae5e233954d6f63c4bd84b701c9f9714ef22f20e6e18808dfe20c7b98f08b14bb8c6dc2354530e6f2d46e54db771ff6a942ecb22770bda18f8c3611189650bd0aa75e68d84bf27eecc2d8119f467e15f4e668f1989a0268f1d1cf6fda6581fed61394807920ce1e683f9afbfab9bc1292eda72f9e8ae1f39afcf7d77d115a28c42c547fc2cbb5d1f4aa05843298f7f3d3fda208f62d44aa9048a1d5c353713427d1fd20f34db8638218e5da821498f663839c59b276b88ac5f24b4216574f1744496cb8f3c12bdc16e2fc76d0c53a1f7b2635e15e8fe0609b524cc5a2548e3578fd036115a2a879095c8e8187a7656e584c57771bed274c634d4372f9c030a3dcd42623914583205aaa4da3a4bcd5b18929e61bbb5b39e665940ec18cf6117b3f6862a33983fb701503feb8097cac7b258bcf02fcc536756947fc67692670cb156ef946bd90f6dae34240fab870e6bf886beb1efe06668d4a9e1124f1d6af5a3109d1514e46c87b4bba6983500432b2a1e3fd5be73fbb8d94dbbaa21b9a3beae80ba0cbe436fe20d9e091cef1ee2e30a6a8f716f82e7dae936c655cb7496337a62f320fe38a57b05016dcdbcf8c3258b57f46d24ff4bb66ed2217c3c6287d8d85217502a57dc9a7f8960e019d3fece7620c8eb9aab354a99daba4a9c1c74e18525bf443ddeee622a5c0857f47abcb071a4fe5f7d0385bb572633e97a09cb5b08fbb0fde1a9bdfe3d4f13d104cca9095cbbd8a84c597e9c49fb960090d4126d593bf078ffb802b41aaf928104780d38ced0dccadea061af8e4e5f57627f328a2065abf84e6a6033ff9e167b7d46601693dc59643ead87a0cf1d0ef050b43eee1957a9f805c6d7a2b3adf4522eefb47fe4c603ac842c65f986d5825f273db18fe3f0fa632911816be61f33086292b80e52dc4bdc83c91e88dbd1001ba6552ab28e80511cf62eaad6a716b7e04a3255f681e1f20da99f5e359822f86b741518b087c5a0fcff30e132396882e128d823b106b2c51039d97616494f07d8b22f758b113c67c517560854943932fe732c9cb2215f454ea712289867b479648d2b8eff2d90760d935989bedce584dc0ac398329341c14c254d316a5e6103353678be1d4ef28767e55f17400b79c2040de4760920bc9a0661febe0c693f7ceca64d5c64c89e06ee240928f245563777d1d8d6180fe6dc1db621de2767d4d5451781519de4d53f937997df8c4a74f7483c1d105680b8b965adb8653efcf4990c21900668766af03644c3e46749c5c003f7f10564e79fe02a307d78d7ff65e6a99bca9f6a644271b7b59336ccbcffe1aca2b4c022394d3141fd5c967e7f882907fdb428f9061ef606f1152613f03fba2d6bb84042cfc79a5f6ffbe8bb80f513a49acb96d231c1bf8354a8bb84b4526cf6f7941380f6a0aed648ff30f18b5b8ffe720a601615147f43874c8d2d9ad482365d5050195722fe9b0ddf0ff890fe62c03e919c7084ab92eba301e7b1f3bf421d083546353d17de21121aa9b01ac6c35f2182c5fb2ee000d7e45060e8687196706763fdcd08c6fd83f1aac47f187840b1819d34de14c0e3bec6741f1b767ba6d912c18bad59bc7e8becf8332988e174881d4e8b69927130b81db06d7fed8e759e852ec9d4385234cfd6a67272b6a81c22822a7c25c993982f9490b0787615e163f0fbe13246bea6b0643c3306e9caf03260e1a2da7ae2453707d4ff4a2c73da58f6b1330cc009cb7a33570face8739fe26a1d482432c92ac470f166cfdbb3fe763753dae8af7d9d434c72319656b56d124b2147a10147bca404f2d6d708423bd931c800e1f8072129e2e582264f923ff64b7500d8dff81ffecbef11486113df8a986242a32349bccbc41a173000fa98f44d7ec05772a5dcf6771b6f3eea4dc4378bbd34e65b742fa8e90ce8c89de1d6239bf5622b5d7fd491dc7b68a1649c554a751acfc820d50c080bf8de7e7d7ab0dd51d1dfd9a0e02463ea04383fa24ae6816d9458ac252c7792b7dcbdd6be697b1cebe19291733e4159d9fe98b7c9ee20eefb58438c0ca6b04e5072b7184d4b5bf8e54199c50886511f4744c97e7ae1132c50703823923347f2ef6d12fb3ec580fbe9fd19aa76b040103e18bf5871a97696d46f8130c413f35a41e9c96635c15d9940d6be3e2a203453d7833fee96386110c70c4480ee3388ba019b715560314a388e59c20700ee0e133e09f972650abfaaae8bb7cf9f7a578ff9b4aa923e75b77a562e357464e3cd1074809fcc836cf18f8860ffb6f8207b24f6a80cfa99794b3742ebd449fbdbb8b6f47739839c1f173373ec0fb94e5c1ae170eb74f99fc75d94dc128b5473b2c1b009f3aad23ebf98b91298071df17f02377e94b5520666a907043290878c26045ce217c4254854d9e280e8ae9b5771c233039d7eb13009a0a28b3037574cef6477c3708e2e93f3256eba70eff38287113e177b6e5160ef69317bdbdacb94c3ec64a35cec008ab463052ab2d252fcaa8017b6b18a75018eccf9c150954bc35c4288ebf2613f7c16254d95210905fdd1d199900a8a28b8876ac1f26ae7be63336a908e01e59dc83a8a41eac2658211cc69426b4eb5e1e605ec2ac8f6b0ea99c93ec780608385453cebeece3017e5f102271a83a517f681f17f3cb1d00101feb5c58017cc80153dd5527d0043cdcc511d049b9c769d8915dc1563a874c4efb16d5ae6d08234d50c7e51f5f71fb6af9e2f7e85cb2123aaccd6b3e538d2f079c2cd757a52edd39f9fcb9e35c53819ebfcbcceed68cbe062071e7875d8e3140c1a2c029eae6c3ee34e865415bc5bf8572c59f87070a2ef0ba844d0763f994a8fd3a6eafc4350ba109c4671d6c5d488fff80c56a3416033aa6905d14ee7bc4445903e0459164f695364217dc85204dda1f174ab93fba30aaf8ad70f0a8f2fe7118b4ff018de5989040accb4ba322b8d7af1aa265afda1fd23634936733e046cdc3352dca85a2aa6278b5c9cc09a492674fd8d2480b04ac6b947a3d52cc48c6f42062655fe9ec293ae2ee3024648f551ef34876fc71b8821e147880ee1d6c24acebb603043a495e90393d587c4ee6044636909fc539b7b14724ac3f8a7242d941b926b40f2066aeda717be663c453789e89a3df26b235fe86d19eb02e021998215c7b472c365a24e7c811f52ec61e79d6268350d728a2365deaaab1a312847af6b0aed0a01631a742dca40fde20f47b63b0ed6de6991f8a2c177464e7509555b1526fc6938bb05867bff43e8513795589cb6527107f79401995d04c408f8895b2a9156ec6f0389d19ea2b045c97b7e2269989d8e08934cabe9f373fd30960cf6223ddd0fcab7eaa187d7c74f602610566886b4699359e5a0a7b657565d112f95ead140161072128942cf6cf16b4ecd916c13d7bfe50928eb4c3598a5f4b12fb4b4239f18fec90026ea1bd1c9f8a33c455c9a24a29c915a77cf087fff4fbb9f4ade2da8d07db31f005aae36b2c7d83c12861db985c4981e606f9897fa170d4638879e60be0a38a37425426c680323ee65d432cb4f0f3a022c63599782fa6026d74fcfc31cdef5bef9725cfba11250def64e9b8873d52387c541047e2635b5ffc17809845030566498428c167b14ad234158d1f5ead2049b688d9a77b8c0344ba273c8b9f1207336774f20b1198064f0e1888389c65c11f3957ae273268562c50ef6108399d1584e5d4830644ac3041e0cee2f9480502aea950b8da816361d6a56e7a78a0e7fe3c23904c9331fa861eed1865f7cd311b37dc1141ade76809a35df1cbc04ef9d3f922cf518ea53d7203eaaa55e49f9169fc6238a34524507fd0f1878af76ccfdc73882022ca5409999e213476b522881c87ad847fd84627753477f18ac72b723862ccc8f529ade430d5e366d0f0d28d9935985bbad504d3fc56ebc2034630ff4a42306bf38e05c715aa58a4058cc16b7590931443555a3c63fe5f989b9dc7a7a40112edcff6abb6b6d3fe85cb6fbef738f3ed1b12d8ff69dad3039080c44b94f755217eaacec641aa8d1ad0ba9d52c7b43d91421fa3be242c8135ceb768e8b2a77852060bbe05536cd18001ccceeec2bc9fb", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0, 0x0, 0x10}) read(r4, &(0x7f00000011c0)=""/221, 0x8) 1.179505552s ago: executing program 0 (id=2421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x3}}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xac780) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000400)={{0x3}}) name_to_handle_at(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x10, 0x0, 0x7f, 0x2}}, &(0x7f0000000280), 0x200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB="080004007f"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x3}}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f00000002c0), 0x13f, 0x9}}, 0x20) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xac780) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000400)={{0x3}}) (async) name_to_handle_at(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x10, 0x0, 0x7f, 0x2}}, &(0x7f0000000280), 0x200) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB="080004007f"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) (async) 1.122964519s ago: executing program 0 (id=2422): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x600420c4}, 0x20004090) (fail_nth: 3) 1.077421117s ago: executing program 4 (id=2423): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x4a}) r4 = dup2(r2, r2) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) fchdir(r1) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 683.68125ms ago: executing program 0 (id=2424): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004800) io_submit(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ffff2ae3d84a31dbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r5, &(0x7f000072e000/0x1000)=nil, 0xe000) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000380)=""/195) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r6, 0x30}) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)='mptcp_pm\x00', r6) r7 = socket(0x2, 0x3, 0xfc) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x388, 0x5) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ptrace$pokeuser(0x6, r8, 0x358, 0x1000) sendfile(r7, r0, 0x0, 0xffba83) 468.945846ms ago: executing program 4 (id=2425): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000006e40)=[{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000000000)="cfb36e6d3db752bc", 0x8}, {&(0x7f0000000b80)="5996948d57f50ebc", 0x8}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x3f1d, &(0x7f0000000680)={0x0, 0x6, 0x1000, 0x2, 0x3ba}, &(0x7f0000000740), &(0x7f0000000780)) syz_io_uring_setup(0x77f2, &(0x7f0000000840)={0x0, 0xb7d3, 0x1000, 0x0, 0xa8, 0x0, r4}, &(0x7f00000008c0), &(0x7f0000000900)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffffb9, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8cd87, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x679f, 0x4) socket$igmp(0x2, 0x3, 0x2) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', '', [{0x20, '\x00\x00\x00'}, {0x20, '-'}]}, 0xa) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) syz_usb_connect(0x0, 0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010400ec13b2106d04f308280b0102030109024800010000000009046900000e017a"], 0x0) r8 = syz_io_uring_setup(0x4167, &(0x7f0000000600)={0x0, 0xfffffffd, 0x80, 0x200, 0xac}, &(0x7f0000000100), &(0x7f0000000300)) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000480)={0x53, 0x4, 0x6, 0xb4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="ac0a9fd4662a", 0x0, 0x2, 0x10002, 0xfffffffd, 0x0}) io_uring_enter(r8, 0x567, 0x1000a387, 0x0, 0x0, 0x0) pwritev(r8, &(0x7f0000000500)=[{&(0x7f00000000c0)="cea6310d8a70cc82241922bc398ad477b29a54eba2dc12415a58c57cd0e6017f49514ab5b56e87c8f352d3431e4c8f7f9056c70237785008d525263569029eae581400340fa49d8ab49a8d7f24452c271b3b25699c56bec8f23945f221f59df83b66a47ec5a38bcf87c2e27b9e1723862e4467583e184c8fdc03cd365af6ebc739a2c9ed22589cc6f88c15d90616fb70b3e784f55524b2dc95a0df12a91701ff6326907c64412d74", 0xa8}, {&(0x7f0000000180)="dc39d199232de5b24baa6ccaa595923adfcb077166769fbb848e1d4fe1547944c819fca402360aebcdd514f60fcf42384cc91e972f7e30c1b2a35ac6b3ff7abde66d55886c18fd2d9ef7206ab08a6dcf24de9407b035100380e226fca7e90abddb2d28ed2becba292c79e0fe191dc0a8836b89b0d5faec891310ca4544d41fabb3fd2fb8530f03c21a135849d0e302271a5438", 0x93}, {&(0x7f0000000240)="6f0e2b21116112988a19bafb1e81c2623c9c8849f9b767b85db5e0aff5418b85c774718d254809bc319883fee91cd20b13e32d0ee3cfd090728aab5a718316a907d08e418f9ed4a5e38bf9697b", 0x4d}, {&(0x7f00000002c0)="a4ebe9db128646b61513c7e02e87654444b31864074c8be9b3af4c08ac397a170f98d1b3b4bcce162c54ce9feff0", 0x2e}, {&(0x7f0000000300)="ee2a993cb123d2c34675c1c1dd81ace06c32701efbbf77776c6b21537eb19f5ae2de14dea085fb9996b3d51498355db88dd51c5a9bcf051a1f73b063228fbd649ea5e8a5225c319fc5cd0c6529726804347209713f2e63f1c6d6c40d6519afda2e0ea448ce1f1c55cd7f69b6839931a6a2ce2a5437a8f0a1d6f17f9318603eaf7d26", 0x82}, {&(0x7f00000003c0)="b4bb400198397b", 0x7}, {&(0x7f0000000440)="711cbab16e470440c3a90e91", 0xc}, {&(0x7f0000000480)="68934926f9157cdc80da19ee6a846cf425dab2174da067a26282ad6969ff69652456c8989b96acc22264b6a8f7e9f1146c710a0806919873f9cb19f5fc072938e02fd8fa8e789c3ae14495380d0d56", 0x4f}], 0x8, 0x1, 0xfffffff9) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000700)="c5", 0x1}, {0x0, 0x600}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r7, 0xc040583f, &(0x7f0000000080)={{@align=0x9a, {0x0, 0xfff7, 0x1}}, {{[0x7, 0x0, 0x2, 0xffffff9f]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000040)=[{{@_ha_fsid={[0xb86, 0x1]}, {0x5, 0x2, 0x0, 0x789}}, 0x0, 0x0, '/dev/input/mice\x00'}]}}) 123.591634ms ago: executing program 1 (id=2426): openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ffd, 0x32c, 0x0, r0}, &(0x7f0000000800)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r1, 0x1000fd0, 0x4be, 0x28, 0x0, 0x0) 0s ago: executing program 2 (id=2427): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r3, 0xffff) close(0x3) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x1, 0x0, 0x8000}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x58, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, r7}}) io_uring_enter(r4, 0x32d7, 0x0, 0x46, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T983] usb 3-1: config 0 interface 1 has no altsetting 0 [ 700.592788][ T983] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 700.684024][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.711149][ T983] usb 3-1: config 0 descriptor?? [ 700.722961][T14487] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 700.807988][ T5952] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 700.943822][ T5892] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 700.968129][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 700.974912][ T5892] usb 1-1: device descriptor read/8, error -71 [ 700.983772][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.996337][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 701.044215][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 701.086515][ T5952] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 701.106295][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.139905][ T983] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 701.164517][ T5952] usb 6-1: config 0 descriptor?? [ 701.170814][ T983] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 701.189377][ T983] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 701.189417][T14504] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 701.199750][ T983] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 701.213614][ T983] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 701.229222][ T5892] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 701.241310][ T5952] hub 6-1:0.0: USB hub found [ 701.253929][ T983] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 701.278478][ T5892] usb 1-1: device descriptor read/8, error -71 [ 701.285684][ T983] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 701.294129][ T983] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 701.318839][ T983] holtek_mouse 0003:04D9:A067.002B: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input1 [ 701.389518][ T5892] usb usb1-port1: unable to enumerate USB device [ 701.444723][ T5952] hub 6-1:0.0: 2 ports detected [ 701.499706][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2116'. [ 701.865132][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2120'. [ 701.905785][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2120'. [ 702.034933][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2122'. [ 702.065440][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 702.065460][ T30] audit: type=1326 audit(1774188206.710:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 702.150711][ T30] audit: type=1326 audit(1774188206.710:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c60d5cfce code=0x7ffc0000 [ 702.192853][ T30] audit: type=1326 audit(1774188206.710:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 702.392680][ T30] audit: type=1326 audit(1774188206.710:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 702.479141][ T30] audit: type=1326 audit(1774188206.760:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c60d5cfce code=0x7ffc0000 [ 702.531351][ T30] audit: type=1326 audit(1774188206.760:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 702.585288][ T30] audit: type=1326 audit(1774188206.760:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 702.631878][ T30] audit: type=1326 audit(1774188206.760:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 702.686557][ T30] audit: type=1326 audit(1774188206.760:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 702.752908][ T30] audit: type=1326 audit(1774188206.760:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.1.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 702.963696][T14546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.966842][T14541] bond5: option resend_igmp: invalid value (18345) [ 702.974391][T14546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.008116][T14541] bond5: option resend_igmp: allowed values 0 - 255 [ 703.027041][T14541] bond5 (unregistering): Released all slaves [ 703.123246][ T5952] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 703.145028][ T983] usb 6-1: USB disconnect, device number 73 [ 703.158064][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2118'. [ 703.181897][T14503] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2118'. [ 703.191259][ T797] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 703.284449][T14552] binder: 14551:14552 unknown command 0 [ 703.294574][T14552] binder: 14551:14552 ioctl c0306201 2000000003c0 returned -22 [ 703.306603][T14552] binder: 14551:14552 ioctl ae41 1 returned -22 [ 703.367982][ T797] usb 2-1: Using ep0 maxpacket: 32 [ 703.399397][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.423628][ T797] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 703.449529][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.470891][ T797] usb 2-1: config 0 descriptor?? [ 703.479922][T14563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.493815][T14563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.497604][ T797] usb 2-1: bad CDC descriptors [ 703.683123][ T983] usb 2-1: USB disconnect, device number 21 [ 703.875594][T14572] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2135'. [ 703.885138][T14572] 8021q: VLANs not supported on ip6_vti0 [ 704.297664][T14580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.325987][T14580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.444332][ T797] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 704.531024][T14580] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2140'. [ 704.608382][ T5914] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 704.617036][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 704.628981][ T797] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.640133][ T797] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.641257][T14585] AppArmor: change_hat: Invalid input '9' [ 704.654824][ T797] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 704.671488][ T797] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 704.681095][ T797] usb 1-1: Product: syz [ 704.685827][ T797] usb 1-1: Manufacturer: syz [ 704.703672][ T797] hub 1-1:4.0: USB hub found [ 704.789652][ T5914] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 704.804646][ T5914] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 704.815453][ T5914] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 704.825291][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.839659][T14582] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 704.854678][ T5914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 704.931197][ T797] hub 1-1:4.0: 7 ports detected [ 704.937162][ T797] hub 1-1:4.0: insufficient power available to use all downstream ports [ 705.018216][T11248] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 705.041930][T14594] netlink: 'syz.5.2145': attribute type 3 has an invalid length. [ 705.140345][ T5952] IPVS: starting estimator thread 0... [ 705.170337][T11248] usb 5-1: Using ep0 maxpacket: 32 [ 705.191198][ T797] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 705.203035][T11248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.228165][ T797] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 705.235054][T14598] IPVS: using max 26 ests per chain, 62400 per kthread [ 705.245874][T11248] usb 5-1: config 0 has no interfaces? [ 705.261136][T11248] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 705.288821][ T797] usb 1-1: USB disconnect, device number 17 [ 705.302209][T11248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.325371][T11248] usb 5-1: Product: syz [ 705.340303][T11248] usb 5-1: Manufacturer: syz [ 705.360329][T11248] usb 5-1: SerialNumber: syz [ 705.379816][T11248] usb 5-1: config 0 descriptor?? [ 705.406029][T14604] netlink: zone id is out of range [ 705.416008][T14603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.424916][T14604] netlink: zone id is out of range [ 705.432335][T14603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.441743][T14604] netlink: zone id is out of range [ 705.449371][T14604] netlink: zone id is out of range [ 705.462087][T14604] netlink: zone id is out of range [ 705.469743][T14604] netlink: zone id is out of range [ 705.475024][T14604] netlink: zone id is out of range [ 705.480715][T14604] netlink: zone id is out of range [ 705.485887][T14604] netlink: zone id is out of range [ 705.492513][T14604] netlink: zone id is out of range [ 705.597367][ T5952] usb 5-1: USB disconnect, device number 3 [ 705.626105][T14603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.636245][T14603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.688073][ T797] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 705.767292][T14611] netlink: 'syz.0.2150': attribute type 3 has an invalid length. [ 705.804517][T14611] kvm: kvm [14610]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 705.804593][T14611] kvm: kvm [14610]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 705.807181][T14611] kvm: kvm [14610]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 705.810962][T14611] kvm: kvm [14610]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 705.811025][T14611] kvm: kvm [14610]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 705.872648][ T797] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 705.926090][ T797] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 705.936626][ T797] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.018652][ T797] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 706.030786][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.044362][ T797] usb 6-1: Product: syz [ 706.050928][T14614] xt_hashlimit: size too large, truncated to 1048576 [ 706.052485][ T797] usb 6-1: Manufacturer: syz [ 706.063790][ T797] usb 6-1: SerialNumber: syz [ 706.082832][ T797] hub 6-1:1.0: bad descriptor, ignoring hub [ 706.089283][ T797] hub 6-1:1.0: probe with driver hub failed with error -5 [ 706.304490][ T797] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 706.505036][T14633] netlink: 'syz.0.2156': attribute type 3 has an invalid length. [ 706.521360][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.551145][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.650586][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'. [ 706.679257][ T983] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 706.724982][T14641] netlink: 'syz.0.2159': attribute type 29 has an invalid length. [ 706.818074][T14607] usb 6-1: reset high-speed USB device number 74 using dummy_hcd [ 706.842273][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 706.854185][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1807, setting to 1024 [ 706.931179][ T983] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 706.944503][ T983] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 706.954104][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.972682][ T983] usb 5-1: config 0 descriptor?? [ 706.978700][T14631] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 707.173256][T14649] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 707.196607][ T797] usb 6-1: USB disconnect, device number 74 [ 707.218954][ T797] usblp0: removed [ 707.425507][ T983] kovaplus 0003:1E7D:2D50.002C: item fetching failed at offset 3/5 [ 707.436468][ T983] kovaplus 0003:1E7D:2D50.002C: parse failed [ 707.442939][ T983] kovaplus 0003:1E7D:2D50.002C: probe with driver kovaplus failed with error -22 [ 707.462751][T14651] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 707.541369][ T983] usb 2-1: USB disconnect, device number 22 [ 707.639594][ T5892] usb 5-1: USB disconnect, device number 4 [ 707.874198][T14657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.896872][T14657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.132632][T14664] loop4: detected capacity change from 0 to 65536 [ 708.397904][ T797] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 708.468297][ T5892] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 708.545050][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 708.545070][ T30] audit: type=1326 audit(1774188213.190:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 708.579185][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 708.636502][ T30] audit: type=1326 audit(1774188213.190:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 708.696504][ T5892] usb 6-1: unable to get BOS descriptor or descriptor too short [ 708.717254][ T5892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.724830][ T797] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 708.755823][ T797] usb 1-1: config 0 has no interface number 0 [ 708.771598][ T5892] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 708.788018][ T797] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 708.801615][ T30] audit: type=1326 audit(1774188213.190:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 708.817951][ T797] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 708.858713][ T5892] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.880230][ T797] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 708.889425][ T30] audit: type=1326 audit(1774188213.190:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 708.917462][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.928005][T14683] FAULT_INJECTION: forcing a failure. [ 708.928005][T14683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.949627][ T30] audit: type=1326 audit(1774188213.200:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 708.959520][ T797] usb 1-1: Product: syz [ 708.972912][ T5892] usb 6-1: string descriptor 0 read error: -22 [ 708.983271][ T5892] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 708.992329][T14683] CPU: 0 UID: 0 PID: 14683 Comm: syz.4.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.992361][T14683] Tainted: [L]=SOFTLOCKUP [ 708.992369][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.992383][T14683] Call Trace: [ 708.992393][T14683] [ 708.992402][T14683] dump_stack_lvl+0xe8/0x150 [ 708.992440][T14683] should_fail_ex+0x412/0x560 [ 708.992479][T14683] _copy_from_user+0x2d/0xb0 [ 708.992505][T14683] mptcp_getsockopt+0x12a9/0x1ed0 [ 708.992651][T14683] ? __pfx_process_measurement+0x10/0x10 [ 708.992770][T14683] ? lockdep_hardirqs_on+0x7a/0x110 [ 708.992796][T14683] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 708.992831][T14683] ? __lock_acquire+0x6b5/0x2cf0 [ 708.992973][T14683] ? __lock_acquire+0x6b5/0x2cf0 [ 708.993064][T14683] ? __lock_acquire+0x6b5/0x2cf0 [ 708.993168][T14683] ? unwind_next_frame+0xa5/0x23c0 [ 708.993294][T14683] ? __lock_acquire+0x6b5/0x2cf0 [ 708.993397][T14683] ? __lock_acquire+0x6b5/0x2cf0 [ 708.993471][T14683] ? is_bpf_text_address+0x26/0x2b0 [ 708.993593][T14683] ? __lock_acquire+0x6b5/0x2cf0 [ 708.993666][T14683] ? aa_label_sk_perm+0x532/0x6e0 [ 708.993757][T14683] ? kstrtoull+0x12f/0x1d0 [ 708.993831][T14683] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 708.993905][T14683] ? kstrtouint+0x6e/0xe0 [ 708.994004][T14683] ? get_pid_task+0x20/0x1f0 [ 708.994068][T14683] ? __lock_acquire+0x6b5/0x2cf0 [ 708.994184][T14683] ? aa_sk_perm+0x6d5/0x900 [ 708.994337][T14683] ? sock_common_getsockopt+0x2d/0xb0 [ 708.994437][T14683] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 708.994514][T14683] do_sock_getsockopt+0x2d3/0x3f0 [ 708.994586][T14683] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 708.994665][T14683] ? ksys_write+0x1fc/0x270 [ 708.994740][T14683] __x64_sys_getsockopt+0x1a4/0x240 [ 708.994829][T14683] do_syscall_64+0x14d/0xf80 [ 708.994886][T14683] ? trace_irq_disable+0x3b/0x150 [ 708.994976][T14683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.995038][T14683] ? clear_bhb_loop+0x40/0x90 [ 708.995104][T14683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.995165][T14683] RIP: 0033:0x7f33c3f9c799 [ 708.995217][T14683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.995267][T14683] RSP: 002b:00007f33c21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 708.995323][T14683] RAX: ffffffffffffffda RBX: 00007f33c4215fa0 RCX: 00007f33c3f9c799 [ 708.995366][T14683] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 708.995405][T14683] RBP: 00007f33c21f6090 R08: 0000200000000040 R09: 0000000000000000 [ 708.995438][T14683] R10: 00002000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 708.995471][T14683] R13: 00007f33c4216038 R14: 00007f33c4215fa0 R15: 00007f33c433fa48 [ 708.995556][T14683] [ 709.061349][ T797] usb 1-1: Manufacturer: syz [ 709.061376][ T797] usb 1-1: SerialNumber: syz [ 709.087725][ T797] usb 1-1: config 0 descriptor?? [ 709.138026][ T30] audit: type=1326 audit(1774188213.200:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 709.324634][T14664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 709.337903][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.347887][T14664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 709.418330][ T30] audit: type=1326 audit(1774188213.200:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 709.443520][ T30] audit: type=1326 audit(1774188213.230:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 709.492451][ T30] audit: type=1326 audit(1774188213.230:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 709.519540][ T30] audit: type=1326 audit(1774188213.230:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14672 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 709.545798][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 709.569588][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'. [ 709.595581][ T5892] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 709.612346][T14664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 709.635438][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 709.645877][ T202] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.648783][T14664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 709.656852][ T202] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.679180][ T5892] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 709.698095][T11248] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 709.703251][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'. [ 709.716283][ T202] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.727361][ T202] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.870410][T11248] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 709.878519][T11248] usb 5-1: config 0 has no interface number 0 [ 709.886099][T11248] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 709.909914][T11248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.934124][ T5892] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 709.953615][T11248] usb 5-1: config 0 descriptor?? [ 709.986613][T11248] usb 5-1: selecting invalid altsetting 1 [ 710.007738][ T5892] usb 6-1: USB disconnect, device number 75 [ 710.018884][T14694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.027263][T11248] dvb_ttusb_budget: ttusb_init_controller: error [ 710.027302][T11248] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 710.086870][T14694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.126090][T14694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.147093][T14694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.156823][ T797] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 710.201234][ T797] asix 1-1:0.251: probe with driver asix failed with error -524 [ 710.254731][T11248] DVB: Unable to find symbol cx22700_attach() [ 710.323259][T11248] DVB: Unable to find symbol tda10046_attach() [ 710.340984][T11248] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 710.354251][T11248] usb 5-1: USB disconnect, device number 5 [ 710.370892][ T5892] usb 1-1: USB disconnect, device number 18 [ 710.538248][ T983] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 710.689881][ T983] usb 6-1: Using ep0 maxpacket: 32 [ 710.703027][ T983] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 710.723077][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.756639][ T983] usb 6-1: config 0 descriptor?? [ 710.972327][ T983] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 711.005911][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.025919][ T983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 711.058777][ T983] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 711.076673][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.085302][ T983] usb 6-1: media controller created [ 711.132139][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.143570][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.153964][T14713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.199004][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.284945][ T983] DVB: Unable to find symbol dib7000p_attach() [ 711.293171][ T983] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 711.358253][ T5952] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 711.378219][ T983] rc_core: IR keymap rc-dib0700-rc5 not found [ 711.384352][ T983] Registered IR keymap rc-empty [ 711.400711][ T983] dvb-usb: could not initialize remote control. [ 711.411490][ T983] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 711.444927][ T983] usb 6-1: USB disconnect, device number 76 [ 711.451060][ T5892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 711.495200][ T983] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 711.512135][ T5952] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 711.542333][ T5952] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 711.551892][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.568776][ T5952] uvcvideo 5-1:250.0: Found UVC 0.00 device (046d:08c1) [ 711.576686][ T5952] uvcvideo 5-1:250.0: No valid video chain found. [ 711.587948][ T5892] usb 1-1: device descriptor read/64, error -71 [ 711.745275][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 711.785853][ T5952] usb 5-1: USB disconnect, device number 6 [ 711.831667][ T5892] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 711.853684][T14724] FAULT_INJECTION: forcing a failure. [ 711.853684][T14724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.867155][T14724] CPU: 0 UID: 0 PID: 14724 Comm: syz.4.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.867186][T14724] Tainted: [L]=SOFTLOCKUP [ 711.867193][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 711.867204][T14724] Call Trace: [ 711.867212][T14724] [ 711.867221][T14724] dump_stack_lvl+0xe8/0x150 [ 711.867256][T14724] should_fail_ex+0x412/0x560 [ 711.867289][T14724] _copy_to_user+0x31/0xb0 [ 711.867311][T14724] mptcp_getsockopt+0x1ba7/0x1ed0 [ 711.867343][T14724] ? tomoyo_check_open_permission+0x38e/0x470 [ 711.867458][T14724] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 711.867482][T14724] ? tomoyo_check_open_permission+0x1d3/0x470 [ 711.867511][T14724] ? __lock_acquire+0x6b5/0x2cf0 [ 711.867540][T14724] ? __lock_acquire+0x6b5/0x2cf0 [ 711.867564][T14724] ? __lock_acquire+0x6b5/0x2cf0 [ 711.867595][T14724] ? unwind_next_frame+0xa5/0x23c0 [ 711.867628][T14724] ? __lock_acquire+0x6b5/0x2cf0 [ 711.867661][T14724] ? __lock_acquire+0x6b5/0x2cf0 [ 711.867685][T14724] ? is_bpf_text_address+0x26/0x2b0 [ 711.867721][T14724] ? __lock_acquire+0x6b5/0x2cf0 [ 711.867744][T14724] ? aa_label_sk_perm+0x532/0x6e0 [ 711.867785][T14724] ? kstrtoull+0x12f/0x1d0 [ 711.867815][T14724] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 711.867845][T14724] ? kstrtouint+0x6e/0xe0 [ 711.867878][T14724] ? get_pid_task+0x20/0x1f0 [ 711.867905][T14724] ? __lock_acquire+0x6b5/0x2cf0 [ 711.867951][T14724] ? aa_sk_perm+0x6d5/0x900 [ 711.868001][T14724] ? sock_common_getsockopt+0x2d/0xb0 [ 711.868033][T14724] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 711.868066][T14724] do_sock_getsockopt+0x2d3/0x3f0 [ 711.868094][T14724] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 711.868122][T14724] ? ksys_write+0x1fc/0x270 [ 711.868152][T14724] __x64_sys_getsockopt+0x1a4/0x240 [ 711.868182][T14724] do_syscall_64+0x14d/0xf80 [ 711.868202][T14724] ? trace_irq_disable+0x3b/0x150 [ 711.868229][T14724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.868247][T14724] ? clear_bhb_loop+0x40/0x90 [ 711.868270][T14724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.868288][T14724] RIP: 0033:0x7f33c3f9c799 [ 711.868305][T14724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.868321][T14724] RSP: 002b:00007f33c21f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 711.868340][T14724] RAX: ffffffffffffffda RBX: 00007f33c4215fa0 RCX: 00007f33c3f9c799 [ 711.868354][T14724] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 711.868365][T14724] RBP: 00007f33c21f6090 R08: 0000200000000040 R09: 0000000000000000 [ 711.868377][T14724] R10: 00002000000020c0 R11: 0000000000000246 R12: 0000000000000001 [ 711.868388][T14724] R13: 00007f33c4216038 R14: 00007f33c4215fa0 R15: 00007f33c433fa48 [ 711.868414][T14724] [ 712.218199][ T5892] usb 1-1: device descriptor read/64, error -71 [ 712.295044][T14729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.328206][ T5892] usb usb1-port1: attempt power cycle [ 712.668571][ T5892] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 712.688964][ T5892] usb 1-1: device descriptor read/8, error -71 [ 712.928064][ T5892] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 712.948420][ T5892] usb 1-1: device descriptor read/8, error -71 [ 713.059251][ T5892] usb usb1-port1: unable to enumerate USB device [ 713.817960][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 713.825232][T14719] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 714.737595][T14719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 714.745647][T14719] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 714.752263][T14719] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 714.759372][T14719] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 714.769858][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.798361][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.830294][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.848415][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.999921][T14745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.038674][ T797] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 715.048819][ T5892] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 715.208039][T11248] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 715.230043][ T797] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 715.238251][ T797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.248471][ T5892] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 715.249204][ T797] usb 5-1: config 0 has no interface number 0 [ 715.268684][ T5892] usb 1-1: config 0 has no interface number 0 [ 715.320954][ T5892] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 715.332937][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.348510][ T797] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 715.357718][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.360067][ T5892] usb 1-1: config 0 descriptor?? [ 715.366212][ T797] usb 5-1: Product: syz [ 715.366233][ T797] usb 5-1: Manufacturer: syz [ 715.366251][ T797] usb 5-1: SerialNumber: syz [ 715.374179][ T797] usb 5-1: config 0 descriptor?? [ 715.408645][T11248] usb 2-1: Using ep0 maxpacket: 8 [ 715.421403][T11248] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 715.431699][ T5892] usb 1-1: selecting invalid altsetting 1 [ 715.445845][T11248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.473652][T11248] usb 2-1: Product: syz [ 715.503438][T11248] usb 2-1: Manufacturer: syz [ 715.520995][T11248] usb 2-1: SerialNumber: syz [ 715.528303][ T5892] dvb_ttusb_budget: ttusb_init_controller: error [ 715.544015][T11248] usb 2-1: config 0 descriptor?? [ 715.551908][ T5892] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 715.676916][ T797] usb 5-1: probing VID:PID(2201:012C) [ 715.693706][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.694874][ T797] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 715.737326][ T797] vub300 5-1:0.32: probe with driver vub300 failed with error -22 [ 715.772997][T11248] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 715.818450][ T797] usb 5-1: USB disconnect, device number 7 [ 715.850251][ T5892] DVB: Unable to find symbol cx22700_attach() [ 715.878763][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.898565][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 715.933624][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.969900][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.975945][T14743] xt_SECMARK: invalid mode: 2 [ 716.010666][ T5892] DVB: Unable to find symbol tda10046_attach() [ 716.016982][ T5892] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 716.029188][ T5892] usb 1-1: USB disconnect, device number 23 [ 716.388573][T14761] FAULT_INJECTION: forcing a failure. [ 716.388573][T14761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.406410][T14761] CPU: 1 UID: 0 PID: 14761 Comm: syz.0.2198 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.406445][T14761] Tainted: [L]=SOFTLOCKUP [ 716.406453][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.406467][T14761] Call Trace: [ 716.406476][T14761] [ 716.406486][T14761] dump_stack_lvl+0xe8/0x150 [ 716.406523][T14761] should_fail_ex+0x412/0x560 [ 716.406565][T14761] _copy_to_user+0x31/0xb0 [ 716.406586][T14761] simple_read_from_buffer+0xe1/0x170 [ 716.406613][T14761] proc_fail_nth_read+0x1bb/0x230 [ 716.406666][T14761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.406699][T14761] ? rw_verify_area+0x2a6/0x4d0 [ 716.406720][T14761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 716.406752][T14761] vfs_read+0x20c/0xa70 [ 716.406774][T14761] ? __pfx_vfs_read+0x10/0x10 [ 716.406813][T14761] ? sock_common_getsockopt+0x2d/0xb0 [ 716.406844][T14761] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 716.406881][T14761] ? do_sock_getsockopt+0x2d3/0x3f0 [ 716.406905][T14761] ksys_read+0x150/0x270 [ 716.406924][T14761] ? __pfx_ksys_read+0x10/0x10 [ 716.406958][T14761] ? __x64_sys_getsockopt+0x1a4/0x240 [ 716.406991][T14761] do_syscall_64+0x14d/0xf80 [ 716.407014][T14761] ? trace_irq_disable+0x3b/0x150 [ 716.407047][T14761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.407063][T14761] ? clear_bhb_loop+0x40/0x90 [ 716.407082][T14761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.407115][T14761] RIP: 0033:0x7fac3d75cfce [ 716.407136][T14761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 716.407153][T14761] RSP: 002b:00007fac3e61efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 716.407242][T14761] RAX: ffffffffffffffda RBX: 00007fac3e61f6c0 RCX: 00007fac3d75cfce [ 716.407271][T14761] RDX: 000000000000000f RSI: 00007fac3e61f0a0 RDI: 0000000000000004 [ 716.407286][T14761] RBP: 00007fac3e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 716.407299][T14761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.407311][T14761] R13: 00007fac3da16038 R14: 00007fac3da15fa0 R15: 00007fac3db3fa48 [ 716.407345][T14761] [ 716.778311][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 716.782594][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 716.785303][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 717.005222][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.025400][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.118054][ T5914] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 717.229596][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.261725][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.299191][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 717.317469][ T5914] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 717.330218][ T797] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 717.356987][ T5914] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 717.367052][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.375831][ T5914] usb 6-1: Product: syz [ 717.381790][ T5914] usb 6-1: Manufacturer: syz [ 717.393156][ T5914] usb 6-1: SerialNumber: syz [ 717.500787][ T797] usb 1-1: Using ep0 maxpacket: 16 [ 717.527465][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.539035][T11248] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 717.589534][T11248] usb 2-1: USB disconnect, device number 23 [ 717.634775][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.691355][ T797] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 717.727974][ T797] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 717.736145][ T797] usb 1-1: Manufacturer: syz [ 717.780499][ T5914] usb 6-1: USB disconnect, device number 77 [ 717.841429][ T797] usb 1-1: config 0 descriptor?? [ 717.870544][T11011] udevd[11011]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.277943][ T5924] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 718.470590][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.480710][ T5924] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 718.490942][ T5924] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.504536][T11248] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 718.515931][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 718.525518][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.533677][ T5924] usb 5-1: Product: syz [ 718.538099][ T5924] usb 5-1: Manufacturer: syz [ 718.542775][ T5924] usb 5-1: SerialNumber: syz [ 718.552922][ T5924] hub 5-1:1.0: bad descriptor, ignoring hub [ 718.563439][ T5924] hub 5-1:1.0: probe with driver hub failed with error -5 [ 718.568123][ T5892] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 718.680064][T11248] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 718.691932][T11248] usb 6-1: config 0 has no interface number 0 [ 718.702537][T11248] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 718.708437][ T5892] usb 2-1: device descriptor read/64, error -71 [ 718.712518][T11248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.732452][T11248] usb 6-1: config 0 descriptor?? [ 718.746995][T11248] usb 6-1: selecting invalid altsetting 1 [ 718.756586][T11248] dvb_ttusb_budget: ttusb_init_controller: error [ 718.764894][T11248] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 718.774141][ T5924] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 718.866176][T11248] DVB: Unable to find symbol cx22700_attach() [ 718.922586][T11248] DVB: Unable to find symbol tda10046_attach() [ 718.929676][T11248] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 718.955044][ T5884] usb 6-1: USB disconnect, device number 78 [ 718.963028][ T5892] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 718.976813][T14783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.005313][T14783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.108017][ T5892] usb 2-1: device descriptor read/64, error -71 [ 719.114833][ T5924] usb 5-1: USB disconnect, device number 8 [ 719.125527][ T5924] usblp0: removed [ 719.218439][ T5892] usb usb2-port1: attempt power cycle [ 719.558491][ T5892] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 719.588683][ T5892] usb 2-1: device descriptor read/8, error -71 [ 719.848014][ T5892] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 719.872089][ T5892] usb 2-1: device descriptor read/8, error -71 [ 720.101491][ T5892] usb usb2-port1: unable to enumerate USB device [ 720.175542][ T797] usbhid 1-1:0.0: can't add hid device: -71 [ 720.217963][ T797] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 720.254378][ T797] usb 1-1: USB disconnect, device number 24 [ 720.388176][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.456467][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.740430][ T797] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 720.879121][T14834] netlink: 'syz.4.2219': attribute type 1 has an invalid length. [ 721.013648][T14834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.071308][ T797] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.087363][ T797] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 721.134201][ T797] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.170514][ T797] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.187987][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.196195][ T797] usb 1-1: Product: syz [ 721.210802][ T797] usb 1-1: Manufacturer: syz [ 721.224300][ T797] usb 1-1: SerialNumber: syz [ 721.260992][ T797] cdc_mbim 1-1:1.0: skipping garbage [ 721.273770][ T797] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 721.307287][ T797] cdc_mbim 1-1:1.0: bind() failure [ 721.454722][ T5892] usb 1-1: USB disconnect, device number 25 [ 721.750101][ T797] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 721.954973][ T797] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 721.967056][ T797] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 722.006410][ T797] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.038918][ T797] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 722.049480][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.059656][ T797] usb 2-1: Product: syz [ 722.064530][ T797] usb 2-1: Manufacturer: syz [ 722.073285][ T797] usb 2-1: SerialNumber: syz [ 722.090711][ T797] hub 2-1:1.0: bad descriptor, ignoring hub [ 722.097451][ T797] hub 2-1:1.0: probe with driver hub failed with error -5 [ 722.326005][ T797] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 722.523166][T14838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.539033][T14838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.670115][ T5892] usb 2-1: USB disconnect, device number 28 [ 722.679508][ T5892] usblp0: removed [ 722.838607][ T5952] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 723.007023][ T5952] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 723.051992][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.096683][ T5952] usb 6-1: Product: syz [ 723.111659][ T5952] usb 6-1: Manufacturer: syz [ 723.119621][T14854] netlink: 'syz.2.2225': attribute type 3 has an invalid length. [ 723.132001][ T5952] usb 6-1: SerialNumber: syz [ 723.154057][ T5952] usb 6-1: config 0 descriptor?? [ 723.689084][ T5884] hid (null): unknown global tag 0xd [ 723.694850][ T5884] hid (null): unknown global tag 0xc [ 723.705733][ T5884] hid-generic 009C:0008:0003.002D: unknown main item tag 0x0 [ 723.713760][ T5952] usb 6-1: Firmware: major: 0, minor: 49, hardware type: ATUSB (0) [ 723.722024][ T5892] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 723.731538][ T5884] hid-generic 009C:0008:0003.002D: unknown global tag 0xd [ 723.741791][ T5884] hid-generic 009C:0008:0003.002D: item 0 4 1 13 parsing failed [ 723.763693][T14866] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 723.819488][ T5884] hid-generic 009C:0008:0003.002D: probe with driver hid-generic failed with error -22 [ 723.890180][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.900926][ T5892] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.965816][ T5892] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.998362][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.252134][ T5892] usb 2-1: usb_control_msg returned -32 [ 724.362741][ T5892] usbtmc 2-1:16.0: can't read capabilities [ 724.427243][T11248] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 724.593346][T11248] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 724.604825][T11248] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 724.627887][T11248] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 724.649710][T11248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.686061][T14858] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 724.738910][T11248] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 724.780628][ T5952] usb 6-1: failed to fetch extended address, random address set [ 724.912821][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.948391][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.139136][ T5952] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 725.215482][ T5892] usb 1-1: USB disconnect, device number 26 [ 725.299408][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 725.306691][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.330369][ T5952] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 725.347984][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.356346][ T5952] usb 5-1: Product: syz [ 725.373256][ T5952] usb 5-1: Manufacturer: syz [ 725.380656][ T5952] usb 5-1: SerialNumber: syz [ 725.390136][ T5952] usb 5-1: config 0 descriptor?? [ 725.432828][ T5952] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 725.448972][ T5952] gspca_stv06xx: st6422 sensor detected [ 725.598871][ T5892] usb 6-1: USB disconnect, device number 79 [ 725.762702][T14887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.808379][T14887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.963516][ T5952] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 725.986295][ T5952] usb 5-1: USB disconnect, device number 9 [ 725.992356][ T5892] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 726.138541][ T29] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 726.158509][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 726.165976][ T5892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.191306][ T5892] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 726.207861][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.215908][ T5892] usb 6-1: Product: syz [ 726.220606][ T5892] usb 6-1: Manufacturer: syz [ 726.225246][ T5892] usb 6-1: SerialNumber: syz [ 726.309893][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 726.327966][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 726.358462][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 726.412668][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 726.430568][ T5952] usb 2-1: USB disconnect, device number 29 [ 726.441937][T14885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 726.458305][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 726.468844][T14885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2233'. [ 726.473898][ T29] usb 1-1: SerialNumber: syz [ 726.553978][ T5892] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 726.569691][ T29] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 726.617239][ T29] usb-storage 1-1:1.0: USB Mass Storage device detected [ 726.640229][ T5892] usb 6-1: USB disconnect, device number 80 [ 726.678463][ T29] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 726.850990][ T29] usb 1-1: USB disconnect, device number 27 [ 726.908497][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.942028][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.013332][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.061196][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.840053][T11248] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 727.900246][ T797] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 728.002633][T11248] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 728.054470][T11248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.065905][T11248] usb 2-1: Product: syz [ 728.072525][T11248] usb 2-1: Manufacturer: syz [ 728.077323][T11248] usb 2-1: SerialNumber: syz [ 728.106165][T11248] usb 2-1: config 0 descriptor?? [ 728.150982][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.173338][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.185133][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.224264][ T797] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 728.270808][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.316573][ T797] usb 1-1: config 0 descriptor?? [ 728.365108][ T797] dvb-usb: found a 'TeVii S662' in warm state. [ 728.384868][ T797] dw2102: su3000_power_ctrl: 1, initialized 0 [ 728.400182][ T797] dvb-usb: bulk message failed: -22 (2/0) [ 728.408375][ T5924] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 728.439573][ T797] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 728.484347][ T797] dvb-usb: TeVii S662 error while loading driver (-19) [ 728.580166][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 728.709486][T11248] usb 2-1: Firmware: major: 0, minor: 49, hardware type: ATUSB (0) [ 728.717881][ T5924] usb 5-1: unable to get BOS descriptor or descriptor too short [ 728.735473][ T5924] usb 5-1: too many configurations: 192, using maximum allowed: 8 [ 728.794181][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.808580][ T5924] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 728.827760][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.843803][ T5924] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 728.865123][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.876782][ T5924] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 728.898375][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.912860][ T5924] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 729.017029][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.029254][ T5924] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 729.050617][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.061287][ T5924] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 729.073334][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.087585][ T5924] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 729.155948][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.166327][ T5924] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 729.200001][ T5924] usb 5-1: New USB device found, idVendor=2466, idProduct=ba10, bcdDevice=54.79 [ 729.210447][ T5924] usb 5-1: New USB device strings: Mfr=23, Product=77, SerialNumber=140 [ 729.287984][ T5924] usb 5-1: Product: syz [ 729.292446][ T5924] usb 5-1: Manufacturer: syz [ 729.297305][ T5924] usb 5-1: SerialNumber: syz [ 729.517901][ T5924] usb 5-1: USB disconnect, device number 10 [ 729.691764][T14949] tipc: Enabled bearer , priority 0 [ 729.739484][T11248] usb 2-1: failed to fetch extended address, random address set [ 729.755165][T14949] tipc: Disabling bearer [ 730.137472][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2252'. [ 730.211297][T14963] netlink: 39 bytes leftover after parsing attributes in process `syz.5.2252'. [ 730.221326][T14963] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2252'. [ 730.237472][T14963] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 730.246848][T14963] tipc: Enabled bearer , priority 10 [ 730.391160][T14967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.407340][T14967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.492305][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 730.492329][ T30] audit: type=1326 audit(1774188235.110:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 730.703931][ T30] audit: type=1326 audit(1774188235.110:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 730.754034][T14967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.859093][ T30] audit: type=1326 audit(1774188235.110:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 730.877083][T14967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.922301][ T5924] usb 1-1: USB disconnect, device number 28 [ 730.943277][ T30] audit: type=1326 audit(1774188235.110:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 730.967454][ T30] audit: type=1326 audit(1774188235.110:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 730.970667][ T29] usb 2-1: USB disconnect, device number 30 [ 731.226449][ T30] audit: type=1326 audit(1774188235.110:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 731.274026][ T30] audit: type=1326 audit(1774188235.110:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 731.297473][ T30] audit: type=1326 audit(1774188235.110:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 731.326810][ T30] audit: type=1326 audit(1774188235.110:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 731.351221][ T30] audit: type=1326 audit(1774188235.110:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14964 comm="syz.4.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 731.768267][ T29] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 731.920387][ T29] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.946294][ T29] usb 2-1: config 0 has no interface number 0 [ 731.973377][ T29] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 732.017886][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.046133][ T29] usb 2-1: config 0 descriptor?? [ 732.082098][ T29] usb 2-1: selecting invalid altsetting 1 [ 732.096641][ T29] dvb_ttusb_budget: ttusb_init_controller: error [ 732.110898][ T29] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 732.340463][ T29] DVB: Unable to find symbol cx22700_attach() [ 732.490140][ T29] DVB: Unable to find symbol tda10046_attach() [ 732.508429][ T29] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 732.533055][ T29] usb 2-1: USB disconnect, device number 31 [ 732.607453][T15004] net_ratelimit: 332 callbacks suppressed [ 732.607545][T15004] netlink: zone id is out of range [ 732.650289][T15004] netlink: zone id is out of range [ 732.678095][T15004] netlink: zone id is out of range [ 732.690843][T15004] netlink: zone id is out of range [ 732.728324][T15004] netlink: zone id is out of range [ 732.734985][T15004] netlink: zone id is out of range [ 732.743442][T15004] netlink: zone id is out of range [ 732.776287][T15004] netlink: zone id is out of range [ 732.797215][T15004] netlink: zone id is out of range [ 732.821437][T15004] netlink: zone id is out of range [ 732.918104][T11248] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 733.168223][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 733.317871][T11248] usb 6-1: Using ep0 maxpacket: 32 [ 733.325701][T11248] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 733.334189][T11248] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.345708][T11248] usb 6-1: config 0 has no interface number 0 [ 733.352046][T11248] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 733.725266][T11248] usb 6-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 733.735396][T11248] usb 6-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.747377][ T29] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 733.773603][T15026] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 733.784853][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.787221][T11248] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 733.809130][ T29] usb 5-1: Product: syz [ 733.813402][ T29] usb 5-1: Manufacturer: syz [ 733.834638][T11248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.843012][T11248] usb 6-1: Product: syz [ 733.847370][T11248] usb 6-1: Manufacturer: syz [ 733.852152][T11248] usb 6-1: SerialNumber: syz [ 733.853639][ T29] usb 5-1: SerialNumber: syz [ 733.864714][T11248] usb 6-1: config 0 descriptor?? [ 733.875182][T11248] redrat3 6-1:0.83: Couldn't find all endpoints [ 733.896393][ T29] usb 5-1: config 0 descriptor?? [ 734.073646][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.093213][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.111868][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.128776][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.149605][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.182854][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.194767][T15032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.238162][T11248] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 734.268180][T15008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.287416][T15008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.300855][T15032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.346739][ T983] usb 6-1: USB disconnect, device number 81 [ 734.374443][ T29] usb 5-1: Firmware: major: 0, minor: 49, hardware type: ATUSB (0) [ 734.418974][T11248] usb 1-1: Using ep0 maxpacket: 32 [ 734.433832][T11248] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 734.462241][T11248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.470883][T11248] usb 1-1: Product: syz [ 734.475096][T11248] usb 1-1: Manufacturer: syz [ 734.488979][T11248] usb 1-1: SerialNumber: syz [ 734.504625][T11248] usb 1-1: config 0 descriptor?? [ 734.517935][ T5924] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 734.530111][T11248] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 734.544362][T11248] dvb-usb: bulk message failed: -22 (2/0) [ 734.559744][T11248] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 734.579008][T11248] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 734.593237][T11248] usb 1-1: media controller created [ 734.614721][T11248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 734.667507][T11248] usb 1-1: selecting invalid altsetting 7 [ 734.686121][T11248] cxusb: set interface failed [ 734.692645][T11248] dvb-usb: bulk message failed: -22 (1/0) [ 734.700800][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 734.708859][ T5924] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 734.730536][ T5924] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 734.742331][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.752461][ T5924] usb 2-1: Product: syz [ 734.756678][ T5924] usb 2-1: Manufacturer: syz [ 734.766758][ T5924] usb 2-1: SerialNumber: syz [ 734.795468][ T5924] usb 2-1: config 0 descriptor?? [ 734.846486][T11248] DVB: Unable to find symbol lgdt330x_attach() [ 734.853019][T11248] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 734.995984][T11248] rc_core: IR keymap rc-dvico-portable not found [ 735.012741][T11248] Registered IR keymap rc-empty [ 735.035034][T11248] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 735.055171][ T5924] usb 2-1: USB disconnect, device number 32 [ 735.087394][T11248] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input67 [ 735.122829][T11248] dvb-usb: schedule remote query interval to 100 msecs. [ 735.140251][T11248] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 735.157873][ T797] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 735.181121][T11248] usb 1-1: USB disconnect, device number 29 [ 735.331729][ T797] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 735.347208][T11248] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 735.362036][ T797] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 735.385120][ T797] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.421880][ T29] usb 5-1: failed to fetch extended address, random address set [ 735.434522][ T797] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 735.454047][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.487677][ T797] usb 6-1: Product: syz [ 735.503044][ T797] usb 6-1: Manufacturer: syz [ 735.515750][ T797] usb 6-1: SerialNumber: syz [ 735.545938][ T797] hub 6-1:1.0: bad descriptor, ignoring hub [ 735.583586][ T797] hub 6-1:1.0: probe with driver hub failed with error -5 [ 735.753763][ T797] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 735.838318][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2277'. [ 735.873534][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2277'. [ 735.922237][ T29] usb 5-1: USB disconnect, device number 11 [ 736.296931][T15077] fuse: Bad value for 'fd' [ 736.368220][T15041] usb 6-1: reset high-speed USB device number 82 using dummy_hcd [ 736.819734][ T29] usb 6-1: USB disconnect, device number 82 [ 736.828365][ T29] usblp0: removed [ 736.898063][ T5952] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 736.911771][T15087] binder: 15086:15087 ioctl 4018620d 0 returned -22 [ 736.972195][T15092] binder: 15086:15092 ioctl c0306201 0 returned -14 [ 737.002434][T15094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.022512][T15094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.078792][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 737.189088][ T5952] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 737.204169][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.214322][ T5952] usb 1-1: Product: syz [ 737.218769][ T5952] usb 1-1: Manufacturer: syz [ 737.224418][ T5952] usb 1-1: SerialNumber: syz [ 737.301713][ T5952] usb 1-1: config 0 descriptor?? [ 737.310539][ T5952] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 737.319424][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 737.347257][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 737.385588][ T5952] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 737.429535][ T5952] usb 1-1: media controller created [ 737.459087][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 737.518287][ T5952] usb 1-1: selecting invalid altsetting 7 [ 737.527949][ T5952] cxusb: set interface failed [ 737.538493][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 737.657982][T11248] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 737.705663][ T5952] DVB: Unable to find symbol lgdt330x_attach() [ 737.726689][ T5952] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 737.813935][T11248] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 737.849331][T11248] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 737.893179][T11248] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.042175][T11248] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 738.052156][T11248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.060636][T11248] usb 6-1: Product: syz [ 738.065789][T11248] usb 6-1: Manufacturer: syz [ 738.071611][T11248] usb 6-1: SerialNumber: syz [ 738.261364][ T5952] rc_core: IR keymap rc-dvico-portable not found [ 738.290166][ T5952] Registered IR keymap rc-empty [ 738.296497][ T5952] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 738.312336][ T5952] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input68 [ 738.331321][ T5952] dvb-usb: schedule remote query interval to 100 msecs. [ 738.340239][ T5952] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 738.447869][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 738.493553][ T5952] usb 1-1: USB disconnect, device number 30 [ 738.637445][T11248] hub 6-1:1.0: bad descriptor, ignoring hub [ 738.670489][T11248] hub 6-1:1.0: probe with driver hub failed with error -5 [ 738.772531][T15107] syzkaller0: entered promiscuous mode [ 738.793325][T15107] syzkaller0: entered allmulticast mode [ 738.814676][ T5952] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 738.844909][T11248] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 738.924052][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 739.046027][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.069894][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.158246][ T5952] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 739.307952][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 739.314962][ T5952] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 739.327093][ T5952] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.341695][ T5952] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 739.351553][ T5952] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 739.361052][ T5952] usb 1-1: Product: syz [ 739.365967][ T5952] usb 1-1: Manufacturer: syz [ 739.371100][T15119] binder: 15117:15119 ioctl 8004587d 200000000100 returned -22 [ 739.396359][ T5952] hub 1-1:4.0: USB hub found [ 739.423641][T15119] netlink: 'syz.4.2294': attribute type 2 has an invalid length. [ 739.439642][T15119] !: entered promiscuous mode [ 739.591250][ T5952] hub 1-1:4.0: 2 ports detected [ 739.695346][T15121] team0: Device ipip1 is up. Set it down before adding it as a team port [ 739.733546][T15122] team0: Device ipip1 is up. Set it down before adding it as a team port [ 739.744057][T15123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.763822][T15123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.923399][T11248] usb 6-1: USB disconnect, device number 83 [ 739.934181][T11248] usblp0: removed [ 740.638573][ T5952] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 740.652492][ T5952] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 740.715263][T15142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2297'. [ 740.749388][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 740.765107][T15142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2297'. [ 741.104046][T11248] usb 1-1: USB disconnect, device number 31 [ 741.214495][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'. [ 741.368171][T11248] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 741.549908][T11248] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 741.579316][T11248] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 741.609874][T11248] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 741.627645][T11248] usb 2-1: config 1 has no interface number 0 [ 741.642068][T11248] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 741.683599][T11248] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 741.704624][T15155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.751980][T15155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.863311][T11248] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 741.877109][T11248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.972232][T11248] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 742.183268][T11248] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 742.213541][T11248] snd_usb_pod 2-1:1.1: invalid control EP [ 742.232295][T11248] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 742.247382][T11248] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 742.278470][T11248] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 742.384676][T11248] usb 2-1: USB disconnect, device number 33 [ 742.619863][T15163] vlan1: entered promiscuous mode [ 742.630532][T15163] vlan1: entered allmulticast mode [ 742.635782][T15163] hsr_slave_1: entered allmulticast mode [ 742.661302][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'. [ 743.087357][T15178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.111905][T15178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.278453][ T5952] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 743.303403][T15184] x_tables: duplicate underflow at hook 1 [ 743.348774][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 743.568056][ T5952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 743.578409][ T5952] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 743.671183][T15192] netlink: 'syz.4.2314': attribute type 2 has an invalid length. [ 743.838184][ T5952] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.894468][ T5952] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 743.977150][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.987180][ T5952] usb 2-1: Product: syz [ 744.062536][ T5952] usb 2-1: Manufacturer: syz [ 744.090568][ T5952] usb 2-1: SerialNumber: syz [ 744.122269][ T5952] hub 2-1:1.0: bad descriptor, ignoring hub [ 744.149415][ T5952] hub 2-1:1.0: probe with driver hub failed with error -5 [ 744.167987][T15198] program syz.2.2315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 744.179915][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 744.179941][ T30] audit: type=1326 audit(1774188248.810:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.179984][ T30] audit: type=1326 audit(1774188248.810:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.180024][ T30] audit: type=1326 audit(1774188248.810:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.180057][ T30] audit: type=1326 audit(1774188248.810:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.180090][ T30] audit: type=1326 audit(1774188248.810:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.180124][ T30] audit: type=1326 audit(1774188248.810:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.180157][ T30] audit: type=1326 audit(1774188248.810:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.180190][ T30] audit: type=1326 audit(1774188248.810:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.180224][ T30] audit: type=1326 audit(1774188248.810:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.180257][ T30] audit: type=1326 audit(1774188248.810:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 744.367412][ T5952] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 744.545417][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.570017][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.779606][T11248] usb 2-1: USB disconnect, device number 34 [ 744.788342][T11248] usblp0: removed [ 745.063980][T15213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.078577][T15213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.199947][T15219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.209222][T15219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.278210][T15220] net_ratelimit: 33 callbacks suppressed [ 745.278231][T15220] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 746.125796][T15244] netlink: 408 bytes leftover after parsing attributes in process `syz.2.2328'. [ 746.178982][ T5952] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 746.368400][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 746.398711][ T5952] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 746.443551][ T5952] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 746.473303][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.528304][ T5952] usb 6-1: Product: syz [ 746.552943][ T5952] usb 6-1: Manufacturer: syz [ 746.557571][ T5952] usb 6-1: SerialNumber: syz [ 746.876648][T15252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.938911][T15252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.113720][ T5924] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 747.290480][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.296957][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.433126][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 747.444888][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 747.475740][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.501138][ T5924] usb 5-1: Product: syz [ 747.510437][ T5924] usb 5-1: Manufacturer: syz [ 747.523058][ T5924] usb 5-1: SerialNumber: syz [ 747.554707][ T5924] usb 5-1: config 0 descriptor?? [ 747.774378][ T5924] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 747.789573][ T5924] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 747.837048][ T5924] usb 5-1: USB disconnect, device number 12 [ 748.126846][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.184713][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.226616][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.239352][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.262320][ T5892] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 748.424417][ T5892] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 748.438823][ T5892] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 748.450060][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.468420][ T5892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 748.482312][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.494219][ T5892] usb 1-1: Product: syz [ 748.500214][ T5892] usb 1-1: Manufacturer: syz [ 748.505234][ T5892] usb 1-1: SerialNumber: syz [ 748.546432][ T5892] hub 1-1:1.0: bad descriptor, ignoring hub [ 748.556150][ T5892] hub 1-1:1.0: probe with driver hub failed with error -5 [ 748.737631][ T5892] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 748.930534][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.948529][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.958290][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.976611][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.985537][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.016049][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.106637][T15271] netlink: 'syz.1.2337': attribute type 10 has an invalid length. [ 749.118910][T15271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.130256][T15271] batadv0: entered promiscuous mode [ 749.135691][T15271] batadv0: entered allmulticast mode [ 749.142288][T15271] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 749.259046][ T202] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 749.268974][ T202] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 749.303538][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'. [ 749.322670][T15278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.841521][ T5892] usb 1-1: USB disconnect, device number 32 [ 749.953904][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 749.953925][ T30] audit: type=1326 audit(1774188254.560:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.004256][ T5924] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 750.035301][ T30] audit: type=1326 audit(1774188254.560:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.103244][ T30] audit: type=1326 audit(1774188254.560:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.165326][ T30] audit: type=1326 audit(1774188254.560:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.207982][ T5924] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 750.220497][ T5924] usb 5-1: config 0 has no interface number 0 [ 750.237984][ T5924] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 105, changing to 10 [ 750.251776][ T30] audit: type=1326 audit(1774188254.560:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.284752][ T5924] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 25343, setting to 1024 [ 750.302298][ T5892] usblp0: removed [ 750.314132][ T5924] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 750.326587][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.340012][ T30] audit: type=1326 audit(1774188254.560:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.362861][ T5924] usb 5-1: Product: syz [ 750.380498][ T5924] usb 5-1: Manufacturer: syz [ 750.392442][ T5924] usb 5-1: SerialNumber: syz [ 750.429084][ T5924] usb 5-1: config 0 descriptor?? [ 750.437984][ T30] audit: type=1326 audit(1774188254.560:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.468958][ T30] audit: type=1326 audit(1774188254.560:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.542808][ T5924] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 750.677894][ T30] audit: type=1326 audit(1774188254.560:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 750.735696][T15286] sctp: [Deprecated]: syz.4.2342 (pid 15286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.735696][T15286] Use struct sctp_sack_info instead [ 750.877872][ T30] audit: type=1326 audit(1774188254.560:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15288 comm="syz.2.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fad53f9c799 code=0x7ffc0000 [ 751.007282][ T5892] usb 5-1: USB disconnect, device number 13 [ 751.026432][ T5892] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 752.314619][T11098] udevd[11098]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.319445][ T5952] usb 6-1: USB disconnect, device number 84 [ 752.438049][ T5924] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 752.606211][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 752.633930][ T5924] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 752.713581][T15315] netlink: 'syz.2.2349': attribute type 1 has an invalid length. [ 752.742625][ T5924] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 752.742663][ T5952] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 752.776338][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 752.786529][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.917438][ T5924] usb 5-1: Product: syz [ 752.935932][ T5924] usb 5-1: Manufacturer: syz [ 752.948809][ T5924] usb 5-1: SerialNumber: syz [ 752.979104][ T5924] hub 5-1:1.0: bad descriptor, ignoring hub [ 752.983472][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.998068][ T5924] hub 5-1:1.0: probe with driver hub failed with error -5 [ 753.053235][T15315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 753.075021][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.088181][ T5952] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 753.113101][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.140172][ T5952] usb 6-1: config 0 descriptor?? [ 753.200000][ T5924] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 753.219590][T15319] netlink: 'syz.1.2350': attribute type 3 has an invalid length. [ 753.488938][ T5924] usb 5-1: USB disconnect, device number 14 [ 753.498966][ T5924] usblp0: removed [ 753.567175][ T5952] hkems 0003:2006:0118.002E: unknown main item tag 0x0 [ 753.580228][ T5952] hkems 0003:2006:0118.002E: unknown main item tag 0x0 [ 753.587528][ T5952] hkems 0003:2006:0118.002E: reserved main item tag 0xe [ 753.668556][ T5952] hkems 0003:2006:0118.002E: hidraw1: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.5-1/input0 [ 753.700926][ T5952] hkems 0003:2006:0118.002E: no inputs found [ 753.724115][ T5952] hkems 0003:2006:0118.002E: force feedback init failed [ 753.763355][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2348'. [ 753.889208][ T5952] usb 6-1: USB disconnect, device number 85 [ 753.938054][ T5924] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 754.097972][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 754.105852][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.129318][ T5924] usb 1-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 754.170658][ T5924] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.208376][ T5924] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.233691][ T5924] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 754.275363][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 754.285759][ T5924] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 754.298193][ T5924] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 754.306583][ T5924] usb 1-1: Manufacturer: syz [ 754.398058][ T5892] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 754.408327][ T5924] usb 1-1: config 0 descriptor?? [ 754.582897][ T5892] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 754.606302][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.633175][ T5892] usb 2-1: config 0 descriptor?? [ 754.648943][ T5892] cp210x 2-1:0.0: cp210x converter detected [ 754.713795][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2356'. [ 754.827585][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.856711][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.889032][ T5892] usb 2-1: cp210x converter now attached to ttyUSB0 [ 755.032952][ T5924] usbhid 1-1:0.0: can't add hid device: -71 [ 755.039122][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 755.065683][ T797] usb 2-1: USB disconnect, device number 35 [ 755.097360][ T797] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 755.149042][ T5924] usb 1-1: USB disconnect, device number 33 [ 755.162440][ T797] cp210x 2-1:0.0: device disconnected [ 755.729532][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 755.729552][ T30] audit: type=1326 audit(1774188260.380:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.4.2362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33c3f9c799 code=0x0 [ 755.733102][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 755.832751][T15364] netlink: 'syz.1.2361': attribute type 3 has an invalid length. [ 756.175312][T15371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.182660][T15371] IPv6: NLM_F_CREATE should be set when creating new route [ 756.190000][T15371] IPv6: NLM_F_CREATE should be set when creating new route [ 756.197233][T15371] IPv6: NLM_F_CREATE should be set when creating new route [ 756.268091][ T5924] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 756.287950][ T797] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 756.371008][T15371] syzkaller0: entered promiscuous mode [ 756.377250][T15371] syzkaller0: entered allmulticast mode [ 756.420355][ T5924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 756.441162][ T797] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 756.449627][ T797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.460014][ T5924] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 756.472270][ T797] usb 5-1: config 0 has no interface number 0 [ 756.487931][ T797] usb 5-1: config 0 interface 205 has no altsetting 0 [ 756.494850][ T5924] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.535277][ T797] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 756.545033][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.554987][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 756.565285][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.605107][ T5924] usb 2-1: Product: syz [ 756.609637][ T797] usb 5-1: Product: syz [ 756.613821][ T797] usb 5-1: Manufacturer: syz [ 756.618667][ T5924] usb 2-1: Manufacturer: syz [ 756.623298][ T5924] usb 2-1: SerialNumber: syz [ 756.631702][ T797] usb 5-1: SerialNumber: syz [ 756.659735][ T797] usb 5-1: config 0 descriptor?? [ 756.670188][ T5924] hub 2-1:1.0: bad descriptor, ignoring hub [ 756.680235][ T5924] hub 2-1:1.0: probe with driver hub failed with error -5 [ 756.700850][ T797] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 756.758107][ T797] dvb-usb: bulk message failed: -22 (3/0) [ 756.791884][ T797] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 756.813883][ T797] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 756.846045][ T797] usb 5-1: media controller created [ 756.864674][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.898757][ T5924] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 756.935085][ T797] dvb-usb: bulk message failed: -22 (6/0) [ 756.954241][ T797] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 756.984140][ T30] audit: type=1326 audit(1774188261.630:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.012135][ T797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70 [ 757.027721][ T797] dvb-usb: schedule remote query interval to 150 msecs. [ 757.035830][ T30] audit: type=1326 audit(1774188261.630:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.059617][ T797] dvb-usb: bulk message failed: -22 (3/0) [ 757.079667][ T30] audit: type=1326 audit(1774188261.630:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.102503][ T797] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 757.148103][ T30] audit: type=1326 audit(1774188261.630:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.193384][ T797] usb 2-1: USB disconnect, device number 36 [ 757.203386][ T797] usblp0: removed [ 757.230457][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 757.244265][ T5924] dvb-usb: error while querying for an remote control event. [ 757.254620][ T30] audit: type=1326 audit(1774188261.630:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.279467][ T30] audit: type=1326 audit(1774188261.630:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.321500][ T30] audit: type=1326 audit(1774188261.630:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.360385][ T30] audit: type=1326 audit(1774188261.630:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.391590][ T30] audit: type=1326 audit(1774188261.640:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fac3d79c799 code=0x7ffc0000 [ 757.442552][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 757.448591][ T5924] dvb-usb: error while querying for an remote control event. [ 757.611416][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 757.617252][ T5924] dvb-usb: error while querying for an remote control event. [ 757.777920][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 757.786784][ T5924] dvb-usb: error while querying for an remote control event. [ 757.964056][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 757.970068][ T5924] dvb-usb: error while querying for an remote control event. [ 758.141987][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 758.147935][ T5892] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 758.156001][ T5924] dvb-usb: error while querying for an remote control event. [ 758.298673][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 758.317912][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 758.324006][ T5924] dvb-usb: error while querying for an remote control event. [ 758.333706][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 758.380758][ T5892] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 758.390220][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.405910][ T5892] usb 2-1: Product: syz [ 758.410496][ T5892] usb 2-1: Manufacturer: syz [ 758.415128][ T5892] usb 2-1: SerialNumber: syz [ 758.478527][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 758.484494][ T5924] dvb-usb: error while querying for an remote control event. [ 758.639963][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 758.654216][ T5924] dvb-usb: error while querying for an remote control event. [ 758.829709][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 758.835514][ T5924] dvb-usb: error while querying for an remote control event. [ 759.001775][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 759.007733][ T5924] dvb-usb: error while querying for an remote control event. [ 759.203423][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 759.210150][ T5924] dvb-usb: error while querying for an remote control event. [ 759.310049][ T5924] usb 5-1: USB disconnect, device number 15 [ 759.376900][ T5892] usb 2-1: USB disconnect, device number 37 [ 759.433479][ T5924] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 759.517541][T11098] udevd[11098]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.678283][T15400] bond5: option min_links: invalid value (18446744073709551608) [ 759.686190][T15400] bond5: option min_links: allowed values 0 - 2147483647 [ 759.696684][T15400] bond5 (unregistering): Released all slaves [ 759.837894][ T5924] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 759.848405][ T5892] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 760.029425][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 760.057089][ T5892] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 760.096276][T15420] netlink: 'syz.2.2376': attribute type 3 has an invalid length. [ 760.098051][ T5892] usb 1-1: config 0 has no interface number 0 [ 760.144328][ T5892] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 760.224675][T15417] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 760.305802][ T5892] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 760.343887][T15417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 760.367424][ T29] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 760.497352][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.541116][ T5892] usb 1-1: Product: syz [ 760.551065][ T5892] usb 1-1: Manufacturer: syz [ 760.561314][ T5892] usb 1-1: SerialNumber: syz [ 760.608268][ T29] usb 2-1: device descriptor read/64, error -71 [ 760.651506][ T5892] usb 1-1: config 0 descriptor?? [ 760.657736][T15402] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 760.929274][ T29] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 761.051969][T15402] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 761.137917][ T29] usb 2-1: device descriptor read/64, error -71 [ 761.153137][T15429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.164201][T15429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.308677][ T29] usb usb2-port1: attempt power cycle [ 761.404384][T15433] netlink: 'syz.5.2379': attribute type 1 has an invalid length. [ 761.651934][ T29] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 761.689265][ T29] usb 2-1: device descriptor read/8, error -71 [ 762.028453][ T29] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 762.058713][ T29] usb 2-1: device descriptor read/8, error -71 [ 762.071320][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.080303][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.094538][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.104922][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.168617][ T29] usb usb2-port1: unable to enumerate USB device [ 762.812111][T15451] fuse: Bad value for 'fd' [ 762.981632][T15451] could not allocate digest TFM handle cbcmac-aes-ce [ 763.221039][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 763.221059][ T30] audit: type=1326 audit(1774188267.870:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.322750][ T30] audit: type=1326 audit(1774188267.900:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.359992][ T30] audit: type=1326 audit(1774188267.900:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.378530][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 763.430955][ T30] audit: type=1326 audit(1774188267.900:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.473103][ T30] audit: type=1326 audit(1774188267.900:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.504044][ T5892] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 763.518349][ T30] audit: type=1326 audit(1774188267.900:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.548895][ T5892] asix 1-1:0.188: probe with driver asix failed with error -71 [ 763.572357][ T5892] usb 1-1: USB disconnect, device number 34 [ 763.578963][ T30] audit: type=1326 audit(1774188267.900:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.608095][ T29] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 763.624220][ T30] audit: type=1326 audit(1774188267.900:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.652492][ T30] audit: type=1326 audit(1774188267.900:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.678140][T15471] loop5: detected capacity change from 0 to 2640 [ 763.685165][T15471] buffer_io_error: 49 callbacks suppressed [ 763.685184][T15471] Buffer I/O error on dev loop5, logical block 0, async page read [ 763.703494][T15471] Buffer I/O error on dev loop5, logical block 0, async page read [ 763.712641][T15471] Buffer I/O error on dev loop5, logical block 0, async page read [ 763.722081][ T30] audit: type=1326 audit(1774188267.900:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.4.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33c3f9c799 code=0x7ffc0000 [ 763.748503][T15471] Buffer I/O error on dev loop5, logical block 0, async page read [ 763.780255][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 763.790317][ T29] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 763.798586][T15471] Buffer I/O error on dev loop5, logical block 0, async page read [ 763.819987][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 763.869416][T15475] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 763.902167][T15472] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 763.936933][T15471] loop5: unable to read partition table [ 763.945507][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 763.955638][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.966552][ T29] usb 2-1: Product: syz [ 763.971111][ T29] usb 2-1: Manufacturer: syz [ 763.973858][T15471] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 764.002346][T15472] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 764.007097][ T29] usb 2-1: SerialNumber: syz [ 764.033474][ T29] hub 2-1:1.0: bad descriptor, ignoring hub [ 764.041329][T15472] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 764.049860][ T29] hub 2-1:1.0: probe with driver hub failed with error -5 [ 764.059047][T15472] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 764.205318][T15471] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 764.211987][T15471] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 764.240093][ T29] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 764.325574][T15471] vhci_hcd vhci_hcd.0: Device attached [ 764.436220][T15468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.457352][T15485] x_tables: ip_tables: osf match: only valid for protocol 6 [ 764.468607][T15468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.567905][ T29] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 764.579983][T15487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.588636][ T797] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 764.598992][T15487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.633488][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.661686][ T5924] usb 2-1: USB disconnect, device number 42 [ 764.674553][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.699210][ T5924] usblp0: removed [ 764.769451][T15490] [U]  [ 764.772446][T15490] [U] K{ [ 764.775764][T15490] [U] T 1ŠFFˊ`GJǘGO/MC [ 764.847950][ T797] usb 6-1: Using ep0 maxpacket: 32 [ 764.855047][T15490] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 764.904039][ T797] usb 6-1: unable to get BOS descriptor or descriptor too short [ 764.915981][ T797] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 112, changing to 7 [ 764.936824][ T797] usb 6-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 764.947296][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.955464][ T797] usb 6-1: Product: syz [ 764.964330][ T797] usb 6-1: Manufacturer: syz [ 764.970263][T15490] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 764.985681][ T797] usb 6-1: SerialNumber: syz [ 765.004676][T15490] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 765.122854][T15490] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 765.181102][T15490] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 765.217029][T15480] vhci_hcd: connection reset by peer [ 765.223042][ T1148] vhci_hcd vhci_hcd.5: stop threads [ 765.228508][ T1148] vhci_hcd vhci_hcd.5: release socket [ 765.236274][ T1148] vhci_hcd vhci_hcd.5: disconnect device [ 765.291526][ T797] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.307288][T15490] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 765.329023][T15490] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 765.588901][T15490] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 765.618466][T15490] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 765.656427][T15490] [U] 22Ʃ۩X?0;3U [ 765.665183][T15490] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 765.734437][T15504] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 765.781340][T15504] 8021q: adding VLAN 0 to HW filter on device bond5 [ 765.838923][T15490] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 765.860947][T15490] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 765.898346][T15490] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 765.904933][T15490] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 765.968464][T15490] [U] EC [ 765.974632][T15490] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 766.013233][T15489] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 766.405326][T15507] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 766.413870][T15507] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 766.502884][T15507] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 766.542068][T15507] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 766.634739][T15507] kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 766.648491][T15507] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 766.696201][T15507] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 766.776240][T15507] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 766.859045][T15507] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 766.907042][T15507] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 767.645434][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.654777][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.671890][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.694499][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.134811][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.166319][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.509457][ T5924] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 769.689084][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 769.696807][ T5924] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 769.758045][ T29] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 769.779179][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2411'. [ 769.797562][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 769.815208][ T5924] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 769.830865][T15552] tipc: Enabled bearer , priority 0 [ 769.859382][T15552] syzkaller0: entered promiscuous mode [ 769.867304][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.882497][T15552] syzkaller0: entered allmulticast mode [ 769.923359][ T5924] usb 6-1: config 0 descriptor?? [ 770.059761][T15552] tipc: Resetting bearer [ 770.095727][T15550] tipc: Resetting bearer [ 770.178761][T15550] tipc: Disabling bearer [ 770.387082][ T5924] corsair-cpro 0003:1B1C:0C10.002F: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 770.777020][ T5924] corsair-cpro 0003:1B1C:0C10.002F: probe with driver corsair-cpro failed with error -71 [ 770.870791][ T5924] usb 6-1: USB disconnect, device number 87 [ 771.037871][ T29] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 771.198596][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 771.205876][ T29] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 771.216083][ T29] usb 2-1: config 0 has no interface number 0 [ 771.232943][ T29] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.259624][ T983] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 771.271837][ T29] usb 2-1: config 0 interface 89 has no altsetting 0 [ 771.322100][ T29] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 771.353808][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.374048][ T29] usb 2-1: Product: syz [ 771.384936][ T29] usb 2-1: Manufacturer: syz [ 771.395314][ T29] usb 2-1: SerialNumber: syz [ 771.416726][ T29] usb 2-1: config 0 descriptor?? [ 771.437560][ T983] usb 1-1: Using ep0 maxpacket: 32 [ 771.446001][ T29] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 771.464885][ T983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 771.475061][ T983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.486533][ T29] em28xx 2-1:0.89: Video interface 89 found: [ 771.500641][ T983] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 771.532362][ T983] usb 1-1: config 1 has no interface number 0 [ 771.565838][ T983] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.627564][ T983] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 771.643043][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.652222][ T983] usb 1-1: Product: syz [ 771.656529][ T983] usb 1-1: Manufacturer: syz [ 771.666974][ T983] usb 1-1: SerialNumber: syz [ 771.686044][T15570] netlink: 'syz.5.2417': attribute type 4 has an invalid length. [ 772.089878][ T29] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 772.140641][T15574] netlink: 'syz.5.2418': attribute type 1 has an invalid length. [ 772.160436][ T983] usb 1-1: USB disconnect, device number 35 [ 772.211944][T15574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 772.274787][T11011] udevd[11011]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 772.668796][ T30] kauditd_printk_skb: 201 callbacks suppressed [ 772.668818][ T30] audit: type=1326 audit(1774188277.320:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 772.699316][ T30] audit: type=1326 audit(1774188277.320:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15559 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c60d9c799 code=0x7ffc0000 [ 773.085637][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 773.240876][T15594] FAULT_INJECTION: forcing a failure. [ 773.240876][T15594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.254894][T15594] CPU: 1 UID: 0 PID: 15594 Comm: syz.0.2422 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.254930][T15594] Tainted: [L]=SOFTLOCKUP [ 773.254942][T15594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.254956][T15594] Call Trace: [ 773.254966][T15594] [ 773.254976][T15594] dump_stack_lvl+0xe8/0x150 [ 773.255015][T15594] should_fail_ex+0x412/0x560 [ 773.255053][T15594] _copy_from_iter+0x1d3/0x1670 [ 773.255092][T15594] ? rcu_is_watching+0x15/0xb0 [ 773.255130][T15594] ? __pfx__copy_from_iter+0x10/0x10 [ 773.255172][T15594] ? netlink_sendmsg+0x650/0xb40 [ 773.255207][T15594] ? skb_put+0x11b/0x210 [ 773.255235][T15594] netlink_sendmsg+0x6c0/0xb40 [ 773.255277][T15594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.255314][T15594] ? aa_sock_msg_perm+0xf1/0x1b0 [ 773.255348][T15594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 773.255377][T15594] ____sys_sendmsg+0x972/0x9f0 [ 773.255413][T15594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.255448][T15594] ? import_iovec+0x73/0xa0 [ 773.255475][T15594] ___sys_sendmsg+0x2a5/0x360 [ 773.255506][T15594] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.255567][T15594] ? __fget_files+0x2a/0x420 [ 773.255609][T15594] ? __fget_files+0x3a0/0x420 [ 773.255652][T15594] __x64_sys_sendmsg+0x1bd/0x2a0 [ 773.255681][T15594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 773.255716][T15594] ? __pfx_ksys_write+0x10/0x10 [ 773.255753][T15594] do_syscall_64+0x14d/0xf80 [ 773.255780][T15594] ? trace_irq_disable+0x3b/0x150 [ 773.255812][T15594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.255835][T15594] ? clear_bhb_loop+0x40/0x90 [ 773.255863][T15594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.255886][T15594] RIP: 0033:0x7fac3d79c799 [ 773.255906][T15594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.255926][T15594] RSP: 002b:00007fac3e61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.255950][T15594] RAX: ffffffffffffffda RBX: 00007fac3da15fa0 RCX: 00007fac3d79c799 [ 773.255966][T15594] RDX: 0000000020004090 RSI: 0000200000000040 RDI: 0000000000000003 [ 773.255982][T15594] RBP: 00007fac3e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 773.255995][T15594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.256009][T15594] R13: 00007fac3da16038 R14: 00007fac3da15fa0 R15: 00007fac3db3fa48 [ 773.256042][T15594] [ 773.691701][ T29] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 773.699912][ T29] em28xx 2-1:0.89: board has no eeprom [ 773.717519][T15586] vivid-000: ================= START STATUS ================= [ 773.725560][T15586] vivid-000: Radio HW Seek Mode: Bounded [ 773.732067][T15586] vivid-000: Radio Programmable HW Seek: false [ 773.738711][T15586] vivid-000: RDS Rx I/O Mode: Block I/O [ 773.744586][T15586] vivid-000: Generate RBDS Instead of RDS: false [ 773.752670][T15586] vivid-000: RDS Reception: true [ 773.768485][ T29] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 773.775927][ T29] em28xx 2-1:0.89: analog set to bulk mode. [ 773.782121][ T5892] em28xx 2-1:0.89: Registering V4L2 extension [ 773.830412][T15586] vivid-000: RDS Program Type: 0 inactive [ 773.846800][T15586] vivid-000: RDS PS Name: inactive [ 773.880465][T15586] vivid-000: RDS Radio Text: inactive [ 773.917844][T15586] vivid-000: RDS Traffic Announcement: false inactive [ 773.929716][ T5892] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 773.982447][ T5892] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 773.997160][T15586] vivid-000: RDS Traffic Program: false inactive [ 774.046507][T15586] vivid-000: RDS Music: false inactive [ 774.066988][ T5924] usb 2-1: USB disconnect, device number 43 [ 774.074657][T15586] vivid-000: ================== END STATUS ================== [ 774.083651][ T5924] em28xx 2-1:0.89: Disconnecting em28xx [ 774.122056][ T5892] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 774.130192][ T5892] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 774.140759][ T5892] em28xx 2-1:0.89: No AC97 audio processor [ 774.228396][ T29] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 774.271031][ T5892] usb 2-1: Decoder not found [ 774.457219][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 774.505983][ T5892] em28xx 2-1:0.89: failed to create media graph [ 774.565000][ T5892] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 774.572372][ T29] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 774.588686][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.611680][ T5892] em28xx 2-1:0.89: Registering snapshot button... [ 774.612465][T15610] ================================================================== [ 774.626229][T15610] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 774.626333][T15610] Read of size 8 at addr ffff88806c710748 by task v4l_id/15610 [ 774.626348][T15610] [ 774.626381][T15610] CPU: 0 UID: 0 PID: 15610 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 774.626402][T15610] Tainted: [L]=SOFTLOCKUP [ 774.626408][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.626418][T15610] Call Trace: [ 774.626426][T15610] [ 774.626433][T15610] dump_stack_lvl+0xe8/0x150 [ 774.626457][T15610] print_report+0xba/0x230 [ 774.626485][T15610] ? v4l2_fh_open+0xac/0x420 [ 774.626504][T15610] kasan_report+0x117/0x150 [ 774.626526][T15610] ? v4l2_fh_open+0xac/0x420 [ 774.626548][T15610] v4l2_fh_open+0xac/0x420 [ 774.626568][T15610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 774.626589][T15610] em28xx_v4l2_open+0x157/0x9a0 [ 774.626645][T15610] ? do_raw_spin_lock+0x12b/0x2f0 [ 774.626664][T15610] v4l2_open+0x1bf/0x3a0 [ 774.626687][T15610] chrdev_open+0x4cd/0x5e0 [ 774.626713][T15610] ? __pfx_chrdev_open+0x10/0x10 [ 774.626731][T15610] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 774.626754][T15610] ? __pfx_chrdev_open+0x10/0x10 [ 774.626772][T15610] do_dentry_open+0x785/0x14e0 [ 774.626799][T15610] vfs_open+0x3b/0x340 [ 774.626819][T15610] ? path_openat+0x2df0/0x3860 [ 774.626837][T15610] path_openat+0x2e08/0x3860 [ 774.626859][T15610] ? __pfx_stack_trace_save+0x10/0x10 [ 774.626876][T15610] ? stack_depot_save_flags+0x33/0x810 [ 774.626925][T15610] ? __pfx_path_openat+0x10/0x10 [ 774.626940][T15610] ? __x64_sys_openat+0x138/0x170 [ 774.626962][T15610] ? do_syscall_64+0x14d/0xf80 [ 774.626979][T15610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.626998][T15610] ? __lock_acquire+0x6b5/0x2cf0 [ 774.627020][T15610] do_file_open+0x23e/0x4a0 [ 774.627039][T15610] ? __pfx_do_file_open+0x10/0x10 [ 774.627063][T15610] ? _raw_spin_unlock+0x28/0x50 [ 774.627077][T15610] ? alloc_fd+0x64b/0x6c0 [ 774.627103][T15610] do_sys_openat2+0x113/0x200 [ 774.627126][T15610] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.627148][T15610] ? exc_page_fault+0x6a/0xc0 [ 774.627166][T15610] ? do_user_addr_fault+0xc6f/0x1340 [ 774.627188][T15610] __x64_sys_openat+0x138/0x170 [ 774.627212][T15610] do_syscall_64+0x14d/0xf80 [ 774.627229][T15610] ? trace_irq_disable+0x3b/0x150 [ 774.627251][T15610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.627267][T15610] ? clear_bhb_loop+0x40/0x90 [ 774.627285][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.627300][T15610] RIP: 0033:0x7f7c718a7407 [ 774.627319][T15610] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 774.627334][T15610] RSP: 002b:00007ffe702b1eb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 774.627351][T15610] RAX: ffffffffffffffda RBX: 00007f7c71f8e880 RCX: 00007f7c718a7407 [ 774.627363][T15610] RDX: 0000000000000000 RSI: 00007ffe702b2f1c RDI: ffffffffffffff9c [ 774.627374][T15610] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 774.627384][T15610] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 774.627394][T15610] R13: 00007ffe702b2100 R14: 00007f7c720f5000 R15: 00005618c62a64d8 [ 774.627412][T15610] [ 774.627417][T15610] [ 774.627422][T15610] Allocated by task 5892: [ 774.627454][T15610] kasan_save_track+0x3e/0x80 [ 774.627470][T15610] __kasan_kmalloc+0x93/0xb0 [ 774.627486][T15610] __kmalloc_cache_noprof+0x31c/0x660 [ 774.627502][T15610] em28xx_v4l2_init+0x10b/0x2e70 [ 774.627540][T15610] em28xx_init_extension+0x120/0x1c0 [ 774.627560][T15610] process_scheduled_works+0xb6e/0x18c0 [ 774.627580][T15610] worker_thread+0xa53/0xfc0 [ 774.627598][T15610] kthread+0x388/0x470 [ 774.627616][T15610] ret_from_fork+0x51e/0xb90 [ 774.627634][T15610] ret_from_fork_asm+0x1a/0x30 [ 774.627656][T15610] [ 774.627661][T15610] Freed by task 5892: [ 774.627669][T15610] kasan_save_track+0x3e/0x80 [ 774.627683][T15610] kasan_save_free_info+0x46/0x50 [ 774.627705][T15610] __kasan_slab_free+0x5c/0x80 [ 774.627721][T15610] kfree+0x1c1/0x630 [ 774.627733][T15610] em28xx_v4l2_init+0x1683/0x2e70 [ 774.627756][T15610] em28xx_init_extension+0x120/0x1c0 [ 774.627804][T15610] process_scheduled_works+0xb6e/0x18c0 [ 774.627830][T15610] worker_thread+0xa53/0xfc0 [ 774.627855][T15610] kthread+0x388/0x470 [ 774.627872][T15610] ret_from_fork+0x51e/0xb90 [ 774.627898][T15610] ret_from_fork_asm+0x1a/0x30 [ 774.627927][T15610] [ 774.627934][T15610] The buggy address belongs to the object at ffff88806c710000 [ 774.627934][T15610] which belongs to the cache kmalloc-8k of size 8192 [ 774.627954][T15610] The buggy address is located 1864 bytes inside of [ 774.627954][T15610] freed 8192-byte region [ffff88806c710000, ffff88806c712000) [ 774.627977][T15610] [ 774.627985][T15610] The buggy address belongs to the physical page: [ 774.628007][T15610] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6c710 [ 774.628032][T15610] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 774.628050][T15610] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 774.628071][T15610] page_type: f5(slab) [ 774.628091][T15610] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 774.628110][T15610] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 774.628131][T15610] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 774.628151][T15610] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 774.628170][T15610] head: 00fff00000000003 ffffea0001b1c401 00000000ffffffff 00000000ffffffff [ 774.628189][T15610] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 774.628200][T15610] page dumped because: kasan: bad access detected [ 774.628215][T15610] page_owner tracks the page as allocated [ 774.628224][T15610] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9003, tgid 9002 (syz.2.754), ts 308679086044, free_ts 308601977165 [ 774.628260][T15610] post_alloc_hook+0x231/0x280 [ 774.628296][T15610] get_page_from_freelist+0x24dc/0x2580 [ 774.628328][T15610] __alloc_frozen_pages_noprof+0x18d/0x380 [ 774.628355][T15610] allocate_slab+0x77/0x660 [ 774.628375][T15610] refill_objects+0x331/0x3c0 [ 774.628394][T15610] __pcs_replace_empty_main+0x2e6/0x730 [ 774.628416][T15610] __kmalloc_noprof+0x474/0x760 [ 774.628431][T15610] vhost_dev_set_owner+0x2a3/0xaf0 [ 774.628507][T15610] vhost_dev_ioctl+0xdb/0x1170 [ 774.628520][T15610] vhost_vsock_dev_ioctl+0x22e/0xed0 [ 774.628543][T15610] __se_sys_ioctl+0xfc/0x170 [ 774.628560][T15610] do_syscall_64+0x14d/0xf80 [ 774.628576][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.628591][T15610] page last free pid 5194 tgid 5194 stack trace: [ 774.628600][T15610] __free_frozen_pages+0xc2b/0xdb0 [ 774.628617][T15610] __slab_free+0x263/0x2b0 [ 774.628632][T15610] qlist_free_all+0x97/0x100 [ 774.628646][T15610] kasan_quarantine_reduce+0x148/0x160 [ 774.628661][T15610] __kasan_slab_alloc+0x22/0x80 [ 774.628677][T15610] kmem_cache_alloc_noprof+0x2bc/0x650 [ 774.628691][T15610] alloc_empty_file+0x55/0x1d0 [ 774.628712][T15610] path_openat+0x10f/0x3860 [ 774.628727][T15610] do_file_open+0x23e/0x4a0 [ 774.628742][T15610] do_sys_openat2+0x113/0x200 [ 774.628762][T15610] __x64_sys_openat+0x138/0x170 [ 774.628783][T15610] do_syscall_64+0x14d/0xf80 [ 774.628799][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.628814][T15610] [ 774.628820][T15610] Memory state around the buggy address: [ 774.628829][T15610] ffff88806c710600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.628841][T15610] ffff88806c710680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.628852][T15610] >ffff88806c710700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.628860][T15610] ^ [ 774.628870][T15610] ffff88806c710780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.628880][T15610] ffff88806c710800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 774.628889][T15610] ================================================================== [ 774.637053][ T29] usb 5-1: config 0 has no interface number 0 [ 774.661930][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 774.661954][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.661970][ T29] usb 5-1: Product: syz [ 774.661982][ T29] usb 5-1: Manufacturer: syz [ 774.661993][ T29] usb 5-1: SerialNumber: syz [ 774.669982][ T29] usb 5-1: config 0 descriptor?? [ 774.727632][ T5892] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input71 [ 774.742158][ T5892] em28xx 2-1:0.89: Remote control support is not available for this card. [ 774.752188][ T5924] em28xx 2-1:0.89: Closing input extension [ 774.752234][ T5924] em28xx 2-1:0.89: Deregistering snapshot button [ 774.862631][T15610] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 774.862662][T15610] CPU: 0 UID: 0 PID: 15610 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 774.862693][T15610] Tainted: [L]=SOFTLOCKUP [ 774.862702][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.862716][T15610] Call Trace: [ 774.862726][T15610] [ 774.862738][T15610] vpanic+0x56c/0xa60 [ 774.862774][T15610] ? __pfx_vpanic+0x10/0x10 [ 774.862808][T15610] panic+0xc5/0xd0 [ 774.862837][T15610] ? __pfx_panic+0x10/0x10 [ 774.862867][T15610] ? preempt_schedule_thunk+0x16/0x30 [ 774.862919][T15610] ? preempt_schedule_thunk+0x16/0x30 [ 774.862945][T15610] ? v4l2_fh_open+0xac/0x420 [ 774.862973][T15610] check_panic_on_warn+0x89/0xb0 [ 774.862998][T15610] ? v4l2_fh_open+0xac/0x420 [ 774.863025][T15610] end_report+0x73/0x180 [ 774.863052][T15610] ? v4l2_fh_open+0xac/0x420 [ 774.863078][T15610] kasan_report+0x128/0x150 [ 774.863106][T15610] ? v4l2_fh_open+0xac/0x420 [ 774.863138][T15610] v4l2_fh_open+0xac/0x420 [ 774.863167][T15610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 774.863197][T15610] em28xx_v4l2_open+0x157/0x9a0 [ 774.863221][T15610] ? do_raw_spin_lock+0x12b/0x2f0 [ 774.863248][T15610] v4l2_open+0x1bf/0x3a0 [ 774.863281][T15610] chrdev_open+0x4cd/0x5e0 [ 774.863309][T15610] ? __pfx_chrdev_open+0x10/0x10 [ 774.863344][T15610] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 774.863372][T15610] ? __pfx_chrdev_open+0x10/0x10 [ 774.863399][T15610] do_dentry_open+0x785/0x14e0 [ 774.863436][T15610] vfs_open+0x3b/0x340 [ 774.863465][T15610] ? path_openat+0x2df0/0x3860 [ 774.863490][T15610] path_openat+0x2e08/0x3860 [ 774.863521][T15610] ? __pfx_stack_trace_save+0x10/0x10 [ 774.863556][T15610] ? stack_depot_save_flags+0x33/0x810 [ 774.863593][T15610] ? __pfx_path_openat+0x10/0x10 [ 774.863616][T15610] ? __x64_sys_openat+0x138/0x170 [ 774.863649][T15610] ? do_syscall_64+0x14d/0xf80 [ 774.863673][T15610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.863701][T15610] ? __lock_acquire+0x6b5/0x2cf0 [ 774.863733][T15610] do_file_open+0x23e/0x4a0 [ 774.863760][T15610] ? __pfx_do_file_open+0x10/0x10 [ 774.863795][T15610] ? _raw_spin_unlock+0x28/0x50 [ 774.863815][T15610] ? alloc_fd+0x64b/0x6c0 [ 774.863851][T15610] do_sys_openat2+0x113/0x200 [ 774.863884][T15610] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.863915][T15610] ? exc_page_fault+0x6a/0xc0 [ 774.863941][T15610] ? do_user_addr_fault+0xc6f/0x1340 [ 774.863972][T15610] __x64_sys_openat+0x138/0x170 [ 774.864005][T15610] do_syscall_64+0x14d/0xf80 [ 774.864029][T15610] ? trace_irq_disable+0x3b/0x150 [ 774.864061][T15610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.864084][T15610] ? clear_bhb_loop+0x40/0x90 [ 774.864110][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.864132][T15610] RIP: 0033:0x7f7c718a7407 [ 774.864153][T15610] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 774.864173][T15610] RSP: 002b:00007ffe702b1eb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 774.864199][T15610] RAX: ffffffffffffffda RBX: 00007f7c71f8e880 RCX: 00007f7c718a7407 [ 774.864216][T15610] RDX: 0000000000000000 RSI: 00007ffe702b2f1c RDI: ffffffffffffff9c [ 774.864233][T15610] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 774.864246][T15610] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 774.864260][T15610] R13: 00007ffe702b2100 R14: 00007f7c720f5000 R15: 00005618c62a64d8 [ 774.864287][T15610] [ 774.864886][T15610] Kernel Offset: disabled