last executing test programs: 11.001636532s ago: executing program 3 (id=1880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'vlan0\x00', @random="95b81ef2f74a"}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd000012"], 0xfce) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'vlan0\x00', @random="95b81ef2f74a"}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=r2], 0x24}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd000012"], 0xfce) (async) 9.605741897s ago: executing program 3 (id=1886): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x5, 0x0, 0x8, 0x2, 0x5, 0x7, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0x3, 0x80, 0x100, 0xe077, 0x2, 0x61, 0xb, 0x8}}, {0x14, 0x2, [0x7, 0x7, 0x2, 0x1, 0x373, 0x7, 0x7, 0xfde0]}}, {{0x1c, 0x1, {0x9, 0x9, 0x6, 0x0, 0x2, 0x40000000, 0xffff2535, 0x2}}, {0x8, 0x2, [0xfffc, 0xffff]}}]}]}, 0xa0}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffeb9, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c884) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.468205826s ago: executing program 3 (id=1887): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b00)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {}, {0x5, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x576}, {}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x7, 0x1, 0x1, 0x3, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x2, 0x3, 0x80, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x11, &(0x7f0000000240)=""/17, 0x40f00, 0x8, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x9, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r4], &(0x7f0000000680)=[{0x2, 0x1, 0xe, 0x8}, {0x2, 0x2, 0xf, 0x2}, {0x4, 0x1, 0x3, 0x4}, {0x0, 0x5, 0xb, 0x3}, {0x3, 0x5, 0x3}, {0x1, 0x4, 0xf, 0x4}, {0x3, 0x3, 0x4, 0x9}], 0x10, 0x76c2}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r6, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x8, 0x1) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) truncate(0x0, 0x400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 8.93599705s ago: executing program 1 (id=1890): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000380)={0x7, [0xfffffffb, 0x321], [{0x2, 0x5}, {0x3, 0x2, 0x1, 0x0, 0x1}, {0x6, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x7622c8ab, 0x2, 0x0, 0x0, 0x1}, {0x0, 0x7, 0x0, 0x1}, {0xfffffff9, 0xbc37, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x80000001, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x9}, {0x255b, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x273f9ef9, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x2, 0xd4, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x4, 0x1, 0x1, 0x0, 0x1}], 0x80000001}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000900)={0x8, 0x120, 0xfa00, {0x1, {0x7, 0x1, "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", 0x1, 0x3, 0x1, 0xfb, 0x40, 0x8, 0xd0, 0x1}}}, 0x128) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000780)="210995579b5123a229de389cde88118c6b5800c1398ff4d4e290940f5d906fe39b65fd134f9142c425d22e91008df0980fa94280aa715acccb251d6a960ebe7c327f0b80e9e7d28caa771b917b13fda8a8bf51d1f5428e7ae99b7e4c7e44aa1f31bc583f3c02577134c5dd8ab136425758e67468f931fa552a933a43", 0x7c}, {&(0x7f0000000800)="fbf3fafdc88d648f57e54df4ed73cf5ba7a53b559c44985e80ad07c5282d31cad2207fa89e522ef4408a9037471592969dc59f375dcb63db64", 0x39}], 0x2) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000780)="210995579b5123a229de389cde88118c6b5800c1398ff4d4e290940f5d906fe39b65fd134f9142c425d22e91008df0980fa94280aa715acccb251d6a960ebe7c327f0b80e9e7d28caa771b917b13fda8a8bf51d1f5428e7ae99b7e4c7e44aa1f31bc583f3c02577134c5dd8ab136425758e67468f931fa552a933a43", 0x7c}, {&(0x7f0000000800)="fbf3fafdc88d648f57e54df4ed73cf5ba7a53b559c44985e80ad07c5282d31cad2207fa89e522ef4408a9037471592969dc59f375dcb63db64", 0x39}], 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r4 = syz_usb_connect$cdc_ncm(0x0, 0x77, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x7, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "74c60fc2"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x7, 0x2a}, {0x6, 0x24, 0x1a, 0xbb, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x69, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0xfd, 0x40}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x8, 0x9, 0x7f, 0x40, 0x4}, 0x27, &(0x7f0000000880)=ANY=[@ANYBLOB="050f2700030710020b10010c8700090606000110100a060110000000000cef003f0000cb5e618865a22c4c9ecab9bd3fd4e787609d89d375124dbe15ef8ce1ce5741e3de9c36aecb3586"], 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x40, 0x21, 0x7d, {0x7d, 0x2, "0090c5717058fc44831f29263a7b7b67817e866632b378bfef6a309c6e9b934809c3978e79edde2e4b3cb779a08ed8b5e9ad4301615ae9f296a2b2805b3b687ee788b4a36b1bd0a769996f19aceca49e547f91f36ae221f5345b84ced0110b77b08065b658fc41e89f9c072ba3bdeb8aeca2f71d27a8e704b8d73d"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x40, 0xf, 0xf2, "39cc568d6d35ceedfadbd72bc949ec1a95a7593c45efaa248e3513b9f96ba150c73357c4f6d002177a55cec1172fef65ec22129f6a9d243dbe02fd10449727c0201fe700f6a5d8027440462a60d19212985decb5cd68dae2ea15cdeae58e6352ebb5707dc2d2810089a97d03fe92003b48927596acf4dc9fe0fe37a63847c4bb0ae23e408024f4ccb3f7495f90a1cf826285769cbd52fbb2cf11958b6d6686b258ce78d133cdab56113d0fe904e08f1d111b5ffea5774c7cf87058dcf70f5eee46e3916eff5756aef689d9fe11a774111d0d22be93717c76615ab11798f5e2c4510433c75e9b77bd0dcbab7f5161cb0eaf8d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x5eb, 0x9, 0x200, 0x3, 0x7f, 0x5, 0x4, 0x4, 0x8, 0x9, 0x8, 0xc}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x5a}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) 8.07735007s ago: executing program 3 (id=1894): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x49823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800}}}}}}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c6029455091676c214569a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d040700ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e99b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0xe24}}, 0xffffff5c) 6.710977874s ago: executing program 1 (id=1899): r0 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0x2, 0xbfe00000}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 6.625431524s ago: executing program 2 (id=1900): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x10010, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x128, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x2008000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000002300)=[{{&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000005c0)="2937ae5a8874b31c9fba2068a581d4f7075b7f3fb3b6df0433a185c609ab99fae5845dc65b745c8f071e936ef9bd3f042668dbaae85598e4a5da5fa512fab706d05c389730d88a43808d2497044654cda1ce17d9c78156e6dc39a5c7ea6d3d91ac705f9e97a163c87409d54faaa9340ac1e3c3713bd954186baeff", 0x7b}], 0x1, &(0x7f0000000640)=[@ip_retopts={{0x88, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x4b, 0x0, 0x9, [0x7, 0x1000, 0x6]}, @timestamp_prespec={0x44, 0x3c, 0xb8, 0x3, 0x6, [{@local, 0x88c}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@local, 0x2}, {@rand_addr=0x64010101, 0x9754}, {@remote, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @end, @generic={0x89, 0x3, "e6"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xa1, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @local, @multicast2, @local, @multicast1]}, @generic={0x94, 0x5, "d8af6b"}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x3e, [@broadcast, @broadcast, @broadcast, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2]}, @cipso={0x86, 0xf, 0x0, [{0x5, 0x9, "6bbe3048635614"}]}, @end, @rr={0x7, 0x17, 0x1e, [@multicast1, @remote, @loopback, @multicast1, @broadcast]}, @rr={0x7, 0xb, 0xd7, [@broadcast, @local]}, @end, @ssrr={0x89, 0xb, 0xa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @rr={0x7, 0x1b, 0xb1, [@multicast1, @private=0xa010100, @rand_addr=0x64010101, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_tos_u8={{0x11}}], 0x160}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="29cdc84f15d4ca007f3ca960fc7b1a9b90bee316a384da12aae451499d9d80923911f18ba40a7d9495f88ba00678843610078c044bcb0dea9446567563aadf6d57c295f14f32a1923dfefef1f6fef315245d803521c45db7e1ff5c192f4b8b34e8034ddcc7fd7c73921e024d56828e412b7c30fbfb4ef6ec008b15c06c0f80c99b55f456c70c075534a9e4ab1983b7e3dc56a545c0d69bf6623973aaa8bf0fa4108d5d59694e2f9258253d99ccc586bb428a2e71c0ac4eda374864be32097eca4e7601c6c041ae8bc889999a39c9b98a162a75ef9b144eb79bf5ca994871", 0xde}, {&(0x7f0000000940)="587d95ef2084dacf00ca3bfcf2275917aa2583763f31bb51365940a97269fa63921648a24bb5d06987602c93554f9789fca39e641a4f81e5ec9826d0eec69c13035c84641959a08850cf37726c1daee4db54809ab5168e48eb81d6608126690a65d965766f3b4f03cbac2925b4c25387e0732c6db399d441003d6dd27f67b855d9c543f28771219d28fa7d6f8ad7439efff43cbaa1720c5ab15084ca3013561a79e9f7d6445d7639ca56c5ba55097c03194897f03cb6975a6860de78c6cc6b7abddf86fd9c58f44081b2b965816f7bc214ca17554fbbb6905e27f1863ed92924bc30958b730812058a76e2928b45352603da445a0ca108c5cb6f119039e2", 0xfe}, {&(0x7f0000000a40)="96331fe477a4cbb276c1e800b151d18d612bcce03290b40408e3db92521cdaaf05a3c2f1f0d5f893eece33044642b3416cca75a8dee6ab2e48b6cee18efa83ef60a95341f634fe8c114c2c1ae89faf05ad5a1e31c40070097ca13d74a82112999728056f91f60235a7d2da01e965f6b1041deadcd0847090cd95027b92ec21502f", 0x81}], 0x3, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3036}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xd0}}, {{&(0x7f0000000d00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d40)="95b9b5082c0c2433a77044c9817f886ba425f8dffcbda2f9922ac92659bd96f9e6f82d9b9c7aa20c94003b44799364cec0cb381c0e67362be22c5c75514443fb4cf70df9a768a0ac390bd0bd60ea52131ce8c4ee94a34fb99905a9123228af892efad3bc5482216d226cd526e403389d01eca90f254e5cc57df485bcb2d923b97289370cf4a4fe3332be69ba666d32ed4a42b2c5784b636610f4d2c62cd6442430cb8e3ee489bc7bf162ee1a0a6cdc335458734bab3387de1dff251777af866b9a7f8e4c8e7141f999d3f4e10538", 0xce}], 0x1, &(0x7f0000000e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x48}}, {{&(0x7f0000000f00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000002180)=[{&(0x7f0000000f40)="36b303e9dce32413838b7252d89dac395823d1b2953fe4ac1de7f5", 0x1b}, {&(0x7f0000000f80)="6338ad2cf972df5659ba62276026bb2bfee03546c444a08b0e5a6ee8cb745a58677dad32c098091e200be681a86fd1dbdfff580b24761a2aa9558b85af8e63d76e504787586853878c42784c960c496e42d69a83b82616f53f4c104f3934a82edb864722dd2be8776359ab5ab09a84d11495df53c8b29b5896b4c288af238e55f7d07483a3c38bffbde2001f0e9b713bc6b0ff7c76fb550cae19f13b9b69bbf706b123d782e0d48535fa89ed89e4e20b92e2688fe203527c14c616aac942fcc30f72a034b62914ad519ffc5dcdf2056c7cdbaefa8e14996a655b2a537c926fd56d1e479da4b8f672fdb35749f277c83c5c0dde838796965b57", 0xf9}, {&(0x7f0000001080)="30c70a04812f9961c1edfd7830f701fd7210f1374ac59a84dfa3e968eba2d7211bfbed1135babb0f2504a1c00d060031c7fa5b25d264ef37e7b236ddc782597b29b090972bf0cb802a81c93b025b24203e64968fe49284eef79d31d50615ad1d728feb452ce4cf2cad814c70b2d546f74866cf44a87d92db231870620bc7276b25e8b792394bc0c2", 0x88}, {&(0x7f0000001140)="ec9cd9b00e7fbc1c36bd977dae8f7480ece90ff51c08d38906df156a9881200d87345ea31f366f25", 0x28}, {&(0x7f0000001180)="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", 0x1000}], 0x5, &(0x7f0000002200)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x34, 0x65, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x76110aea}, {@broadcast, 0x3}, {@multicast2}, {@empty, 0x9}, {@loopback, 0x3}, {@empty, 0x4}]}, @timestamp={0x44, 0x8, 0x7b, 0x0, 0xe, [0x3ff]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe8}}], 0x4, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x1f, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0) lseek(0xffffffffffffffff, 0x4, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 6.386319474s ago: executing program 1 (id=1901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x322000, 0x1000, 0xc}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000180)=0x211000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x1, r6, 0x3ffffff, r7}, 0x10) 5.653770857s ago: executing program 1 (id=1902): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x2, 0x8d58e, 0x7183}) (async) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) 5.035935195s ago: executing program 2 (id=1906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8628}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf88f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbd}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x22, 0x3, "2c58b8cdd07deb6d51a916412abc5421c0eb51040c10081584d7a80976e1"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9a26af4479b7c98c2d49a4b8d3bea70e8b92a854"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f60b458ce6d88df4e419a498452fec12e30d94a3540b61afd82fc5712d4eda"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8ca8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2}, 0x4001) r2 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r2, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x2a8) sendmmsg$sock(r0, &(0x7f0000000380), 0x0, 0x11) pwritev(r2, &(0x7f0000000440)=[{&(0x7f00000003c0)="c7d725d81b841ddbec70339ee94ba5103712a8c12a03aabb89f57cab5ff845457b5135a418e6fefc39c779970fd0f936b62c525860e4761a8fe7ab0a2e7808997d3f704de6a59921773b5a7dd16fad18527728cfd592cfeb54f65ac3c1d6031c274934a90cb98465490620d8bda65e", 0x6f}], 0x1, 0x1ff, 0xfffffff7) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x2, 0x8, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x700, 0x6, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', r4, 0x29, 0x0, 0x9, 0x1, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x1, 0x40, 0x4, 0x4}}) syz_open_dev$loop(&(0x7f0000000600), 0x2, 0x1) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, &(0x7f0000000640)={0xfde, 0x6, 0x2}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000680), 0x101000) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000006c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x6}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000740)={0x100, 0x18, '\x00', 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0]}) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f0000000780)) rt_sigprocmask(0x0, &(0x7f00000007c0)={[0x2]}, &(0x7f0000000800), 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000840)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000880)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r7, 0x40106437, &(0x7f00000008c0)={r8, 0x1}) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000900)={0x0, 0x2}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%ps \x00'}, 0x20) r10 = openat$cgroup_ro(r6, &(0x7f0000000a80)='pids.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r9, &(0x7f0000000a00)="2fb6c5080fe99a4df60700b109ebe13d38a56528bdc650f0388edc2491fae2c44f12b0f19c9e729a430f9aa436935ae077d036b209ca2a35a53011931f174bc0b32a0ea1c871d484780d42372c7fe11bb04326b2edf2a530470ea57ad5e37edc586e0e7bcd2fd8000261a58625c73dbb0d690b39cebea27148f8", &(0x7f0000000ac0)=@udp6=r10}, 0x20) syz_open_dev$usbfs(&(0x7f0000000b40), 0x2, 0x0) r11 = gettid() prlimit64(r11, 0xe, &(0x7f0000000b80)={0xf0b5, 0xffffffffffffffff}, &(0x7f0000000bc0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x40, 0x8000, 0x0, 0x9, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @empty, @remote, {[@end]}}}}}) 4.913256547s ago: executing program 3 (id=1907): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80002004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fb}, {0x5, 0x9}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x86a9b7a9658306b7, 0x0, 0x3}}, 0xfffffffd}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1ff, 0xff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 4.861302054s ago: executing program 1 (id=1908): timer_create(0x3, &(0x7f00000000c0)={0x0, 0x6, 0x4}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) connect$can_j1939(r3, &(0x7f00000004c0)={0x1d, r4, 0x3, {0x2, 0x0, 0x7}}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='u\x8cl', &(0x7f0000000200)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x97\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x9f\x18\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x9d\x03y\x0f\x80I\xd5\xe8KX\'V~\x9c\xf3^w\x90d\x91\xcd\xfc\x0f\x00\xfa\xe4k\xd1\x93E\xab\xf4Y\xa6\xb9\xd6\xcaI\x19\x9cn\xa7\xe1[x=\xb7\x1a\xdev\xc8\a\xd0\x00\x00\x00\x00\x00\x00\vh\x80\xab\x8f\x8c\xd6\xbf\xe3\x9e\xfaRS\x03\xe3\xeduh\"3\x98b(\xb2\xceG\xa1\xdb\x01\'\x87MB FHl\xa6\xad\xed\xcd\x05\x95\xe3\xa2m\xb0\xab\xae4^Z7-\x1f)e5z\xb1\xfa\x89\x0e\xd3m\xcc`\xc6\xc3h\xb3\xa5\x05f\x96\xda#', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 4.860873558s ago: executing program 2 (id=1909): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) (async) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 4.708086901s ago: executing program 0 (id=1910): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 3.289362686s ago: executing program 4 (id=1913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x2b8, 0x0, 0xe8, 0xe8, 0x0, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, &(0x7f0000000080), {[{{@ipv6={@mcast2, @local, [0xff, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'wlan0\x00', {}, {0xff}, 0x5c, 0x9, 0x6, 0x21}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0xd, @ipv4=@private=0xa010100, 0x4e24}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0x0, 0xff, 0xff000000], 'pimreg\x00', 'geneve0\x00', {}, {}, 0x32, 0x7, 0x1, 0x8}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [0xff000000, 0xffffff00, 0xff, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}, [0x0, 0xff, 0xffffffff, 0xffffff00], @ipv6=@private2, [0xff, 0x101, 0xffffff00, 0xffffff00], 0x2, 0xc, 0x88, 0x4e24, 0x4e21, 0x4e23, 0x4e20, 0x3200, 0x40}, 0x80, 0x90}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@loopback, 0x10, 0xa, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x79, 0x9}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @remote, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xffffff00], 'xfrm0\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x1, 0x3, 0x20}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb, 0x0, "ffad15e9e7681e4aefb6c70da47b8abbd1feefed3a50124bb77affd0cfbe"}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xff000000, 0xffffffff, 0xffffff00], 'wg0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, '!z'}}, @common=@srh={{0x30}, {0x5e, 0x0, 0x14, 0xb2, 0x1, 0x280, 0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x718) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x200, {}, {0x3, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000800f22c0360f01c30f20e06635020000000f22e066b8000000000f23d80f21f86635400000c00f21bb66b8001800000f23d00f21f86635300000010f23f80f01c9360f791c670f78cc360fc76b0af3f5", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.268557429s ago: executing program 2 (id=1914): unshare(0x4020400) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe, 0x3a, 0x61, 0x40, 0x12ef, 0x100, 0xf07a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x37, 0x0, 0x0, 0x3b, 0xf5, 0xe6}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8a, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/206, 0xce}, {0x0}], 0x2}, 0x6}], 0x1, 0x10081, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x3, &(0x7f0000000a80)="4dcee4"}, {0x1000, 0x1800, 0x0, 0x0}], 0x2}) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={&(0x7f00000000c0)="31080f9d7ed5ec5b1444753e78c8b5effcc849d7ea616e34cdf4e3712454d0cffab05d11d1f990e567b94718a8d156d16c01efa39e253f49e36b56a54b097d3f", &(0x7f0000000100)="ed81c2a36cb8b256ad14b722b92774a2c078d6d17a10e9f5ce6a58ecf7ad27f1ec05f72df22888ab0990a0b1b9d144750268008fa784d836a0b1e26e0feae8c7c86b3bbbcd8d5cca91c953021c9860a4cc5ea3a0e90b31e728e647e048bcdcd8a82e105628b747ae2f235cba1b9d64a7beaad0b452e855588c51e89f8392d3d77f8f26a9a692c9faa199f0cb5bf8cb4815df32414896055b823ebbe656a388a087436eec49808fc56fa789b9bbcfd4d2ca1378f9f041431beb326a45d54d59385f3037928ca246fcf00a"}}, &(0x7f00000008c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) mmap(&(0x7f000027a000/0x2000)=nil, 0x2000, 0xb635773f04ebbee7, 0x810, 0xffffffffffffffff, 0x0) unshare(0x4020400) (async) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, 0x0, 0x0) (async) gettid() (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xe, 0x3a, 0x61, 0x40, 0x12ef, 0x100, 0xf07a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x37, 0x0, 0x0, 0x3b, 0xf5, 0xe6}}]}}]}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8a, 0x0) (async) socket$inet6(0xa, 0x80002, 0x88) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) (async) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/206, 0xce}, {0x0}], 0x2}, 0x6}], 0x1, 0x10081, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) (async) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x3, &(0x7f0000000a80)="4dcee4"}, {0x1000, 0x1800, 0x0, 0x0}], 0x2}) (async) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={&(0x7f00000000c0)="31080f9d7ed5ec5b1444753e78c8b5effcc849d7ea616e34cdf4e3712454d0cffab05d11d1f990e567b94718a8d156d16c01efa39e253f49e36b56a54b097d3f", &(0x7f0000000100)="ed81c2a36cb8b256ad14b722b92774a2c078d6d17a10e9f5ce6a58ecf7ad27f1ec05f72df22888ab0990a0b1b9d144750268008fa784d836a0b1e26e0feae8c7c86b3bbbcd8d5cca91c953021c9860a4cc5ea3a0e90b31e728e647e048bcdcd8a82e105628b747ae2f235cba1b9d64a7beaad0b452e855588c51e89f8392d3d77f8f26a9a692c9faa199f0cb5bf8cb4815df32414896055b823ebbe656a388a087436eec49808fc56fa789b9bbcfd4d2ca1378f9f041431beb326a45d54d59385f3037928ca246fcf00a"}}, &(0x7f00000008c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) (async) mmap(&(0x7f000027a000/0x2000)=nil, 0x2000, 0xb635773f04ebbee7, 0x810, 0xffffffffffffffff, 0x0) (async) 2.941610953s ago: executing program 0 (id=1915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 2.753332196s ago: executing program 0 (id=1916): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x10010, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x128, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x2008000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000002300)=[{{&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000005c0)="2937ae5a8874b31c9fba2068a581d4f7075b7f3fb3b6df0433a185c609ab99fae5845dc65b745c8f071e936ef9bd3f042668dbaae85598e4a5da5fa512fab706d05c389730d88a43808d2497044654cda1ce17d9c78156e6dc39a5c7ea6d3d91ac705f9e97a163c87409d54faaa9340ac1e3c3713bd954186baeff", 0x7b}], 0x1, &(0x7f0000000640)=[@ip_retopts={{0x88, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x4b, 0x0, 0x9, [0x7, 0x1000, 0x6]}, @timestamp_prespec={0x44, 0x3c, 0xb8, 0x3, 0x6, [{@local, 0x88c}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@local, 0x2}, {@rand_addr=0x64010101, 0x9754}, {@remote, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @end, @generic={0x89, 0x3, "e6"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xa1, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @local, @multicast2, @local, @multicast1]}, @generic={0x94, 0x5, "d8af6b"}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x3e, [@broadcast, @broadcast, @broadcast, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2]}, @cipso={0x86, 0xf, 0x0, [{0x5, 0x9, "6bbe3048635614"}]}, @end, @rr={0x7, 0x17, 0x1e, [@multicast1, @remote, @loopback, @multicast1, @broadcast]}, @rr={0x7, 0xb, 0xd7, [@broadcast, @local]}, @end, @ssrr={0x89, 0xb, 0xa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @rr={0x7, 0x1b, 0xb1, [@multicast1, @private=0xa010100, @rand_addr=0x64010101, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_tos_u8={{0x11}}], 0x160}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="29cdc84f15d4ca007f3ca960fc7b1a9b90bee316a384da12aae451499d9d80923911f18ba40a7d9495f88ba00678843610078c044bcb0dea9446567563aadf6d57c295f14f32a1923dfefef1f6fef315245d803521c45db7e1ff5c192f4b8b34e8034ddcc7fd7c73921e024d56828e412b7c30fbfb4ef6ec008b15c06c0f80c99b55f456c70c075534a9e4ab1983b7e3dc56a545c0d69bf6623973aaa8bf0fa4108d5d59694e2f9258253d99ccc586bb428a2e71c0ac4eda374864be32097eca4e7601c6c041ae8bc889999a39c9b98a162a75ef9b144eb79bf5ca994871", 0xde}, {&(0x7f0000000940)="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", 0xfe}, {&(0x7f0000000a40)="96331fe477a4cbb276c1e800b151d18d612bcce03290b40408e3db92521cdaaf05a3c2f1f0d5f893eece33044642b3416cca75a8dee6ab2e48b6cee18efa83ef60a95341f634fe8c114c2c1ae89faf05ad5a1e31c40070097ca13d74a82112999728056f91f60235a7d2da01e965f6b1041deadcd0847090cd95027b92ec21502f", 0x81}], 0x3, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3036}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xd0}}, {{&(0x7f0000000d00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d40)="95b9b5082c0c2433a77044c9817f886ba425f8dffcbda2f9922ac92659bd96f9e6f82d9b9c7aa20c94003b44799364cec0cb381c0e67362be22c5c75514443fb4cf70df9a768a0ac390bd0bd60ea52131ce8c4ee94a34fb99905a9123228af892efad3bc5482216d226cd526e403389d01eca90f254e5cc57df485bcb2d923b97289370cf4a4fe3332be69ba666d32ed4a42b2c5784b636610f4d2c62cd6442430cb8e3ee489bc7bf162ee1a0a6cdc335458734bab3387de1dff251777af866b9a7f8e4c8e7141f999d3f4e10538", 0xce}], 0x1, &(0x7f0000000e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x48}}, {{&(0x7f0000000f00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000002180)=[{&(0x7f0000000f40)="36b303e9dce32413838b7252d89dac395823d1b2953fe4ac1de7f5", 0x1b}, {&(0x7f0000000f80)="6338ad2cf972df5659ba62276026bb2bfee03546c444a08b0e5a6ee8cb745a58677dad32c098091e200be681a86fd1dbdfff580b24761a2aa9558b85af8e63d76e504787586853878c42784c960c496e42d69a83b82616f53f4c104f3934a82edb864722dd2be8776359ab5ab09a84d11495df53c8b29b5896b4c288af238e55f7d07483a3c38bffbde2001f0e9b713bc6b0ff7c76fb550cae19f13b9b69bbf706b123d782e0d48535fa89ed89e4e20b92e2688fe203527c14c616aac942fcc30f72a034b62914ad519ffc5dcdf2056c7cdbaefa8e14996a655b2a537c926fd56d1e479da4b8f672fdb35749f277c83c5c0dde838796965b57", 0xf9}, {&(0x7f0000001080)="30c70a04812f9961c1edfd7830f701fd7210f1374ac59a84dfa3e968eba2d7211bfbed1135babb0f2504a1c00d060031c7fa5b25d264ef37e7b236ddc782597b29b090972bf0cb802a81c93b025b24203e64968fe49284eef79d31d50615ad1d728feb452ce4cf2cad814c70b2d546f74866cf44a87d92db231870620bc7276b25e8b792394bc0c2", 0x88}, {&(0x7f0000001140)="ec9cd9b00e7fbc1c36bd977dae8f7480ece90ff51c08d38906df156a9881200d87345ea31f366f25", 0x28}, {&(0x7f0000001180)="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", 0x1000}], 0x5, &(0x7f0000002200)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x34, 0x65, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x76110aea}, {@broadcast, 0x3}, {@multicast2}, {@empty, 0x9}, {@loopback, 0x3}, {@empty, 0x4}]}, @timestamp={0x44, 0x8, 0x7b, 0x0, 0xe, [0x3ff]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xe8}}], 0x4, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x1f, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0) lseek(0xffffffffffffffff, 0x4, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.514378322s ago: executing program 4 (id=1917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) accept4(r0, 0x0, 0x0, 0x800) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64], 0x0) 2.15128774s ago: executing program 2 (id=1918): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = fsopen(&(0x7f0000000040)='zonefs\x00', 0x1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000440)={0x40, 0x18, 0x6, "d0f060ced921"}, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%6b\xaa\xe3\x8fa\x8e\xdc\xcc\xb5\x05\x83?3\xf1\x9c\'\x84J\xd8\x04\x12\x9f\x05\x00\x00\x00\x83\xd8\xaa\xb4\xaa\x871Ojc\\Ox\xcc\xa0e\xb3\x86\v\x83\x84\x9c\v\xb9\x92\f\xb9\x82\xeb\x1bXA7y\xb4\x18g\xec\xe7\xd9h\xf2U\x83e\xba\xfe\x80\xbe\x92\xb5\xe2 !@\v\xe8\xc0\x9f\xaf\xcc\xc6\\\xa3^#\xccZ\x19\'OPH&s\x94\x91\x03\xf6\xd6\xa3$\x02\xf8^f\f`', 0x0) 1.681288827s ago: executing program 4 (id=1919): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r0 = syz_clone(0x21011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1.558876687s ago: executing program 4 (id=1920): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x5bcd, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000200)={0x7}) read$FUSE(r3, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xffffff5e) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x2b, 0x800, 0x60000008, 0x8, 0x6, 0x8ca3}}, 0x50) read$FUSE(r3, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r8}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000000000)={0x130, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x80000001}}}}}) ioctl$FS_IOC_RESVSP(r4, 0x40086602, &(0x7f0000002740)={0xdaff, 0xdaff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r10, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100}) r11 = socket(0x10, 0x803, 0x2) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x21, 0x4) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYRES16=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="ee5ba3bba3d979cd24c95b7bdaceda992fd556908159dac38ec6c833c1bc70303bdcc64c68883fb9e6992c8d87a72ab55ba41ef0e0b89a27f1d14c61da0ccc963d2027be3b7436045eb78bd3dccec700a0151dd69fdbf8043b973a731fc48f4ef1ce1fd7ac311c8f40ea375136f46c4eb503cd9d665c5f309343552f965feaa53ed94ff949bad7f55cfe2cc227962f341c"], 0x3c}}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r15 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r15, 0xaf01, 0x0) r16 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r15, 0x4004af07, &(0x7f0000000240)=r16) 1.539230294s ago: executing program 0 (id=1921): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xb00b}, {0x10, 0x9, 0x2}, 0x0, 0x1, 0x2, 0x1}}, 0xf0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x7, 0x85, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x0, '\x00', 0x5, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x150, 0x0, 0x0, [{{0x200000000004, 0x1, 0x0, 0x6, 0x0, 0x969, {0x3, 0x0, 0x7ff, 0x2, 0xe, 0x0, 0x0, 0x5f4, 0x2, 0x4000, 0x200008, 0x0, r7, 0x1fff, 0x468e}}, {0x3, 0x0, 0x1, 0x0, '\x00'}}, {{0x0, 0x1, 0x2, 0x78, 0x8, 0x5, {0x3, 0x100000000, 0x1, 0xc, 0xb, 0x2, 0x40, 0xffffffff, 0x5c61, 0x2000, 0x7fffffff, r6, 0x0, 0x6, 0x401}}, {0x3, 0xff, 0x8, 0x80000000, 'rootmode'}}]}, 0x0, 0x0, 0x0}) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000680)='big_key\x00', &(0x7f00000006c0)='\x02%}\x00') ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) r9 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r9) r10 = inotify_init1(0x800) fcntl$setstatus(r9, 0x4, 0x2c00) close_range(r9, r10, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 306.278679ms ago: executing program 0 (id=1922): r0 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0x2, 0xbfe00000}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 303.86532ms ago: executing program 1 (id=1923): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904000001030000000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220500000007d8"], 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x8000000, 0xa0e4, 0x1}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000980)={0x0, 0x70, 0xffffffff, &(0x7f0000000280)={0x2, "79b8942115db2c05f171e2306c0ccd757b42f9335b502c1502569677a025abe98e"}}) 301.431635ms ago: executing program 4 (id=1924): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000001340)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/167, 0xa7}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000340)=""/4096, 0x1000}, 0x2142) (async) recvmsg(r0, &(0x7f0000001340)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/167, 0xa7}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/26, 0x1a}], 0x6, &(0x7f0000000340)=""/4096, 0x1000}, 0x2142) r1 = syz_open_dev$audion(&(0x7f0000001380), 0x9, 0x464840) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f00000013c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x2, 0x6, 0x8, 0xf32, 0x4000, 0x1, 0x6, '\x00', 0x0, r1, 0x0, 0x4, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f0000001480)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000001500)={0x41d, 0x10001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000001500)={0x41d, 0x10001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_setup(0x306f, &(0x7f0000007800)={0x0, 0x252f, 0x800, 0x1, 0x1b0, 0x0, r1}) (async) r5 = io_uring_setup(0x306f, &(0x7f0000007800)={0x0, 0x252f, 0x800, 0x1, 0x1b0, 0x0, r1}) io_uring_enter(r5, 0x29c7, 0x1cbf, 0x4, &(0x7f0000007880)={[0x1]}, 0x8) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000007900), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000007a00)={&(0x7f00000078c0), 0xc, &(0x7f00000079c0)={&(0x7f0000007940)={0x80, r6, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x45}}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000007ac0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000007b00)={0x7fffffff, 0x8e, {}, {0xee01}, 0xd47, 0x4}) r9 = getegid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000007b40)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000007c40)=0xe8) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000007c80)=0x0) mount$fuse(0x0, &(0x7f0000007a40)='./file0\x00', &(0x7f0000007a80), 0x1000880, &(0x7f0000007cc0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}, {@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-:'}}, {@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@euid_eq={'euid', 0x3d, r10}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!@\'-'}}, {@pcr={'pcr', 0x3d, 0x33}}, {@uid_eq={'uid', 0x3d, r11}}]}}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000007e40)=0xe) recvmmsg(r1, &(0x7f0000008b80)=[{{&(0x7f0000007e80)=@vsock, 0x80, &(0x7f0000008440)=[{&(0x7f0000007f00)=""/138, 0x8a}, {&(0x7f0000007fc0)=""/158, 0x9e}, {&(0x7f0000008080)=""/216, 0xd8}, {&(0x7f0000008180)=""/108, 0x6c}, {&(0x7f0000008200)=""/81, 0x51}, {&(0x7f0000008280)=""/174, 0xae}, {&(0x7f0000008340)=""/106, 0x6a}, {&(0x7f00000083c0)=""/120, 0x78}], 0x8, &(0x7f00000084c0)=""/25, 0x19}, 0x9d}, {{&(0x7f0000008500)=@alg, 0x80, &(0x7f0000008680)=[{&(0x7f0000008580)=""/235, 0xeb}], 0x1, &(0x7f00000086c0)=""/80, 0x50}, 0x7}, {{&(0x7f0000008740)=@ieee802154, 0x80, &(0x7f0000008ac0)=[{&(0x7f00000087c0)=""/55, 0x37}, {&(0x7f0000008800)=""/130, 0x82}, {&(0x7f00000088c0)=""/215, 0xd7}, {&(0x7f00000089c0)=""/238, 0xee}], 0x4, &(0x7f0000008b00)=""/76, 0x4c}, 0x8}], 0x3, 0x8000, &(0x7f0000008c40)={0x77359400}) connect$tipc(r7, &(0x7f0000008c80)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x10) close(r7) (async) close(r7) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000008cc0)=0x5) (async) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000008cc0)=0x5) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x2010, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x80, &(0x7f0000008d00)=0x6, 0x0, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000008d40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$iommufd(0xffffffffffffff9c, &(0x7f0000008f80), 0x9a8c2, 0x0) (async) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000008f80), 0x9a8c2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000008fc0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000008fc0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r13, 0x3b85, &(0x7f0000009040)={0x28, 0x1, r14, 0x0, &(0x7f0000009000)="fdf121de4126d12611be08a2debff37fe0c0d313d91069f22fa9e2546fffd0d3605693d74df6dfc56ae03b099a89203bf1644d63d407d0", 0x37, 0xed1}) (async) ioctl$IOMMU_IOAS_MAP(r13, 0x3b85, &(0x7f0000009040)={0x28, 0x1, r14, 0x0, &(0x7f0000009000)="fdf121de4126d12611be08a2debff37fe0c0d313d91069f22fa9e2546fffd0d3605693d74df6dfc56ae03b099a89203bf1644d63d407d0", 0x37, 0xed1}) 93.47561ms ago: executing program 3 (id=1925): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r4) bind$alg(r2, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee61435"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 29.352651ms ago: executing program 2 (id=1926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000010000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000"]}, 0x107) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x6250, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0xcb}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x52000775) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x34325258, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3]}) socket$key(0xf, 0x3, 0x2) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r11, @ANYBLOB], 0x20}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) 3.650626ms ago: executing program 4 (id=1927): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$inet6(r4, &(0x7f0000004a40)={0xa, 0x4e24, 0x80007, @loopback, 0x3}, 0x1c) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRESDEC=r1, @ANYRESDEC=r5, @ANYRES64=r6, @ANYRES64=r3, @ANYRESHEX, @ANYRES16, @ANYRESOCT=r2], 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x28000082) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280), 0x3) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x7}, 0x0) 0s ago: executing program 0 (id=1928): io_submit(0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) (async) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) mkdir(&(0x7f0000000480)='./bus\x00', 0x8) (async) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus\x00', 0x8) (async) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r5, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2040, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x3]}}) kernel console output (not intermixed with test programs): 137 but max is 0 [ 414.559372][ T5955] usb 2-1: config 0 has no interface number 0 [ 414.571377][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 414.604002][ T5955] usb 2-1: config 0 interface 137 altsetting 64 endpoint 0xB has an invalid bInterval 41, changing to 9 [ 414.656125][ T9] usb 3-1: device descriptor read/8, error -71 [ 414.688436][ T5955] usb 2-1: config 0 interface 137 altsetting 64 has a duplicate endpoint with address 0xB, skipping [ 414.713559][ T5955] usb 2-1: config 0 interface 137 altsetting 64 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 414.734536][ T5955] usb 2-1: config 0 interface 137 altsetting 64 bulk endpoint 0xF has invalid maxpacket 1024 [ 414.752696][ T5955] usb 2-1: config 0 interface 137 altsetting 64 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 414.777959][ T5955] usb 2-1: config 0 interface 137 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 414.804916][ T5955] usb 2-1: config 0 interface 137 altsetting 64 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 414.829478][ T5955] usb 2-1: config 0 interface 137 altsetting 64 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 414.858538][ T5955] usb 2-1: config 0 interface 137 has no altsetting 0 [ 414.874639][ T5955] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=d4.f2 [ 414.897527][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.936844][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 414.940829][ T5955] usb 2-1: config 0 descriptor?? [ 414.971212][ T5897] usb 5-1: USB disconnect, device number 106 [ 414.973257][T11307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 415.005078][ T9] usb 3-1: device descriptor read/8, error -71 [ 415.106628][ T5919] usb write operation failed. (-71) [ 415.116261][ T5919] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 415.131915][ T9] usb usb3-port1: unable to enumerate USB device [ 415.133292][ T5919] dvbdev: DVB: registering new adapter (Terratec H7) [ 415.161718][ T5919] usb 4-1: media controller created [ 415.171580][ T5919] usb read operation failed. (-71) [ 415.183256][ T5919] usb write operation failed. (-71) [ 415.194598][ T5955] usb 2-1: string descriptor 0 read error: -71 [ 415.277415][ T5919] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 415.298799][ T5955] cxacru 2-1:0.137: cxacru_bind: interface has incorrect endpoints [ 415.351868][ T5955] cxacru 2-1:0.137: usbatm_usb_probe: bind failed: -19! [ 415.369782][ T5919] usb 4-1: USB disconnect, device number 97 [ 415.392068][ T5955] usb 2-1: USB disconnect, device number 100 [ 415.807542][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1401'. [ 416.374030][ T5897] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 416.671154][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 416.708729][ T5897] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 416.746076][ T5897] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 416.773281][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 416.796435][ T5897] usb 2-1: config 0 has no interface number 0 [ 416.821246][ T5897] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 416.868736][ T5897] usb 2-1: config 0 interface 104 has no altsetting 1 [ 416.958588][ T5897] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 416.969294][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.998235][ T5897] usb 2-1: Product: syz [ 417.008347][ T5897] usb 2-1: Manufacturer: syz [ 417.018798][ T5897] usb 2-1: SerialNumber: syz [ 417.204150][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 417.257265][T11341] : entered promiscuous mode [ 417.366968][ T5897] usb 2-1: config 0 descriptor?? [ 417.417490][ T5897] asix 2-1:0.104: probe with driver asix failed with error -22 [ 417.481073][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 417.913554][ T9] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 417.927383][ T9] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 417.994198][ T9] usb 3-1: config 255 has no interfaces? [ 418.082027][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 418.125545][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.646470][ T5905] usb 2-1: USB disconnect, device number 101 [ 419.931373][ T9] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 420.106963][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 420.117363][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.145321][ T9] usb 4-1: Product: syz [ 420.155434][ T9] usb 4-1: Manufacturer: syz [ 420.165717][ T9] usb 4-1: SerialNumber: syz [ 420.178639][ T9] usb 4-1: config 0 descriptor?? [ 420.297613][ T5955] usb 3-1: USB disconnect, device number 103 [ 420.473405][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 420.861198][ T46] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 421.033442][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 421.043293][ T46] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 421.054271][ T46] usb 2-1: config 0 has no interface number 0 [ 421.060528][ T46] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.115876][ T46] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.144446][ T46] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 421.158823][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.179491][ T46] usb 2-1: config 0 descriptor?? [ 421.843329][ T5955] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 421.858929][ T9] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 421.872882][ T9] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 421.940479][ T9] usb 4-1: media controller created [ 421.962789][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.008227][T11403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.025019][T11403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.034310][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 422.043033][ T5955] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 422.051793][ T5955] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 422.060339][ T5955] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 422.075312][ T46] uclogic 0003:28BD:0094.0016: pen parameters not found [ 422.090830][ T46] uclogic 0003:28BD:0094.0016: interface is invalid, ignoring [ 422.101399][ T5955] usb 3-1: config 0 has no interface number 0 [ 422.124301][ T5955] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 422.158322][ T5955] usb 3-1: config 0 interface 104 has no altsetting 1 [ 422.180274][ T5955] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 422.189924][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.203904][ T5955] usb 3-1: Product: syz [ 422.211871][ T5955] usb 3-1: Manufacturer: syz [ 422.220033][ T5955] usb 3-1: SerialNumber: syz [ 422.240852][ T5955] usb 3-1: config 0 descriptor?? [ 422.258088][ T5955] asix 3-1:0.104: probe with driver asix failed with error -22 [ 422.276080][ T5905] usb 2-1: USB disconnect, device number 102 [ 422.327257][ T9] i2c i2c-1: Added multiplexed i2c bus 2 [ 422.346108][ T9] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 422.373573][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 422.452093][ T9] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 422.587463][ T9] DVB: Unable to find symbol r820t_attach() [ 422.992961][ T9] usb 4-1: USB disconnect, device number 98 [ 423.086491][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 423.328418][T11421] trusted_key: encrypted_key: insufficient parameters specified [ 423.872495][T11431] xt_TCPMSS: Only works on TCP SYN packets [ 424.978750][ T46] usb 3-1: USB disconnect, device number 104 [ 425.845859][T11455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.114437][T11462] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 426.130437][T11461] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 426.585261][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 426.585274][ T30] audit: type=1326 audit(1764774882.035:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 426.614178][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.668306][ T30] audit: type=1326 audit(1764774882.095:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 426.754761][ T30] audit: type=1326 audit(1764774882.095:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 426.835885][ T30] audit: type=1326 audit(1764774882.095:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 426.919737][ T30] audit: type=1326 audit(1764774882.095:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 426.956058][ T30] audit: type=1326 audit(1764774882.095:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 426.978443][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.988692][ T30] audit: type=1326 audit(1764774882.095:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 427.011078][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.018342][ T30] audit: type=1326 audit(1764774882.105:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 427.042933][ T30] audit: type=1326 audit(1764774882.105:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 427.065288][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.072949][ T30] audit: type=1326 audit(1764774882.105:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4eb978f749 code=0x7ffc0000 [ 427.095218][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.451862][T11486] syzkaller1: entered promiscuous mode [ 427.457710][T11486] syzkaller1: entered allmulticast mode [ 428.530261][T11503] bond4 (unregistering): Released all slaves [ 429.601177][ T46] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 429.863631][ T46] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 429.873430][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.891692][ T46] usb 4-1: config 0 descriptor?? [ 429.910166][ T46] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 430.121950][T11513] netlink: 'syz.3.1450': attribute type 8 has an invalid length. [ 430.873516][ T46] gp8psk: usb in 128 operation failed. [ 430.951358][ T46] gp8psk: usb in 137 operation failed. [ 430.991106][ T46] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 431.049627][ T46] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 431.136690][ T46] usb 4-1: USB disconnect, device number 99 [ 431.390388][T11546] netlink: 'syz.0.1458': attribute type 2 has an invalid length. [ 431.426524][T11546] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1458'. [ 432.125125][ T46] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 432.290504][ T46] usb 2-1: config 0 has an invalid interface number: 210 but max is 0 [ 432.395425][ T46] usb 2-1: config 0 has no interface number 0 [ 432.422589][T11580] Cannot find del_set index 0 as target [ 432.472892][ T46] usb 2-1: config 0 interface 210 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 432.553918][ T46] usb 2-1: config 0 interface 210 has no altsetting 0 [ 432.623583][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'. [ 432.810348][ T46] usb 2-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=4d.c4 [ 432.832312][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.863485][ T46] usb 2-1: Product: syz [ 432.876359][ T46] usb 2-1: Manufacturer: syz [ 432.898410][ T46] usb 2-1: SerialNumber: syz [ 432.930798][ T46] usb 2-1: config 0 descriptor?? [ 432.948556][T11560] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 432.968715][ T46] em28xx 2-1:0.210: New device syz syz @ 12 Mbps (2013:8461, interface 210, class 210) [ 433.051188][ T5919] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 433.087706][ T46] em28xx 2-1:0.210: Device initialization failed. [ 433.104886][ T46] em28xx 2-1:0.210: Device must be connected to a high-speed USB 2.0 port. [ 433.248975][T11594] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 433.311820][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 433.320121][ T46] usb 2-1: USB disconnect, device number 103 [ 433.345488][ T5919] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 433.364934][ T5919] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 433.385215][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 433.394498][ T5919] usb 3-1: config 0 has no interface number 0 [ 433.400718][ T5919] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 433.427031][T11594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.435203][ T5919] usb 3-1: config 0 interface 104 has no altsetting 1 [ 433.483888][ T5919] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 433.498248][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.513058][ T5919] usb 3-1: Product: syz [ 433.524088][ T5919] usb 3-1: Manufacturer: syz [ 433.532852][ T5919] usb 3-1: SerialNumber: syz [ 433.553692][ T5919] usb 3-1: config 0 descriptor?? [ 433.573086][ T5919] asix 3-1:0.104: probe with driver asix failed with error -22 [ 433.591780][T11594] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 434.808851][ T5897] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 434.985102][ T5897] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 434.997644][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.020517][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.024233][T11611] loop6: detected capacity change from 0 to 7 [ 435.040764][T11611] Dev loop6: unable to read RDB block 7 [ 435.046544][T11611] loop6: AHDI p3 p4 [ 435.051127][T11611] loop6: partition table partially beyond EOD, truncated [ 435.143536][T11611] loop6: p3 start 1886353253 is beyond EOD, truncated [ 435.306406][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 435.363372][ T5897] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 435.395869][ T5897] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 435.410442][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 435.431492][ T5897] usb 2-1: Manufacturer: syz [ 435.477888][ T5897] usb 2-1: config 0 descriptor?? [ 435.911369][T11596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.926450][T11596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.935372][ T5897] usbhid 2-1:0.0: can't add hid device: -71 [ 435.935498][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 435.943667][ T5897] usb 2-1: USB disconnect, device number 104 [ 436.400108][ T5919] usb 3-1: USB disconnect, device number 105 [ 436.569303][T11626] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1479'. [ 438.809790][ T5905] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 439.145340][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 439.245059][ T5905] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 439.257976][ T5905] usb 4-1: config 0 has an invalid descriptor of length 166, skipping remainder of the config [ 439.314261][ T5905] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 105, using maximum allowed: 30 [ 439.370444][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 439.423984][ T5905] usb 4-1: New USB device found, idVendor=054c, idProduct=02c1, bcdDevice=c2.87 [ 439.435322][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.444401][ T5905] usb 4-1: Product: syz [ 439.448681][ T5905] usb 4-1: Manufacturer: syz [ 439.454582][ T5905] usb 4-1: SerialNumber: syz [ 439.487595][ T5905] usb 4-1: config 0 descriptor?? [ 439.498786][T11662] netlink: 'syz.1.1487': attribute type 4 has an invalid length. [ 439.534483][T11662] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1487'. [ 439.565490][T11660] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 439.618924][T11660] bond4 (unregistering): Released all slaves [ 439.748904][T11655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.764125][T11655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.829205][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.837611][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.851315][ T5919] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 439.859694][ T5905] usb 4-1: USB disconnect, device number 100 [ 440.005444][ T5919] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 440.014082][ T5919] usb 2-1: config 0 has no interface number 0 [ 440.020923][ T5919] usb 2-1: config 0 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.056978][ T5919] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 440.070915][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.087935][ T5919] usb 2-1: Product: syz [ 440.097722][ T5919] usb 2-1: Manufacturer: syz [ 440.109336][ T5919] usb 2-1: SerialNumber: syz [ 440.129599][ T5919] usb 2-1: config 0 descriptor?? [ 440.153586][T11650] cgroup: fork rejected by pids controller in /syz4 [ 440.374600][ T5919] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 440.406977][ T5919] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 440.446118][ T5919] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 440.467914][ T5919] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 440.487112][ T5919] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 440.509489][ T5919] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 440.538731][ T5919] usb 2-1: USB disconnect, device number 105 [ 440.565842][ T5919] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 440.619520][ T5919] keyspan 2-1:0.133: device disconnected [ 441.425586][ T5919] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 441.641102][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 441.677130][ T5919] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 441.685710][ T5919] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 441.712532][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 441.721669][ T5919] usb 4-1: config 0 has no interface number 0 [ 441.727780][ T5919] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 441.771293][ T5919] usb 4-1: config 0 interface 104 has no altsetting 1 [ 441.796504][ T5919] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 441.806032][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.815607][T11716] FAULT_INJECTION: forcing a failure. [ 441.815607][T11716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.831156][ T5919] usb 4-1: Product: syz [ 441.835364][ T5919] usb 4-1: Manufacturer: syz [ 441.841141][ T5922] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 441.849017][ T5919] usb 4-1: SerialNumber: syz [ 441.901507][T11716] CPU: 0 UID: 0 PID: 11716 Comm: syz.1.1493 Not tainted syzkaller #0 PREEMPT(full) [ 441.901535][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.901557][T11716] Call Trace: [ 441.901570][T11716] [ 441.901580][T11716] dump_stack_lvl+0x189/0x250 [ 441.901603][T11716] ? __pfx____ratelimit+0x10/0x10 [ 441.901619][T11716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.901635][T11716] ? __pfx__printk+0x10/0x10 [ 441.901663][T11716] should_fail_ex+0x414/0x560 [ 441.901690][T11716] _copy_to_user+0x31/0xb0 [ 441.901710][T11716] simple_read_from_buffer+0xe1/0x170 [ 441.901732][T11716] proc_fail_nth_read+0x1b3/0x220 [ 441.901750][T11716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.901768][T11716] ? rw_verify_area+0x2a6/0x4d0 [ 441.901782][T11716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.901805][T11716] vfs_read+0x200/0xa30 [ 441.901819][T11716] ? fdget_pos+0x247/0x320 [ 441.901841][T11716] ? __pfx___mutex_lock+0x10/0x10 [ 441.901859][T11716] ? __pfx_vfs_read+0x10/0x10 [ 441.901874][T11716] ? __fget_files+0x2a/0x420 [ 441.901896][T11716] ? __fget_files+0x3a0/0x420 [ 441.901914][T11716] ? __fget_files+0x2a/0x420 [ 441.901939][T11716] ksys_read+0x145/0x250 [ 441.901955][T11716] ? __pfx_ksys_read+0x10/0x10 [ 441.901972][T11716] ? do_syscall_64+0xbe/0xf80 [ 441.901992][T11716] do_syscall_64+0xfa/0xf80 [ 441.902010][T11716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.902025][T11716] ? clear_bhb_loop+0x60/0xb0 [ 441.902043][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.902058][T11716] RIP: 0033:0x7fec3a98e15c [ 441.902071][T11716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 441.902084][T11716] RSP: 002b:00007fec3b7e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.902099][T11716] RAX: ffffffffffffffda RBX: 00007fec3abe5fa0 RCX: 00007fec3a98e15c [ 441.902110][T11716] RDX: 000000000000000f RSI: 00007fec3b7e80a0 RDI: 0000000000000005 [ 441.902119][T11716] RBP: 00007fec3b7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 441.902128][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.902136][T11716] R13: 00007fec3abe6038 R14: 00007fec3abe5fa0 R15: 00007fec3ad0fa28 [ 441.902160][T11716] [ 442.133687][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.146576][ T5919] usb 4-1: config 0 descriptor?? [ 442.155074][ T5919] asix 4-1:0.104: probe with driver asix failed with error -22 [ 442.441462][ T5922] usb 5-1: config 8 has an invalid interface number: 66 but max is 2 [ 442.449647][ T5922] usb 5-1: config 8 has an invalid interface number: 82 but max is 2 [ 442.521148][ T5922] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 442.532355][ T5922] usb 5-1: config 8 has an invalid interface number: 3 but max is 2 [ 442.541848][ T5922] usb 5-1: config 8 has an invalid interface number: 121 but max is 2 [ 442.606188][ T5922] usb 5-1: config 8 has an invalid interface number: 147 but max is 2 [ 442.629651][ T5922] usb 5-1: config 8 has 5 interfaces, different from the descriptor's value: 3 [ 442.659012][ T5922] usb 5-1: config 8 has no interface number 0 [ 442.676289][ T5922] usb 5-1: config 8 has no interface number 1 [ 442.705212][ T5922] usb 5-1: config 8 has no interface number 2 [ 442.739850][ T5922] usb 5-1: config 8 has no interface number 4 [ 442.766585][ T5922] usb 5-1: config 8 interface 66 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 442.819391][ T5922] usb 5-1: config 8 interface 66 altsetting 251 endpoint 0x3 has an invalid bInterval 250, changing to 7 [ 442.867209][ T5922] usb 5-1: config 8 interface 66 altsetting 251 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 442.948634][ T5922] usb 5-1: config 8 interface 66 altsetting 251 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 443.012433][ T5922] usb 5-1: too many endpoints for config 8 interface 82 altsetting 155: 107, using maximum allowed: 30 [ 443.088371][ T5922] usb 5-1: config 8 interface 82 altsetting 155 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 443.123672][ T5922] usb 5-1: config 8 interface 82 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 443.155383][ T5922] usb 5-1: config 8 interface 82 altsetting 155 has a duplicate endpoint with address 0x6, skipping [ 443.190580][ T5922] usb 5-1: config 8 interface 82 altsetting 155 has a duplicate endpoint with address 0x3, skipping [ 443.239998][ T5922] usb 5-1: config 8 interface 82 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 443.276677][ T5922] usb 5-1: config 8 interface 82 altsetting 155 has a duplicate endpoint with address 0xE, skipping [ 443.311224][ T5919] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 443.329781][ T5922] usb 5-1: config 8 interface 82 altsetting 155 has a duplicate endpoint with address 0x6, skipping [ 443.347729][ T5922] usb 5-1: config 8 interface 82 altsetting 155 has 9 endpoint descriptors, different from the interface descriptor's value: 107 [ 443.369153][ T5922] usb 5-1: config 8 interface 3 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 443.384558][ T5922] usb 5-1: too many endpoints for config 8 interface 121 altsetting 21: 241, using maximum allowed: 30 [ 443.408881][ T5922] usb 5-1: config 8 interface 121 altsetting 21 has a duplicate endpoint with address 0xE, skipping [ 443.423024][ T5922] usb 5-1: config 8 interface 121 altsetting 21 has a duplicate endpoint with address 0x6, skipping [ 443.434480][ T5922] usb 5-1: config 8 interface 121 altsetting 21 endpoint 0x8 has an invalid bInterval 174, changing to 7 [ 443.447991][ T5922] usb 5-1: config 8 interface 121 altsetting 21 has a duplicate endpoint with address 0x8, skipping [ 443.459856][ T5922] usb 5-1: config 8 interface 121 altsetting 21 has 4 endpoint descriptors, different from the interface descriptor's value: 241 [ 443.473673][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 443.486151][ T5919] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 443.495142][ T5919] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 443.516449][ T5919] usb 2-1: config 150 has no interface number 0 [ 443.523770][ T5919] usb 2-1: config 150 interface 204 has no altsetting 0 [ 443.531894][ T5922] usb 5-1: config 8 interface 147 altsetting 5 endpoint 0xB has invalid maxpacket 2047, setting to 64 [ 443.545318][ T5922] usb 5-1: config 8 interface 147 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 443.558007][ T5922] usb 5-1: config 8 interface 147 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 443.569682][ T5919] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 443.579059][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.588486][ T5919] usb 2-1: Product: syz [ 443.618856][ T5919] usb 2-1: Manufacturer: syz [ 443.629648][ T5919] usb 2-1: SerialNumber: syz [ 443.642042][ T5922] usb 5-1: config 8 interface 66 has no altsetting 0 [ 443.660387][ T5922] usb 5-1: config 8 interface 82 has no altsetting 0 [ 443.668251][ T5922] usb 5-1: config 8 interface 3 has no altsetting 0 [ 443.681383][ T5922] usb 5-1: config 8 interface 121 has no altsetting 0 [ 443.689188][ T5922] usb 5-1: config 8 interface 147 has no altsetting 0 [ 443.704865][ T5922] usb 5-1: New USB device found, idVendor=0e8d, idProduct=7106, bcdDevice= e.cc [ 443.715229][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.727502][ T5922] usb 5-1: Product: â  [ 443.735559][ T5922] usb 5-1: Manufacturer: ç‰‡áœ–ä“µä“æ¼Šà¤«è»ê ¨à»ºäœ¶êš£á¤â“™á‹½Ù†ç§ä«¡ê™ªë¢°î—’갳薻é¢È–橯⟙륌æêœ¨á†§ìŒ¨æ¢¤×”㽑﫾꧛堑険驜贈綃á·ä¥ˆê»¡å·¹ï®ï€¡å©²ä—‹è¶ç›­ï®­ã¸¡à žë‡ç‘ˆë¯°îŽ©ã¸¥î•ˆï²‘ä™µçŽ»è‹¥ãƒèœç¢µì§ªè ³â‡‰ï¨ƒë¿žÞ›ã¡ˆá°†ë°”å–ˆå ã†£ã•§ï§€ë”‰æ±€ë”¡è²‚璹㿘髳૘韂뽓ڀ⚶巖䙺탾æ‡é®ä‚¸é¦¹ì€Œä¶¼î¿ä拶㙠迾ꯞ㴦╩㟘é»å¼ æ˜œç…´é¥º [ 443.772002][ T5922] usb 5-1: SerialNumber: à – [ 443.782251][ T5922] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 443.791238][ T5922] usb 5-1: no configuration chosen from 1 choice [ 443.860824][ T5919] xr_serial 2-1:150.204: skipping garbage [ 443.868626][ T5919] xr_serial 2-1:150.204: xr_serial converter detected [ 443.935457][ T9] usb 4-1: USB disconnect, device number 101 [ 444.362777][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 444.500210][T11738] netlink: 'syz.2.1499': attribute type 10 has an invalid length. [ 444.622567][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 444.641657][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.661264][ T5897] usb 5-1: USB disconnect, device number 107 [ 444.671533][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.693974][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 444.711497][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.743142][ T9] usb 4-1: config 0 descriptor?? [ 444.774591][ T9] hub 4-1:0.0: USB hub found [ 444.974659][ T9] hub 4-1:0.0: 1 port detected [ 445.606967][ T9] hub 4-1:0.0: activate --> -90 [ 445.721108][ T5922] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 445.891178][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 445.905505][ T5922] usb 5-1: config 0 has no interfaces? [ 445.914203][ T5922] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.924113][ T5922] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.939046][ T5922] usb 5-1: Manufacturer: syz [ 445.964583][ T5922] usb 5-1: config 0 descriptor?? [ 446.441729][ T5922] usb 4-1: USB disconnect, device number 102 [ 446.454513][ T9] usb 4-1-port1: cannot reset (err = -71) [ 446.487246][ T9] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 446.515737][ T9] usb 4-1-port1: attempt power cycle [ 446.803560][ T5919] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 446.826897][ T5919] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 446.844832][ T5919] usb 2-1: USB disconnect, device number 106 [ 446.857277][ T5919] xr_serial 2-1:150.204: device disconnected [ 447.181410][ T5919] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 447.341695][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 447.349492][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.362132][ T5919] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 447.372438][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.386705][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 447.398370][ T5919] usb 2-1: config 0 descriptor?? [ 448.227218][T11777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.274986][T11777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.308320][ T5919] asus 0003:048D:CE50.0017: item fetching failed at offset 6/7 [ 448.322881][ T5919] asus 0003:048D:CE50.0017: Asus hid parse failed: -22 [ 448.426310][ T5919] asus 0003:048D:CE50.0017: probe with driver asus failed with error -22 [ 448.507740][ T5919] usb 2-1: USB disconnect, device number 107 [ 448.582764][ T5955] usb 5-1: USB disconnect, device number 108 [ 448.644717][T11781] input: syz1 as /devices/virtual/input/input54 [ 448.802778][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 448.802794][ T30] audit: type=1326 audit(1764774904.245:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 448.854352][T11785] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 448.888247][ T30] audit: type=1326 audit(1764774904.245:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 448.916683][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 448.966234][T11785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 448.973798][ T30] audit: type=1326 audit(1764774904.245:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 449.121246][ T30] audit: type=1326 audit(1764774904.245:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 449.165515][ T30] audit: type=1326 audit(1764774904.245:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 449.215742][ T30] audit: type=1326 audit(1764774904.245:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 449.240815][ T30] audit: type=1326 audit(1764774904.245:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 449.284328][T11795] kvm: emulating exchange as write [ 449.324181][ T30] audit: type=1326 audit(1764774904.245:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 449.388263][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'. [ 449.398861][ T30] audit: type=1326 audit(1764774904.245:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 449.542798][ T30] audit: type=1326 audit(1764774904.245:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 449.637900][T11808] vim2m vim2m.0: vidioc_s_fmt queue busy [ 449.732125][T11810] bond5: entered promiscuous mode [ 449.785608][T11810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 449.901164][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 450.096080][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 450.108234][ T9] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 450.117536][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 450.133862][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 450.145375][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.156159][ T9] usb 3-1: Product: syz [ 450.160355][ T9] usb 3-1: Manufacturer: syz [ 450.165720][ T9] usb 3-1: SerialNumber: syz [ 450.252494][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 450.400638][ T9] uvcvideo 3-1:220.0: Found Unit with invalid ID 0 [ 450.411231][ T9] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 450.419074][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 450.427648][ T9] usb 3-1: USB disconnect, device number 106 [ 450.749310][T11843] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1530'. [ 451.683322][ T5922] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 451.821304][ T5922] usb 4-1: device descriptor read/64, error -71 [ 451.871158][ T5955] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 452.034031][ T5955] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 452.056550][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.071352][ T5922] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 452.092588][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 452.142385][ T5955] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 452.151940][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.223180][ T5922] usb 4-1: device descriptor read/64, error -71 [ 452.269124][ T5955] usb 2-1: config 0 descriptor?? [ 452.331370][ T5922] usb usb4-port1: attempt power cycle [ 452.671213][ T5922] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 452.694716][ T5955] hid_parser_main: 4 callbacks suppressed [ 452.694735][ T5955] holtek_kbd 0003:04D9:A055.0018: unknown main item tag 0x7 [ 452.717865][ T5922] usb 4-1: device descriptor read/8, error -71 [ 452.724710][ T5955] holtek_kbd 0003:04D9:A055.0018: item fetching failed at offset 3/7 [ 452.737895][ T5955] holtek_kbd 0003:04D9:A055.0018: probe with driver holtek_kbd failed with error -22 [ 452.771356][ T5970] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 452.902267][ T5970] usb 5-1: device descriptor read/64, error -71 [ 452.971201][ T5922] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 452.992165][ T5922] usb 4-1: device descriptor read/8, error -71 [ 453.111574][ T5922] usb usb4-port1: unable to enumerate USB device [ 453.151385][ T5970] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 453.281663][ T5970] usb 5-1: device descriptor read/64, error -71 [ 453.392211][ T5970] usb usb5-port1: attempt power cycle [ 453.731085][ T5970] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 453.751614][ T5970] usb 5-1: device descriptor read/8, error -71 [ 454.011638][ T5970] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 454.048192][ T5970] usb 5-1: device descriptor read/8, error -71 [ 454.161838][ T5970] usb usb5-port1: unable to enumerate USB device [ 454.341226][ T5922] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 454.471270][ T5922] usb 4-1: device descriptor read/64, error -71 [ 454.567268][ T5970] usb 2-1: USB disconnect, device number 108 [ 454.711364][ T5922] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 454.861220][ T5922] usb 4-1: device descriptor read/64, error -71 [ 454.931516][T11899] can: request_module (can-proto-0) failed. [ 454.971367][ T5922] usb usb4-port1: attempt power cycle [ 455.341191][ T5922] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 455.392713][ T5922] usb 4-1: device descriptor read/8, error -71 [ 455.631116][ T5922] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 455.655103][ T5922] usb 4-1: device descriptor read/8, error -71 [ 455.781763][ T5922] usb usb4-port1: unable to enumerate USB device [ 456.111325][T11929] sit0: entered promiscuous mode [ 456.116676][T11929] netlink: 'syz.2.1554': attribute type 1 has an invalid length. [ 456.124962][T11929] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1554'. [ 457.213580][T11958] xt_bpf: check failed: parse error [ 457.427090][T11967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'. [ 457.454626][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 457.491903][T11964] 8021q: VLANs not supported on ip6_vti0 [ 457.564265][T11971] netlink: 'syz.1.1565': attribute type 32 has an invalid length. [ 458.201376][ T5970] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 458.323064][T12008] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1575'. [ 458.571384][ T5970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.630719][ T5970] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 458.640241][ T5970] usb 3-1: config 1 has no interface number 1 [ 458.649722][ T5970] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 458.663612][ T5970] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 458.775617][ T5970] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.785881][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.798577][ T5970] usb 3-1: Product: syz [ 458.807690][ T5970] usb 3-1: Manufacturer: syz [ 458.846937][ T5970] usb 3-1: SerialNumber: syz [ 458.865435][T11992] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 459.302456][T12013] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 459.351534][T12013] Cannot find add_set index 0 as target [ 460.019092][ T5970] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 460.054238][ T5970] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 460.147764][ T5970] usb 3-1: USB disconnect, device number 107 [ 460.269311][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.384004][T12027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 460.481138][ T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 460.761604][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 460.785588][T12035] geneve4: entered promiscuous mode [ 460.790594][ T9] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 460.799236][T12035] geneve4: entered allmulticast mode [ 460.814919][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.841422][ T9] usb 5-1: config 0 has no interface number 0 [ 460.857755][ T9] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 460.892971][ T9] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 460.933577][ T9] usb 5-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 460.978916][ T9] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 460.988287][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.016484][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 461.025651][T12040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'. [ 461.169578][ T9] usb 5-1: Product: syz [ 461.175857][ T9] usb 5-1: Manufacturer: syz [ 461.194195][ T9] usb 5-1: SerialNumber: syz [ 461.296739][ T9] usb 5-1: config 0 descriptor?? [ 461.318122][T12021] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 461.571166][ T5970] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 461.612908][T12044] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1584'. [ 461.755581][ T5905] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 461.823699][ T9] usb 5-1: NFC: intf ffff888073f0c000 id ffffffff8e925360 [ 461.921726][ T5970] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 461.934879][ T9] usb 5-1: USB disconnect, device number 113 [ 461.942210][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.955815][ T5970] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.969252][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 461.982541][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.017181][ T5970] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.034146][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 462.052374][ T5905] usb 4-1: config 0 has no interfaces? [ 462.060353][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 462.070842][ T5905] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 462.091410][ T5905] usb 4-1: Manufacturer: syz [ 462.118434][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.130230][ T5905] usb 4-1: config 0 descriptor?? [ 462.187306][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.217064][ T5970] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.265204][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.288416][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.310183][ T5970] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.347687][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.378182][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.393680][ T5970] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.581653][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.603535][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.648047][ T5970] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.754357][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.847773][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.882953][ T5970] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.911687][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.920904][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 462.930699][ T5970] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 462.950752][ T5970] usb 3-1: config 0 interface 0 has no altsetting 0 [ 462.997417][ T5970] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 463.007225][ T5970] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 463.016013][ T5970] usb 3-1: Product: syz [ 463.020399][ T5970] usb 3-1: Manufacturer: syz [ 463.025341][ T5970] usb 3-1: SerialNumber: syz [ 463.050005][ T5970] usb 3-1: config 0 descriptor?? [ 463.062772][ T5970] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 463.141284][ T5955] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 463.149245][ T5919] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 463.267720][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.277740][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.301194][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 463.308859][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.326560][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.338043][ T5919] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 463.348355][ T5955] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 463.359330][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.376339][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.387284][ T5919] usb 5-1: config 0 descriptor?? [ 463.399322][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 463.409549][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 463.409625][ T5970] usb 3-1: USB disconnect, device number 108 [ 463.417999][ T5919] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 463.447444][ T5955] usb 2-1: config 0 descriptor?? [ 463.478000][ T5970] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 463.607300][T12058] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1589'. [ 463.871180][T12059] netlink: 'syz.1.1588': attribute type 10 has an invalid length. [ 463.899234][T12067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.920583][T12067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.010168][T12059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.027532][T12059] team0: Port device bond0 added [ 464.027940][T12058] fuse: Bad value for 'user_id' [ 464.037818][T12058] fuse: Bad value for 'user_id' [ 464.051619][ T5955] usbhid 2-1:0.0: can't add hid device: -71 [ 464.059757][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.068619][ T5955] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 464.089184][ T5955] usb 2-1: USB disconnect, device number 109 [ 464.107414][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.204877][ T5919] gspca_sonixj: reg_w1 err -71 [ 464.239309][ T5919] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 464.274323][ T5919] usb 5-1: USB disconnect, device number 114 [ 464.751756][ T5970] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 464.921324][ T5970] usb 3-1: Using ep0 maxpacket: 8 [ 464.928098][ T5970] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 464.935058][ T5919] usb 4-1: USB disconnect, device number 115 [ 464.981335][ T5970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.037388][ T5970] usb 3-1: config 0 has no interface number 0 [ 465.087403][ T5970] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 465.131283][ T5970] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 465.155300][ T5970] usb 3-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 465.190406][ T5970] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 465.218508][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.246631][ T5970] usb 3-1: Product: syz [ 465.260894][ T5970] usb 3-1: Manufacturer: syz [ 465.290531][ T5970] usb 3-1: SerialNumber: syz [ 465.326094][ T5970] usb 3-1: config 0 descriptor?? [ 465.354418][T12088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.589641][ T5970] usb 3-1: NFC: intf ffff88807a086000 id ffffffff8e925360 [ 465.644617][ T5970] usb 3-1: USB disconnect, device number 109 [ 465.971242][T12117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 466.211804][T12124] ip6erspan0: entered allmulticast mode [ 466.271495][ T5919] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 466.281481][ T5970] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 466.321162][ T5922] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 466.421201][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 466.428375][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 466.437199][ T5919] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 466.441067][ T5970] usb 4-1: Using ep0 maxpacket: 32 [ 466.445985][ T5919] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 466.455021][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 466.461522][ T5919] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 466.461548][ T5919] usb 2-1: config 128 has no interface number 0 [ 466.474461][ T5905] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 466.484214][ T5919] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 466.488611][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 466.495829][ T5919] usb 2-1: config 128 interface 127 has no altsetting 0 [ 466.512349][ T5970] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 466.534592][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.536342][ T5922] usb 5-1: config index 0 descriptor too short (expected 126, got 72) [ 466.543978][ T5970] usb 4-1: Product: syz [ 466.554081][ T5919] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 466.555949][ T5970] usb 4-1: Manufacturer: syz [ 466.566671][ T5922] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 466.570054][ T5970] usb 4-1: SerialNumber: syz [ 466.578998][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.593632][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.596209][ T5970] usb 4-1: config 0 descriptor?? [ 466.602060][ T5922] usb 5-1: Product: syz [ 466.602082][ T5922] usb 5-1: Manufacturer: syz [ 466.602100][ T5922] usb 5-1: SerialNumber: syz [ 466.604200][ T5919] usb 2-1: Product: syz [ 466.620346][ T5970] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 466.624193][ T5919] usb 2-1: Manufacturer: syz [ 466.646324][ T5922] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 466.656241][ T5919] usb 2-1: SerialNumber: syz [ 466.657167][ T5970] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 466.671337][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 466.682646][ T5905] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 466.686540][T12117] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 466.691996][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.714893][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 466.727839][ T5955] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 466.728315][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 466.753882][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.769763][ T5970] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 466.788676][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 466.798723][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.842278][ T5922] usb 4-1: USB disconnect, device number 116 [ 466.925292][T12117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.939579][T12117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.951951][T12117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.963725][T12117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.015648][ T5905] usb 3-1: GET_CAPABILITIES returned 0 [ 467.022216][ T5905] usbtmc 3-1:16.0: can't read capabilities [ 467.098729][ T5919] usb 2-1: USB disconnect, device number 110 [ 467.122445][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.228849][ T5922] usb 3-1: USB disconnect, device number 110 [ 467.828055][ T5955] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 467.856965][ T5955] ath9k_htc: Failed to initialize the device [ 467.907019][ T5955] usb 5-1: ath9k_htc: USB layer deinitialized [ 468.651384][T12154] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 469.404114][ T5919] usb 5-1: USB disconnect, device number 115 [ 469.741588][ T5970] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 469.914049][ T5970] usb 4-1: Using ep0 maxpacket: 8 [ 469.923352][ T5970] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 469.940627][ T5970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.979177][ T5970] usb 4-1: config 0 has no interface number 0 [ 470.009649][ T5970] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 470.049450][ T5970] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 470.087437][ T5970] usb 4-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 470.134805][ T5970] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 470.164160][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.191488][ T5919] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 470.198460][ T5970] usb 4-1: Product: syz [ 470.230943][ T5970] usb 4-1: Manufacturer: syz [ 470.236377][ T5970] usb 4-1: SerialNumber: syz [ 470.258074][ T5970] usb 4-1: config 0 descriptor?? [ 470.289097][T12161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 470.368253][ T5919] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 470.395037][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.422680][ T5919] usb 5-1: config 0 descriptor?? [ 470.560650][ T5970] usb 4-1: NFC: intf ffff88804a04d000 id ffffffff8e925360 [ 470.610068][ T5970] usb 4-1: USB disconnect, device number 117 [ 470.905348][ T5919] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 470.921852][ T5919] hackrf 5-1:0.0: Could not detect board [ 470.951600][ T5919] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 470.980888][ T5919] usb 5-1: USB disconnect, device number 116 [ 471.435631][T12205] FAULT_INJECTION: forcing a failure. [ 471.435631][T12205] name failslab, interval 1, probability 0, space 0, times 0 [ 471.474749][T12205] CPU: 0 UID: 0 PID: 12205 Comm: syz.1.1634 Not tainted syzkaller #0 PREEMPT(full) [ 471.474778][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.474792][T12205] Call Trace: [ 471.474801][T12205] [ 471.474810][T12205] dump_stack_lvl+0x189/0x250 [ 471.474840][T12205] ? __pfx____ratelimit+0x10/0x10 [ 471.474864][T12205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.474887][T12205] ? __pfx__printk+0x10/0x10 [ 471.474921][T12205] ? __pfx___might_resched+0x10/0x10 [ 471.474941][T12205] ? fs_reclaim_acquire+0x7d/0x100 [ 471.474970][T12205] should_fail_ex+0x414/0x560 [ 471.475007][T12205] should_failslab+0xa8/0x100 [ 471.475034][T12205] __kmalloc_noprof+0xcb/0x7e0 [ 471.475055][T12205] ? sock_kmalloc+0xd6/0x160 [ 471.475087][T12205] sock_kmalloc+0xd6/0x160 [ 471.475116][T12205] ____sys_sendmsg+0x1b5/0x820 [ 471.475147][T12205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.475181][T12205] ? import_iovec+0x74/0xa0 [ 471.475211][T12205] ___sys_sendmsg+0x21f/0x2a0 [ 471.475237][T12205] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.475259][T12205] ? __lock_acquire+0x6b6/0x2cf0 [ 471.475334][T12205] ? __might_fault+0xb0/0x130 [ 471.475365][T12205] __sys_sendmmsg+0x227/0x430 [ 471.475394][T12205] ? __pfx___sys_sendmmsg+0x10/0x10 [ 471.475446][T12205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.475491][T12205] ? ksys_write+0x22a/0x250 [ 471.475515][T12205] ? __pfx_ksys_write+0x10/0x10 [ 471.475542][T12205] __x64_sys_sendmmsg+0xa0/0xc0 [ 471.475568][T12205] do_syscall_64+0xfa/0xf80 [ 471.475595][T12205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.475615][T12205] ? clear_bhb_loop+0x60/0xb0 [ 471.475650][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.475670][T12205] RIP: 0033:0x7fec3a98f749 [ 471.475688][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.475706][T12205] RSP: 002b:00007fec3b7e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 471.475728][T12205] RAX: ffffffffffffffda RBX: 00007fec3abe5fa0 RCX: 00007fec3a98f749 [ 471.475744][T12205] RDX: 0000000000000003 RSI: 0000200000005380 RDI: 0000000000000003 [ 471.475757][T12205] RBP: 00007fec3b7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 471.475770][T12205] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 471.475783][T12205] R13: 00007fec3abe6038 R14: 00007fec3abe5fa0 R15: 00007fec3ad0fa28 [ 471.475816][T12205] [ 471.845132][T12217] xt_bpf: check failed: parse error [ 472.001796][T12230] netlink: 'syz.4.1643': attribute type 20 has an invalid length. [ 472.009904][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 472.020060][T12230] netlink: 'syz.4.1643': attribute type 20 has an invalid length. [ 472.028849][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 472.102768][T12234] pim6reg: entered allmulticast mode [ 472.114403][T12234] pim6reg: left allmulticast mode [ 472.133944][T12236] syzkaller0: entered allmulticast mode [ 472.171635][ T5955] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 472.198265][T12234] xt_limit: Overflow, try lower: 268435456/134217728 [ 472.271400][ T5905] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 472.321181][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 472.337988][ T5955] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 472.346404][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.356863][ T5955] usb 3-1: config 0 has no interface number 0 [ 472.363880][ T5955] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 472.375074][ T5955] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 472.391198][ T5955] usb 3-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 472.408512][ T5955] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 472.418051][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.426178][ T5955] usb 3-1: Product: syz [ 472.430453][ T5955] usb 3-1: Manufacturer: syz [ 472.435236][ T5955] usb 3-1: SerialNumber: syz [ 472.444045][ T5955] usb 3-1: config 0 descriptor?? [ 472.450123][T12224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 472.454023][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.468583][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.543043][T12242] : renamed from bridge_slave_0 (while UP) [ 472.682824][ T5955] usb 3-1: NFC: intf ffff8880330c3000 id ffffffff8e925360 [ 472.705126][ T5955] usb 3-1: USB disconnect, device number 111 [ 472.808552][T12244] FAULT_INJECTION: forcing a failure. [ 472.808552][T12244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.823349][T12244] CPU: 1 UID: 0 PID: 12244 Comm: syz.1.1648 Not tainted syzkaller #0 PREEMPT(full) [ 472.823379][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.823393][T12244] Call Trace: [ 472.823403][T12244] [ 472.823412][T12244] dump_stack_lvl+0x189/0x250 [ 472.823441][T12244] ? __pfx____ratelimit+0x10/0x10 [ 472.823466][T12244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.823489][T12244] ? __pfx__printk+0x10/0x10 [ 472.823518][T12244] ? __might_fault+0xb0/0x130 [ 472.823550][T12244] should_fail_ex+0x414/0x560 [ 472.823592][T12244] _copy_from_user+0x2d/0xb0 [ 472.823619][T12244] ____sys_sendmsg+0x2fe/0x820 [ 472.823650][T12244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.823686][T12244] ? import_iovec+0x74/0xa0 [ 472.823715][T12244] ___sys_sendmsg+0x21f/0x2a0 [ 472.823742][T12244] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.823764][T12244] ? __lock_acquire+0x6b6/0x2cf0 [ 472.823829][T12244] ? __might_fault+0xb0/0x130 [ 472.823854][T12244] __sys_sendmmsg+0x227/0x430 [ 472.823884][T12244] ? __pfx___sys_sendmmsg+0x10/0x10 [ 472.823919][T12244] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 472.823992][T12244] ? ksys_write+0x22a/0x250 [ 472.824017][T12244] ? __pfx_ksys_write+0x10/0x10 [ 472.824044][T12244] __x64_sys_sendmmsg+0xa0/0xc0 [ 472.824072][T12244] do_syscall_64+0xfa/0xf80 [ 472.824098][T12244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.824119][T12244] ? clear_bhb_loop+0x60/0xb0 [ 472.824145][T12244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.824166][T12244] RIP: 0033:0x7fec3a98f749 [ 472.824185][T12244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.824203][T12244] RSP: 002b:00007fec3b7e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 472.824225][T12244] RAX: ffffffffffffffda RBX: 00007fec3abe5fa0 RCX: 00007fec3a98f749 [ 472.824241][T12244] RDX: 0000000000000003 RSI: 0000200000005380 RDI: 0000000000000003 [ 472.824255][T12244] RBP: 00007fec3b7e8090 R08: 0000000000000000 R09: 0000000000000000 [ 472.824268][T12244] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 472.824282][T12244] R13: 00007fec3abe6038 R14: 00007fec3abe5fa0 R15: 00007fec3ad0fa28 [ 472.824315][T12244] [ 473.051170][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.180023][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.217474][ T5905] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 473.245234][ T5905] usb 5-1: can't read configurations, error -71 [ 473.604556][T12257] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1653'. [ 473.734859][T12263] xt_bpf: check failed: parse error [ 473.948691][T12274] openvswitch: netlink: IP tunnel dst address not specified [ 478.397862][T12318] No such timeout policy "syz1" [ 478.934431][T12328] xt_bpf: check failed: parse error [ 479.202970][T12334] FAULT_INJECTION: forcing a failure. [ 479.202970][T12334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.231470][T12334] CPU: 0 UID: 0 PID: 12334 Comm: syz.0.1670 Not tainted syzkaller #0 PREEMPT(full) [ 479.231498][T12334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.231512][T12334] Call Trace: [ 479.231521][T12334] [ 479.231530][T12334] dump_stack_lvl+0x189/0x250 [ 479.231559][T12334] ? __pfx____ratelimit+0x10/0x10 [ 479.231583][T12334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.231612][T12334] ? __pfx__printk+0x10/0x10 [ 479.231641][T12334] ? __might_fault+0xb0/0x130 [ 479.231674][T12334] should_fail_ex+0x414/0x560 [ 479.231712][T12334] _copy_from_user+0x2d/0xb0 [ 479.231739][T12334] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 479.231765][T12334] ? rcu_is_watching+0x15/0xb0 [ 479.231793][T12334] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 479.231822][T12334] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 479.231853][T12334] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 479.231882][T12334] ? policy_nodemask+0x27c/0x720 [ 479.231906][T12334] ? ip6_compressed_string+0xa9e/0xb70 [ 479.231940][T12334] ip_generic_getfrag+0x12f/0x2b0 [ 479.231964][T12334] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 479.231995][T12334] ? skb_page_frag_refill+0x199/0x320 [ 479.232032][T12334] __ip6_append_data+0x205e/0x3f30 [ 479.232080][T12334] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 479.232132][T12334] ? __pfx___ip6_append_data+0x10/0x10 [ 479.232159][T12334] ? __local_bh_enable_ip+0x12d/0x1c0 [ 479.232184][T12334] ip6_append_data+0x1c1/0x380 [ 479.232212][T12334] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 479.232246][T12334] udpv6_sendmsg+0xaea/0x2510 [ 479.232281][T12334] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 479.232319][T12334] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 479.232348][T12334] ? __pfx___might_resched+0x10/0x10 [ 479.232381][T12334] ? aa_sk_perm+0x7f0/0x920 [ 479.232419][T12334] ? inet_send_prepare+0x5c/0x270 [ 479.232446][T12334] ? inet6_sendmsg+0xe4/0x120 [ 479.232477][T12334] __sock_sendmsg+0xe5/0x270 [ 479.232511][T12334] ____sys_sendmsg+0x52d/0x820 [ 479.232542][T12334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.232577][T12334] ? import_iovec+0x74/0xa0 [ 479.232611][T12334] ___sys_sendmsg+0x21f/0x2a0 [ 479.232638][T12334] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.232659][T12334] ? __lock_acquire+0x6b6/0x2cf0 [ 479.232726][T12334] ? __might_fault+0xb0/0x130 [ 479.232751][T12334] __sys_sendmmsg+0x227/0x430 [ 479.232782][T12334] ? __pfx___sys_sendmmsg+0x10/0x10 [ 479.232817][T12334] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.232862][T12334] ? ksys_write+0x22a/0x250 [ 479.232887][T12334] ? __pfx_ksys_write+0x10/0x10 [ 479.232913][T12334] __x64_sys_sendmmsg+0xa0/0xc0 [ 479.232940][T12334] do_syscall_64+0xfa/0xf80 [ 479.232965][T12334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.232986][T12334] ? clear_bhb_loop+0x60/0xb0 [ 479.233011][T12334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.233031][T12334] RIP: 0033:0x7fdf19d8f749 [ 479.233049][T12334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.233067][T12334] RSP: 002b:00007fdf1ac2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 479.233089][T12334] RAX: ffffffffffffffda RBX: 00007fdf19fe5fa0 RCX: 00007fdf19d8f749 [ 479.233105][T12334] RDX: 0000000000000003 RSI: 0000200000005380 RDI: 0000000000000003 [ 479.233118][T12334] RBP: 00007fdf1ac2f090 R08: 0000000000000000 R09: 0000000000000000 [ 479.233131][T12334] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000002 [ 479.233144][T12334] R13: 00007fdf19fe6038 R14: 00007fdf19fe5fa0 R15: 00007fdf1a10fa28 [ 479.233178][T12334] [ 479.401676][T12341] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1669'. [ 479.683660][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1672'. [ 479.763994][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 479.804168][T12338] dvmrp1: entered allmulticast mode [ 480.394698][T12357] netlink: 'syz.0.1673': attribute type 31 has an invalid length. [ 481.101143][ T5922] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 481.139147][T12372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 481.640783][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 481.854369][ T5922] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 481.863979][ T5922] usb 3-1: can't read configurations, error -71 [ 482.219526][T12387] FAULT_INJECTION: forcing a failure. [ 482.219526][T12387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.236027][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.2.1684 Not tainted syzkaller #0 PREEMPT(full) [ 482.236052][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.236065][T12387] Call Trace: [ 482.236073][T12387] [ 482.236087][T12387] dump_stack_lvl+0x189/0x250 [ 482.236131][T12387] ? __pfx____ratelimit+0x10/0x10 [ 482.236155][T12387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.236178][T12387] ? __pfx__printk+0x10/0x10 [ 482.236215][T12387] ? __might_fault+0xb0/0x130 [ 482.236245][T12387] should_fail_ex+0x414/0x560 [ 482.236278][T12387] _copy_from_user+0x2d/0xb0 [ 482.236302][T12387] ___sys_sendmsg+0x158/0x2a0 [ 482.236333][T12387] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.236353][T12387] ? __lock_acquire+0x6b6/0x2cf0 [ 482.236412][T12387] ? __might_fault+0xb0/0x130 [ 482.236434][T12387] __sys_sendmmsg+0x227/0x430 [ 482.236463][T12387] ? __pfx___sys_sendmmsg+0x10/0x10 [ 482.236494][T12387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.236535][T12387] ? ksys_write+0x22a/0x250 [ 482.236557][T12387] ? __pfx_ksys_write+0x10/0x10 [ 482.236582][T12387] __x64_sys_sendmmsg+0xa0/0xc0 [ 482.236606][T12387] do_syscall_64+0xfa/0xf80 [ 482.236631][T12387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.236650][T12387] ? clear_bhb_loop+0x60/0xb0 [ 482.236673][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.236692][T12387] RIP: 0033:0x7f90cfd8f749 [ 482.236709][T12387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.236726][T12387] RSP: 002b:00007f90d0cf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 482.236746][T12387] RAX: ffffffffffffffda RBX: 00007f90cffe5fa0 RCX: 00007f90cfd8f749 [ 482.236761][T12387] RDX: 0000000000000003 RSI: 0000200000005380 RDI: 0000000000000003 [ 482.236773][T12387] RBP: 00007f90d0cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 482.236786][T12387] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000002 [ 482.236798][T12387] R13: 00007f90cffe6038 R14: 00007f90cffe5fa0 R15: 00007f90d010fa28 [ 482.236829][T12387] [ 483.124923][ T5955] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 483.158486][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 483.291074][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 483.357629][ T5955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 483.415638][ T5955] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 483.427574][ T5955] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 483.441443][ T5955] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 483.450784][ T5955] usb 2-1: config 128 has no interface number 0 [ 483.468237][ T5955] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 483.481344][ T5955] usb 2-1: config 128 interface 127 has no altsetting 0 [ 483.500200][ T5955] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 483.515011][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.549710][ T5955] usb 2-1: Product: syz [ 483.564382][ T5955] usb 2-1: Manufacturer: syz [ 483.572692][ T5955] usb 2-1: SerialNumber: syz [ 483.638075][T12394] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 483.944270][ T5955] usb 2-1: USB disconnect, device number 111 [ 484.016547][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.902060][ T5922] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 486.991319][ T936] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 487.081346][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 487.153036][ T5922] usb 4-1: config 0 has no interfaces? [ 487.241085][ T936] usb 2-1: Using ep0 maxpacket: 16 [ 487.248058][ T936] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.268437][ T5922] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 487.298109][ T936] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.318818][ T5922] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 487.331152][ T936] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 487.350530][ T5922] usb 4-1: Manufacturer: syz [ 487.371760][ T5922] usb 4-1: config 0 descriptor?? [ 487.381145][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.541305][ T5922] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 487.726647][T12458] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 487.748370][T12468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.771681][ T5922] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.804819][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.828578][ T5922] usb 3-1: config 0 descriptor?? [ 487.838657][ T5922] cp210x 3-1:0.0: cp210x converter detected [ 487.854632][ T936] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 488.185308][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 488.185327][ T30] audit: type=1326 audit(1764774943.635:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.2.1709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90cfd8f749 code=0x0 [ 488.576764][ T5922] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 488.649692][ T5922] usb 3-1: cp210x converter now attached to ttyUSB0 [ 489.101471][ T5922] usb 2-1: reset high-speed USB device number 112 using dummy_hcd [ 489.368980][ T936] usb 4-1: USB disconnect, device number 118 [ 490.476478][ T5955] usb 2-1: USB disconnect, device number 112 [ 490.695952][ T5919] usb 3-1: USB disconnect, device number 114 [ 490.712400][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 490.763615][ T5919] cp210x 3-1:0.0: device disconnected [ 491.401054][ T5919] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 491.541394][ T5919] usb 3-1: device descriptor read/64, error -71 [ 491.801150][ T5919] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 491.826894][ T5955] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 491.963878][ T5919] usb 3-1: device descriptor read/64, error -71 [ 491.991189][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 492.010090][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.025672][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.054733][ T5955] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 492.078959][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.087445][ T5919] usb usb3-port1: attempt power cycle [ 492.108365][ T5955] usb 4-1: config 0 descriptor?? [ 492.431122][ T5919] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 492.454251][ T5919] usb 3-1: device descriptor read/8, error -71 [ 492.501291][ T5922] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 492.670525][ T5955] apple 0003:05AC:024B.001A: unknown main item tag 0x7 [ 492.677856][ T5955] apple 0003:05AC:024B.001A: unbalanced collection at end of report description [ 492.693793][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.705632][ T5919] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 492.719512][ T5922] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 492.729803][ T5955] apple 0003:05AC:024B.001A: parse failed [ 492.739104][ T5955] apple 0003:05AC:024B.001A: probe with driver apple failed with error -22 [ 492.751999][ T5919] usb 3-1: device descriptor read/8, error -71 [ 492.761917][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.780409][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.794567][ T5922] usb 5-1: Product: syz [ 492.798790][ T5922] usb 5-1: Manufacturer: syz [ 492.803600][ T5922] usb 5-1: SerialNumber: syz [ 492.872627][ T5919] usb usb3-port1: unable to enumerate USB device [ 492.886005][T12533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.902979][T12533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.031890][T12532] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 493.243154][ T5922] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 493.249234][ T5922] cdc_ncm 5-1:1.0: bind() failure [ 493.275668][ T5922] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 493.291231][ T5922] cdc_ncm 5-1:1.1: bind() failure [ 493.356668][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1729'. [ 494.481542][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 494.499148][T12563] bond0: entered promiscuous mode [ 494.504768][T12563] bond_slave_0: entered promiscuous mode [ 494.510867][T12563] bond_slave_1: entered promiscuous mode [ 494.517832][T12563] bond0: left promiscuous mode [ 494.523513][T12563] bond_slave_0: left promiscuous mode [ 494.529331][T12563] bond_slave_1: left promiscuous mode [ 494.606748][ T5905] usb 4-1: USB disconnect, device number 119 [ 494.631832][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 494.652458][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 494.673056][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.707603][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.718607][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.729054][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.743230][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.754370][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.860391][T12567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1737'. [ 494.884728][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1737'. [ 494.970340][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 494.979358][ T9] usbtmc 3-1:16.0: can't read capabilities [ 495.182906][ T5922] usb 3-1: USB disconnect, device number 119 [ 495.201985][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1739'. [ 495.287242][ T5919] usb 5-1: USB disconnect, device number 119 [ 495.625387][T12583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1741'. [ 496.106479][T12594] tipc: Started in network mode [ 496.111768][T12594] tipc: Node identity 66fc92e8a3e5, cluster identity 4711 [ 496.119915][T12594] tipc: Enabled bearer , priority 0 [ 496.136753][T12594] syzkaller0: entered promiscuous mode [ 496.150399][T12594] syzkaller0: entered allmulticast mode [ 496.174538][T12594] tipc: Resetting bearer [ 496.182132][T12592] tipc: Resetting bearer [ 496.202122][T12592] tipc: Disabling bearer [ 496.479300][T12601] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan1 [ 496.531772][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 496.723119][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 496.730560][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 496.742156][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 496.755168][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 496.794813][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8 [ 496.804350][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.813298][ T9] usb 3-1: Product: syz [ 496.817724][ T9] usb 3-1: Manufacturer: syz [ 496.824452][ T9] usb 3-1: SerialNumber: syz [ 496.861378][ T9] usb 3-1: config 0 descriptor?? [ 496.885843][ T9] usbtest 3-1:0.0: couldn't get endpoints, -22 [ 496.892343][ T9] usbtest 3-1:0.0: probe with driver usbtest failed with error -22 [ 497.035181][T12609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1751'. [ 497.542604][T12620] fuse: Bad value for 'fd' [ 497.911445][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 498.128784][ T30] audit: type=1326 audit(1764774953.465:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 498.161085][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 498.171912][ T9] usb 2-1: too many configurations: 98, using maximum allowed: 8 [ 498.182758][ T9] usb 2-1: config 6 has no interfaces? [ 498.193597][ T9] usb 2-1: config 6 has no interfaces? [ 498.202048][ T9] usb 2-1: config 6 has no interfaces? [ 498.208870][ T5955] usb 3-1: USB disconnect, device number 120 [ 498.209916][ T9] usb 2-1: config 6 has no interfaces? [ 498.222024][ T9] usb 2-1: config 6 has no interfaces? [ 498.228661][ T9] usb 2-1: config 6 has no interfaces? [ 498.238020][ T9] usb 2-1: config 6 has no interfaces? [ 498.247010][ T9] usb 2-1: config 6 has no interfaces? [ 498.266528][ T30] audit: type=1326 audit(1764774953.465:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 498.437278][ T5919] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 498.561056][ T30] audit: type=1326 audit(1764774953.465:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 498.641114][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 498.682584][ T9] usb 2-1: string descriptor 0 read error: -71 [ 498.712197][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 498.741051][ T30] audit: type=1326 audit(1764774953.465:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 498.763076][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 498.763336][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.857039][ T30] audit: type=1326 audit(1764774953.465:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 498.879432][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.885472][ T9] usb 2-1: rejected 8 configurations due to insufficient available bus power [ 498.953153][ T9] usb 2-1: no configuration chosen from 8 choices [ 498.981054][ T30] audit: type=1326 audit(1764774953.465:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 499.032031][ T9] usb 2-1: USB disconnect, device number 113 [ 499.034211][ T5919] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 499.048390][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.079417][ T30] audit: type=1326 audit(1764774953.465:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 499.115999][ T5919] usb 4-1: config 0 has no interface number 0 [ 499.143644][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 499.159018][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.175427][ T30] audit: type=1326 audit(1764774953.465:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 499.197720][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.212883][ T5919] usb 4-1: Product: syz [ 499.221096][ T5919] usb 4-1: Manufacturer: syz [ 499.225825][ T5919] usb 4-1: SerialNumber: syz [ 499.258785][ T5919] usb 4-1: config 0 descriptor?? [ 499.292075][ T5919] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 499.299982][ T30] audit: type=1326 audit(1764774953.465:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 499.324881][ T5919] uvcvideo 4-1:0.105: No valid video chain found. [ 499.344475][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.355462][ T30] audit: type=1326 audit(1764774953.465:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.3.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febad98f749 code=0x7ffc0000 [ 499.388516][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.487896][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.533000][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.533403][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.057570][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.061970][ T5919] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 500.066940][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.097792][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.438730][T12669] vcan0: tx address claim with dest, not broadcast [ 501.264466][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.270910][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.334646][T12684] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 501.369412][ T5955] usb 4-1: USB disconnect, device number 120 [ 501.407637][T12684] bond1 (unregistering): Released all slaves [ 501.741675][T12693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.841095][ T5970] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 501.951166][ T5955] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 502.006341][ T5970] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 502.015917][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.025151][ T5970] usb 4-1: Product: syz [ 502.029470][ T5970] usb 4-1: Manufacturer: syz [ 502.034738][ T5970] usb 4-1: SerialNumber: syz [ 502.045790][ T5970] usb 4-1: config 0 descriptor?? [ 502.059747][ T5970] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 502.174328][ T5955] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 502.182602][ T5919] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 502.193183][ T5955] usb 2-1: config 0 has no interface number 0 [ 502.200663][ T5955] usb 2-1: config 0 interface 91 has no altsetting 0 [ 502.569830][T12707] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1776'. [ 502.575446][ T5955] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 502.591164][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 502.600285][ T5919] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 502.614438][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.622689][ T5919] usb 5-1: config 0 has no interface number 0 [ 502.633996][ T5919] usb 5-1: config 0 interface 106 has no altsetting 0 [ 502.643063][ T5955] usb 2-1: config 0 descriptor?? [ 502.671931][ T5919] usb 5-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 502.697004][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.726680][ T5919] usb 5-1: Product: syz [ 502.736852][ T5919] usb 5-1: Manufacturer: syz [ 502.749583][ T5919] usb 5-1: SerialNumber: syz [ 502.788809][ T5919] usb 5-1: config 0 descriptor?? [ 502.813624][ T5919] cdc_phonet 5-1:0.106: probe with driver cdc_phonet failed with error -22 [ 502.877317][ T5955] usb 2-1: string descriptor 0 read error: -71 [ 502.889009][ T5955] uvcvideo 2-1:0.91: Found UVC 0.00 device (174f:5212) [ 502.897547][ T5955] uvcvideo 2-1:0.91: No valid video chain found. [ 502.933426][ T5955] usb 2-1: USB disconnect, device number 115 [ 503.223170][ T5970] gspca_stk1135: reg_w 0x2 err -110 [ 503.229442][ T5970] gspca_stk1135: serial bus timeout: status=0x00 [ 503.283734][ T9] usb 5-1: USB disconnect, device number 120 [ 503.291249][ T5970] gspca_stk1135: Sensor write failed [ 503.306019][ T5970] gspca_stk1135: serial bus timeout: status=0x00 [ 503.340289][ T5970] gspca_stk1135: Sensor write failed [ 503.350310][ T5970] gspca_stk1135: serial bus timeout: status=0x00 [ 503.365003][ T5970] gspca_stk1135: Sensor read failed [ 503.380498][ T5970] gspca_stk1135: serial bus timeout: status=0x00 [ 503.390036][ T5970] gspca_stk1135: Sensor read failed [ 503.407618][ T5970] gspca_stk1135: Detected sensor type unknown (0x0) [ 503.455646][ T5970] gspca_stk1135: serial bus timeout: status=0x00 [ 503.477832][ T5970] gspca_stk1135: Sensor read failed [ 503.491083][ T5970] gspca_stk1135: serial bus timeout: status=0x00 [ 503.507881][ T5970] gspca_stk1135: Sensor read failed [ 503.531685][ T5970] gspca_stk1135: serial bus timeout: status=0x00 [ 503.549793][ T5970] gspca_stk1135: Sensor write failed [ 503.561144][ T5970] gspca_stk1135: serial bus timeout: status=0x00 [ 503.585868][ T5970] gspca_stk1135: Sensor write failed [ 503.611453][ T5970] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 503.965436][T12729] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 503.980228][T12729] team0: Port device batadv1 added [ 504.061529][ T5970] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 504.231101][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 504.238808][ T5970] usb 5-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 504.248048][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 504.273672][ T5970] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 504.285198][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.310329][ T5970] usb 5-1: Product: syz [ 504.319235][ T5970] usb 5-1: Manufacturer: syz [ 504.363520][ T5970] usb 5-1: SerialNumber: syz [ 504.391447][ T5970] usb 5-1: config 0 descriptor?? [ 504.447206][T12731] xt_bpf: check failed: parse error [ 504.643733][ T5955] usb 4-1: USB disconnect, device number 121 [ 504.659573][ T5970] usb 5-1: ignoring: not an USB2CAN converter [ 504.851187][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.872143][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.888486][T12739] syzkaller0: entered promiscuous mode [ 504.894454][T12739] syzkaller0: entered allmulticast mode [ 504.905472][ T9] usb 5-1: USB disconnect, device number 121 [ 505.145366][T12739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1785'. [ 505.662337][ T9] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 505.876968][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 505.889559][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.919463][ T9] usb 4-1: config 0 descriptor?? [ 505.945502][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 506.532261][T12760] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1791'. [ 506.569383][T12762] syzkaller0: entered promiscuous mode [ 506.586319][T12762] syzkaller0: entered allmulticast mode [ 506.771733][ T9] gspca_sunplus: reg_w_riv err -71 [ 506.776984][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 506.793408][ T9] usb 4-1: USB disconnect, device number 122 [ 506.841219][ T5955] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 506.956003][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 507.006109][ T5955] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 507.025289][ T5955] usb 3-1: config 0 has no interface number 0 [ 507.046276][ T5955] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 507.067902][ T5955] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.093806][T12771] vivid-007: disconnect [ 507.199716][ T5955] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 507.210019][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.290827][ T5955] usb 3-1: Product: syz [ 507.299979][ T5955] usb 3-1: Manufacturer: syz [ 507.313758][ T5955] usb 3-1: SerialNumber: syz [ 507.346780][ T5955] usb 3-1: config 0 descriptor?? [ 507.371999][T12760] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 507.386662][ T5955] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 507.513244][ T5955] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 507.720603][T12771] vivid-007: reconnect [ 507.731217][ T5955] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 507.749724][T12787] bridge4: entered promiscuous mode [ 507.775217][ T9] usb 3-1: USB disconnect, device number 121 [ 507.883321][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.904614][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 507.925950][ T5955] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 507.946177][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.965743][ T5955] usb 2-1: config 0 descriptor?? [ 507.983074][T12781] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.304499][ T9] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 508.461661][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 508.486407][ T9] usb 4-1: config 0 has no interfaces? [ 508.501087][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 508.518985][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 508.527753][ T9] usb 4-1: Manufacturer: syz [ 508.542171][ T9] usb 4-1: config 0 descriptor?? [ 508.641346][T12814] random: crng reseeded on system resumption [ 508.741575][ T9] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 508.942714][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.955152][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.970727][ T9] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 509.003505][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.029779][ T9] usb 5-1: config 0 descriptor?? [ 509.131276][ T5919] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 509.315802][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 509.324895][T12809] ip6tnl1: entered allmulticast mode [ 509.365847][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.384273][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.395625][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.480723][ T5919] usb 3-1: SerialNumber: syz [ 509.800588][ T9] usb 5-1: USB disconnect, device number 122 [ 510.620016][ T5955] usbhid 2-1:0.0: can't add hid device: -71 [ 510.652093][ T5955] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 510.724210][ T5955] usb 2-1: USB disconnect, device number 116 [ 511.034334][ T5919] usb 4-1: USB disconnect, device number 123 [ 511.122038][ T5955] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 511.282421][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 511.291501][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 511.314269][ T5955] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 511.342352][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.367769][T12849] input: syz0 as /devices/virtual/input/input57 [ 511.410715][ T5955] usb 2-1: config 0 has no interface number 0 [ 511.445151][ T5955] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 511.539154][ T936] usb 3-1: USB disconnect, device number 122 [ 511.543030][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 511.587802][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.616584][ T5955] usb 2-1: Product: syz [ 511.621825][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.626033][ T5955] usb 2-1: Manufacturer: syz [ 511.635483][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.635519][ T9] usb 5-1: Product: syz [ 511.635535][ T9] usb 5-1: Manufacturer: syz [ 511.635881][ T9] usb 5-1: SerialNumber: syz [ 511.643026][ T9] usb 5-1: config 0 descriptor?? [ 511.673910][ T5955] usb 2-1: SerialNumber: syz [ 511.695565][ T5955] usb 2-1: config 0 descriptor?? [ 511.980502][ T5955] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 511.992587][ T5955] uvcvideo 2-1:0.31: No valid video chain found. [ 512.182862][T12838] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 512.211925][ T5970] usb 2-1: USB disconnect, device number 117 [ 512.642345][T12872] hub 9-0:1.0: USB hub found [ 512.649440][T12872] hub 9-0:1.0: 1 port detected [ 513.261132][ T5955] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 513.523463][ T5955] usb 2-1: device descriptor read/64, error -71 [ 513.845661][ T5955] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 514.008565][ T936] usb 5-1: USB disconnect, device number 123 [ 514.082718][ T5955] usb 2-1: device descriptor read/64, error -71 [ 514.215437][T12859] cgroup: fork rejected by pids controller in /syz3 [ 514.223856][ T5955] usb usb2-port1: attempt power cycle [ 514.581382][ T5955] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 514.616053][ T5955] usb 2-1: device descriptor read/8, error -71 [ 514.871518][ T5955] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 514.905967][ T5955] usb 2-1: device descriptor read/8, error -71 [ 515.063489][ T5955] usb usb2-port1: unable to enumerate USB device [ 515.481132][ T5970] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 515.633218][ T5970] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 515.647874][ T5970] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 515.659880][ T5970] usb 4-1: config 220 interface 0 has no altsetting 0 [ 515.680656][ T5970] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 515.818116][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.841377][ T5970] usb 4-1: Product: syz [ 515.845593][ T5970] usb 4-1: Manufacturer: syz [ 515.850209][ T5970] usb 4-1: SerialNumber: syz [ 516.454925][ T5970] usb 4-1: USB disconnect, device number 124 [ 516.811029][ T5970] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 517.202308][ T5970] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 517.211907][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.220024][ T5970] usb 5-1: Product: syz [ 517.247410][ T5970] usb 5-1: Manufacturer: syz [ 517.269153][ T5970] usb 5-1: SerialNumber: syz [ 517.295584][ T5970] usb 5-1: config 0 descriptor?? [ 517.313652][ T5970] ch341 5-1:0.0: ch341-uart converter detected [ 517.620207][T12959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1832'. [ 517.635636][T12959] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1832'. [ 517.802484][T12949] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1830'. [ 518.059072][T12961] xt_TCPMSS: Only works on TCP SYN packets [ 518.118917][T12961] syzkaller0: entered promiscuous mode [ 518.138295][T12961] syzkaller0: entered allmulticast mode [ 518.434922][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.667804][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.754140][ T5970] ch341-uart ttyUSB0: failed to read break control: -71 [ 518.770787][ T5970] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 518.892302][ T5970] usb 5-1: USB disconnect, device number 124 [ 518.921363][ T5970] ch341 5-1:0.0: device disconnected [ 518.962372][T12972] xt_bpf: check failed: parse error [ 519.822720][ T182] kworker/0:2 (182) used greatest stack depth: 15224 bytes left [ 520.911191][T12994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.971729][T12994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.992415][ T936] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 521.161048][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 521.177097][ T936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.197992][ T936] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 521.231817][ T936] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.252060][ T936] usb 3-1: config 1 interface 2 has no altsetting 0 [ 521.271535][ T936] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.286155][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.309671][ T936] usb 3-1: Product: syz [ 521.321305][ T936] usb 3-1: Manufacturer: syz [ 521.326117][ T936] usb 3-1: SerialNumber: syz [ 521.567192][ T936] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 521.589211][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1846'. [ 521.599833][ T936] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 521.613042][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1846'. [ 521.622319][ T936] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 521.630213][ T936] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 521.638459][ T936] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 521.650295][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1846'. [ 521.706609][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1846'. [ 521.716607][ T936] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 521.728148][ T936] usb 3-1: selecting invalid altsetting 0 [ 521.738627][ T936] usb 3-1: selecting invalid altsetting 0 [ 521.874571][ T936] usb 3-1: USB disconnect, device number 123 [ 521.941653][ T5955] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 521.974101][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.101378][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 522.210679][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1849'. [ 522.423290][ T5955] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 522.431904][ T5955] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 522.443421][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 522.448915][T13027] program syz.2.1849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.475745][ T5955] usb 4-1: config 0 has no interface number 0 [ 522.496376][ T5955] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 522.535469][ T5955] usb 4-1: config 0 interface 104 has no altsetting 1 [ 522.566125][ T5955] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 522.582648][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.643550][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 522.680854][T13033] pimreg: entered allmulticast mode [ 522.699411][ T5955] usb 4-1: Product: syz [ 522.717724][T13034] pimreg: left allmulticast mode [ 522.723303][ T5955] usb 4-1: Manufacturer: syz [ 522.731113][ T5955] usb 4-1: SerialNumber: syz [ 522.816679][ T5955] usb 4-1: config 0 descriptor?? [ 522.838115][ T5955] asix 4-1:0.104: probe with driver asix failed with error -22 [ 523.281790][T13036] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 523.288088][T13036] PKCS7: Only support pkcs7_signedData type [ 523.661411][ T5955] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 523.822024][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 523.837679][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.870714][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 523.918436][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 523.920016][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 523.920037][ T30] audit: type=1326 audit(1764774979.365:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.0.1853" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf19d8f749 code=0x0 [ 524.032400][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 524.060301][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.095126][ T5955] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 524.113250][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.130576][ T5955] usb 3-1: Product: syz [ 524.141962][ T5955] usb 3-1: Manufacturer: syz [ 524.154950][ T5955] usb 3-1: SerialNumber: syz [ 524.175933][ T5955] usb 3-1: config 0 descriptor?? [ 524.404720][ T5955] appledisplay: Apple Cinema Display connected [ 524.611575][ T5970] usb 3-1: USB disconnect, device number 124 [ 524.611631][ C1] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 524.635980][ T5970] appledisplay: Apple Cinema Display disconnected [ 524.938257][T13050] loop9: detected capacity change from 0 to 7 [ 524.938606][ T5955] usb 4-1: USB disconnect, device number 125 [ 524.964017][T13050] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 524.989147][T13050] loop9: partition table partially beyond EOD, truncated [ 525.033183][T13050] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 525.044910][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 525.122290][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1856'. [ 525.414208][T13064] pim6reg: entered allmulticast mode [ 525.426083][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 525.514969][T13063] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1859'. [ 525.578990][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 525.597848][T13063] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1859'. [ 525.611232][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 525.991230][ T5955] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 526.151112][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 526.164667][ T5955] usb 5-1: descriptor type invalid, skip [ 526.178720][ T5955] usb 5-1: config 0 has no interfaces? [ 526.195126][ T5955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 526.221426][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.240985][ T5955] usb 5-1: Product: syz [ 526.245196][ T5955] usb 5-1: Manufacturer: syz [ 526.249809][ T5955] usb 5-1: SerialNumber: syz [ 526.281767][ T5955] usb 5-1: config 0 descriptor?? [ 526.502466][T13073] fuse: Unknown parameter 'no€' [ 526.667947][ T5970] usb 5-1: USB disconnect, device number 125 [ 527.711173][ T5922] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 527.821739][ T5970] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 527.944138][ T5922] usb 5-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 527.955445][ T5922] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.991033][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 527.997171][ T5922] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.056033][ T5922] usb 5-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 528.084768][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 528.143712][ T5970] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 528.154659][ T5970] usb 3-1: config 0 has an invalid interface number: 104 but max is 1 [ 528.329652][ T5970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 528.355135][ T5970] usb 3-1: config 0 has no interface number 0 [ 528.373494][ T5922] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 528.385164][ T5970] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 528.416945][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.425270][ T5970] usb 3-1: config 0 interface 104 has no altsetting 1 [ 528.463851][ T5922] usb 5-1: config 0 descriptor?? [ 528.504273][ T5970] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 528.564193][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.587051][ T5970] usb 3-1: Product: syz [ 528.596353][ T5970] usb 3-1: Manufacturer: syz [ 528.611037][ T5970] usb 3-1: SerialNumber: syz [ 528.812616][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.091714][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.117244][ T5970] usb 3-1: config 0 descriptor?? [ 529.143111][T13110] bond2: Unable to set down delay as MII monitoring is disabled [ 529.154269][ T5970] asix 3-1:0.104: probe with driver asix failed with error -22 [ 529.380056][T13110] bond2 (unregistering): Released all slaves [ 529.523565][T13123] usb usb8: usbfs: process 13123 (syz.0.1875) did not claim interface 0 before use [ 529.535451][T13122] sctp: [Deprecated]: syz.0.1875 (pid 13122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.535451][T13122] Use struct sctp_sack_info instead [ 529.821643][ T5922] usbhid 5-1:0.0: can't add hid device: -71 [ 529.870811][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 529.931981][ T5922] usb 5-1: USB disconnect, device number 126 [ 530.052380][T13131] netlink: 'syz.0.1876': attribute type 13 has an invalid length. [ 531.068025][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1872'. [ 531.267440][ T5970] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 531.468794][ T5970] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.530660][ T5970] usb 5-1: config 0 has no interface number 0 [ 531.568336][ T5970] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 531.597068][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 531.616656][ T5955] usb 3-1: USB disconnect, device number 125 [ 531.650470][ T5970] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 531.684423][ T5970] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 531.730004][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.774259][ T5970] usb 5-1: config 0 descriptor?? [ 531.784102][T13137] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 531.842488][ T5970] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 531.981178][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 532.008902][ T5922] usb 5-1: USB disconnect, device number 127 [ 532.300832][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 532.374677][T13152] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 532.931777][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1886'. [ 533.576309][T13178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1523369646 (12186957168 ns) > initial count (699924040 ns). Using initial count to start timer. [ 533.962407][ T5922] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 534.131122][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 534.144464][ T5922] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 534.154498][ T5922] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 534.167730][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.182463][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.196094][ T5922] usb 2-1: Product:  [ 534.205597][ T5922] usb 2-1: Manufacturer: Ñ‹ [ 534.212407][ T5922] usb 2-1: SerialNumber: syz [ 534.324527][T13192] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 534.640310][ T5922] cdc_ncm 2-1:1.0: bind() failure [ 534.677597][ T5922] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 534.695155][ T5922] cdc_ncm 2-1:1.1: bind() failure [ 534.726993][ T5922] usb 2-1: USB disconnect, device number 122 [ 535.753159][T13212] input: syz0 as /devices/virtual/input/input58 [ 535.913594][ T5955] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 536.266502][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.283317][ T5955] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 536.293002][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.337659][ T5955] usb 5-1: config 0 descriptor?? [ 536.367374][ T5922] IPVS: starting estimator thread 0... [ 536.378974][ T5955] pwc: Askey VC010 type 2 USB webcam detected. [ 536.481640][T13224] IPVS: using max 26 ests per chain, 62400 per kthread [ 536.583290][ T5955] pwc: recv_control_msg error -32 req 02 val 2b00 [ 536.586577][ T30] audit: type=1326 audit(1764774992.035:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13209 comm="syz.4.1897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4eb978f749 code=0x0 [ 536.773922][ T5955] pwc: recv_control_msg error -71 req 02 val 2700 [ 536.944250][ T5955] pwc: recv_control_msg error -71 req 02 val 2c00 [ 536.961199][ T5955] pwc: recv_control_msg error -71 req 04 val 1000 [ 537.011301][ T5955] pwc: recv_control_msg error -71 req 04 val 1300 [ 537.030886][ T5955] pwc: recv_control_msg error -71 req 04 val 1400 [ 537.054224][ T5955] pwc: recv_control_msg error -71 req 02 val 2000 [ 537.076547][ T5955] pwc: recv_control_msg error -71 req 02 val 2100 [ 537.116547][ T5955] pwc: recv_control_msg error -71 req 04 val 1500 [ 537.149223][ T5955] pwc: recv_control_msg error -71 req 02 val 2500 [ 537.176741][ T5955] pwc: recv_control_msg error -71 req 02 val 2400 [ 537.197331][ T5955] pwc: recv_control_msg error -71 req 02 val 2600 [ 537.205266][ T5955] pwc: recv_control_msg error -71 req 02 val 2900 [ 537.216238][ T5955] pwc: recv_control_msg error -71 req 02 val 2800 [ 537.253665][ T5955] pwc: recv_control_msg error -71 req 04 val 1100 [ 537.293344][ T5955] pwc: recv_control_msg error -71 req 04 val 1200 [ 537.317492][ T5955] pwc: Registered as video103. [ 537.333090][ T5955] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input59 [ 537.359005][ T5955] usb 5-1: USB disconnect, device number 2 [ 537.508733][T13239] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 537.575846][T13243] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.1905'. [ 537.682825][T13248] syzkaller0: entered promiscuous mode [ 537.688357][T13248] syzkaller0: entered allmulticast mode [ 537.881145][ T5922] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 538.051381][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 538.162636][ T5922] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 538.175646][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.192969][ T5922] usb 3-1: config 0 descriptor?? [ 538.235517][ T5922] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 538.449133][ T5922] gspca_vc032x: reg_r err -71 [ 538.467493][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.679891][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.697399][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.711849][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.722118][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.733557][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.749443][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.770768][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.800116][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.810007][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.823256][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.828584][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.854405][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.885791][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.921110][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 538.941722][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 539.081183][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 539.121281][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 539.126636][ T5922] gspca_vc032x: Unknown sensor... [ 539.191180][ T5922] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 539.215054][ T5922] usb 3-1: USB disconnect, device number 126 [ 539.541352][ T5922] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 539.692925][ T5922] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 539.708316][ T5922] usb 3-1: config 0 has no interface number 0 [ 539.731266][ T5922] usb 3-1: New USB device found, idVendor=12ef, idProduct=0100, bcdDevice=f0.7a [ 539.748162][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.767027][ T5922] usb 3-1: Product: syz [ 539.780297][ T5922] usb 3-1: Manufacturer: syz [ 539.793461][ T5922] usb 3-1: SerialNumber: syz [ 539.841364][ T5922] usb 3-1: config 0 descriptor?? [ 539.849404][ T5922] usb 3-1: active config #0 != 1 ?? [ 540.175119][T13290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.184037][T13290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.294349][ T5970] usb 3-1: USB disconnect, device number 127 [ 540.761677][ T5970] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 540.943926][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 540.966174][ T5970] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 540.979870][ T5970] usb 3-1: config 8 has no interface number 0 [ 540.997995][ T5970] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 541.023471][ T5970] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.043900][ T5970] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 541.075552][ T5970] usb 3-1: config 8 interface 39 has no altsetting 0 [ 541.089452][T13303] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 541.119250][ T5970] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 541.129109][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.145320][T13305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1920'. [ 541.146281][ T5970] usb 3-1: Product: syz [ 541.165811][ T5970] usb 3-1: Manufacturer: syz [ 541.170484][ T5970] usb 3-1: SerialNumber: syz [ 541.818848][ T5970] ipheth 3-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 542.028308][T13303] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 542.033932][T13307] team0: Port device dummy0 removed [ 542.048923][T13304] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 542.081428][ T5970] ipheth 3-1:8.39: Apple iPhone USB Ethernet device attached [ 542.109536][ T5970] usb 3-1: USB disconnect, device number 2 [ 542.272821][ T5970] ipheth 3-1:8.39: Apple iPhone USB Ethernet now disconnected [ 542.473180][ T5922] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 542.543068][ T6286] [ 542.545443][ T6286] ============================================ [ 542.551602][ T6286] WARNING: possible recursive locking detected [ 542.557775][ T6286] syzkaller #0 Not tainted [ 542.562204][ T6286] -------------------------------------------- [ 542.568345][ T6286] kworker/u8:20/6286 is trying to acquire lock: [ 542.574571][ T6286] ffffe8ffffdb6fd8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 542.583808][ T6286] [ 542.583808][ T6286] but task is already holding lock: [ 542.591183][ T6286] ffffe8ffffdc8808 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 542.600405][ T6286] [ 542.600405][ T6286] other info that might help us debug this: [ 542.608460][ T6286] Possible unsafe locking scenario: [ 542.608460][ T6286] [ 542.615932][ T6286] CPU0 [ 542.619208][ T6286] ---- [ 542.622481][ T6286] lock(&pd_list->lock); [ 542.626824][ T6286] lock(&pd_list->lock); [ 542.631166][ T6286] [ 542.631166][ T6286] *** DEADLOCK *** [ 542.631166][ T6286] [ 542.639299][ T6286] May be due to missing lock nesting notation [ 542.639299][ T6286] [ 542.647615][ T6286] 3 locks held by kworker/u8:20/6286: [ 542.652975][ T6286] #0: ffff88801df45148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 542.664906][ T6286] #1: ffffc9000b317b80 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 542.676735][ T6286] #2: ffffe8ffffdc8808 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 542.686392][ T6286] [ 542.686392][ T6286] stack backtrace: [ 542.692281][ T6286] CPU: 1 UID: 0 PID: 6286 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 542.692303][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.692314][ T6286] Workqueue: pencrypt_parallel padata_parallel_worker [ 542.692336][ T6286] Call Trace: [ 542.692362][ T6286] [ 542.692369][ T6286] dump_stack_lvl+0x189/0x250 [ 542.692387][ T6286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.692402][ T6286] ? __pfx__printk+0x10/0x10 [ 542.692420][ T6286] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 542.692439][ T6286] ? print_lock_name+0xde/0x100 [ 542.692459][ T6286] print_deadlock_bug+0x279/0x290 [ 542.692477][ T6286] __lock_acquire+0x2540/0x2cf0 [ 542.692492][ T6286] ? __queue_work+0xc43/0xf90 [ 542.692508][ T6286] ? queue_work_on+0x115/0x270 [ 542.692521][ T6286] ? lockdep_hardirqs_on+0x98/0x140 [ 542.692540][ T6286] ? padata_do_serial+0x707/0xb80 [ 542.692560][ T6286] lock_acquire+0x117/0x340 [ 542.692572][ T6286] ? padata_do_serial+0x707/0xb80 [ 542.692597][ T6286] _raw_spin_lock+0x2e/0x40 [ 542.692615][ T6286] ? padata_do_serial+0x707/0xb80 [ 542.692635][ T6286] padata_do_serial+0x707/0xb80 [ 542.692660][ T6286] ? padata_parallel_worker+0x44/0x1d0 [ 542.692680][ T6286] padata_parallel_worker+0x75/0x1d0 [ 542.692700][ T6286] ? process_scheduled_works+0x9ef/0x1770 [ 542.692723][ T6286] process_scheduled_works+0xad1/0x1770 [ 542.692754][ T6286] ? __pfx_process_scheduled_works+0x10/0x10 [ 542.692781][ T6286] worker_thread+0x8a0/0xda0 [ 542.692796][ T6286] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 542.692814][ T6286] ? __kthread_parkme+0x7b/0x200 [ 542.692831][ T6286] kthread+0x711/0x8a0 [ 542.692849][ T6286] ? __pfx_worker_thread+0x10/0x10 [ 542.692862][ T6286] ? __pfx_kthread+0x10/0x10 [ 542.692879][ T6286] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.692893][ T6286] ? lockdep_hardirqs_on+0x98/0x140 [ 542.692909][ T6286] ? __pfx_kthread+0x10/0x10 [ 542.692926][ T6286] ret_from_fork+0x599/0xb30 [ 542.692948][ T6286] ? __pfx_ret_from_fork+0x10/0x10 [ 542.692972][ T6286] ? __switch_to_asm+0x39/0x70 [ 542.692989][ T6286] ? __switch_to_asm+0x33/0x70 [ 542.693005][ T6286] ? __pfx_kthread+0x10/0x10 [ 542.693022][ T6286] ret_from_fork_asm+0x1a/0x30 [ 542.693044][ T6286] [ 543.001024][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 543.009156][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.023080][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.033172][ T5922] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 543.043339][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.092090][ T5922] usb 2-1: config 0 descriptor?? [ 543.517291][ T5922] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 543.591097][ T5919] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 543.717695][ T5970] usb 2-1: USB disconnect, device number 123 [ 543.771117][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 543.790105][ T5919] usb 5-1: config 0 has no interfaces? [ 543.882417][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 543.912768][ T5919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 543.936728][ T5919] usb 5-1: Manufacturer: syz [ 543.949361][ T5919] usb 5-1: config 0 descriptor?? [ 545.964430][ T5919] usb 5-1: USB disconnect, device number 3