last executing test programs: 8.258157651s ago: executing program 1 (id=709): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = syz_usb_connect$uac1(0x28a3de3ee41126b8, 0xe0, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xe7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x6, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x4e}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x1, 0xfa, 0x8, 0xb}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x6, 0x5, "ae07766766"}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x6, 0x5, "6677a4d7fa"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x5, 0x3, [0x25a49a5e6ec68b57, 0x3, 0x4], 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x404, 0x1, 0x9, 0x7, 0x1, 0x8}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x8, '\x00W'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0xc, 0xe, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xa8, 0x1, 0x40, 0x4}, @as_header={0x7, 0x24, 0x1, 0xe1, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x450, 0x9, 0xf, 0xc, {0x7, 0x25, 0x1, 0xc, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x89, 0x0, 0xfe, {0x7, 0x25, 0x1, 0xc, 0x8, 0xb}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0xee, 0x6, 0xdd, 0x20, 0x70}, 0x2b, &(0x7f00000002c0)={0x5, 0xf, 0x2b, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x4, 0x81, 0x0, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x0, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x1, 0x1ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x81, 0x5}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x30, &(0x7f0000000340)=@string={0x30, 0x3, "0e3a4b31de5235b8026ef881c5d9c6fd730ebe99808bd0f66dd8f0a86c80ef5fb1c27ac5ebddd7f8ef406fe18721"}}, {0xaa, &(0x7f0000000380)=@string={0xaa, 0x3, "3eaa4b723b2095b492c334c1c32d427aa3459a3037c1abdc0c31c1367c1890ee86d8023f519064e9909dbf03693d130fd54547b06cd2f95afb57795d48c09a7329957c79df6ed6fa48190aa23145751473f398dbbfaf58baee739f5691f579eced0e3d4a6dd4dd3761000a4e301c25d37917d047bd49b091cf396f9b045dfe71576a9c52628f8a8834c490bf5f50e8e91d79ab5ddb5c5d14e52eb48b43634566f46c3dc98a5785f0"}}]}) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000f80)={{0x12, 0x1, 0x250, 0x76, 0x29, 0x61, 0x8, 0x83a, 0xf511, 0xe609, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x51, 0x7, 0x0, 0xfa, "", [{{0x9, 0x4, 0xd9, 0x7, 0x1, 0xe, 0x1, 0x0, 0x3, [], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x8, 0x8, 0x4}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffc}) 7.807657861s ago: executing program 3 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_usb_connect(0x6, 0xaea, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201010209910d202104e90053c0010203010902d80a030406600609040e81090202ff0f0921002008012247010905030120000140000725010c0000040725010c08be0009050b09080010090626243679db19561060ca7f354f567c7d331b848d18ef5a35eb6b10b0e5a5262ff831e051ddbf67249c92af0fd11c315ed633058633d10e0fe8059e85e5c62a2cfb51b3c4fa4f1497dcb1f7029295145011a5ac859c3c8556aaafcf645ce72602a9f1fcd2326f7286d8c444cf7caa8e91d6cf9f92b0d13ec461763f7c6715c35456568c3a64564d659b720dbdba09050b114000d900030a21975d737bc4032aa00905070010000601090725010c0902003131673216deb926a1dd39796779d7437f60c64342c255ebd0bd809db41c9025b77099ba7672f2664f13b5b46806c9f07109058010200009030407250108030c008c0ad97b87319aa1a7e75fd800fea532fc9fdc378836d23c4dd02e37a3bff024c8868c874c25b6a11b1147be108bc4bca4767f482955fb7ddb81cc3c9c59c7fe15b17743394b9ed8f043b151b789ebd319343a87c630a74bcbefc0cb65303d8f944b812bc490ca3ca156f80da74fa24be866e1c3afe966bf2a7de7b0630a6296ac2d6432d71b1b6707d51eea09050e02ff03049d07430fc6b1793129dd155a89c87db110639295eebaab3d3e9011f7131c4d1947be0ce15f4fa38f38d2b6d959337733e287bd5aac6aa2afaa409691c98398919a8bc162711e11ede8eea3b171e73241d766ede778e670ddfe49c158800222101a3824090506004000090f090725010c00ff070725010c00f6ff0905050840000c08057d0d5b39102bf27403904374fe256d1a1dfbc6cc5a92b4f657348dfd319eae77011b8b2fd63ff08d10884ec7b268f2b7ec848d0386af7e6ee781f344744b096ab5d86bc1bcb67ad7adb12e5506f4cfe9904c5a6ac6150f84df5798195b5491b4972f8ceec254d466178f4f5aa78527518f6feb26dfd497f63cafd4d269090502100800060206a00ca4f17ab265517d3872bbcb91aa16bf99c42eb8f83da0221d86d22031179cce7a80a9dbd4c43703a9d0f28321d283b50d74adf0d6949d530333017abc1f88945603c1d111f25ca4bbaac3a81b64b4b7ca0745ee3f89bf552b42018eaf1e65f4b7f66aa8430fe04e505580eef347021fe9411a499bf0af187a0f8c9d5320ebf59ec80368b359b20b08abd0377c3c876745cddde65f2bc3a645c3d5851f35d40725010c800700090438080affffff060905880310008c0004090502004000430809ed044a036461ef83cd3c629b80fbfbcf872981ca71ae2d97fd183a7560859974e40878af20baf918fa5d9c9488068485450b6867a3986e0533010a9269725fc6ccc4fbccdfae6530ce987cc5713478859c2c48ffea8f27264f4fcd4754b4ca1125f69f18caf5a7cd919c296bcc61f0592d142b7058eacd2d07bb42aefd1d8352299699498c1f30d4320dc073b8b6296f4b3d20b68af605b6e0c977253cb6d6fbd4d1b06908ed406744e1a35c805c5703899117710a788bdada8e9d82c7cedabd0aec69a0ee7014479c23b67b86b906b7da4d94e2f109539dd4f6681619f3f21cbf0cc6508a46c2b444d7bd790409050203400008d200090500000004090809072501000802000725010c0f07000905051040007f0201090509040800bd0001e921340aa1d92d15d2b2fdfe44e93719214c49330de26b70daed3e1b7eaefc21890c87068b062b7bc2c5f86b27d682828e7d940b99d6668f26e4375cff1653dd4341f734d2d7858d4269a62856b6e1248282e13f2cfeca8c6830a42074e498f53eac55231c26f53bc912db979652932caee3163fc37018114febd46a94cafba4e7e95d032ba00e75ee7db6c034aeb63d6021ef5c919c9bae2768b94165c4419443581d6aba384349e810cd4a03f2cdc22a659239a685bd2958e98156d1f2951402d860002160a2c0b48fd1cce35d4804017125e117c432e8cd9aba07d28d1567c12211b66064d927d90725010c7f020009058f0100048106060725010405000009050d0208000303098a09973d222a2c1e0f1ff13f15b825011c278cf6c5582ae8efe5f63b98689c4a07ad1fbb9b262bc5616d64e90bf917fac7ec321ac9d8fe9775d00b647297c7f9a929c0f64cf56ea5894269b02cdee9abfbde8f6b27d47b4bdaf4dba8a8624976e9420a59c294029937fc5971115cd6f85010399b140cb737a580a376edbec5d0b9a333693d1d6b0bae01b10a7c081335aa32704ae19aaee399fc618440efaed8ac38c278bbb4ce612f05ca6438413ec1857c4da5705514e0bc1993f958eb7d70e14d5e261d2779ba5a24745555b9ebc679ea2386694f1f523ceb3c48b7829bf38ed43f60514c53d0a9ea3bf6197691d8eb75286f814fb8986ca1d53a8d7710ef2e70ea926a036a5a214dab4c078f2b63fb1bf6dd54fce0eee53bd3ce258a3baf8f440a3c2f29487ad40c24f4eb3b394a224c4e6ef56a75122593bc0905000cff0306029c0905040c0800040306090442090d2261f9fa0921ff7f080122b1010905020c10009005230725010404810009050002ff03fa03040905000120007a010b8609c52840e1e1ac80c8f4986884da0f1d2d73ba0da8eca788018f2e9010035111bac1ebf61fd8cd146115fb664994d84c725fd1edb1675fdbf0fbadd4dbf96dc6feccba7ede486e3b1fcf303b123e47ae981cd1b03607792c203d5a13f04c7912b7cc82472281596cda0a4e56a805809f795b4b0fecc6a686c4986e8370f13483ffd58250f909050900080000d105b2048a42e93f5c1fdc91e511b70dc6dc6f3ae2a075c1688a2e24ff15560c513dd58ca88246fff5892876468ffd6833c84a352569c169578aa5e6b8cc297bb3ffb00a7a7013380623540b3a57477b7fc8cd2f5a2fffe0e6a9f9c6b2970161cb6d51174068ddbd7435fc0404eac65e2e51f11e0978249e6e097519f02aeef54bcda52808e9eb3478a66674acb27009fb547eb0344da234d13804f5fbc47c85a7bf2c3d4f7e7ec63463e0755d938644bf97bc6f09050c02100000090d0725010492011b09050d001000120b080725010c09ff00090505100004c0060709050910ff030905034f305e15090ed154852ce29148fc432f0e11020a5ba5ae4704b0e67b1b25b142dce6047786470d57ab4f677f4935780e05ed889b1aa2160b11eb8424d7602fec458154c371e246070c7ccd8711f5c12709c7eda824c34924ce711c093133ea0628508af72909b63f7415d539d255d70da4b8d141f5f509050200080005020707250100e9060007250108210900090502102000090580be098a6dde9fbc210d7f7a01cea058f5aaeb13d0b51f05eecac012ee57b3d52ba2daac46973fa969a770dbc19a6999c6d7516e868acb92e958f34e2d7362bec8a2000a0a0b7d4be4abd06617d233d4e6907231027fb172acf9cc4602e0d3c6ae0e479dabd74f22ad05db0c6e96b6d23cf000dbe3ebf68ccf33851b4c2a618708de597041b6c3bf5bf916f8b771e76fd65b4a8599df6d20729bc7c39c8586fc2df37c9ea266c658dbcdfcab12c1475ae51f0bcbf854d41ba3ae9fec302cb5090505044000017f07090505080800050402050576d3c909050e0c0004090d052710c5495f67f901943b459480a68cd04fb14793bb1fc953d0fb662beeb40a05f216c65d78ff539709e52ebe075a6d781b089a448dc78dd3c1153910048c8cce25065a56cc6f5b3f28eb67377c91314675956b99fab6fdd5394a2d4a0c95de04d9a1790df3cf0522887f53b9ce1a00a75efd6857628afb0c8c627fe3e5a6baa81f6feced0546626b8aa38fef62727ee408bdfe466c32454ff8117aa9978c86f5a7f9acfa3d3929799c164a649ba298d9a8564a5af68ace28deea12ef6be9620a41fc168639a867fe8bdab8fcceb408c956fdb51a5cd792dd025565307423b5965ebeeff4eef031aad1b2031fb9f97fa934d1b95800"/2862], &(0x7f0000000f40)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x50, 0x2, 0xe, 0x5, 0x20, 0xd}, 0xf, &(0x7f0000000dc0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xb, 0xe, 0x5}]}, 0x3, [{0x85, &(0x7f0000000080)=@string={0x85, 0x3, "d57172a45c43cb61d80b662f4e8611704edadc1eab64dca72064f94a600028f55c5204f90bf2066f5974be04cbc6be43481c187f1cae980706561021f753b6eb7f996f43ceaec321bd386e8680326b6b602e149c57cfeb42bbdf4f04083f1a190d0ca724c13c178ef9719f442c5e61b642a13dd91cb0d06792049950e38c47d4628e41"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x446}}, {0x88, &(0x7f0000000e80)=@string={0x88, 0x3, "816f490785c02b11a023020d070fff0460d1076b5bc415c03364892c324c0338d596d00f2d94fc9e9d79eb67bf30303d3ef3fc2d0f0c13f28fdf7300abff43b29b148dff1762f2b19c684e8b529f73d0835d322132e4080679ca12a142d25b34021c929aba53d909c094b99191193dba3051d554c2bd58336207b1f8a617930a8020bc31d39f"}}]}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000140), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f00000001c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f7f0c39b037234633f6", 0x2f}, {&(0x7f0000001ac0)="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", 0xf2c}, {&(0x7f0000002a00)="431a7a17487bad5fc2a2f2f83ec94db2073eae507b", 0x15}, {&(0x7f0000002a40)="eb3a395797dea5ce2270d88508a7635149", 0x11}, {&(0x7f0000002a80)="a00b", 0x2}], 0x5}, 0x48800) (async) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x80000000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100, 0x1}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000500)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x14}], 0x0, 0x0, 0x0}) (async, rerun: 32) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x3, 0x0, 0x0) (rerun: 32) 6.655847393s ago: executing program 3 (id=713): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) syz_clone(0x2042480, &(0x7f0000000140)="f98f9cb769836043badbc0144d7b4206dd69f872073dfd641b81068ad3916b3b55466de9413022", 0x27, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="10ce26e911819b24e0694fbe145ba3028573039efe6aeb9bb2b28b8f4c5bb0e4729590971d21a80b7a523741a06fbce15b3fc521babbd87caa753fd4b946c8d285d6fd5f3105c5b32363c78228286b9e6c9239a3b4b0f3ee395ce95decce159fbc801643cf40164d9e54") (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e20, 0xff, @empty, 0xe}}, 0x0, 0x0, 0x1d, 0x0, "020602c431ee4eed18bcdf9bade9919b2e9088a80d94fabc05ddefcec013240a728cdd9f47964fc3c013ce6ad4c3c609f21ea5f3848a5fb0bbbdf311f9d8a156441a6a97d5b636ce0c025d22183bfd29"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0xe4772000) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 6.56097373s ago: executing program 1 (id=714): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000580)='f2fs\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002f000900270c7000fddbdf250500000008000a000b"], 0x1c}, 0x1, 0x0, 0x0, 0x20008033}, 0x40844) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x0, 0x0, 0x800) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000b40), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000d40)=@conn_svc_rsp={0x0, 0x0, 0x0, "7c79be75", {0x3, 0x2, 0x0, 0x6, 0x8, 0x8}}) socket$inet6(0xa, 0xa, 0xe90) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000d80)=0x2, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000dc0), 0x802, 0x0) syz_open_dev$evdev(&(0x7f0000000e00), 0x7, 0x1) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000e40)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'bridge_slave_0\x00'}) r6 = syz_open_dev$video4linux(&(0x7f0000000f00), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000f40)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x8, 0x2}}) connect$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x2, 0x4e20, @local}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4005, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) syz_open_dev$video(&(0x7f0000001000), 0x4, 0x2) 6.412290789s ago: executing program 3 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e000000140002800800010064"], 0x4c}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r2 = syz_io_uring_setup(0x6330, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x0, 0x140055}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000440)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000480)=[{r6, 0x40}], 0x1, 0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$hidraw(&(0x7f0000000740), 0x0, 0x14a042) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r7 = open$dir(&(0x7f0000000040)='./file0\x00', 0xd2100, 0x4) mkdirat(r7, &(0x7f0000000080)='./file0\x00', 0x47) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100001000200000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e0000001400028008000100640000000800030002"], 0x4c}}, 0x0) 6.012228965s ago: executing program 3 (id=720): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) pipe2$9p(0x0, 0x81800) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r7, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r8, r6}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xee01, 0xee00}}, './file0\x00'}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000a80)={0xa0, 0x19, 0x1, {0x8, {0x0, 0x2, 0x6}, 0x38, r10, 0x0, 0x6, 0x3ff, 0x9, 0x4, 0xf8b, 0xa3f7, 0x7, 0x1000, 0x0, 0x9, 0x100, 0x800000000000, 0x2, 0x6, 0x3}}, 0xa0) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, 0x0, &(0x7f00000001c0)=0x28) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = dup(r17) syz_ublk_setup_queues(r18, r16, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r12}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r12}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) setns(r9, 0x2000000) syz_ublk_setup_queues(0xffffffffffffffff, r16, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x6, 0x14c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x71ea, 0x8, 0x2000, 0x35f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x400, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x451e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) openat$cgroup_int(r18, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000591b00224e0000", 0x58}], 0x1) 5.018330741s ago: executing program 4 (id=724): syz_usb_connect(0x0, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="1201c90253f50108e2153900bcd10102030109370f0001044bbe090904da0400dd470401"], &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000002c0)=""/14, &(0x7f0000000300)=0xe) connect$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d00)={'dummy0\x00', &(0x7f0000000d40)=@ethtool_perm_addr={0x4b, 0x2e, "26270000000000000000f363e1599b0586fc14c4b2013242dee38ba79bac1d65a4ab22fbd38e3871cf35b010fe9f"}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000e40)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905846b6a946ab644d1d8c408070ed3757ab823be402c065eecb977a5fb0c443f270779ddbe3a5fee3187b66c8c37a92f784a692028f4758614821ab9eecab76e495438326349b81c6dca5bcfebbae09d8e7e4209dd587eedf9d2e8bb46e1"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000002aa4415e480892f9c02623000000005434ce0dc51eac98ac8f2cd71dc26f9cf6346b7278ceda128dbe5926ed5cb4db", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) syz_usb_connect$uac3(0x4, 0x12b, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x310, 0x2, 0x7, 0x4, 0x40, 0xf}, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="270f160002071002142c03000a10030208009f040000"], 0x2, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x3421}}, {0x2, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r8 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) wait4(r8, &(0x7f00000007c0), 0x80000000, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000bc0), 0x2, 0x1) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000c00)={&(0x7f0000000200)=[{0x0, 0x800, 0x0, &(0x7f0000000080)="a3257729aeab6ff9adb4469bfccd68a8a1ede9da2e1e4417b35936946b61a1ab6d50764af931904f0bc9ee7afdcb5463650fab8a3e64c9a18d5fc8a6978defea1b07da8f501981f108dddad50e8a9dd6afefb53ee202ade898bfd89b1f4ad54b2366c242cec028a12b04b2ebba32"}, {0x1, 0x800, 0x0, &(0x7f0000000100)="8ed46946bb726bcd835c2c32b41ceeda5de9b610ef168c973512b27c8826fadcb5a644b411b9fa34c576118c546a45dc0996f058d1f5b2c09e3809466f7721018a4ddb9588c94dc910e9492bb048bc300e6cc3a5b85af8e0398a5331f126b2ebca1a05e89e98679d63aad879cca223da4bee078dc694408f800b842e3bd480ba6dc503eac62700185496356dd031f41273068f4da177e8bedb65929881623bcdd39b9b5ba79fa596ffe706180238dda6cdc4f2fd6cba3dc2c7ccc4e9e6adbef25649ca597b964227b938856ae567fe907a405c1348d12b8986f4500b67272e5e0183123eafa4a413ea9941ca94c3"}], 0x1}) 4.804351779s ago: executing program 3 (id=725): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000002c0)) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000300)={0xffffffffffffffff, 0x1, 0x4000, 0x4000}) mmap(&(0x7f000055e000/0x1000)=nil, 0x1000, 0x2, 0x8031, r3, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_list_modules(&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=0x7b, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_VDPA_SET_GROUP_ASID(r4, 0x4008af7c, &(0x7f00000003c0)={0x0, 0x8000}) write$UHID_INPUT(r4, &(0x7f0000000400)={0xc, {"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", 0xffffff20}}, 0x1006) r5 = syz_open_dev$mouse(&(0x7f0000001440), 0x4, 0x2) symlink(&(0x7f0000001480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002480)='./file0\x00') lsetxattr$security_capability(&(0x7f00000024c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000034c0), 0x0, 0x0, 0x1) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003500), 0x180001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000003540)={{0x0, 0x2, 0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x5422, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000003580)={0x28, 0x3, 0x0, 0x0, &(0x7f00008c4000/0x4000)=nil, 0x4000, 0x9aa}) socket$alg(0x26, 0x5, 0x0) r7 = add_key$keyring(&(0x7f00000035c0), &(0x7f0000003600)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f0000003640), &(0x7f0000003680)={'fscrypt:', @auto=[0x35, 0x32, 0x65, 0x39, 0x34, 0x36, 0x474809c125fb67c7, 0x63, 0x38, 0x61, 0x61, 0x30, 0x63, 0x30, 0x64, 0x32]}, &(0x7f00000036c0)={0x0, "7f40af1efefbb50e24d0308967ccf3874ec63cc3da27667d5c3fad87345f89fd4caf60d7ec4fd3604364a226d1700000000000005317e2d36a0000002000", 0x35}, 0x48, r7) keyctl$search(0xa, r7, &(0x7f0000003740)='keyring\x00', &(0x7f0000003780)={'syz', 0x2}, r8) 4.661510524s ago: executing program 1 (id=726): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r7, 0x1, 0x0) ptrace$setregset(0x4205, r7, 0x1, 0x0) r8 = dup(r6) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = dup(r5) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(r9, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x40000000, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ptrace$setopts(0xffffffffffffffff, r7, 0x9, 0x1) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001200ffffff7f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.947354617s ago: executing program 0 (id=729): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd29, 0x25dfdbfe, {0xa, 0x14, 0x20, 0xd, 0x5, 0x0, 0x0, 0x5, 0x18}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x48040) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000100)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}) close_range(r0, r0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x0, 0x4b, 0x2, 0x4}, {0x8, 0x20000000, 0x8d41, 0x7}], 0x2, 0x20, 0xdcb, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xea}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000240)) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0xc, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'pim6reg\x00', 0x0}) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000400)={&(0x7f0000000340)="c2c6e34cc49d94bae8f0afa07e99720ba918a6e2973e57a90a2d9e4e62dbe8d9f71705b3f14bc38314bdcc035f499240d70d", 0x32, &(0x7f0000000380)=""/77, 0x4d}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000540)={r2, &(0x7f0000000440)='\x00', 0x109101, &(0x7f0000000480)={@_ha_fsid={[0x6, 0x8]}, {0xc, 0x10, 0x2, 0x1d}}, 0x6, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x7fff}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x1406, 0x230, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x30) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f00000006c0)={0xc}) lseek(r1, 0x6, 0x1) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000700)='/proc/asound/card2/oss_mixer\x00', 0x221000, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000740)={0x7f, r6, 0x1a, {0xf, 0xfffffffffffffffc}, 0x3}, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000780)={0x2, 0x5}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000800)={r7, 0x8005}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x348, 0x210, 0xffffffff, 0xf0, 0x0, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000840), {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @loopback}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'vxcan1\x00', 'syzkaller1\x00', {0xff}, {}, 0x3c, 0x6, 0x2, 0x40}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'team0\x00', {0xffffffffffff65ab}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0x0, 0xff, 0xff, 0xffffffff], [0xff, 0x0, 0xffffffff, 0xff], 'pimreg1\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x0, 0x8, 0x5, 0x57}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x8, 0x3, 0x4, 0x3, 0x80, 0x800}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xb, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @icmp_id=0x66, @port=0x4e22}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}, @ipv4=@multicast2, @gre_key=0x4, @gre_key=0x8}}}, {{@ipv6={@private1, @local, [0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'nr0\x00', 'ip_vti0\x00', {}, {0xff}, 0x2c, 0x2, 0x1, 0x40}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x6}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x15, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}, @ipv4=@private=0xa010102, @port=0x4e21, @gre_key=0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) write$6lowpan_enable(r4, &(0x7f0000000e80)='1', 0x1) ioctl$MEMLOCK(r1, 0x40084d05, &(0x7f0000000ec0)={0x2, 0x8}) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000f40)=@overlay={0x100, 0x2, 0x4, 0x400, 0x9, {r8, r9/1000+60000}, {0x3, 0x2, 0xf7, 0x4, 0xc0, 0x4, "889de31c"}, 0x4, 0x3, {}, 0x7fffffff, 0x0, r4}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r2) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x150, r10, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x792}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xeb5}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x44090}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001240)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4841) 3.863219206s ago: executing program 0 (id=731): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x7a) getdents(r0, &(0x7f00000000c0)=""/32, 0x20) syz_usb_connect(0x3, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002e1f36a087205feca07440102030109022b000101099005090408070224d86c0509058000000408040609051103000200041c0705c1", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}) 3.601875296s ago: executing program 1 (id=732): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x4, {0xffff8001, 0x9, 0xe44, 0x2}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2000000d}) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0xfffffdda) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002340)={0x20000, 0x1, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000002500)={0x33, &(0x7f0000002380)=[{0x39, '\x00', @buffer={"a86f7eb24a322ac1116d6fc768ea760e7c109afce6484169db7e4c42f13b3e55", 0x20}, 0x2}, {0x42, '\x00', @data=0x8, 0x5ba}, {0x50, '\x00', @st={0x4, [{0x0, @uvalue=0x9}, {0x1, @uvalue=0xffffffff00000000}, {0x1, @svalue=0x6}, {0x2, @svalue=0x8}]}, 0x1}, {0x3b, '\x00', @data=0x7, 0x2}, {0x36, '\x00', @buffer={"ab3ff1c4b420395e940533eec4172049ecc55c3da3e826d7e2d64cd5ea960bca", 0x20}, 0x1}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.480006803s ago: executing program 1 (id=733): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x74, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000340)='udf\x00', 0x1) (async) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000480)={0x14}, 0x14) (async) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000380)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) (async) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x3, @local, 0x1}, 0x1c) (async) listen(r4, 0x9) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0xffe1, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24e400000000000000000000000000000700000508000340000000010800034000000000"], 0x24}, 0x1, 0x0, 0x0, 0x987471c627fb563c}, 0x400c5) 2.833753979s ago: executing program 2 (id=734): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x143102) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_ublk_setup_io_uring(0x1f, &(0x7f00000003c0)={0x0, 0x30b6, 0x2, 0x2, 0x158}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000500)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000540)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=r2], 0x38}}, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz0\x00', {0x9, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x21, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x480, 0x808, 0xc, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3c, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x7f, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xd, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x4, 0xe, 0x312, 0x78, 0xea4, 0x7, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0xa7dd, 0x0, 0x6, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xac, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x3, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc6, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xf40, 0x800, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) unshare(0x2c020400) ppoll(&(0x7f0000000ac0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000580)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff}]}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x7000, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0xffff, 0x0, 0x2, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1, 0x0, 0x0, 0x40000}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)) fcntl$lock(r4, 0x410, &(0x7f00000005c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utimensat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) 2.540018726s ago: executing program 1 (id=735): r0 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000380)={0x8, 'bond_slave_1\x00', {'pim6reg1\x00'}, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b0800452400280068000000069078acb309a34b1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404000290780000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd706b00dbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00k\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fbdbdf257f00000059cb5b1b7ee67c16b68b0c00990008000000680000001400264baf40b027b238eeae6d973fbea37fb4ae"], 0x34}, 0x1, 0x0, 0x0, 0x8040011}, 0x40084) prlimit64(0x0, 0xe, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f00000000c0)={0x20, 0x100076}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffff1000, 0x10000, &(0x7f0000000000/0x10000)=nil}) ioctl(r7, 0x4048aec9, &(0x7f0000000200)="05000000000000000100"/60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl(r8, 0x4048aecb, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200"], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r10, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x4, 0x2ee6685ecfa0b807, 0x0, 0x0}, {0xd0, 0x8801, 0x0, 0x0}, {0xd7, 0x2000, 0x0, 0x0}], 0x3}) 2.510032034s ago: executing program 0 (id=736): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004440)=@newtfilter={0x888, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x85c, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x6, 0x3, 0x2, 0x4, 0x6dac16e8, 0x2, 0x0, 0x6799f8e9, 0xffffffff, 0x3, 0x6, 0xce, 0x5, 0x4, 0x80000001, 0x0, 0x7, 0x80000000, 0xad, 0x17, 0xfffffffd, 0xe6, 0x2, 0x1, 0x2, 0x200000, 0x9, 0x9, 0x7, 0x1ff, 0xa3, 0x7, 0x0, 0x8, 0x5, 0x10001, 0xfffffff9, 0xe01, 0x0, 0xfff, 0x1ff, 0xfffffffe, 0x82a113e8, 0x8b1, 0x0, 0x0, 0x5, 0x238, 0x2, 0xffff6120, 0x3, 0xffff, 0x8000, 0x8001, 0x401, 0x8000, 0x2, 0x4, 0x5, 0x85, 0x0, 0xbbf0, 0xc, 0xb2fc, 0xc, 0x0, 0x10, 0x8000, 0x100, 0x8, 0x2, 0x469, 0x8000000, 0xe02, 0x6, 0x3, 0x3, 0xffff, 0x7f, 0x3b4748f7, 0x1, 0x7, 0x80, 0x4, 0x7, 0x3, 0x5, 0x1, 0x0, 0x693, 0x800, 0x8, 0x7, 0x8, 0x9, 0xeda, 0x81, 0x3, 0x8, 0x0, 0x4, 0x5, 0x9, 0x3, 0x5, 0x3, 0xe, 0x2, 0x13, 0x7, 0x8, 0x7, 0x8000, 0x3, 0xffff, 0x5df, 0xd, 0x5, 0x7, 0x5, 0x3, 0x0, 0x9, 0x6, 0x0, 0x3ff, 0x3, 0x7, 0x8, 0x9, 0x3, 0x9, 0x3, 0x5, 0x6, 0x648a, 0xc97f, 0x9fcc, 0xff, 0x1, 0x3, 0x80000001, 0x6, 0x4, 0x2, 0x68f4, 0x0, 0x401, 0x8, 0xd, 0x8, 0x1, 0x9, 0x4, 0x5, 0x3, 0x8001, 0x7, 0xc, 0x1, 0x1ff, 0xffff6778, 0x7f, 0xa, 0xe, 0xdb, 0x6, 0x0, 0x5, 0x5, 0x8, 0x355, 0x8001, 0x2, 0x5b01, 0x4, 0x4, 0x0, 0x4, 0x4, 0xe3d, 0x5, 0x534, 0xf, 0x8, 0x1, 0x8, 0x6, 0x2, 0x48, 0xffff, 0x7f2, 0x80000001, 0x0, 0x9, 0x1, 0xffffffff, 0x80000001, 0xcc, 0x4, 0x100, 0x9, 0x0, 0xc, 0x80, 0x7, 0x8000, 0x10001, 0xff, 0x7b, 0x8, 0x7, 0x9, 0x5, 0x0, 0x0, 0x7, 0x1, 0x1, 0x8, 0x9, 0x7, 0x1, 0x2, 0xbae, 0x1, 0x7, 0x7, 0xe, 0x5f, 0x44, 0x6, 0xbabf, 0x40000000, 0x3294, 0x14, 0x100, 0xffff, 0x4, 0xa, 0x4, 0x3, 0x36, 0x1, 0x2, 0x272c, 0xeb8, 0xff, 0x800, 0x7, 0x806, 0x0, 0x81, 0x2d32420e, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5059, 0x5, 0x2, 0x5, 0x2, 0xc3, 0x57c1, 0x7, 0xffff, 0x6, 0x3ff, 0x0, 0xffff, 0x1, 0xc24a, 0x6, 0x0, 0x6, 0x8, 0x8, 0x7, 0x2, 0xed7, 0x6, 0xd0, 0x80, 0x10, 0x7fff, 0x5, 0x6, 0x3, 0x9, 0x8001, 0x7, 0x5, 0x1000, 0x7, 0x9, 0x5, 0x7, 0x0, 0x2, 0x1, 0xffffffff, 0x4, 0x68000000, 0x7fff, 0x4, 0x1, 0x5, 0x8, 0x1, 0x4, 0x8, 0x200, 0xff, 0x54, 0x80, 0x3, 0x3, 0xfffffff1, 0x8, 0x30, 0x5, 0x45f, 0x0, 0x0, 0x8, 0x9, 0x1000, 0x3, 0x5, 0x1ff, 0x7fffffff, 0x0, 0x6, 0x101, 0xfffffffc, 0x3, 0x4, 0x4, 0x1, 0x2, 0x80000001, 0xc2ea, 0x7, 0x5ed, 0x4, 0x4, 0x47d80, 0xa92, 0x7, 0x8, 0x20ca9028, 0x6, 0x9, 0x3c88f426, 0x80, 0x3, 0x3, 0xe, 0x8, 0x0, 0x2, 0x2, 0x5, 0xdbeb, 0xc3, 0x5, 0x6, 0x0, 0x9, 0xc, 0x7, 0xff7, 0x81, 0xffff8001, 0x2, 0x80, 0x2, 0x40, 0x7, 0x7, 0x1, 0x2, 0x9, 0x81, 0x7, 0x7, 0x8, 0x1, 0x3, 0x7, 0xfff, 0x2, 0x3, 0x0, 0x5, 0x2, 0x7, 0x100, 0x7, 0x81, 0x401, 0x0, 0x7, 0x862, 0x2, 0x4, 0x8, 0x10, 0x0, 0x4, 0xd, 0x40, 0x0, 0x7ff, 0x80000000, 0x8e8, 0x5, 0x1, 0x40, 0x100, 0x2, 0x8, 0x8001, 0x8, 0x6, 0x3, 0x8, 0xfdd, 0x7fff, 0xfffffff8, 0x0, 0xfffffff9, 0xffff, 0x9, 0x3, 0x0, 0x0, 0x9e579c3, 0xb7b, 0x8, 0x7, 0x2e, 0x8, 0x5, 0x7fff, 0x2, 0x2, 0x204, 0x3, 0x3, 0x40, 0xf27d, 0xd, 0x8, 0xc, 0x91d1, 0x100, 0x4c80, 0x0, 0x5, 0xff, 0x80000000, 0xfffff379, 0xff, 0x8, 0x6, 0x1, 0x8, 0x2, 0x3, 0x3, 0xfffffff7, 0xea, 0x6, 0x4, 0x7fffffff, 0xfffff655, 0x0, 0xea58, 0xfffffc00, 0x7a, 0xb41, 0xeffd, 0x5, 0x7, 0x6, 0x4, 0x5, 0x1, 0x7fffffff, 0x9, 0x9, 0x92, 0xfffffffa, 0x6, 0x48, 0x80000000, 0x7, 0x4, 0x5, 0x1000, 0x25, 0xb, 0x1, 0x9, 0xc, 0x7, 0xfffffff8, 0x1ff, 0x9, 0x7b5c, 0x10]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0xcde, 0xffffffff, 0x10001, {0x7, 0x1, 0x562, 0x1, 0x2, 0x4}, {0xb, 0x1, 0xfff7, 0x3, 0x10, 0x454918ea}, 0x101, 0x9, 0x1ff}}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r2 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000201e040030400001020301090276030109403f0904000000010100000a2401d2000a00020102090411000001020000090401010101020000072401080805000f2402020002080000f441a4440fb209050109ff037808ba07250108040300090402000001020000090402812ead8b6510af231d010102ad8092dbbed7b9ffe868"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0xa00, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9b4, 0x3, 0x0, 0x1, [{0x69c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x8, 0x1, '#B@F'}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee, 0x1, "cc56b8bf24e4d9e7fe0e769030d32051773c97c9d47a0929e2889e74d886150bfa0e32c1be76bc3ff8b0844d485b7f4c5db0b17edd9bd42632b1204485a18e94672c4f61c485b941717f7d5a8aa35ec244854d407ca4285c826b370b14d188a9a22290111e1f8d89ae18729535bab6e691321b72509d0a1753dc54fddbd5d66646aac0f99b9d748f5b38ba7ef4ab397f8bf5d2bec171e7f7d483e7d3b948770a48501b0c25da09962657211c56180d1dd33b46aea48da54e1726853c5f83ed1d04e77aa1573e3312afc6e28bcaf7abb551bb4e656cc7e4b6e4b948e2103893bce0724cec473ef5f3c3e9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xac, 0x1, "342da63117280633394b4681760fdea59087d0628f97c8f67932b82736be72d448727142d9f1293af9ab3ae93fd7bec7f7f4af175c23f4abb4cd3ad3febb0c26c48130b2007ea9343ffe9c07f049636b44d41bee614d2de53ad29defdba28f6d5e4fa5a2b56016dd390054b8dfa8551d8d3dcd9e6cc640d6785cbad273524f5663f23e2b9449ee7607d98b098fe08ba50374c9357c7b55c8de0c1e34dd5fa0414222b4e925cc10b4"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1dc, 0xb, 0x0, 0x1, [{0x11c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xf8, 0x3, "61623ac41bcef5f89807cb1d52951b290acd26af1a7b47e0e0e7c4de81d9ad6ada961e614fada7a9454126a4eca8ee19ca52c1e837e68f01c61ec0a14acb187ba35f388446b039ca1817753c8235d39aa5af0058587234f24eddda88bebc1b2dd852ff564e2245932c6a805d4db3c3cfea774b1b9759d256e80173ad117ab2354303bdb9e0e8a9809223f0e339ffa5c300fc9175774b1f75067dfb5bfef592f0b01be58c1e8a9df6f5607303dcc14d6721ffb4615bd1dfdecd002d59bfd922be4e953583d1b1a0f875d9b33e4fea799bedccf192dfd8047b65d3604effd5073af5fd5a2ceaa3f8dfc9c7105152bc0f89cd17cf7b"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x8, 0x1, 'tos\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x45}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x73}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7f}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0x74, 0x1, "ae0906d8fbfe21626d3ef2bb2b84a25238a523b333ea581f347913983eaebe3a5162443683a4ad1210d44fa56362550f11017616185633b9e70b7b7616237539bd4cc1890e4d35049e91d36c64d969a03be553f9767b884e3d11b19fcd5f09ee96014d5c092dc4699013e06043d5bfd1"}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, {0x250, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10001}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "874b525178254e2be626b99bd7f3553410c18289acd707e70320d1d6f1e1e7d973904152357edf149940e6f58e0dccf15378d36cfdf8980330d2498a424126bceafbed5a18112664d21b55977d59d4b16fe46bd1095d7bbfd349b2a06cc6463873c7f91a8d0bb3e39924934336a3800705a3a0e0c1969d110ca75e6c590631a9e2936e79c7d7989fbff9da88db49fe29f0f06c9778da2de228eff28ac0bae129f902e21dd06e1c83beaa90d4dfc915d20a5708e80380a2dcfef20323720ef5bff7cbedbdebbbbbf10d"}, @NFTA_SET_ELEM_USERDATA={0x66, 0x6, 0x1, 0x0, "efa65aae5ea0133beba588f04424368f25ee73eafe7d2298c4349545fe51ad51133caf760a9b3b9a88d8f636b4f1498f47c17cac425e3a6761d92ad8b1c8aec47fd688630318f2ae34d5bdbae933fd83f97a5195690c1adca6d587598da5afca48f4"}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x19}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELOBJ={0x118, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xd8, 0x8, "d4076c669a757bc5f37880af52babb807256bb6debe2fe0fc0290fb4e3b2c745496b568066863d82950426721e7346cff7003b93b8eca621e8b0f3c5b73a2634bf7efc84a536f8a0d6090494f49a9c744ddb45627f304bcb31046db31ad0a465d1c85bfa27a778383f74f52e5c139bda986f432a8e87c7871f51d7ec25d67de434aebbb259bf076b4d35d44465863830c4b69c985b52bbdafc22081d76ac4de9bc84c1a13aaa7bb3ac33267dfe4e518bfecc84c5fb10ed35044a98f77f43c2d602af150a1e841b2e6a7cdd587dd7b8da50233fc1"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc60}}, 0x4800) fsmount(r2, 0x0, 0x0) 1.847219935s ago: executing program 4 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x1cc, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xef, 0x6, "48701027e473c925c73a3053c054a7d35ffbce4d8591b9ffd4431658e26b78839b93ed1e701316b99453cd139d4609f395ddfe31c7c86aa0fde6f27f074c5c40ebddd12103afbc79387f904a112a8911e2f0cbb126d9de34e6d0cecb511445bc707f709ba75094cf90423c291edf6c6cfeb957b66ca9eb002ab266009ce4b68059c113178488f12e304a7c2b916ded1b1d030c8bbeb678f133acaac85a22a06cf1be69b086127f4f965f6d7202b09173f8a2f0fb326f66143d53a42fb76d62c9ab6fb5cdb68fd971dc3b7750a3f78131f5243d6c4b9d02ffc4d4db8c9e5caa6c1767fb9683256e33ba73ec"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "914bc0e7f8d1c0f77d7f6380e43327700c8583a835bc36b207f6277340f44cdc0735f49ec00b17c41e879bb8b438becd45b1f45005c08756a2611b8940cf49ab7443ac28ca6f0cd15b9f65fb9eb37bcfac1992ddd447465aaa32e4998b945e81683b39279151e051e2cd5ed10d393de5a924dd09ccab1f2f9af1b434c38eb0934ba2a7f334844074ecfecd77d96e259b089fcbbd4a83b8c68022ae2ad1433214c2466cd2b29702cc16"}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1056784e}]}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2c0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 1.724422768s ago: executing program 4 (id=738): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1c02, 0x0) r1 = epoll_create1(0x80000) ppoll(&(0x7f0000000200)=[{r1, 0x2205}], 0x1, 0x0, 0x0, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000240)=[@nested_amd_set_intercept={0x181, 0x30, {0x3, 0x8000, 0x3, 0x1}}, @uexit={0x0, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0xff, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x1ffe, 0x2d91}}, @code={0xa, 0x95, {"f2676642e93b6ae675c744240000000000c744240200900000c7442406000000000f01142466450f38819e9f36000048b80b000000000000000f23d00f21f835100000010f23f8c463495ce865c744240052280000c7442402f4000000c7442406000000000f011424440f796ad4660fc7350060000066410f7e00c422712f9602000000"}}, @cpuid={0x64, 0x18, {0x6f, 0x6}}, @nested_load_code={0x12e, 0x80, {0x2, "c744240061000000c74424020964e6d6c7442406000000000f011c2448b833000000000000000f23d00f21f8350000000b0f23f8c421797f3e650f088f497881f5f2450f015864470f01f80f01ca660fd16c89f366baf80cb8208da186ef66bafc0cb800900000ef"}}, @nested_create_vm={0x12d, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0xb5c}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x560, 0x3, 0x7f, 0x943}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xe8e8, 0x1}}, @rdmsr={0x66, 0x18, {0xa8e}}, @wrmsr={0x65, 0x20, {0x348, 0x7}}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x2f5}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000580)={0x4, 0x0, [{0x80000008, 0x8, 0x4, 0x24, 0x5}, {0x80000001, 0x100, 0x43, 0x1, 0x7fff}, {0x1, 0x2, 0x27d2b1ad, 0x6, 0x80000001}, {0x80000007, 0xfff, 0x8, 0x6, 0x80}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xe000000f}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.708546427s ago: executing program 3 (id=739): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000a80)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aab1b7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae0104000000000000835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f960b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9e6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def200009538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa423de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786bf2eb5dd386d3f1600efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051960200000000000000328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e04007e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b900c14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7b1164cc20de5b23146baa978611100", 0x2000, 0x0) r1 = socket(0x11, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002a80)=[{{&(0x7f0000002b00)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}}, {{&(0x7f0000002b80)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000002c00)=ANY=[], 0x10}}], 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_ep_write(r0, 0x2, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, &(0x7f00000000c0)={0x10, "8105d6c721100f00000000400000a8267d87000200"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x20, 0x2, 0x38, "4e9f2cd9b92f222730c12d761fe7dd32b2310d2c184e9747d69aad85269fe32f4361df8e73f450cdf9362700ad28e04026c46fb3eba0bc84"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}}) 1.707943255s ago: executing program 2 (id=740): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) shutdown(r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000400)) close_range(r0, r1, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x2002) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x30) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000002c0)={0x3f, 0x7ffd, 0x3, 0x4, 0x0, 0x0, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0) 1.651622438s ago: executing program 2 (id=741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x8, 0x38, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x8, 0x38, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0xfe}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 1.638715898s ago: executing program 4 (id=742): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000580)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001401010010"], 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x174, r3, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc7, 0x3, "a10d827af79f5f571807faff6d9597a911d7321d8d30d408b0931a27b6165754e0858c53e742e1fdde31f018f9475bc471a35f467e2557464d78e313647f19fcf2f8054f0d8d2bf36bb5b668aea2d8befa950e385a371f1fba04ee601870fb352b420866c043190191b572f2375cc171713d4538af399ccae79c676ed2e0f07e1aeb638c5dec11688a309470d909cd4536dc87fc4f7240273c5a2d16288d3b3bfc55ced86922710573a952f44757b8d47195ad64be79c98253d1db1d4f922dcd9f3f18"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a9a0c3f3aa681ed7775ef3510bd17228002491562b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008000}, 0x44000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000005c0)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{0x0, 0xdd12}], 0x1}, 0x200400d1) 1.507952615s ago: executing program 4 (id=743): r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000370410008000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345050001000000240012800b00010067656e65766500001400028008000b4080e953f3"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a18300000000000000000500000008000300", @ANYBLOB='\b'], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test\x00', 0x777) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='100000', 0x6) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) (async) close_range(r0, r1, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) io_setup(0x8, &(0x7f0000004200)) 1.507587603s ago: executing program 2 (id=744): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000100)) read$dsp(r0, &(0x7f0000000040)=""/174, 0xae) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.28052465s ago: executing program 4 (id=745): r0 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000380)={0x8, 'bond_slave_1\x00', {'pim6reg1\x00'}, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b0800452400280068000000069078acb309a34b1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404000290780000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd706b00dbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00k\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fbdbdf257f00000059cb5b1b7ee67c16b68b0c00990008000000680000001400264baf40b027b238eeae6d973fbea37fb4ae"], 0x34}, 0x1, 0x0, 0x0, 0x8040011}, 0x40084) prlimit64(0x0, 0xe, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f00000000c0)={0x20, 0x100076}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffff1000, 0x10000, &(0x7f0000000000/0x10000)=nil}) ioctl(r7, 0x4048aec9, &(0x7f0000000200)="05000000000000000100"/60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl(r8, 0x4048aecb, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200"], 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r10, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0x4, 0x2ee6685ecfa0b807, 0x0, 0x0}, {0xd0, 0x8801, 0x0, 0x0}, {0xd7, 0x2000, 0x0, 0x0}], 0x3}) 1.186414464s ago: executing program 0 (id=746): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x3, 0x80000, 0xffffffffffffffff}) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000080)) r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x6, 0x10, r0, 0x20000000) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x7, 0x4, 0x110, r0, 0x8000000) syz_ublk_setup_io_uring(0x15e8, &(0x7f00000000c0)={0x0, 0x2233, 0x100, 0x7, 0x259, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x56, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x401, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x2, 0xcd7, 0x0, 0x0, 0x1000, 0x3, r4, 0x0, 0xa0}}}, &(0x7f0000000340)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000380)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000400)={r5, r6, 0x6, 0x80, 0x1}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) statx(r0, &(0x7f00000004c0)='./file0\x00', 0x400, 0x80, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x1000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@smackfshat={'smackfshat', 0x3d, '%%&^/\xe8/\xd7;#&,&@!'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '![!%s@/('}}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000740)="9aa5377d7873f412d2e851234daa020c4c8240336d16ab4e3e0fa6f001de9e23615ec891adb5b8eca51296b582ead63250ef93e6335e1a7688608b654c312c4a90f1e0b31ceb6b30f42aa4a1e74b12078c20c676a6500fe18eb5d2b9edf64ceeea44e8e6933830473fd7a59a819cde141e2a7ec9be0bd69770c194b0e481c1fea7aba053a7abd5796bfe680d1bb0934c57c4d1a5ca7f051a875672510eee1ee85cc4aebd7fcf9afd5212bf3a83162abefcf9f882cb65aaea1435ff1c") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0x1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x2f, 0x85, 0x4, 0x7, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x40, 0xc372, 0x80}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000980)={0x0, @remote, @loopback}, &(0x7f00000009c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x218, r8, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x64, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x10000000}, 0x20004010) r12 = fanotify_init(0x10, 0x800) ioctl$XFS_IOC_START_COMMIT(r12, 0x80585882, &(0x7f0000000d00)={0xffffffffffffffff}) ioctl$KVM_RUN(r13, 0xae80, 0x0) lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) setsockopt$MRT_DONE(r13, 0x0, 0xc9, 0x0, 0x0) landlock_restrict_self(r13, 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001200)={0x2, 0x0, &(0x7f0000001140)=[{&(0x7f0000000e40)=""/151, 0x97}, {&(0x7f0000000f00)=""/42, 0x2a}, {&(0x7f0000000f40)=""/105, 0x69}, {&(0x7f0000000fc0)=""/85, 0x55}, {&(0x7f0000001040)=""/240, 0xf0}], &(0x7f00000011c0)=[0x4, 0x9, 0x3, 0x6, 0x9, 0x2], 0x5}, 0x20) ioctl$TCGETA(r0, 0x5405, &(0x7f0000001240)) 891.710578ms ago: executing program 0 (id=747): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x240, 0x24, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfffd}, {0x8, 0x3}, {0x7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x3}}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x6, 0x0, 0x0, 0x4, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x4, 0x200]}}, {{0x1c, 0x1, {0x2, 0x3, 0x8bf0, 0xfffffffd, 0x1, 0x4, 0x0, 0x6}}, {0x10, 0x2, [0x8, 0x8, 0x4, 0x9a, 0x1, 0x9]}}, {{0x1c, 0x1, {0x7d, 0xb, 0x2, 0x8000, 0x1, 0x3, 0xbc0, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x7, 0x4, 0x46d, 0x8, 0x2, 0x9, 0x7d60, 0x9}}, {0x16, 0x2, [0x46, 0x7ff, 0x4, 0x3, 0x7, 0x0, 0x8, 0x9, 0x6]}}, {{0x1c, 0x1, {0x3, 0x5, 0x3, 0x100, 0x1, 0x5, 0x800, 0x7}}, {0x12, 0x2, [0x25e6, 0x79, 0x3ff, 0x55, 0x4800, 0x3, 0x1]}}, {{0x1c, 0x1, {0x2, 0x3, 0x2a0, 0x3, 0x0, 0xfb, 0xbae, 0x3}}, {0xa, 0x2, [0x5, 0x800, 0x4]}}, {{0x1c, 0x1, {0x0, 0xf, 0x80, 0x7fff, 0x0, 0x7, 0x1, 0x6}}, {0x10, 0x2, [0x4, 0x8, 0x73d, 0x71, 0x80, 0x9]}}]}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x81, 0x3, 0x6, 0x1, 0x0, 0x6, 0x7}}, {0x12, 0x2, [0x2, 0xe000, 0x5, 0x0, 0x9, 0x8, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0xf3, 0xfb}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb2, 0x40, 0x6, 0xfe4, 0x1, 0x3, 0x6cd, 0x4}}, {0xc, 0x2, [0x400, 0x9, 0x8011, 0x6d]}}, {{0x1c, 0x1, {0x0, 0x21, 0x5, 0x1, 0x1, 0x44, 0x401, 0x2}}, {0x8, 0x2, [0x7, 0xff00]}}, {{0x1c, 0x1, {0x7, 0x6, 0x6, 0x90000000, 0x2, 0x100, 0xfffffa9c, 0x6}}, {0x10, 0x2, [0x8001, 0x0, 0x49, 0x0, 0x1, 0xfffe]}}]}, @TCA_STAB={0x4}]}, 0x240}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7}}, 0xe8) r12 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f00000007c0), 0x4) sendmsg$key(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x1, &(0x7f00000009c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffe0}, {0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7fff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x3}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x100}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xe}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x200}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x800}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 768.669407ms ago: executing program 2 (id=748): timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f0000000180)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = getgid() sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x100}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xddf}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2002c008}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xee01, r3}}, './file0\x00'}) fsetxattr$system_posix_acl(r4, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="000dc900010000000077b10042de75c33e6960255d16e041847e9ef8cab227f16f", @ANYRES32=r3, @ANYBLOB="44d0e1a6", @ANYRESHEX=r2, @ANYRES8=r0, @ANYBLOB="ee81826a9e0eb61dea611434c297c211f34567e9f554de62cffe2c049a92d3fa776b0970bb1aef9eacb0afd43dfb4ba37240a16493386d2b516d19c63d98f98866523ca9a2a306f6517304f3e81a91d1c60ae4e2fdc45370427955ad77dbf23385a819dc983883696e5caa8a94c23e7572ac8660863141c879fa5655fc0ccb65f22ad61147dc9adc25d27284f43b36c14a654454517205d3d559c0724cff93d448c3941f0905db20d4a3028a10965951eb7372126e5acdbcf8c8f21c3d00703a680b175c3bb4a6d7fb5b1dab90b997b818b701d78083f3a49546bfdda20e3ff5e43c9e56e42006126c", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="10000700000000002000000000000000"], 0x44, 0x1) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120101028e5ea810880c2100c5cc0102ffffff7f000000000110040904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async) munlock(&(0x7f0000a0e000/0x12000)=nil, 0x12000) 282.525646ms ago: executing program 0 (id=749): unshare(0x42000000) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000a40)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r0 = socket$igmp(0x2, 0x3, 0x2) sigaltstack(&(0x7f00000006c0)={&(0x7f0000000a80)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000001ac0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000001b00)) timer_settime(0x0, 0x0, &(0x7f0000001b40)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000000, 0x32, 0xffffffffffffffff, 0xf1f6f000) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000840)={@empty, @empty, 0x1, "d6e32d8f4d9f851d41452847e533622f2490429076ec5e79ce4f6c572637055e", 0x7fff, 0x40e7, 0x0, 0x4}, 0x3c) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000003c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000500)={0x2c, 0x6, r4}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000100)={0x0, [[0x14, 0xffffffff, 0xffffffff, 0x3, 0x7, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x1b, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf423e, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000008c0)={0xc}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}}, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000040)={'full'}, 0xfffffdef) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r6) 0s ago: executing program 2 (id=750): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000984000000010100000a24010800000201020d21060000030800000000000000240803960c03112d9cc2ce0c240208000103000000ff000924060506020206", @ANYRES8=r1, @ANYBLOB="06"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): usb 2-1: Using ep0 maxpacket: 32 [ 179.508633][ T3216] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 179.510896][ T3216] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.510920][ T3216] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.510974][ T3216] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.516397][ T3216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.516426][ T3216] usb 2-1: Product: syz [ 179.516440][ T3216] usb 2-1: Manufacturer: syz [ 179.516455][ T3216] usb 2-1: SerialNumber: syz [ 179.696317][ T7794] cgroup: fork rejected by pids controller in /syz2 [ 180.067120][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.067404][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.667045][ T7985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.417599][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 181.571593][ T9] usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 181.572255][ T9] usb 5-1: config 0 has no interfaces? [ 181.572289][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.578283][ T9] usb 5-1: config 0 descriptor?? [ 182.147939][ T5680] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 182.318800][ T5680] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 182.321060][ T5680] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 182.321091][ T5680] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 182.321105][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 182.321135][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 182.323325][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.323352][ T5680] usb 3-1: Product: syz [ 182.323366][ T5680] usb 3-1: Manufacturer: syz [ 182.323397][ T5680] usb 3-1: SerialNumber: syz [ 182.326653][ T5680] usb 3-1: config 0 descriptor?? [ 182.328021][ T8013] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 182.347604][ T2241] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 182.415084][ T5680] usb 3-1: ucan: probing device on interface #0 [ 182.415101][ T5680] usb 3-1: ucan: invalid endpoint configuration [ 182.415109][ T5680] usb 3-1: ucan: probe failed; try to update the device firmware [ 182.498259][ T2241] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 182.500094][ T2241] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.500142][ T2241] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.500165][ T2241] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.500188][ T2241] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.500229][ T2241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.598191][ T9] usb 5-1: USB disconnect, device number 46 [ 182.798687][ T31] audit: type=1326 audit(1791983259.839:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c74f9e2d9 code=0x7ffc0000 [ 182.800381][ T31] audit: type=1326 audit(1791983259.839:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c74f5eb0e code=0x7ffc0000 [ 182.801487][ T31] audit: type=1326 audit(1791983259.839:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c74f9e2d9 code=0x7ffc0000 [ 182.802097][ T31] audit: type=1326 audit(1791983259.839:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c74f9e2d9 code=0x7ffc0000 [ 182.804275][ T31] audit: type=1326 audit(1791983259.839:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0c74f9e2d9 code=0x7ffc0000 [ 182.804465][ T31] audit: type=1326 audit(1791983259.839:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c74f9e2d9 code=0x7ffc0000 [ 182.804805][ T31] audit: type=1326 audit(1791983259.839:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c74f9e2d9 code=0x7ffc0000 [ 182.805336][ T31] audit: type=1326 audit(1791983259.839:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.533" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0c74f9e2d9 code=0x7ffc0000 [ 182.954391][ T9] usb 4-1: USB disconnect, device number 46 [ 183.021920][ T8023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.024000][ T8023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.054015][ T3216] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 183.069336][ T3216] usb 2-1: USB disconnect, device number 31 [ 183.109129][ T7006] udevd[7006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.497574][ T9] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 183.648686][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 183.752307][ T7759] syz.0.505 (7759): drop_caches: 1 [ 183.753031][ T8042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.777601][ T9] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 183.869672][ T3216] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 183.927577][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 183.927829][ T9] usb usb5-port1: attempt power cycle [ 184.018772][ T5680] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 184.037801][ T3216] usb 4-1: Using ep0 maxpacket: 16 [ 184.039982][ T3216] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 184.041227][ T3216] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.041250][ T3216] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.043905][ T3216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.043931][ T3216] usb 4-1: SerialNumber: syz [ 184.064830][ T3216] usb 4-1: 0:2 : does not exist [ 184.178202][ T5680] usb 2-1: Using ep0 maxpacket: 32 [ 184.197889][ T5680] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.197943][ T5680] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 184.199256][ T5680] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 184.199284][ T5680] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 184.199303][ T5680] usb 2-1: config 7 has no interface number 0 [ 184.199340][ T5680] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 184.199389][ T5680] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 184.199414][ T5680] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 184.199438][ T5680] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has invalid wMaxPacketSize 0 [ 184.199459][ T5680] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 184.199483][ T5680] usb 2-1: config 7 interface 128 has no altsetting 0 [ 184.202434][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.202461][ T5680] usb 2-1: Product: syz [ 184.202476][ T5680] usb 2-1: Manufacturer: syz [ 184.202512][ T5680] usb 2-1: SerialNumber: syz [ 184.220377][ T8042] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 184.322213][ T9] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 184.352004][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 184.393659][ T8056] FAULT_INJECTION: forcing a failure. [ 184.393659][ T8056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.393693][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz.0.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.393718][ T8056] Tainted: [L]=SOFTLOCKUP [ 184.393724][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.393739][ T8056] Call Trace: [ 184.393746][ T8056] [ 184.393754][ T8056] dump_stack_lvl+0xe8/0x150 [ 184.393778][ T8056] should_fail_ex+0x410/0x560 [ 184.393797][ T8056] _copy_from_iter+0x1d3/0x1660 [ 184.393812][ T8056] ? __alloc_skb+0x27a/0x7a0 [ 184.393828][ T8056] ? __alloc_skb+0x27a/0x7a0 [ 184.393844][ T8056] ? __alloc_skb+0x27a/0x7a0 [ 184.393859][ T8056] ? __pfx__copy_from_iter+0x10/0x10 [ 184.393872][ T8056] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 184.393884][ T8056] ? __alloc_skb+0x27a/0x7a0 [ 184.393898][ T8056] ? __alloc_skb+0x27a/0x7a0 [ 184.393915][ T8056] ? netlink_sendmsg+0x650/0xb40 [ 184.393928][ T8056] ? skb_put+0x112/0x210 [ 184.393939][ T8056] netlink_sendmsg+0x6c0/0xb40 [ 184.393956][ T8056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.393973][ T8056] ? apparmor_socket_sendmsg+0x98/0x360 [ 184.393988][ T8056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.394000][ T8056] sock_sendmsg_nosec+0x13a/0x180 [ 184.394016][ T8056] ____sys_sendmsg+0x54e/0x850 [ 184.394030][ T8056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.394045][ T8056] ? import_iovec+0x73/0xa0 [ 184.394062][ T8056] ___sys_sendmsg+0x2a5/0x360 [ 184.394072][ T8056] ? __lock_acquire+0x747/0x2de0 [ 184.394086][ T8056] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.394114][ T8056] ? __fget_files+0x2a/0x420 [ 184.394124][ T8056] ? __fget_files+0x3a2/0x420 [ 184.394140][ T8056] __x64_sys_sendmsg+0x1b1/0x290 [ 184.394151][ T8056] ? lockdep_hardirqs_on+0x7b/0x110 [ 184.394164][ T8056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.394186][ T8056] do_syscall_64+0x166/0x520 [ 184.394198][ T8056] ? trace_irq_disable+0x3b/0x140 [ 184.394209][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.394220][ T8056] ? clear_bhb_loop+0x70/0xc0 [ 184.394233][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.394244][ T8056] RIP: 0033:0x7fcbda19e2d9 [ 184.394255][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.394264][ T8056] RSP: 002b:00007fcbdb122028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.394276][ T8056] RAX: ffffffffffffffda RBX: 00007fcbda425fa0 RCX: 00007fcbda19e2d9 [ 184.394284][ T8056] RDX: 0000000040048054 RSI: 00002000000005c0 RDI: 0000000000000003 [ 184.394291][ T8056] RBP: 00007fcbdb122090 R08: 0000000000000000 R09: 0000000000000000 [ 184.394298][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.394304][ T8056] R13: 00007fcbda426038 R14: 00007fcbda425fa0 R15: 00007fcbda54fa48 [ 184.394319][ T8056] [ 184.579680][ T9] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 184.608343][ T9] usb 5-1: Invalid ep0 maxpacket: 16 [ 184.613387][ T9] usb usb5-port1: unable to enumerate USB device [ 184.717940][ T3216] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 184.858260][ T5680] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.858317][ T5680] usb 2-1: MIDIStreaming interface descriptor not found [ 184.868496][ T3216] usb 4-1: USB disconnect, device number 47 [ 184.989624][ T9] usb 3-1: USB disconnect, device number 39 [ 185.093016][ T5680] usb 2-1: USB disconnect, device number 32 [ 185.137592][ T5763] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 185.300157][ T5763] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.301226][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.307323][ T5763] usb 1-1: config 0 descriptor?? [ 185.319607][ T5763] cp210x 1-1:0.0: cp210x converter detected [ 185.416186][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 186.518595][ T2241] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 186.668966][ T2241] usb 4-1: device descriptor read/64, error -71 [ 186.735870][ T8099] fuse: Unknown parameter 'ñH<Ž Á [ 186.735870][ T8099] iéÞ‘yÿÖÁª[#ì|Ýê‘7g' [ 186.910298][ T2241] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 186.932580][ T5763] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 186.932600][ T5763] cp210x 1-1:0.0: querying part number failed [ 186.939777][ T5763] usb 1-1: cp210x converter now attached to ttyUSB0 [ 186.950813][ T5763] usb 1-1: USB disconnect, device number 37 [ 186.997149][ T5763] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.999621][ T5763] cp210x 1-1:0.0: device disconnected [ 187.087585][ T2241] usb 4-1: device descriptor read/64, error -71 [ 187.188037][ T2241] usb usb4-port1: attempt power cycle [ 187.539560][ T2241] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 187.558140][ T2241] usb 4-1: device descriptor read/8, error -71 [ 187.673298][ T8104] ======================================================= [ 187.673298][ T8104] WARNING: The mand mount option has been deprecated and [ 187.673298][ T8104] and is ignored by this kernel. Remove the mand [ 187.673298][ T8104] option from the mount to silence this warning. [ 187.673298][ T8104] ======================================================= [ 187.807824][ T2241] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 187.830018][ T8106] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.854373][ T2241] usb 4-1: device descriptor read/8, error -71 [ 187.947621][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 187.965737][ T2241] usb usb4-port1: unable to enumerate USB device [ 188.067720][ T5763] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 188.107545][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 188.111043][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 188.111094][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 188.112299][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 188.114642][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.114669][ T9] usb 1-1: Product: syz [ 188.114683][ T9] usb 1-1: Manufacturer: syz [ 188.114698][ T9] usb 1-1: SerialNumber: syz [ 188.247569][ T5763] usb 3-1: Using ep0 maxpacket: 32 [ 188.251166][ T5763] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.251221][ T5763] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 188.252161][ T5763] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 188.252184][ T5763] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 188.252203][ T5763] usb 3-1: config 7 has no interface number 0 [ 188.252240][ T5763] usb 3-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 188.252265][ T5763] usb 3-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 188.252290][ T5763] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 188.252314][ T5763] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has invalid wMaxPacketSize 0 [ 188.252335][ T5763] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 188.252361][ T5763] usb 3-1: config 7 interface 128 has no altsetting 0 [ 188.254889][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.254915][ T5763] usb 3-1: Product: syz [ 188.254929][ T5763] usb 3-1: Manufacturer: syz [ 188.254944][ T5763] usb 3-1: SerialNumber: syz [ 188.306577][ T3216] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 188.341487][ T8106] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 188.351836][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.351887][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 188.477691][ T3216] usb 5-1: device descriptor read/64, error -71 [ 188.540438][ T9] usb 1-1: USB disconnect, device number 38 [ 188.606775][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.718189][ T3216] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 188.722008][ T5763] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.722060][ T5763] usb 3-1: MIDIStreaming interface descriptor not found [ 188.841365][ T5763] usb 3-1: USB disconnect, device number 40 [ 188.848556][ T8122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.561'. [ 188.864454][ T3216] usb 5-1: device descriptor read/64, error -71 [ 188.880931][ T8123] FAULT_INJECTION: forcing a failure. [ 188.880931][ T8123] name failslab, interval 1, probability 0, space 0, times 0 [ 188.880968][ T8123] CPU: 0 UID: 0 PID: 8123 Comm: syz.2.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.880995][ T8123] Tainted: [L]=SOFTLOCKUP [ 188.881002][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.881014][ T8123] Call Trace: [ 188.881021][ T8123] [ 188.881029][ T8123] dump_stack_lvl+0xe8/0x150 [ 188.881060][ T8123] should_fail_ex+0x410/0x560 [ 188.881090][ T8123] should_failslab+0xa8/0x100 [ 188.881126][ T8123] __kmalloc_cache_noprof+0xa3/0x600 [ 188.881149][ T8123] ? __kmalloc_noprof+0x1ab/0x720 [ 188.881165][ T8123] ? mpi_alloc+0x52/0x140 [ 188.881190][ T8123] ? mpi_alloc+0x52/0x140 [ 188.881219][ T8123] mpi_alloc+0x52/0x140 [ 188.881247][ T8123] mpi_read_raw_data+0x139/0x970 [ 188.881281][ T8123] dh_set_secret+0x200/0x320 [ 188.881299][ T8123] ? crypto_create_tfm_node+0x81/0x3c0 [ 188.881327][ T8123] ? __pfx_dh_set_secret+0x10/0x10 [ 188.881350][ T8123] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 188.881382][ T8123] __keyctl_dh_compute+0x5ae/0xd10 [ 188.881412][ T8123] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 188.881464][ T8123] keyctl_dh_compute+0x124/0x180 [ 188.881487][ T8123] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 188.881519][ T8123] __se_sys_keyctl+0x44c/0x9d0 [ 188.881543][ T8123] ? __pfx___se_sys_keyctl+0x10/0x10 [ 188.881563][ T8123] ? __mutex_unlock_slowpath+0x731/0x900 [ 188.881586][ T8123] ? __fget_files+0x2a/0x420 [ 188.881603][ T8123] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.881624][ T8123] ? __fget_files+0x3a2/0x420 [ 188.881645][ T8123] ? fput+0xa0/0xd0 [ 188.881667][ T8123] ? ksys_write+0x242/0x270 [ 188.881687][ T8123] ? __pfx_ksys_write+0x10/0x10 [ 188.881711][ T8123] ? __x64_sys_keyctl+0x20/0xc0 [ 188.881736][ T8123] do_syscall_64+0x166/0x520 [ 188.881758][ T8123] ? trace_irq_disable+0x3b/0x140 [ 188.881776][ T8123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.881794][ T8123] ? clear_bhb_loop+0x70/0xc0 [ 188.881815][ T8123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.881833][ T8123] RIP: 0033:0x7fba5139e2d9 [ 188.881851][ T8123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.881867][ T8123] RSP: 002b:00007fba521a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 188.881890][ T8123] RAX: ffffffffffffffda RBX: 00007fba51626090 RCX: 00007fba5139e2d9 [ 188.881904][ T8123] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000017 [ 188.881917][ T8123] RBP: 00007fba521a6090 R08: 00002000000001c0 R09: 0000000000000000 [ 188.881930][ T8123] R10: 00000000000000d0 R11: 0000000000000246 R12: 0000000000000002 [ 188.881942][ T8123] R13: 00007fba51626128 R14: 00007fba51626090 R15: 00007fba5174fa48 [ 188.881975][ T8123] [ 189.013550][ T3216] usb usb5-port1: attempt power cycle [ 189.129800][ T8127] netlink: 'syz.0.563': attribute type 39 has an invalid length. [ 189.246790][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.467571][ T3216] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 189.497603][ T3216] usb 5-1: device descriptor read/8, error -71 [ 189.708204][ T5763] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 189.737596][ T3216] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 189.758008][ T3216] usb 5-1: device descriptor read/8, error -71 [ 189.837608][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 189.858352][ T5763] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 189.859308][ T5763] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.859328][ T5763] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.859341][ T5763] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.860691][ T5763] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 189.860716][ T5763] usb 3-1: Manufacturer: syz [ 189.860731][ T5763] usb 3-1: SerialNumber: syz [ 189.868567][ T3216] usb usb5-port1: unable to enumerate USB device [ 189.899719][ T2241] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 189.967735][ T25] usb 2-1: device descriptor read/64, error -71 [ 190.066394][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.066958][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.080406][ T5763] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 190.082870][ T5763] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input17 [ 190.095151][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 190.095391][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 190.095611][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 190.095836][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 190.096078][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 190.096306][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 190.096531][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 190.096755][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 190.096774][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 190.123716][ T5763] usb 3-1: USB disconnect, device number 41 [ 190.167691][ T2241] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 190.185370][ T2241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.185405][ T2241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.185425][ T2241] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.185463][ T2241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.207611][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 190.231124][ T2241] usb 1-1: config 0 descriptor?? [ 190.337769][ T25] usb 2-1: device descriptor read/64, error -71 [ 190.441260][ T8152] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 190.450327][ T25] usb usb2-port1: attempt power cycle [ 190.485851][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485877][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485893][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485908][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485923][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485937][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485952][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485967][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485982][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.485996][ T2241] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 190.495685][ T2241] hid-multitouch 0003:0457:07DA.0006: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 190.664663][ T8162] netlink: 'syz.2.574': attribute type 39 has an invalid length. [ 190.707721][ T2241] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 190.817576][ T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 190.838488][ T25] usb 2-1: device descriptor read/8, error -71 [ 190.879533][ T2241] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.880142][ T2241] usb 4-1: not running at top speed; connect to a high speed hub [ 190.880175][ T2241] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 190.881072][ T2241] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.881094][ T2241] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.883007][ T2241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.883030][ T2241] usb 4-1: Product: syz [ 190.883044][ T2241] usb 4-1: Manufacturer: syz [ 190.883058][ T2241] usb 4-1: SerialNumber: syz [ 190.968947][ T8166] FAULT_INJECTION: forcing a failure. [ 190.968947][ T8166] name failslab, interval 1, probability 0, space 0, times 0 [ 190.969007][ T8166] CPU: 0 UID: 0 PID: 8166 Comm: syz.2.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.969032][ T8166] Tainted: [L]=SOFTLOCKUP [ 190.969039][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.969050][ T8166] Call Trace: [ 190.969057][ T8166] [ 190.969064][ T8166] dump_stack_lvl+0xe8/0x150 [ 190.969096][ T8166] should_fail_ex+0x410/0x560 [ 190.969127][ T8166] should_failslab+0xa8/0x100 [ 190.969155][ T8166] __kmalloc_noprof+0xfe/0x720 [ 190.969176][ T8166] ? __kmalloc_cache_noprof+0x14d/0x600 [ 190.969196][ T8166] ? mpi_alloc+0x77/0x140 [ 190.969221][ T8166] ? mpi_alloc+0x77/0x140 [ 190.969253][ T8166] mpi_alloc+0x77/0x140 [ 190.969282][ T8166] mpi_read_raw_data+0x139/0x970 [ 190.969317][ T8166] dh_set_secret+0x200/0x320 [ 190.969334][ T8166] ? crypto_create_tfm_node+0x81/0x3c0 [ 190.969363][ T8166] ? __pfx_dh_set_secret+0x10/0x10 [ 190.969384][ T8166] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 190.969418][ T8166] __keyctl_dh_compute+0x5ae/0xd10 [ 190.969450][ T8166] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 190.969507][ T8166] keyctl_dh_compute+0x124/0x180 [ 190.969538][ T8166] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 190.969571][ T8166] __se_sys_keyctl+0x44c/0x9d0 [ 190.969597][ T8166] ? __pfx___se_sys_keyctl+0x10/0x10 [ 190.969619][ T8166] ? __mutex_unlock_slowpath+0x731/0x900 [ 190.969644][ T8166] ? __fget_files+0x2a/0x420 [ 190.969663][ T8166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.969686][ T8166] ? __fget_files+0x3a2/0x420 [ 190.969707][ T8166] ? fput+0xa0/0xd0 [ 190.969731][ T8166] ? ksys_write+0x242/0x270 [ 190.969751][ T8166] ? __pfx_ksys_write+0x10/0x10 [ 190.969774][ T8166] ? __x64_sys_keyctl+0x20/0xc0 [ 190.969800][ T8166] do_syscall_64+0x166/0x520 [ 190.969820][ T8166] ? trace_irq_disable+0x3b/0x140 [ 190.969840][ T8166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.969860][ T8166] ? clear_bhb_loop+0x70/0xc0 [ 190.969883][ T8166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.969903][ T8166] RIP: 0033:0x7fba5139e2d9 [ 190.969922][ T8166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.969939][ T8166] RSP: 002b:00007fba521a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 190.969961][ T8166] RAX: ffffffffffffffda RBX: 00007fba51626090 RCX: 00007fba5139e2d9 [ 190.969975][ T8166] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000017 [ 190.969988][ T8166] RBP: 00007fba521a6090 R08: 00002000000001c0 R09: 0000000000000000 [ 190.970001][ T8166] R10: 00000000000000d0 R11: 0000000000000246 R12: 0000000000000002 [ 190.970011][ T8166] R13: 00007fba51626128 R14: 00007fba51626090 R15: 00007fba5174fa48 [ 190.970039][ T8166] [ 191.083251][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 191.102539][ T25] usb 2-1: device descriptor read/8, error -71 [ 191.212263][ T25] usb usb2-port1: unable to enumerate USB device [ 191.507878][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 191.657755][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 191.659040][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 191.660183][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.660229][ T25] usb 3-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 191.660256][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.660288][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.668953][ T25] usb 3-1: config 0 descriptor?? [ 191.718620][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 191.867691][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 191.899934][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.902597][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.049634][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 192.053062][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.089441][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 192.089459][ T9] usb 5-1: Product: syz [ 192.089467][ T9] usb 5-1: Manufacturer: syz [ 192.089475][ T9] usb 5-1: SerialNumber: syz [ 192.318492][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 192.622952][ T8179] netlink: 'syz.2.577': attribute type 4 has an invalid length. [ 192.672049][ T5700] usb 1-1: USB disconnect, device number 39 [ 194.040920][ T2241] usb 4-1: USB disconnect, device number 52 [ 194.190593][ T7006] udevd[7006]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.316002][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316061][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.372104][ T5680] usb 3-1: USB disconnect, device number 42 [ 194.859844][ T8208] FAULT_INJECTION: forcing a failure. [ 194.859844][ T8208] name failslab, interval 1, probability 0, space 0, times 0 [ 194.859878][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.2.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.859904][ T8208] Tainted: [L]=SOFTLOCKUP [ 194.859911][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 194.859922][ T8208] Call Trace: [ 194.859930][ T8208] [ 194.859939][ T8208] dump_stack_lvl+0xe8/0x150 [ 194.859971][ T8208] should_fail_ex+0x410/0x560 [ 194.859999][ T8208] should_failslab+0xa8/0x100 [ 194.860027][ T8208] __kmalloc_noprof+0xfe/0x720 [ 194.860047][ T8208] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 194.860083][ T8208] ? __keyctl_dh_compute+0x664/0xd10 [ 194.860101][ T8208] ? __keyctl_dh_compute+0x664/0xd10 [ 194.860126][ T8208] __keyctl_dh_compute+0x664/0xd10 [ 194.860154][ T8208] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 194.860210][ T8208] keyctl_dh_compute+0x124/0x180 [ 194.860233][ T8208] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 194.860267][ T8208] __se_sys_keyctl+0x44c/0x9d0 [ 194.860295][ T8208] ? __pfx___se_sys_keyctl+0x10/0x10 [ 194.860316][ T8208] ? __mutex_unlock_slowpath+0x731/0x900 [ 194.860340][ T8208] ? __fget_files+0x2a/0x420 [ 194.860361][ T8208] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.860383][ T8208] ? __fget_files+0x3a2/0x420 [ 194.860407][ T8208] ? fput+0xa0/0xd0 [ 194.860432][ T8208] ? ksys_write+0x242/0x270 [ 194.860454][ T8208] ? __pfx_ksys_write+0x10/0x10 [ 194.860477][ T8208] ? __x64_sys_keyctl+0x20/0xc0 [ 194.860504][ T8208] do_syscall_64+0x166/0x520 [ 194.860526][ T8208] ? trace_irq_disable+0x3b/0x140 [ 194.860548][ T8208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.860571][ T8208] ? clear_bhb_loop+0x70/0xc0 [ 194.860594][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.860612][ T8208] RIP: 0033:0x7fba5139e2d9 [ 194.860631][ T8208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.860647][ T8208] RSP: 002b:00007fba521a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 194.860668][ T8208] RAX: ffffffffffffffda RBX: 00007fba51626090 RCX: 00007fba5139e2d9 [ 194.860682][ T8208] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000017 [ 194.860695][ T8208] RBP: 00007fba521a6090 R08: 00002000000001c0 R09: 0000000000000000 [ 194.860707][ T8208] R10: 00000000000000d0 R11: 0000000000000246 R12: 0000000000000002 [ 194.860719][ T8208] R13: 00007fba51626128 R14: 00007fba51626090 R15: 00007fba5174fa48 [ 194.860748][ T8208] [ 195.176289][ T8217] netlink: 96 bytes leftover after parsing attributes in process `syz.2.591'. [ 195.233479][ T8219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.233940][ T8219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.319575][ T3216] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 195.437609][ T2241] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 195.468294][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 195.488340][ T3216] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 195.489377][ T3216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.489452][ T3216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.555053][ T8228] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 195.608258][ T2241] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 195.608835][ T2241] usb 3-1: config 0 has no interfaces? [ 195.612794][ T2241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.612823][ T2241] usb 3-1: Product: syz [ 195.612837][ T2241] usb 3-1: Manufacturer: syz [ 195.612850][ T2241] usb 3-1: SerialNumber: syz [ 195.642371][ T2241] usb 3-1: config 0 descriptor?? [ 195.647104][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 195.662168][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 195.692051][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.692079][ T9] usb 1-1: Product: syz [ 195.692093][ T9] usb 1-1: Manufacturer: syz [ 195.692104][ T9] usb 1-1: SerialNumber: syz [ 195.729708][ T9] usb 1-1: config 0 descriptor?? [ 195.745900][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 195.746002][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 195.746019][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 195.746138][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 195.746152][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 195.798716][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.799522][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 195.799570][ T9] usb 1-1: media controller created [ 195.843398][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.871629][ T9] usb 1-1: selecting invalid altsetting 3 [ 195.871644][ T9] ttusb2: set interface to alts=3 failed [ 195.893971][ T8217] mmap: syz.2.591 (8217): VmData 37519360 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 195.916578][ T25] usb 3-1: USB disconnect, device number 43 [ 195.986508][ T9] DVB: Unable to find symbol tda10086_attach() [ 195.986523][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 195.991502][ T8219] dvb-usb: bulk message failed: -22 (7/0) [ 195.991523][ T8219] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 196.018912][ T8219] ttusb2: i2c transfer failed. [ 196.031493][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 196.031512][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 196.031738][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 196.031751][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 196.031817][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 196.032653][ T8220] dvb-usb: bulk message failed: -22 (7/0) [ 196.032669][ T8220] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 196.032702][ T8220] ttusb2: i2c transfer failed. [ 196.191006][ T9] usb 1-1: USB disconnect, device number 40 [ 196.253301][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 196.699172][ T8238] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 196.719478][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 197.107643][ T25] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 197.237600][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 197.259362][ T25] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 197.260410][ T25] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 197.260441][ T25] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.260455][ T25] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 197.260468][ T25] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.260509][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.387604][ T9] usb 3-1: device descriptor read/64, error -71 [ 197.530583][ T8263] FAULT_INJECTION: forcing a failure. [ 197.530583][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 197.530619][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.3.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.530646][ T8263] Tainted: [L]=SOFTLOCKUP [ 197.530653][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.530664][ T8263] Call Trace: [ 197.530672][ T8263] [ 197.530680][ T8263] dump_stack_lvl+0xe8/0x150 [ 197.530702][ T8263] should_fail_ex+0x410/0x560 [ 197.530720][ T8263] should_failslab+0xa8/0x100 [ 197.530739][ T8263] __kmalloc_noprof+0xfe/0x720 [ 197.530760][ T8263] ? __virt_addr_valid+0x137/0x390 [ 197.530787][ T8263] ? __virt_addr_valid+0x2e8/0x390 [ 197.530810][ T8263] ? __keyctl_dh_compute+0x6b4/0xd10 [ 197.530829][ T8263] ? __keyctl_dh_compute+0x6b4/0xd10 [ 197.530841][ T8263] ? sg_init_one+0xf5/0x1c0 [ 197.530855][ T8263] __keyctl_dh_compute+0x6b4/0xd10 [ 197.530871][ T8263] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 197.530916][ T8263] keyctl_dh_compute+0x124/0x180 [ 197.530941][ T8263] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 197.530976][ T8263] __se_sys_keyctl+0x44c/0x9d0 [ 197.530994][ T8263] ? __pfx___se_sys_keyctl+0x10/0x10 [ 197.531006][ T8263] ? __mutex_unlock_slowpath+0x731/0x900 [ 197.531021][ T8263] ? __fget_files+0x2a/0x420 [ 197.531032][ T8263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.531055][ T8263] ? __fget_files+0x3a2/0x420 [ 197.531079][ T8263] ? fput+0xa0/0xd0 [ 197.531106][ T8263] ? ksys_write+0x242/0x270 [ 197.531128][ T8263] ? __pfx_ksys_write+0x10/0x10 [ 197.531144][ T8263] ? __x64_sys_keyctl+0x20/0xc0 [ 197.531158][ T8263] do_syscall_64+0x166/0x520 [ 197.531169][ T8263] ? trace_irq_disable+0x3b/0x140 [ 197.531181][ T8263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.531209][ T8263] ? clear_bhb_loop+0x70/0xc0 [ 197.531233][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.531253][ T8263] RIP: 0033:0x7f827cf9e2d9 [ 197.531270][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.531284][ T8263] RSP: 002b:00007f827dec9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 197.531296][ T8263] RAX: ffffffffffffffda RBX: 00007f827d226090 RCX: 00007f827cf9e2d9 [ 197.531304][ T8263] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000017 [ 197.531311][ T8263] RBP: 00007f827dec9090 R08: 00002000000001c0 R09: 0000000000000000 [ 197.531317][ T8263] R10: 00000000000000d0 R11: 0000000000000246 R12: 0000000000000002 [ 197.531324][ T8263] R13: 00007f827d226128 R14: 00007f827d226090 R15: 00007f827d34fa48 [ 197.531348][ T8263] [ 197.629655][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 197.820232][ T9] usb 3-1: device descriptor read/64, error -71 [ 197.928422][ T9] usb usb3-port1: attempt power cycle [ 197.994672][ T3216] usbhid 2-1:1.0: can't add hid device: -71 [ 197.994813][ T3216] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 198.017920][ T3216] usb 2-1: USB disconnect, device number 38 [ 198.080945][ T8271] FAULT_INJECTION: forcing a failure. [ 198.080945][ T8271] name failslab, interval 1, probability 0, space 0, times 0 [ 198.080971][ T8271] CPU: 0 UID: 0 PID: 8271 Comm: syz.1.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.080986][ T8271] Tainted: [L]=SOFTLOCKUP [ 198.080992][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.081003][ T8271] Call Trace: [ 198.081011][ T8271] [ 198.081019][ T8271] dump_stack_lvl+0xe8/0x150 [ 198.081053][ T8271] should_fail_ex+0x410/0x560 [ 198.081085][ T8271] should_failslab+0xa8/0x100 [ 198.081102][ T8271] ? skb_clone+0x212/0x3a0 [ 198.081115][ T8271] kmem_cache_alloc_noprof+0xa1/0x600 [ 198.081128][ T8271] ? skb_clone+0x212/0x3a0 [ 198.081143][ T8271] skb_clone+0x212/0x3a0 [ 198.081167][ T8271] __netlink_deliver_tap+0x413/0x860 [ 198.081204][ T8271] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.081229][ T8271] netlink_deliver_tap+0x19c/0x1b0 [ 198.081247][ T8271] netlink_sendskb+0x68/0x140 [ 198.081259][ T8271] netlink_rcv_skb+0x2a4/0x4a0 [ 198.081280][ T8271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.081301][ T8271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.081337][ T8271] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.081361][ T8271] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.081389][ T8271] netlink_unicast+0x7bd/0x940 [ 198.081407][ T8271] netlink_sendmsg+0x813/0xb40 [ 198.081425][ T8271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.081442][ T8271] ? apparmor_socket_sendmsg+0x98/0x360 [ 198.081469][ T8271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.081492][ T8271] sock_sendmsg_nosec+0x13a/0x180 [ 198.081521][ T8271] ____sys_sendmsg+0x54e/0x850 [ 198.081545][ T8271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.081561][ T8271] ? import_iovec+0x73/0xa0 [ 198.081579][ T8271] ___sys_sendmsg+0x2a5/0x360 [ 198.081589][ T8271] ? __lock_acquire+0x747/0x2de0 [ 198.081609][ T8271] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.081665][ T8271] ? __fget_files+0x2a/0x420 [ 198.081683][ T8271] ? __fget_files+0x3a2/0x420 [ 198.081702][ T8271] __x64_sys_sendmsg+0x1b1/0x290 [ 198.081715][ T8271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.081737][ T8271] do_syscall_64+0x166/0x520 [ 198.081751][ T8271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.081771][ T8271] ? clear_bhb_loop+0x70/0xc0 [ 198.081794][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.081813][ T8271] RIP: 0033:0x7f0c74f9e2d9 [ 198.081831][ T8271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.081848][ T8271] RSP: 002b:00007f0c75e04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.081869][ T8271] RAX: ffffffffffffffda RBX: 00007f0c75225fa0 RCX: 00007f0c74f9e2d9 [ 198.081884][ T8271] RDX: 0000000040048054 RSI: 00002000000005c0 RDI: 0000000000000003 [ 198.081896][ T8271] RBP: 00007f0c75e04090 R08: 0000000000000000 R09: 0000000000000000 [ 198.081908][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.081920][ T8271] R13: 00007f0c75226038 R14: 00007f0c75225fa0 R15: 00007f0c7534fa48 [ 198.081951][ T8271] [ 198.395587][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 198.410785][ T9] usb 3-1: device descriptor read/8, error -71 [ 198.492780][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 198.492818][ T8273] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 198.647583][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 198.667212][ T8266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.667381][ T8266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.670485][ T8266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.670826][ T8266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.671115][ T8266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.696657][ T9] usb 3-1: device descriptor read/8, error -71 [ 198.797977][ T9] usb usb3-port1: unable to enumerate USB device [ 198.919012][ T5763] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 199.068293][ T5763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 199.069282][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.069299][ T5763] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.069331][ T5763] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.071354][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.071379][ T5763] usb 2-1: Product: syz [ 199.071393][ T5763] usb 2-1: Manufacturer: syz [ 199.071446][ T5763] usb 2-1: SerialNumber: syz [ 199.077033][ T5763] hub 2-1:1.0: bad descriptor, ignoring hub [ 199.077103][ T5763] hub 2-1:1.0: probe with driver hub failed with error -5 [ 199.227617][ T3216] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 199.233696][ T9] usb 5-1: USB disconnect, device number 55 [ 199.255046][ T9] usblp0: removed [ 199.289770][ T5763] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.364345][ T8288] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 199.378065][ T3216] usb 4-1: Using ep0 maxpacket: 32 [ 199.378736][ T3216] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 199.379744][ T3216] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 199.379761][ T3216] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 199.379772][ T3216] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 199.379800][ T3216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.379812][ T3216] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.379842][ T3216] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.379866][ T3216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.383786][ T3216] usb 4-1: config 0 descriptor?? [ 199.553706][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.566032][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.603631][ T3216] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 199.636538][ T3216] usb 2-1: USB disconnect, device number 39 [ 199.644369][ T3216] usblp0: removed [ 199.900922][ T25] usb 1-1: string descriptor 0 read error: -71 [ 199.908444][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.103618][ T25] usb 1-1: USB disconnect, device number 41 [ 200.399126][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 200.424114][ T25] usb 4-1: USB disconnect, device number 53 [ 200.443558][ T25] usblp1: removed [ 200.488158][ T3216] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 200.638248][ T3216] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 200.639217][ T3216] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.639250][ T3216] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.639261][ T3216] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.639273][ T3216] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.639296][ T3216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.642086][ T8310] nvme nvme0: rdma connection establishment failed (-104) [ 200.709348][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.709415][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.709442][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.712319][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.047833][ T2241] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 201.060761][ T3216] gud 3-1:1.0: No supported pixel formats found [ 201.060792][ T3216] gud 3-1:1.0: probe with driver gud failed with error -22 [ 201.198359][ T2241] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 201.199485][ T2241] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.199532][ T2241] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.199555][ T2241] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.199578][ T2241] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.199618][ T2241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.203999][ T8331] netlink: 'syz.0.621': attribute type 11 has an invalid length. [ 201.945133][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 202.031698][ T8358] ovs-dp0: entered promiscuous mode [ 202.033351][ T8359] ovs-dp0: left promiscuous mode [ 202.368195][ T190] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 202.419909][ T8362] pimreg: entered allmulticast mode [ 202.517652][ T190] usb 5-1: Using ep0 maxpacket: 32 [ 202.518433][ T190] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 202.519871][ T190] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 202.519897][ T190] usb 5-1: config 0 has no interface number 0 [ 202.519936][ T190] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.519986][ T190] usb 5-1: config 0 interface 85 has no altsetting 0 [ 202.524508][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.524527][ T190] usb 5-1: Product: syz [ 202.524534][ T190] usb 5-1: Manufacturer: syz [ 202.524542][ T190] usb 5-1: SerialNumber: syz [ 202.526884][ T190] usb 5-1: config 0 descriptor?? [ 202.831982][ T190] appletouch 5-1:0.85: Failed to read mode from device. [ 202.832253][ T190] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 202.869153][ T190] usb 5-1: USB disconnect, device number 56 [ 202.929409][ T8381] fuse: Unknown parameter 'éfd' [ 203.114140][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 203.159558][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 203.161001][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 203.161966][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 203.162699][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 203.163420][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 203.164149][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 203.164736][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 203.445328][ T25] usb 3-1: USB disconnect, device number 48 [ 203.609553][ T3216] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 203.637329][ T8393] netlink: 'syz.4.629': attribute type 44 has an invalid length. [ 203.758979][ T3216] usb 1-1: Using ep0 maxpacket: 16 [ 203.759804][ T3216] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 203.760832][ T3216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.760909][ T3216] usb 1-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 203.760935][ T3216] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.760965][ T3216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.770074][ T3216] usb 1-1: config 0 descriptor?? [ 203.789758][ T3216] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 203.878790][ T5680] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 203.957778][ T5700] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 203.982730][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.983388][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.028307][ T5680] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 204.031078][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 204.031107][ T5680] usb 5-1: Product: syz [ 204.033593][ T5680] usb 5-1: config 0 descriptor?? [ 204.042411][ T5680] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 204.047805][ T5680] usb 5-1: Detected FT232H [ 204.107682][ T5700] usb 2-1: Using ep0 maxpacket: 16 [ 204.108610][ T5700] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.111099][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.111130][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.111150][ T5700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.111211][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.114853][ T5700] usb 2-1: config 0 descriptor?? [ 204.248156][ T5680] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 204.353124][ T2241] gud 4-1:1.0: probe with driver gud failed with error -71 [ 204.378410][ T2241] usb 4-1: USB disconnect, device number 54 [ 204.462996][ T50] nvmet: connect request for invalid subsystem testsubsys! [ 204.464439][ T8395] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 204.699086][ T5680] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 204.702430][ T8412] netlink: 'syz.0.628': attribute type 4 has an invalid length. [ 204.916297][ T8393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.922259][ T8393] bond0: (slave bond1): Enslaving as an active interface with an up link [ 204.956919][ T8393] batman_adv: batadv0: Adding interface: ipvlan2 [ 204.956939][ T8393] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.956968][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.956979][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.956988][ T8393] batman_adv: batadv0: Interface activated: ipvlan2 [ 204.975008][ T25] usb 5-1: USB disconnect, device number 57 [ 204.998328][ T3216] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 205.069668][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 205.070916][ T25] ftdi_sio 5-1:0.0: device disconnected [ 205.148387][ T3216] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 205.149942][ T3216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 205.152541][ T3216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.152566][ T3216] usb 4-1: Product: syz [ 205.152580][ T3216] usb 4-1: Manufacturer: syz [ 205.152595][ T3216] usb 4-1: SerialNumber: syz [ 205.155892][ T3216] usb 4-1: config 0 descriptor?? [ 205.162998][ T3216] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 04, bLength 9, bSynchAddress 00 [ 205.360918][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.361748][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.571591][ T190] usb 4-1: USB disconnect, device number 55 [ 205.752623][ T8433] syzkaller1: entered promiscuous mode [ 205.752639][ T8433] syzkaller1: entered allmulticast mode [ 205.757024][ T8433] xfrm0: entered promiscuous mode [ 205.757055][ T8433] xfrm0: entered allmulticast mode [ 205.947889][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 206.077854][ T25] usb 5-1: device descriptor read/64, error -71 [ 206.298690][ T8442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.317614][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 206.378041][ T190] usb 1-1: USB disconnect, device number 42 [ 206.447930][ T25] usb 5-1: device descriptor read/64, error -71 [ 206.558030][ T25] usb usb5-port1: attempt power cycle [ 206.739169][ T3216] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 206.747158][ T5700] usbhid 2-1:0.0: can't add hid device: -71 [ 206.747374][ T5700] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 206.794060][ T5700] usb 2-1: USB disconnect, device number 40 [ 206.867754][ T190] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 206.888246][ T3216] usb 3-1: Using ep0 maxpacket: 32 [ 206.895355][ T3216] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.895405][ T3216] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 206.898690][ T3216] usb 3-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 206.898716][ T3216] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 206.900274][ T25] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 206.906499][ T3216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.906525][ T3216] usb 3-1: Product: syz [ 206.906538][ T3216] usb 3-1: Manufacturer: syz [ 206.906552][ T3216] usb 3-1: SerialNumber: syz [ 206.928239][ T25] usb 5-1: device descriptor read/8, error -71 [ 206.966274][ T8447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 207.038024][ T190] usb 1-1: Using ep0 maxpacket: 8 [ 207.038833][ T190] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.041022][ T190] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 207.041056][ T190] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 207.041079][ T190] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.041099][ T190] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.041204][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.169110][ T25] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 207.189060][ T25] usb 5-1: device descriptor read/8, error -71 [ 207.191838][ T8442] netlink: 'syz.2.641': attribute type 3 has an invalid length. [ 207.191857][ T8442] __nla_validate_parse: 26 callbacks suppressed [ 207.191869][ T8442] netlink: 3 bytes leftover after parsing attributes in process `syz.2.641'. [ 207.248007][ T190] usb 1-1: GET_CAPABILITIES returned 0 [ 207.248057][ T190] usbtmc 1-1:16.0: can't read capabilities [ 207.298972][ T25] usb usb5-port1: unable to enumerate USB device [ 207.357614][ T5700] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 207.455158][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.455755][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.457902][ T25] usb 1-1: USB disconnect, device number 43 [ 207.520094][ T5700] usb 2-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 207.522008][ T5700] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.522121][ T5700] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.524641][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.524669][ T5700] usb 2-1: Product: syz [ 207.524682][ T5700] usb 2-1: Manufacturer: syz [ 207.524697][ T5700] usb 2-1: SerialNumber: syz [ 207.583520][ T5700] qcserial 2-1:1.0: Qualcomm USB modem converter detected [ 207.799466][ T5700] usb 2-1: USB disconnect, device number 41 [ 207.846479][ T5700] qcserial 2-1:1.0: device disconnected [ 208.217342][ T8465] fuse: Bad value for 'fd' [ 208.929064][ T5700] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 208.954357][ T190] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 209.077652][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 209.078621][ T5700] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 209.080121][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.080172][ T5700] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 209.080199][ T5700] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.080232][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.086365][ T5700] usb 4-1: config 0 descriptor?? [ 209.151842][ T190] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 209.153631][ T190] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 209.153659][ T190] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.153677][ T190] usb 2-1: config 0 has no interface number 0 [ 209.153715][ T190] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.209151][ T5700] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 209.212302][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.212324][ T190] usb 2-1: Product: syz [ 209.212331][ T190] usb 2-1: Manufacturer: syz [ 209.212339][ T190] usb 2-1: SerialNumber: syz [ 209.252860][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 209.252959][ T8488] netlink: 56 bytes leftover after parsing attributes in process `syz.4.655'. [ 209.253071][ T190] usb 2-1: config 0 descriptor?? [ 209.280105][ T190] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 209.282428][ T190] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 209.307869][ T3216] usb 3-1: USB disconnect, device number 49 [ 209.334588][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.336755][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.492732][ T190] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 209.510989][ T5680] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 209.659607][ T5680] usb 5-1: Using ep0 maxpacket: 8 [ 209.660819][ T5680] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.664419][ T5680] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 209.664470][ T5680] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.664492][ T5680] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.664514][ T5680] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.664527][ T5680] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.664550][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.772118][ T190] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 210.105527][ T8509] netlink: 'syz.3.652': attribute type 4 has an invalid length. [ 210.227615][ T190] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 210.270427][ T5680] usb 5-1: usb_control_msg returned -32 [ 210.270465][ T5680] usbtmc 5-1:16.0: can't read capabilities [ 210.387571][ T190] usb 1-1: Using ep0 maxpacket: 32 [ 210.388746][ T190] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 210.389610][ T190] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 210.389626][ T190] usb 1-1: config 0 has no interface number 0 [ 210.391555][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.391570][ T190] usb 1-1: Product: syz [ 210.391577][ T190] usb 1-1: Manufacturer: syz [ 210.391584][ T190] usb 1-1: SerialNumber: syz [ 210.393326][ T190] usb 1-1: config 0 descriptor?? [ 210.397001][ T190] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 210.599669][ T190] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 210.604575][ T190] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 210.806739][ T8514] input: syz1 as /devices/virtual/input/input19 [ 210.840262][ T8514] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 210.906232][ T5977] nvmet: connect request for invalid subsystem t! [ 210.915062][ T8514] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 211.080046][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 211.084463][ T25] usb 1-1: USB disconnect, device number 44 [ 211.104206][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 211.120991][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 211.123465][ T25] quatech2 1-1:0.51: device disconnected [ 211.457655][ T5680] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 211.537972][ T190] usb 2-1: USB disconnect, device number 42 [ 211.538610][ T190] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 211.611066][ T5680] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 211.617231][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.617270][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.617308][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.621109][ T5680] usb 3-1: config 0 descriptor?? [ 211.705924][ T25] usb 4-1: USB disconnect, device number 56 [ 211.838238][ T5680] hid_parser_main: 21 callbacks suppressed [ 211.838263][ T5680] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 211.865347][ T5680] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 211.929332][ T5680] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 211.929660][ T5680] hid-steam 0003:28DE:1142.0007: No HID_FEATURE_REPORT present for ID 0 [ 211.929681][ T5680] hid-steam 0003:28DE:1142.0007: steam_probe:steam_get_conn_status failed with error -22 [ 211.993694][ T5680] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 212.053779][ T5680] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 212.099824][ T190] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 212.258539][ T190] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 212.260998][ T190] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.264668][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.264695][ T190] usb 2-1: Product: syz [ 212.264710][ T190] usb 2-1: Manufacturer: syz [ 212.264725][ T190] usb 2-1: SerialNumber: syz [ 212.289366][ T190] usb 2-1: config 0 descriptor?? [ 212.335234][ T190] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 212.533288][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.533691][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.764966][ T190] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 212.765044][ T190] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 212.786419][ T190] usb 2-1: USB disconnect, device number 43 [ 212.927757][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 213.089096][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 213.089779][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 213.092784][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.093303][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.098081][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.098570][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.105468][ T8556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.105921][ T8556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.109834][ T5680] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 213.174752][ T9] usb 1-1: string descriptor 0 read error: -71 [ 213.174919][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.198256][ T9] usb 1-1: can't set config #1, error -71 [ 213.200506][ T9] usb 1-1: USB disconnect, device number 45 [ 213.257678][ T5680] usb 3-1: device descriptor read/64, error -32 [ 213.331578][ T8561] binder: 8560:8561 ioctl c0306201 200000000240 returned -14 [ 213.331963][ T8561] binder: 8560:8561 ioctl c0306201 2000000002c0 returned -22 [ 213.508604][ T5680] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 213.619461][ T8564] netlink: 'syz.1.672': attribute type 4 has an invalid length. [ 213.637584][ T5680] usb 3-1: device descriptor read/64, error -32 [ 213.839227][ T190] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 213.877755][ T5680] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 213.898509][ T5680] usb 3-1: device descriptor read/8, error -32 [ 213.947636][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 213.988061][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 213.989005][ T190] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 213.991547][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.025880][ T190] usb 4-1: USB2VGA dongle found at address 57 [ 214.035228][ T190] usb 4-1: Allocated 8 output buffers [ 214.108703][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 214.109465][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.110403][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.110427][ T9] usb 2-1: config 0 has no interface number 0 [ 214.112439][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.112455][ T9] usb 2-1: Product: syz [ 214.112482][ T9] usb 2-1: Manufacturer: syz [ 214.112490][ T9] usb 2-1: SerialNumber: syz [ 214.114563][ T9] usb 2-1: config 0 descriptor?? [ 214.137930][ T5680] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 214.158450][ T5680] usb 3-1: device descriptor read/8, error -32 [ 214.191505][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 214.191571][ T10] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 214.192565][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.192588][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.192663][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 214.192684][ T10] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 214.192704][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 214.192718][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 214.196739][ T10] usb 1-1: string descriptor 0 read error: -22 [ 214.196851][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.328241][ T5763] usb 3-1: USB disconnect, device number 50 [ 214.374579][ T5763] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 214.494172][ T8578] ip_tables: iptables: counters copy to user failed while replacing table [ 214.506707][ T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 214.535412][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 214.535452][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 214.599422][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.677'. [ 214.976343][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.673'. [ 215.218584][ T5763] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 215.368540][ T5763] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.371583][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.371611][ T5763] usb 3-1: Product: syz [ 215.371625][ T5763] usb 3-1: Manufacturer: syz [ 215.371639][ T5763] usb 3-1: SerialNumber: syz [ 215.528604][ T5680] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.938909][ T10] usb 3-1: USB disconnect, device number 51 [ 216.078042][ T8516] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 216.117777][ T3216] usb 5-1: USB disconnect, device number 62 [ 216.153936][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 216.154278][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 216.628125][ T5680] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 216.628332][ T5680] ath9k_htc: Failed to initialize the device [ 216.637976][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 216.760834][ T9] usb 1-1: USB disconnect, device number 46 [ 216.957632][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 217.132568][ T10] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 217.133874][ T10] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 217.133898][ T10] usb 3-1: config 1 has no interface number 0 [ 217.133925][ T10] usb 3-1: config 1 interface 1 has no altsetting 0 [ 217.141610][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.141638][ T10] usb 3-1: Product: syz [ 217.141651][ T10] usb 3-1: Manufacturer: syz [ 217.141664][ T10] usb 3-1: SerialNumber: syz [ 217.373661][ T190] usb 4-1: Failed to early initialize device [ 217.405937][ T190] usb 4-1: USB disconnect, device number 57 [ 217.509609][ T10] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 217.509685][ T10] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 217.509738][ T10] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 217.541414][ T10] usb 3-1: USB disconnect, device number 52 [ 217.556325][ T5763] usb 2-1: USB disconnect, device number 44 [ 218.067801][ T3216] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 218.085494][ T5763] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 218.174499][ T8632] netlink: 'syz.3.691': attribute type 11 has an invalid length. [ 218.174589][ T8632] netlink: 448 bytes leftover after parsing attributes in process `syz.3.691'. [ 218.208226][ T5763] usb 2-1: device descriptor read/64, error -71 [ 218.238581][ T3216] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 218.241464][ T3216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.241491][ T3216] usb 1-1: Product: syz [ 218.241505][ T3216] usb 1-1: Manufacturer: syz [ 218.241519][ T3216] usb 1-1: SerialNumber: syz [ 218.449305][ T5763] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 218.577916][ T5763] usb 2-1: device descriptor read/64, error -71 [ 218.683299][ T3216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 218.683365][ T3216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 218.701102][ T5763] usb usb2-port1: attempt power cycle [ 219.057848][ T5763] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 219.078215][ T5763] usb 2-1: device descriptor read/8, error -71 [ 219.327334][ T5763] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 219.352707][ T5763] usb 2-1: device descriptor read/8, error -71 [ 219.457957][ T5763] usb usb2-port1: unable to enumerate USB device [ 219.677884][ T5680] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 219.829019][ T5680] usb 4-1: Using ep0 maxpacket: 8 [ 219.829681][ T5680] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 219.832550][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.832601][ T5680] usb 4-1: Product: syz [ 219.832615][ T5680] usb 4-1: Manufacturer: syz [ 219.832630][ T5680] usb 4-1: SerialNumber: syz [ 219.834627][ T5680] usb 4-1: config 0 descriptor?? [ 219.843872][ T5680] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 219.896672][ T3216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 219.957779][ T5763] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 220.107775][ T5763] usb 3-1: Using ep0 maxpacket: 32 [ 220.108354][ T5763] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 220.109252][ T5763] usb 3-1: config 245 has an invalid interface number: 214 but max is 0 [ 220.109267][ T5763] usb 3-1: config 245 has no interface number 0 [ 220.109289][ T5763] usb 3-1: config 245 interface 214 has no altsetting 0 [ 220.111101][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.111115][ T5763] usb 3-1: Product: syz [ 220.111123][ T5763] usb 3-1: Manufacturer: syz [ 220.111131][ T5763] usb 3-1: SerialNumber: syz [ 220.501118][ T3216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 220.503414][ T3216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 220.503504][ T3216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 220.543656][ T3216] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 220.547155][ T3216] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 220.588643][ T3216] usb 1-1: USB disconnect, device number 47 [ 220.649090][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 220.880268][ T8661] FAULT_INJECTION: forcing a failure. [ 220.880268][ T8661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.880305][ T8661] CPU: 0 UID: 0 PID: 8661 Comm: syz.1.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.880339][ T8661] Tainted: [L]=SOFTLOCKUP [ 220.880346][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.880357][ T8661] Call Trace: [ 220.880365][ T8661] [ 220.880373][ T8661] dump_stack_lvl+0xe8/0x150 [ 220.880407][ T8661] should_fail_ex+0x410/0x560 [ 220.880438][ T8661] _copy_to_user+0x31/0xb0 [ 220.880459][ T8661] keyctl_dh_compute_kdf+0x18a/0x250 [ 220.880482][ T8661] ? __pfx_keyctl_dh_compute_kdf+0x10/0x10 [ 220.880510][ T8661] __keyctl_dh_compute+0xaac/0xd10 [ 220.880542][ T8661] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 220.880596][ T8661] keyctl_dh_compute+0x124/0x180 [ 220.880619][ T8661] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 220.880653][ T8661] __se_sys_keyctl+0x44c/0x9d0 [ 220.880681][ T8661] ? __pfx___se_sys_keyctl+0x10/0x10 [ 220.880704][ T8661] ? __mutex_unlock_slowpath+0x731/0x900 [ 220.880729][ T8661] ? __fget_files+0x2a/0x420 [ 220.880749][ T8661] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.880775][ T8661] ? __fget_files+0x3a2/0x420 [ 220.880799][ T8661] ? fput+0xa0/0xd0 [ 220.880824][ T8661] ? ksys_write+0x242/0x270 [ 220.880846][ T8661] ? __pfx_ksys_write+0x10/0x10 [ 220.880872][ T8661] ? __x64_sys_keyctl+0x20/0xc0 [ 220.880898][ T8661] do_syscall_64+0x166/0x520 [ 220.880920][ T8661] ? trace_irq_disable+0x3b/0x140 [ 220.880941][ T8661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.880961][ T8661] ? clear_bhb_loop+0x70/0xc0 [ 220.880985][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.881004][ T8661] RIP: 0033:0x7f0c74f9e2d9 [ 220.881023][ T8661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.881040][ T8661] RSP: 002b:00007f0c75de3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 220.881062][ T8661] RAX: ffffffffffffffda RBX: 00007f0c75226090 RCX: 00007f0c74f9e2d9 [ 220.881076][ T8661] RDX: 00002000000005c0 RSI: 0000200000000000 RDI: 0000000000000017 [ 220.881090][ T8661] RBP: 00007f0c75de3090 R08: 00002000000001c0 R09: 0000000000000000 [ 220.881103][ T8661] R10: 00000000000000d0 R11: 0000000000000246 R12: 0000000000000002 [ 220.881115][ T8661] R13: 00007f0c75226128 R14: 00007f0c75226090 R15: 00007f0c7534fa48 [ 220.881145][ T8661] [ 221.227967][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 221.377673][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 221.378483][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.379682][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.379707][ T10] usb 2-1: config 0 has no interface number 0 [ 221.382931][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.382958][ T10] usb 2-1: Product: syz [ 221.382972][ T10] usb 2-1: Manufacturer: syz [ 221.382987][ T10] usb 2-1: SerialNumber: syz [ 221.390725][ T10] usb 2-1: config 0 descriptor?? [ 221.404996][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.407785][ T8673] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.529610][ T190] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 221.657714][ T190] usb 1-1: device descriptor read/64, error -71 [ 221.675859][ T10] usb 2-1: qt2_attach - failed to power on unit: -71 [ 221.676097][ T10] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 221.693276][ T10] usb 2-1: USB disconnect, device number 49 [ 221.757721][ T3216] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 221.897628][ T190] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 221.917124][ T3216] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 221.928208][ T3216] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 221.928243][ T3216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.928296][ T3216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.930477][ T3216] usb 5-1: config 0 descriptor?? [ 221.931378][ T8679] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 222.037618][ T190] usb 1-1: device descriptor read/64, error -71 [ 222.148802][ T190] usb usb1-port1: attempt power cycle [ 222.242630][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 222.275204][ T8682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.336734][ T3216] hid (null): bogus close delimiter [ 222.346416][ T3216] hid (null): bogus close delimiter [ 222.370204][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.370265][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.370293][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.370319][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.370344][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.373069][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.373106][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.373131][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.373156][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.373208][ T3216] razer 0003:1532:010D.0009: unknown main item tag 0x0 [ 222.373355][ T3216] razer 0003:1532:010D.0009: bogus close delimiter [ 222.373368][ T3216] razer 0003:1532:010D.0009: item 0 0 2 10 parsing failed [ 222.374269][ T3216] razer 0003:1532:010D.0009: probe with driver razer failed with error -22 [ 222.419686][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.421325][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.473563][ T8640] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 222.537616][ T190] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 222.561264][ T190] usb 1-1: device descriptor read/8, error -71 [ 222.603230][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 222.603417][ T8688] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 222.625778][ T8697] FAULT_INJECTION: forcing a failure. [ 222.625778][ T8697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.625813][ T8697] CPU: 1 UID: 0 PID: 8697 Comm: syz.1.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.625839][ T8697] Tainted: [L]=SOFTLOCKUP [ 222.625846][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.625860][ T8697] Call Trace: [ 222.625867][ T8697] [ 222.625876][ T8697] dump_stack_lvl+0xe8/0x150 [ 222.625908][ T8697] should_fail_ex+0x410/0x560 [ 222.625940][ T8697] _copy_to_user+0x31/0xb0 [ 222.625961][ T8697] simple_read_from_buffer+0xe1/0x170 [ 222.625995][ T8697] proc_fail_nth_read+0x1bb/0x230 [ 222.626016][ T8697] ? common_file_perm+0x20e/0x2b0 [ 222.626046][ T8697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.626071][ T8697] ? rw_verify_area+0x24a/0x4c0 [ 222.626093][ T8697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.626114][ T8697] vfs_read+0x213/0xa80 [ 222.626138][ T8697] ? __pfx___mutex_lock+0x10/0x10 [ 222.626161][ T8697] ? __pfx_vfs_read+0x10/0x10 [ 222.626182][ T8697] ? __fget_files+0x2a/0x420 [ 222.626203][ T8697] ? __fget_files+0x3a2/0x420 [ 222.626219][ T8697] ? __fget_files+0x2a/0x420 [ 222.626245][ T8697] ksys_read+0x150/0x270 [ 222.626266][ T8697] ? __pfx_ksys_read+0x10/0x10 [ 222.626297][ T8697] do_syscall_64+0x166/0x520 [ 222.626317][ T8697] ? trace_irq_disable+0x3b/0x140 [ 222.626339][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.626357][ T8697] ? clear_bhb_loop+0x70/0xc0 [ 222.626380][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.626399][ T8697] RIP: 0033:0x7f0c74f5eb0e [ 222.626418][ T8697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.626435][ T8697] RSP: 002b:00007f0c75de2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.626455][ T8697] RAX: ffffffffffffffda RBX: 00007f0c75de36c0 RCX: 00007f0c74f5eb0e [ 222.626469][ T8697] RDX: 000000000000000f RSI: 00007f0c75de30a0 RDI: 0000000000000003 [ 222.626482][ T8697] RBP: 00007f0c75de3090 R08: 0000000000000000 R09: 0000000000000000 [ 222.626494][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.626505][ T8697] R13: 00007f0c75226128 R14: 00007f0c75226090 R15: 00007f0c7534fa48 [ 222.626536][ T8697] [ 222.690916][ T3216] usb 5-1: USB disconnect, device number 63 [ 222.773206][ T5680] gspca_sonixj: reg_w1 err -110 [ 222.809122][ T5680] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 222.890701][ T190] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 222.934958][ T190] usb 1-1: device descriptor read/8, error -71 [ 223.040446][ T190] usb usb1-port1: unable to enumerate USB device [ 223.130513][ T190] usb 4-1: USB disconnect, device number 58 [ 223.137822][ T30] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 223.224918][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.224934][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.225043][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.225051][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.225130][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.225162][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.225272][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.225302][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.225387][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.225395][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.225506][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.225514][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.225617][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.225626][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.225735][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.225744][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.225826][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.225834][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.227844][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.227857][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.227949][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.227957][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228042][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228050][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228135][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228143][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228226][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228234][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228316][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228324][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228402][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228410][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228498][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228506][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228591][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228599][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228681][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228688][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228770][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228777][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228863][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228870][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.228952][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.228960][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.229043][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.229051][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.229134][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.229142][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.229233][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.229240][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.229322][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.229330][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.263173][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.263186][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.263287][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.263294][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.263378][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.263384][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.263481][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.263489][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.263593][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.263601][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.263681][ T8705] binder: BINDER_SET_CONTEXT_MGR already set [ 223.263688][ T8705] binder: 8702:8705 ioctl 4018620d 200000000340 returned -16 [ 223.313406][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.313747][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.313905][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.314064][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.317012][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.317025][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.317105][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.317113][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.317217][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.317225][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.317302][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.317309][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.317388][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.317395][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.320205][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.320216][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.320342][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.320350][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.320429][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.320437][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.320516][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.320523][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.320602][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.320608][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.320711][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.320718][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.320797][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.320804][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.327506][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.327520][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.327619][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.327627][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.327707][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.327714][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.327795][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.327802][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.327885][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.327891][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.327978][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.327986][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.328066][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.328073][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.328151][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.328158][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.328237][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.328245][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.328323][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.328330][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.328409][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.328417][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.328575][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.328774][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.328929][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.329089][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.329235][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.329385][ T8703] binder_alloc: binder_alloc_mmap_handler: 8702 200000ffd000-200001000000 already mapped failed -16 [ 223.331868][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.331880][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.331982][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.331989][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.332069][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.332076][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.332155][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.332162][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.335620][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.335632][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.335717][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.335724][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.335807][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.335814][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.335894][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.335901][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.335987][ T8704] binder: BINDER_SET_CONTEXT_MGR already set [ 223.335995][ T8704] binder: 8702:8704 ioctl 4018620d 200000000480 returned -16 [ 223.393131][ T30] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 223.421149][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.533480][ T30] usb 2-1: config 0 descriptor?? [ 223.766986][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.767411][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.779073][ T30] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 223.807331][ T30] [drm:udl_init] *ERROR* Selecting channel failed [ 223.809606][ T8709] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 224.335912][ T30] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 224.335939][ T30] [drm] Initialized udl on minor 1 [ 224.351986][ T30] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 224.352552][ T30] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 224.379445][ T30] usb 2-1: USB disconnect, device number 50 [ 224.387006][ T3216] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 224.410178][ T3216] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 224.481171][ T8709] bond2: entered promiscuous mode [ 224.481429][ T8709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.701460][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 224.786602][ T190] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.921166][ T30] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 225.088001][ T30] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 225.123056][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.123085][ T30] usb 2-1: Product: syz [ 225.123099][ T30] usb 2-1: Manufacturer: syz [ 225.123114][ T30] usb 2-1: SerialNumber: syz [ 225.173247][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 225.208039][ T3216] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 225.348957][ T5763] f81534a_ctrl 3-1:245.214: failed to enable ports: -110 [ 225.348980][ T5763] f81534a_ctrl 3-1:245.214: probe with driver f81534a_ctrl failed with error -110 [ 225.667908][ T30] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 225.841308][ T5680] usb 2-1: USB disconnect, device number 51 [ 225.896341][ T30] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 225.896369][ T30] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 225.899367][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.899393][ T30] usb 1-1: config 1 has no interface number 0 [ 225.903844][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.903872][ T30] usb 1-1: config 1 has no interface number 0 [ 225.906609][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.906634][ T30] usb 1-1: config 1 has no interface number 0 [ 225.907973][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.907997][ T30] usb 1-1: config 1 has no interface number 0 [ 225.908878][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.908898][ T30] usb 1-1: config 1 has no interface number 0 [ 225.911879][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.911903][ T30] usb 1-1: config 1 has no interface number 0 [ 225.914811][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.914836][ T30] usb 1-1: config 1 has no interface number 0 [ 225.915890][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.915912][ T30] usb 1-1: config 1 has no interface number 0 [ 225.928636][ T30] usb 1-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 225.928664][ T30] usb 1-1: Product: syz [ 225.928677][ T30] usb 1-1: Manufacturer: syz [ 225.928691][ T30] usb 1-1: SerialNumber: syz [ 225.981286][ T30] usb 1-1: 3:0 : does not exist [ 225.981311][ T30] usb 1-1: 3:0 : does not exist [ 226.310619][ T3216] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 226.326018][ T3216] ath9k_htc: Failed to initialize the device [ 226.330678][ T5680] usb 2-1: ath9k_htc: USB layer deinitialized [ 226.367672][ T2241] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 226.427693][ T190] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 226.453943][ T5763] usb 1-1: USB disconnect, device number 52 [ 226.537650][ T2241] usb 5-1: Using ep0 maxpacket: 8 [ 226.540242][ T2241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.540292][ T2241] usb 5-1: New USB device found, idVendor=15e2, idProduct=0039, bcdDevice=d1.bc [ 226.542596][ T2241] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 226.542634][ T2241] usb 5-1: can't read configurations, error -61 [ 226.577644][ T190] usb 4-1: device descriptor read/64, error -71 [ 226.667549][ T2241] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 226.818603][ T190] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 226.837583][ T2241] usb 5-1: Using ep0 maxpacket: 8 [ 226.840600][ T2241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.840645][ T2241] usb 5-1: New USB device found, idVendor=15e2, idProduct=0039, bcdDevice=d1.bc [ 226.842979][ T2241] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 226.843016][ T2241] usb 5-1: can't read configurations, error -61 [ 226.844983][ T2241] usb usb5-port1: attempt power cycle [ 226.909302][ T8782] binder: 8781:8782 ioctl c0046209 0 returned -22 [ 226.947628][ T190] usb 4-1: device descriptor read/64, error -71 [ 227.058161][ T190] usb usb4-port1: attempt power cycle [ 227.169963][ T31] audit: type=1326 audit(1791983304.209:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbda19e2d9 code=0x7ffc0000 [ 227.170817][ T31] audit: type=1326 audit(1791983304.209:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbda19e2d9 code=0x7ffc0000 [ 227.171056][ T31] audit: type=1326 audit(1791983304.209:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbda19e2d9 code=0x7ffc0000 [ 227.171333][ T31] audit: type=1326 audit(1791983304.209:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbda19e2d9 code=0x7ffc0000 [ 227.171719][ T31] audit: type=1326 audit(1791983304.209:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbda19e2d9 code=0x7ffc0000 [ 227.172119][ T31] audit: type=1326 audit(1791983304.209:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbda19e2d9 code=0x7ffc0000 [ 227.172637][ T31] audit: type=1326 audit(1791983304.209:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbda19e2d9 code=0x7ffc0000 [ 227.173249][ T31] audit: type=1326 audit(1791983304.209:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fcbda19e2d9 code=0x7ffc0000 [ 227.238593][ T31] audit: type=1326 audit(1791983304.259:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbda15eb0e code=0x7ffc0000 [ 227.238698][ T31] audit: type=1326 audit(1791983304.269:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbda19df6b code=0x7ffc0000 [ 227.328961][ T2241] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 227.426995][ T2241] usb 5-1: Using ep0 maxpacket: 8 [ 227.441801][ T2241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.441853][ T2241] usb 5-1: New USB device found, idVendor=15e2, idProduct=0039, bcdDevice=d1.bc [ 227.443264][ T2241] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 227.443298][ T2241] usb 5-1: can't read configurations, error -61 [ 227.478077][ T5763] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 227.487593][ T190] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 227.508895][ T190] usb 4-1: device descriptor read/8, error -71 [ 227.567576][ T2241] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 227.588714][ T2241] usb 5-1: Using ep0 maxpacket: 8 [ 227.591389][ T2241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.591432][ T2241] usb 5-1: New USB device found, idVendor=15e2, idProduct=0039, bcdDevice=d1.bc [ 227.592999][ T2241] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 227.593033][ T2241] usb 5-1: can't read configurations, error -61 [ 227.593751][ T2241] usb usb5-port1: unable to enumerate USB device [ 227.637915][ T5763] usb 1-1: Using ep0 maxpacket: 8 [ 227.645056][ T5763] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.645107][ T5763] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 227.651713][ T5763] usb 1-1: config 1 has an invalid interface number: 8 but max is 0 [ 227.651739][ T5763] usb 1-1: config 1 has no interface number 0 [ 227.651776][ T5763] usb 1-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 227.651796][ T5763] usb 1-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 227.651819][ T5763] usb 1-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 227.651843][ T5763] usb 1-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 227.651866][ T5763] usb 1-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.651890][ T5763] usb 1-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.654423][ T5763] usb 1-1: config 1 interface 8 has no altsetting 0 [ 227.682550][ T5763] usb 1-1: string descriptor 0 read error: -22 [ 227.682680][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.808101][ T5763] cxacru 1-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 227.808382][ T5763] cxacru 1-1:1.8: probe with driver cxacru failed with error -22 [ 227.825354][ T190] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 227.858332][ T190] usb 4-1: device descriptor read/8, error -71 [ 227.936381][ T5763] usb 1-1: USB disconnect, device number 53 [ 227.970263][ T190] usb usb4-port1: unable to enumerate USB device [ 228.787577][ T5763] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 228.817597][ T3216] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 228.937598][ T5763] usb 2-1: Using ep0 maxpacket: 32 [ 228.938438][ T5763] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 228.939736][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.939760][ T5763] usb 2-1: config 0 has no interfaces? [ 228.939790][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.942464][ T5763] usb 2-1: config 0 descriptor?? [ 228.972948][ T3216] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.974637][ T3216] usb 1-1: not running at top speed; connect to a high speed hub [ 228.974671][ T3216] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 228.979311][ T3216] usb 1-1: config index 0 descriptor too short (expected 886, got 118) [ 228.979337][ T3216] usb 1-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 228.979354][ T3216] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 228.986783][ T3216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.986811][ T3216] usb 1-1: Product: syz [ 228.986825][ T3216] usb 1-1: Manufacturer: syz [ 228.986838][ T3216] usb 1-1: SerialNumber: syz [ 229.243025][ T3216] usb 1-1: USB disconnect, device number 54 [ 229.401266][ T8830] batman_adv: batadv0: Adding interface: syz_tun [ 229.401284][ T8830] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.401302][ T8830] batman_adv: batadv0: Interface activated: syz_tun [ 229.471404][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 229.473191][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 229.486888][ T8832] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.565082][ T8832] syz.4.743: vmalloc error: size 28672, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 229.565242][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.4.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.565266][ T8832] Tainted: [L]=SOFTLOCKUP [ 229.565272][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.565284][ T8832] Call Trace: [ 229.565300][ T8832] [ 229.565308][ T8832] dump_stack_lvl+0xe8/0x150 [ 229.565331][ T8832] warn_alloc+0x24d/0x270 [ 229.565347][ T8832] ? __pfx_warn_alloc+0x10/0x10 [ 229.565362][ T8832] ? alloc_pages_mpol+0x256/0x390 [ 229.565382][ T8832] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 229.565408][ T8832] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.565419][ T8832] ? pipapo_resize+0x26b/0x840 [ 229.565432][ T8832] ? rcu_is_watching+0x16/0xb0 [ 229.565447][ T8832] ? pipapo_resize+0x26b/0x840 [ 229.565459][ T8832] ? rcu_is_watching+0x16/0xb0 [ 229.565473][ T8832] ? pipapo_resize+0x26b/0x840 [ 229.565484][ T8832] __kvmalloc_node_noprof+0x5a1/0x820 [ 229.565499][ T8832] ? pipapo_resize+0x26b/0x840 [ 229.565513][ T8832] ? pipapo_resize+0x26b/0x840 [ 229.565528][ T8832] pipapo_resize+0x26b/0x840 [ 229.565540][ T8832] ? pipapo_maybe_clone+0x68c/0xd80 [ 229.565555][ T8832] ? lock_acquire+0x115/0x350 [ 229.565568][ T8832] pipapo_insert+0x52/0x960 [ 229.565582][ T8832] ? nft_pipapo_insert+0x2e3/0x18a0 [ 229.565605][ T8832] nft_pipapo_insert+0x103c/0x18a0 [ 229.565643][ T8832] ? __pfx_nft_pipapo_insert+0x10/0x10 [ 229.565664][ T8832] ? rcu_is_watching+0x16/0xb0 [ 229.565684][ T8832] ? trace_kmalloc+0x2a/0xf0 [ 229.565704][ T8832] ? nft_trans_alloc+0x40/0x2a0 [ 229.565719][ T8832] nf_tables_newsetelem+0x2aa4/0x4200 [ 229.565751][ T8832] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 229.565763][ T8832] ? lock_acquire+0x115/0x350 [ 229.565779][ T8832] ? nla_validate_array+0xfc/0x260 [ 229.565809][ T8832] ? __pfx___nla_validate_parse+0x10/0x10 [ 229.565823][ T8832] ? __pfx_nf_tables_newset+0x10/0x10 [ 229.565833][ T8832] ? nft_pernet+0x23/0x240 [ 229.565848][ T8832] ? lock_acquire+0x115/0x350 [ 229.565859][ T8832] ? nfnl_pernet+0x23/0x240 [ 229.565876][ T8832] ? __nla_parse+0x40/0x60 [ 229.565888][ T8832] nfnetlink_rcv+0x1288/0x28c0 [ 229.565916][ T8832] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 229.565936][ T8832] ? ref_tracker_free+0x689/0x830 [ 229.565963][ T8832] ? skb_clone+0x246/0x3a0 [ 229.565977][ T8832] ? __netlink_deliver_tap+0x811/0x860 [ 229.565994][ T8832] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.566007][ T8832] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.566022][ T8832] netlink_unicast+0x7bd/0x940 [ 229.566039][ T8832] netlink_sendmsg+0x813/0xb40 [ 229.566056][ T8832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.566073][ T8832] ? apparmor_socket_sendmsg+0x98/0x360 [ 229.566089][ T8832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.566101][ T8832] sock_sendmsg_nosec+0x13a/0x180 [ 229.566117][ T8832] ____sys_sendmsg+0x54e/0x850 [ 229.566131][ T8832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.566147][ T8832] ? import_iovec+0x73/0xa0 [ 229.566164][ T8832] ___sys_sendmsg+0x2a5/0x360 [ 229.566174][ T8832] ? __lock_acquire+0x747/0x2de0 [ 229.566188][ T8832] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.566201][ T8832] ? futex_wait+0x2a2/0x390 [ 229.566227][ T8832] ? __fget_files+0x2a/0x420 [ 229.566236][ T8832] ? __fget_files+0x3a2/0x420 [ 229.566251][ T8832] __x64_sys_sendmsg+0x1b1/0x290 [ 229.566264][ T8832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.566294][ T8832] do_syscall_64+0x166/0x520 [ 229.566306][ T8832] ? trace_irq_disable+0x3b/0x140 [ 229.566321][ T8832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.566340][ T8832] ? clear_bhb_loop+0x70/0xc0 [ 229.566364][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.566381][ T8832] RIP: 0033:0x7f092279e2d9 [ 229.566399][ T8832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.566415][ T8832] RSP: 002b:00007f0923640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.566433][ T8832] RAX: ffffffffffffffda RBX: 00007f0922a25fa0 RCX: 00007f092279e2d9 [ 229.566441][ T8832] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 000000000000000a [ 229.566448][ T8832] RBP: 00007f0922835888 R08: 0000000000000000 R09: 0000000000000000 [ 229.566454][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.566460][ T8832] R13: 00007f0922a26038 R14: 00007f0922a25fa0 R15: 00007f0922b4fa48 [ 229.566477][ T8832] [ 229.566505][ T8832] Mem-Info: [ 229.566512][ T8832] active_anon:6467 inactive_anon:14998 isolated_anon:0 [ 229.566512][ T8832] active_file:17 inactive_file:18168 isolated_file:0 [ 229.566512][ T8832] unevictable:0 dirty:293 writeback:0 [ 229.566512][ T8832] slab_reclaimable:10881 slab_unreclaimable:97869 [ 229.566512][ T8832] mapped:30792 shmem:15512 pagetables:1528 [ 229.566512][ T8832] sec_pagetables:0 bounce:0 [ 229.566512][ T8832] kernel_misc_reclaimable:0 [ 229.566512][ T8832] free:1313483 free_pcp:11928 free_cma:0 [ 229.566539][ T8832] Node 0 active_anon:25868kB inactive_anon:59992kB active_file:68kB inactive_file:72460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123088kB dirty:1164kB writeback:0kB shmem:62048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13172kB pagetables:5960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 229.566567][ T8832] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 229.566596][ T8832] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.566625][ T8832] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 229.566644][ T8832] Node 0 DMA32 free:1312384kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25868kB inactive_anon:59992kB active_file:68kB inactive_file:72460kB unevictable:0kB writepending:1164kB zspages:2388kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:41948kB local_pcp:13276kB free_cma:0kB [ 229.566675][ T8832] lowmem_reserve[]: 0 0 0 0 0 [ 229.566693][ T8832] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.566720][ T8832] lowmem_reserve[]: 0 0 0 0 0 [ 229.566737][ T8832] Node 1 Normal free:3926188kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5764kB local_pcp:0kB free_cma:0kB [ 229.566767][ T8832] lowmem_reserve[]: 0 0 0 0 0 [ 229.566784][ T8832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.566850][ T8832] Node 0 DMA32: 92*4kB (UME) 190*8kB (UME) 784*16kB (UME) 667*32kB (UME) 380*64kB (UME) 235*128kB (UME) 98*256kB (UME) 34*512kB (UME) 28*1024kB (UME) 12*2048kB (UM) 275*4096kB (UM) = 1312320kB [ 229.566932][ T8832] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 229.566982][ T8832] Node 1 Normal: 5*4kB (UM) 11*8kB (UM) 4*16kB (UM) 4*32kB (UM) 12*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 3*1024kB (M) 1*2048kB (U) 956*4096kB (M) = 3926188kB [ 229.567066][ T8832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.567075][ T8832] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.567083][ T8832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.567091][ T8832] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.567099][ T8832] 33705 total pagecache pages [ 229.567106][ T8832] 12 pages in swap cache [ 229.567110][ T8832] Free swap = 122900kB [ 229.567115][ T8832] Total swap = 124996kB [ 229.567119][ T8832] 2097051 pages RAM [ 229.567122][ T8832] 0 pages HighMem/MovableOnly [ 229.567126][ T8832] 433558 pages reserved [ 229.567130][ T8832] 0 pages cma reserved [ 229.600983][ T8832] syz.4.743 (8832) used greatest stack depth: 16960 bytes left [ 229.674010][ T5763] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 229.996175][ T5763] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 230.029755][ T5763] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 230.029787][ T5763] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 230.029805][ T5763] usb 4-1: config 4 has no interface number 0 [ 230.029844][ T5763] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.189813][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.189852][ T5763] usb 4-1: Product: syz [ 230.189866][ T5763] usb 4-1: Manufacturer: syz [ 230.189879][ T5763] usb 4-1: SerialNumber: syz [ 230.307743][ T190] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 230.432641][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.433142][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.440308][ T8855] tipc: Started in network mode [ 230.440339][ T8855] tipc: Node identity b24e0dd4cd11, cluster identity 4711 [ 230.442327][ T8855] tipc: Enabled bearer , priority 0 [ 230.508740][ T190] usb 5-1: Using ep0 maxpacket: 32 [ 230.521428][ T190] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 230.535257][ T8849] tipc: Disabling bearer [ 230.540361][ T190] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.540385][ T190] usb 5-1: config 0 has no interfaces? [ 230.540413][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.626483][ T190] usb 5-1: config 0 descriptor?? [ 231.017308][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.027042][ T5763] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 231.031131][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.032164][ T8864] binder: 8863:8864 ioctl c0306201 2000000006c0 returned -14 [ 231.039322][ T5763] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 231.040585][ T5763] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 231.040634][ T5763] usb 4-1: media controller created [ 231.044636][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.100033][ T5763] DVB: Unable to find symbol dib7000p_attach() [ 231.100045][ T5763] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 231.167581][ T5763] rc_core: IR keymap rc-dib0700-rc5 not found [ 231.167600][ T5763] Registered IR keymap rc-empty [ 231.167811][ T5763] dvb-usb: could not initialize remote control. [ 231.167817][ T5763] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 231.283937][ T8847] ------------[ cut here ]------------ [ 231.283959][ T8847] usb 4-1: BOGUS control dir, pipe 80003f80 doesn't match bRequestType c0 [ 231.284001][ T8847] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.4.745/8847 [ 231.310228][ T8847] Modules linked in: [ 231.314173][ T8847] CPU: 0 UID: 0 PID: 8847 Comm: syz.4.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.325043][ T8847] Tainted: [L]=SOFTLOCKUP [ 231.329486][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.339694][ T8847] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 231.346350][ T8847] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 231.366312][ T8847] RSP: 0018:ffffc90002607958 EFLAGS: 00010246 [ 231.372492][ T8847] RAX: 0000000000000000 RBX: ffff888026691b00 RCX: 0000000080003f80 [ 231.380587][ T8847] RDX: ffff888023ec2380 RSI: ffffffff8cc56b40 RDI: ffffffff91882a00 [ 231.388855][ T8847] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 231.396934][ T8847] R10: ffffc90002607a40 R11: fffff520004c0f54 R12: 1ffff110085fb870 [ 231.405091][ T8847] R13: ffff888042fdc380 R14: ffff888023ec2380 R15: 0000000080003f80 [ 231.413138][ T8847] FS: 00007f092361f6c0(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 231.422160][ T8847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.428933][ T8847] CR2: 00007f827dec7fe0 CR3: 0000000021f3e000 CR4: 00000000003526f0 [ 231.436961][ T8847] DR0: 0000000080000001 DR1: 00000000000001f8 DR2: 0000000000000083 [ 231.445020][ T8847] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 231.453066][ T8847] Call Trace: [ 231.456368][ T8847] [ 231.459405][ T8847] usb_start_wait_urb+0x13f/0x5b0 [ 231.464470][ T8847] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 231.470149][ T8847] usb_control_msg+0x234/0x3e0 [ 231.474953][ T8847] dib0700_i2c_xfer+0xbb9/0xf80 [ 231.479929][ T8847] __i2c_transfer+0x7bf/0x1fe0 [ 231.484768][ T8847] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.490702][ T8847] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.496534][ T8847] ? rt_mutex_lock_nested+0x156/0x1c0 [ 231.502017][ T8847] ? i2c_transfer+0xc7/0x2d0 [ 231.506643][ T8847] i2c_transfer+0x1cb/0x2d0 [ 231.511300][ T8847] i2cdev_ioctl_rdwr+0x460/0x740 [ 231.516290][ T8847] i2cdev_ioctl+0x6a5/0x880 [ 231.520886][ T8847] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 231.525948][ T8847] ? __fget_files+0x3a2/0x420 [ 231.530711][ T8847] ? __fget_files+0x2a/0x420 [ 231.535386][ T8847] ? bpf_lsm_file_ioctl+0x9/0x20 [ 231.540422][ T8847] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 231.545478][ T8847] __se_sys_ioctl+0xfc/0x170 [ 231.550221][ T8847] do_syscall_64+0x166/0x520 [ 231.554869][ T8847] ? trace_irq_disable+0x3b/0x140 [ 231.559961][ T8847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.566057][ T8847] ? clear_bhb_loop+0x70/0xc0 [ 231.570809][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.576733][ T8847] RIP: 0033:0x7f092279e2d9 [ 231.581248][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.600958][ T8847] RSP: 002b:00007f092361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.609438][ T8847] RAX: ffffffffffffffda RBX: 00007f0922a26090 RCX: 00007f092279e2d9 [ 231.617442][ T8847] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000d [ 231.625491][ T8847] RBP: 00007f0922835888 R08: 0000000000000000 R09: 0000000000000000 [ 231.633550][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.641618][ T8847] R13: 00007f0922a26128 R14: 00007f0922a26090 R15: 00007f0922b4fa48 [ 231.649699][ T8847] [ 231.652760][ T8847] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.660076][ T8847] CPU: 0 UID: 0 PID: 8847 Comm: syz.4.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.670862][ T8847] Tainted: [L]=SOFTLOCKUP [ 231.675202][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.685265][ T8847] Call Trace: [ 231.688563][ T8847] [ 231.691524][ T8847] vpanic+0x56d/0xa60 [ 231.695543][ T8847] ? __pfx__printk+0x10/0x10 [ 231.700160][ T8847] ? __pfx_vpanic+0x10/0x10 [ 231.704720][ T8847] ? is_bpf_text_address+0x292/0x2b0 [ 231.710037][ T8847] ? is_bpf_text_address+0x26/0x2b0 [ 231.715275][ T8847] panic+0xc5/0xd0 [ 231.719036][ T8847] ? __pfx_panic+0x10/0x10 [ 231.723500][ T8847] __warn+0x315/0x4c0 [ 231.727519][ T8847] ? usb_submit_urb+0x1057/0x18b0 [ 231.732587][ T8847] ? usb_submit_urb+0x1057/0x18b0 [ 231.737636][ T8847] __report_bug+0x276/0x570 [ 231.742169][ T8847] ? usb_submit_urb+0x1057/0x18b0 [ 231.747232][ T8847] ? __pfx___report_bug+0x10/0x10 [ 231.752285][ T8847] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.758140][ T8847] ? kasan_save_track+0x4f/0x80 [ 231.763030][ T8847] report_bug_entry+0x19b/0x290 [ 231.767910][ T8847] ? usb_submit_urb+0x1100/0x18b0 [ 231.772954][ T8847] ? usb_submit_urb+0x1105/0x18b0 [ 231.778011][ T8847] handle_bug+0xce/0x200 [ 231.782296][ T8847] exc_invalid_op+0x1a/0x50 [ 231.786831][ T8847] asm_exc_invalid_op+0x1a/0x20 [ 231.791712][ T8847] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 231.797379][ T8847] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 231.817037][ T8847] RSP: 0018:ffffc90002607958 EFLAGS: 00010246 [ 231.823135][ T8847] RAX: 0000000000000000 RBX: ffff888026691b00 RCX: 0000000080003f80 [ 231.831129][ T8847] RDX: ffff888023ec2380 RSI: ffffffff8cc56b40 RDI: ffffffff91882a00 [ 231.839122][ T8847] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 231.847120][ T8847] R10: ffffc90002607a40 R11: fffff520004c0f54 R12: 1ffff110085fb870 [ 231.855116][ T8847] R13: ffff888042fdc380 R14: ffff888023ec2380 R15: 0000000080003f80 [ 231.863130][ T8847] ? usb_submit_urb+0x1091/0x18b0 [ 231.868205][ T8847] usb_start_wait_urb+0x13f/0x5b0 [ 231.873272][ T8847] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 231.878870][ T8847] usb_control_msg+0x234/0x3e0 [ 231.883758][ T8847] dib0700_i2c_xfer+0xbb9/0xf80 [ 231.888662][ T8847] __i2c_transfer+0x7bf/0x1fe0 [ 231.893459][ T8847] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.899295][ T8847] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.905126][ T8847] ? rt_mutex_lock_nested+0x156/0x1c0 [ 231.910527][ T8847] ? i2c_transfer+0xc7/0x2d0 [ 231.915148][ T8847] i2c_transfer+0x1cb/0x2d0 [ 231.919690][ T8847] i2cdev_ioctl_rdwr+0x460/0x740 [ 231.924693][ T8847] i2cdev_ioctl+0x6a5/0x880 [ 231.929232][ T8847] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 231.934292][ T8847] ? __fget_files+0x3a2/0x420 [ 231.938999][ T8847] ? __fget_files+0x2a/0x420 [ 231.943629][ T8847] ? bpf_lsm_file_ioctl+0x9/0x20 [ 231.948598][ T8847] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 231.953665][ T8847] __se_sys_ioctl+0xfc/0x170 [ 231.958288][ T8847] do_syscall_64+0x166/0x520 [ 231.962909][ T8847] ? trace_irq_disable+0x3b/0x140 [ 231.967954][ T8847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.974050][ T8847] ? clear_bhb_loop+0x70/0xc0 [ 231.978760][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.984677][ T8847] RIP: 0033:0x7f092279e2d9 [ 231.989115][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.008736][ T8847] RSP: 002b:00007f092361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.017168][ T8847] RAX: ffffffffffffffda RBX: 00007f0922a26090 RCX: 00007f092279e2d9 [ 232.025162][ T8847] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000d [ 232.033154][ T8847] RBP: 00007f0922835888 R08: 0000000000000000 R09: 0000000000000000 [ 232.041232][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.049223][ T8847] R13: 00007f0922a26128 R14: 00007f0922a26090 R15: 00007f0922b4fa48 [ 232.057231][ T8847] [ 232.060677][ T8847] Kernel Offset: disabled [ 232.065009][ T8847] Rebooting in 86400 seconds..