last executing test programs: 10.360948897s ago: executing program 3 (id=2889): mkdirat(0xffffffffffffff9c, 0x0, 0x100) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002400090243bd7000fedbdf25080000000600040058"], 0x1c}}, 0x8800) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8085}, 0x24000840) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) 10.231075639s ago: executing program 2 (id=2890): r0 = open(0x0, 0x0, 0x100) io_setup(0x8001, &(0x7f0000000440)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000100)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x187, &(0x7f00000005c0)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "d6d455", 0x1ae, 0x33, 0x0, @remote, @mcast2, {[@routing={0x33, 0x6, 0x2, 0x1, 0x0, [@mcast1, @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0xc, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, @srh={0xff, 0xa, 0x4, 0x5, 0xba, 0x0, 0x4, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, @private2, @empty, @dev={0xfe, 0x80, '\x00', 0x41}]}], "762276d3fcbcfd9185974fb617df87620ac5e3cfcff57eec3b2dd4a2c921215029e6942fe9f73585ddca6f3bc058dd576de622afe3a22d56b9fe54823c4738b270bdda2ba97b773433c99896ba8b829c91b49e21d5fa8638bcf85f7f40c644c6d69296e5260ca7214bce19a772562810d02dc41a558a747ad2d1ac61d30c751560359f29512790bc2b709b45e6e3ce3a76f0844e15def317ac92bd5f23c0d21545893e52159a0ede1f422f16acd0cffdfd"}}}}}, 0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffff, r2, &(0x7f0000000580)="69b5c653", 0x4, 0xe37}, &(0x7f0000000200)={0x0, 0x0, 0x1f, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) flock(r4, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) flock(r5, 0x2) read$rfkill(r5, &(0x7f0000000140), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc6, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000b0000000043213447fda16339161304cbd131ae1a8f3effd13c13f97d31c3db14402335b4dd273f92d2113ce28593c4dd424e334f409c56cd8735f9dc101e5762229413407adbf695a0"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x0) 9.06406066s ago: executing program 3 (id=2895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f00000031c0)=[{&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/240, 0xf0}, {&(0x7f0000002e40)=""/27, 0x1b}, {&(0x7f0000002e80)=""/115, 0x73}, {&(0x7f0000002f00)=""/178, 0xb2}, {&(0x7f0000002fc0)=""/238, 0xee}, {&(0x7f00000030c0)=""/203, 0xcb}], 0x8, 0xfffff23d, 0xa) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20082f5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0xc}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x80}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8041) 8.033044586s ago: executing program 0 (id=2899): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000000000)={0x0, 0x8dac, 0x80000, 0xf7fffffd, 0x40058}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r6 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) 7.967157659s ago: executing program 0 (id=2900): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x850, 0x2b0, 0x460, 0x550, 0x0, 0x550, 0x780, 0x780, 0x780, 0x780, 0x780, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x288, 0x2b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@hashlimit2={{0x150}, {'vxcan1\x00', {0x45cf, 0x2, 0x39, 0x67, 0xff, 0x1, 0x3}, {0x1}}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0x2000000], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b0) 7.831029286s ago: executing program 0 (id=2901): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x101000) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x1000005e, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', '', [], 0xa, "a21a66aa9669217b984f257257e540dc1f19d23635b764fd13374765d61f0d1d75a9c48db9bdeb2880b417224b9b8ce39411c2e7414c2cc9eeeee7fca3623a0f9159f6919ffa3250f0a7c1f6d5d5175e6c37ec1d5d27beb37eea52"}, 0x5f) munlockall() madvise(&(0x7f0000737000/0xd000)=nil, 0xd000, 0x13) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5], 0x98}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) unshare(0x1e000980) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) 6.72726305s ago: executing program 3 (id=2902): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000080)={0xc, r1}) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITEV_FIXED={0x3d, 0x2, 0x2000, @fd, 0x2, 0x0, 0x0, 0x10, 0x1, {0x3, 0x0, 0x3, '\x00', 0x0, 0x1}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_connect$uac1(0x5, 0x111, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x103, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0x67, 0x10, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7a, 0x31}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x400, 0x3, 0x9, 0x800, 0xa}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x1, 0x4, [0x9, 0x9, 0x6, 0x7], 0xb9}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x403, 0x1, 0x6, 0x2, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x0, 0x3, 0xd}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x10, 0x2, 0x0, 0xfa, "624452d7ac"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7fff, 0xb6, 0x8, "a8e97b5c03803a38"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x80, 0x6, "0433", "bb96"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0xea2, 0x11, "000077cbfb08b7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x9, 0x0, 0x0, 0x28}]}, {{0x9, 0x5, 0x1, 0x9, 0x5d7, 0x5, 0x80, 0x2, {0x7, 0x25, 0x1, 0x0, 0x2, 0x8112}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x9, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x10, 0x69}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x8, 0x6, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2, 0x79, "e1", '\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x95, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x2, 0x8, {0x7, 0x25, 0x1, 0xc, 0x2, 0x6}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x81, 0x1, 0x23, 0x40, 0x2}, 0xc, &(0x7f0000000300)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xb, 0x9, 0xa7ab}]}}) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 6.585286344s ago: executing program 2 (id=2903): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x44000160) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000100)={0x0, 0x22, 0xe8, {0xe8, 0x64cbd9bc1481e10e, "a73b1cd5c23b66aa043613d9a023f82e823feaf8b4fc8aed15f564f95c72df595a0f846f88082b8b399e6c5013e01bdbcc0ee0f893a79149a76898c63c10f83024c808fbc8f92308913e1d76abc86b7ab329e4fbc9e7d8836530139d5a90e9659335171768bb9f07a8917bb3164149280d5b20268a56f2614ec630d0b3683345fcc2333f55f5dec5032a71f62763ab0642573e8c10514869cd368543c85ed7088f1ccc0b9a3d65f00aac230f39a38234f440d2c74a3e49705cbe7516e59f280ac9ba8dac707e6cad702066659e982dfe8f3040e24c9617ddec0673f5b3cdd41437af52c702f9"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x0, 0x15, 0x66, "1011d9c878e41b92e72336efb878532d24eb866c7286a8f24fa3cb6e93b27fc6977911b9a279e04c9690d544199a55ede9e574211701227903e82b60ff101cdabadb70920fd5d3c24a8b03f55bae1468e87f54d3e86bd8fe27d395ef6cf2fd9cfaf52bee3c26"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000480)={0x20, 0x81, 0x1, '7'}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "c823"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "5ac6d8"}, &(0x7f00000005c0)={0x20, 0x84, 0x1, "ad"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "cafc85"}}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x80000000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.209226345s ago: executing program 0 (id=2905): syz_usb_connect(0x5, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xf0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r8, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000001b00)="a6", 0x1, 0x20000075, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0x5c2c}, 0x1c) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000000c0)=0x11) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 6.205005177s ago: executing program 1 (id=2906): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000200000085000000860000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000840)="ce0000050000000027d050516d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, 0x0, 0x0) 5.414808247s ago: executing program 4 (id=2907): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 5.207763932s ago: executing program 3 (id=2908): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6(0xa, 0x1, 0x5) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) lseek(0xffffffffffffffff, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x3, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x6, 0x7f, 0x800000000f4a, 0x200000007, 0xbdb], 0xc000, 0x1840}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) futimesat(r2, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)={{}, {0x77359400}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x34, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x100000) syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) io_uring_setup(0x6, &(0x7f0000000140)={0x0, 0x23d4, 0x10, 0xf, 0x1ca, 0x0, r2}) read$FUSE(0xffffffffffffffff, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x10003, 0x4000000000, 0x0, 0x4, 0x0, 0x80000006, {0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffe0, 0x103, 0xffff, 0x1000, 0x25, 0x0, r7, 0x4, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x28, 0x800073, 0xc0000, 0xffff, 0x5, 0x0, 0x8000}}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) 4.838782322s ago: executing program 4 (id=2909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.287658718s ago: executing program 1 (id=2910): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000000000)={0x0, 0x8dac, 0x80000, 0xf7fffffd, 0x40058}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r6 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) 4.118084977s ago: executing program 4 (id=2911): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000689455b7eade781700800000e9ff00"/34], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000002c0)="80ead8f3769d4744e56b974d44d093f7f8bfab92d023f6000012317598ac07f6ebc2805ffa0de15063960ceb0c781b1a86", &(0x7f0000000300)=""/23}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c1) r5 = socket(0x26, 0x1, 0x6) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000003c0)={0x5, 0x8000, 0x93, 0x1, 0x0, 0x180000000000}) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000001500)={0x44, &(0x7f0000000340)={0x0, 0x5, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000010000108feffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a2f0030008001beb1a00020000003f6c4475accf5f3865fcb1b12a3b5dc55813a62ae3f9f22813691ca7d108be17c6789b600df584b52c1e12a0d95b03d949136d69bee0420102cf6d7302846a08c9f45f33f9189bd375d8f606d16801ab16a065e3769635c319959f"], 0x28}, 0x1, 0x0, 0x0, 0x20048804}, 0x4000000) 4.092708904s ago: executing program 1 (id=2912): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000006bc0)=[{{&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/143, 0x8f}], 0x2, &(0x7f0000000440)=""/66, 0x42}, 0x7f}, {{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000600)=""/130, 0x82}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/98, 0x62}], 0x4, &(0x7f0000002d80)=""/1, 0x1}}, {{&(0x7f0000002dc0), 0x80, &(0x7f0000002f40)=[{&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000002e80)=""/13, 0xd}, {&(0x7f0000002ec0)=""/66, 0x42}], 0x3, &(0x7f0000002f80)=""/225, 0xe1}, 0x3}, {{&(0x7f0000003080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003100)=""/39, 0x27}, {&(0x7f0000003140)=""/187, 0xbb}, {&(0x7f0000003200)=""/181, 0xb5}, {&(0x7f00000032c0)=""/239, 0xef}, {&(0x7f00000033c0)=""/164, 0xa4}, {&(0x7f0000003480)=""/114, 0x72}, {&(0x7f0000003500)=""/30, 0x1e}, {&(0x7f0000003540)=""/150, 0x96}, {&(0x7f0000003600)=""/1, 0x1}, {&(0x7f0000003640)=""/169, 0xa9}], 0xa, &(0x7f00000037c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000047c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005940)=[{&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/246, 0xf6}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000005980), 0x0, &(0x7f00000059c0)=""/254, 0xfe}, 0x68}, {{0x0, 0x0, &(0x7f0000006b00)=[{&(0x7f0000005ac0)=""/48, 0x30}, {&(0x7f0000005b00)=""/4096, 0x1000}], 0x2, &(0x7f0000006b40)=""/68, 0x44}, 0x9e2}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x6, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0xfa14, 0xffffffff}, 0x0) unshare(0x42060680) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4008810) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) socket(0x2c, 0xa, 0x3ff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x5, 0x4002) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.999971444s ago: executing program 3 (id=2913): syz_open_dev$video4linux(&(0x7f0000000000), 0x92e1, 0x38401) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) r3 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4001, 0x578f224, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fee000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) unshare(0x24060400) pwrite64(r6, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="600e0f000000", @ANYRES8=0x0, @ANYRESDEC=r3, @ANYBLOB="60865e53a99af969f5576c14b131fa81313284614e6df81c5d8fba1464d4e37e9e975131c38ac055632bba41fb9c1679dbf4cfe16efc66114f0eb1a1bcf200456b210a8ce2b44bfc5c5f3f58ab36b38b354d48cf387f7e7f811f94438880b292fec38a28ba"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000002060300000000000000000020000000050004000200000005000500020000000d000300686173683a6d6163000000000c000300686173683a69700005000500020000001800078004000180080001400a0101010500150001000000"], 0x60}, 0x1, 0x0, 0x0, 0x44884}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) setitimer(0x1, &(0x7f0000000140)={{}, {0x0, 0xea60}}, 0x0) open_by_handle_at(r1, &(0x7f00000038c0)=ANY=[@ANYBLOB="1400020000000000bf6709c3f62604c3c0e93f1c9913f69810000000"], 0x80) 3.663362937s ago: executing program 0 (id=2914): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0xe, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000440)={0x40, 0x17, 0x4, "215e0491"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.660405216s ago: executing program 2 (id=2915): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r0, r0, 0x0, 0x24002de8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r5 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="47181f988989f25fff7f0000", 0xc, 0xffffffffffffffff) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) lseek(r6, 0x4000000007, 0x1) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000480)={&(0x7f00007d9000/0x4000)=nil, &(0x7f0000e9b000/0x1000)=nil, 0x4000, 0x2}) keyctl$chown(0x4, r5, 0x0, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x30, 0x8, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffbff}]) write(r0, &(0x7f00000004c0)="f91a842b7a0061f981545612d82016b6c57886dba1743d9ddb3484b42eb176d74e0d375116c4186dc47fe213c35565994ea2b3858c6c5d3c46be57b43a785372eb", 0x41) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07000000000000000000050000002c0003801c0003801800018008000200292459fea0e10492c9f7020000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000050002"], 0x60}}, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x400009, 0x3, 0x2000, 0x4000], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x0, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0xeeef0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x6, 0xa4, 0x5, 0x1}, {0x26000, 0xeeee0000, 0xd, 0x3, 0x0, 0x42, 0xb, 0x1, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x5, 0x2, 0x83}, {0x6000, 0x3909e40c33606d9c, 0xd2616964a087e117, 0x2f, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x2b}, {0x3000, 0x3000, 0x0, 0x5, 0x7, 0x5, 0x9, 0x3, 0x8, 0x81, 0x0, 0x70}, {0x5000, 0x4000, 0xd, 0x5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0xfdfffffffffffffd, 0x8]}) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000300)={0x74, 0x0, 0xd}) 2.715026773s ago: executing program 2 (id=2916): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000080)="91", 0x1}], 0x1}}], 0x1, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) 2.515746185s ago: executing program 2 (id=2917): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000040), 0x8) 2.270333277s ago: executing program 2 (id=2918): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0x8, @private0, @mcast2, 0x0, 0x40, 0x3, 0xc}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000500)=""/165, 0xa5, 0x0, &(0x7f00000005c0)=""/105, 0x69}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x14, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0xd, 0x2, 0x7, 0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, @generic={0x2, 0x2, 0x6, 0x1, 0x50b}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xe, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x3ff, 0x1, 0x8, 0x5}, {0x4, 0x1, 0xf, 0x6}, {0x0, 0x3, 0x6, 0x6}, {0x5, 0x4, 0x8, 0x7}], 0x10, 0x2973}, 0x94) r4 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ftruncate(r3, 0x7fffffff) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) read(r5, &(0x7f0000000380)=""/66, 0x42) write$snddsp(r5, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000a40)='.log\x00', 0x60642, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xb, 0xd, 0x98e5, 0xfffffffa, 0x1020, 0x1, 0xffffff01, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x581, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x2, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xc0}, @ldst={0x2, 0x2, 0x7, 0xa, 0x3, 0x6, 0x7}], &(0x7f0000000280)='GPL\x00', 0x8000, 0x97, &(0x7f00000002c0)=""/151, 0x41000, 0x10, '\x00', r0, @fallback=0x2b, r1, 0x8, &(0x7f0000000480)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xf, 0x2fd, 0x7}, 0x10, r2, r3, 0x1, &(0x7f0000000bc0)=[r5, r6, r7, r8, r9, r10], &(0x7f0000000c00)=[{0x4, 0x2, 0xb, 0x2}], 0x10, 0x10000}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r12, r13}}, './file0\x00'}) setresuid(r14, 0x0, r12) syz_usb_connect$uac2(0xfe0e4ad112463e13, 0x84, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r11], &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0}) 1.518737959s ago: executing program 1 (id=2919): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0x55ee, 0x1, 0x1, 0x193}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000480)=@ublk_get_params_sqe={0x2e, 0x40, 0x0, r5, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r1, 0x20, 0xd9db, 0x8, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r8 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) unshare(0x42070e00) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x2) 1.060516878s ago: executing program 0 (id=2920): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000200000085000000860000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, 0x0, 0x0) 829.411162ms ago: executing program 3 (id=2921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000540)={{r0, &(0x7f0000000180)='syz2\x00', 0x2080, &(0x7f00000001c0)={@align=0x32, {0x1ff, 0x6, 0xa9, 0x6}}, 0xffffffff, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x800}, 0x2, &(0x7f0000000500)=[{0x1, 0x7, &(0x7f0000000280)='syz2\x00', &(0x7f00000002c0)="af843832e9a5e737006b1bf239973cc28b0867d4352a1c1ec4013fd795f00f852d5f28872563ffd9c8251bae1d0394486eecc575d4e4289beb0eee868446cef84255ee41a720958848cf4aa7204caadae217b3569834cda37230fd58e9d8ecd3fb186ae2061745839943abe42524d285040c0e0db26bcd3b841edbf36e950a8fc778905e9e48f6808033289ac9cb82ab49e33457fcb805c3e843b0506c13c1310bfda86ad081bd2203bb78e98149af5e423b6a1c1fd0e6bb3e2bb772a8c8537691c1b90180dc320828d149e6f2e988dbd81074ec0c6f71e826d23eaf1b0ea4", 0xdf}, {0x1, 0x6, &(0x7f00000003c0)='syz2\x00', &(0x7f0000000400)="1dde15a9f04b9d6fd1cf25aee36872974e9ffe6b6f27eb5cca7f18c312ee734bebe2998f234a7511395cfab70c8b884eb394dd54cfa52a973200ec971fd0c7f93859ee107e975165bc3fcf40664077aab317102112cf3e95873f8192fc92f829cd2beddf47713638d9f31cdc56310faceee346de2cc7a8447d4c45102c1ecde822fd3f3e52735c9c175c2a9e3ffaeef8918935cda2af909cf5490d562bac959f84e26fe6e401743eb6e7af4442367ee4d0fff832d2e7873082d9c50615a04eaa8b364e49c078", 0xc6, 0x8}]}) sendmsg$unix(r1, &(0x7f00000019c0)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000640)="aac17c4ea9458c58a92ff3bf97c0fa4cadc58763116bdc", 0x17}, {&(0x7f0000000680)="552e07459c4fdfb5acd4c6cdb0cbe8c47a754fb46b99a547293fe307fb3949a8510fd492e7d7298d5196a3299b15d721031f65b865b39eaec91315d05c85a671e2a01111319efe69ace22ded5608e82ba87ad42268315941ad615be86be8a5a97fff2295ac0ff6eaa9989b66f3781e2d0bc0afc8097db0251230171d70da5e38cf90c84b6e79ebadb361f2c463414d84e7c20fdd6d4f5c68c677d65c75df82454c5cfe82400076fb427793b938e158fcdcaff26397c7385d288b210ac6ffb6f9ec638328bfb316ac886a1c", 0xcb}, {&(0x7f0000000780)="09c25fff793a7d874fb92bc790bcedd779cf6a57f88ff6b621538c2ccd4f371b91a042610cd50a02903b201b979fc60c8cd1cabd8b1a6b4330e21d841b162fc4f5f51bc142c977a74c88207d5583f0b48761aefcbeff13aed41064490fc9c33a65001bf9d828087998e28ed172d631c3e62108f608ed933dc4139ad58387b98257e521feaeb5b32e9f54ebf35c4799a1798eb73640f1007dda4a8c4bd12db890978912f2977035ab7a661194f466e60b3c311c7e0c9aaaa20cd3708742507a6b926ac357de7be04bcdbb53ddf924c54fd86c55aebc47375c5fdaff17dd939c4520e886c307b19a512188ca800c1bf9b973548ed5d9", 0xf5}, {&(0x7f0000000880)="a67fcf5ec4fafde3db0c2bfc10710b0692427331af99a1190536e12ce79b37bdc5a12c8864a8191875b9ca58508a192b83c4021dc9c3994571bc4cd70090b779e9743c95594e877551ce0848a25b19647502caa5b49df0f4cb0b95696bcd00c5f10d0197e793ba143aba366b6c7014582e4e72e645a73c88895877e674123fb33b15313717", 0x85}, {&(0x7f0000000940)="f3d9e09fb6023a41034c76ac415f39fe4dac1329444a0593e44b28b1c10c138265f30407ebac8ba6c5048a7053cd660138e899e6847e485f38cbfdb5bd8f7bbd2c3f508137724e4950d6e786589ed520dc750bd569101adeb57a9d80cb502cad7a81e729d12479909d0d3c5a00487b42ef9fe8a959b3c1913bca2066e7ff9317e67e153d9de23d3fabb8b0e67c35d55b1cab9df3477eeaf7b445a465f612daef9eecf8f00955eb93258c1803e4da889b5ec116c8db908a8f27c63b96d601a4f1414e6c3f3b9857f0d711005e9f204d3d6f3e328b70610f2f11fd6de6fb8892f9b72a0a0ea4e9544f7f1dd49253d56b33e4a5122efb632636abba7a40367dc2ce28cbb983bc7e15d0ef5b31c8d7dd0cbaacbd966cba22456a2421d092c370232ef3696e55f3bbf2511b04c87e35b1c19ae314efc206fe5a5fb62a4e9a391707cc0253e2710e8df8e042c69c708cef5362de3535586fcab0125cebab6a0e12212d05fd73b98b1c3eb932a06df9c864f1a63c31b8271bd1a254db2a590d87b9d812cb01927f198f5e3bf84d5f15cdcd0acf4903fc22d8478449131c40f337f6a067c6e0037b6f27cab8b207239d8abb61b35cf39bb43840b24b6e24a3f696801fa883e4851d7a76e2ab18f14647b1cfba1845d02345ffca1dfe6fa670c4599c04294a9a3a42fc7c67a172842e1c809ca198309857f2aadca61af0aba5383a6cede0edaefe62b8158eaafaaed74303cfc2348b74a3ba1374f7ff452bf08b175f535d89b40539c7d386ba6ceec68430b365ef3a89d2da22f381e45e1d9caf12efc6fc5519805c331b5789ae28119341769f9024793a56844e4133f673feb46fbbca463cbfd5eb5ba90cb35fd398edca48106ed91827b70490af23055b522e06dbe657994039a3d3a6776858659aacdaeebb11fb64e816fe61ee9607f5031ca5498a370e998534942690d51ffaa398920c167cdcd1b66c8b8a067f324f87eeedb769dc35431d6cd9b1d15059aa7fa43e12c30f486b8dded03b071e7639582d4744e7a1965b0ec0273c0ac9b7208decf92ef821d4e78e82c1e7731be717ea242e5a8c3f8428896047966fcca609af8a12c3074ca10377d9f343a5b6703644ae44a8c00482f7b4de526b64ce1045898fac649cc29cbc3f769ad70398b8d9d5c10dc3ad1c19449877c47743000133afef847d23aaa168487bbf5a520243286947100445c75cddfdf7d5991f308e283cd6917b757603d32b8f0ea01330d52f665b5ded7704d7486e1a73f7e2cb27ceda87e0c776ca6b89033fa22e062d92a7ffd4c3e2babd65ded6f7a4f642305ca4658f0cf9ab696c44f2f4fe4439edc1cb65b1abb33a1c7a508b4188ca44381f9f494f53df5da50ded6b393d7b06ad7ab2b8075d17258e11dbeaa76d2e77ff6cd54f25fb511430a4937ee608ac861de5f714c4e39995bf01d763feaa8b9f26230ab575e0900ee8331fddc1a1fae1def04aff460b326c8b312720f24fd6eebda8b77ef67dffc006d5a63db3a9706ad4758109e32cb08de75dd7fe3cf20278761ce6f6555eae5bddb5703643536b9134aca76be95c725e10599fca01914e044cb01b6c6d16d338d03cff97116ccc98645c7fb35335e4d9ff2b090cf362945b801f9bb4960ec3dcb18eaa22910df4db40e8c47ded77a6c4cbe3ebe6365bf9b8b456a33a414a6273df37a0345a46e52a39a45a58d54ad63fe72941304d9e0bf899c059b82ffabb221435a20890d238ed499471ce4f2b3a36f7e647913ee0b5e45f12145f93f6182820f3f9f1e9095cc57ef46ff2f46f868923ca2ac7120d9882a6188890a6d1fa167290b743ef88b00ad176abf9a32c496c442b508bb773724a3a8970ee3e58ce42b4f6bf05f12e57f465f700e5c53b65a05662e36664f0b43921f5036e031125d162ceeb59c024661e608d070b25b0eaeedf063ed17ed9c237373d5c327ead64be0014d179be4436057483f5c9b115d7d8bbc8f0deea7cd19ba9aae60f5fb8d1a776bb6b80a7cb652c135af45dc259bcdff6f52621e60851f5dd7497b4026b9a5165332b67a690adfbfbddc0ea4b45902acfbd349809f46516b861e130e951c04c43ba55d13eeeb23bcdc926b5161d71c0fa5ca4bc7b87b40415176ff9ae17a104a181e986346de6e3760612e82275b0d68efec9f196e04b8c21225afffeed1aeff667bd1ec657478543717d3a3b590c1691c21cf9ccbacce92a71bffa4c8289ef7a32968ac933791fc5ed41774c557d5d5390e1667320a556613b4626e0174f9645eae0c96e1176d21e1809c8519ca7e4d33932ea044bc38c426a427cebb5bed322fee3007279baa128823da23eb119eff02734c3c99433f4ad2b01eb47b0d6ddad6105a3885ae7a6112bb4c93b1045b8044dbaa772a943dc49fa5049bb70b49994672c6a75519a85a185df811075c9abab05fe2cf8f495faac17492e011f7e6066cf544504d68dca7238143565ce2ac0774dc74933d34a325a697ebdc4d9fa224ea47f35ca7063f5ecd9955c7054db6de88c6720e22d269a3a1940533385e9900e2e3324377b0a85317c7a304ad42d021938980bbdd150e0469d2aac34f77b204c33caaccc05a7167d9c3f0e2587b880d5c1c3d56a7f17d832d94cd46d647e9e504c82ca70cfe5244bd12d3b9566a072616fb2f3d707931ceaa6a9af994bb319758a7d2273b4569502ed64e6a9352203fe738a9a74e5c3f52a98707cfa0cf3cee6af2c26f1208998ebae10c626ac512d3f91c86a943c93089b1499b7da61e2a787f0a77acbd9c8a369510675f9a65f939fd338ab433889d2c2fdb85e2e7533c9bf7c7fbd702ffa097da1e0fa43d9f73a2857ad3fc2d5723775584774ed3775a07be2cd6e1499005e8c4ec6401680b9f01875c6663e1b654169848d98c70ba640a113f40db18f292177fb048c99c4b0b94d43c63d189d92c2e612ad64810a2171bd6e09d7fa6f0d1ea96d5341c9a5b7757cf0ef46348009bd2eed95ed25c78b5a01bf48f74350638ddf44c26f4a1e3b0c9d1a3d18aabc5c0746a6d02c29b05696da1e8e784a1e8dd78e68e1e409a66144dc91844adc3f9d8006c1e7b06832249d3595fd54cdee0589e36c0fbdd1786a475ec816a0469777ead332d4f0dd76439617205a377b0b0eb221a4dcea548145b5e1badaabc68f650a0eaccef22ab879819283d4aa24fed9b15400a0f610476523f0f43f4851a423a7357f8c27ab1ab6a59b2dfb3599a97b84622921838433f07aee368a401858754a59dd9882b0ca194e5744df3bb8d8a007c749069e0d90b65146a040ec02468ad538c12906ac17241688a288cb14a66804fbfa471333accb99be84b73dab44a16887272a171bc4c7061afb26b9b69876f697c4490542013573e769df2b2569eb9da71f98f6f533ae493bd03e7594b4418d84c1d61b0157b36fce73294b4a9bfed375b91415db84c6ae77a73e504f84561b1c46d00d3721b3fa5ef96a67d3e5c737622f407d214f16ba94e09286702cbbc2bc016e6a577ee9a406c913323e0e27f859ca547635079bba405fdc4d601c2568f7729277274dbb78f51c1e4890e8f30349c57c9a0304164bd31d1b3169db3c0f554645b3d4fc47f63664978f722db21798fbe1fbe467db786a95b05619e1fcdf9b5f529128105eb92290ef237341aa63047fa83413415a76cdc55db11bfc50077719bb6ddfa3514d6e36e14ba187dddd5c426f344ba94c467c8bf3cbd6aba22eb74d674198d5b4e07be16164d51cdae07a255c1111e842d687db7790ba4f8b6398abac31baa5ecfb8c020e5712267727a03126572622c870ded84a23ba57b9a841c8fadeba93fa429e66ed73d159418409b233f6d5c37bb5b9a7f0aeb73672a67c259f8b9b5d5cb3d4d1f83d42cc3301688c2d981bad15c4c294425e50cbe6b6603aae5d1c964b784cc4a9b88dfe9d2b29df23fbaa4ceaf00df271ec369571d66f59824e136d4b7413e9be61c8e1c610422a37232a18935f16919b139a80dfd3bc75e5357d291dbc33454177e67feb0a8b6a517d49a292f03cf63b13214cf2ff64a476b97c78654b6b0d0eaf553fa48586034167879649ed7a696b7bf51d0b3f077dc5f4673b233b7d06cc0b244cf5fb0b4fcf180bb2230c245b1c193c7523a12a81c36aa2c8398876c8c879d64424c424c2b25849dfbc759d15cd22fd7a2a7222e7445903f1bb86f59515f5685cbf40cf6ce016a28299153ec420a40c474fd84952b876f70a36621e99d21618a3d419c6151c94bf4aa6988412478df2845ab7c33fa72eefce1ce337ece08cf94f9f5b6f754f8ae2e345c31f8a15f93ce41aba71faed5b1c5d4749ea785944d1fdcdd406b0d6a49e2a27df54a66f2e8d83a38211b1948ea213bc99282ac3da22c279399d10ec1a3d19e45e1c0f93a1940be7e37d1ee179ca041a870d5b3ecbfc15503cc4e13f79bd92c43869863f788a924ef9ccccb71663ce8d7f5112f8dea8a734a33ae879aa5b42b48ed02e5de5ec202c915b5de0f829696b459c147e905be7d82821d2b6d7acfc3f074ed379e476274c9cdde02f92fc9a2c2aab7e616ea9da5887b5911c900350383712e861eca10a8b778e37ad79eb576215f6a028f5c0e628cafda664c95e39e0be3e95298d65a3066dc57246d739ac45339a926959b36aabfae9e996cd51b83ffbbb820f9be4b2f8e0246a540a1ddd25e32a0dfee6527e69236ca5f0c21e971201f1da26117b43a349faa53c7201fbddfcb14de4b2fbc1850c0f3e49b03bb7d77f2e6b8814a50879da734c6e09b189913022c5c8219f313611c3a1198bc6b5f527797e4775606decc095462f53e70807d82127e8075950a2912303f0e12ef62da411ed25935e887bf019201ef7d478ffe7d412a54365d82bb7fbacdb299abb5aa83cd7289fdd4de73ccd988b32501148aa155c83cf231aacd39f1f47b6284588a79317fa568bb41a5f047b8584cc268cb53edef38639960696c65d50b92b0f63867012ba656be388524bc110069198c25786060f00d289672b2f78cb8fb6f621e34867b467d4deddcee22e439abf0c3e3590d17877f8a4f2c84d0581f78cb7f264a84ab10a2da157b276251be8cd55fa319ac3f03eb4505d695e1639fcbda793620ff8dad7365578494bb76d397e589a0f6b0ff781644564e950c3d750ecf64cb1ba38bf0505b9eca80bb1fc35e90dfedf9fd3c218722d41f2716cebce7d0fe85c7e9156768bfcd3b342b89192f5ea9056ced5c74755d8c11901053b5c10b8d61bf767b3394e4cbba8d6dd26a62eb54367037aa224b42d89ab1e0c1149c5144ab23154d40d617213789f5735ab84b6c5dab98cf5a2fec05854477e25e1c780b55de39bc4e0a6652861f4a65679239754009befa2154d440baa240198bc03d0a0102b00ea85271e25450c5e0ac72ae220cd62a9d65e412c65925fffbe46ebf744511df2bd1982831b80fffa7e6d4eeecce804d14071f1556b5458daee7a22ae1338c7c45155e1bbbe23dca5ed73a802da2df479528e41e2506232e284bef1be5356917aaadb345c268954a4cdf52d11da76beb91e11846edc594efc731acdfc0eefbac6e43e5c16773b98addfecc95b0b9aa9634351371109e2f28c69cd49cc6abfc157e96d50ceb235666f0eede5a1e8f9e1bf88536b855e7f49ef69ec5b24dcbde54af00391a0ee1ff24d60f952cdec6bd91a5b2d5e0303377c903963a2b25ad7c7df1f542b7ab071756675f959c768896f88df29b8d11c230ed0d0f1347d3f91d8c38e80633481d842b034e8ce4b7bb56c", 0x1000}], 0x5, 0x0, 0x0, 0x80}, 0x40000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000001a00)=0x1, 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)=@getnetconf={0x14, 0x52, 0x2, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x4c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x578}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x40010) mq_open(&(0x7f0000001c80)='syz2\x00', 0x40, 0x40, &(0x7f0000001cc0)={0x9, 0x4, 0x400, 0x1}) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001d00)='wg2\x00', 0x4) lgetxattr(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)=@random={'os2.', '\x00'}, &(0x7f0000001dc0)=""/34, 0x22) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001e00)={0x0, 0x0, "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", "b97139677ced97f32fcc6961df6a37fcc134cbf34662d97d11103f7ca5cdcd1a7ddf3bc0f4b6d829e0e793b12250dbd5fe407c867422b7be9dbdb703388bae372f49d646e10dedf7ebf41d3dcc3228e0303a3b7804b0e3af1d85911f5b750c7f9c0c2aa203b462e8e7995f6278421b1533d04ccce1431edf0d82416a81209c65251c3c2ee64be5d0b97cb1fc69480e7678fa7f61fdb7065d41f62f67580abb28785387ad0898410251d78ec08459e4af2bfbe31a37e08082da7a3d5c66e4078383e03f240a07bd1a2b2700c572f15fb04d77fc98b108235685f1558108584d984ceccbdbd745844cd4556e56e349d55b180c8455d6fde2e051f5d29c66d92b931e6c6bfe2e5556cd7538c46e06bcffcc249a101fbb76e8940b2d7a73a29b9bb8af0fc6e88d45fcc3519e537f57a4ccef862eb323f5bb01e34cb476b2a5137036aeea4f04bb3df9f99050cee4a10d109e9854168ff406f13eabe025b767281f6ae6bf2d881e730f6a3ab5ce5e8a639760504e1b5cf1bf1c9df869aa37479cb841b0dbf5bad9232e665815fc956c63d53d8455956a9bca52d454b8721e016a2f62c35556faa0420aa5cccba8c44d6a87171f8be0becc264fe87d8c45de3919668f8769078bdf69cd8d40838b9aac182e036d345ca6c86bf90c2275e5433a59b0d9595ca30a027bed5d6a5ac525c2892146cc60959e35b4b28005c61fefece0c0193b3a06a5db75a5097a7bbaf116dd06dd6811304d694f277950aa03536a8536e468316dfd6409c1b07e8f0442d811b5d03e9bd9e93e8ae74809fbf276e086cf45c26454ee8023db1356f8f88eb1c2bd61aeabe42e5ce23b4d7af2dba3a0bf44c90fd2bb937d8bfa200a144105219e24e19fb1b273eaf8f1217b7932732b577e14408b0f1012cae9fd858c1acc872371b7812c616adc91e2cb24101835211b9b05875b9b767788c23dc972f63e51294b5f9dfecd5aab84f2272b5dea04395aea23234a2ee4732e0f3781dcefbd21542e9a60d435e9cefe48da0f82ed0dba487e531faa6242f1ad3cb289d3724f8b49cf29d3d9bda0c209d92f539ac21d2f7eb29a99530d9e3677b603579386a349d18feb151e543d865cf77f83b8d820d61d608abda8363b55266a53a050707544c935835b64c91f05885f47a1d3110d9b26aa01bc0977b12ec3d7bb9d7752d6bfb5e2e75147b92beb62032c0828945f68dc56dccd1aaa1383b2afb1863f60e15f9f8b696420f177096520054d8487e4a0bd57d4f1669a3fb9e6bc42bfcff98918f7470542f4ae04cb13ad35b1fc3fbfe0f75920a1d0301da8d68a721bf3f4ba4231b934599eea907d69c66e1def2a5d667194311fcb86eccebaef2cdcf9bc7568d0ba3a723fa61fa490cc08a02c13375ad995df75568e0f0cfd65a1f00c185a71908603a9b514fe0d4482916bfbf273babaac937f29d45ee3ccafa5fbfc5e0f88b695d2257a12d9c4855f34909c71bfbdb06117551ca934a653e938030f5285390520cdbe194efea74e328cc88694abcff5a28fdfff6ecc9af3e5caa267f8d497bc6c766152a7ac65e143dc82bd673fb67fce1e2257ec94a0906c7ea8c31aab3c6fbabfeefe681363aa2c005c8992ca679683f49ad11d5680cb159e9552c760f6568d956fca4fd9caa02ec53db245d910e83c0a6997e22f28a627042daa8bf0829e5908cc86fe8cffe3240465f796947a87fbc9061531671c7889d1825ff44cfc8b5233e3d13f71e4bfdc6aa60f6de8cde6e5fbc68250b9e98d8d5194bbf99b5acb91170bd7c06ba1efc989b1084239760d960e5e442c8c86d0814b036239439d061a4a914c847fe2d5f4da03e501976972dab91c535f8608d3bde1117f5a9214ec4bc1eb8b057833ef2ef9baf11d0dcdb7594078215c40ace401bb603bd620f49f1f76689d9f30d57322396464842852495606ca6ff0dd241ce49b6f0960b110456be33d779472f19710ef3680e3f0c89df97767243abd39cdfdcd51ccffd6949c1adf5864f123dfe013b771a75f6286a0574a9fe67b7e9ca15ccb3d9089048ff2d08e5122c2cd912bd3302dc20af3ccd87a26227699823faf95aa43c5d8f63306f15fe9f78c3bcd3c7dd7560a439409545f44997d11f857a1019c39a09886df14ec28ef75871ccc97c23f4dd37bda93b4ec32e73cf469412c62e47da6c3846a3041f0ac49d5aaf54d3e9f3a2ec0a0b4313739151839533ad202d1d3bf5b696824ac4df9c3730316d4db5e0d24b7b46caacbc017799b127698911e06d24c8e9e54bb02f58c1f69842e766cb752ae90dba0329ea03cfb82fd84191d36c3740cdfe71c7c81dd49b46383507438e0c91e61715cc000e6ab3bc6dacf13ff89051df6e86ab891b522e10b6c59c653e577cecb372cf9dec7308b16c4aab51e6a7bf61ef317b99d4693e05fe07ddf89a4cf3f835d11f2e53eb7625dfdaa7bf3476d4662869768258b89fc2c6caff134d5903f8db7fa8b31074e0c07e3da132a1d6a3aea97eacf0ee956db9985663f4e7f7aa96e1c1e55bfd1a4afc3f49cf0e9d8c3fd79ecbcb8b9e6c8f44d6630c7db133a3d0c65f94705deb1f1227e1ec1fe2f7abd2b07651a0b54891d12163da9e040a828504d1f73cf4a7c5c90a3266f1907c01180fdc1d698d8e53c023f224327480cc29c356219472118a63a067a79cff0954c96f5eac4eb24bbdd58f15e1c03385bdd7ebaa139cfe0635188206561f49273dd0aac33484b065fdf2af5d48a041c97d3d54f29e2d9eef5cec60c27b9012a056c6deaad94967ef806ff39fe0f19a393cd4075fae1298d24b7fd447cece8e955e085ef414e697ab1a8fa6eede0fcd73836e35cfefe8d5f48c3c92a3900be33ac25dca79752f0222a2dec1a9b4cba8a7ff1da42e289b58a67f27df651a3d0d883099b3fab7078819f35da9624c9b2f3cc90d5f413df2e526808a3e210748db40a6e43fdc5e33f911a7e2da05675cb42c384118a4bff971c4de1be14b2774978c6883c3c750ee8566649f453e3734394e153c66c30a9138c42276865249fe9eacc76f2dd250f631ccc0df378a5b5a88f914a7ece2f00dd2477f6b05ac232dc5ea2c3012b079bfc43e47a26637e7386ac46df87d56d4bc1e618d678bc13da5c50ab362790511e6ff9587afd3c79de0cb0bae00ca0894dd19201f58a185735d38daf73b55df17bbf7242883b4db9b4cdb208b752e2af413515b57783ca81ed6a02f42e1e4e1490b4af40532f23f18de63601785c08a1761a20ad40f297cfbab735819ee4f2fb7fd0496bc7d3fad6da48a0170767ac3190af2fe4fc3384121810203a2e176d5d386ab74f957452d4444a1df497263d89f6eb8d9e216207b38092357dae1bfc595ae8edf8e766255401f6c42135a45b9234e08d05293d9043cc4c07925b408224e990db808f8d992c00b32327d9dcec252bed140dee8c1239a4e4224cbc51e4e93a5466428a0ced04a2738486f211219ed7e5789f751d4cd3987a46bec7dd49ac0624a6231b159aff3a226813486c8aaa984087a0928078b649cfa2fd51d6f76474728d7059e7e9355a6d2e6b2d2d5696c15c22c4caa9a1afad46418f1264852afb4794f5e06d5854860a02d6c97e4831ed7faa7e076056ddf3b7eba26f630a9d38f41226ac79f0a7e95d4a02c114ded3250df501680b4fe7bfc49e809df6a9fb9b0a60d8df6a21650ef049561e8a166cea97b37b19c0ad539278f743d13ebd90791815ba8b3cfd546e0a122658f0fd850fe450e076deb8c825d979cebd744fcc0ab67fc3e0bf6259f6c01897674f5462533cf8e424729d0ebab5be916bd6a2d064bd08933a8ee38704e7a8a65e479de38057a247019fbe654e1b3a0cc32f8630872d4bc294c800c0162d5c9a84330ef2bf9266ce8b80393ae825efdf052591990db40c95930b262e5ed860ec7b2005f74298ea8320b4a91b11b90ff26d5934f29205409ceb2e2814355a8d2017e8d2d0ece2606a6d9c8032b0d6b639fe5ad067a0e7d7247c43da35e9a372ccaf10ec586ecaf508b1c5d1267a770cbdb81e065a92984f7d3db6c403b571cd56d280a6ea30b1c0d85ca9ec0ed011e478756d9ea72099d807aa3cb23b39c8796f9fdae034aa9ac656ad220bb70ba48cb10b4aec7d56594f17b471b49311c5f181356aa6e07b3a9b7cf665d27a6a17fb47afd5ac8ccd0b8b8e587746e259d8a956b7a86098bbf25b2af54242641a3a6456c25aa1f7cc6e5089ae26f4c05b123d6fb11fc1bb11143374ff240ccd0d1ebfb7db0758f7829b13f55b25ad39ee0c4dc9bcf24abd8721c2fb22a644cb1381251d3e5f09404ca8da75900eb84c8e964002038ef80bd70ba4b6ba3801c08f7c1854fe6095d8f493057c80079cbb5519e9fea5880469a728876aa4f4f923058ba0c3a2a67560cafc3a4fef9bfa2c93a9e23aeb0fb4c8b6b55c1a27de65724af601e0ba58aaa132c4a6a045b4fd7218d3e7aef7bd9e8c26ca18df67011aa5f2256be9d3aa771828bdc173d09ecaf51556a74dc5ea1d118a4b5ab82303587358af468e78de6541ebdb127be717cbe06ab46d19d2c54197248086a54f06cad85a501b7b947539dab1d1ade666f397b06f2c61bc47c0e0b1dc1c4fc66867ef1a99d5e0fae401ebcb7290d81334627e038e25b627072f69ab347b803767f93367eead9eb89f5fc2af7a90b5fd89062e49b2bb278365db438a98eef0db154f730668c9a3043189bf7f3923cd397ebbf818edeb179c880c53556b5a6190fcb94285e145f9ef233722111eb4be1b75cb2358fc66781ce3a89eb7f9b47f5a0399b60ce5a39b4f93200147cdf75248484ff29bccd71718c98d289783932f133dc5e7ae49cf0ce508c7243f74feee94234236044864f11afac002e6e21ec57338a1c4446c21145f6ccc44b0a9d9c9976ee7070ee52505190f1fc995f2abb36e24d3269bf24f2ce386706d6231fd8730e2014104a1d4c0ba5574a9e47477275a0972aba354fbdd6c06333d360a2c3403381cfb00df8a5716658ae266050d0dce7906dce81a896c65fcb4bc37b6c00ad9aeaedb8c3f9803566100f77ea2d6baaa40cb6a48841711eade07d30ff8e8789f02090fce19a5385523f345d0946d97cd5d8b890636ada3f2a3e004d6f17f50bdb5a9f330912e0eb6e26ef4aa33e0afe1c2ba9636d92283b67cede8ea60d32a0f68bbe545a226a69ede8c2cd95372ae0d8049108118e42c15795e661d2a890fb01bda813cc833cdb16e0d30cc68fc6993891d663b90e92894c06f20cce31c6db40e32cd58ed4f5cff6e2194fb6606f3f075d45a5104e606c071bac0fc5a994cf92322463f6ed9fe24a025fd942c49ddef31fca634290cbe9464cd8dd2a136eaf7f8d367c0f9fb48a3572445c78164e45807909053af2619cff4cbcccd42"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002e00)={{r5, 0x3, 0x8, 0x3, 0x4e, 0x7, 0x8000000000000001, 0x10001, 0x1, 0x3, 0x9, 0xc, 0xbf, 0x3, 0x100000000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = accept$inet6(r2, &(0x7f0000002ec0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000002f00)=0x1c) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000002f40)={{{@in=@multicast1, @in6=@loopback, 0x4e23, 0x7, 0x4e23, 0x7, 0xa, 0xa0, 0x80, 0xff, 0x0, 0xee01}, {0xffffffffffffc000, 0x2c, 0x2, 0x2, 0x8e1e, 0x6, 0x899a, 0x9}, {0x0, 0x9, 0x5, 0x7}, 0x6, 0x6e6bb0, 0x0, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7, 0x5, 0x577, 0xf}}, 0xe8) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000003040)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003480), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x44, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9a}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x44}}, 0x40000) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, &(0x7f00000035c0)="58c6efa9d00e4c4eb395ee0c50ad2dcdc5bb2e9e440156a734c93279379a481f850b6fa29afa0a74cc1df6a9ffd1af7628c1b852788e56a12a4cca04d07307b8dc4e63223eba54613146d77d0eaabffc7e5db72adfedc853aa8f7951e288b67310021531f57f2bad6f355c9543a817fab71832f7a36d164fd49364f35d8924cf0d53601ee5466bab847fbc4433205ff6170781ffb9c6406c20773e8ea97e4d753a0d6af0ca9e3fd5502c0e524070a522d89dead1bcef811a28047a", 0xbb, 0x8000, &(0x7f0000003680)={0x2, 0x0, @broadcast, 0x3}, 0x10) syz_usb_connect(0x0, 0x11ab, &(0x7f00000036c0)={{0x12, 0x1, 0x50, 0xe, 0x12, 0x9e, 0xff, 0x2e24, 0xd884, 0x444f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1199, 0x4, 0x8, 0x2, 0x10, 0xa, "", [{{0x9, 0x4, 0xc0, 0x46, 0x9, 0xff, 0x47, 0xd0, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x2d}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0x4, 0x7, "3986"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x401, 0x4, 0x1, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x403, 0x5, 0x1, 0x4}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x5, 0x80, 'N'}]}, @hid_hid={0x9, 0x21, 0x0, 0x73, 0x1, {0x22, 0xcf5}}], [{{0x9, 0x5, 0xc, 0x10, 0x3f7, 0xc, 0x4, 0x1c, [@generic={0xa0, 0x10, "8986e3c780f869d9b29e7aea88d5f851b76002b3b53459d5e92df4f8859a44fd607404f9e2826b5960c71290d57d606de3fd9d8877f3b3b63fac7a82fc3c2bbb1257ccc41ecbdef0d47d7504afc2e981cbb6effb3b6036f79fb1f564828ebb980cd9f9abd6c9b07343a9fb14849599a2e7846f74b9f22c92f0a96cdc11b5e6fe963d92c1ba604fcb1c57697ded8b479e0dcc3a7b6d478119a9c035437cec"}, @generic={0x9e, 0xf, "9c233930200e815de25a5d63a386e51c1cf66b10bb2dae94b5145579bf50379b9616e96a80338b2a37a06b8ced7f0b21531b545ec6e174e0b50a8c4cd45a82c14ac6f6a27552404f947fff21ee6db096d635d2f4a7cf099828a7c0f3a156b79f08c6b7afcfe15837d83aea6ecd4e720477251de6bed9e0a0dc7a517027421fd5ab986493ab416dbfa8afed2b1344ce33ae79aba038b8b3ad1b4b3fa0"}]}}, {{0x9, 0x5, 0x86, 0x3, 0x400, 0x6, 0xfc, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x71, 0x81}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x7, 0x9}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x80, 0x3, 0x98, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xf}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0x7, 0x5, [@generic={0xb, 0x1, "80424dbd034d292b0a"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb8, 0x101}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x7, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3ff}, @generic={0xe5, 0x9, "766b7f7f07b69304644972c3e45eb0a2a646802e22c01284af0c86be04e8d02d0962f528a330c61e6d2f30015669fbbc74760bac1b4f785cc90746721bcd082aec7c67a9ec917b39fef3073bace71092c20c104634f31e2a698f1b036c3a1fb1b45b503cbdaa390c2f59cfe9dff8e4bffe9eedc43c05ce423beac6a62fa0c0e2aa7395d231d0649ffa3498c98df831656f4e089f794b236f5921623829893efcd89aff061618c8ec516884d8af8adad7195644317baf35c997ba736dcc84aa0b8667c1cc00765b89a6c4f8da7ddba7797af1a1960ac1ad36186d0b53170e470336ebb3"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x4, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x93, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0xa8, 0xf5}}]}}, {{0x9, 0x4, 0x82, 0x8, 0xc, 0xe4, 0x75, 0x21, 0x81, [], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x72, 0x2, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x50, 0xb}]}}, {{0x9, 0x5, 0x4, 0xc, 0x0, 0x3, 0xa, 0xff}}, {{0x9, 0x5, 0xb16d85d82abb238c, 0x2a8c20df99d7659e, 0x8, 0xb, 0x3, 0x1, [@generic={0xbc, 0x22, "015c9e73749b33f6a182cd425d6741216a96808a802f11477bcc44c58006874b098e2aa3fc928133f81f4e18a7f0e93375c1da3c9d007c5f71d215af4ba7ce0bd94ba051ec0e5065ca1a8af7083d735a683081dd3bd123c6169cb5778991cf5ad691f3874ed95899f1f6f18ff6ab240b5b9396bddac9329a181768130c3d8a1073d57883996cae63cfcefc2c3b03f0fc96a0b0ae403e0c1e4513e3706253dcaa34893f7e080d908b3a230cd6b35fc540d6f1170c03f70b6aad86"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x2, 0x5, [@generic={0x99, 0x23, "36abb1bb56a8a214dad311cd02d68761bcae4e27227e7e99a8d3a520433144c9217036089c76a6edad06f84c4abdd0799b24878ee3f056342e3afdeefc96f28752ab874d07fea69234ef9bd6105cdb719940ba3efaaae0acda4748f0188ba774080162a83df2ea881dd077f5302366b15a198f3f7a9559b064f3eb3624c3017ef4416c952ead2d926e36dc6f0d124be1c528ee1780e461"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x0, 0xd5, 0xff}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x4, 0xf1, 0x6, [@generic={0x1f, 0x0, "1c5b405f802c7a12d0a07e9043998802dd19a4e9971b80e94d76b2329b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x10, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x72, 0x1}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x62, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x4, 0x5}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x2, 0x2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6, 0xc, 0x5, [@generic={0xf6, 0x5, "e5935394e3976dfc6008d6e0dd1a5821e3ae8d7f202955f8ed90e3181382e7080733e58eda7898958d1e0d2a8f0419120c9b49c808b86517ac245067aec83c0b454afa9eacbd2e457c2be7a8df98da2efa1a5acbf954215c88f74c49a1ecffd7c8138c3dff187d97ebadd661fb2ad672cdd07a54bb6cd8613d46aae6bdff824603d220aee68c6f9b473f293073ca4019f7ca5915bedf0859d655f626072e90b7191c066751b46d66e905470b6b16bda26794e3a5213baef6ece11224372b2cfc8ff5ddb668bb4b41597b4664c0b6195b1439d41e927027e3f0cbc24ff187ca7047d140d8ba7d77ccdab4aa13812ca280837beccb"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x8001}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x7, 0x2, 0x77}}]}}, {{0x9, 0x4, 0x9c, 0x28, 0xd, 0x35, 0x62, 0xc4, 0x56, [], [{{0x9, 0x5, 0x8, 0xc, 0x8, 0x5, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x45, 0x9}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x3, 0x80, 0x1}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x2a, 0xc, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x1, 0x40, 0x5}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0x20, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x8}, @generic={0x8a, 0x23, "ac4c6de463b82eedc3a243387bbf9142e56be3b0939fff53ce766e1ed8d8191ab3724c568fdf76c011d41df334e6c22e9acd4718e82a59d785c17f3cca62e330201dc0a0c506058839b2f35aa2b0ab416df1cb353e506cce31edde5bb6da5105ac49bd1e0b6baa59031f2f950035b627e14a4b13ddf007b6616e8a47c72fd8e870a0c3bb80f89f4c"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xa, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x7}, @generic={0xc5, 0x21, "9ae3b82b8cc9204134ad19e206b3728c55e89f43f9304556f71028cfe424b13ff1eb95ead69542df002639853a390e712015e7327c5b87e6f1ae149d2152c9a23435cf0d59f61e2725258a8c1f5f898ce166f3ae9a4bd5670ef86adb08a2d138f2067595d40c90fafb02b960b840cb1b249ad5b306063aa9b471f9d73e1891e0ba324d341ffc2233262d39b0ed89889621b710772e783f211867313367a014fbae1612273b1c48ac87f159a330283f2ed55465fd95f48d8798060c332fc69b197af4dc"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0x0, 0x7, [@generic={0xd2, 0x5, "52b0923e79a302fca519a312442a611b9572610e5228317af100954407406b2f8d93d707c648db1c6b26dec74b5ec03fa17028a91105b9f37422404ec5215b8fbc47ec59a8f2187c5ce2536579174c1de8a812389a4d93cc8655cbd6221bfa67fbd532a11f72c4883fd6f96496c2bccd5a51ec4cbf659d6d6dc8466760a1aced70c5e1f7501ef20153939d6812cabdbc425c1fc25de915530beadb4fe8a083d4dce25600dfdd3af6467ea45c7586afdf8e65189210e9448d89db6598262f4f06915ad48bb488c34716d50c8334055c21"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0xff, 0x9, 0xff, [@generic={0x94, 0xb, "63ef89ebb480640598b7fabf5dab8cab0718dcfd8661669253378d2b7a91dd898c81f3035c7a129d8bf290f37ee302d10da82a193e782857fdc5886d186d8a362aa09b3d199a9482b71c67ff1609d7262f57a98d5a225bf569df7f6b93452068feeaa691c1fa0eb99f73dc5e546910696282ffe5cae86e2e1b50991aafb0bc51a94e83dbdab9b290228cdc0e8fff052fc518"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x6, 0x88, 0x5, [@generic={0xa7, 0x23, "8165fb0abbcd916a9e003004987bb3736acf7cce06b48ba31e2f48ce196b425846c07a256ea0533e67bd2a947f08db82180812ed1cda79ffb5f1b25775a7b18a4adaa901a18c30a08c04c589168656a1610833546b41397e9e94ed77200c6b91db3410f71bd7c5ddc013a72dd7ac9c748ece6f8039b36beb80b9b4c022d8b0e00f32807f188b85ef3501d34444943254b8de6c90606af39b3a70a985ebb540d795a2257466"}, @generic={0xf4, 0x6, "d3bde0924ddf312ffed1bec36afa90c034d33f391aba094fc063bc389add73ff7a0ef0af994bdd2df1b776052cc6b9a9baa1041051622e4d3638110be9b98d333a11750606e98e3a30c17efddfb09f8694aaf74b9f0648a8ae7a1da6dc64a8798f0122de7cccf6dfee6fb0dc62896fdb92df4936269cd61ff3014a08bc9db6965fd3a2f9f3aeebea5098a35d59be7e271d71ed4dd6c554493b9dd6e8ca44bd4251f6992acdaf85e4f78c0f7ec7fb0b07bae2cc2710e7c1b983d34a68e321775385a592c12b3aa151f0637965835abe02e42fd179ebf04ef78008a45d0c1436d7d76f8482d629573ebf404b9c2e379f6798c1"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x12, 0xff, 0xe8}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x2, 0x62, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x3}]}}, {{0x9, 0x5, 0x6, 0x1f, 0x8, 0xf7, 0x4, 0x4, [@generic={0x35, 0x23, "fccbe5f353c05b5fd89ffd00c3a651c4d6add66196cd95e56e0bee08e8421478fe26d86a5375622b10afcc9487bb2e4d9ba3df"}, @generic={0x2e, 0xd, "3be295deeb523c51a841a52fca378f18dac7dd6647da8cd80c29707fbe950f648ade8861ba5e2bd8cae46e60"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x40, 0xe8, 0x9, [@generic={0x29, 0x24, "2ca6ddc81ea34a15be18ac5d14fe0580d79d1b56a24babc3390c23f8369d24098be4cc5b445a06"}, @generic={0xe9, 0x7, "b3b9131be4c6e1a120a34848f2f5c2e6991aa6352954be18b554f33d15957878477734c0dc7e52c7cc2400cef67e5d9cdac48152adc9880c43d75d07afed20e48e20eb9955c1cef050e29e30041ac9af00d28bbd4c85e55a1f24153e583f893f83946e9e9c64ddf67f0f11ea3bc2d3b46898ea65f3f4cb1db858c2263e8d991fa72666056473387affe2788f2faf1868479ab538d8de01273bf8da488c24f50e40f738cbb31e9fe12248c7476888dacca6dbd4228b870db0bcc2717edf944c6dbf07088a61330b80f8059c218cd94f63f5a04638bf21b52196a81f1054121e5f2b2e5b7857b30e"}]}}]}}, {{0x9, 0x4, 0xd5, 0x57, 0xe, 0x22, 0xbb, 0x5a, 0xb, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "6d3c8ca14c"}, {0x5, 0x24, 0x0, 0xf3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x0, 0x2}, [@acm={0x4, 0x24, 0x2, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x8, 0x92, 0x5, 0x4, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0x5, 0x7}, @mbim={0xc, 0x24, 0x1b, 0xffa0, 0x5899, 0x9, 0x2, 0x1, 0x4}]}], [{{0x9, 0x5, 0x5, 0xc, 0x200, 0x95, 0x85, 0xb4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa8, 0x8}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3f7, 0x20, 0x2, 0x8, [@generic={0x8e, 0x22, "f9f73d2b8f9c3e8b8a468b7f318afb725d633bd8ea47e42bf8270995a352e38b1a1bb215845219ceb31366b90080c905978758e447a921dfba624bdb6f231684dbaa7a4c71b1238374800b1dc9d50a761c810a2200bbe318b46e97e01c140c3d4487dc248e63865f744d039d1448d7b4ee3a5c23e06c35fc4ddf331fc42b9b286e65ec160aaaf48069ddcaee"}, @generic={0xb9, 0x36, "c18e71dc8ad433b90d42d4c514508822ae669460c473c70078e2a81d44e42b2e4e89204fb271a04e021f55d6c1993f18c7c67f4ee0c369007d836d4c2cba1afee318903aac79a96ba58a4085e5617f57731089d9196f8928df7b9f4ee442eccf18d0c658632927ae08075b809ac95f7f12dc6fcc5b3eb4a6d325fcc457108c23ae563d83640e3df36cef5fd448c1f2c5ad63e3f97d0d2ce5758fe88845888d7ac25af8d6c4dbf58e9fc26ad63ca22e977de0479cd94b01"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xd, 0x8, 0x5, [@generic={0x10, 0x21, "94243a41147a9e71b4b5e307d972"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x1d6}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0xc, 0xc8, 0xff}}, {{0x9, 0x5, 0xc, 0xf, 0x200, 0x3, 0x2, 0x81}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x6, 0x9, 0x1a, [@generic={0x5e, 0x0, "064d9d9260d44ad8cd9d2717457232f1c140436030b7186cacbb6588620530f8fbd3809eaaa977a4902f33c553385c77a9b5f23d9d4090aff1840f9b5e8036a9f7e8067ef47e9564533cd6831af7c0fc41b5288eba0cd63818d68bcd"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x5, 0x7, 0xb6, [@generic={0x9c, 0x23, "54f0a67bfa84fc567da2f0453215e911e2d42a9d4901c45aadeb5d4d24ea443cf7222c14c228d269c4ced22e362e9803fa82ea0ebbf98f3fd21d43e816ec8890a2cfc3e33b6368af42cb5d9971f094b7a5d55e7fe544a987e3ed5e18a529a64db8df6fd7634463f1287f66a2f10b7e8488f8c8569e1c359c27b3af87bc791b9f466c1b34cc31da0709e07f97dbd6ac38e8f5ae32eb12fab7992f"}, @generic={0xf4, 0x2, "d91dbef6002903c6765aff391a648b3bad647896c600d7454ce2be8c0145dddf9a928a5cc1c704fd876814edbea9b1c9c8eb085afc0d3ecdcb01989f4faac1ca22c12e54e009a1fe2a6ce0182d3bd0b82bcc1d327e0805fbcd1ad7549485563eaa073d85250c426fe3bd9d23f7e88c1b34846784b0081b1ebc67590c582df4ace4616d6c004334fb848c46b1a681098c476755d6a370da7883b63510a021f226b5621841775cd6b28e90d419c06d1953f43c69755f007d88418f6ace65d20225095205fb6ab8c0a3adc1fc6dd4c6ddb859c1f4deced5a076495e3fa827cd4fd38827bd6e8967ca041fa88fe43d2075d5d147"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x5, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x55c6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x4, 0x10, [@generic={0x4b, 0x23, "da9bb7e8447091c8d314fefa27996ae4471da6e28eda5e6528c89a50eed5c30538fcfd8490326d142a179f4effa749f3aeb3c64f461bd574afc4ec2014025dc56d3f4fb9a91fc497de"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0xa, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x81, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x70, 0xf57}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x4, 0x1c, 0x7, [@generic={0x3b, 0xf, "ce2e7304f7196954dadc3a384b64973fa404e97f7be5ef577cd9c1f3e06a958436c656906962d7f494baa1625b0c10324c9ecbfcfa85a584de"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x14, 0x3, 0xff, 0x80, [@generic={0x85, 0x23, "0447b5676c8a06104149674fbf6e5908f63ae089040abbb3b04eb75b09941d608eb50c1d5d5ad3ab0c1abb41be1342a08e9d2d479a5cd24c199e90af890148c32e515c3e1ee9a588a1354b4b364fa1fcb3a1c4ff9116b3e50f8678a1d4f72b1e3092443673706de7fb5fd52780fd82d3f38b8e30be530c8a1329aa378352c2b3582f71"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6532}]}}]}}]}}]}}, &(0x7f0000004d00)={0xa, &(0x7f0000004880)={0xa, 0x6, 0x201, 0x3, 0x6, 0x9, 0x40, 0x3}, 0x4f, &(0x7f00000048c0)={0x5, 0xf, 0x4f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "2cb8c131dcec71cf57edfdbf5e56486a"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x374, 0xf000, 0x4, [0x0, 0x30, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0xbc232059086e6e62, 0x8, 0x93, 0x0, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0xb7, "7a792ea879ef15b1cae2141c271f4457"}]}, 0x5, [{0xfa, &(0x7f0000004940)=@string={0xfa, 0x3, "606166414bb2480ef340ca7a3455a24d1583bc183f4595a2fce0b0bda1a47e99be5ec1fe3f0cd10bf9696f81aee2997e4475c8e743791cddbf74349e537f0ae3f636a1f05c0b108ea127374c3e12c39e04e169e35003d336874de8847a3aa806197cdbec33df750f232b5e9817e0e3047cbca59866025b9a12a23b3b05fb34819b8b10731b1e2e1fffb0a08d3b4c614dd8a6bcddaa886398de4f42491bc32ee4a642131d7c630c2db5cf88bb64da6e7c6be6fe790b68af4638da28c1d2b0609f6b295d44b1468d9fc290fbf177ed1e0ce3a86d0d8adde78463264d2e2cc3b70e8c339617e3016e4cd38eacbf27d38649d9a7224317b29ac6"}}, {0x91, &(0x7f0000004a40)=@string={0x91, 0x3, "6b358c68df65ce29c98493aa4a6727eb74812727b96a5d7b2c3c4c18aef37bc8ebb1abe233e44ace4b62f2fccf8cbdd85ce63dad01ff4f9b6d536c68ccb5891f3f92227f8c38f6399fb83ac664fdd5d49fca413398325491210aa2a5550c47d2b6b497962f009975953947a7f435e3e4506128049b4fce78c20f336230b571c1c11866563f6ffdc8d8254d284ac446"}}, {0x4, &(0x7f0000004b00)=@lang_id={0x4, 0x3, 0x140e}}, {0xe8, &(0x7f0000004b40)=@string={0xe8, 0x3, "d90db1a15d36f1c120a9e5a3c05cae7e7e88cb78eb49304038bde173a9c877cdbd1680551c4333b8bbb50aeecf6d7e75c6743f8d8e09992faff890e4cbbd5b1d30af4fe9cf193c6477dba6e3b96fb88ee1f6f52a9047a549347c05882b5b47899e55edcb6dc434768329820e5b7658876f80ce814ab8b7c80eebb1338eb123f85a8b2d9aaf9ec366426190f0456262410bb6dc07bd5cfcd4453e5d2af15a210e63a9f1cfd5419904d2057f4ee245e431982fa7d44a6e4c1360bffc92ac060a073c582aa39ada7e07da30fee270cf409c7504c91b52473fdf0a37352757b2d78863e92087c599"}}, {0x96, &(0x7f0000004c40)=@string={0x96, 0x3, "9dd2b164545a3f5ddc1e27b377e4b5e5c25ce918c56d12cdfb4f8587648947badaeff672c0637811930b4086f4955630338b45d6e92785a14754d87c10b547e10dd241df58b1c2933cfab5a9351456c8ac290b737aaa4810ca9d0224b85dcff7418458f8a77f7d88f6a5acc4c4c810b9f525038b7bbcc69c373eaec409556232d410e7bf22f71ac1d4cae6cf9d26c9615d371d49"}}]}) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000004d80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x10, 0x0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x44}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0x65a6, 0x3, "b87a40dc"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x2, 0x1, [0xa], 0xf}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x7, "fc3305b415"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x6}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x2, 0x1c, "16a96f2c"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x1, 0x3, 0x3, 0x0, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x5, 0xda, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x4, 0xe0, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x75, 0x4, 0x10, 0x1, "279b7a0178be19f5e7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xfc, 0x2, 0x0, {0x7, 0x25, 0x1, 0xc, 0xff, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x9, 0x5, "", '\n'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x10, 0x0, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7, 0x7}}}}}}}}]}}, 0xfffffffffffffffc) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000004e80)=0x1, 0x4) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000004ec0)=0x8, 0x4) 610.904849ms ago: executing program 4 (id=2922): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000000000)={0x0, 0x8dac, 0x80000, 0xf7fffffd, 0x40058}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r6 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) 563.878853ms ago: executing program 4 (id=2923): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000340)=""/90) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000340)=""/90) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 135.035501ms ago: executing program 4 (id=2924): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000140)=0x80000000) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000180)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x4000014) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="200f02000200abf86e0500bf267d64a34ba7e9feee3e3794827259e2bd99d04bc572c0b8b05a92e69c008cb30bb8faf4dc2d27ef19d3924599ecba8b24e8e137b82860251523d0ca1bccd3c71811a05e52fa7a4c5c6be75290a3c92ce1aca15254475ca28563849c6d040e4df855f22f2f7ee827bbd0af7734730caf5e01d1f958a8a0f57781bf3717c13d7680f0172a2cb9e4880c0839f6c30edc7acd76208826f12f6f0c62885bfd454b9842c02296a76be619af1bb058c7dab18bcaa64ac689ec1205de25e74f2d85f84198f64e09e69a"], 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x4f8, 0xffffffff, 0x1e0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3d11b30a, 0x8, 0x2, 0x1, 'syz0\x00', 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r7, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r7, 0x2000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x101, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x64) 74.514458ms ago: executing program 1 (id=2925): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) read(r1, &(0x7f00000011c0)=""/221, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_loaded', 0x901000, 0x25) read$FUSE(r4, &(0x7f0000003540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=r3, @ANYBLOB="08000500", @ANYRESOCT=r5, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x24045098}, 0x240448d4) syz_emit_ethernet(0xf8f, &(0x7f0000003180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000806"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) 0s ago: executing program 1 (id=2926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000a958f7e63f5715f72940d63af8f9ae7a243df985a541f4acf2a019ccf9446f015f938157ea826f32af273b1a9fbdf3564515bd92a8e0b41bb849a1374ab478ad3d813b61", @ANYRES32=r3, @ANYBLOB="12030000000800000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r5 = socket(0x1, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r7, 0x400, 0x1) fcntl$setlease(r7, 0x400, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000300)="b8010000000f01d948b805000000000000000f23c80f21f8350c00b0000f23f8f3dad066b854000f00d06747832500280000002ed9eb430f01c966410f388222f2470f2370b950030000b80c000000ba000000000f30", 0x56}], 0x1, 0x70, &(0x7f0000000440), 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x884) kernel console output (not intermixed with test programs): [ 776.963387][T16126] nvme_fabrics: missing parameter 'transport=%s' [ 776.963423][T16126] nvme_fabrics: missing parameter 'nqn=%s' [ 776.995855][ T9] usb 5-1: USB disconnect, device number 68 [ 778.054989][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 778.055038][ T31] audit: type=1326 audit(1787972128.701:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16158 comm="syz.4.2674" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f872e39e159 code=0x0 [ 778.136041][T16161] No such timeout policy "syz1" [ 778.551387][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 778.561435][ T5708] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 778.651456][ T5713] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 778.703204][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 778.707481][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.707573][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.716264][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 778.716334][ T9] usb 3-1: Product: syz [ 778.716374][ T9] usb 3-1: Manufacturer: syz [ 778.754023][ T9] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 778.769831][ T5708] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 778.780602][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.796589][ T5708] usb 2-1: config 0 descriptor?? [ 778.801866][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 778.807625][ T5713] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 778.818994][ T5713] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 778.819085][ T5713] usb 1-1: config 0 has no interface number 0 [ 778.819166][ T5713] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 778.819296][ T5713] usb 1-1: config 0 interface 1 has no altsetting 0 [ 778.853330][ T5708] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 778.859686][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.859718][ T5713] usb 1-1: Product: syz [ 778.859820][ T5713] usb 1-1: Manufacturer: syz [ 778.859869][ T5713] usb 1-1: SerialNumber: syz [ 778.908925][ T5713] usb 1-1: config 0 descriptor?? [ 779.102598][T16174] ipvlan1: Caught tx_queue_len zero misconfig [ 779.147738][ T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 779.158203][ T5713] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 779.216042][ T5713] cx231xx 1-1:0.1: Failed to read PCB config [ 779.216177][ T5713] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 779.240153][ T5713] usb 1-1: USB disconnect, device number 61 [ 779.361314][ T5696] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 779.424614][ T5708] gspca_stv06xx: vv6410 sensor detected [ 779.521301][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 779.523352][ T5696] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 779.526476][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 779.526588][ T5696] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 779.526684][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 779.565177][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.565261][ T5696] usb 5-1: Product: syz [ 779.565311][ T5696] usb 5-1: Manufacturer: syz [ 779.565353][ T5696] usb 5-1: SerialNumber: syz [ 779.594003][ T5696] usb 5-1: config 0 descriptor?? [ 779.625204][T16169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.640605][T16169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.711341][ T5713] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 779.861388][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 779.867555][ T5713] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 779.878311][ T5713] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 779.878361][ T5713] usb 1-1: config 0 has no interface number 0 [ 779.878405][ T5713] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 779.878489][ T5713] usb 1-1: config 0 interface 1 has no altsetting 0 [ 779.890519][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.890622][ T5713] usb 1-1: Product: syz [ 779.890680][ T5713] usb 1-1: Manufacturer: syz [ 779.890723][ T5713] usb 1-1: SerialNumber: syz [ 779.940581][ T5713] usb 1-1: config 0 descriptor?? [ 779.959507][ T5708] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 779.993510][ T5708] usb 2-1: USB disconnect, device number 77 [ 780.021736][ T5696] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 780.021814][ T5696] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 780.179661][T16171] fuse: Bad value for 'fd' [ 780.196407][ T5713] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 780.204633][ T5713] cx231xx 1-1:0.1: Failed to read PCB config [ 780.204812][ T5713] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 780.220655][ T5713] usb 1-1: USB disconnect, device number 62 [ 780.240472][ T9] usb 5-1: USB disconnect, device number 69 [ 780.601335][ T1220] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 780.759641][ T1220] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 780.764478][ T1220] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 780.764560][ T1220] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 780.764627][ T1220] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.779196][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.779225][ T1220] usb 4-1: Product: syz [ 780.779241][ T1220] usb 4-1: Manufacturer: syz [ 780.779257][ T1220] usb 4-1: SerialNumber: syz [ 780.850310][ T1220] hub 4-1:1.0: bad descriptor, ignoring hub [ 780.850364][ T1220] hub 4-1:1.0: probe with driver hub failed with error -5 [ 781.084258][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.093560][T16183] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 781.105167][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.118742][ T1220] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 781.322072][ T5713] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 781.403849][ T9] usb 3-1: USB disconnect, device number 18 [ 781.450351][ T9] mos7840 3-1:1.0: device disconnected [ 781.487104][ T5713] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 781.505876][ T5713] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 781.505953][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.506000][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.506030][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 781.506156][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.543142][T16183] usb 4-1: reset high-speed USB device number 64 using dummy_hcd [ 781.548015][T16183] usb 4-1: device reset changed ep0 maxpacket size! [ 781.574652][ T1220] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 781.596941][ T5713] usb 1-1: config 0 descriptor?? [ 781.642384][ T5708] usb 4-1: USB disconnect, device number 64 [ 781.660144][ T5708] usblp0: removed [ 781.735896][ T1220] usb 5-1: unable to get BOS descriptor or descriptor too short [ 781.736045][ T1220] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 781.754410][T16205] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 781.755071][ T1220] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 19, changing to 7 [ 781.755231][ T1220] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 781.786288][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.786340][ T1220] usb 5-1: Product: syz [ 781.786358][ T1220] usb 5-1: Manufacturer: 瓃놀ꖻ継쿑斬ଉ冤㊅퐼㣽Ⴙ翓ᧆ얄青㙯慇ሏ៏㓾尧뀯縡眘䆤⇗羪伷Ӭ๯桖藈욮ᣵﲆ閤蒱䎏윖韢蔻䲌褧雀蒿癲伳妑䦒萆⅀靗毕컶烢쫌嫉通쉩볓è [ 781.786523][ T1220] usb 5-1: SerialNumber: syz [ 781.826951][ T5708] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 781.858448][ T5713] usbhid 1-1:0.0: can't add hid device: -71 [ 781.858603][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 781.889122][ T5713] usb 1-1: USB disconnect, device number 63 [ 781.966381][T16213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2687'. [ 781.991564][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 781.997817][ T5708] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 782.008228][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.008275][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 782.036158][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.036202][ T5708] usb 4-1: Product: syz [ 782.036242][ T5708] usb 4-1: Manufacturer: syz [ 782.036263][ T5708] usb 4-1: SerialNumber: syz [ 782.063051][ T5708] usb 4-1: config 0 descriptor?? [ 782.072117][ T5708] hub 4-1:0.0: bad descriptor, ignoring hub [ 782.078206][ T5708] hub 4-1:0.0: probe with driver hub failed with error -5 [ 782.109436][T16208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.110013][T16208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.129273][ T5708] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 782.225838][T10789] usb 4-1: Failed to submit usb control message: -71 [ 782.225907][T10789] usb 4-1: unable to send the bmi data to the device: -71 [ 782.226002][T10789] usb 4-1: unable to get target info from device [ 782.226064][T10789] usb 4-1: could not get target info (-71) [ 782.226224][T10789] usb 4-1: could not probe fw (-71) [ 782.300745][T16183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.311159][T16183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.323260][T16183] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2682'. [ 782.342109][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 782.369264][T16220] netlink: 'syz.1.2690': attribute type 12 has an invalid length. [ 782.369318][T16220] netlink: 'syz.1.2690': attribute type 29 has an invalid length. [ 782.369404][T16220] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2690'. [ 782.369563][T16220] netlink: 'syz.1.2690': attribute type 1 has an invalid length. [ 782.369605][T16220] netlink: 'syz.1.2690': attribute type 2 has an invalid length. [ 782.369640][T16220] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2690'. [ 782.508383][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 782.524551][ T5713] usb 4-1: USB disconnect, device number 65 [ 782.530099][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.530297][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 782.530360][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 782.530479][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.530604][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.726701][ T1220] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 782.732494][ T1220] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 782.738669][ T1220] usb 5-1: unit 4 not found! [ 783.007585][ T1220] usb 5-1: USB disconnect, device number 70 [ 783.186578][T16224] bridge0: port 3(veth0) entered disabled state [ 783.186947][T16224] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.475128][T13640] udevd[13640]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.584135][T16224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.609552][T16224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.998582][T16253] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2696'. [ 784.178690][T16224] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 784.194603][T16255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.409910][T16226] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 784.411527][T15741] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.411625][T15741] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.411755][T15741] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.411828][T15741] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.411955][T15741] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.412029][T15741] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.412136][T15741] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.412210][T15741] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.453954][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 784.540788][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 784.813497][ T9] usb 3-1: USB disconnect, device number 19 [ 785.054359][T16271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2699'. [ 785.060676][ T31] audit: type=1326 audit(1787972135.701:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.2698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f9f9e159 code=0x7ffc0000 [ 785.069382][ T31] audit: type=1326 audit(1787972135.711:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.2698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8f9f9e159 code=0x7ffc0000 [ 786.262269][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 786.391389][ T10] usb 3-1: device descriptor read/64, error -71 [ 786.452676][ T5696] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 786.622169][ T5696] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 786.633538][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 786.641476][ T5696] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 786.641505][ T5696] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 786.641528][ T5696] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.678202][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.686507][ T5696] usb 1-1: Product: syz [ 786.690831][ T5696] usb 1-1: Manufacturer: syz [ 786.690914][ T5696] usb 1-1: SerialNumber: syz [ 786.709473][ T5696] hub 1-1:1.0: bad descriptor, ignoring hub [ 786.716199][ T5696] hub 1-1:1.0: probe with driver hub failed with error -5 [ 786.761823][ T10] usb 3-1: device descriptor read/64, error -71 [ 786.866745][T16302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2707'. [ 786.877316][ T10] usb usb3-port1: attempt power cycle [ 786.918778][T16293] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 786.931094][ T5696] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 787.222958][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 787.244460][ T10] usb 3-1: device descriptor read/8, error -71 [ 787.281349][ T5620] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 787.413907][T16309] bond10: (slave dummy0): Releasing active interface [ 787.433462][ T5620] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 787.443259][ T5620] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 787.443323][ T5620] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.462920][ T5620] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 787.462974][ T5620] usb 2-1: Manufacturer: syz [ 787.484111][ T5620] usb 2-1: config 0 descriptor?? [ 787.491495][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 787.504714][ T5620] igorplugusb 2-1:0.0: incorrect number of endpoints [ 787.516575][ T10] usb 3-1: device descriptor read/8, error -71 [ 787.542043][T16293] usb 1-1: reset high-speed USB device number 64 using dummy_hcd [ 787.542807][T16293] usb 1-1: device reset changed ep0 maxpacket size! [ 787.545542][ T9] usb 1-1: USB disconnect, device number 64 [ 787.561003][ T9] usblp0: removed [ 787.621845][ T10] usb usb3-port1: unable to enumerate USB device [ 787.639541][T16311] binder: 16310:16311 ioctl c028564d 2000000002c0 returned -22 [ 787.644704][T16311] binder: 16310:16311 ioctl 8100587e 200000000040 returned -22 [ 787.714722][ T10] usb 2-1: USB disconnect, device number 78 [ 787.723101][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 787.871420][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 787.873408][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 787.876758][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.876798][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 787.886706][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.886785][ T9] usb 1-1: Product: syz [ 787.886829][ T9] usb 1-1: Manufacturer: syz [ 787.886873][ T9] usb 1-1: SerialNumber: syz [ 787.902113][ T9] usb 1-1: config 0 descriptor?? [ 787.933769][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 787.933830][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 787.957971][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 787.975447][T10303] usb 1-1: Failed to submit usb control message: -71 [ 787.975528][T10303] usb 1-1: unable to send the bmi data to the device: -71 [ 787.975552][T10303] usb 1-1: unable to get target info from device [ 787.975621][T10303] usb 1-1: could not get target info (-71) [ 787.975705][T10303] usb 1-1: could not probe fw (-71) [ 788.041377][ T5620] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 788.108265][T16293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.117766][T16293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.128526][T16293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2704'. [ 788.192075][ T5620] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 788.195138][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.195285][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.206478][ T5620] usb 4-1: config 0 descriptor?? [ 788.216114][ T5620] pwc: Askey VC010 type 2 USB webcam detected. [ 788.244173][ T10] usb 1-1: USB disconnect, device number 65 [ 788.412477][T16317] syz.3.2714 (16317): attempted to duplicate a private mapping with mremap. This is not supported. [ 788.532855][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2716'. [ 788.582013][T16326] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 788.599094][T16326] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2716'. [ 788.618594][ T5620] pwc: recv_control_msg error -32 req 02 val 2b00 [ 788.620748][ T5620] pwc: recv_control_msg error -32 req 02 val 2700 [ 788.632644][ T5620] pwc: recv_control_msg error -32 req 02 val 2c00 [ 788.639972][ T5620] pwc: recv_control_msg error -32 req 04 val 1000 [ 788.647537][ T5620] pwc: recv_control_msg error -32 req 04 val 1300 [ 788.657332][ T5620] pwc: recv_control_msg error -32 req 04 val 1400 [ 788.662988][ T5620] pwc: recv_control_msg error -32 req 02 val 2000 [ 788.678246][ T5620] pwc: recv_control_msg error -32 req 02 val 2100 [ 788.686354][ T5620] pwc: recv_control_msg error -32 req 04 val 1500 [ 788.692651][ T5620] pwc: recv_control_msg error -32 req 02 val 2500 [ 788.699352][ T5620] pwc: recv_control_msg error -32 req 02 val 2400 [ 788.704262][ T5620] pwc: recv_control_msg error -32 req 02 val 2600 [ 788.713022][ T5620] pwc: recv_control_msg error -32 req 02 val 2900 [ 788.720145][ T5620] pwc: recv_control_msg error -32 req 02 val 2800 [ 789.041925][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 789.079486][ T5620] pwc: recv_control_msg error -71 req 04 val 1200 [ 789.205896][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 789.207946][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 789.239455][T16335] fuse: Unknown parameter 'otmode' [ 789.245546][ T10] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 789.245612][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 789.245700][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 789.245837][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 789.245952][ T10] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 789.246039][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 789.295389][ T10] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 789.295470][ T10] usb 5-1: Product: syz [ 789.295559][ T10] usb 5-1: Manufacturer: syz [ 789.295602][ T10] usb 5-1: SerialNumber: syz [ 789.371315][ T5696] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 789.408942][ T5620] pwc: Registered as video103. [ 789.414439][ T10] usb 5-1: config 0 descriptor?? [ 789.420868][T16330] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 789.447049][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 789.468315][ T5620] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input105 [ 789.536517][ T5696] usb 1-1: not running at top speed; connect to a high speed hub [ 789.536570][ T5696] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 789.560563][ T5620] usb 4-1: USB disconnect, device number 66 [ 789.566923][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 789.579704][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.590158][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.637597][ T5696] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 789.685260][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2717'. [ 789.693954][T16330] tipc: Enabled bearer , priority 0 [ 789.748206][T16330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.760408][T16330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.804589][ T9] usb 5-1: USB disconnect, device number 71 [ 789.852259][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 789.913635][T16328] tipc: Disabling bearer [ 790.018055][ T5696] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 790.309455][T16349] x_tables: unsorted entry at hook 2 [ 790.958736][ T5696] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 790.958852][ T5696] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 790.977532][ T5696] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 791.026276][ T5696] usb 1-1: USB disconnect, device number 66 [ 791.072576][T16245] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 791.253600][T16245] usb 5-1: not running at top speed; connect to a high speed hub [ 791.253657][T16245] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=1f.2d [ 791.274079][T16245] usb 5-1: config 9 has an invalid interface number: 52 but max is 2 [ 791.274128][T16245] usb 5-1: config 9 has an invalid interface number: 229 but max is 2 [ 791.274168][T16245] usb 5-1: config 9 has an invalid interface number: 144 but max is 2 [ 791.274197][T16245] usb 5-1: config 9 has an invalid interface number: 45 but max is 2 [ 791.274224][T16245] usb 5-1: config 9 has 4 interfaces, different from the descriptor's value: 3 [ 791.274252][T16245] usb 5-1: config 9 has no interface number 0 [ 791.274275][T16245] usb 5-1: config 9 has no interface number 1 [ 791.274297][T16245] usb 5-1: config 9 has no interface number 2 [ 791.274319][T16245] usb 5-1: config 9 has no interface number 3 [ 791.274395][T16245] usb 5-1: config 9 interface 52 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 791.274430][T16245] usb 5-1: config 9 interface 52 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 791.274462][T16245] usb 5-1: config 9 interface 52 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 791.274495][T16245] usb 5-1: too many endpoints for config 9 interface 229 altsetting 154: 83, using maximum allowed: 30 [ 791.274538][T16245] usb 5-1: config 9 interface 229 altsetting 154 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 791.274573][T16245] usb 5-1: config 9 interface 229 altsetting 154 has 2 endpoint descriptors, different from the interface descriptor's value: 83 [ 791.274617][T16245] usb 5-1: config 9 interface 144 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 791.274658][T16245] usb 5-1: config 9 interface 45 altsetting 58 has a duplicate endpoint with address 0xA, skipping [ 791.274688][T16245] usb 5-1: config 9 interface 45 altsetting 58 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 791.274721][T16245] usb 5-1: config 9 interface 52 has no altsetting 0 [ 791.274745][T16245] usb 5-1: config 9 interface 229 has no altsetting 0 [ 791.274795][T16245] usb 5-1: config 9 interface 144 has no altsetting 0 [ 791.274820][T16245] usb 5-1: config 9 interface 45 has no altsetting 0 [ 791.434003][T16245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.434034][T16245] usb 5-1: Product: syz [ 791.434053][T16245] usb 5-1: Manufacturer: ш [ 791.434070][T16245] usb 5-1: SerialNumber: syz [ 791.675727][T16374] SET target dimension over the limit! [ 791.919714][T16391] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2734'. [ 791.936404][T16245] snd_usb_podhd 5-1:9.52: Line 6 POD HD300 found [ 791.942875][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 791.950783][T16245] usb 5-1: selecting invalid altsetting 5 [ 791.956885][T16245] snd_usb_podhd 5-1:9.52: set_interface failed [ 791.957578][T16245] snd_usb_podhd 5-1:9.52: Line 6 POD HD300 now disconnected [ 791.958170][T16245] snd_usb_podhd 5-1:9.52: probe with driver snd_usb_podhd failed with error -22 [ 791.979084][T16245] snd_usb_podhd 5-1:9.229: Line 6 POD HD300 found [ 791.979165][T16245] usb 5-1: selecting invalid altsetting 5 [ 791.979216][T16245] snd_usb_podhd 5-1:9.229: set_interface failed [ 791.979738][T16245] snd_usb_podhd 5-1:9.229: Line 6 POD HD300 now disconnected [ 791.980283][T16245] snd_usb_podhd 5-1:9.229: probe with driver snd_usb_podhd failed with error -22 [ 792.009203][T16245] snd_usb_podhd 5-1:9.144: Line 6 POD HD300 found [ 792.009282][T16245] usb 5-1: selecting invalid altsetting 5 [ 792.009326][T16245] snd_usb_podhd 5-1:9.144: set_interface failed [ 792.009891][T16245] snd_usb_podhd 5-1:9.144: Line 6 POD HD300 now disconnected [ 792.010180][T16245] snd_usb_podhd 5-1:9.144: probe with driver snd_usb_podhd failed with error -22 [ 792.026946][T16245] snd_usb_podhd 5-1:9.45: Line 6 POD HD300 found [ 792.026974][T16245] usb 5-1: selecting invalid altsetting 5 [ 792.026991][T16245] snd_usb_podhd 5-1:9.45: set_interface failed [ 792.027297][T16245] snd_usb_podhd 5-1:9.45: Line 6 POD HD300 now disconnected [ 792.027875][T16245] snd_usb_podhd 5-1:9.45: probe with driver snd_usb_podhd failed with error -22 [ 792.071903][T16245] usb 5-1: USB disconnect, device number 72 [ 792.113355][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 792.129326][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 792.129398][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 792.129441][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 792.136870][ T5696] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 792.175726][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.175770][ T9] usb 3-1: Product: syz [ 792.175801][ T9] usb 3-1: Manufacturer: syz [ 792.175820][ T9] usb 3-1: SerialNumber: syz [ 792.214860][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 792.221312][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 792.292104][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 792.294916][ T5696] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 792.298340][ T5696] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 792.298466][ T5696] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 792.298548][ T5696] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.298620][ T5696] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 792.307987][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.308313][ T5696] usb 1-1: Product: syz [ 792.308376][ T5696] usb 1-1: Manufacturer: syz [ 792.308431][ T5696] usb 1-1: SerialNumber: syz [ 792.336294][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 792.353559][ T5696] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input106 [ 792.415212][T16379] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 792.427683][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 792.501540][T16243] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 792.573379][ T5696] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 792.573419][ T5696] (id 0x00) [ 792.627242][T16379] FAULT_INJECTION: forcing a failure. [ 792.627242][T16379] name failslab, interval 1, probability 0, space 0, times 0 [ 792.640299][T16243] usb 4-1: device descriptor read/64, error -71 [ 792.648449][T16379] CPU: 1 UID: 0 PID: 16379 Comm: syz.2.2730 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.648483][T16379] Tainted: [L]=SOFTLOCKUP [ 792.648490][T16379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.648502][T16379] Call Trace: [ 792.648514][T16379] [ 792.648523][T16379] dump_stack_lvl+0xe8/0x150 [ 792.648561][T16379] should_fail_ex+0x410/0x560 [ 792.648593][T16379] should_failslab+0xa8/0x100 [ 792.648617][T16379] ? do_getname+0x2e/0x250 [ 792.648638][T16379] kmem_cache_alloc_noprof+0xa1/0x600 [ 792.648667][T16379] ? do_getname+0x2e/0x250 [ 792.648693][T16379] do_getname+0x2e/0x250 [ 792.648713][T16379] ? getname_flags+0x11/0x20 [ 792.648734][T16379] do_sys_openat2+0xcc/0x200 [ 792.648764][T16379] ? __pfx_do_sys_openat2+0x10/0x10 [ 792.648785][T16379] ? ksys_write+0x242/0x270 [ 792.648812][T16379] ? __pfx_ksys_write+0x10/0x10 [ 792.648839][T16379] __x64_sys_openat+0x138/0x170 [ 792.648865][T16379] do_syscall_64+0x166/0x520 [ 792.648893][T16379] ? trace_irq_disable+0x3b/0x140 [ 792.648912][T16379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.648932][T16379] ? clear_bhb_loop+0x70/0xc0 [ 792.648954][T16379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.648972][T16379] RIP: 0033:0x7f26c655e98e [ 792.648991][T16379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 792.649007][T16379] RSP: 002b:00007f26c7532b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 792.649028][T16379] RAX: ffffffffffffffda RBX: 00007f26c75336c0 RCX: 00007f26c655e98e [ 792.649041][T16379] RDX: 0000000000000002 RSI: 00007f26c7532c00 RDI: ffffffffffffff9c [ 792.649053][T16379] RBP: 00007f26c7533090 R08: 0000000000000000 R09: 0000000000000000 [ 792.649065][T16379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.649075][T16379] R13: 00007f26c6826038 R14: 00007f26c6825fa0 R15: 00007f26c694fa48 [ 792.649101][T16379] [ 792.684218][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 792.783213][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 792.921304][ T5696] rc_core: IR keymap rc-imon-pad not found [ 792.921348][ T5696] Registered IR keymap rc-empty [ 792.921450][ T5696] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 792.921473][ T5696] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 792.945008][T16243] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 792.974547][ T5696] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 792.989070][ T5696] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input107 [ 793.007059][ T5696] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:67> initialized [ 793.091586][T16243] usb 4-1: device descriptor read/64, error -71 [ 793.134243][T16239] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 793.151001][ T9] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 793.192509][ T9] usb 3-1: device reset changed ep0 maxpacket size! [ 793.219128][T16243] usb usb4-port1: attempt power cycle [ 793.226166][ T9] usb 3-1: USB disconnect, device number 24 [ 793.245410][ T9] usblp0: removed [ 793.303944][T16239] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 793.314511][T16239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 793.325195][T16239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 793.335120][T16239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 793.345724][T16239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 793.355794][T16239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 793.365926][T16239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 793.378652][T16239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 793.378697][T16239] usb 2-1: Product: syz [ 793.378733][T16239] usb 2-1: Manufacturer: syz [ 793.404048][T16412] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 793.404365][T16412] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 793.408033][T16412] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 793.408333][T16412] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 793.408663][T16412] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 793.408955][T16412] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 793.451715][T16239] usb 2-1: USB2VGA dongle found at address 79 [ 793.460941][T16239] usb 2-1: Allocated 8 output buffers [ 793.475060][T16239] usb 2-1: Failed to early initialize device [ 793.532096][T16420] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2741'. [ 793.551847][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 793.571838][T16243] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 793.592379][T16243] usb 4-1: device descriptor read/8, error -71 [ 793.667311][T16424] SET target dimension over the limit! [ 793.701704][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 793.703541][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 793.706539][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.706640][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 793.717123][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.717201][ T9] usb 3-1: Product: syz [ 793.717257][ T9] usb 3-1: Manufacturer: syz [ 793.717308][ T9] usb 3-1: SerialNumber: syz [ 793.776801][ T9] usb 3-1: config 0 descriptor?? [ 793.787560][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 793.787619][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 793.814322][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 793.827580][T16425] usb 2-1: Failed to initialize device [ 793.839303][T10303] usb 3-1: Failed to submit usb control message: -71 [ 793.839387][T10303] usb 3-1: unable to send the bmi data to the device: -71 [ 793.839408][T10303] usb 3-1: unable to get target info from device [ 793.839479][T10303] usb 3-1: could not get target info (-71) [ 793.839546][T10303] usb 3-1: could not probe fw (-71) [ 793.883832][T16243] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 793.911895][T16243] usb 4-1: device descriptor read/8, error -71 [ 793.985160][T16379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.989055][T16379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.013195][ T9] usb 2-1: USB disconnect, device number 79 [ 794.021794][T16243] usb usb4-port1: unable to enumerate USB device [ 794.178471][T16437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.179718][T16437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.273100][ T10] usb 3-1: USB disconnect, device number 25 [ 794.816376][T16243] usb 1-1: USB disconnect, device number 67 [ 795.356886][T16463] SET target dimension over the limit! [ 795.461452][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 795.621918][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 795.634878][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.634929][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 795.634975][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.670249][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.670293][ T10] usb 2-1: Product: syz [ 795.670311][ T10] usb 2-1: Manufacturer: syz [ 795.670344][ T10] usb 2-1: SerialNumber: syz [ 795.681093][T16243] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 795.692508][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 795.692538][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 795.781327][T16239] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 795.843643][T16243] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 795.861613][T16243] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.861667][T16243] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 795.861711][T16243] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.899181][T16243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.909190][T16243] usb 4-1: Product: syz [ 795.913614][T16243] usb 4-1: Manufacturer: syz [ 795.913650][T16243] usb 4-1: SerialNumber: syz [ 795.935396][T16243] hub 4-1:1.0: bad descriptor, ignoring hub [ 795.951812][T16243] hub 4-1:1.0: probe with driver hub failed with error -5 [ 795.968825][T16239] usb 1-1: unable to get BOS descriptor or descriptor too short [ 795.976957][T16239] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 795.989586][T16239] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.000421][T16239] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 796.009641][T16239] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 796.020707][T16239] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8288, setting to 1024 [ 796.040717][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 796.062491][T16239] usb 1-1: string descriptor 0 read error: -22 [ 796.062676][T16239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.119915][T16239] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 796.170325][T16465] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 796.184609][T16243] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 796.297442][T16239] usb 1-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 796.364307][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 796.388858][T16239] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 796.514232][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 796.524093][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 796.524145][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 796.524174][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.534505][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.534582][ T9] usb 5-1: Product: syz [ 796.534625][ T9] usb 5-1: Manufacturer: syz [ 796.534674][ T9] usb 5-1: SerialNumber: syz [ 796.559615][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 796.559639][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 796.631416][T16457] usb 2-1: reset high-speed USB device number 80 using dummy_hcd [ 796.635500][T16457] usb 2-1: device reset changed ep0 maxpacket size! [ 796.642277][ T10] usb 2-1: USB disconnect, device number 80 [ 796.658518][ T10] usblp0: removed [ 796.741375][T16239] usb 4-1: reset high-speed USB device number 71 using dummy_hcd [ 796.756052][T16239] usb 4-1: device reset changed ep0 maxpacket size! [ 796.757899][T16479] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 796.768701][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 796.789283][T16239] usb 4-1: USB disconnect, device number 71 [ 796.800129][T16239] usblp1: removed [ 796.803230][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 796.951446][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 796.958231][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 796.968420][T16479] FAULT_INJECTION: forcing a failure. [ 796.968420][T16479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.968485][T16479] CPU: 1 UID: 0 PID: 16479 Comm: syz.4.2759 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.968545][T16479] Tainted: [L]=SOFTLOCKUP [ 796.968569][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.968595][T16479] Call Trace: [ 796.968623][T16479] [ 796.968653][T16479] dump_stack_lvl+0xe8/0x150 [ 796.968764][T16479] should_fail_ex+0x410/0x560 [ 796.968853][T16479] strncpy_from_user+0x36/0x2c0 [ 796.968944][T16479] do_getname+0x77/0x250 [ 796.969022][T16479] do_sys_openat2+0xcc/0x200 [ 796.969111][T16479] ? __pfx_do_sys_openat2+0x10/0x10 [ 796.969175][T16479] ? ksys_write+0x242/0x270 [ 796.969260][T16479] ? __pfx_ksys_write+0x10/0x10 [ 796.969353][T16479] __x64_sys_openat+0x138/0x170 [ 796.969434][T16479] do_syscall_64+0x166/0x520 [ 796.969515][T16479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.969576][T16479] ? clear_bhb_loop+0x70/0xc0 [ 796.969648][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.969709][T16479] RIP: 0033:0x7f872e35e98e [ 796.969771][T16479] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 796.969832][T16479] RSP: 002b:00007f872f1d7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 796.969900][T16479] RAX: ffffffffffffffda RBX: 00007f872f1d86c0 RCX: 00007f872e35e98e [ 796.969943][T16479] RDX: 0000000000000002 RSI: 00007f872f1d7c00 RDI: ffffffffffffff9c [ 796.969986][T16479] RBP: 00007f872f1d8090 R08: 0000000000000000 R09: 0000000000000000 [ 796.970013][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.970060][T16479] R13: 00007f872e626038 R14: 00007f872e625fa0 R15: 00007f872e74fa48 [ 796.970169][T16479] [ 796.971579][T16243] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 797.054262][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.054308][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 797.154828][T16243] usb 3-1: device descriptor read/64, error -71 [ 797.155104][T16239] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 797.179697][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.179720][ T10] usb 2-1: Product: syz [ 797.179731][ T10] usb 2-1: Manufacturer: syz [ 797.179742][ T10] usb 2-1: SerialNumber: syz [ 797.224720][ T10] usb 2-1: config 0 descriptor?? [ 797.232238][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 797.238393][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 797.250729][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 797.276367][T15738] usb 2-1: Failed to submit usb control message: -71 [ 797.276461][T15738] usb 2-1: unable to send the bmi data to the device: -71 [ 797.276481][T15738] usb 2-1: unable to get target info from device [ 797.276555][T15738] usb 2-1: could not get target info (-71) [ 797.276613][T15738] usb 2-1: could not probe fw (-71) [ 797.313256][T16239] usb 4-1: Using ep0 maxpacket: 16 [ 797.315414][T16239] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 797.317879][ T5696] usb 5-1: reset high-speed USB device number 73 using dummy_hcd [ 797.321058][ T5696] usb 5-1: device reset changed ep0 maxpacket size! [ 797.322428][T16239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.322529][T16239] usb 4-1: config 0 interface 0 has no altsetting 0 [ 797.363182][T16239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.363244][T16239] usb 4-1: Product: syz [ 797.363279][T16239] usb 4-1: Manufacturer: syz [ 797.363300][T16239] usb 4-1: SerialNumber: syz [ 797.367137][ T5696] usb 5-1: USB disconnect, device number 73 [ 797.395560][T16239] usb 4-1: config 0 descriptor?? [ 797.401174][ T5696] usblp0: removed [ 797.404444][T16243] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 797.431079][T16239] hub 4-1:0.0: bad descriptor, ignoring hub [ 797.431146][T16239] hub 4-1:0.0: probe with driver hub failed with error -5 [ 797.458250][T16239] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 797.475654][T16457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.484794][T16457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.509146][T15738] usb 4-1: Failed to submit usb control message: -71 [ 797.509225][T15738] usb 4-1: could not get target info (-71) [ 797.509268][T15738] usb 4-1: could not probe fw (-71) [ 797.551747][T16243] usb 3-1: device descriptor read/64, error -71 [ 797.603035][ T10] usb 2-1: USB disconnect, device number 81 [ 797.632526][T16465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.639830][T16465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.662409][T16243] usb usb3-port1: attempt power cycle [ 797.751363][ T5696] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 797.771623][ T10] usb 4-1: USB disconnect, device number 72 [ 797.911269][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 797.913610][ T5696] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 797.918521][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.918608][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 797.927106][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.927195][ T5696] usb 5-1: Product: syz [ 797.927240][ T5696] usb 5-1: Manufacturer: syz [ 797.927285][ T5696] usb 5-1: SerialNumber: syz [ 797.943153][ T5696] usb 5-1: config 0 descriptor?? [ 797.967632][ T5696] hub 5-1:0.0: bad descriptor, ignoring hub [ 797.967705][ T5696] hub 5-1:0.0: probe with driver hub failed with error -5 [ 797.995804][T10784] usb 5-1: could not get target info (-71) [ 798.002724][T10784] usb 5-1: could not probe fw (-71) [ 798.012083][T16243] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 798.032401][T16243] usb 3-1: device descriptor read/8, error -71 [ 798.074990][T16509] SET target dimension over the limit! [ 798.128514][ T31] audit: type=1326 audit(1787972148.771:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16510 comm="syz.1.2766" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8f9f9e159 code=0x0 [ 798.157610][T16479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.160492][T16479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.267423][T16515] netlink: 'syz.3.2767': attribute type 6 has an invalid length. [ 798.291702][T16243] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 798.313183][T16243] usb 3-1: device descriptor read/8, error -71 [ 798.361485][ T10] usb 5-1: USB disconnect, device number 74 [ 798.426903][T16243] usb usb3-port1: unable to enumerate USB device [ 798.473857][T16243] usb 1-1: USB disconnect, device number 68 [ 798.493266][ T30] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 798.652142][ T30] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 798.655531][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 798.655615][ T30] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 798.655721][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.666133][ T30] usb 2-1: config 0 descriptor?? [ 798.901824][T16243] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 799.072142][T16243] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 799.077522][T16243] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 799.088748][T16243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.088899][T16243] usb 1-1: Product: syz [ 799.088946][T16243] usb 1-1: Manufacturer: syz [ 799.088995][T16243] usb 1-1: SerialNumber: syz [ 799.104591][T16243] usb 1-1: config 0 descriptor?? [ 799.124078][T16243] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 799.124283][T16243] usb 1-1: setting power ON [ 799.124429][T16243] dvb-usb: bulk message failed: -22 (2/0) [ 799.153696][T16243] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 799.184338][T16243] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 799.193584][T16243] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 799.317644][ T10] usb 1-1: USB disconnect, device number 69 [ 799.611456][T16239] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 799.704317][ T30] ath6kl: Failed to submit usb control message: -110 [ 799.704471][ T30] ath6kl: unable to send the bmi data to the device: -110 [ 799.704534][ T30] ath6kl: Unable to send get target info: -110 [ 799.711001][ T30] ath6kl: Failed to init ath6kl core: -110 [ 799.711739][ T30] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 799.815937][T16239] usb 4-1: Using ep0 maxpacket: 32 [ 799.898810][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2771'. [ 799.992818][T16539] coredump: 1923(syz.0.2775): Core dump to core aborted: cannot preserve file permissions [ 800.061315][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 800.186084][T16541] SET target dimension over the limit! [ 800.214767][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 800.224475][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 800.235988][ T10] usb 5-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 800.236056][ T10] usb 5-1: config 66 interface 0 has no altsetting 0 [ 800.258862][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.258920][ T10] usb 5-1: Product: syz [ 800.258956][ T10] usb 5-1: Manufacturer: syz [ 800.258977][ T10] usb 5-1: SerialNumber: syz [ 800.287250][T16529] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 800.412390][T16549] input: syz1 as /devices/virtual/input/input108 [ 800.465387][T16550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.579196][ T10] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 800.618489][ T10] usb 5-1: USB disconnect, device number 75 [ 800.951132][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 801.234121][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 801.272135][ T10] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 801.357963][T16243] usb 2-1: USB disconnect, device number 82 [ 801.940120][T16544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.051295][ T9] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 802.205050][ T9] usb 2-1: device descriptor read/all, error -61 [ 802.341503][ T9] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 802.426608][T16239] usb 4-1: unable to get BOS descriptor or descriptor too short [ 802.426679][T16239] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 802.426895][T16239] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 802.428567][T16239] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 802.428731][T16239] usb 4-1: can't read configurations, error -71 [ 802.472732][ T9] usb 2-1: device descriptor read/64, error -71 [ 802.583545][ T9] usb usb2-port1: attempt power cycle [ 802.931373][ T9] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 802.952282][ T9] usb 2-1: device descriptor read/8, error -71 [ 803.191343][ T9] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 803.212048][ T9] usb 2-1: device descriptor read/8, error -71 [ 803.248387][T16596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.262684][T16594] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 803.316444][T16596] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 803.324168][ T9] usb usb2-port1: unable to enumerate USB device [ 803.340815][T16596] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 803.370284][T16596] iommufd_mock iommufd_mock4: Adding to iommu group 4 [ 803.391817][T16596] iommufd_mock iommufd_mock5: Adding to iommu group 5 [ 803.439471][T16596] iommufd_mock iommufd_mock6: Adding to iommu group 6 [ 803.466466][T16596] iommufd_mock iommufd_mock7: Adding to iommu group 7 [ 803.494454][T16596] iommufd_mock iommufd_mock8: Adding to iommu group 8 [ 803.533564][T16596] iommufd_mock iommufd_mock9: Adding to iommu group 9 [ 803.557121][T16596] iommufd_mock iommufd_mock10: Adding to iommu group 10 [ 803.575962][T16596] iommufd_mock iommufd_mock11: Adding to iommu group 11 [ 803.589556][T16596] iommufd_mock iommufd_mock12: Adding to iommu group 12 [ 803.603258][T16596] iommufd_mock iommufd_mock13: Adding to iommu group 13 [ 803.629018][T16596] iommufd_mock iommufd_mock14: Adding to iommu group 14 [ 803.639577][T16596] iommufd_mock iommufd_mock15: Adding to iommu group 15 [ 803.650819][T16596] iommufd_mock iommufd_mock16: Adding to iommu group 16 [ 803.675638][T16596] iommufd_mock iommufd_mock17: Adding to iommu group 17 [ 803.717463][T16596] iommufd_mock iommufd_mock18: Adding to iommu group 18 [ 803.735148][T16596] iommufd_mock iommufd_mock19: Adding to iommu group 19 [ 803.784025][T16596] iommufd_mock iommufd_mock20: Adding to iommu group 20 [ 803.803435][T16596] iommufd_mock iommufd_mock21: Adding to iommu group 21 [ 803.833776][T16596] iommufd_mock iommufd_mock22: Adding to iommu group 22 [ 803.872286][T16596] iommufd_mock iommufd_mock23: Adding to iommu group 23 [ 803.889191][T16596] iommufd_mock iommufd_mock24: Adding to iommu group 24 [ 803.909591][T16596] iommufd_mock iommufd_mock25: Adding to iommu group 25 [ 803.960071][T16596] iommufd_mock iommufd_mock26: Adding to iommu group 26 [ 803.981129][T16596] iommufd_mock iommufd_mock27: Adding to iommu group 27 [ 804.009220][T16596] iommufd_mock iommufd_mock28: Adding to iommu group 28 [ 804.049101][T16596] iommufd_mock iommufd_mock29: Adding to iommu group 29 [ 804.552912][T10784] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.553001][T10784] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.553071][T10784] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.553129][T10784] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.553168][T10784] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.553198][T10784] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.117467][T16624] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 805.247935][T16629] netlink: 'syz.1.2796': attribute type 5 has an invalid length. [ 805.256265][T16629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2796'. [ 805.622552][T16637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2798'. [ 805.903121][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 806.061892][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 806.072946][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.073038][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 806.073068][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 806.115067][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.124163][ T9] usb 4-1: Product: syz [ 806.124181][ T9] usb 4-1: Manufacturer: syz [ 806.124193][ T9] usb 4-1: SerialNumber: syz [ 806.160088][ T9] sisusb 4-1:1.0: Invalid USB2VGA device [ 806.171406][ T9] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 806.356402][ T9] usb 4-1: USB disconnect, device number 75 [ 807.117327][T16239] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 807.274682][T16239] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 807.277935][T16239] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 1024 [ 807.278033][T16239] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 807.278105][T16239] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.330187][T16239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.330239][T16239] usb 1-1: Product: syz [ 807.330256][T16239] usb 1-1: Manufacturer: syz [ 807.330296][T16239] usb 1-1: SerialNumber: syz [ 807.456613][T16665] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 807.461062][T16239] hub 1-1:1.0: bad descriptor, ignoring hub [ 807.461140][T16239] hub 1-1:1.0: probe with driver hub failed with error -5 [ 807.550609][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2812'. [ 807.564463][T16678] netlink: 'syz.4.2812': attribute type 6 has an invalid length. [ 807.572741][T16678] @: entered promiscuous mode [ 807.573269][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2812'. [ 807.573301][T16678] netlink: 'syz.4.2812': attribute type 6 has an invalid length. [ 807.651346][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 807.693748][T16681] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 807.705550][T16239] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 807.729784][T16681] bond12 (unregistering): Released all slaves [ 807.811458][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 807.817468][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 807.827443][ T9] usb 2-1: config 0 has no interfaces? [ 807.827483][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.848628][ T9] usb 2-1: config 0 descriptor?? [ 808.087171][ T10] usb 2-1: USB disconnect, device number 87 [ 808.329512][T16665] usb 1-1: reset high-speed USB device number 70 using dummy_hcd [ 808.461737][T16665] usb 1-1: device descriptor read/64, error -71 [ 808.481545][ T5620] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 808.547851][T16676] SET target dimension over the limit! [ 808.641793][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 808.648181][ T5620] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 808.663820][ T5620] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 808.671990][ T5620] usb 3-1: can't read configurations, error -61 [ 808.697459][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 808.711490][T16665] usb 1-1: reset high-speed USB device number 70 using dummy_hcd [ 808.801761][ T5620] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 808.823061][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.823140][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.843156][T16665] usb 1-1: device descriptor read/64, error -71 [ 808.962872][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 808.968705][ T5620] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 808.980132][ T5620] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 808.980211][ T5620] usb 3-1: can't read configurations, error -61 [ 808.988236][ T5620] usb usb3-port1: attempt power cycle [ 809.132163][T16665] usb 1-1: reset high-speed USB device number 70 using dummy_hcd [ 809.181382][T16665] usb 1-1: device descriptor read/8, error -71 [ 809.341396][ T5620] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 809.374888][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 809.380614][ T5620] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 809.392047][ T5620] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 809.392102][ T5620] usb 3-1: can't read configurations, error -61 [ 809.431584][T16665] usb 1-1: reset high-speed USB device number 70 using dummy_hcd [ 809.452093][T16665] usb 1-1: device descriptor read/8, error -71 [ 809.521312][ T5620] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 809.542479][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 809.548672][ T5620] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 809.560467][ T5620] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 809.560537][ T5620] usb 3-1: can't read configurations, error -61 [ 809.569520][ T9] usb 1-1: USB disconnect, device number 70 [ 809.583897][ T5620] usb usb3-port1: unable to enumerate USB device [ 809.591111][ T9] usblp0: removed [ 809.753990][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 809.871309][T16243] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 809.872221][T16239] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 809.891520][ T9] usb 1-1: device descriptor read/64, error -71 [ 810.020437][T16705] vlan1: left promiscuous mode [ 810.025588][T16705] vlan1: entered allmulticast mode [ 810.025609][T16705] veth0_vlan: entered allmulticast mode [ 810.052733][T16243] usb 5-1: Using ep0 maxpacket: 16 [ 810.056470][T16243] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 810.068272][T16243] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.068361][T16243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.068446][T16243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.068519][T16243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 810.068653][T16243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.074810][T16239] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 810.074939][T16239] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 810.119417][T16239] usb 2-1: config index 0 descriptor too short (expected 63633, got 72) [ 810.133101][T16239] usb 2-1: config index 1 descriptor too short (expected 63633, got 72) [ 810.143695][T16239] usb 2-1: config index 2 descriptor too short (expected 63633, got 72) [ 810.168605][T16243] usb 5-1: config 0 descriptor?? [ 810.179010][T16239] usb 2-1: config index 3 descriptor too short (expected 63633, got 72) [ 810.189801][T16239] usb 2-1: config index 4 descriptor too short (expected 63633, got 72) [ 810.207406][T16239] usb 2-1: config index 5 descriptor too short (expected 63633, got 72) [ 810.219223][T16239] usb 2-1: config index 6 descriptor too short (expected 63633, got 72) [ 810.231074][T16239] usb 2-1: config index 7 descriptor too short (expected 63633, got 72) [ 810.249935][T16239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.250025][T16239] usb 2-1: Product: syz [ 810.250043][T16239] usb 2-1: Manufacturer: syz [ 810.250059][T16239] usb 2-1: SerialNumber: syz [ 810.352667][T16239] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 810.572516][T16698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.584286][T16698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.499128][ T5696] usb 2-1: USB disconnect, device number 88 [ 811.512037][T16239] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 811.512191][T16239] ath9k_htc: Failed to initialize the device [ 811.530543][ T5696] usb 2-1: ath9k_htc: USB layer deinitialized [ 811.736136][T16243] nintendo 0003:057E:2019.0031: unknown main item tag 0x0 [ 811.736204][T16243] nintendo 0003:057E:2019.0031: unknown main item tag 0x3 [ 811.736273][T16243] nintendo 0003:057E:2019.0031: unknown main item tag 0x3 [ 811.739499][T16243] nintendo 0003:057E:2019.0031: item fetching failed at offset 4/5 [ 811.769701][T16243] nintendo 0003:057E:2019.0031: HID parse failed [ 811.822736][T16243] nintendo 0003:057E:2019.0031: probe - fail = -22 [ 811.842958][T16243] nintendo 0003:057E:2019.0031: probe with driver nintendo failed with error -22 [ 811.856616][T16243] usb 5-1: USB disconnect, device number 76 [ 812.608465][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2821'. [ 812.903272][T16729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 812.969951][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 813.026588][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 813.048602][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 813.074021][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 813.084773][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 813.941438][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 814.431445][ T30] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 814.571306][ T30] usb 1-1: device descriptor read/64, error -71 [ 814.773568][T16733] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.774530][T16733] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.789845][T16733] bridge_slave_0: entered allmulticast mode [ 814.800263][T16733] bridge_slave_0: entered promiscuous mode [ 814.809941][T16733] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.811068][T16733] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.831889][ T30] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 814.843968][T16733] bridge_slave_1: entered allmulticast mode [ 814.858432][T16733] bridge_slave_1: entered promiscuous mode [ 814.912676][T16733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.944848][T16733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.971627][ T30] usb 1-1: device descriptor read/64, error -71 [ 815.047928][T16733] team0: Port device team_slave_0 added [ 815.059015][T16733] team0: Port device team_slave_1 added [ 815.091681][ T30] usb usb1-port1: attempt power cycle [ 815.110893][T16733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.110946][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.110994][T16733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.121964][T16733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.122015][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.122093][T16733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.221373][ T5628] Bluetooth: hci5: command tx timeout [ 815.264048][T16733] hsr_slave_0: entered promiscuous mode [ 815.267555][T16733] hsr_slave_1: entered promiscuous mode [ 815.269823][T16733] debugfs: 'hsr0' already exists in 'hsr' [ 815.269918][T16733] Cannot create hsr debugfs directory [ 815.443352][ T30] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 815.462076][ T30] usb 1-1: device descriptor read/8, error -71 [ 815.732588][ T30] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 815.752895][ T30] usb 1-1: device descriptor read/8, error -71 [ 815.837242][T16733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.848321][T16733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.863424][ T30] usb usb1-port1: unable to enumerate USB device [ 815.918113][T16770] kvm [16761]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2 [ 816.116982][T16733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.130047][T16733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.150665][T16774] FAULT_INJECTION: forcing a failure. [ 816.150665][T16774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.150727][T16774] CPU: 1 UID: 0 PID: 16774 Comm: syz.3.2833 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.150805][T16774] Tainted: [L]=SOFTLOCKUP [ 816.150838][T16774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.150898][T16774] Call Trace: [ 816.150947][T16774] [ 816.150978][T16774] dump_stack_lvl+0xe8/0x150 [ 816.151087][T16774] should_fail_ex+0x410/0x560 [ 816.151192][T16774] _copy_from_user+0x2d/0xb0 [ 816.151254][T16774] ___sys_recvmsg+0x173/0x5a0 [ 816.151355][T16774] ? __pfx____sys_recvmsg+0x10/0x10 [ 816.151420][T16774] ? lock_acquire+0x115/0x350 [ 816.151564][T16774] do_recvmmsg+0x31a/0x7f0 [ 816.151644][T16774] ? __pfx_do_recvmmsg+0x10/0x10 [ 816.151728][T16774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 816.151794][T16774] ? __fget_files+0x3a2/0x420 [ 816.151890][T16774] __x64_sys_recvmmsg+0x198/0x250 [ 816.151959][T16774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 816.152051][T16774] do_syscall_64+0x166/0x520 [ 816.152116][T16774] ? trace_irq_disable+0x3b/0x140 [ 816.152167][T16774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.152227][T16774] ? clear_bhb_loop+0x70/0xc0 [ 816.152333][T16774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.152394][T16774] RIP: 0033:0x7f966159e159 [ 816.152447][T16774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.152497][T16774] RSP: 002b:00007f96623fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 816.152557][T16774] RAX: ffffffffffffffda RBX: 00007f9661825fa0 RCX: 00007f966159e159 [ 816.152599][T16774] RDX: 0000000000000256 RSI: 0000200000000d00 RDI: 0000000000000003 [ 816.152637][T16774] RBP: 00007f96623fb090 R08: 0000000000000000 R09: 0000000000000000 [ 816.152676][T16774] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000002 [ 816.152714][T16774] R13: 00007f9661826038 R14: 00007f9661825fa0 R15: 00007f966194fa48 [ 816.152801][T16774] [ 816.547474][T16733] .`: (slave netdevsim1): Releasing backup interface [ 816.575218][T16733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.575647][T16733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.773889][T16733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.773960][T16733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.939166][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 817.091499][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 817.097500][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 817.112436][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 817.124671][ T9] usb 4-1: config 0 has no interface number 0 [ 817.137540][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.146348][ T9] usb 4-1: Product: syz [ 817.146395][ T9] usb 4-1: Manufacturer: syz [ 817.146416][ T9] usb 4-1: SerialNumber: syz [ 817.166170][ T9] usb 4-1: config 0 descriptor?? [ 817.188338][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 817.301491][ T5628] Bluetooth: hci5: command tx timeout [ 817.457303][T16733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 817.537013][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.551954][T16733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 817.578318][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.589296][T16733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 817.646938][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.658194][T16733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 817.716903][T16733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.019293][T16780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.019718][T16780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.086230][T16780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.096327][T16780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.240832][ T9] gspca_spca1528: reg_w err -71 [ 818.263262][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 818.274914][ T9] usb 4-1: USB disconnect, device number 76 [ 818.360791][T16733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.375252][T16810] syzkaller0: entered promiscuous mode [ 818.380906][T16810] syzkaller0: entered allmulticast mode [ 818.445842][T16733] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.484403][T16807] mmap: syz.2.2840 (16807): VmData 38117376 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 818.501779][T15739] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.502037][T15739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.532533][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.532670][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.699800][T16818] input: syz0 as /devices/virtual/input/input110 [ 818.751113][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'. [ 818.953451][T10784] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.954133][T10784] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.977699][T10784] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.411474][ T5628] Bluetooth: hci5: command tx timeout [ 819.505993][T16733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.845223][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2845'. [ 819.891001][T16839] SET target dimension over the limit! [ 821.461449][ T5628] Bluetooth: hci5: command tx timeout [ 821.770034][T16733] veth0_vlan: entered promiscuous mode [ 821.783794][T16854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2850'. [ 821.810883][T16854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2850'. [ 821.828912][T16733] veth1_vlan: entered promiscuous mode [ 821.981595][ T30] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 822.096666][T16733] veth0_macvtap: entered promiscuous mode [ 822.112707][ T30] usb 2-1: device descriptor read/64, error -71 [ 822.127026][T16733] veth1_macvtap: entered promiscuous mode [ 822.194699][T16733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.239060][T16733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.292669][T15738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.292788][T15738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.292919][T15738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.293031][T15738] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.351392][ T30] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 822.514704][ T30] usb 2-1: device descriptor read/64, error -71 [ 822.627675][ T30] usb usb2-port1: attempt power cycle [ 822.745093][T15741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.745137][T15741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.890243][T15738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.898799][T15738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.011369][ T30] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 823.033350][ T30] usb 2-1: device descriptor read/8, error -71 [ 823.282238][ T30] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 823.303080][ T30] usb 2-1: device descriptor read/8, error -71 [ 823.311611][T16887] SET target dimension over the limit! [ 823.322462][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2854'. [ 823.346269][T16886] loop5: detected capacity change from 0 to 7 [ 823.372708][T16886] Dev loop5: unable to read RDB block 7 [ 823.372799][T16886] loop5: AHDI p1 [ 823.372894][T16886] loop5: partition table partially beyond EOD, truncated [ 823.421728][ T30] usb usb2-port1: unable to enumerate USB device [ 823.473361][ T31] audit: type=1326 audit(1787972174.111:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16884 comm="syz.4.2857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f918299e159 code=0x0 [ 823.527890][T16880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2854'. [ 823.540938][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 824.271417][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 824.321333][ T5620] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 824.422639][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 824.428713][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 824.443527][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.454804][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.463048][ T5620] usb 1-1: device descriptor read/64, error -71 [ 824.476207][ T9] usb 3-1: config 0 descriptor?? [ 824.690051][T16916] FAULT_INJECTION: forcing a failure. [ 824.690051][T16916] name failslab, interval 1, probability 0, space 0, times 0 [ 824.690113][T16916] CPU: 1 UID: 0 PID: 16916 Comm: syz.4.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.690144][T16916] Tainted: [L]=SOFTLOCKUP [ 824.690152][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.690214][T16916] Call Trace: [ 824.690247][T16916] [ 824.690285][T16916] dump_stack_lvl+0xe8/0x150 [ 824.690472][T16916] should_fail_ex+0x410/0x560 [ 824.690608][T16916] should_failslab+0xa8/0x100 [ 824.690685][T16916] ? skb_clone+0x212/0x3a0 [ 824.690758][T16916] kmem_cache_alloc_noprof+0xa1/0x600 [ 824.690854][T16916] ? skb_clone+0x212/0x3a0 [ 824.690930][T16916] skb_clone+0x212/0x3a0 [ 824.691008][T16916] __netlink_deliver_tap+0x413/0x860 [ 824.691115][T16916] ? netlink_deliver_tap+0x2e/0x1b0 [ 824.691208][T16916] netlink_deliver_tap+0x19c/0x1b0 [ 824.691278][T16916] netlink_unicast+0x781/0x940 [ 824.691369][T16916] netlink_sendmsg+0x813/0xb40 [ 824.691495][T16916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.691588][T16916] ? apparmor_socket_sendmsg+0x98/0x360 [ 824.691722][T16916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.691803][T16916] sock_sendmsg_nosec+0x13a/0x180 [ 824.691892][T16916] ____sys_sendmsg+0x54e/0x850 [ 824.691962][T16916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.692047][T16916] ? import_iovec+0x73/0xa0 [ 824.692147][T16916] ___sys_sendmsg+0x2a5/0x360 [ 824.692198][T16916] ? __lock_acquire+0x6df/0x2e50 [ 824.692268][T16916] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.692412][T16916] ? __fget_files+0x2a/0x420 [ 824.692500][T16916] ? __fget_files+0x3a2/0x420 [ 824.692601][T16916] __x64_sys_sendmsg+0x1b1/0x290 [ 824.692665][T16916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 824.692776][T16916] do_syscall_64+0x166/0x520 [ 824.692855][T16916] ? trace_irq_disable+0x3b/0x140 [ 824.692908][T16916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.692968][T16916] ? clear_bhb_loop+0x70/0xc0 [ 824.693043][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.693118][T16916] RIP: 0033:0x7f918299e159 [ 824.693188][T16916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.693248][T16916] RSP: 002b:00007f9183838028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.693317][T16916] RAX: ffffffffffffffda RBX: 00007f9182c26270 RCX: 00007f918299e159 [ 824.693360][T16916] RDX: 0000000004000000 RSI: 0000200000000680 RDI: 0000000000000008 [ 824.693399][T16916] RBP: 00007f9183838090 R08: 0000000000000000 R09: 0000000000000000 [ 824.693438][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.693471][T16916] R13: 00007f9182c26308 R14: 00007f9182c26270 R15: 00007f9182d4fa48 [ 824.693574][T16916] [ 824.718585][T16916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2863'. [ 824.729972][ T5620] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 824.895021][ T5620] usb 1-1: device descriptor read/64, error -71 [ 824.956456][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 825.006172][ T5620] usb usb1-port1: attempt power cycle [ 825.373354][ T5620] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 825.413876][ T5620] usb 1-1: device descriptor read/8, error -71 [ 825.528824][ T9] usb 3-1: USB disconnect, device number 34 [ 825.662636][ T5620] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 825.704945][ T5620] usb 1-1: device descriptor read/8, error -71 [ 825.823214][ T5620] usb usb1-port1: unable to enumerate USB device [ 825.844003][T16938] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 825.856054][T16938] bond3 (unregistering): Released all slaves [ 825.986865][T16937] SET target dimension over the limit! [ 826.341764][ T30] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 826.471324][ T30] usb 2-1: device descriptor read/64, error -71 [ 826.619269][T16949] trusted_key: encrypted_key: insufficient parameters specified [ 826.718233][ T30] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 826.837604][T16953] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 826.851497][ T30] usb 2-1: device descriptor read/64, error -71 [ 826.881856][ T9] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 826.966575][ T30] usb usb2-port1: attempt power cycle [ 827.068944][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 827.070953][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 827.091292][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.092976][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.107249][ T5696] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 827.138871][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 827.265605][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 827.266455][ T5696] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 827.270457][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 827.270589][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.293879][ T5696] usb 5-1: config 0 descriptor?? [ 827.300272][T16953] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 827.323476][ T30] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 827.343117][ T30] usb 2-1: device descriptor read/8, error -71 [ 827.581866][ T30] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 827.608506][ T30] usb 2-1: device descriptor read/8, error -71 [ 827.712418][ T30] usb usb2-port1: unable to enumerate USB device [ 827.734316][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.734400][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.734451][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.734485][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.734518][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.734550][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.735955][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.736031][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.736108][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.736177][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unknown main item tag 0x0 [ 827.755032][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: unexpected long global item [ 827.766431][ T5696] aquacomputer_d5next 0003:0C70:F00D.0032: probe with driver aquacomputer_d5next failed with error -22 [ 827.848855][ T9] gspca_vc032x: reg_w err -71 [ 827.848951][ T9] vc032x 4-1:1.0: probe with driver vc032x failed with error -71 [ 827.871724][ T9] usb 4-1: USB disconnect, device number 77 [ 827.879778][T16973] SET target dimension over the limit! [ 828.152315][ T30] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 828.164182][T16239] usb 5-1: USB disconnect, device number 77 [ 828.301507][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 828.307509][ T30] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 828.316014][ T30] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.316113][ T30] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.316176][ T30] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 828.316258][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 828.316352][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.332701][ T30] usb 1-1: config 0 descriptor?? [ 828.531274][ T5696] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 828.662582][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 828.681583][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 828.684376][ T5696] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 828.690430][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.709189][ T5696] usb 3-1: config 0 descriptor?? [ 828.728287][ T5696] gspca_main: sunplus-2.14.0 probing 041e:400b [ 828.755681][ T30] hid (null): report_id 0 is invalid [ 828.768684][ T30] hid (null): report_id 915 is invalid [ 828.811404][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 828.819400][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 828.832012][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 828.844207][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 828.858753][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.870190][ T9] usb 4-1: Product: syz [ 828.870242][ T9] usb 4-1: Manufacturer: syz [ 828.870265][ T9] usb 4-1: SerialNumber: syz [ 828.892086][ T9] usb 4-1: config 0 descriptor?? [ 828.904434][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 828.914155][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 828.973292][T16254] usb 1-1: USB disconnect, device number 81 [ 829.107478][T16988] fuse: Bad value for 'fd' [ 829.143696][ T31] audit: type=1400 audit(1787972179.781:2599): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A3A768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F053BB89F0E4A42E195BD2AF8A91A6DD5C9FBCCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=16987 comm="syz.3.2883" [ 829.212518][ T5620] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 829.244273][T16993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.332330][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 829.334016][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 829.338751][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 829.338772][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 829.364761][ T9] usb 4-1: USB disconnect, device number 78 [ 829.370098][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 829.380973][ T9] em28xx: Freeing device [ 829.392180][ T5620] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 829.403622][ T5620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.420500][ T5620] usb 5-1: config 0 descriptor?? [ 829.452823][ T5620] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 829.467292][ T5620] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 829.546807][ T5696] gspca_sunplus: reg_r err -71 [ 829.552095][ T5696] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 829.569731][ T5696] usb 3-1: USB disconnect, device number 35 [ 829.668759][ T9] usb 5-1: USB disconnect, device number 78 [ 829.850994][T16995] netlink: 'syz.1.2886': attribute type 16 has an invalid length. [ 829.851042][T16995] netlink: 'syz.1.2886': attribute type 17 has an invalid length. [ 829.903047][T16995] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 830.271447][T17011] xfrm0: left allmulticast mode [ 830.281781][T17011] vlan1: left promiscuous mode [ 830.306221][T17011] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 830.344126][T17011] bond1: left promiscuous mode [ 830.369893][T17011] @: left promiscuous mode [ 830.384774][T17017] FAULT_INJECTION: forcing a failure. [ 830.384774][T17017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.384849][T17017] CPU: 0 UID: 0 PID: 17017 Comm: syz.1.2893 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.384880][T17017] Tainted: [L]=SOFTLOCKUP [ 830.384889][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.384964][T17017] Call Trace: [ 830.384994][T17017] [ 830.385024][T17017] dump_stack_lvl+0xe8/0x150 [ 830.385159][T17017] should_fail_ex+0x410/0x560 [ 830.385257][T17017] _copy_from_user+0x2d/0xb0 [ 830.385318][T17017] ___sys_recvmsg+0x173/0x5a0 [ 830.385393][T17017] ? __pfx____sys_recvmsg+0x10/0x10 [ 830.385462][T17017] ? lock_acquire+0x115/0x350 [ 830.385594][T17017] do_recvmmsg+0x31a/0x7f0 [ 830.385670][T17017] ? __pfx_do_recvmmsg+0x10/0x10 [ 830.385764][T17017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 830.385848][T17017] ? __fget_files+0x3a2/0x420 [ 830.385976][T17017] __x64_sys_recvmmsg+0x198/0x250 [ 830.386053][T17017] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 830.386128][T17017] do_syscall_64+0x166/0x520 [ 830.386212][T17017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.386292][T17017] ? clear_bhb_loop+0x70/0xc0 [ 830.386379][T17017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.386441][T17017] RIP: 0033:0x7ff8f9f9e159 [ 830.386524][T17017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.386586][T17017] RSP: 002b:00007ff8fad97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 830.386644][T17017] RAX: ffffffffffffffda RBX: 00007ff8fa225fa0 RCX: 00007ff8f9f9e159 [ 830.386687][T17017] RDX: 0000000000000256 RSI: 0000200000000d00 RDI: 0000000000000003 [ 830.386729][T17017] RBP: 00007ff8fad97090 R08: 0000000000000000 R09: 0000000000000000 [ 830.386763][T17017] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000002 [ 830.386808][T17017] R13: 00007ff8fa226038 R14: 00007ff8fa225fa0 R15: 00007ff8fa34fa48 [ 830.386906][T17017] [ 830.438535][T17011] dummy1: left promiscuous mode [ 830.438628][T17011] dummy1: left allmulticast mode [ 830.605197][T17011] ip6gre1: left allmulticast mode [ 830.647663][T17011] vlan2: left promiscuous mode [ 830.647738][T17011] bond0: left promiscuous mode [ 830.647777][T17011] veth0_to_bond: left promiscuous mode [ 830.692799][T15739] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.692870][T15739] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.694068][T10789] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.694151][T10789] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.694246][T10789] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.694327][T10789] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.694414][T10789] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.694489][T10789] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.761823][ T10] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 830.871404][T16254] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 830.903108][ T10] usb 1-1: New USB device found, idVendor=12d1, idProduct=2225, bcdDevice=8e.fa [ 830.906409][ T10] usb 1-1: config 160 has an invalid interface number: 23 but max is 2 [ 830.906536][ T10] usb 1-1: config 160 has an invalid interface number: 156 but max is 2 [ 830.906601][ T10] usb 1-1: config 160 has an invalid interface number: 67 but max is 2 [ 830.906661][ T10] usb 1-1: config 160 has no interface number 0 [ 830.906710][ T10] usb 1-1: config 160 has no interface number 1 [ 830.906761][ T10] usb 1-1: config 160 has no interface number 2 [ 830.906956][ T10] usb 1-1: config 160 interface 23 altsetting 2 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 830.907043][ T10] usb 1-1: config 160 interface 23 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 830.907127][ T10] usb 1-1: config 160 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 830.907191][ T10] usb 1-1: config 160 interface 23 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 830.907288][ T10] usb 1-1: config 160 interface 156 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 830.907352][ T10] usb 1-1: config 160 interface 156 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 830.907435][ T10] usb 1-1: config 160 interface 156 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 830.907510][ T10] usb 1-1: config 160 interface 156 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 830.907600][ T10] usb 1-1: config 160 interface 156 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 830.907683][ T10] usb 1-1: config 160 interface 156 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 830.907762][ T10] usb 1-1: config 160 interface 156 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 830.910111][ T10] usb 1-1: config 160 interface 67 altsetting 129 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 830.910186][ T10] usb 1-1: config 160 interface 67 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 830.910263][ T10] usb 1-1: config 160 interface 67 altsetting 129 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 830.910350][ T10] usb 1-1: config 160 interface 67 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 830.910420][ T10] usb 1-1: config 160 interface 67 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 830.910510][ T10] usb 1-1: config 160 interface 23 has no altsetting 0 [ 830.910565][ T10] usb 1-1: config 160 interface 156 has no altsetting 0 [ 830.910611][ T10] usb 1-1: config 160 interface 67 has no altsetting 0 [ 830.919908][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.919982][ T10] usb 1-1: Product: syz [ 830.920026][ T10] usb 1-1: Manufacturer: syz [ 830.920067][ T10] usb 1-1: SerialNumber: syz [ 830.968979][T17018] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 831.063851][T16254] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 831.088321][T16254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.088466][T16254] usb 3-1: Product: syz [ 831.088494][T16254] usb 3-1: Manufacturer: syz [ 831.088510][T16254] usb 3-1: SerialNumber: syz [ 831.100913][ T5696] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 831.267486][T17018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.279717][T17018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.312208][ T5696] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 831.324507][ T5696] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 831.324577][ T5696] usb 2-1: can't read configurations, error -22 [ 831.347041][ T10] option 1-1:160.23: GSM modem (1-port) converter detected [ 831.394762][ T10] option 1-1:160.156: GSM modem (1-port) converter detected [ 831.450605][ T10] usb 1-1: USB disconnect, device number 82 [ 831.471807][ T5696] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 831.496369][ T10] option 1-1:160.23: device disconnected [ 831.526856][ T10] option 1-1:160.156: device disconnected [ 831.572497][T16254] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 831.572585][T16254] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 831.632583][ T5696] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 831.659833][ T5696] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 831.659913][ T5696] usb 2-1: can't read configurations, error -22 [ 831.661874][ T5696] usb usb2-port1: attempt power cycle [ 832.002272][ T5696] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 832.032267][ T5696] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 832.036292][ T5696] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 832.036387][ T5696] usb 2-1: can't read configurations, error -22 [ 832.121348][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 832.162534][ T5696] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 832.183212][ T5696] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 832.190925][ T5696] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 832.191034][ T5696] usb 2-1: can't read configurations, error -22 [ 832.214811][ T5696] usb usb2-port1: unable to enumerate USB device [ 832.304349][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 832.306104][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=b872, bcdDevice=e9.be [ 832.332280][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 832.341589][ T10] usb 5-1: can't read configurations, error -61 [ 832.491462][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 832.533482][T17044] SET target dimension over the limit! [ 832.586587][T17012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.590603][T17012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.655123][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 832.663024][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=b872, bcdDevice=e9.be [ 832.676189][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 832.676244][ T10] usb 5-1: can't read configurations, error -61 [ 832.678243][ T10] usb usb5-port1: attempt power cycle [ 833.021645][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 833.049825][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 833.049973][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=b872, bcdDevice=e9.be [ 833.074759][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 833.074822][ T10] usb 5-1: can't read configurations, error -61 [ 833.241578][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 833.275885][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 833.278331][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=b872, bcdDevice=e9.be [ 833.306143][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 833.306262][ T10] usb 5-1: can't read configurations, error -61 [ 833.307361][ T10] usb usb5-port1: unable to enumerate USB device [ 833.785963][T16254] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 833.786041][T16254] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 833.786768][T16254] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 833.825742][T16254] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 833.874604][T16254] usb 3-1: USB disconnect, device number 36 [ 833.992270][T17056] FAULT_INJECTION: forcing a failure. [ 833.992270][T17056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.007327][T17056] CPU: 1 UID: 0 PID: 17056 Comm: syz.1.2904 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.007362][T17056] Tainted: [L]=SOFTLOCKUP [ 834.007368][T17056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.007379][T17056] Call Trace: [ 834.007386][T17056] [ 834.007393][T17056] dump_stack_lvl+0xe8/0x150 [ 834.007421][T17056] should_fail_ex+0x410/0x560 [ 834.007448][T17056] _copy_from_user+0x2d/0xb0 [ 834.007464][T17056] ___sys_recvmsg+0x173/0x5a0 [ 834.007488][T17056] ? __pfx____sys_recvmsg+0x10/0x10 [ 834.007508][T17056] ? lock_acquire+0x115/0x350 [ 834.007543][T17056] do_recvmmsg+0x31a/0x7f0 [ 834.007566][T17056] ? __pfx_do_recvmmsg+0x10/0x10 [ 834.007590][T17056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 834.007615][T17056] ? __fget_files+0x3a2/0x420 [ 834.007644][T17056] __x64_sys_recvmmsg+0x198/0x250 [ 834.007663][T17056] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 834.007687][T17056] do_syscall_64+0x166/0x520 [ 834.007708][T17056] ? trace_irq_disable+0x3b/0x140 [ 834.007723][T17056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.007740][T17056] ? clear_bhb_loop+0x70/0xc0 [ 834.007759][T17056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.007775][T17056] RIP: 0033:0x7ff8f9f9e159 [ 834.007789][T17056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.007804][T17056] RSP: 002b:00007ff8fad97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 834.007821][T17056] RAX: ffffffffffffffda RBX: 00007ff8fa225fa0 RCX: 00007ff8f9f9e159 [ 834.007833][T17056] RDX: 0000000000000256 RSI: 0000200000000d00 RDI: 0000000000000003 [ 834.007844][T17056] RBP: 00007ff8fad97090 R08: 0000000000000000 R09: 0000000000000000 [ 834.007854][T17056] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000002 [ 834.007864][T17056] R13: 00007ff8fa226038 R14: 00007ff8fa225fa0 R15: 00007ff8fa34fa48 [ 834.007887][T17056] [ 834.131497][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 834.292163][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 834.293702][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 834.296769][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 834.296896][ T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 834.296975][ T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 834.297049][ T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 834.306149][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.306213][ T10] usb 4-1: Product: syz [ 834.306262][ T10] usb 4-1: Manufacturer: syz [ 834.306303][ T10] usb 4-1: SerialNumber: syz [ 834.334641][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 834.362109][T16254] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 834.394173][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input111 [ 834.470039][T17061] 8021q: adding VLAN 0 to HW filter on device .` [ 834.478567][T17061] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.498267][T17061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.511315][ T5696] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 834.511871][T16254] usb 3-1: Using ep0 maxpacket: 16 [ 834.514078][T16254] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 834.518333][T16254] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 834.518467][T16254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 834.558555][T16254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.558614][T16254] usb 3-1: Product: syz [ 834.558778][T16254] usb 3-1: Manufacturer: syz [ 834.558935][T16254] usb 3-1: SerialNumber: syz [ 834.584711][T17052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.593202][T17052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.603449][T16254] usb 3-1: config 0 descriptor?? [ 834.608349][ T10] imon:send_packet: packet tx failed (-71) [ 834.622398][ T10] imon 4-1:155.0: panel buttons/knobs setup failed [ 834.622434][ T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 834.622449][ T10] (id 0x00) [ 834.647687][T16254] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 834.647748][T16254] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 834.682207][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 834.688082][ T5696] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 834.700199][ T5696] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 834.700267][ T5696] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 834.700314][ T5696] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 834.700347][ T5696] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 834.751542][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.751589][ T5696] usb 2-1: Product: syz [ 834.751625][ T5696] usb 2-1: Manufacturer: syz [ 834.751656][ T5696] usb 2-1: SerialNumber: syz [ 834.791422][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 834.814667][ T5696] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input113 [ 834.853182][T17061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 834.863937][T17061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.871816][ T10] rc_core: IR keymap rc-imon-pad not found [ 834.871866][ T10] Registered IR keymap rc-empty [ 834.873052][ T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 834.873165][ T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 834.875183][ T10] imon:send_packet: packet tx failed (-71) [ 834.907069][ T10] imon 4-1:155.0: remote input dev register failed [ 834.907740][ T10] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 834.956575][T17061] veth1_vlan: left promiscuous mode [ 834.973627][T17061] veth0_vlan: left promiscuous mode [ 834.989806][T17061] veth0_vlan: entered promiscuous mode [ 834.997269][T17061] veth1_vlan: entered promiscuous mode [ 835.003803][ T5696] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 835.003823][ T5696] (id 0x00) [ 835.031235][T17061] veth1_macvtap: left promiscuous mode [ 835.040192][T17061] veth0_macvtap: left promiscuous mode [ 835.050364][T17061] veth0_macvtap: entered promiscuous mode [ 835.065625][T17061] veth1_macvtap: entered promiscuous mode [ 835.084632][T16254] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 835.091120][T16254] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 835.113611][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 835.134771][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 835.158311][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 835.173560][T17061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 835.191062][ T10] imon 4-1:155.0: unable to initialize intf0, err 0 [ 835.191131][ T10] imon:imon_probe: failed to initialize context! [ 835.193735][ T10] imon 4-1:155.0: unable to register, err -19 [ 835.230870][ T10] usb 4-1: USB disconnect, device number 79 [ 835.243111][T17061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 835.251294][ T5696] rc_core: IR keymap rc-imon-pad not found [ 835.251328][ T5696] Registered IR keymap rc-empty [ 835.251417][ T5696] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 835.251441][ T5696] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 835.299650][T17061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 835.320713][ T5696] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 835.332061][T16254] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 835.339704][T16254] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 835.348668][T16254] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 835.368489][ T5696] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input114 [ 835.404689][T17061] batman_adv: batadv0: Interface activated: gretap1 [ 835.448221][ T5696] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:101> initialized [ 835.473879][T17061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 835.526082][ T5745] usb 2-1: USB disconnect, device number 101 [ 835.609550][T17061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 835.729777][T17061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 835.798587][T17061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 835.836647][T17061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 835.910049][T17080] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 835.928448][T17061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.005519][T17062] vlan1: left allmulticast mode [ 836.010651][T17062] veth0_vlan: left allmulticast mode [ 836.188293][T16254] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 836.190500][T16254] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 836.207102][T16254] usb 3-1: USB disconnect, device number 37 [ 836.245632][T10784] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 836.246221][T10784] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 836.246542][T10784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.291146][ T5620] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 836.304158][T10784] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 836.304533][T10784] bond4: (slave veth5): making interface the new active one [ 836.424101][T10784] bond4: active interface up! [ 836.473189][T10789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.473282][T10789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.672692][ T5696] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 836.831726][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 836.842110][ T5696] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 836.854334][ T5696] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 836.863106][ T5696] usb 5-1: config 0 has no interface number 0 [ 836.863160][ T5696] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 836.863190][ T5696] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 836.896572][ T30] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 836.909483][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.917932][ T5696] usb 5-1: Product: syz [ 836.917952][ T5696] usb 5-1: Manufacturer: syz [ 836.917968][ T5696] usb 5-1: SerialNumber: syz [ 836.942577][ T5696] usb 5-1: config 0 descriptor?? [ 836.948850][T17087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 836.956556][T17087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 836.981911][ T5745] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 837.017539][ T31] audit: type=1326 audit(1787972187.661:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.017623][ T31] audit: type=1326 audit(1787972187.661:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.042937][ T31] audit: type=1326 audit(1787972187.691:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.073645][ T5745] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 837.099563][T16239] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 837.109638][ T31] audit: type=1326 audit(1787972187.751:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.136996][ T30] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 837.140007][ T31] audit: type=1326 audit(1787972187.751:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.140169][ T31] audit: type=1326 audit(1787972187.781:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.161954][ T31] audit: type=1326 audit(1787972187.791:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.186921][ T31] audit: type=1326 audit(1787972187.821:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.197467][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 837.197488][ T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 837.197519][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.225608][ T31] audit: type=1326 audit(1787972187.871:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.226023][T17087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 837.226159][T17087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 837.281256][ T31] audit: type=1326 audit(1787972187.911:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.2.2915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c659e159 code=0x7ffc0000 [ 837.327787][T16239] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 837.366084][T16239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.366164][T16239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.366194][T16239] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 837.366250][T16239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.421890][T16239] usb 1-1: config 0 descriptor?? [ 837.427295][ T30] usb 4-1: probing VID:PID(0424:012C) [ 837.444319][ T30] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 837.450961][ T30] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 837.459512][ T30] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 837.466339][ T30] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 837.474794][ T30] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 837.487601][ T5696] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 837.772100][ T30] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 837.883020][T16239] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 837.972082][ T30] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 838.801435][T16243] usb 1-1: USB disconnect, device number 83 [ 839.128988][ T5696] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 839.129027][ T5696] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 839.129358][ T5696] asix 5-1:0.34: probe with driver asix failed with error -71 [ 839.180351][ T5696] usb 5-1: USB disconnect, device number 83 [ 839.516839][ T30] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 839.561396][ T30] usb 4-1: USB disconnect, device number 80 [ 839.587640][T16243] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 839.685851][ T30] USB vub300 remote SDIO host controller[0] now disconnected [ 839.741592][ T5696] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 839.901547][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 839.907743][ T5696] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 839.918365][ T5696] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 839.918435][ T5696] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 839.918485][ T5696] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 839.918518][ T5696] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 839.942006][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 839.980000][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.988224][ T5696] usb 1-1: Product: syz [ 839.988246][ T5696] usb 1-1: Manufacturer: syz [ 839.988264][ T5696] usb 1-1: SerialNumber: syz [ 840.016446][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 840.033143][ T5696] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input115 [ 840.081338][ T30] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 840.221285][ T30] usb 4-1: device descriptor read/64, error -71 [ 840.261575][ T5696] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 840.270077][ T5696] (id 0x00) [ 840.431296][ T5696] rc_core: IR keymap rc-imon-pad not found [ 840.437413][ T5696] Registered IR keymap rc-empty [ 840.442605][ T5696] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 840.453628][ T5696] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 840.474289][ T30] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 840.484151][ T5696] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 840.497861][ T5696] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input116 [ 840.512912][T17135] netlink: 'syz.1.2926': attribute type 1 has an invalid length. [ 840.522667][ T5696] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:84> initialized [ 840.573841][T17135] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 840.577848][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2926'. [ 840.584418][ C0] ------------[ cut here ]------------ [ 840.584452][ C0] do not call blocking ops when !TASK_RUNNING; state=2001 set at [] futex_wait_setup+0x3c4/0x590 [ 840.584509][ C0] WARNING: kernel/sched/core.c:9161 at __might_sleep+0x92/0xf0, CPU#0: syz.1.2926/17134 [ 840.621860][T16243] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 840.624884][ T30] usb 4-1: device descriptor read/64, error -71 [ 840.636128][ C0] Modules linked in: [ 840.640075][ C0] CPU: 0 UID: 0 PID: 17134 Comm: syz.1.2926 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.651122][ C0] Tainted: [L]=SOFTLOCKUP [ 840.655569][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.665705][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 840.671006][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 7e 85 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 af 00 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 840.690729][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 840.696914][ C0] RAX: 0000000000000000 RBX: ffff888029695728 RCX: ffffffff81bb1874 [ 840.705015][ C0] RDX: ffffffff81bb1874 RSI: 0000000000002001 RDI: ffffffff907d0050 [ 840.713079][ C0] RBP: 0000000000002001 R08: 0000000000000100 R09: 1ffffffff20f404f [ 840.721135][ C0] R10: dffffc0000000000 R11: fffffbfff20f4050 R12: 1ffff110052d2ae5 [ 840.729219][ C0] R13: 00000000000011c8 R14: ffffffff907d0050 R15: dffffc0000000000 [ 840.737320][ C0] FS: 000055555ba80500(0000) GS:ffff888124ce0000(0000) knlGS:0000000000000000 [ 840.746365][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.746371][ T30] usb usb4-port1: attempt power cycle [ 840.758454][ C0] CR2: 000000110c3e3fb1 CR3: 0000000077d74000 CR4: 00000000003526f0 [ 840.766523][ C0] Call Trace: [ 840.769046][T17116] imon:vfd_write: invalid payload size [ 840.775346][ C0] [ 840.778232][ C0] __cancel_work_sync+0x6d/0x110 [ 840.783288][ C0] mmc_free_host+0x19/0x30 [ 840.787938][ C0] call_timer_fn+0x18d/0x5f0 [ 840.792599][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 840.799393][ C0] ? call_timer_fn+0xd5/0x5f0 [ 840.804173][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 840.806145][ T5696] usb 1-1: USB disconnect, device number 84 [ 840.808389][T16243] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 840.824349][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 840.825234][T16243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.837662][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 840.844458][ C0] __run_timer_base+0x652/0x8b0 [ 840.849395][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 840.854907][ C0] ? ktime_get+0x1f5/0x220 [ 840.859378][ C0] ? lapic_next_event+0x11/0x20 [ 840.864349][ C0] run_timer_softirq+0xb7/0x170 [ 840.869263][ C0] handle_softirqs+0x226/0x860 [ 840.874155][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 840.878995][ C0] __irq_exit_rcu+0xcb/0x220 [ 840.883711][ C0] irq_exit_rcu+0x9/0x30 [ 840.888039][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 840.893775][ C0] [ 840.896755][ C0] [ 840.899718][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.905788][ C0] RIP: 0010:rcu_is_watching+0x11/0xb0 [ 840.911235][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 48 ff 05 cf b4 e7 11 6a c6 36 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df [ 840.930952][ C0] RSP: 0018:ffffc90004da7950 EFLAGS: 00000283 [ 840.937107][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 840.945188][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff8ec10ee0 [ 840.953235][ C0] RBP: 1ffff110052d27d3 R08: 0000000000000001 R09: 0000000000000000 [ 840.961291][ C0] R10: dffffc0000000000 R11: fffffbfff20f4050 R12: ffffffff8ec10ee0 [ 840.969301][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 840.977356][ C0] lock_acquire+0x58/0x350 [ 840.978688][T16243] usb 5-1: config 0 descriptor?? [ 840.986826][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 840.992715][ C0] ? hrtimer_start_range_ns_user+0x2ba/0x430 [ 840.998758][ C0] ? schedule+0x90/0x2b0 [ 841.003109][ C0] schedule+0xb0/0x2b0 [ 841.007226][ C0] ? schedule+0x90/0x2b0 [ 841.011845][ C0] __futex_wait+0x1d3/0x400 [ 841.016419][ C0] ? __pfx___futex_wait+0x10/0x10 [ 841.021536][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 841.026880][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 841.031906][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 841.037168][ C0] ? ktime_add_safe+0x38/0x70 [ 841.041950][ C0] futex_wait+0x121/0x390 [ 841.046367][ C0] ? __pfx_futex_wait+0x10/0x10 [ 841.051359][ C0] ? lock_acquire+0x115/0x350 [ 841.056097][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 841.061409][ C0] ? lock_acquire+0x115/0x350 [ 841.066138][ C0] do_futex+0x3e7/0x4e0 [ 841.070359][ C0] ? __pfx_do_futex+0x10/0x10 [ 841.075156][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 841.080408][ C0] ? ktime_get+0x45/0x220 [ 841.084838][ C0] __se_sys_futex+0x3a8/0x450 [ 841.089567][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 841.094860][ C0] ? rcu_is_watching+0x16/0xb0 [ 841.099677][ C0] ? __x64_sys_futex+0x21/0xf0 [ 841.104537][ C0] do_syscall_64+0x166/0x520 [ 841.109172][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.115329][ C0] ? clear_bhb_loop+0x70/0xc0 [ 841.120053][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.126013][ C0] RIP: 0033:0x7ff8f9f9e159 [ 841.130461][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.150171][ C0] RSP: 002b:00007ff8fa34fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 841.153835][ T30] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 841.166367][ C0] RAX: ffffffffffffffda RBX: 00000000000cd351 RCX: 00007ff8f9f9e159 [ 841.174447][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8fa225fac [ 841.182501][ C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 841.183893][ T30] usb 4-1: device descriptor read/8, error -71 [ 841.196733][ C0] R10: 00007ff8fa34fcb0 R11: 0000000000000246 R12: 00007ff8fa34fcd0 [ 841.204784][ C0] R13: 00007ff8fa225fac R14: 00000000000cd383 R15: 00007ff8fa34fcb0 [ 841.206330][T16243] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 841.220237][ C0] [ 841.223338][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 841.230656][ C0] CPU: 0 UID: 0 PID: 17134 Comm: syz.1.2926 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.241626][ C0] Tainted: [L]=SOFTLOCKUP [ 841.245974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 841.256047][ C0] Call Trace: [ 841.259354][ C0] [ 841.262225][ C0] vpanic+0x56d/0xa60 [ 841.266329][ C0] ? __pfx__printk+0x10/0x10 [ 841.270964][ C0] ? __pfx_vpanic+0x10/0x10 [ 841.275508][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 841.280822][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 841.286059][ C0] panic+0xc5/0xd0 [ 841.289819][ C0] ? __pfx_panic+0x10/0x10 [ 841.294307][ C0] __warn+0x315/0x4c0 [ 841.298319][ C0] ? __might_sleep+0x92/0xf0 [ 841.302944][ C0] ? __might_sleep+0x92/0xf0 [ 841.307573][ C0] __report_bug+0x276/0x570 [ 841.312127][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 841.316927][ C0] ? __might_sleep+0x92/0xf0 [ 841.321560][ C0] ? __pfx___report_bug+0x10/0x10 [ 841.326616][ C0] ? futex_wait_setup+0x3c4/0x590 [ 841.331671][ C0] ? futex_wait_setup+0x3c4/0x590 [ 841.336746][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 841.341900][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 841.347737][ C0] ? debug_object_assert_init+0x20d/0x380 [ 841.353583][ C0] report_bug_entry+0x19b/0x290 [ 841.358470][ C0] ? __might_sleep+0xac/0xf0 [ 841.363096][ C0] ? __might_sleep+0xb1/0xf0 [ 841.367719][ C0] handle_bug+0xce/0x200 [ 841.371993][ C0] exc_invalid_op+0x1a/0x50 [ 841.376545][ C0] asm_exc_invalid_op+0x1a/0x20 [ 841.381416][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 841.386658][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 7e 85 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 af 00 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 841.406277][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 841.412371][ C0] RAX: 0000000000000000 RBX: ffff888029695728 RCX: ffffffff81bb1874 [ 841.420359][ C0] RDX: ffffffff81bb1874 RSI: 0000000000002001 RDI: ffffffff907d0050 [ 841.428351][ C0] RBP: 0000000000002001 R08: 0000000000000100 R09: 1ffffffff20f404f [ 841.436345][ C0] R10: dffffc0000000000 R11: fffffbfff20f4050 R12: 1ffff110052d2ae5 [ 841.444341][ C0] R13: 00000000000011c8 R14: ffffffff907d0050 R15: dffffc0000000000 [ 841.452345][ C0] ? futex_wait_setup+0x3c4/0x590 [ 841.457400][ C0] ? futex_wait_setup+0x3c4/0x590 [ 841.462468][ C0] __cancel_work_sync+0x6d/0x110 [ 841.467439][ C0] mmc_free_host+0x19/0x30 [ 841.471876][ C0] call_timer_fn+0x18d/0x5f0 [ 841.476483][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 841.483223][ C0] ? call_timer_fn+0xd5/0x5f0 [ 841.487931][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 841.493087][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 841.498307][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 841.505005][ C0] __run_timer_base+0x652/0x8b0 [ 841.509908][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 841.515300][ C0] ? ktime_get+0x1f5/0x220 [ 841.519743][ C0] ? lapic_next_event+0x11/0x20 [ 841.524626][ C0] run_timer_softirq+0xb7/0x170 [ 841.529500][ C0] handle_softirqs+0x226/0x860 [ 841.534296][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 841.539094][ C0] __irq_exit_rcu+0xcb/0x220 [ 841.543731][ C0] irq_exit_rcu+0x9/0x30 [ 841.548007][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 841.553663][ C0] [ 841.556612][ C0] [ 841.559562][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 841.565570][ C0] RIP: 0010:rcu_is_watching+0x11/0xb0 [ 841.570981][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 48 ff 05 cf b4 e7 11 6a c6 36 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df [ 841.590612][ C0] RSP: 0018:ffffc90004da7950 EFLAGS: 00000283 [ 841.596703][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 841.604712][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff8ec10ee0 [ 841.612706][ C0] RBP: 1ffff110052d27d3 R08: 0000000000000001 R09: 0000000000000000 [ 841.620694][ C0] R10: dffffc0000000000 R11: fffffbfff20f4050 R12: ffffffff8ec10ee0 [ 841.628682][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 841.636719][ C0] lock_acquire+0x58/0x350 [ 841.641176][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 841.647013][ C0] ? hrtimer_start_range_ns_user+0x2ba/0x430 [ 841.653019][ C0] ? schedule+0x90/0x2b0 [ 841.657285][ C0] schedule+0xb0/0x2b0 [ 841.661374][ C0] ? schedule+0x90/0x2b0 [ 841.665648][ C0] __futex_wait+0x1d3/0x400 [ 841.670190][ C0] ? __pfx___futex_wait+0x10/0x10 [ 841.675250][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 841.680577][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 841.685539][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 841.690778][ C0] ? ktime_add_safe+0x38/0x70 [ 841.695484][ C0] futex_wait+0x121/0x390 [ 841.699857][ C0] ? __pfx_futex_wait+0x10/0x10 [ 841.704732][ C0] ? lock_acquire+0x115/0x350 [ 841.709441][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 841.714683][ C0] ? lock_acquire+0x115/0x350 [ 841.719382][ C0] do_futex+0x3e7/0x4e0 [ 841.723571][ C0] ? __pfx_do_futex+0x10/0x10 [ 841.728271][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 841.733540][ C0] ? ktime_get+0x45/0x220 [ 841.737900][ C0] __se_sys_futex+0x3a8/0x450 [ 841.742610][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 841.747865][ C0] ? rcu_is_watching+0x16/0xb0 [ 841.752661][ C0] ? __x64_sys_futex+0x21/0xf0 [ 841.757447][ C0] do_syscall_64+0x166/0x520 [ 841.762062][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.768151][ C0] ? clear_bhb_loop+0x70/0xc0 [ 841.772857][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.778768][ C0] RIP: 0033:0x7ff8f9f9e159 [ 841.783222][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.802852][ C0] RSP: 002b:00007ff8fa34fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 841.811303][ C0] RAX: ffffffffffffffda RBX: 00000000000cd351 RCX: 00007ff8f9f9e159 [ 841.819303][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8fa225fac [ 841.827291][ C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 841.835286][ C0] R10: 00007ff8fa34fcb0 R11: 0000000000000246 R12: 00007ff8fa34fcd0 [ 841.843281][ C0] R13: 00007ff8fa225fac R14: 00000000000cd383 R15: 00007ff8fa34fcb0 [ 841.851287][ C0] [ 841.854931][ C0] Kernel Offset: disabled [ 841.859275][ C0] Rebooting in 86400 seconds..