last executing test programs: 11m0.07959572s ago: executing program 0 (id=1889): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2500, 0x2500, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7d, 0x2f, 0x0, @empty, @local}}}}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x4) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x122, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) landlock_restrict_self(r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x9}, 0x2}], 0x1, 0x12141, 0x0) 11m0.049404095s ago: executing program 0 (id=1890): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xf5) syz_usb_disconnect(r1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) personality(0x400000) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0), &(0x7f0000000000)) syz_usb_disconnect(r5) 10m56.936235391s ago: executing program 0 (id=1905): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46060478a3060000000000000002003e00cd000000b80f0000000000004000000000000000ec0200000000000000000100050038004d000600b106000403000000810200000900000000000000f50f000000000000ff030000000000009b000000000000000700"/120], 0x78) memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) fanotify_init(0x200, 0x1000) socket$kcm(0xa, 0x3, 0x87) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x8, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0x80045515, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x390) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) 10m55.999360803s ago: executing program 0 (id=1909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x20010, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10m50.678921619s ago: executing program 0 (id=1919): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff10000400000000000000000000000000001fe", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 10m50.485939977s ago: executing program 0 (id=1920): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000340)={{}, 0x0, 0x0, 0x2, 0x3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x20000400) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 10m50.258049257s ago: executing program 32 (id=1920): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000340)={{}, 0x0, 0x0, 0x2, 0x3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x20000400) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 7m22.311018645s ago: executing program 1 (id=2954): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0x840000000002, 0x3, 0xfb) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2401e18d93d74c6f68bb1a761a4a946249c9a8349f39063fc3370030", 0x24}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440fe0000000000002900000005000000", 0xfe60) syz_usb_control_io(r0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="200e680000006830b3c205c1333b4c32fc814cb13d3aa5bbb13964594bfca7b1a1e4941a5f381451df0000010000000000031ffc2fa481d4a4eab52f51a71274bb2dfbf8cfe5cc5e478692b845c7bbc6a05bcd6002823454ddbefbef22bd1f4fb29f5764e708f5ad39c58a39a122"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, &(0x7f00000000c0)={0x0, 0x22, 0x12, {[@main=@item_012={0x2, 0x0, 0xa, "93b6"}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_4={0x3, 0x1, 0xa, "821cd5e3"}, @global=@item_012={0x1, 0x1, 0x3, "ed"}, @local, @main=@item_4={0x3, 0x0, 0xb, "1ec8b4cf"}, @global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x4, 0x1, {0x22, 0x7cc}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x20, 0xf, 0x9c, "f9d175e33f1517d81064df7fea71344a8ca7d155a5634bb4cac65301ef10464b2a705bb0b0b74596fbb68b017ed24776e2aadf73edb17033f4c7c2428b58767be8c9ae2bba010509a23a3060695d5f6ac38accd28d4704e96b80b358046edb26cfe22bd1cce5831ffc37625ac8e7ea9d5f3726b877c0f9c6673b3e278ef199070b2d8ae9663908f6290d1d880822c39522b6dd15de8681b61b77a5da"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x1, 0x5, "f440a7727c"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x3}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000600)=@ready={0x0, 0x0, 0x8, '9wWH', {0x1, 0x4, 0x9, 0x0, 0xe4}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x0, 0x2a, 0x92, {0x92, 0x8342885e5e0796b1, "2b9718f7048f6ef28db973560cfb208f4a8a9de77cb999802b03321c4bb04d1b705fa17a8b60d744557f52137cb95bbe07415e73e42992436a191e0d6919641069d33de79680cb6c2d9d5d6570f62647d693d1bfb70cd099824260e5d2d681d7754e334603ef5cb7eb22af500eb11e741a8e7c5be53480b584288f7a95b03dbf9602a4d6d493540b0e650c92ece4fd25"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000500)={0x0, 0xf, 0x35, "aa1a38fcbb0eff671f0d56ae5bdacf342513f935a6aafc45f863bd8ad9cc2b3fc2bc67ef42b235b0a7cbf1b1a2685ad7e502245ff8"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}}) 7m19.824620632s ago: executing program 1 (id=2963): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x701801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000004000000000000000a14000000020a0900000000000000000000000000140000001100010000000000000000000000000ad08797dccbaa1cca19e0ce06cf3f656df550574ed4031ad522e53cfd287e619215b03338ca2179beaae8c6508e98e30a134b6b3ad7ca9f00eb40a46ceac52bd02c203e"], 0x3c}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x6, 0xb}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a01a9480000000004090000000000ddbc3abd41680f00"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4606, &(0x7f0000000080)={0x2}) 7m17.305833549s ago: executing program 1 (id=2974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f0000000000)='coda\x00', 0x1) unshare(0x20000400) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x2}}, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@broadcast, 0x4e23, 0x0, 0x4e24, 0x3, 0xa}, {0x0, 0x0, 0x4, 0xffff}, {0x10, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xff00) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@getnexthop={0x1c, 0x6a, 0x3cc7dd5ecb61ca17, 0x70bd28, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x3c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffd, 0x9}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x90) 7m16.329682763s ago: executing program 1 (id=2979): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x5) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x1800) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) 7m15.305929799s ago: executing program 1 (id=2981): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioperm(0x10001, 0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfff8, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @loopback, {[@noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@local, 0x7}]}, @cipso={0x86, 0x2c, 0x3, [{0x2, 0x6, "84924d89"}, {0x6, 0x2}, {0x2, 0x12, "f413567c09029e947789b80755483b46"}, {0x5, 0x8, "c92d3002d91d"}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x1}}, 0x20) 7m12.759214246s ago: executing program 1 (id=2989): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='y', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="d2", 0x1}], 0x1}}], 0x2, 0x20000040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7d, &(0x7f0000000180)="02bdd20009d2bb37", 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], 0x1, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000003c0)={0x500, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000001c0)=[0x0, 0x8000, 0x4, 0x7, 0x7, 0x7f], &(0x7f00000002c0)=[r7], &(0x7f0000000300)=[0x0]}) close_range(r0, 0xffffffffffffffff, 0x0) 7m12.265974514s ago: executing program 33 (id=2989): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='y', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="d2", 0x1}], 0x1}}], 0x2, 0x20000040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7d, &(0x7f0000000180)="02bdd20009d2bb37", 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], 0x1, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000003c0)={0x500, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000001c0)=[0x0, 0x8000, 0x4, 0x7, 0x7, 0x7f], &(0x7f00000002c0)=[r7], &(0x7f0000000300)=[0x0]}) close_range(r0, 0xffffffffffffffff, 0x0) 5m34.948894571s ago: executing program 2 (id=3328): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) sendmmsg$unix(r0, &(0x7f0000002540)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000100)="d1af175c9082e8521c2dff86f87bb1e5d4474d6bfc1c7962ab7f0b52bb1a8beec967b2a1e0b9f13d534738a1a4d1ff99189ae05cb91e4774050541dcd5c78a629639a0f6df3e197884850304832882060679191683fab329df4baef233acee703893cf87324ada4178f59431dbda45e847b66114bb271a923446040a", 0x7c}, {&(0x7f0000000180)="20a0b8569a5328afc11d93c661f1b6de493873e44d990647303120bfb9e52141ca2bb6ac8258607d56231e633fc123bfb36eb3c900536604289b", 0x3a}, {&(0x7f0000000240)="d8a1c17f8241df55c19833b80f73250694eab9a899ccf8b8c7cf9e99d1c98a09136d0ff82ef75de7aae1353813798a476ad8c97aca89a92e1d14a0f0f98cc8dfca27c8462e1010f9e97621b9eda0feb2287a7581dfe68cde48e2a8c230ef6438864835be7f76008568048fbe5511f125ac9bab52a97da5ea40dfc74237debaf641203b49bead621a", 0x88}, {&(0x7f0000002340)="4c3d846ee7eb2415af5423d47c3e9924e94f0513b411f62f0ef658095063b8fc338e1342a7884d793ec37f87f31cf3f5cc70dbad74c7cf4ea007a13bf2e366e0f882119da83b2a44921eeaf04d29b2d15546bb210b6156891d5b90ae93ca", 0x5e}, {&(0x7f00000023c0)="57131c6fadc565d6799edea30fc9f79a764cd3e1ba91783ceb1e3240899ac1f7211cd495ff902f67d1f5a1c92d8729a51437c9db991d9ed7890f8a7b5c13801123bf9433e0007ef384b6d9ee52eb449091ed249020f8b52f8cb9ded3276f183afc1787f5049ebbb4ee6ca7ece9d66cc4f8f923fbe4cf11062d849da2547e639d82d14dd964", 0x85}, {&(0x7f0000002480)="5b24cc95541ec6e25e80f33ac14190d108f7a733aa70403056788f30", 0x1c}], 0x6}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) r1 = dup(r0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) syz_usb_connect(0x0, 0x36, &(0x7f0000002580)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e", @ANYRES64=r1, @ANYRESHEX=r1], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 5m31.737329899s ago: executing program 2 (id=3342): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000280)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009c, 0x0, 0xeff}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r9, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x3, 0xffffffffffffffff}, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, {0xa, 0x0, 0x9, @mcast1}}}, 0x38) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r11, r11, 0x0, 0x200000) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @local, 0xffffffff}, 0x1c) 5m31.119054132s ago: executing program 2 (id=3346): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e0009002709703f000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5m29.825093424s ago: executing program 2 (id=3351): syz_usb_connect(0x5, 0x24, 0x0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x3, 0x60502) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000100)=0xc10) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x811) writev(r0, 0x0, 0x0) 5m28.856608155s ago: executing program 2 (id=3353): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) close(r0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 5m25.584140495s ago: executing program 2 (id=3355): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000100)="7ee395d00000ec6789b4241544940000000000000000000000040033a42c9550f5810011e0f0544b", 0x0, 0xa0000002, 0x0, 0xfffffffffffffe99, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async) syz_open_dev$sg(&(0x7f0000000280), 0x100000000004, 0x40000) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async, rerun: 32) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) (async, rerun: 32) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x3) 5m10.49682201s ago: executing program 34 (id=3355): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000100)="7ee395d00000ec6789b4241544940000000000000000000000040033a42c9550f5810011e0f0544b", 0x0, 0xa0000002, 0x0, 0xfffffffffffffe99, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async) syz_open_dev$sg(&(0x7f0000000280), 0x100000000004, 0x40000) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async, rerun: 32) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) (async, rerun: 32) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x3) 4m38.631257857s ago: executing program 5 (id=3545): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1538, &(0x7f0000001b80)=ANY=[]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m35.471651626s ago: executing program 5 (id=3573): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) chroot(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc12f, 0x8000, 0x0, 0x200c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x2, 0x0) io_setup(0x4c6, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f00000004c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r6 = semget(0x1, 0x4, 0x69c) semop(r6, &(0x7f0000003640)=[{0x1, 0x8004, 0x1000}, {0x1, 0x5b7a}, {0x1, 0xa4c3, 0x1800}], 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r8 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5, @ANYRES8=r6, @ANYRES16=r6, @ANYRES64=r3], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca8300060000"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f0000000040)={0x2, 0xffffffff, 0x7, 0x452, 0x5, 0x8}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000600)=ANY=[@ANYBLOB="40100000", @ANYRES16=r3, @ANYBLOB="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"], 0x1040}}, 0x10) io_uring_enter(r1, 0x221c, 0x134d, 0x16, 0x0, 0x0) 4m34.003337062s ago: executing program 5 (id=3581): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x200089a0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "030600", "fcffffff", ["50d59404000100", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x10800000000}, {0xfffffffffffffffc, 0x3, 0x6}], 0x2, 0xbff, 0x0, 0x0, 0x48, 0x40}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) 4m33.751833766s ago: executing program 5 (id=3583): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f00000010c0)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4m33.463430224s ago: executing program 5 (id=3585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"a2e3ada14fc752f91b3d1a0987f70e06d038e7ff7fc6e5539b3272078b089b080f384b090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef3195201c0ffe8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38dfcd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac4850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778ef85ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba551eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7ccef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e4b15f929b47f741f0efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bb9935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf9f394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa37ef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffffffffffff00", 0x1000}}, 0x1006) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f8040905"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, 0x0, 0xd}, 0x94) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe60, 0x2, [@TCA_FW_ACT={0xe5c, 0x4, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2000000, 0x9, 0x0, 0x8e, 0x9}, 0x2}, [{0x10001, 0x2, 0x2, 0x1, 0x3, 0x6}, {0x8, 0x5, 0x7, 0x1, 0xc, 0x1}, {0x10, 0x8, 0x6, 0x9, 0xf, 0x1ff}, {0x6, 0x4, 0x0, 0x9, 0x4, 0x7}, {0x1, 0x9, 0x8, 0x0, 0x10, 0x8}, {0x2, 0x5, 0x4, 0x57, 0x10, 0x21fb}, {0x1, 0x0, 0x0, 0x8, 0x4a9, 0x6}, {0x400, 0x8000, 0x0, 0x4, 0x0, 0x7}, {0x5a5, 0x8, 0xfffffff7, 0x4, 0x8, 0x7ff}, {0x2, 0x4, 0x5, 0x2, 0x80000000, 0x7f}, {0x6, 0xfffffffc, 0x0, 0x0, 0x400, 0x2}, {0x7, 0x8, 0x8, 0x0, 0x1, 0x4}, {0x8, 0x0, 0x4554, 0x3, 0x79a, 0xc}, {0x8, 0x876, 0x3, 0x8, 0x3, 0x8}, {0xac7a, 0xffffffff, 0x5, 0x8001, 0x0, 0x10000}, {0x6, 0x1, 0x4, 0x5, 0x66d, 0x3}, {0xe465, 0x7, 0x2005, 0x51, 0x1, 0x6c0}, {0x6, 0xd1e2, 0xffffb438, 0x0, 0x3, 0x2}, {0x80000000, 0x1, 0x8, 0x0, 0x53af1bbb, 0x8}, {0x7f, 0x7fffffff, 0xfffffff8, 0x81c, 0xcc}, {0x401, 0x4, 0x1, 0x7ff, 0x2, 0x4}, {0x7, 0x9, 0x1, 0x0, 0x4, 0x2}, {0x3, 0x0, 0x335, 0x2, 0x80, 0x8}, {0x7, 0x5, 0x5, 0x28e, 0x3, 0x8}, {0x0, 0xc, 0x8001, 0x1, 0x7, 0x6}, {0x56, 0x80, 0xc, 0xfffffff0, 0x3, 0x2}, {0x3, 0x2, 0x4, 0x17, 0x2, 0x3}, {0x4, 0xffffff81, 0x5, 0x8, 0xb, 0x6}, {0x8, 0x7, 0xf, 0xe, 0x1, 0x8}, {0x9ff, 0x10, 0xf71, 0x5, 0x9, 0xe17fe54}, {0xff, 0x0, 0x2, 0x6, 0x8, 0x6}, {0x3, 0x4, 0x1d4, 0x80000001, 0x0, 0x1773}, {0x4, 0x7, 0x10000007, 0x3, 0x5, 0xff}, {0x8000, 0x6fe, 0xfffffe01, 0x80, 0x8, 0x6}, {0x40, 0x58b, 0xfffffffe, 0xff, 0x101, 0xfffff679}, {0x0, 0xf8e2, 0x8, 0xffffffff, 0x0, 0x7f}, {0x0, 0x9, 0x10001, 0x8, 0x400, 0xfffff690}, {0x3, 0x570, 0xf, 0xffffb9f3, 0x5, 0x772}, {0xf6e3, 0x1, 0x85, 0x0, 0xfffffffd, 0x1000}, {0x6, 0x4, 0x0, 0x5, 0x2, 0xaa3f}, {0xffffffff, 0x1, 0x2e8, 0x7, 0x5, 0xcc184cd}, {0x9, 0xfffffff7, 0xfffffff8, 0x5, 0x7, 0x6}, {0x101, 0x7, 0x1, 0x7fff, 0x8, 0xfffffff7}, {0x10, 0x7fffffff, 0x7fffffff, 0x8, 0x2, 0xd9}, {0xbae1, 0xfdfe, 0x3, 0x4530, 0x0, 0x10000}, {0x8, 0x9, 0x1000, 0x3, 0x10, 0xd5}, {0x3, 0x80000001, 0x2, 0x5616, 0x7fff, 0x7}, {0x6, 0x9, 0x5, 0x40, 0x65f2, 0x5}, {0x6, 0x0, 0xfffffffc, 0x28d6, 0xa5a4, 0x337}, {0xffffff8d, 0x8, 0x4, 0x1ff, 0x3}, {0x0, 0x0, 0x8, 0xd726, 0x8, 0x46e4}, {0xffff, 0x401, 0x5, 0xa2, 0x5, 0x38}, {0x5, 0x200, 0x10, 0x0, 0x100, 0x9}, {0x40, 0x29, 0x1, 0x10000, 0x1, 0x3}, {0xb5, 0x3, 0x2, 0x2201ee1a, 0x9f25, 0x9}, {0x8, 0x9, 0x10000, 0x99, 0x1, 0x1ff}, {0x4, 0x2, 0xa53, 0x5, 0x239, 0xfffffffd}, {0x3, 0x0, 0x1, 0x3, 0x1, 0xa}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x7}, {0xff, 0x4, 0x5, 0x0, 0x8, 0x800}, {0xfffffc00, 0x1, 0x0, 0x3d1, 0x8, 0x4}, {0x9, 0x1, 0x9, 0x100, 0x7f, 0x800}, {0xa, 0x800, 0x1, 0x5f, 0x6, 0x2}, {0x40, 0x7, 0x8000, 0x6, 0x3, 0x10001}, {0x7, 0x1, 0x5, 0x8001, 0x1, 0x5}, {0x61, 0xa, 0x2, 0x0, 0x4, 0x4}, {0x5, 0xb, 0x7a04, 0x8, 0xd, 0x9f4}, {0x7, 0xffffff81, 0x1, 0x0, 0x7, 0x9}, {0x3ff7, 0x7, 0x80, 0x3ff, 0x5, 0x6}, {0x4, 0x3, 0x9, 0x8, 0x1, 0x5}, {0x1, 0x9, 0x0, 0x4, 0x6, 0x6f04}, {0x8, 0x5, 0x2, 0x1, 0x5, 0xff}, {0xfffeffff, 0x6, 0x2, 0x1, 0x7, 0x80000001}, {0x2, 0xff, 0x8, 0x4, 0x3ff, 0x1}, {0x101, 0x5, 0xe8, 0x5, 0x8, 0x50}, {0x3, 0x800, 0x5, 0x1, 0x3, 0x1ff}, {0xdf7, 0x4, 0x4, 0x4, 0x1, 0xc2b2}, {0x0, 0x2d44, 0xa, 0xfff, 0x1, 0x4}, {0x1, 0x9, 0x8, 0x0, 0x7, 0x9}, {0xa0d, 0xcc7, 0xa, 0x4, 0x6, 0xae3}, {0x6c, 0x40, 0x2, 0x3, 0x7, 0x8}, {0x1, 0xfff, 0xa, 0xafa, 0xd8000000, 0x6}, {0x200, 0xfffffff9, 0x0, 0x1, 0x6, 0x4}, {0x2, 0x2, 0x3, 0x3, 0x4, 0xd}, {0x7, 0xfffffffc, 0x0, 0x3, 0x7fff, 0x9}, {0x5, 0x7f, 0x7, 0xfffffff9, 0x5, 0x9}, {0x8, 0x81, 0x6, 0x7, 0x4, 0xfffffd2a}, {0x9, 0x0, 0x7ff, 0x200, 0xf, 0x2df}, {0x200, 0xc3b8, 0xfffffff9, 0x80, 0xd}, {0x3, 0x0, 0x1, 0x8, 0x5, 0x7}, {0xff4, 0x8001, 0xfffff117, 0x1, 0x8368, 0xa6}, {0x4, 0x4, 0x101, 0x4, 0x80000001, 0x3}, {0x53, 0xa, 0x7, 0x4, 0x10, 0x7}, {0x3, 0x6, 0x66, 0x9, 0xffffffff, 0x6}, {0xffffffff, 0x10001, 0x0, 0x10000, 0x7f, 0x7f}, {0xfffffffb, 0x37c, 0x7, 0x5d, 0x7, 0xca}, {0x1, 0x800, 0x48000, 0x5, 0x2, 0x10000}, {0x6, 0x1, 0xfffffff9, 0x1, 0x0, 0x9}, {0x5b1ad289, 0x0, 0xe0000000, 0x3, 0x1000, 0x7fffffff}, {0x3, 0x1000, 0x5da, 0x0, 0x4, 0x1}, {0xffffffff, 0x7ff, 0x1fbd, 0x2, 0x2, 0x3}, {0x9, 0xd8, 0x9, 0x3, 0xff, 0x8}, {0x7fffffff, 0x2, 0x101, 0xd61c, 0x7, 0x3}, {0x0, 0xf2e, 0x66, 0x9e1, 0x5, 0x7}, {0x0, 0x0, 0x800, 0x5, 0x8, 0x101}, {0x5, 0x1, 0xfffffffc, 0x6, 0x7, 0xcf00000}, {0xfffffff9, 0xaa, 0x2, 0x9, 0x6, 0x4196020b}, {0x0, 0xfea, 0x9, 0x5, 0x3293, 0xffff}, {0x7, 0xfffffffa, 0x2, 0x9, 0x6, 0x7ff}, {0xee, 0xfffffffa, 0x7, 0xf, 0x10}, {0x0, 0x3, 0x1, 0x2, 0x2, 0xe}, {0x67bcd46a, 0xe8b, 0x3ff, 0xb4, 0x4, 0xa0}, {0x22b3, 0x3, 0x5, 0x78, 0x9, 0x26a5d5a4}, {0x401, 0x8005, 0x10, 0x9, 0x720, 0x8}, {0x6, 0x7f, 0x6, 0x101, 0x2, 0x3}, {0x6, 0x4, 0xff, 0xfffeffff, 0x1, 0x18000000}, {0x2, 0x7, 0xffffffff, 0xffffffff, 0x401, 0x7c}, {0x4, 0x8d, 0x1, 0x800, 0xf, 0xfffffff7}, {0x0, 0xffffffff, 0x4, 0x4b, 0x5, 0x4}, {0x1, 0x8000, 0x7, 0x9, 0x10000, 0xb6}, {0x0, 0x81, 0x9, 0x7, 0x401, 0x7}, {0x3, 0x8, 0x1400, 0x4c, 0x8, 0x7}, {0x0, 0x9, 0x9, 0x4, 0x9, 0x7}, {0x200, 0x9, 0x4, 0x1, 0x800, 0x2}, {0x143, 0x4, 0x6, 0x6, 0x400, 0x1}, {0x415, 0x8, 0x4, 0x9, 0xe}, {0x6, 0x5, 0x6, 0xfffffff8, 0x1, 0x7}, {0x0, 0x800, 0x1, 0x10000, 0xb, 0x318}], [{0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x2}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x5}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x7a7e79f3715a24e4}, {0x3}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x4078d3a2fbf2a5ed}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x7a78bbe26a8b81d1}, {0x3}, {0x4, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x358bac3bb0c51439, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4m32.592413857s ago: executing program 5 (id=3590): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r3, &(0x7f0000000500)={@val={0x0, 0x1b}, @void, @x25={0x5, 0x9, 0x1b, "582e6c817d750b458922ba52c0c1db5a997e11b2101b376185a8c411f9a2862bfafe79ba7764a47e7c603e84333864a87fd4eb838acb9ad0ac3faa7ef3757ca92b4addde006704af3a48b0ef70e405"}}, 0x56) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000b000000000005000f000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) sendmsg(r5, &(0x7f0000000c00)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x8, @loopback, 0x39}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)="ab6d106847eec2d40a2aa1227923df0ee800949676ba2632ba195d29ba90e392cfd3a30d15f55d1c7792bb559613af54d2aa7635b214bbbc1e782a25ed0d8395e6a82a82876015e1f862204ac27e8018b08e00c5d362cc1a7e82b435718c606a1b761d2761e31ec1a4c4b3fd53930b668575681b45ddf1d57b4a0042f18c9339eca631934e9abcce56035e891a21248c5865eea1c1c21d44109c132d2b6893dd2973049d274ed88e8d8cac4d6dc0f254e9bf6bbf93b4df3b3db8e268d37cbb51de81601ec4d0", 0xc6}, {&(0x7f0000000700)="2794c1c18e3f651bd074600d4c6bedca6d10f279137ac83c5de9edd3a959a7f29a66bf679a6eb41f0efc10f8c300d7be3778ccd7a496ebed41e31928f07aa57b8319ca78e25794d1ebe5ca1b87d6b2028d5a22ee0b6226e4ed09012f23096c93eb99f2012f45a2ed11a8b1c89883d17299b67d00f860614a7dc5d3267589cbc6c51a39e2a24ac0a60441ceb28ccf9c65426a1bffaefdf07db3688db19d68a88572fe03ec33f224259f6267f3de1e8421761dc10233fbaac51073b77e08545d7a1328c86a76ceebadc11728a4b848ac6470b57ea199e7f4", 0xd7}], 0x2, &(0x7f0000000840)=[{0xd8, 0x101, 0x5, "da80bd1b9b552511b91a62821846fa2cf51a6e2877d4773bc02fdef24113e6e0bc42f22b1f70c7367e23986fa4cc9cf7275db1565d6b35bb46f8d99270ef1fbf525f173cad9585b44070ac19cf82d1cf3ac8d20e099a4a2cd2bdb133433b4814684d7f674d60552325506e9d55447c2840109564be90037fde4c6b3823561011602c9df97114299338373d28e40c10dc13db7bf9f3854afc306bd8bfcbc4b97fa1055e57325d8517755924ac394c68f52db76d89bd7561d9c60665e33edfbce5f1"}, {0xb0, 0x104, 0x1, "b993d0c5c1f7c8ac785c51fa9516dcccb3d5b188ce543b4625cb3ac472d5a43815d6ed0cb593d7439e88b99a410f84ba78fc21b29883cb2f206f252d849654872e6d7ffbf638f7a71effba16c9d66c18b51623ac80a15e35b30669a9f386c072d07ed44dd387edd541c5db3e1e3adcacb291c959f55c16ff73197ab045575a2605fb04cd493357fc3f8a85231240ecbd1adac1d7ba8ea68766c3e9"}, {0xd8, 0x11, 0x7fffffff, "6c4438d0f92d4bb9112f2b94a997f8b571a3b0297ecdecef3fe44c9e1e4c6f491971a2cbbb1b2e9ff7a5c252c12fea10ec73bcf45d0934a838b06361b0a7c0851e8648ac02009b8f239d8e91e03ae01382881193286367202853efa105a0d3fb1479035144620f5bd69de9d972b2d39f7a7510df226c2ecd59ccac3513d24b1a0f6d9b54068b38f0dd1bb720aeb2b9d5a6f62b5856ff8479a0b926fa122f4ceb59e0bdd8ceb3f6955773615fa320969b5e9bfd1e3e3740f32d1ae912ce71911516b4bc5ac72406ae"}, {0x100, 0x110, 0x7b9276a0, "5a4d4c79bd245ea92358851e8e5097143b4496d7c5a7c9f1729894af96dd2da36fd660d4eecdd5fdcfff3a3b2497b7c4a7689895df496988f38bb400077751e329b6fcc88cd1f5aa0cce0fe6e4c5c6c682b0d46c5d71ab8786c607277ffc8cdab9c6279422fbf7bd1ff60e07212fc7e5db7bebac7518f53fec6be79ed02750092c79e10bb9214a76774019141306b0d2594caaffb265cd70f4858d2ce57d9a4d84bba9f9b6868e4e986efb5bdc52d8078d249165b4b5d8aa7241ca206c7ce45d9d17682015db6a275f636b8c321c06ea5ddf98e2e0044296cba0b88cfb8f97924eeb4426219be94313baecf7b45514"}, {0x50, 0x1, 0x6, "e1ef81cc9cc83fc45fca530353d2d83c9f34954f97284968576ffe1240f08ec9937eb2a224a41e43a9c391cdfe9e70107152ab796d49455985f90c"}], 0x3b0}, 0x40800) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) 4m31.895477498s ago: executing program 35 (id=3590): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r3, &(0x7f0000000500)={@val={0x0, 0x1b}, @void, @x25={0x5, 0x9, 0x1b, "582e6c817d750b458922ba52c0c1db5a997e11b2101b376185a8c411f9a2862bfafe79ba7764a47e7c603e84333864a87fd4eb838acb9ad0ac3faa7ef3757ca92b4addde006704af3a48b0ef70e405"}}, 0x56) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000b000000000005000f000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) sendmsg(r5, &(0x7f0000000c00)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x8, @loopback, 0x39}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)="ab6d106847eec2d40a2aa1227923df0ee800949676ba2632ba195d29ba90e392cfd3a30d15f55d1c7792bb559613af54d2aa7635b214bbbc1e782a25ed0d8395e6a82a82876015e1f862204ac27e8018b08e00c5d362cc1a7e82b435718c606a1b761d2761e31ec1a4c4b3fd53930b668575681b45ddf1d57b4a0042f18c9339eca631934e9abcce56035e891a21248c5865eea1c1c21d44109c132d2b6893dd2973049d274ed88e8d8cac4d6dc0f254e9bf6bbf93b4df3b3db8e268d37cbb51de81601ec4d0", 0xc6}, {&(0x7f0000000700)="2794c1c18e3f651bd074600d4c6bedca6d10f279137ac83c5de9edd3a959a7f29a66bf679a6eb41f0efc10f8c300d7be3778ccd7a496ebed41e31928f07aa57b8319ca78e25794d1ebe5ca1b87d6b2028d5a22ee0b6226e4ed09012f23096c93eb99f2012f45a2ed11a8b1c89883d17299b67d00f860614a7dc5d3267589cbc6c51a39e2a24ac0a60441ceb28ccf9c65426a1bffaefdf07db3688db19d68a88572fe03ec33f224259f6267f3de1e8421761dc10233fbaac51073b77e08545d7a1328c86a76ceebadc11728a4b848ac6470b57ea199e7f4", 0xd7}], 0x2, &(0x7f0000000840)=[{0xd8, 0x101, 0x5, "da80bd1b9b552511b91a62821846fa2cf51a6e2877d4773bc02fdef24113e6e0bc42f22b1f70c7367e23986fa4cc9cf7275db1565d6b35bb46f8d99270ef1fbf525f173cad9585b44070ac19cf82d1cf3ac8d20e099a4a2cd2bdb133433b4814684d7f674d60552325506e9d55447c2840109564be90037fde4c6b3823561011602c9df97114299338373d28e40c10dc13db7bf9f3854afc306bd8bfcbc4b97fa1055e57325d8517755924ac394c68f52db76d89bd7561d9c60665e33edfbce5f1"}, {0xb0, 0x104, 0x1, "b993d0c5c1f7c8ac785c51fa9516dcccb3d5b188ce543b4625cb3ac472d5a43815d6ed0cb593d7439e88b99a410f84ba78fc21b29883cb2f206f252d849654872e6d7ffbf638f7a71effba16c9d66c18b51623ac80a15e35b30669a9f386c072d07ed44dd387edd541c5db3e1e3adcacb291c959f55c16ff73197ab045575a2605fb04cd493357fc3f8a85231240ecbd1adac1d7ba8ea68766c3e9"}, {0xd8, 0x11, 0x7fffffff, "6c4438d0f92d4bb9112f2b94a997f8b571a3b0297ecdecef3fe44c9e1e4c6f491971a2cbbb1b2e9ff7a5c252c12fea10ec73bcf45d0934a838b06361b0a7c0851e8648ac02009b8f239d8e91e03ae01382881193286367202853efa105a0d3fb1479035144620f5bd69de9d972b2d39f7a7510df226c2ecd59ccac3513d24b1a0f6d9b54068b38f0dd1bb720aeb2b9d5a6f62b5856ff8479a0b926fa122f4ceb59e0bdd8ceb3f6955773615fa320969b5e9bfd1e3e3740f32d1ae912ce71911516b4bc5ac72406ae"}, {0x100, 0x110, 0x7b9276a0, "5a4d4c79bd245ea92358851e8e5097143b4496d7c5a7c9f1729894af96dd2da36fd660d4eecdd5fdcfff3a3b2497b7c4a7689895df496988f38bb400077751e329b6fcc88cd1f5aa0cce0fe6e4c5c6c682b0d46c5d71ab8786c607277ffc8cdab9c6279422fbf7bd1ff60e07212fc7e5db7bebac7518f53fec6be79ed02750092c79e10bb9214a76774019141306b0d2594caaffb265cd70f4858d2ce57d9a4d84bba9f9b6868e4e986efb5bdc52d8078d249165b4b5d8aa7241ca206c7ce45d9d17682015db6a275f636b8c321c06ea5ddf98e2e0044296cba0b88cfb8f97924eeb4426219be94313baecf7b45514"}, {0x50, 0x1, 0x6, "e1ef81cc9cc83fc45fca530353d2d83c9f34954f97284968576ffe1240f08ec9937eb2a224a41e43a9c391cdfe9e70107152ab796d49455985f90c"}], 0x3b0}, 0x40800) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) 12.208359354s ago: executing program 6 (id=4917): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) socket$rxrpc(0x21, 0x2, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a07f2ff000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01f4000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003a00010326bd7000fcfeffff06"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 9.529393665s ago: executing program 7 (id=4930): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6e000000) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x4, 0xd1, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x582, 0x1d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x2e, 0x40, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0xd00}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x17, 0x5, '_'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf, 0xfffd, 0x80, "9d1694a2bc7f9977"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x7, 0x6, 0xf3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x2, 0x6, {0xa, 0x25, 0x25, 0x3, 0x4, 0xd9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x6, 0xc2, "60bc"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xb}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x81, 0x1, "8d8d674713c9d1c2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x4, 0x9, {0xa, 0x25, 0x25, 0x8, 0x4, 0x8ea}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xdd, 0x4, 0x89, 0x10, 0x8}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x446}}, {0x9d, &(0x7f0000000380)=@string={0x9d, 0x3, "9717f96f50261584c5b76ac78c74d640a8cae0e8a129874d9a904377a37299e06155f6166def4b5471c9dcbcf87ae4984c5670fe45117d34d91b7a14097ebba511d3103f643d3b9e929ac7d3b550aaf1ce1198bb747fc547663f2ff036df9626125d22f4c9db46dc7c8ad397d051902e9683fb2d98be61a3719dd662210bcc3f88987e89f52e83ba7fa8d7491102cd9f49116752d8e9468d7f1801"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x409}}, {0xa6, &(0x7f0000000500)=@string={0xa6, 0x3, "a25fae73bbaa47c0104811018e62d07a61120f6782696d10cbadaf24ad9ffc43cf6c4f06c2e0abb13c18ce3617f663ca627438ecd104d3384e16e1dee793478918a2f9a33e4c04bae9450034e954e52dac7453f52e04eef2508a9034f8ae1105803f0459b6ea0c73f56962cfa1095197698cb3b1a762c7b6368394ef5331ead8dd9d69dd886937e0632e4bcdf8614766d584166ab03300af14df59b90bbb1a87baaef9ff"}}]}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.994890077s ago: executing program 6 (id=4932): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfbf}], 0x1}, 0x9fc) (rerun: 64) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001200)=""/4120, &(0x7f0000000000)=0x1018) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000002240)="27bd286bc589eb6c1560493593d39d8a79e508ec3b0931d416a93b34032f3266d7681cd8ef1afb10bed16d6821180b09baf7343f1a93af0a09b332a1cc74b542cf38e0e8c2c477f4e50a83f87cdc932e9e9387215b18fe00fdb0cf57e7dd4b4864f1838ed35aa34c49b6f490dd7172d8ac0e65c7f34d30209594a48790c5bb52b803e2d9ba1f9b60278a71f4bfd0bb45f409e8dafffb0fa13b6fac76") (async, rerun: 64) ptrace(0x10, 0x1) (async, rerun: 64) syz_usb_connect$uac1(0x3, 0x85, &(0x7f00000010c0)=ANY=[@ANYBLOB="12ca000000000000001d01f63f000102030109027300030108a0040904000000010100000a240107001d000201020924030504030502f80a240702000003f06cba090401000101020000090401010101020000090501090800000102072501047fb60009040200000102000009040201010102000009058209ff0306020b07250108a0ef590100"], 0x0) 8.219965612s ago: executing program 3 (id=4938): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="2e08000010008188e6b62aa75772b9b24b1b3bd6d622f174ffffff7fa100484307948e287f0a000f000000028000bfd2b355620012", 0x35}], 0x61, 0x0, 0xfffffdc0}, 0x20000040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="0400"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="dee877d00c4ff51e99a32f", 0xb}], 0x1}, 0x0) 8.132320062s ago: executing program 3 (id=4939): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x0, 0xfeffffbd, 0xffffbff4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000024006500009078ac141403ac14143600004e2100109078020000008000"/48], 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x30, 0x4040081}], 0x1, 0x40800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={r1, 0xfffffbff}, &(0x7f0000000380)=0x8) bind$inet(r3, &(0x7f00000001c0)={0x2, 0xffdf, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x84, 0x6, 0x0, 0x0, @loopback, @private0, 0x8, 0x40, 0x5, 0x7}}) r5 = mq_open(&(0x7f00000002c0)='\x00'/14, 0x40, 0x120, &(0x7f0000000280)={0x1, 0x9, 0x1, 0x8}) mq_timedreceive(r5, &(0x7f0000000180)=""/191, 0xbf, 0x4, &(0x7f0000000000)={0x77359400}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$setstatus(r0, 0x4, 0x42800) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x3) r8 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r8, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r8, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0x3) ioctl$XFS_IOC_FSGROWFSDATA(r6, 0x4010586e, &(0x7f0000000140)={0x2, 0x1}) 6.465467011s ago: executing program 7 (id=4941): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x9, 0x401, 0x12000, 0xfffffffe, 0xda, 0xfffffffffc000000, 0x0, 0xfffffffffffffffa, 0x0, 0x3, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000440)={0x5, "d5245d4302b4a3120c0073b52a215dc4e7fc556e6d2fc79a696d521b8baa2800c63ea51f3de651630c88eed279137089d8344427a057a2f08749c99a026ea30a", {0x800, 0x2}}) r3 = fanotify_init(0x200, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r5 = io_uring_setup(0x10000d71, &(0x7f0000000080)={0x0, 0x3f2, 0x1, 0x2, 0x3d8, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1030, 0xffffffffffffffff, 0x1000000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) r6 = epoll_create(0x5) madvise(&(0x7f0000ac7000/0x4000)=nil, 0x4000, 0x65) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000080)={0x10000010}) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="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", 0x345}, {&(0x7f0000002b40)="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", 0x26e}], 0x2}, 0x8400) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="64cc", 0x2}], 0x1}, 0x0) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) 6.035870763s ago: executing program 3 (id=4942): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000740)=@get={0x1, &(0x7f0000000640)=""/193, 0x2}) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x8, 0x0, &(0x7f0000000500)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0, &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f00000007c0)='\x00', &(0x7f0000000ac0)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00\xba\xf1~{Y\x03\x8d\x98\x1cu\x99\x02', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', 0x0, 0x0, &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) 5.893974686s ago: executing program 6 (id=4943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000180)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002e40)=ANY=[], 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = dup(r1) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="00000004451400240064000009679078ac149b3404ae5d27f2261d961a79807ff5141a3992708dea583cc4502615bdc83372a517a8ac4ff1edeb53e5ecdff352ff8dadc8f33dbe"], 0x28) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa242, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="b800000019000100000000000000001000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a000000000000", @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000a00000000000000000000008040000200000000000008000000000000720000", @ANYBLOB="f99545647a2ef7a19f21fba8870521f3ab58d985e7157b62e99ef9c35d459908492f39ab93d31cd2c47fb7e0f5a9a8c09f7aee5c0bf06f51543c8cf9eabc8951fb91cce53c8e84e057ca1301c6dae8ebe94bf620c2f64a0fd22641542fb52ce7a456499def374c0e02214dd607decff90f738fa1c5f2eea4522c4bb5aba13d5b83ec2cddb81c24a0751bc9c91796791a210f3998f799dd15e374a428fecc10d1809b7bf6c77e661fdc64e48fea6e14fcbc31edf1dd0ffaa43b62d5e08cb8fa8159e8a42c12873330c70e4e01ac8f7e53bff82b21deea026d8ee5c10976202eb04a5670e60d09a9c135adf2"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8000000000000001, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000004, 0x800000000000002}}}, 0xb8}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000140)=0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc020000000000000000000000000001ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050558c4b00000000000000017f000001000030530000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 5.752316143s ago: executing program 6 (id=4944): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x101, 0x403) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002780)={&(0x7f0000000740)=[{0x0, 0x1200, 0x0, 0x0}, {0x8, 0x1, 0x0, 0x0}, {0x9, 0xa10, 0x0, 0x0}], 0x3}) 5.410180076s ago: executing program 8 (id=4945): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10801}, 0x0) 5.364186972s ago: executing program 8 (id=4946): writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x94076000) remap_file_pages(&(0x7f0000902000/0x2000)=nil, 0x2000, 0x0, 0x40, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) 4.485960925s ago: executing program 3 (id=4949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010003, 0x0, 0xffffffffffffffff}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 4.424360751s ago: executing program 4 (id=4950): socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) wait4(r0, 0x0, 0x8, 0x0) (async) syz_pidfd_open(r0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36ba, 0xf000, 0x0, 0x3c}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff0}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) (async, rerun: 64) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000001c0)={0x10}) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x42031, 0xffffffffffffffff, 0x180000000) 4.337657695s ago: executing program 6 (id=4951): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendmmsg$unix(r2, &(0x7f0000000200), 0x0, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) r5 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_usb_disconnect(r5) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000280)={0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xffffff41, 0x2}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_GOINGDOWN(r6, 0x604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r7, 0x101) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffe53, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)) r8 = shmget$private(0x0, 0x13000, 0x8, &(0x7f0000feb000/0x13000)=nil) shmat(r8, &(0x7f0000fee000/0x3000)=nil, 0x400c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11002) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2d0, 0x0, 0x5802, 0x294, 0x0, 0x294, 0xf0, 0x378, 0x378, 0x250, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x0, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x9, 0x401, 0x81, 'snmp_trap\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 4.228208756s ago: executing program 3 (id=4952): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x9, 0xb99, 0x6, r4}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080)={r4, 0x70, "2275d8242214d1a095d363e1e29b3404107062682a2bf34240daba2c6abd35862300846b2a79453a1204b1cf9c3be17b423d81dd18cb2f9859ff840f6140191bd92929916862269694f57f6f6b8f2df84a5b8bca2fe0c87c8728a9e203c53b57011b1ee5ee3b9bed10c24915e14381fb"}, &(0x7f0000000100)=0x78) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa00) 4.107838418s ago: executing program 4 (id=4953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="0f01df2e67660f67f4f30f090f01c80f38c9763e362e0f50ff660f3880720b66baf80cb8e873348eef66bafc0cb800000100ef822b5c64da730e", 0x3a}], 0x1, 0x42, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}], 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x4000001}, 0x8, 0xf36, 0x80400001}) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') chroot(&(0x7f0000000b80)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.031968384s ago: executing program 8 (id=4954): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.804334978s ago: executing program 4 (id=4955): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0xc, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x6, 0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 3.703641172s ago: executing program 8 (id=4956): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10801}, 0x0) 3.624714145s ago: executing program 8 (id=4957): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048811}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x38, 0xa0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 3.365730192s ago: executing program 7 (id=4958): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) renameat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r1], 0x158}, 0x1, 0xba01}, 0x44) 3.211716258s ago: executing program 8 (id=4959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x2800, @bt={0x2d0, 0x190, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xfe, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x7f, 0x3d, 0x14, {0xffff945a, 0x1}, 0x3, 0xed}}) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0x10000, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000200)=[{0x2, 0xc, 0x400}, {0x2, 0x8000, 0x800}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x2}}, 0x18) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) 3.2007808s ago: executing program 3 (id=4960): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) socket$rxrpc(0x21, 0x2, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01f4000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003a00010326bd7000fcfeffff06"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 2.906888938s ago: executing program 7 (id=4961): socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x9}, 0x50) futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$video4linux(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) (async) unshare(0x8040480) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async) fstat(0xffffffffffffffff, 0x0) (async) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x7, '\x00', @string=&(0x7f00000000c0)}}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x260, 0xc8, 0xc8, 0x8, 0x0, 0x5803, 0x190, 0x2e8, 0x2e8, 0x190, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x8, 0x7, 0x7, 0x4a}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x31d) (async) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) r6 = syz_open_procfs(r2, &(0x7f0000000180)='mountstats\x00') ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000800)={r5, &(0x7f0000000700)='.-^\x00', 0x121800, &(0x7f0000000740)={@_ha_fsid={[0x147, 0x80]}, {0xfff3, 0x61, 0x6, 0x6}}, 0x7fff, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x22acd7f6}) (async) pread64(r6, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) (async) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) 2.27568932s ago: executing program 6 (id=4962): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$pid(0x2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000680)=ANY=[@ANYBLOB="12014101000000401e04003040000102030109027c000301cc6016080b0101010620800904000000372901012000092401fb00081c008d0c24030506031004030100ba0724000100000000000220000904010101010220000905010910006c0203082501010c07ef0009040200000100200009040201010102200009058209000204070008250102000500000000"], 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000140)={0x14, &(0x7f00000004c0)={0x40, 0x23, 0x88, {0x88, 0x10, "5e53ef71c4ccf491d1c530d22053a5ccfbfaaa689ee6541827bcfd85b8a0245d976f99be089294c68e143b672eb5466949282fd001946e1166a6a354fbb172874a480db3f2cbd078299a2016106ad6442542a62bb627ca11ffa5f15fa79b14c166852abaa67e1440ec6cb01b173a9477eaea016a6e3c567053f51dc5cb4d26d988873ad842d4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x42, @string={0x42, 0x3, "7a888349e88faa1af4bc2392e888a282909b951349419741b724c71a677812f3b58a2ef689aa71411d41ec9e977f82dc35b166b6abb4fd6f257fc083b8e9a0ad"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x1d, 0xe7, "a6a7bb863cfddfd74633ab0bd64a24262e9f6e3badca663e481f2a18071bd5023b2c8610b2ccf35633a277188b1c42e3c3ee0d0a85e2a7b7fe7d2b4db87fd6bb13c5fa05676dc2a9dadd3b65f918989564cec3a76e7011d1ff854340802d5a93b9128b8515a2f6225d7fc02beb460030dfe43a8b08c40bbedd13b5f5026d9e70f22831b4a4397ae851d938ba7213145185040a36a76859926e75141e7a80968a6bfe10d6815a77416b6c6953f556adf991b6b3b7a9260a7678709001dc3b693d2ea2ebd4cd480cb7a7438220c0f2c837b5c7546f0403bd18e5abbab64b9c7efe51745cabd6d857"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000000300)={0x20, 0x81, 0x1, '\f'}, &(0x7f0000000340)={0x20, 0x82, 0x3, "239b1c"}, &(0x7f0000000380)={0x20, 0x83, 0x2, 'n5'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, 'ko'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "19097e"}}) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.695327048s ago: executing program 7 (id=4963): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ustat(0x6, &(0x7f0000000340)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa801, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000003c0)={0x10, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.249920701s ago: executing program 7 (id=4964): writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x94076000) remap_file_pages(&(0x7f0000902000/0x2000)=nil, 0x2000, 0x0, 0x40, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) 548.026176ms ago: executing program 4 (id=4965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/6, 0x6}, {0x0}], 0x2, 0x7, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180008ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 219.65167ms ago: executing program 4 (id=4966): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 0s ago: executing program 4 (id=4967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10801}, 0x0) kernel console output (not intermixed with test programs): 5992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1019.960662][T22712] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1019.966978][ T5359] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1019.976484][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.984568][T22712] Node 0 DMA32 free:1025480kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:150292kB inactive_anon:4kB active_file:82548kB inactive_file:161424kB unevictable:1536kB writepending:956kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:41984kB local_pcp:21172kB free_cma:0kB [ 1019.984637][T22712] lowmem_reserve[]: 0 0 0 0 0 [ 1019.984678][T22712] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.018609][ T5359] usb 5-1: Product: syz [ 1020.058101][T22712] lowmem_reserve[]: 0 0 0 0 0 [ 1020.062899][T22712] Node 1 Normal free:3950336kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:120kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1020.096224][ T5359] usb 5-1: Manufacturer: syz [ 1020.100881][ T5359] usb 5-1: SerialNumber: syz [ 1020.104622][T22712] lowmem_reserve[]: 0 0 0 0 0 [ 1020.108718][ T5359] usb 5-1: config 0 descriptor?? [ 1020.114115][T22712] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1020.119495][ T5359] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1020.130275][T22712] Node 0 DMA32: 4510*4kB (UME) 5606*8kB (UME) 3642*16kB (UME) 905*32kB (UME) 802*64kB (UME) 617*128kB (UME) 456*256kB (UME) 287*512kB (UME) 130*1024kB (UME) 2*2048kB (UE) 84*4096kB (UM) = 1025384kB [ 1020.156036][T22712] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1020.168663][T22712] Node 1 Normal: 4*4kB (M) 12*8kB (UM) 11*16kB (UM) 17*32kB (UM) 15*64kB (UM) 8*128kB (UM) 8*256kB (UM) 6*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 960*4096kB (M) = 3950336kB [ 1020.188081][T22712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.198107][T22712] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1020.204430][T13544] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1020.207610][T22712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1020.225098][T22712] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1020.235624][T22712] 92087 total pagecache pages [ 1020.240329][T22712] 1 pages in swap cache [ 1020.244668][T22712] Free swap = 124992kB [ 1020.249031][T22712] Total swap = 124996kB [ 1020.253217][T22712] 2097051 pages RAM [ 1020.257288][T22712] 0 pages HighMem/MovableOnly [ 1020.262148][T22712] 427115 pages reserved [ 1020.266364][T22712] 0 pages cma reserved [ 1020.278396][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1020.295538][ T10] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1020.302280][ T10] [drm] Initialized udl on minor 2 [ 1020.320267][ T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1020.337938][ T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1020.347358][T15790] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1020.355829][T15790] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1020.369897][T13544] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.384383][T13544] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1020.401554][ T10] usb 9-1: USB disconnect, device number 61 [ 1020.408565][T13544] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.434045][T13544] usb 7-1: config 0 descriptor?? [ 1020.448473][T13544] pwc: Askey VC010 type 2 USB webcam detected. [ 1020.493798][ T29] audit: type=1800 audit(1778687860.119:2825): pid=22725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4644" name="nullb0" dev="devtmpfs" ino=4782 res=0 errno=0 [ 1020.646525][ T5359] gspca_sonixj: reg_w1 err -110 [ 1020.653452][T13544] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1020.661892][ T5359] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1020.671705][T13544] pwc: recv_control_msg error -71 req 02 val 2700 [ 1020.684082][T13544] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1020.694496][T13544] pwc: recv_control_msg error -71 req 04 val 1000 [ 1020.706682][T13544] pwc: recv_control_msg error -71 req 04 val 1300 [ 1020.713537][T13544] pwc: recv_control_msg error -71 req 04 val 1400 [ 1020.720871][T13544] pwc: recv_control_msg error -71 req 02 val 2000 [ 1020.728786][T13544] pwc: recv_control_msg error -71 req 02 val 2100 [ 1020.736048][T13544] pwc: recv_control_msg error -71 req 04 val 1500 [ 1020.742903][T13544] pwc: recv_control_msg error -71 req 02 val 2500 [ 1020.750859][T13544] pwc: recv_control_msg error -71 req 02 val 2400 [ 1020.760311][T13544] pwc: recv_control_msg error -71 req 02 val 2600 [ 1020.769789][T13544] pwc: recv_control_msg error -71 req 02 val 2900 [ 1020.777622][T13544] pwc: recv_control_msg error -71 req 02 val 2800 [ 1020.784971][T13544] pwc: recv_control_msg error -71 req 04 val 1100 [ 1020.805390][T13544] pwc: recv_control_msg error -71 req 04 val 1200 [ 1020.825756][T13544] pwc: Registered as video103. [ 1020.836031][T13544] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input121 [ 1020.859124][T13544] usb 7-1: USB disconnect, device number 75 [ 1021.007499][T22742] PKCS8: Unsupported PKCS#8 version [ 1021.018507][T22744] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4649'. [ 1021.049945][T22742] binder: 22738:22742 ioctl 4018620d 0 returned -22 [ 1021.180735][T22753] binder: 22738:22753 ioctl c0306201 0 returned -14 [ 1021.348093][T22753] syz.7.4648 (22753): drop_caches: 2 [ 1021.454494][T13544] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1021.552665][ T5359] usb 4-1: USB disconnect, device number 21 [ 1021.614522][T13544] usb 7-1: Using ep0 maxpacket: 32 [ 1021.623053][T13544] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1021.636886][T13544] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.659633][T13544] usb 7-1: config 0 descriptor?? [ 1021.677471][T13544] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1021.685270][T22760] kvm: Disabled LAPIC found during irq injection [ 1022.024466][ T5359] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1022.178642][T22770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.206042][ T5359] usb 4-1: Using ep0 maxpacket: 8 [ 1022.211796][T22770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.249085][ T5359] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.279189][ T5359] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1022.302117][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.327081][ T5359] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x1F, changing to 0xF [ 1022.359424][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1022.397513][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0xF has invalid maxpacket 9968, setting to 1024 [ 1022.425576][ T5359] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1022.454490][ T5359] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1022.486373][ T5359] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.505334][ T5359] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1022.516704][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.544791][ T5359] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x1F, changing to 0xF [ 1022.556740][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1022.569109][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0xF has invalid maxpacket 9968, setting to 1024 [ 1022.595629][ T5359] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1022.609113][ T5359] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1022.617791][ T5359] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.625583][ T5359] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1022.637016][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.648784][ T5359] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0x1F, changing to 0xF [ 1022.660909][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1022.672313][ T5359] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0xF has invalid maxpacket 9968, setting to 1024 [ 1022.688335][T22747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.699086][ T5359] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1022.715010][T22747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.725440][ T5359] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1022.747487][ T5359] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1022.769065][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.793122][ T5359] usb 4-1: Product: syz [ 1022.804404][ T5359] usb 4-1: Manufacturer: syz [ 1022.813942][ T5359] usb 4-1: SerialNumber: syz [ 1022.854629][T22747] kvm: pic: non byte write [ 1023.014156][T13544] gspca_sq930x: ucbus_write failed -71 [ 1023.022976][T13544] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 1023.058797][ T5359] adutux 4-1:168.0: interrupt endpoints not found [ 1023.071063][T13544] usb 7-1: USB disconnect, device number 76 [ 1023.100541][ T5359] usb 4-1: USB disconnect, device number 22 [ 1023.237106][T22785] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4660'. [ 1023.291455][T13544] usb 5-1: USB disconnect, device number 22 [ 1023.347392][T22788] netlink: 'syz.4.4661': attribute type 9 has an invalid length. [ 1024.024484][T13544] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1024.186090][T22809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1024.242854][T13544] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 1024.277344][T13544] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.300986][T13544] usb 7-1: config 0 has no interface number 0 [ 1024.324049][T13544] usb 7-1: config 0 interface 205 has no altsetting 0 [ 1024.376723][T13544] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1024.407248][T13544] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.440693][T13544] usb 7-1: Product: syz [ 1024.458921][T13544] usb 7-1: Manufacturer: syz [ 1024.481942][T13544] usb 7-1: SerialNumber: syz [ 1024.540934][T13544] usb 7-1: config 0 descriptor?? [ 1024.605825][T13544] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1024.631770][T13544] dvb-usb: bulk message failed: -22 (3/0) [ 1024.701257][T13544] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1024.739772][T13544] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1024.775314][T13544] usb 7-1: media controller created [ 1024.792996][T13544] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.824759][T15790] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1024.835762][T22829] x_tables: unsorted underflow at hook 1 [ 1024.845533][T13544] dvb-usb: bulk message failed: -22 (6/0) [ 1024.854570][T13544] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1024.873065][T13544] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input122 [ 1024.891240][T13544] dvb-usb: schedule remote query interval to 150 msecs. [ 1024.903618][T13544] dvb-usb: bulk message failed: -22 (3/0) [ 1024.926216][T13544] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1025.004769][T15790] usb 9-1: Using ep0 maxpacket: 8 [ 1025.025116][T15790] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1025.056486][T15790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.065071][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1025.091548][T13544] dvb-usb: error while querying for an remote control event. [ 1025.108919][T15790] usb 9-1: Product: syz [ 1025.129393][T15790] usb 9-1: Manufacturer: syz [ 1025.147594][T15790] usb 9-1: SerialNumber: syz [ 1025.178565][T15790] usb 9-1: config 0 descriptor?? [ 1025.196378][T15790] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1025.294486][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1025.301512][T13544] dvb-usb: error while querying for an remote control event. [ 1025.475305][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1025.502261][T13544] dvb-usb: error while querying for an remote control event. [ 1025.705661][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1025.731876][T13544] dvb-usb: error while querying for an remote control event. [ 1025.799252][T22835] SET target dimension over the limit! [ 1025.914560][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1025.933544][T13544] dvb-usb: error while querying for an remote control event. [ 1026.037947][T15790] gspca_sonixj: reg_r err -32 [ 1026.044276][T15790] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 1026.114706][T15790] dvb-usb: bulk message failed: -22 (1/0) [ 1026.120634][T15790] dvb-usb: error while querying for an remote control event. [ 1026.254399][T13544] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1026.294496][T15790] dvb-usb: bulk message failed: -22 (1/0) [ 1026.301290][T15790] dvb-usb: error while querying for an remote control event. [ 1026.311093][ T5359] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1026.406717][T13544] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 63507, setting to 64 [ 1026.417899][T13544] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1026.427269][T13544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.467496][ T5359] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1026.477139][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.485296][T15790] dvb-usb: bulk message failed: -22 (1/0) [ 1026.491257][ T5359] usb 5-1: Product: syz [ 1026.495724][ T5359] usb 5-1: Manufacturer: syz [ 1026.500368][T15790] dvb-usb: error while querying for an remote control event. [ 1026.507967][ T5359] usb 5-1: SerialNumber: syz [ 1026.516583][ T5359] usb 5-1: config 0 descriptor?? [ 1026.651832][T13544] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1026.665897][T15790] dvb-usb: bulk message failed: -22 (1/0) [ 1026.673982][T13544] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input123 [ 1026.693915][T15790] dvb-usb: error while querying for an remote control event. [ 1026.743322][T13544] usb 4-1: USB disconnect, device number 23 [ 1026.743384][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1026.774015][T22845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.793986][T22845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.854593][T15790] dvb-usb: bulk message failed: -22 (1/0) [ 1026.860876][T15790] dvb-usb: error while querying for an remote control event. [ 1026.942450][ T5359] usb 5-1: Firmware version (0.0) predates our first public release. [ 1026.952828][ T5359] usb 5-1: Please update to version 0.2 or newer [ 1026.987817][ T5359] usb 5-1: USB disconnect, device number 23 [ 1027.041763][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1027.049827][T13544] dvb-usb: error while querying for an remote control event. [ 1027.225291][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1027.231247][T13544] dvb-usb: error while querying for an remote control event. [ 1027.264834][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1027.395643][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1027.410524][ T5359] dvb-usb: error while querying for an remote control event. [ 1027.423133][T13544] usb 7-1: USB disconnect, device number 77 [ 1027.493688][T13544] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1027.577420][T22859] fuse: Bad value for 'user_id' [ 1027.582467][T22859] fuse: Bad value for 'user_id' [ 1027.844555][T13544] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1027.904539][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1027.914771][T15790] usb 9-1: USB disconnect, device number 62 [ 1027.984751][T13544] usb 7-1: device descriptor read/64, error -71 [ 1028.066152][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1028.075430][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.086741][ T24] usb 4-1: config 0 descriptor?? [ 1028.228034][T13544] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1028.306838][ T24] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1028.344421][T15790] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1028.374498][T13544] usb 7-1: device descriptor read/64, error -71 [ 1028.495212][T15790] usb 9-1: Using ep0 maxpacket: 8 [ 1028.501884][T13544] usb usb7-port1: attempt power cycle [ 1028.516602][T15790] usb 9-1: config 0 has no interfaces? [ 1028.525995][T22864] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4684'. [ 1028.546759][T15790] usb 9-1: config 0 has no interfaces? [ 1028.551061][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 1028.553730][T15790] usb 9-1: config 0 has no interfaces? [ 1028.575024][T15790] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1028.585395][T15790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.596457][T15790] usb 9-1: Product: syz [ 1028.600784][T15790] usb 9-1: Manufacturer: syz [ 1028.601984][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1028.607941][T15790] usb 9-1: SerialNumber: syz [ 1028.623891][ T24] [drm] Initialized udl on minor 2 [ 1028.636957][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1028.652066][T15790] usb 9-1: config 0 descriptor?? [ 1028.657789][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1028.677742][T10194] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1028.699226][ T24] usb 4-1: USB disconnect, device number 24 [ 1028.712685][T10194] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1028.811179][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4688'. [ 1028.872817][T22870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.881437][T13544] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1028.892320][T22870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.898129][T22875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1028.924972][T13544] usb 7-1: device descriptor read/8, error -71 [ 1029.019882][T22881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.023673][T22881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.028482][ T24] usb 9-1: USB disconnect, device number 63 [ 1029.164653][T13544] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1029.194982][T13544] usb 7-1: device descriptor read/8, error -71 [ 1029.324980][T13544] usb usb7-port1: unable to enumerate USB device [ 1029.474584][ T10] usb 9-1: new low-speed USB device number 64 using dummy_hcd [ 1029.614920][ T10] usb 9-1: device descriptor read/64, error -71 [ 1029.749996][T22899] loop2: detected capacity change from 0 to 7 [ 1029.759013][T22899] loop2: [ 1029.762818][T22899] loop2: partition table partially beyond EOD, truncated [ 1029.874716][ T10] usb 9-1: new low-speed USB device number 65 using dummy_hcd [ 1029.902979][T22903] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4696'. [ 1030.024560][ T10] usb 9-1: device descriptor read/64, error -71 [ 1030.044423][T13544] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1030.135543][ T10] usb usb9-port1: attempt power cycle [ 1030.194442][T13544] usb 5-1: Using ep0 maxpacket: 16 [ 1030.201017][T13544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.213638][T13544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.223662][T13544] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1030.237019][T13544] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1030.246229][T13544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.256280][T13544] usb 5-1: config 0 descriptor?? [ 1030.484501][ T10] usb 9-1: new low-speed USB device number 66 using dummy_hcd [ 1030.515118][ T10] usb 9-1: device descriptor read/8, error -71 [ 1030.721101][T22907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4698'. [ 1030.732838][T22907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4698'. [ 1030.754502][ T10] usb 9-1: new low-speed USB device number 67 using dummy_hcd [ 1030.786378][ T10] usb 9-1: device descriptor read/8, error -71 [ 1030.915605][ T10] usb usb9-port1: unable to enumerate USB device [ 1030.934466][T15596] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1031.034444][ T24] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1031.084541][T15596] usb 7-1: Using ep0 maxpacket: 8 [ 1031.091840][T15596] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1031.102344][T15596] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1031.110611][T15596] usb 7-1: config 0 has no interface number 0 [ 1031.117030][T15596] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1031.128285][T15596] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1031.138463][T15596] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1031.148122][T15596] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1031.157368][T15596] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1031.165546][T15596] usb 7-1: Product: syz [ 1031.169881][T15596] usb 7-1: Manufacturer: syz [ 1031.174548][T15596] usb 7-1: SerialNumber: syz [ 1031.181266][T15596] usb 7-1: config 0 descriptor?? [ 1031.205390][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 1031.214237][ T24] usb 4-1: config 254 has an invalid interface number: 22 but max is 0 [ 1031.223927][ T24] usb 4-1: config 254 has no interface number 0 [ 1031.232158][ T24] usb 4-1: config 254 interface 22 has no altsetting 0 [ 1031.242152][ T24] usb 4-1: New USB device found, idVendor=9968, idProduct=5158, bcdDevice=59.23 [ 1031.258118][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.266310][ T24] usb 4-1: Product: syz [ 1031.270550][ T24] usb 4-1: Manufacturer: syz [ 1031.275289][ T24] usb 4-1: SerialNumber: syz [ 1031.382261][T13544] usbhid 5-1:0.0: can't add hid device: -71 [ 1031.390386][T13544] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1031.405161][T13544] usb 5-1: USB disconnect, device number 24 [ 1031.446916][ T10] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1031.483574][T15596] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input125 [ 1031.518465][ T24] usb-storage 4-1:254.22: USB Mass Storage device detected [ 1031.531670][T15596] usb 7-1: USB disconnect, device number 82 [ 1031.593514][ T24] usb 4-1: USB disconnect, device number 25 [ 1031.626665][ T10] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1031.644159][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.668048][ T10] usb 9-1: config 0 descriptor?? [ 1031.897761][T22913] warn_alloc: 1 callbacks suppressed [ 1031.897779][T22913] syz.8.4700: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1031.932657][T22913] CPU: 1 UID: 0 PID: 22913 Comm: syz.8.4700 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.932688][T22913] Tainted: [L]=SOFTLOCKUP [ 1031.932695][T22913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1031.932707][T22913] Call Trace: [ 1031.932716][T22913] [ 1031.932724][T22913] dump_stack_lvl+0xe8/0x150 [ 1031.932753][T22913] warn_alloc+0x249/0x340 [ 1031.932789][T22913] ? __pfx_warn_alloc+0x10/0x10 [ 1031.932835][T22913] __vmalloc_node_range_noprof+0x132/0x1750 [ 1031.932860][T22913] ? __mutex_trylock_common+0x158/0x260 [ 1031.932889][T22913] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1031.932921][T22913] ? trace_contention_end+0x3d/0x140 [ 1031.932946][T22913] ? __mutex_lock+0x319/0x1550 [ 1031.932966][T22913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1031.932979][T22913] ? tomoyo_path_number_perm+0x219/0x630 [ 1031.932993][T22913] ? dvb_demux_do_ioctl+0x320/0x540 [ 1031.933015][T22913] ? __pfx___mutex_lock+0x10/0x10 [ 1031.933046][T22913] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1031.933074][T22913] vmalloc_noprof+0xb2/0xe0 [ 1031.933095][T22913] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1031.933110][T22913] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1031.933128][T22913] dvb_demux_do_ioctl+0x45d/0x540 [ 1031.933144][T22913] dvb_usercopy+0x199/0x2e0 [ 1031.933162][T22913] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1031.933190][T22913] ? __pfx_dvb_usercopy+0x10/0x10 [ 1031.933225][T22913] ? __fget_files+0x3a0/0x420 [ 1031.933244][T22913] ? __fget_files+0x2a/0x420 [ 1031.933258][T22913] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1031.933271][T22913] dvb_demux_ioctl+0x29/0x40 [ 1031.933285][T22913] __se_sys_ioctl+0xfc/0x170 [ 1031.933309][T22913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.933332][T22913] do_syscall_64+0x15f/0xf80 [ 1031.933360][T22913] ? trace_irq_disable+0x3b/0x140 [ 1031.933388][T22913] ? clear_bhb_loop+0x40/0x90 [ 1031.933402][T22913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.933412][T22913] RIP: 0033:0x7fbb4bd9ce59 [ 1031.933423][T22913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.933432][T22913] RSP: 002b:00007fbb4cc2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1031.933444][T22913] RAX: ffffffffffffffda RBX: 00007fbb4c015fa0 RCX: 00007fbb4bd9ce59 [ 1031.933455][T22913] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 1031.933468][T22913] RBP: 00007fbb4be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1031.933481][T22913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.933494][T22913] R13: 00007fbb4c016038 R14: 00007fbb4c015fa0 R15: 00007fbb4c13fa48 [ 1031.933526][T22913] [ 1031.934017][T22913] Mem-Info: [ 1032.069077][ T10] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1032.213506][T22913] active_anon:37936 inactive_anon:1 isolated_anon:0 [ 1032.213506][T22913] active_file:20667 inactive_file:40411 isolated_file:0 [ 1032.213506][T22913] unevictable:768 dirty:167 writeback:0 [ 1032.213506][T22913] slab_reclaimable:7396 slab_unreclaimable:109862 [ 1032.213506][T22913] mapped:31085 shmem:31016 pagetables:1964 [ 1032.213506][T22913] sec_pagetables:0 bounce:0 [ 1032.213506][T22913] kernel_misc_reclaimable:0 [ 1032.213506][T22913] free:1250256 free_pcp:7846 free_cma:0 [ 1032.293496][T22913] Node 0 active_anon:151740kB inactive_anon:4kB active_file:82548kB inactive_file:161440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124244kB dirty:668kB writeback:0kB shmem:122524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14056kB pagetables:7796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1032.394989][T22913] Node 1 active_anon:4kB inactive_anon:0kB active_file:120kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1032.429524][T22920] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4700'. [ 1032.472569][T22913] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.566303][T22913] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1032.588811][T22913] Node 0 DMA32 free:1031132kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:158240kB inactive_anon:4kB active_file:82548kB inactive_file:161440kB unevictable:1536kB writepending:668kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:28740kB local_pcp:20960kB free_cma:0kB [ 1032.673999][T22913] lowmem_reserve[]: 0 0 0 0 0 [ 1032.688495][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4704'. [ 1032.710539][T22913] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.787038][T22913] lowmem_reserve[]: 0 0 0 0 0 [ 1032.813766][T22929] team0: Port device team_slave_0 removed [ 1032.820742][T22913] Node 1 Normal free:3950336kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:120kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1032.940473][T22913] lowmem_reserve[]: 0 0 0 0 0 [ 1032.993937][T22913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1033.054205][T22913] Node 0 DMA32: 4264*4kB (UE) 5295*8kB (UME) 3815*16kB (UM) 815*32kB (UME) 809*64kB (UME) 629*128kB (UME) 462*256kB (UME) 292*512kB (UME) 131*1024kB (UME) 3*2048kB (UME) 83*4096kB (UM) = 1026856kB [ 1033.080928][T22913] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1033.092816][T22913] Node 1 Normal: 4*4kB (M) 12*8kB (UM) 11*16kB (UM) 17*32kB (UM) 15*64kB (UM) 8*128kB (UM) 8*256kB (UM) 6*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 960*4096kB (M) = 3950336kB [ 1033.110155][T22913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.119831][T22913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1033.129480][T22913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.139103][T22913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1033.148574][T22913] 94264 total pagecache pages [ 1033.153286][T22913] 1 pages in swap cache [ 1033.157563][T22913] Free swap = 124992kB [ 1033.161810][T22913] Total swap = 124996kB [ 1033.167104][T22913] 2097051 pages RAM [ 1033.170946][T22913] 0 pages HighMem/MovableOnly [ 1033.175756][T22913] 427115 pages reserved [ 1033.179951][T22913] 0 pages cma reserved [ 1033.199881][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1033.275019][ T10] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1033.295623][ T10] [drm] Initialized udl on minor 2 [ 1033.313984][ T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1033.347713][ T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.375439][T15596] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1033.395857][ T10] usb 9-1: USB disconnect, device number 68 [ 1033.426765][T15596] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.843307][T22947] netlink: 'syz.8.4711': attribute type 1 has an invalid length. [ 1033.906990][T22947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1033.952208][T22950] vlan0: entered promiscuous mode [ 1033.982928][T22950] bond3: entered promiscuous mode [ 1034.017497][T22947] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4711'. [ 1034.039245][T22950] vlan0: entered allmulticast mode [ 1034.054566][T22950] bond3: entered allmulticast mode [ 1034.063369][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4710'. [ 1035.424466][T15596] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1035.611535][T15596] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1035.649355][T15596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.692662][T15596] usb 4-1: config 0 descriptor?? [ 1035.751117][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4722'. [ 1035.942383][T15596] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1036.157720][T22989] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4721'. [ 1036.173119][T15596] [drm:udl_init] *ERROR* Selecting channel failed [ 1036.219943][T15596] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1036.243802][T15596] [drm] Initialized udl on minor 2 [ 1036.261195][T15596] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1036.295835][T15596] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1036.306267][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1036.318520][T15596] usb 4-1: USB disconnect, device number 26 [ 1036.342839][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1037.416931][ T5688] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1037.560325][T23030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4733'. [ 1037.594807][ T5688] usb 9-1: Using ep0 maxpacket: 8 [ 1037.614156][ T5688] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1037.649550][ T5688] usb 9-1: New USB device found, idVendor=0582, idProduct=0101, bcdDevice= 0.40 [ 1037.691092][ T5688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.717202][ T5688] usb 9-1: Product: syz [ 1037.737417][ T5688] usb 9-1: Manufacturer: syz [ 1037.758958][ T5688] usb 9-1: SerialNumber: syz [ 1037.884536][ T24] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1037.999536][T23041] ip6tnl2: entered allmulticast mode [ 1038.065643][ T24] usb 7-1: too many configurations: 53, using maximum allowed: 8 [ 1038.095100][ T5688] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1038.115477][ T5688] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1038.141390][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1038.165634][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.184558][ T24] usb 7-1: Product: syz [ 1038.195557][ T24] usb 7-1: Manufacturer: syz [ 1038.208086][ T24] usb 7-1: SerialNumber: syz [ 1038.216162][ T5688] usb 9-1: USB disconnect, device number 69 [ 1038.336314][ T6593] udevd[6593]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.441923][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1038.473150][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1038.513118][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1038.544477][ T24] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1038.591874][ T24] usb 7-1: USB disconnect, device number 83 [ 1039.064401][ T10] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1039.075306][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1039.257654][ T10] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1039.297607][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1039.300791][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.367307][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1039.386493][ T10] usb 9-1: config 0 descriptor?? [ 1039.402561][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1039.438193][ T24] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1039.469955][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1039.488200][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.504654][ T24] usb 5-1: Product: syz [ 1039.514887][ T24] usb 5-1: Manufacturer: syz [ 1039.525299][ T24] usb 5-1: SerialNumber: syz [ 1039.553834][ T24] usb 5-1: selecting invalid altsetting 1 [ 1039.575135][ T24] usb 5-1: unit 6 not found! [ 1039.647309][ T10] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1039.757262][T23053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4740'. [ 1039.854841][T23047] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4737'. [ 1039.885581][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1039.912870][ T10] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1039.919725][ T10] [drm] Initialized udl on minor 2 [ 1039.930145][ T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1039.949019][ T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1039.949571][ T24] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1039.963280][T15596] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1039.980152][ T10] usb 9-1: USB disconnect, device number 70 [ 1039.988278][T15596] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1040.000323][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1040.041742][ T24] usb 5-1: selecting invalid altsetting 1 [ 1040.067053][ T24] usb 5-1: unit 6 not found! [ 1040.333755][ T24] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1040.410964][ T24] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1040.426038][ T24] usb 5-1: USB disconnect, device number 25 [ 1040.522740][ T6593] udevd[6593]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.004614][ T10] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 1041.206915][ T10] usb 9-1: config 0 has an invalid interface number: 205 but max is 0 [ 1041.224482][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.253537][ T10] usb 9-1: config 0 has no interface number 0 [ 1041.271185][ T10] usb 9-1: config 0 interface 205 has no altsetting 0 [ 1041.305250][ T10] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1041.314486][ T5359] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1041.333057][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.351215][ T10] usb 9-1: Product: syz [ 1041.361456][ T10] usb 9-1: Manufacturer: syz [ 1041.377414][ T10] usb 9-1: SerialNumber: syz [ 1041.398715][ T10] usb 9-1: config 0 descriptor?? [ 1041.418415][ T10] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1041.442470][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1041.474393][ T5359] usb 5-1: Using ep0 maxpacket: 8 [ 1041.488458][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1041.506798][ T5359] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1041.518235][ T10] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1041.531156][ T5359] usb 5-1: config 179 has no interface number 0 [ 1041.545325][ T5359] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1041.563975][ T10] usb 9-1: media controller created [ 1041.578964][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1041.590318][ T5359] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1041.615414][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1041.625604][ T5359] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1041.642614][ T10] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1041.663115][ T5359] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1041.683275][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input126 [ 1041.696605][ T5359] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1041.717708][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1041.726685][ T5359] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1041.735971][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1041.745658][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.774431][ T10] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1041.789148][T23079] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1041.894573][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1041.901567][ T5359] dvb-usb: error while querying for an remote control event. [ 1042.085603][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1042.098376][ T5359] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input127 [ 1042.109166][ T10] dvb-usb: error while querying for an remote control event. [ 1042.247273][T23090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.264415][ T24] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1042.265916][T23090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.280379][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1042.286694][ T5359] dvb-usb: error while querying for an remote control event. [ 1042.414403][ T24] usb 7-1: device descriptor read/64, error -71 [ 1042.454636][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1042.463933][ T5359] dvb-usb: error while querying for an remote control event. [ 1042.654494][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1042.664672][ T24] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1042.690653][ T5359] dvb-usb: error while querying for an remote control event. [ 1042.835838][ T24] usb 7-1: device descriptor read/64, error -71 [ 1042.874496][T15596] dvb-usb: bulk message failed: -22 (1/0) [ 1042.886735][T15596] dvb-usb: error while querying for an remote control event. [ 1042.929450][ T29] audit: type=1326 audit(1778687882.549:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1042.964894][ T24] usb usb7-port1: attempt power cycle [ 1043.001119][ T29] audit: type=1326 audit(1778687882.589:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.064823][T15596] dvb-usb: bulk message failed: -22 (1/0) [ 1043.076890][T15596] dvb-usb: error while querying for an remote control event. [ 1043.110674][ T29] audit: type=1326 audit(1778687882.619:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.146400][ T5688] usb 5-1: USB disconnect, device number 26 [ 1043.146431][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1043.160755][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1043.244530][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1043.250421][ T5359] dvb-usb: error while querying for an remote control event. [ 1043.292036][ T29] audit: type=1326 audit(1778687882.629:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.331561][ T24] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1043.362373][ T29] audit: type=1326 audit(1778687882.629:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.390077][ T24] usb 7-1: device descriptor read/8, error -71 [ 1043.433933][ T29] audit: type=1326 audit(1778687882.629:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.464751][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1043.487956][ T29] audit: type=1326 audit(1778687882.629:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.529017][ T5359] dvb-usb: error while querying for an remote control event. [ 1043.570804][ T29] audit: type=1326 audit(1778687882.629:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.595312][ T5688] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1043.654422][ T24] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1043.680052][ T29] audit: type=1326 audit(1778687882.629:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.709687][ T24] usb 7-1: device descriptor read/8, error -71 [ 1043.724585][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1043.749114][ T29] audit: type=1326 audit(1778687882.629:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23091 comm="syz.7.4753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f546f99ce59 code=0x7ffc0000 [ 1043.783177][ T5359] dvb-usb: error while querying for an remote control event. [ 1043.792999][ T5688] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1043.817292][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.834827][ T24] usb usb7-port1: unable to enumerate USB device [ 1043.864614][ T5688] usb 5-1: config 0 descriptor?? [ 1044.020990][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1044.041289][ T5359] dvb-usb: error while querying for an remote control event. [ 1044.054838][T15596] usb 9-1: USB disconnect, device number 71 [ 1044.121129][T23096] warn_alloc: 2 callbacks suppressed [ 1044.121146][T23096] syz.4.4754: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1044.203264][T23096] CPU: 1 UID: 0 PID: 23096 Comm: syz.4.4754 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.203302][T23096] Tainted: [L]=SOFTLOCKUP [ 1044.203311][T23096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1044.203324][T23096] Call Trace: [ 1044.203333][T23096] [ 1044.203342][T23096] dump_stack_lvl+0xe8/0x150 [ 1044.203374][T23096] warn_alloc+0x249/0x340 [ 1044.203409][T23096] ? __pfx_warn_alloc+0x10/0x10 [ 1044.203449][T23096] __vmalloc_node_range_noprof+0x132/0x1750 [ 1044.203473][T23096] ? __mutex_trylock_common+0x158/0x260 [ 1044.203499][T23096] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1044.203524][T23096] ? trace_contention_end+0x3d/0x140 [ 1044.203545][T23096] ? __mutex_lock+0x319/0x1550 [ 1044.203580][T23096] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1044.203603][T23096] ? tomoyo_path_number_perm+0x219/0x630 [ 1044.203624][T23096] ? dvb_demux_do_ioctl+0x320/0x540 [ 1044.203646][T23096] ? __pfx___mutex_lock+0x10/0x10 [ 1044.203669][T23096] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1044.203689][T23096] vmalloc_noprof+0xb2/0xe0 [ 1044.203710][T23096] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1044.203736][T23096] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1044.203769][T23096] dvb_demux_do_ioctl+0x45d/0x540 [ 1044.203799][T23096] dvb_usercopy+0x199/0x2e0 [ 1044.203830][T23096] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1044.203856][T23096] ? __pfx_dvb_usercopy+0x10/0x10 [ 1044.203882][T23096] ? __fget_files+0x3a0/0x420 [ 1044.203900][T23096] ? __fget_files+0x2a/0x420 [ 1044.203918][T23096] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1044.203938][T23096] dvb_demux_ioctl+0x29/0x40 [ 1044.203957][T23096] __se_sys_ioctl+0xfc/0x170 [ 1044.203980][T23096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.203997][T23096] do_syscall_64+0x15f/0xf80 [ 1044.204019][T23096] ? trace_irq_disable+0x3b/0x140 [ 1044.204045][T23096] ? clear_bhb_loop+0x40/0x90 [ 1044.204070][T23096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.204088][T23096] RIP: 0033:0x7f5bb379ce59 [ 1044.204106][T23096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.204123][T23096] RSP: 002b:00007f5bb469c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.204144][T23096] RAX: ffffffffffffffda RBX: 00007f5bb3a15fa0 RCX: 00007f5bb379ce59 [ 1044.204158][T23096] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 1044.204171][T23096] RBP: 00007f5bb3832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1044.204184][T23096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.204196][T23096] R13: 00007f5bb3a16038 R14: 00007f5bb3a15fa0 R15: 00007f5bb3b3fa48 [ 1044.204228][T23096] [ 1044.204260][T23096] Mem-Info: [ 1044.601251][T23096] active_anon:44826 inactive_anon:1 isolated_anon:0 [ 1044.601251][T23096] active_file:21051 inactive_file:40417 isolated_file:0 [ 1044.601251][T23096] unevictable:768 dirty:254 writeback:0 [ 1044.601251][T23096] slab_reclaimable:7397 slab_unreclaimable:110288 [ 1044.601251][T23096] mapped:32093 shmem:38042 pagetables:1993 [ 1044.601251][T23096] sec_pagetables:0 bounce:0 [ 1044.601251][T23096] kernel_misc_reclaimable:0 [ 1044.601251][T23096] free:1223722 free_pcp:25647 free_cma:0 [ 1044.661155][T15596] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1044.681286][T23096] Node 0 active_anon:179000kB inactive_anon:4kB active_file:84084kB inactive_file:161464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128316kB dirty:1016kB writeback:0kB shmem:150328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14116kB pagetables:7812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1044.761250][ T5688] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1044.811724][T23096] Node 1 active_anon:4kB inactive_anon:0kB active_file:120kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1044.892003][T23096] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1044.930395][T23107] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1044.961633][T23102] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4754'. [ 1044.974232][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1044.994918][ T24] IPVS: starting estimator thread 0... [ 1045.003547][T23107] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1045.031030][T23107] netlink: 'syz.3.4759': attribute type 2 has an invalid length. [ 1045.060710][T23096] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1045.083528][T23096] Node 0 DMA32 free:955180kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:164148kB inactive_anon:4kB active_file:84084kB inactive_file:161464kB unevictable:1536kB writepending:1068kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:95280kB local_pcp:39292kB free_cma:0kB [ 1045.124632][T23107] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1045.134540][T23096] lowmem_reserve[]: 0 0 0 0 0 [ 1045.139526][T23096] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1045.171604][T23112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.178836][T23110] IPVS: using max 53 ests per chain, 127200 per kthread [ 1045.192719][T23096] lowmem_reserve[]: 0 0 0 0 0 [ 1045.234983][T23096] Node 1 Normal free:3950336kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:120kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1045.280121][T23096] lowmem_reserve[]: 0 0 0 0 0 [ 1045.297628][T23096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1045.320829][T23096] Node 0 DMA32: 7836*4kB (UME) 5538*8kB (UME) 3472*16kB (UME) 414*32kB (UME) 629*64kB (UME) 587*128kB (UME) 445*256kB (UME) 286*512kB (UME) 130*1024kB (UME) 3*2048kB (UE) 73*4096kB (M) = 958464kB [ 1045.349092][T23096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1045.405775][T23096] Node 1 Normal: 4*4kB (M) 12*8kB (UM) 11*16kB (UM) 17*32kB (UM) 15*64kB (UM) 8*128kB (UM) 8*256kB (UM) 6*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 960*4096kB (M) = 3950336kB [ 1045.453641][T23096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1045.482876][T23096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1045.493815][T23096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1045.529462][T23096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1045.541601][T23096] 92506 total pagecache pages [ 1045.547417][T23096] 1 pages in swap cache [ 1045.551740][T23096] Free swap = 124992kB [ 1045.561039][T23096] Total swap = 124996kB [ 1045.567551][T23096] 2097051 pages RAM [ 1045.571448][T23096] 0 pages HighMem/MovableOnly [ 1045.588788][T23096] 427115 pages reserved [ 1045.593855][T23096] 0 pages cma reserved [ 1045.611709][ T5688] [drm:udl_init] *ERROR* Selecting channel failed [ 1045.643635][ T5688] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1045.667777][ T5688] [drm] Initialized udl on minor 2 [ 1045.692776][ T5688] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1045.714103][ T5688] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1045.740291][ T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1045.751152][ T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1045.766700][ T5688] usb 5-1: USB disconnect, device number 27 [ 1046.374883][T15596] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1046.556492][T15596] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.567073][T15596] usb 4-1: config 0 has no interfaces? [ 1046.576903][T15596] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1046.588226][T15596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.596404][T15596] usb 4-1: Product: syz [ 1046.601626][T15596] usb 4-1: Manufacturer: syz [ 1046.607696][T15596] usb 4-1: SerialNumber: syz [ 1046.617445][T15596] usb 4-1: config 0 descriptor?? [ 1046.906496][ T5688] usb 4-1: USB disconnect, device number 27 [ 1047.351886][T23182] loop2: detected capacity change from 0 to 7 [ 1047.361059][ T5688] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1047.383272][T23182] loop2: [ 1047.391439][T23182] loop2: partition table partially beyond EOD, truncated [ 1047.524498][ T5688] usb 4-1: Using ep0 maxpacket: 32 [ 1047.539297][ T5688] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 1047.552082][ T5688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.568179][ T5688] usb 4-1: config 0 has no interface number 0 [ 1047.584422][T15596] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1047.590295][T23188] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4783'. [ 1047.604456][ T5688] usb 4-1: config 0 interface 130 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1047.634087][ T5688] usb 4-1: config 0 interface 130 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0 [ 1047.650007][T23189] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1047.670733][ T5688] usb 4-1: config 0 interface 130 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1047.689644][ T5688] usb 4-1: config 0 interface 130 altsetting 8 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1047.709167][ T5688] usb 4-1: config 0 interface 130 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1047.733548][ T5688] usb 4-1: config 0 interface 130 altsetting 8 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1047.767936][ T5688] usb 4-1: config 0 interface 130 altsetting 8 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1047.793135][ T5688] usb 4-1: config 0 interface 130 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 11 [ 1047.816564][T15596] usb 7-1: Using ep0 maxpacket: 32 [ 1047.831742][ T5688] usb 4-1: config 0 interface 130 has no altsetting 0 [ 1047.832748][T15596] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1047.868455][ T5688] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01b7, bcdDevice=a2.26 [ 1047.878898][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.901133][ T5688] usb 4-1: Product: syz [ 1047.911794][ T5688] usb 4-1: Manufacturer: syz [ 1047.913106][T15596] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1047.937918][ T5688] usb 4-1: SerialNumber: syz [ 1047.942722][T15596] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1047.958458][ T5688] usb 4-1: config 0 descriptor?? [ 1048.004408][T15596] usb 7-1: Product: syz [ 1048.020053][T15596] usb 7-1: Manufacturer: syz [ 1048.043664][T15596] usb 7-1: SerialNumber: syz [ 1048.083620][T15596] usb 7-1: config 0 descriptor?? [ 1048.121701][T23178] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1048.529251][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 1048.529263][ T29] audit: type=1326 audit(1778687888.159:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.576094][ T29] audit: type=1326 audit(1778687888.189:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.619373][T23201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4785'. [ 1048.643386][ T29] audit: type=1326 audit(1778687888.189:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.698734][ T29] audit: type=1326 audit(1778687888.189:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.724501][ T29] audit: type=1326 audit(1778687888.189:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.779632][ T29] audit: type=1326 audit(1778687888.189:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.819994][ T29] audit: type=1326 audit(1778687888.189:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.845349][ T29] audit: type=1326 audit(1778687888.189:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.870488][ T29] audit: type=1326 audit(1778687888.189:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1048.895133][ T29] audit: type=1326 audit(1778687888.189:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23197 comm="syz.4.4785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1049.804589][ T24] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1049.998904][ T24] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 1050.011541][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.026077][ T24] usb 5-1: config 0 has no interface number 0 [ 1050.033016][ T24] usb 5-1: config 0 interface 205 has no altsetting 0 [ 1050.071974][ T5688] ftdi_sio 4-1:0.130: FTDI USB Serial Device converter detected [ 1050.106875][ T5688] ftdi_sio ttyUSB0: unknown device type: 0xa226 [ 1050.133532][ T24] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1050.194664][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.204102][ T5688] usb 4-1: USB disconnect, device number 28 [ 1050.239682][ T24] usb 5-1: Product: syz [ 1050.249604][ T5688] ftdi_sio 4-1:0.130: device disconnected [ 1050.261464][ T24] usb 5-1: Manufacturer: syz [ 1050.296703][ T24] usb 5-1: SerialNumber: syz [ 1050.324832][ T24] usb 5-1: config 0 descriptor?? [ 1050.399523][ T24] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1050.413741][ T5716] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 1050.429034][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1050.439477][ T5716] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1050.472960][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1050.509062][ T24] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1050.539467][ T24] usb 5-1: media controller created [ 1050.555638][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1050.573748][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1050.579824][ T24] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1050.642602][ T5688] usb 7-1: USB disconnect, device number 88 [ 1050.666654][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input129 [ 1050.728539][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1050.750830][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1050.785854][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1050.822665][T23237] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4795'. [ 1050.905002][ T5688] dvb-usb: bulk message failed: -22 (1/0) [ 1050.918032][ T5688] dvb-usb: error while querying for an remote control event. [ 1051.068050][T23244] input: syz1 as /devices/virtual/input/input130 [ 1051.098275][T23244] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4798'. [ 1051.112648][ T5688] dvb-usb: bulk message failed: -22 (1/0) [ 1051.129620][ T5688] dvb-usb: error while querying for an remote control event. [ 1051.314618][ T5688] dvb-usb: bulk message failed: -22 (1/0) [ 1051.336391][ T5688] dvb-usb: error while querying for an remote control event. [ 1051.442898][T23254] fuse: Bad value for 'fd' [ 1051.514392][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 1051.521443][ T5716] dvb-usb: error while querying for an remote control event. [ 1051.676409][ T5688] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1051.694650][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 1051.709270][ T5716] dvb-usb: error while querying for an remote control event. [ 1051.746608][T23261] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1051.791727][T23261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.837186][ T5688] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1051.866212][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.917501][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 1051.932361][ T5688] usb 4-1: config 0 descriptor?? [ 1051.938480][ T5716] dvb-usb: error while querying for an remote control event. [ 1052.134438][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 1052.140383][ T5716] dvb-usb: error while querying for an remote control event. [ 1052.188010][ T5688] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1052.315280][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 1052.321473][ T5716] dvb-usb: error while querying for an remote control event. [ 1052.391219][T23255] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4803'. [ 1052.436804][ T5688] [drm:udl_init] *ERROR* Selecting channel failed [ 1052.478303][ T5688] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1052.485110][ T5716] dvb-usb: bulk message failed: -22 (1/0) [ 1052.497933][ T5716] dvb-usb: error while querying for an remote control event. [ 1052.513804][ T5688] [drm] Initialized udl on minor 2 [ 1052.536951][ T5688] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1052.554798][ T5688] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1052.561661][ T5716] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1052.593104][ T5716] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1052.605502][ T5688] usb 4-1: USB disconnect, device number 29 [ 1052.625451][ T5716] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1052.655635][ T5716] usb 5-1: USB disconnect, device number 28 [ 1052.696431][T23271] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4808'. [ 1052.728836][ T5716] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1052.958323][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4811'. [ 1053.036352][T23278] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1053.112604][ T5716] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1053.294607][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 1053.306985][T23286] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4815'. [ 1053.328742][ T5716] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1053.348714][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.368540][ T5716] usb 5-1: config 0 descriptor?? [ 1053.416570][ T5716] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1053.689983][T23299] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4820'. [ 1053.864937][ T5359] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1054.047598][ T5359] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1054.082193][ T5359] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1054.118163][ T5359] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1054.139755][ T5359] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1054.160957][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1054.170780][ T5359] usb 4-1: Product: syz [ 1054.175492][ T5359] usb 4-1: Manufacturer: syz [ 1054.180292][ T5359] usb 4-1: SerialNumber: syz [ 1054.228829][ T5359] usb 4-1: config 0 descriptor?? [ 1054.242943][ T5359] usb 4-1: selecting invalid altsetting 0 [ 1054.292246][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.299220][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.404419][T15596] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1054.428499][T23273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.445948][T23273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.453746][T23296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.469174][T23296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.509889][T23296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.545149][T23296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.582461][T23296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.619146][T15596] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1054.636148][T23296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.652413][T15596] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.662752][T23296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.698810][T15596] usb 7-1: config 0 descriptor?? [ 1054.710615][T23296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.740705][T23296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.740811][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4824'. [ 1054.762339][T23296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.781474][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4825'. [ 1054.824792][ T5716] gspca_sq930x: ucbus_write failed -110 [ 1054.839083][ T5688] usb 4-1: USB disconnect, device number 30 [ 1054.846701][ T5716] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 1054.874193][ T5716] usb 5-1: USB disconnect, device number 29 [ 1055.000075][T23318] warn_alloc: 1 callbacks suppressed [ 1055.000091][T23318] syz.6.4822: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1055.034054][T23318] CPU: 0 UID: 0 PID: 23318 Comm: syz.6.4822 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.034085][T23318] Tainted: [L]=SOFTLOCKUP [ 1055.034093][T23318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1055.034104][T23318] Call Trace: [ 1055.034113][T23318] [ 1055.034125][T23318] dump_stack_lvl+0xe8/0x150 [ 1055.034154][T23318] warn_alloc+0x249/0x340 [ 1055.034188][T23318] ? __pfx_warn_alloc+0x10/0x10 [ 1055.034233][T23318] __vmalloc_node_range_noprof+0x132/0x1750 [ 1055.034264][T23318] ? __mutex_trylock_common+0x158/0x260 [ 1055.034294][T23318] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1055.034324][T23318] ? trace_contention_end+0x3d/0x140 [ 1055.034351][T23318] ? __mutex_lock+0x319/0x1550 [ 1055.034388][T23318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1055.034413][T23318] ? tomoyo_path_number_perm+0x219/0x630 [ 1055.034439][T23318] ? dvb_demux_do_ioctl+0x320/0x540 [ 1055.034469][T23318] ? __pfx___mutex_lock+0x10/0x10 [ 1055.034499][T23318] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1055.034527][T23318] vmalloc_noprof+0xb2/0xe0 [ 1055.034552][T23318] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1055.034582][T23318] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1055.034610][T23318] dvb_demux_do_ioctl+0x45d/0x540 [ 1055.034638][T23318] dvb_usercopy+0x199/0x2e0 [ 1055.034664][T23318] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1055.034690][T23318] ? __pfx_dvb_usercopy+0x10/0x10 [ 1055.034726][T23318] ? __fget_files+0x3a0/0x420 [ 1055.034749][T23318] ? __fget_files+0x2a/0x420 [ 1055.034775][T23318] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1055.034802][T23318] dvb_demux_ioctl+0x29/0x40 [ 1055.034829][T23318] __se_sys_ioctl+0xfc/0x170 [ 1055.034866][T23318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.034888][T23318] do_syscall_64+0x15f/0xf80 [ 1055.034918][T23318] ? clear_bhb_loop+0x40/0x90 [ 1055.034942][T23318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.034962][T23318] RIP: 0033:0x7efc3bd9ce59 [ 1055.034979][T23318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.034995][T23318] RSP: 002b:00007efc3cb89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.035016][T23318] RAX: ffffffffffffffda RBX: 00007efc3c016090 RCX: 00007efc3bd9ce59 [ 1055.035031][T23318] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 1055.035044][T23318] RBP: 00007efc3be32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1055.035056][T23318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.035067][T23318] R13: 00007efc3c016128 R14: 00007efc3c016090 R15: 00007efc3c13fa48 [ 1055.035098][T23318] [ 1055.301194][T15596] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1055.342681][T23321] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1055.350295][T23318] Mem-Info: [ 1055.353556][T23318] active_anon:37586 inactive_anon:1 isolated_anon:0 [ 1055.353556][T23318] active_file:21051 inactive_file:40421 isolated_file:0 [ 1055.353556][T23318] unevictable:769 dirty:333 writeback:0 [ 1055.353556][T23318] slab_reclaimable:7380 slab_unreclaimable:109931 [ 1055.353556][T23318] mapped:31090 shmem:31023 pagetables:1999 [ 1055.353556][T23318] sec_pagetables:3 bounce:0 [ 1055.353556][T23318] kernel_misc_reclaimable:0 [ 1055.353556][T23318] free:1247150 free_pcp:10086 free_cma:0 [ 1055.421771][T23322] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4822'. [ 1055.470561][T23318] Node 0 active_anon:150340kB inactive_anon:4kB active_file:84084kB inactive_file:161480kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:124296kB dirty:1332kB writeback:0kB shmem:122552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14204kB pagetables:7936kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1055.552244][T23321] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1055.582727][T23318] Node 1 active_anon:4kB inactive_anon:0kB active_file:120kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1055.716525][T23330] loop2: detected capacity change from 0 to 7 [ 1055.741693][T23318] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1055.808060][T23330] loop2: [ 1055.813329][T23330] loop2: partition table partially beyond EOD, truncated [ 1055.822487][T23318] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1055.901793][T23318] Node 0 DMA32 free:1022628kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:150180kB inactive_anon:4kB active_file:84084kB inactive_file:161480kB unevictable:1536kB writepending:1312kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:41300kB local_pcp:20200kB free_cma:0kB [ 1055.963233][T23318] lowmem_reserve[]: 0 0 0 0 0 [ 1055.970220][T23318] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1056.005619][T23318] lowmem_reserve[]: 0 0 0 0 0 [ 1056.010738][T23318] Node 1 Normal free:3950336kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:120kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1056.043435][T23318] lowmem_reserve[]: 0 0 0 0 0 [ 1056.049407][T23318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1056.065816][T23318] Node 0 DMA32: 5863*4kB (UME) 6423*8kB (UME) 4059*16kB (UME) 825*32kB (UME) 786*64kB (UME) 656*128kB (UME) 473*256kB (UME) 294*512kB (UME) 138*1024kB (UME) 5*2048kB (UME) 73*4096kB (M) = 1022628kB [ 1056.086364][T23318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1056.098733][T23318] Node 1 Normal: 4*4kB (M) 12*8kB (UM) 11*16kB (UM) 17*32kB (UM) 15*64kB (UM) 8*128kB (UM) 8*256kB (UM) 6*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 960*4096kB (M) = 3950336kB [ 1056.116268][T23318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1056.149310][T23318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1056.193172][T23318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1056.217056][T23318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1056.235890][T23318] 94087 total pagecache pages [ 1056.253093][T23318] 1 pages in swap cache [ 1056.264361][T23318] Free swap = 124992kB [ 1056.278302][T23318] Total swap = 124996kB [ 1056.291921][T23318] 2097051 pages RAM [ 1056.297852][T23318] 0 pages HighMem/MovableOnly [ 1056.324553][T23318] 427115 pages reserved [ 1056.335136][T23318] 0 pages cma reserved [ 1056.377446][T15596] [drm:udl_init] *ERROR* Selecting channel failed [ 1056.416382][T15596] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1056.423725][T23339] __nla_validate_parse: 1 callbacks suppressed [ 1056.423741][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4831'. [ 1056.431612][T15596] [drm] Initialized udl on minor 2 [ 1056.476038][T15596] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1056.492969][T15596] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1056.505378][ T5359] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1056.513524][ T5359] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1056.528174][T15596] usb 7-1: USB disconnect, device number 89 [ 1056.625058][ T5716] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1056.794388][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 1056.801354][ T5716] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1056.824610][ T5716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1056.831302][ T5716] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1056.842651][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.854975][ T5716] usb 4-1: config 0 descriptor?? [ 1057.073498][T23347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.084791][T15596] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1057.086023][T23347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.257854][T15596] usb 9-1: Using ep0 maxpacket: 32 [ 1057.265204][T15596] usb 9-1: config 2 has an invalid interface number: 191 but max is 0 [ 1057.273444][T15596] usb 9-1: config 2 has no interface number 0 [ 1057.274656][T10194] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1057.280102][T15596] usb 9-1: config 2 interface 191 altsetting 83 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1057.298805][T15596] usb 9-1: config 2 interface 191 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 1057.310284][T15596] usb 9-1: config 2 interface 191 altsetting 83 has a duplicate endpoint with address 0xA, skipping [ 1057.321692][T15596] usb 9-1: config 2 interface 191 altsetting 83 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1057.333375][T15596] usb 9-1: config 2 interface 191 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 1057.344891][T15596] usb 9-1: config 2 interface 191 altsetting 83 has a duplicate endpoint with address 0x3, skipping [ 1057.367431][T15596] usb 9-1: config 2 interface 191 has no altsetting 0 [ 1057.381996][T15596] usb 9-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=50.0e [ 1057.397217][T15596] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.418969][T15596] usb 9-1: Product: 힗媩뫷驪墨颓޾鬧頻䈓距툦ﵙꦉꅋ饒捶唻㚬퉍榹倕巹핞ꤴ䝥䭵츍༃朂泊榕鮛䢗퉹꩟찾䉰䯚䗄ⵡ觮跔当ᎀ啺逾䀸⺓瑦틓吒⮾뛖ﭰ⋤뙖畕릔逐䍭癪쐎歺苫㔄࣢㯟ↄ붞ꂧﺍ宑鲫Ť㾇讀꒙޽剳烫샎着 [ 1057.454938][T10194] usb 7-1: Using ep0 maxpacket: 8 [ 1057.463032][T15596] usb 9-1: Manufacturer: Я [ 1057.467707][T15596] usb 9-1: SerialNumber: 沲唄䍪떴䭤鎴蘶㫖ཱ緬傅폱㫿 [ 1057.482898][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4840'. [ 1057.498053][T10194] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 1057.509072][T10194] usb 7-1: config 2 has no interface number 0 [ 1057.518852][T10194] usb 7-1: config 2 interface 31 has no altsetting 0 [ 1057.528010][T10194] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1057.537606][T10194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.546007][T10194] usb 7-1: Product: syz [ 1057.550534][T10194] usb 7-1: Manufacturer: syz [ 1057.557180][T10194] usb 7-1: SerialNumber: syz [ 1057.682620][ T5716] corsair-cpro 0003:1B1C:0C10.0080: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1057.751203][T15596] usb 9-1: USB disconnect, device number 72 [ 1058.025615][T10194] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 1058.042849][T10194] usb 7-1: USB disconnect, device number 90 [ 1058.096205][ T5716] corsair-cpro 0003:1B1C:0C10.0080: probe with driver corsair-cpro failed with error -71 [ 1058.118704][T23374] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4841'. [ 1058.132216][ T5716] usb 4-1: USB disconnect, device number 31 [ 1058.157116][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4841'. [ 1058.418345][T23379] loop2: detected capacity change from 0 to 7 [ 1058.425764][T23379] loop2: [ 1058.428841][T23379] loop2: partition table partially beyond EOD, truncated [ 1058.634634][ T5716] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1058.657562][T23383] input: syz1 as /devices/virtual/input/input131 [ 1058.794385][ T5716] usb 9-1: Using ep0 maxpacket: 32 [ 1058.801170][ T5716] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1058.810806][ T5716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.822319][ T5716] usb 9-1: config 0 descriptor?? [ 1058.832049][ T5716] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1059.274529][T10194] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1059.437673][T10194] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1059.451779][T10194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.473769][T10194] usb 7-1: config 0 descriptor?? [ 1059.748965][T10194] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1059.845803][T23377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.856393][T23377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.948282][T23377] kvm: pic: non byte write [ 1059.959450][T23391] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4848'. [ 1059.982893][T10194] [drm:udl_init] *ERROR* Selecting channel failed [ 1060.027203][T10194] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1060.045915][T10194] [drm] Initialized udl on minor 2 [ 1060.064146][T10194] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1060.083173][T10194] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1060.098897][ T5688] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1060.108636][ T5716] gspca_sq930x: ucbus_write failed -71 [ 1060.115507][T10194] usb 7-1: USB disconnect, device number 91 [ 1060.121461][ T24] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1060.132862][ T5716] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 1060.141402][ T5688] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1060.172038][ T5716] usb 9-1: USB disconnect, device number 73 [ 1060.301412][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.322936][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1060.339334][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1060.351638][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1060.363364][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1060.380894][ T24] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1060.386200][T23409] loop2: detected capacity change from 0 to 7 [ 1060.390645][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1060.407942][T23409] loop2: [ 1060.411222][T23409] loop2: partition table partially beyond EOD, truncated [ 1060.432761][ T24] usb 4-1: Product: syz [ 1060.439054][ T24] usb 4-1: Manufacturer: syz [ 1060.455472][ T24] usb 4-1: SerialNumber: syz [ 1060.471668][ T24] usb 4-1: config 0 descriptor?? [ 1060.693877][ T24] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1060.709444][ T24] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1060.894752][T23406] TCP: TCP_TX_DELAY enabled [ 1060.908905][ T24] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1060.917531][ T24] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1060.931906][ T24] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1061.004144][T23421] vivid-002: ================= START STATUS ================= [ 1061.012682][T23421] vivid-002: RDS Tx I/O Mode: Controls [ 1061.022093][T23421] vivid-002: RDS Program ID: 32904 [ 1061.027797][T23421] vivid-002: RDS Program Type: 3 [ 1061.032812][T23421] vivid-002: RDS PS Name: VIVID-TX [ 1061.038982][T23421] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 1061.050181][ T5716] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1061.059334][T23421] vivid-002: RDS Stereo: true [ 1061.068525][T23421] vivid-002: RDS Artificial Head: false [ 1061.074214][T23421] vivid-002: RDS Compressed: false [ 1061.081272][T23421] vivid-002: RDS Dynamic PTY: false [ 1061.090238][T23421] vivid-002: RDS Traffic Announcement: false [ 1061.097287][T23421] vivid-002: RDS Traffic Program: true [ 1061.102952][T23421] vivid-002: RDS Music: true [ 1061.108112][T23421] vivid-002: ================== END STATUS ================== [ 1061.118552][ T24] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1061.135497][T15596] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1061.214412][ T5716] usb 9-1: Using ep0 maxpacket: 8 [ 1061.234483][ T5716] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1061.265425][ T5716] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.273560][ T5716] usb 9-1: Product: syz [ 1061.278344][ T5716] usb 9-1: Manufacturer: syz [ 1061.289777][ T5716] usb 9-1: SerialNumber: syz [ 1061.308379][T15596] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.309200][ T5716] usb 9-1: config 0 descriptor?? [ 1061.327096][T15596] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1061.343624][ T5716] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1061.347340][T15596] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1061.364256][T15596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1061.381013][T15596] usb 5-1: SerialNumber: syz [ 1061.808287][ T5716] gspca_sonixj: reg_r err -32 [ 1061.820060][ T5716] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 1061.931672][ T24] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1061.940877][T15596] usb 5-1: 0:2 : does not exist [ 1061.958784][ T24] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1061.990147][ T24] usb 4-1: USB disconnect, device number 32 [ 1062.055056][ T5359] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1062.096869][T15596] usb 5-1: USB disconnect, device number 30 [ 1062.754537][ T90] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1062.914503][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 1062.922326][ T90] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1062.945448][ T90] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.981963][ T90] usb 4-1: config 0 has no interface number 0 [ 1063.003139][ T90] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1063.018736][T23456] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4866'. [ 1063.024222][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.046459][ T90] usb 4-1: Product: syz [ 1063.053518][ T90] usb 4-1: Manufacturer: syz [ 1063.061178][ T90] usb 4-1: SerialNumber: syz [ 1063.072490][ T90] usb 4-1: config 0 descriptor?? [ 1063.091444][ T90] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1063.123026][ T90] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input132 [ 1063.294108][T23460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.326658][T23460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.974497][ T90] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1064.125092][ T90] usb 5-1: Using ep0 maxpacket: 32 [ 1064.132318][ T90] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1064.142162][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.152683][ T90] usb 5-1: config 0 descriptor?? [ 1064.162155][ T90] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1064.648241][ T10] usb 9-1: USB disconnect, device number 74 [ 1064.838079][T13544] usb 4-1: USB disconnect, device number 33 [ 1065.170788][T23467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.186598][T23467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.302120][T23467] kvm: pic: non byte write [ 1065.382085][ T90] gspca_sq930x: ucbus_write failed -71 [ 1065.395567][ T90] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1065.434128][ T90] usb 5-1: USB disconnect, device number 31 [ 1066.047489][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4874'. [ 1066.058540][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 1066.068292][T23483] netlink: 'syz.4.4874': attribute type 11 has an invalid length. [ 1066.083566][T23483] netlink: 'syz.4.4874': attribute type 2 has an invalid length. [ 1066.092520][T23483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4874'. [ 1066.827009][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1066.827025][ T29] audit: type=1326 audit(1778687906.449:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23501 comm="syz.4.4877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1066.910361][ T29] audit: type=1326 audit(1778687906.529:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23501 comm="syz.4.4877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1066.992662][ T29] audit: type=1326 audit(1778687906.529:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23501 comm="syz.4.4877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1067.052573][ T29] audit: type=1326 audit(1778687906.529:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23501 comm="syz.4.4877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1067.104365][ T29] audit: type=1326 audit(1778687906.529:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23501 comm="syz.4.4877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1067.129266][ T29] audit: type=1326 audit(1778687906.529:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23501 comm="syz.4.4877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1067.188194][ T29] audit: type=1326 audit(1778687906.819:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23501 comm="syz.4.4877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1067.214630][ T5359] usb 7-1: device descriptor read/64, error -110 [ 1067.221205][ T29] audit: type=1326 audit(1778687906.819:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23501 comm="syz.4.4877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb379ce59 code=0x7ffc0000 [ 1067.358366][T23516] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4880'. [ 1067.441607][T23518] fuse: Unknown parameter 'rootmodeQ00008)000000{/Jy_id' [ 1067.474643][ T5359] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1067.624418][ T5359] usb 7-1: device descriptor read/64, error -32 [ 1067.734699][ T5359] usb usb7-port1: attempt power cycle [ 1068.094499][ T5359] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1068.146041][ T5359] usb 7-1: device descriptor read/8, error -32 [ 1068.275495][ T5359] raw-gadget.2 gadget.6: failed to queue suspend event [ 1068.283504][ T5359] raw-gadget.2 gadget.6: failed to queue reset event [ 1068.356115][ T5359] raw-gadget.2 gadget.6: failed to queue resume event [ 1068.376283][ T90] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1068.402998][T23540] batman_adv: batadv0: Adding interface: dummy0 [ 1068.410253][T23540] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.436423][T23540] batman_adv: batadv0: Interface activated: dummy0 [ 1068.443176][T23542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4887'. [ 1068.452908][ T5359] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1068.475050][ C0] raw-gadget.2 gadget.6: ignoring, device is not running [ 1068.482533][ T5359] usb 7-1: device descriptor read/8, error -32 [ 1068.537959][ T90] usb 9-1: Using ep0 maxpacket: 32 [ 1068.546127][ T90] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1068.555634][ T90] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.567355][ T90] usb 9-1: config 0 descriptor?? [ 1068.581500][ T90] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1068.596126][ T5359] raw-gadget.2 gadget.6: failed to queue suspend event [ 1068.628087][ T5359] usb usb7-port1: unable to enumerate USB device [ 1069.024409][ T5716] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1069.074496][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1069.177286][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1069.187225][ T5716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1069.197148][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1069.207211][ T5716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1069.217434][ T5716] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1069.226818][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.235161][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1069.242022][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1069.251151][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1069.260912][ T5716] usb 4-1: config 0 descriptor?? [ 1069.266420][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.276861][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1069.289326][ T24] usb 5-1: config 1 has no interface number 0 [ 1069.295626][ T24] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1069.308801][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1069.317956][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.335189][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1069.488293][ T5716] hdpvr 4-1:0.0: unexpected answer of status request, len 0 [ 1069.495910][ T5716] hdpvr 4-1:0.0: device init failed [ 1069.501200][ T5716] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1069.533271][ T24] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1069.542502][ T24] snd_usb_pod 5-1:1.1: invalid control EP [ 1069.548514][ T24] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1069.555804][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1069.563247][ T24] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1069.599817][T23534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.609544][T23534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.683388][T23534] kvm: pic: non byte write [ 1069.717675][ T24] usb 4-1: USB disconnect, device number 34 [ 1069.790118][ T90] gspca_sq930x: ucbus_write failed -71 [ 1069.798783][ T90] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 1069.823540][ T90] usb 9-1: USB disconnect, device number 75 [ 1069.975290][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1070.504389][ T90] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1070.526866][T23432] raw-gadget.2 gadget.6: failed to queue disconnect event [ 1070.656526][ T90] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.674519][ T5716] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1070.682206][ T90] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1070.701503][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1070.712748][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1070.717357][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4904'. [ 1070.723623][ T90] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1070.751515][ T90] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1070.777545][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1070.785854][ T90] usb 4-1: Product: syz [ 1070.791234][ T90] usb 4-1: Manufacturer: syz [ 1070.797207][ T90] usb 4-1: SerialNumber: syz [ 1070.809122][ T90] usb 4-1: config 0 descriptor?? [ 1070.844652][ T5716] usb 9-1: Using ep0 maxpacket: 8 [ 1070.853011][ T5716] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1070.868127][ T5716] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.879544][ T5716] usb 9-1: Product: syz [ 1070.885549][ T5716] usb 9-1: Manufacturer: syz [ 1070.890690][ T5716] usb 9-1: SerialNumber: syz [ 1070.901519][ T5716] usb 9-1: config 0 descriptor?? [ 1071.101112][ T90] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1071.120295][ T5716] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1071.131136][ T90] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1071.169038][ T5716] usb write operation failed. (-71) [ 1071.199942][ T5716] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1071.231944][ T5716] dvbdev: DVB: registering new adapter (Terratec H7) [ 1071.253149][ T5716] usb 9-1: media controller created [ 1071.271353][ T5716] usb read operation failed. (-71) [ 1071.288400][ T5716] usb write operation failed. (-71) [ 1071.300779][T23596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.311986][ T90] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1071.322725][ T5716] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1071.339442][ T90] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1071.356137][ T5716] usb 9-1: USB disconnect, device number 76 [ 1071.364716][T23603] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1071.382456][ T90] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1071.458330][ T90] usb 4-1: USB disconnect, device number 35 [ 1071.881595][T23622] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4913'. [ 1071.904014][ T90] usb 5-1: USB disconnect, device number 32 [ 1071.917072][T23622] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4913'. [ 1072.017621][T23624] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1072.167823][T23635] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1072.334708][ T5359] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1072.494525][ T5359] usb 9-1: Using ep0 maxpacket: 32 [ 1072.504981][ T5359] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1072.519446][ T5359] usb 9-1: config 0 has no interface number 0 [ 1072.527141][ T5359] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1072.537204][ T10] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1072.550213][ T5359] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1072.565561][ T5359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.579073][ T5359] usb 9-1: Product: syz [ 1072.586111][ T5359] usb 9-1: Manufacturer: syz [ 1072.593695][ T5359] usb 9-1: SerialNumber: syz [ 1072.601632][ T5359] usb 9-1: config 0 descriptor?? [ 1072.616967][ T5359] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1072.634412][ T5359] em28xx 9-1:0.132: Video interface 132 found: [ 1072.720049][ T10] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 1072.728324][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.789009][ T10] usb 7-1: config 0 has no interface number 0 [ 1072.812764][ T10] usb 7-1: config 0 interface 205 has no altsetting 0 [ 1072.849969][ T10] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1072.874728][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.950039][ T10] usb 7-1: Product: syz [ 1072.960650][ T10] usb 7-1: Manufacturer: syz [ 1072.967290][ T10] usb 7-1: SerialNumber: syz [ 1072.984115][ T10] usb 7-1: config 0 descriptor?? [ 1073.016973][ T10] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1073.033714][ T5359] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 1073.055913][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1073.094047][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1073.109205][ T10] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1073.123594][ T10] usb 7-1: media controller created [ 1073.185405][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1073.227907][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1073.246843][ T10] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1073.307246][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input133 [ 1073.378141][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1073.400377][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1073.435477][ T10] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1073.459521][ T5359] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1073.517153][ T5359] em28xx 9-1:0.132: board has no eeprom [ 1073.564583][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1073.581405][ T10] dvb-usb: error while querying for an remote control event. [ 1073.624658][ T5359] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1073.647863][ T5359] em28xx 9-1:0.132: analog set to bulk mode. [ 1073.670242][ T10] em28xx 9-1:0.132: Registering V4L2 extension [ 1073.763472][T23631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.775813][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1073.821529][ T5359] dvb-usb: error while querying for an remote control event. [ 1073.847945][T23631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.857473][T23665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4925'. [ 1073.911519][ T10] em28xx 9-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1073.911770][ T5688] usb 9-1: USB disconnect, device number 77 [ 1073.951049][ T5688] em28xx 9-1:0.132: Disconnecting em28xx [ 1074.004761][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1074.031069][ T5359] dvb-usb: error while querying for an remote control event. [ 1074.118527][ T10] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 1074.125626][ T5716] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1074.147763][ T10] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 1074.175564][ T10] em28xx 9-1:0.132: No AC97 audio processor [ 1074.254439][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1074.272979][ T5359] dvb-usb: error while querying for an remote control event. [ 1074.280406][ T5716] usb 5-1: device descriptor read/64, error -71 [ 1074.307780][ T10] usb 9-1: Decoder not found [ 1074.332288][ T10] em28xx 9-1:0.132: failed to create media graph [ 1074.365247][ T10] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 1074.495562][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1074.510776][ T5359] dvb-usb: error while querying for an remote control event. [ 1074.521660][ T5716] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1074.587879][ T10] em28xx 9-1:0.132: Remote control support is not available for this card. [ 1074.628314][ T5688] em28xx 9-1:0.132: Closing input extension [ 1074.672447][ T5688] em28xx 9-1:0.132: Freeing device [ 1074.695411][ T5716] usb 5-1: device descriptor read/64, error -71 [ 1074.704358][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1074.718912][ T10] dvb-usb: error while querying for an remote control event. [ 1074.826045][ T5716] usb usb5-port1: attempt power cycle [ 1074.914406][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1074.920430][ T10] dvb-usb: error while querying for an remote control event. [ 1074.996153][ T5688] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1075.104965][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1075.112623][ T10] dvb-usb: error while querying for an remote control event. [ 1075.166659][ T5688] usb 9-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 1075.196023][ T5688] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.205644][ T5716] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1075.239690][ T5716] usb 5-1: device descriptor read/8, error -71 [ 1075.248841][ T5688] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1075.274807][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1075.287405][ T10] dvb-usb: error while querying for an remote control event. [ 1075.330113][ T24] usb 7-1: USB disconnect, device number 96 [ 1075.387683][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1075.414112][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.442544][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.457806][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.459904][ T5688] pwc: Failed to set LED on/off time (-71) [ 1075.476863][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.493136][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.507180][ T5716] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1075.507818][ T5688] pwc: send_video_command error -71 [ 1075.523872][ T5688] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1075.533556][ T5716] usb 5-1: device descriptor read/8, error -71 [ 1075.541263][ T5688] Philips webcam 9-1:127.0: probe with driver Philips webcam failed with error -71 [ 1075.557437][ T5688] usb 9-1: USB disconnect, device number 78 [ 1075.563240][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.600906][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.641078][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.645808][ T5716] usb usb5-port1: unable to enumerate USB device [ 1075.687076][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.712310][T23695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16614] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23695] [ 1075.784753][ T24] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1075.926189][ T24] usb 7-1: device descriptor read/64, error -71 [ 1076.052271][T23720] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4936'. [ 1076.094447][ T5688] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1076.194434][ T24] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1076.257546][ T5688] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1076.267432][ T5688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.276301][ T5688] usb 9-1: Product: syz [ 1076.280543][ T5688] usb 9-1: Manufacturer: syz [ 1076.285294][ T5688] usb 9-1: SerialNumber: syz [ 1076.291615][ T5688] usb 9-1: config 0 descriptor?? [ 1076.334869][ T24] usb 7-1: device descriptor read/64, error -71 [ 1076.445812][ T24] usb usb7-port1: attempt power cycle [ 1076.474393][T13544] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1076.626035][T13544] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1076.636269][T13544] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1076.646267][T13544] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1076.656714][T13544] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1076.665931][T13544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.674012][T13544] usb 4-1: Product: syz [ 1076.678367][T13544] usb 4-1: Manufacturer: syz [ 1076.682992][T13544] usb 4-1: SerialNumber: syz [ 1076.697512][T23729] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1076.708525][T23729] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1076.784503][ T24] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1076.805313][ T24] usb 7-1: device descriptor read/8, error -71 [ 1076.919516][T23710] fuse: Bad value for 'user_id' [ 1076.925932][T23710] fuse: Bad value for 'user_id' [ 1077.044711][ T24] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1077.065676][ T24] usb 7-1: device descriptor read/8, error -71 [ 1077.092786][ T5688] usb 9-1: Firmware version (0.0) predates our first public release. [ 1077.101285][ T5688] usb 9-1: Please update to version 0.2 or newer [ 1077.175408][ T24] usb usb7-port1: unable to enumerate USB device [ 1077.304444][ T90] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1077.456782][ T90] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1077.465988][ T90] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1077.480214][ T90] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1077.490048][ T90] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.498192][ T90] usb 5-1: Product: syz [ 1077.502587][ T90] usb 5-1: Manufacturer: syz [ 1077.507266][ T90] usb 5-1: SerialNumber: syz [ 1077.720867][ T90] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1077.731244][T13544] (unnamed net_device) (uninitialized): Assigned a random MAC address: 92:be:5d:2c:a2:61 [ 1077.757390][T13544] rtl8150 4-1:1.0: eth13: rtl8150 is detected [ 1077.767847][T13544] usb 4-1: USB disconnect, device number 36 [ 1077.920572][ T90] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1077.929427][ T90] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1078.322798][ T90] usb 5-1: invalid uac2 rates [ 1078.327757][ T90] usb 5-1: invalid uac2 rates [ 1078.333109][ T90] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1078.342334][ T90] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1078.522078][T23746] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4943'. [ 1078.693574][ T90] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1078.746626][ T90] usb 5-1: USB disconnect, device number 37 [ 1078.796665][ T6593] udevd[6593]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.873945][ T5688] usb 9-1: USB disconnect, device number 79 [ 1078.926253][T13544] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1079.134415][T13544] usb 7-1: Using ep0 maxpacket: 8 [ 1079.146880][T13544] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1079.160617][T13544] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1079.173329][T13544] usb 7-1: string descriptor 0 read error: -22 [ 1079.181162][T13544] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1079.206964][T13544] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1079.262932][T13544] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1079.312881][T13544] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1079.351609][T13544] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1079.392721][T13544] usb 7-1: media controller created [ 1079.457096][T13544] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1079.534499][T13544] zl10353_read_register: readreg error (reg=127, ret==0) [ 1079.673946][T13544] usb 7-1: USB disconnect, device number 101 [ 1079.958383][T23762] kvm: kvm [23759]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 1080.324752][ T5688] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1080.441325][T23780] loop2: detected capacity change from 0 to 7 [ 1080.460279][T23780] loop2: [ 1080.467329][T23780] loop2: partition table partially beyond EOD, truncated [ 1080.487636][ T5688] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1080.510509][ T5688] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1080.539480][ T5688] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1080.585137][ T5688] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1080.615567][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1080.652074][ T5688] usb 7-1: Product: syz [ 1080.669523][ T5688] usb 7-1: Manufacturer: syz [ 1080.683428][ T5688] usb 7-1: SerialNumber: syz [ 1080.915709][T23770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.940454][T23770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.207375][ T5688] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 102 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1081.229316][T23795] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4958'. [ 1081.318311][T23795] vlan2: entered allmulticast mode [ 1081.344491][T23795] gretap0: entered allmulticast mode [ 1081.734450][ T5688] usb 9-1: new full-speed USB device number 80 using dummy_hcd [ 1081.764397][T13544] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1081.928448][ T5688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1081.979347][ T5688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1081.993511][T13544] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1082.006741][ T24] usb 7-1: USB disconnect, device number 102 [ 1082.039321][T13544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.069267][ T24] usblp0: removed [ 1082.087435][T13544] usb 4-1: config 0 has no interface number 0 [ 1082.106563][T13544] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1082.141308][T13544] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1082.163299][ T5688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1082.182928][T13544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.199053][ T5688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1082.234410][T13544] usb 4-1: Product: syz [ 1082.246983][ T5688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1082.265929][T13544] usb 4-1: Manufacturer: syz [ 1082.282176][T13544] usb 4-1: SerialNumber: syz [ 1082.296317][ T5688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1082.322892][T13544] usb 4-1: config 0 descriptor?? [ 1082.365529][T13544] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1082.413065][T13544] dvb-usb: bulk message failed: -22 (3/0) [ 1082.458157][T13544] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1082.464574][ T24] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1082.508322][T13544] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1082.562086][T13544] usb 4-1: media controller created [ 1082.571470][ T5688] usb 9-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1082.592851][ T5688] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.603090][ T5688] usb 9-1: Product: syz [ 1082.610557][T13544] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.626551][ T24] usb 7-1: device descriptor read/64, error -71 [ 1082.658927][ T5688] usb 9-1: Manufacturer: syz [ 1082.669107][T13544] dvb-usb: bulk message failed: -22 (6/0) [ 1082.681773][ T5688] usb 9-1: SerialNumber: syz [ 1082.687568][T13544] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1082.710246][ T5688] usb 9-1: config 0 descriptor?? [ 1082.710857][T13544] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input134 [ 1082.744013][T13544] dvb-usb: schedule remote query interval to 150 msecs. [ 1082.761654][T13544] dvb-usb: bulk message failed: -22 (3/0) [ 1082.786141][T23814] syzkaller0: entered promiscuous mode [ 1082.796216][T13544] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1082.810824][T23814] syzkaller0: entered allmulticast mode [ 1082.823727][ T5688] ti_usb_3410_5052 9-1:0.0: TI USB 5052 2 port adapter converter detected [ 1082.883484][ T5688] ti_usb_3410_5052 9-1:0.0: missing endpoints [ 1082.898826][ T24] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1082.916895][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1082.939055][T13544] dvb-usb: error while querying for an remote control event. [ 1083.074445][ T24] usb 7-1: device descriptor read/64, error -71 [ 1083.114585][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1083.139319][T13544] dvb-usb: error while querying for an remote control event. [ 1083.199984][ T24] usb usb7-port1: attempt power cycle [ 1083.314598][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1083.321391][ T5359] dvb-usb: error while querying for an remote control event. [ 1083.504510][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1083.512545][ T5359] dvb-usb: error while querying for an remote control event. [ 1083.594554][ T24] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1083.625368][ T24] usb 7-1: device descriptor read/8, error -71 [ 1083.686633][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1083.693332][ T5359] dvb-usb: error while querying for an remote control event. [ 1083.865713][T15596] dvb-usb: bulk message failed: -22 (1/0) [ 1083.874428][T15596] dvb-usb: error while querying for an remote control event. [ 1083.885161][ T24] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1083.925269][ T24] usb 7-1: device descriptor read/8, error -71 [ 1084.034521][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1084.045688][ T24] usb usb7-port1: unable to enumerate USB device [ 1084.055700][ T5359] dvb-usb: error while querying for an remote control event. [ 1084.199682][T23823] loop2: detected capacity change from 0 to 7 [ 1084.224738][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 1084.233667][T23823] loop2: [ 1084.241369][T23823] loop2: partition table partially beyond EOD, truncated [ 1084.251800][ T5359] dvb-usb: error while querying for an remote control event. [ 1084.366288][ T30] INFO: task kworker/0:7:5717 blocked for more than 143 seconds. [ 1084.387230][ T30] Tainted: G L syzkaller #0 [ 1084.410515][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1084.430651][ T30] task:kworker/0:7 state:D stack:17856 pid:5717 tgid:5717 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1084.444543][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1084.458256][T13544] dvb-usb: error while querying for an remote control event. [ 1084.473579][ T30] Workqueue: usb_hub_wq hub_event [ 1084.495984][ T30] Call Trace: [ 1084.511305][ T30] [ 1084.529966][ T30] __schedule+0x1821/0x5740 [ 1084.547496][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1084.562633][ T30] ? wq_worker_sleeping+0x101/0x250 [ 1084.577219][ T30] ? __pfx___schedule+0x10/0x10 [ 1084.592577][ T30] ? schedule+0x90/0x360 [ 1084.612993][ T30] schedule+0x164/0x360 [ 1084.622237][ T30] schedule_preempt_disabled+0x13/0x30 [ 1084.629201][ T30] __mutex_lock+0x7f7/0x1550 [ 1084.634413][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1084.643123][ T30] ? __mutex_lock+0x608/0x1550 [ 1084.648164][T13544] dvb-usb: error while querying for an remote control event. [ 1084.655822][ T30] ? hub_event+0x21a2/0x4f30 [ 1084.661670][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1084.667217][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1084.680093][ T30] hub_event+0x21a2/0x4f30 [ 1084.685812][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1084.694721][ T30] ? __pfx_hub_event+0x10/0x10 [ 1084.699647][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1084.716408][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1084.739668][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1084.756305][ T30] process_scheduled_works+0xb5d/0x1860 [ 1084.767674][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1084.775004][ T30] ? assign_work+0x3d5/0x5e0 [ 1084.779941][ T30] worker_thread+0xa53/0xfc0 [ 1084.786017][ T30] kthread+0x388/0x470 [ 1084.790618][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1084.796637][ T30] ? __pfx_kthread+0x10/0x10 [ 1084.802079][ T30] ret_from_fork+0x514/0xb70 [ 1084.810240][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1084.818411][T13544] dvb-usb: bulk message failed: -22 (1/0) [ 1084.824487][ T30] ? __switch_to+0xc79/0x1410 [ 1084.825379][ T5688] usb 4-1: USB disconnect, device number 37 [ 1084.829240][T13544] dvb-usb: error while querying for an remote control event. [ 1084.849627][ T30] ? __pfx_kthread+0x10/0x10 [ 1084.855092][ T30] ret_from_fork_asm+0x1a/0x30 [ 1084.864024][ T30] [ 1084.869095][ T30] [ 1084.869095][ T30] Showing all locks held in the system: [ 1084.878920][ T30] 1 lock held by khungtaskd/30: [ 1084.883913][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1084.899982][ T30] 2 locks held by getty/5383: [ 1084.904768][ T30] #0: ffff888036ac60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1084.915093][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1084.926686][ T30] 7 locks held by kworker/1:3/5688: [ 1084.932058][ T30] #0: ffff888021ab1d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1084.943461][ T30] #1: ffffc9000431fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1084.957419][ T30] #2: ffff88802a9471d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1084.966453][ T30] #3: ffff88807b0e41d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 1084.975702][ T30] #4: ffff888044a531a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1084.986309][ T30] #5: ffffffff8f84b4e0 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2fa/0x610 [ 1084.996693][ T30] #6: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1085.008870][ T5696] kworker/1:5 (5696) used greatest stack depth: 14008 bytes left [ 1085.009079][ T30] 5 locks held by kworker/0:7/5717: [ 1085.021848][ T30] #0: ffff888021ab1d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1085.033256][ T30] #1: ffffc9000450fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1085.045412][ T30] #2: ffff88802bb561d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1085.054415][ T30] #3: ffff88802bba2568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1085.064503][ T30] #4: ffff88801d7b3160 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1085.074226][ T30] 6 locks held by kworker/u8:11/10693: [ 1085.081126][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 1085.091238][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1085.101104][ T30] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 1085.110888][ T30] #3: ffff88807c1b0ed8 (&bat_priv->forw_bat_list_lock){+...}-{3:3}, at: batadv_forw_packet_queue+0x33/0x240 [ 1085.122635][ T30] #4: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 1085.131736][ T30] #5: ffffffff9a65c290 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 1085.142127][ T30] 5 locks held by kworker/1:8/18507: [ 1085.147986][ T30] #0: ffff888021ab1d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1085.159461][ T30] #1: ffffc90003a5fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1085.171673][ T30] #2: ffff88802bbaf1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1085.180696][ T30] #3: ffff88802bbac568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1085.190731][ T30] #4: ffff88801d7b3160 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1085.200559][ T30] 4 locks held by kworker/u8:16/23496: [ 1085.206105][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1085.217885][ T30] #1: ffffc90004a8fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1085.230225][ T30] #2: ffff888036a90780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1085.240334][ T30] #3: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1085.251320][ T30] [ 1085.253684][ T30] ============================================= [ 1085.253684][ T30] [ 1085.262384][ T30] NMI backtrace for cpu 0 [ 1085.262402][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.262423][ T30] Tainted: [L]=SOFTLOCKUP [ 1085.262428][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.262437][ T30] Call Trace: [ 1085.262444][ T30] [ 1085.262452][ T30] dump_stack_lvl+0xe8/0x150 [ 1085.262475][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1085.262495][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1085.262515][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1085.262538][ T30] sys_info+0x135/0x170 [ 1085.262554][ T30] watchdog+0xfd3/0x1030 [ 1085.262585][ T30] ? watchdog+0x1c9/0x1030 [ 1085.262613][ T30] kthread+0x388/0x470 [ 1085.262636][ T30] ? __pfx_watchdog+0x10/0x10 [ 1085.262657][ T30] ? __pfx_kthread+0x10/0x10 [ 1085.262679][ T30] ret_from_fork+0x514/0xb70 [ 1085.262701][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1085.262718][ T30] ? __switch_to+0xc79/0x1410 [ 1085.262750][ T30] ? __pfx_kthread+0x10/0x10 [ 1085.262773][ T30] ret_from_fork_asm+0x1a/0x30 [ 1085.262808][ T30] [ 1085.262815][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1085.303676][ T5688] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1085.308157][ C1] NMI backtrace for cpu 1 [ 1085.308191][ C1] CPU: 1 UID: 0 PID: 5688 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.308213][ C1] Tainted: [L]=SOFTLOCKUP [ 1085.308219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.308230][ C1] Workqueue: usb_hub_wq hub_event [ 1085.308251][ C1] RIP: 0010:enqueue_task_fair+0xd29/0x2aa0 [ 1085.308275][ C1] Code: 00 48 8b 03 48 8d 58 f0 48 85 c0 48 0f 44 d8 48 8b 44 24 30 80 3c 28 00 4c 8b 74 24 08 74 08 4c 89 f7 e8 3a 1e 99 00 4d 8b 36 <49> c7 c5 ff ff ff ff 4d 85 f6 74 3c 4d 8d 7e 58 4c 89 f8 48 c1 e8 [ 1085.308287][ C1] RSP: 0018:ffffc90000a08bc0 EFLAGS: 00000046 [ 1085.308300][ C1] RAX: 1ffff110170e75eb RBX: ffff8880316b1f40 RCX: dffffc0000000000 [ 1085.308312][ C1] RDX: ffffffff81994ad0 RSI: ffff8880b873af48 RDI: ffff88803588dcd0 [ 1085.308324][ C1] RBP: dffffc0000000000 R08: ffff88803588dce7 R09: 0000000000000000 [ 1085.308335][ C1] R10: ffff88803588dcd8 R11: ffffed1006b11b9d R12: ffff8880b873af00 [ 1085.308346][ C1] R13: 1ffff110170e75e2 R14: ffff8880320dbe00 R15: ffff8880b873af10 [ 1085.308358][ C1] FS: 0000000000000000(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 1085.308371][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1085.308382][ C1] CR2: 00007efc3bfea2f8 CR3: 0000000078c64000 CR4: 00000000003526f0 [ 1085.308397][ C1] Call Trace: [ 1085.308403][ C1] [ 1085.308416][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1085.308436][ C1] enqueue_task+0x75/0x410 [ 1085.308455][ C1] ttwu_do_activate+0x1cc/0x660 [ 1085.308479][ C1] try_to_wake_up+0x724/0x1380 [ 1085.308503][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1085.308523][ C1] hrtimer_wakeup+0x4e/0x60 [ 1085.308543][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 1085.308569][ C1] hrtimer_interrupt+0x44b/0x950 [ 1085.308600][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1085.308620][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1085.308640][ C1] [ 1085.308646][ C1] [ 1085.308652][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1085.308668][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1085.308687][ C1] Code: 0f 84 44 ff ff ff e8 92 29 21 00 fb eb 44 e8 8a 29 21 00 e8 d5 2c 04 0a 4d 85 f6 74 94 e8 7b 29 21 00 fb 48 c7 c7 a0 f1 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 cb 18 [ 1085.308700][ C1] RSP: 0018:ffffc9000431f160 EFLAGS: 00000283 [ 1085.308713][ C1] RAX: ffffffff81a49855 RBX: ffffffff81a496cf RCX: 0000000000100000 [ 1085.308723][ C1] RDX: ffffc9001d004000 RSI: 0000000000052ade RDI: ffffffff8e94f1a0 [ 1085.308734][ C1] RBP: ffffc9000431f210 R08: ffffffff9030b6f7 R09: 1ffffffff20616de [ 1085.308745][ C1] R10: dffffc0000000000 R11: fffffbfff20616df R12: 0000000000000000 [ 1085.308756][ C1] R13: 000000000000005d R14: 0000000000000200 R15: 1ffff92000863e30 [ 1085.308768][ C1] ? vprintk_emit+0x2cf/0x560 [ 1085.308787][ C1] ? vprintk_emit+0x455/0x560 [ 1085.308810][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1085.308832][ C1] _printk+0xdd/0x130 [ 1085.308854][ C1] ? __pfx__printk+0x10/0x10 [ 1085.308874][ C1] ? __free_frozen_pages+0x749/0xd30 [ 1085.308897][ C1] dvb_usb_device_exit+0x2a8/0x360 [ 1085.308915][ C1] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1085.308934][ C1] ? usb_disable_interface+0x31d/0x350 [ 1085.308952][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1085.308973][ C1] usb_unbind_interface+0x26e/0x910 [ 1085.308995][ C1] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1085.309017][ C1] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1085.309036][ C1] device_release_driver_internal+0x4d9/0x870 [ 1085.309059][ C1] bus_remove_device+0x455/0x570 [ 1085.309089][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 1085.309112][ C1] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1085.309134][ C1] device_del+0x527/0x8f0 [ 1085.309154][ C1] ? __pfx_device_del+0x10/0x10 [ 1085.309176][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1085.309201][ C1] usb_disable_device+0x3d4/0x8d0 [ 1085.309221][ C1] usb_disconnect+0x32f/0x990 [ 1085.309240][ C1] hub_event+0x1cc9/0x4f30 [ 1085.309278][ C1] ? __pfx_hub_event+0x10/0x10 [ 1085.309294][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1085.309313][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1085.309328][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1085.309344][ C1] process_scheduled_works+0xb5d/0x1860 [ 1085.309373][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1085.309391][ C1] ? assign_work+0x3d5/0x5e0 [ 1085.309408][ C1] worker_thread+0xa53/0xfc0 [ 1085.309435][ C1] kthread+0x388/0x470 [ 1085.309453][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1085.309468][ C1] ? __pfx_kthread+0x10/0x10 [ 1085.309486][ C1] ret_from_fork+0x514/0xb70 [ 1085.309504][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1085.309519][ C1] ? __switch_to+0xc79/0x1410 [ 1085.309541][ C1] ? __pfx_kthread+0x10/0x10 [ 1085.309560][ C1] ret_from_fork_asm+0x1a/0x30 [ 1085.309584][ C1] [ 1085.310243][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1085.310263][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.310287][ T30] Tainted: [L]=SOFTLOCKUP [ 1085.310298][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.310309][ T30] Call Trace: [ 1085.310318][ T30] [ 1085.310326][ T30] vpanic+0x56c/0xa60 [ 1085.310348][ T30] ? __pfx___schedule+0x10/0x10 [ 1085.310370][ T30] ? __pfx_vpanic+0x10/0x10 [ 1085.310397][ T30] panic+0xc5/0xd0 [ 1085.310415][ T30] ? __pfx_panic+0x10/0x10 [ 1085.310436][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1085.310467][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1085.310491][ T30] watchdog+0x102c/0x1030 [ 1085.310521][ T30] ? watchdog+0x1c9/0x1030 [ 1085.310550][ T30] kthread+0x388/0x470 [ 1085.310571][ T30] ? __pfx_watchdog+0x10/0x10 [ 1085.310592][ T30] ? __pfx_kthread+0x10/0x10 [ 1085.310615][ T30] ret_from_fork+0x514/0xb70 [ 1085.310636][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1085.310655][ T30] ? __switch_to+0xc79/0x1410 [ 1085.310678][ T30] ? __pfx_kthread+0x10/0x10 [ 1085.310701][ T30] ret_from_fork_asm+0x1a/0x30 [ 1085.310734][ T30] [ 1085.316547][ T30] Kernel Offset: disabled