last executing test programs: 14m0.288379446s ago: executing program 32 (id=2178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0xba, 0x0, [{0x400000b4, 0x0, 0xffffffff}]}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x284680, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) r6 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2000000, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '*-/'}}, {@pcr={'pcr', 0x3d, 0x2}}, {@obj_user={'obj_user', 0x3d, '/\\,.(!\x87'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}, 0x0, 0x0, &(0x7f0000000580)="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") r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) (async) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000001580)={@desc={0x1, 0x0, @desc3}, 0x10, r7, '\x00', @d}) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) (async) r9 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r9, 0x11}) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r9, 0x1}) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x9, 0x0, 0x4, r9, 0x5}) (async) r10 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d10, 0x0, 0x51c, 0x0) (async) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r11, &(0x7f00000029c0)=[{0x0}, {&(0x7f0000000540)='A', 0x1}], 0x2) (async) syz_usb_disconnect(r10) 13m1.123790587s ago: executing program 4 (id=2614): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x40, 0xe, 0x14, {0x14, 0x21, "30fc87c18059554872b7eb4351a29dfbf23d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000200)={0x0, 0xf, 0xf1, {0x5, 0xf, 0xf1, 0x3, [@generic={0xdf, 0x10, 0x4, "b60a1df41050920471eda77deb65af9ed679127a98e21e0030f32504bf96859f15ea7dd91ce1acdeca27eebf1ba7c8c28cd71234e38cb01a73d0950f2981130363328d18b1d2f9c659fdf5f2cc965f36df51323cb861ffffe4cf1a5c258bcce72ff58e958603207758ce1524d129d0f509e444ca2b0e27dae8b05f919f83a624a87e6ac3076ee058e4bed6d6444f91ce3512bb76f9396433413110867337c5c3fff4f214e0b71e2f9b9eccdf7c2dad03d600da91e7d817d8712e93e18cf5f6ea8979d99d25467ec789ea5962d855b0afef10256d303fe4ddf50eaca0"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfd, 0x2, 0x8001}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x7, 0x7, "7b77ab36", "bc7949f8"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0xd6, 0x3, 0x2, 0x7, 0xfb77}}}, &(0x7f0000000a40)={0x84, &(0x7f00000003c0)={0x40, 0x17, 0xef, "b434faad375355f5d367bdddb44e74f8be9c2bd9973522c3d568073271214ed460a89f8c60dea2544478979204fb54abb3d5c0f4281dc0274690b3e22b6d80e84a3f5b91c47e876d7e9e610b67c25c718863ac7621db9b0bf7d97d2fee40394557f2750530e862b76f58e2570fc64114cbbff855f630ad68ea9cd62f5e683cbc8e3634d0b7b9d8f0b6bec7b5b2c7dc3940ecce97b6cb62b2489f81d3f8cef95b77526d18010d56a06782313ca4fd04992e860e9845408baa6ebdb109b61da1749ea1ef63ae9d4b24f8339e70af7af85b0420e5edf76ded0f7a2c99c3e45dce469f7c8d32034530c2dbd916a219a812"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0xb, 0x2, '>2'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x8000}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @random="0f08b63a6817"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "c79f"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x5a}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000500)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 13m0.380691369s ago: executing program 4 (id=2618): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 13m0.191189724s ago: executing program 4 (id=2619): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0c1a7", 0x8}], 0x3}, 0xfffffff0}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)="14b48e5b08fd6c6c9c03031067a0f6194cf12963721ad167aa845aa732510bdfc2795ea40719d18c35e44298992aafa50921ae2de7ce25d85f96044894250e8a684d06c37ca05fddbafd651f2f0ab91dadf0ed44f422cf", 0x40}, {&(0x7f0000000080)="59058e8bf0cc944add2bc5e92c2a324f8f63fd70006d7d", 0xffffffaa}], 0x3}}], 0x2, 0x44051) 12m59.438663032s ago: executing program 0 (id=2622): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x534d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x10, 0x1, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x7, 0x0, {0xa, 0x25, 0x25, 0xc9d, 0x0, 0x1}}}}}}}}]}}, 0x0) r0 = memfd_create(&(0x7f0000000540)='\xef\x15\xe9F\x91N<\xd6\boSaW\x00', 0x5) lseek(r0, 0x8000000000000006, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x7f) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x100005, 0xe8e8, 0xfffffffa}]}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x4044) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m59.222743532s ago: executing program 4 (id=2625): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}], 0xa, "e265ba00a1bda42297b04ea14a439fadc54e32c58fd10aab898bdfecd5c03bd983383fb952e3a4938617535e20c49bb97bc6110b90c06d29c7b87a5a1154cace1b9f3d86f92a4440e47bfa"}, 0x6c) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x40000000, 0x0, 0x1f, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 12m59.046910335s ago: executing program 4 (id=2627): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2b, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000001) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000005c0)={0x0, 0x9, 0x3, &(0x7f0000000000)={0xf1, "ee48b71ad5608a40000000ca09b87daf01570d51948976635ea48b3f5b1878e461"}}) unlinkat(r2, &(0x7f0000000700)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001540)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r5, 0xaf02, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 12m58.768569683s ago: executing program 3 (id=2629): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x98, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xaec9, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x5c, 0x16, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x100, 0x3800000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @random="167b82d83a2f"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x800, 0x1800}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0xc1}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x98, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xaec9, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x5c, 0x16, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x100, 0x3800000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @random="167b82d83a2f"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x800, 0x1800}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc) (async) 12m57.29947421s ago: executing program 0 (id=2632): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40cf82223eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 12m56.55517802s ago: executing program 0 (id=2633): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) listen(r0, 0xfff) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000020601000800000000000000050000020500010007000000050005000a000000050004000300000005000100070000000500050001000000050005000c0000000500040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) 12m55.74952165s ago: executing program 3 (id=2637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x7, 0x0, 0x4, 0x0, 0x0, 0x1, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x10, 0xe90}, 0x94) 12m54.094102215s ago: executing program 3 (id=2640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400fffffff50000000a0000040900010073797a310000000064000480340001800c0001007061796c6f616400240002800800014000000005080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 12m53.231267312s ago: executing program 3 (id=2642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004180001000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xfe5, &(0x7f0000001600)=""/4069, 0x40f00, 0x2}, 0x94) 12m53.032301205s ago: executing program 1 (id=2643): pwrite64(0xffffffffffffffff, 0x0, 0xffffffffffffff15, 0x239c1317) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x50, 0x37, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f410005141004046eb456019374598fa80cc99925c6e5b00a10030001000015"], 0x1, [{0x0, 0x0}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) r2 = socket(0x10, 0x803, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x20, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r12}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000180000000005950f3e08003e"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0x4, 0x47}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000055}, 0x4) 12m52.925137392s ago: executing program 0 (id=2644): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 12m52.758760693s ago: executing program 3 (id=2645): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4603090700a00000000000000002003e00f9ff8000bf0300000000000040000000000000000301000000000000350d000001003800020078000700000051e57464050000000100000000000000bb8d0000000000002d0c000000000000af000000000000000300000000000000080000000000000001000000b8a100000700000000000000c4000000000000000200000000000000050000000000000000000000000000000100010000000000e716601e052a64faf0b886f2117feac41afefe33f1f77b65540e366354c902755bd904347349f6f3692b99761b0bbe08778e2d6a861b10c12e341d719b16b432248ec3b5110dfeb3"], 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x0, 0xbd6, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x39, 0x57, 0x98, 0x0, 0x12d1, 0x6f3f, 0xd63f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc4, 0x2, 0x13, 0x0, 0x0, 0x2c, "", [{{0x9, 0x4, 0x93, 0x7f, 0xf, 0xff, 0x2, 0x5, 0xf8, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x98, 0x0, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x1, 0x40, 0xdb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x9}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0xb, 0x6, 0x4, [@generic={0x2d, 0x23, "720540a110aa5e22618058a9bf96586e3f2eea09caf5d92c0f6907cc0de29cca27a42dc0ca63086c3204dd"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xff, 0x2c, 0xf8}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xf9, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xac, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x1, 0x5, 0x8}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x7f, 0x5}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0xfe, 0x10, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x25, 0xd125}, @generic={0x37, 0x22, "cd2176878b08a12f74953fcc914654324603eed93b1f65f6bedaf98713d384bd919843543775cc9b25b8c0c11d4623e1743bb1c708"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x8, 0x6, 0x0, [@generic={0x6d, 0xf, "fca9b5ee549470b1b926a36b941fc8efd0ed0cb8c309c753ecb32fea0765c2e71fe6236eb947d563d4f3b9154c6ff86d52f8967e88db1a982ba6ebbdf242436c584ef5c00169fb5a958af9b79b03b2be65450e20336ecb16844e1fe7149ae7a0920e9f7264554283ce0b76"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x3, 0x5, 0xc, [@generic={0xa4, 0x3, "bae49d95bb2b06948d00103f638dbc4abb6456b5849f18bd17ffb9c2ee245731205f55457f8c1438db98690e11931299b052f3ba86188894d850a6196fb502a3890ab84c48de9656ed8e8903ec0ed63b0cffa9f2559d60242015d721c19f16b726b87fe71cfde4242b4911e64de9ebd95cc8b7988a1ebb15de7af007740151cccc28e152708c0b7cc4bec3c5cbf4bf94d93c4252aed68f8da0b12fba7a12486af44d"}, @generic={0x7b, 0xd, "373670fe3f1b53537e7ba06af980a3c167dced838da384c568117791dd719ee1712b93f9e0cc04a07240b0d4a06b1ed91840820faae2f6eedaa298c6220e6fe29cb0d9b98822a1a08c442a55808fc8766a7ddec0bbb4a09b39c4e48e8ff92bd278b7822b94365180b86db90da5e2bddb2cbc7156c7b1e26010"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0xae, 0x31, [@generic={0xf6, 0xe, "8a14e32f46a77316e5564d6eaa276662ae65297541ba304dc298074a22c932a0f1b25c2c5307a2059161d8e5dedbd8deab3e1d96a3de812e2e933e8334b0d67cd7fcc114e8e83c0394d590375160fa797eddecb2084e61978f0d12d640ccb604541714ac6fb1e0582b4510cf6118019a949290f412df533bc50941d30f111bb3a6462dfbfcb6725d91917d2b1b3fe5ca25cdcc799155e1ffb3270f2b888638745ed7ef65b07b7cfddb8c6d627db35f4db45aa08ef31d26e17196618dad26af1619c12e0580917e20faafbc6c32b0a414474aba8d526acb2744f0f21cc3fc9074ed34bd9a771097e61a8948f3f893e5501d3470c9"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xe, 0x7, 0x0, [@generic={0xb6, 0x4, "2efa82ec0999b0bbf362bfa48c03fe05ebb1194e8ce93a8649a0aa744b51ab39c264e6a75872f213b376154c2e2ab5783181214ec49bbd44aecc7d1531caeb8bc60d4c21d915e8b6e80708e0d9c0df8a6e9738006773a0f0d61a2c38d54b86690610ab2d2ccd463c2ce3a678ddddfeb9af047da1ccf1cb26fa2e974da1fd4d833e8672e3eeb826bba989e892976d50eabb3bf679be011813d9258e926977f8e6704a1c488f22d700016aec91108d32387a34f012"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xd9, 0xf}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x7f, 0x7, 0x8, [@generic={0x56, 0x5, "33bae449834a12b8f2b58604a70a188e0b7a1ff6b0a5fa01a199a3cb901dbfaa7e78211a2a38fd12aeb3f0a5163f9379cf8f7b15e2caafe74cc147a41cb4a613fe701294166399f117e8e91cc6e9dad69fab155b"}, @generic={0x16, 0x21, "46f1c1cfc3afad5cd83e01711c5bbbcc007c4a64"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0xf7, 0x10, 0x9}}]}}, {{0x9, 0x4, 0xfc, 0x2d, 0xe, 0x8, 0x3, 0x50, 0x8, [@hid_hid={0x9, 0x21, 0x1ff, 0x53, 0x1, {0x22, 0xf93}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8ab8"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x2, 0x2}, [@obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0xfa, 0x24, 0x13, 0x8, "d2fa6bc694638edc73e3db460fc23207a46831eaf6d7e1b92929d8c6863d6a25bb261fce1a4157a894196857afd449d767a92b834f5342342b57203250397fa0882ec5f4b15d06d67b353107f539057385f55f4103a1cfb3a1a6b380ae8c2af3267ab1ca7094b53f380104c4476e3ad4842db5c133f03b72a68c7eea79b79bffa14f204d7faae88ed9c59dc1395bae5022996cfcf30864557dbc6fac23f2bd812098dcde66542b6c5cb8f0e18cfcc2aa3816b1efe0104103fe1b599bfcb72e67d13490af0891089c93c176137b0c20762215005f6435f0bf1c049ba842664e5b7a6f3c7fb2c8b6405a7b8e3695290f8688835e61bde4"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x6, 0x6, 0x7f, 0x27}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x8}]}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0xde, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf}, @generic={0xbb, 0x23, "ab57729104e69d7827c06b888da5bcc527f73445c0170955008624cdd315190785bf9c766f5ada56377f2cb8bd1e96e6a776baf5e37cbf1b896499ad4ba49c50c1e7237678ab986f1c3a5a76d9891fac1bafe3ae7a9410363e3c9f089f4cd08029a0adf9472003cbee529f91d80ed107c8d8ca2d07edd9f1f84712131c81bed5539409a44e8e54903ac32868f9b424861dba1f02f13b6669e9d9c188e24ca7bc431e35ebe8e69c5d16adeeb6ec75137ec74b4ef08f5d16cbbc"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x7f, 0xf6, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xd, 0x4d, 0x87}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x6, 0x9, 0x1}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x6, 0xc2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2}, @generic={0x95, 0x5, "2e19fe9af1be55ed314925c8125d8c731505c3933bb9143dd3946bc36aafe211b56ba20c55fd7c987e132c16ca9572798a92202079251f747fadab138cdc9643a97a298622984aa247a0d77dea136f99ee0226035ed78c51eeaab6b1c87484dff9c9ad7e9964bf1a8e80f349b21199084045b499d183f8a1c8a4954cab792725b8afabc0bbb572ed859c2a243b1c4717a34498"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x2, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x3, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9}, @generic={0x26, 0x9, "19ede7f2ad16e974b0f1e08f260560d0decd73b8941059e40240ae5a77481708993aa847"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xd2, 0x3, 0x2, [@generic={0x9, 0x30, "834950240c4b02"}, @generic={0xfd, 0x8, "90e3ea4f2be4369079fb5226d09292c34b6bc6d089a447a7bf0aefdc2904943ec79caff9da87a161b79f0113a3090da8e2102d0cdb7a92bc65ccd154f085eadd2e0e7f256d0209725f6beedef0a05ad321f941d229d2338cb6c25f1cbe22ddec1527ad9ddde23afe57101ba398c8d667a7d76538994bd65dabea8a149dea0225f69c86ffdc6783020cc306013357b559af53df25b610a50dd7dedf65a8931030b7c95362982bc758885e317fc31bb84500142b95d3e441f001757426cec3b5d9a273aeef53430ac34b5e500f33d3722a9d2a548609522234de2f434b71d23e4e0b3ca569104335b1dcc52167c3e4cf3257841bb70c3d92a920e3be"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x5, 0x4, [@generic={0xa3, 0x21, "e8137e235cfdb94d6b5245a8f066d828a98b075edbeb3c0d03c4f4ff8f3b8721d5f9dac37e540525dd8545f77365049788429a5bbcb0ac849be68e872992e8faab9fe45441c2c036b3ba2137a9101087a3c7ef2121bddb04acd5a98062b256565af08a77d1a28c1c1244bb0d0d3fb3a7ba42480027022032adcc7ebc7420dd5183d38efb6ccdb3eaa6a94f11b338926c20fe2e0e087ab246a07579fe97af8c59a5"}, @generic={0x56, 0xc, "88fa16e84cc985d833e70fc5dc90e57da4f1941f168a51496bddba4cc67e01c9e40297def2a0b1ec5bb152f53b8552b8b8b8afc218ed2975d1f925855637cc3333d353f6ca2616b77f5e65c0aefc65d3fc90a27e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x40, 0x7, 0x7e}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xb1, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xe7, 0x3, 0x1, [@generic={0xd7, 0x23, "b5023174809e9caa6e5ccef4ff4bc4a5b8cda0596aad06c60e339024a893cd9b0cf043790957bb1911c66e1634300af8b5a311da01aab821ce9e8a200c85d3c96240b6e91b89e39119d45a4a4372f5b0075a10eb922ba5e4aa5cf4324fa7450349172209da546d0416d370feafd74383fc5913e927fbcb5d9bf7e9adf669781569fb8a21b11fff0b98a76eba3fa9871e43237125448ab55ddf4d848f120b21af6c006f586c2b5a3e1f1f271a78f0f255bf494eb4c37188ea9ae0d928a0548bbfdaf1d7e543bb5313a697efc9beb6442948855342cf"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x0, 0xd2, 0x35, [@generic={0xcf, 0x7, "f68a3c772edb0c12978fa52450952466aeb610662d23d30145c99f9e2f19e77b8dd70c24cf3e6f1e4418c86f83efbdc9cc4726df013c7bc31dc57124ba81ca57302dec4666c52e0d5131da4fcdd3f06461e997e7079f063ab1abce1701f01cd50efb913b7ab697e2ef61534dd6540bc4c969a94fcd6c9bc560c9a370f39bbe79afd217342b7ee5950dd2f9bfef5148510a50fe41047cb0893b8dd1cafad18920debeebc38c7e41e2e56281b2bd0d0a1d526593f17e13f6d8ceea3266196826b96ed40bfa3ebc1e6e34cff2c66a"}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x200, 0xff, 0x6, 0x80, 0x10, 0x8}, 0x11f, &(0x7f0000001140)=ANY=[@ANYBLOB="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"]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$can_j1939(r0, &(0x7f0000001400)={&(0x7f0000000280)={0x1d, 0x0, 0x3, {0x0, 0xf0, 0x2}, 0xfe}, 0x18, &(0x7f00000013c0)={&(0x7f0000001300)="981290ee8f661624df92171bc9176d70044f908b8bbf94836a7baaa204e195d365bb3888d60c58b88e42c4cfc6381a64b8744f05dd5667105d9db0a01150fc989e3a735bf2eb95c78aa13ddd89b2a006b15fe4ec10a84a66165407a51dc0e90e4e7ef2915a10e9ba4194f5cfbacfdf5ec4be141b5aaceb5893511e154b7cec37c5a82894728239791068", 0x8a}, 0x1, 0x0, 0x0, 0x60008810}, 0x20000051) syz_emit_ethernet(0xd4, &(0x7f00000024c0)=ANY=[@ANYBLOB="0000000000004f3ba0235e5f88a2"], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x1ff}, 0x16, 0x1) creat(&(0x7f0000001280)='./file0\x00', 0x8) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f00000002c0)={0x1, [{0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x1, 0x10, 0x4da0, &(0x7f0000000100)='\x00\x00'}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x2, 0x0, 0x80000006, 0x0}, {0x1, 0x0, 0x8, 0xfffffffffffffffd}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x5da2, 0x0}, {0x1, 0x6c0, 0xd1a5, &(0x7f0000000000)="acb70601c6d04c3b296e9709003c9b0b7852f6f325de028c9d033ce32327e880bd1395e489d272548e50abdcb452688d34e431f7c70ba339a2c47fd82d18ce26de2edbb439416440e5161fa8877dc4d2b4277d750170d8e1adae507270ca9026bfdbe147b40e55007facc0ce3b14a7a61a13e5972908c8b4f671d60f00bcef42f5005f29fb447b55a121495372e25985331ab9979244f5209fc9531dbc795104c3b13bcf35e780bae12e7491cd5ad78f24ef0ecc59f4bc3b0f6760b8cf1a404c82fcd29c0c3891e0c50a68b5de7c0e5fdfd666ebfbed6fac"}, {0x2, 0x0, 0x9a93, 0x0}, {0x3, 0x0, 0x818, 0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4603090700a00000000000000002003e00f9ff8000bf0300000000000040000000000000000301000000000000350d000001003800020078000700000051e57464050000000100000000000000bb8d0000000000002d0c000000000000af000000000000000300000000000000080000000000000001000000b8a100000700000000000000c4000000000000000200000000000000050000000000000000000000000000000100010000000000e716601e052a64faf0b886f2117feac41afefe33f1f77b65540e366354c902755bd904347349f6f3692b99761b0bbe08778e2d6a861b10c12e341d719b16b432248ec3b5110dfeb3"], 0xb0) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) syz_usb_connect(0x0, 0xbd6, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x39, 0x57, 0x98, 0x0, 0x12d1, 0x6f3f, 0xd63f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc4, 0x2, 0x13, 0x0, 0x0, 0x2c, "", [{{0x9, 0x4, 0x93, 0x7f, 0xf, 0xff, 0x2, 0x5, 0xf8, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x98, 0x0, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x1, 0x40, 0xdb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x9}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0xb, 0x6, 0x4, [@generic={0x2d, 0x23, "720540a110aa5e22618058a9bf96586e3f2eea09caf5d92c0f6907cc0de29cca27a42dc0ca63086c3204dd"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xff, 0x2c, 0xf8}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xf9, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xac, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x1, 0x5, 0x8}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x7f, 0x5}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0xfe, 0x10, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x25, 0xd125}, @generic={0x37, 0x22, "cd2176878b08a12f74953fcc914654324603eed93b1f65f6bedaf98713d384bd919843543775cc9b25b8c0c11d4623e1743bb1c708"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x8, 0x6, 0x0, [@generic={0x6d, 0xf, "fca9b5ee549470b1b926a36b941fc8efd0ed0cb8c309c753ecb32fea0765c2e71fe6236eb947d563d4f3b9154c6ff86d52f8967e88db1a982ba6ebbdf242436c584ef5c00169fb5a958af9b79b03b2be65450e20336ecb16844e1fe7149ae7a0920e9f7264554283ce0b76"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x3, 0x5, 0xc, [@generic={0xa4, 0x3, "bae49d95bb2b06948d00103f638dbc4abb6456b5849f18bd17ffb9c2ee245731205f55457f8c1438db98690e11931299b052f3ba86188894d850a6196fb502a3890ab84c48de9656ed8e8903ec0ed63b0cffa9f2559d60242015d721c19f16b726b87fe71cfde4242b4911e64de9ebd95cc8b7988a1ebb15de7af007740151cccc28e152708c0b7cc4bec3c5cbf4bf94d93c4252aed68f8da0b12fba7a12486af44d"}, @generic={0x7b, 0xd, "373670fe3f1b53537e7ba06af980a3c167dced838da384c568117791dd719ee1712b93f9e0cc04a07240b0d4a06b1ed91840820faae2f6eedaa298c6220e6fe29cb0d9b98822a1a08c442a55808fc8766a7ddec0bbb4a09b39c4e48e8ff92bd278b7822b94365180b86db90da5e2bddb2cbc7156c7b1e26010"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0xae, 0x31, [@generic={0xf6, 0xe, "8a14e32f46a77316e5564d6eaa276662ae65297541ba304dc298074a22c932a0f1b25c2c5307a2059161d8e5dedbd8deab3e1d96a3de812e2e933e8334b0d67cd7fcc114e8e83c0394d590375160fa797eddecb2084e61978f0d12d640ccb604541714ac6fb1e0582b4510cf6118019a949290f412df533bc50941d30f111bb3a6462dfbfcb6725d91917d2b1b3fe5ca25cdcc799155e1ffb3270f2b888638745ed7ef65b07b7cfddb8c6d627db35f4db45aa08ef31d26e17196618dad26af1619c12e0580917e20faafbc6c32b0a414474aba8d526acb2744f0f21cc3fc9074ed34bd9a771097e61a8948f3f893e5501d3470c9"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xe, 0x7, 0x0, [@generic={0xb6, 0x4, "2efa82ec0999b0bbf362bfa48c03fe05ebb1194e8ce93a8649a0aa744b51ab39c264e6a75872f213b376154c2e2ab5783181214ec49bbd44aecc7d1531caeb8bc60d4c21d915e8b6e80708e0d9c0df8a6e9738006773a0f0d61a2c38d54b86690610ab2d2ccd463c2ce3a678ddddfeb9af047da1ccf1cb26fa2e974da1fd4d833e8672e3eeb826bba989e892976d50eabb3bf679be011813d9258e926977f8e6704a1c488f22d700016aec91108d32387a34f012"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xd9, 0xf}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x7f, 0x7, 0x8, [@generic={0x56, 0x5, "33bae449834a12b8f2b58604a70a188e0b7a1ff6b0a5fa01a199a3cb901dbfaa7e78211a2a38fd12aeb3f0a5163f9379cf8f7b15e2caafe74cc147a41cb4a613fe701294166399f117e8e91cc6e9dad69fab155b"}, @generic={0x16, 0x21, "46f1c1cfc3afad5cd83e01711c5bbbcc007c4a64"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0xf7, 0x10, 0x9}}]}}, {{0x9, 0x4, 0xfc, 0x2d, 0xe, 0x8, 0x3, 0x50, 0x8, [@hid_hid={0x9, 0x21, 0x1ff, 0x53, 0x1, {0x22, 0xf93}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8ab8"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x2, 0x2}, [@obex={0x5, 0x24, 0x15, 0x3}, @mdlm_detail={0xfa, 0x24, 0x13, 0x8, "d2fa6bc694638edc73e3db460fc23207a46831eaf6d7e1b92929d8c6863d6a25bb261fce1a4157a894196857afd449d767a92b834f5342342b57203250397fa0882ec5f4b15d06d67b353107f539057385f55f4103a1cfb3a1a6b380ae8c2af3267ab1ca7094b53f380104c4476e3ad4842db5c133f03b72a68c7eea79b79bffa14f204d7faae88ed9c59dc1395bae5022996cfcf30864557dbc6fac23f2bd812098dcde66542b6c5cb8f0e18cfcc2aa3816b1efe0104103fe1b599bfcb72e67d13490af0891089c93c176137b0c20762215005f6435f0bf1c049ba842664e5b7a6f3c7fb2c8b6405a7b8e3695290f8688835e61bde4"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x6, 0x6, 0x7f, 0x27}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x8}]}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0xde, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf}, @generic={0xbb, 0x23, "ab57729104e69d7827c06b888da5bcc527f73445c0170955008624cdd315190785bf9c766f5ada56377f2cb8bd1e96e6a776baf5e37cbf1b896499ad4ba49c50c1e7237678ab986f1c3a5a76d9891fac1bafe3ae7a9410363e3c9f089f4cd08029a0adf9472003cbee529f91d80ed107c8d8ca2d07edd9f1f84712131c81bed5539409a44e8e54903ac32868f9b424861dba1f02f13b6669e9d9c188e24ca7bc431e35ebe8e69c5d16adeeb6ec75137ec74b4ef08f5d16cbbc"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x7f, 0xf6, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xd, 0x4d, 0x87}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x6, 0x9, 0x1}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x6, 0xc2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2}, @generic={0x95, 0x5, "2e19fe9af1be55ed314925c8125d8c731505c3933bb9143dd3946bc36aafe211b56ba20c55fd7c987e132c16ca9572798a92202079251f747fadab138cdc9643a97a298622984aa247a0d77dea136f99ee0226035ed78c51eeaab6b1c87484dff9c9ad7e9964bf1a8e80f349b21199084045b499d183f8a1c8a4954cab792725b8afabc0bbb572ed859c2a243b1c4717a34498"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x2, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x3, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9}, @generic={0x26, 0x9, "19ede7f2ad16e974b0f1e08f260560d0decd73b8941059e40240ae5a77481708993aa847"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xd2, 0x3, 0x2, [@generic={0x9, 0x30, "834950240c4b02"}, @generic={0xfd, 0x8, "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"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x5, 0x4, [@generic={0xa3, 0x21, "e8137e235cfdb94d6b5245a8f066d828a98b075edbeb3c0d03c4f4ff8f3b8721d5f9dac37e540525dd8545f77365049788429a5bbcb0ac849be68e872992e8faab9fe45441c2c036b3ba2137a9101087a3c7ef2121bddb04acd5a98062b256565af08a77d1a28c1c1244bb0d0d3fb3a7ba42480027022032adcc7ebc7420dd5183d38efb6ccdb3eaa6a94f11b338926c20fe2e0e087ab246a07579fe97af8c59a5"}, @generic={0x56, 0xc, "88fa16e84cc985d833e70fc5dc90e57da4f1941f168a51496bddba4cc67e01c9e40297def2a0b1ec5bb152f53b8552b8b8b8afc218ed2975d1f925855637cc3333d353f6ca2616b77f5e65c0aefc65d3fc90a27e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x40, 0x7, 0x7e}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xb1, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xe7, 0x3, 0x1, [@generic={0xd7, 0x23, "b5023174809e9caa6e5ccef4ff4bc4a5b8cda0596aad06c60e339024a893cd9b0cf043790957bb1911c66e1634300af8b5a311da01aab821ce9e8a200c85d3c96240b6e91b89e39119d45a4a4372f5b0075a10eb922ba5e4aa5cf4324fa7450349172209da546d0416d370feafd74383fc5913e927fbcb5d9bf7e9adf669781569fb8a21b11fff0b98a76eba3fa9871e43237125448ab55ddf4d848f120b21af6c006f586c2b5a3e1f1f271a78f0f255bf494eb4c37188ea9ae0d928a0548bbfdaf1d7e543bb5313a697efc9beb6442948855342cf"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x0, 0xd2, 0x35, [@generic={0xcf, 0x7, "f68a3c772edb0c12978fa52450952466aeb610662d23d30145c99f9e2f19e77b8dd70c24cf3e6f1e4418c86f83efbdc9cc4726df013c7bc31dc57124ba81ca57302dec4666c52e0d5131da4fcdd3f06461e997e7079f063ab1abce1701f01cd50efb913b7ab697e2ef61534dd6540bc4c969a94fcd6c9bc560c9a370f39bbe79afd217342b7ee5950dd2f9bfef5148510a50fe41047cb0893b8dd1cafad18920debeebc38c7e41e2e56281b2bd0d0a1d526593f17e13f6d8ceea3266196826b96ed40bfa3ebc1e6e34cff2c66a"}]}}]}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x200, 0xff, 0x6, 0x80, 0x10, 0x8}, 0x11f, &(0x7f0000001140)=ANY=[@ANYBLOB="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"]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendmsg$can_j1939(r0, &(0x7f0000001400)={&(0x7f0000000280)={0x1d, 0x0, 0x3, {0x0, 0xf0, 0x2}, 0xfe}, 0x18, &(0x7f00000013c0)={&(0x7f0000001300)="981290ee8f661624df92171bc9176d70044f908b8bbf94836a7baaa204e195d365bb3888d60c58b88e42c4cfc6381a64b8744f05dd5667105d9db0a01150fc989e3a735bf2eb95c78aa13ddd89b2a006b15fe4ec10a84a66165407a51dc0e90e4e7ef2915a10e9ba4194f5cfbacfdf5ec4be141b5aaceb5893511e154b7cec37c5a82894728239791068", 0x8a}, 0x1, 0x0, 0x0, 0x60008810}, 0x20000051) (async) syz_emit_ethernet(0xd4, &(0x7f00000024c0)=ANY=[@ANYBLOB="0000000000004f3ba0235e5f88a2"], 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x1ff}, 0x16, 0x1) (async) creat(&(0x7f0000001280)='./file0\x00', 0x8) (async) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f00000002c0)={0x1, [{0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x1, 0x10, 0x4da0, &(0x7f0000000100)='\x00\x00'}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x2, 0x0, 0x80000006, 0x0}, {0x1, 0x0, 0x8, 0xfffffffffffffffd}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x5da2, 0x0}, {0x1, 0x6c0, 0xd1a5, &(0x7f0000000000)="acb70601c6d04c3b296e9709003c9b0b7852f6f325de028c9d033ce32327e880bd1395e489d272548e50abdcb452688d34e431f7c70ba339a2c47fd82d18ce26de2edbb439416440e5161fa8877dc4d2b4277d750170d8e1adae507270ca9026bfdbe147b40e55007facc0ce3b14a7a61a13e5972908c8b4f671d60f00bcef42f5005f29fb447b55a121495372e25985331ab9979244f5209fc9531dbc795104c3b13bcf35e780bae12e7491cd5ad78f24ef0ecc59f4bc3b0f6760b8cf1a404c82fcd29c0c3891e0c50a68b5de7c0e5fdfd666ebfbed6fac"}, {0x2, 0x0, 0x9a93, 0x0}, {0x3, 0x0, 0x818, 0x0}]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 12m52.584437957s ago: executing program 0 (id=2646): socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x40, 0x7, 0x8000, 0xfffffffc, 0x47, 0x4, 0x8, 0x7, r2}, 0x20) 12m52.222870128s ago: executing program 4 (id=2647): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x100) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x33, 0x0, @fd, 0x3, 0x0, 0x0, 0x10, 0x1, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000a00)={0xa, 0x3ff, 0x0, 0x0, 0x8}, 0x1}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) userfaultfd(0x1) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0xe, 0x18c6}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x34, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0xf2, 0xb}, [@NDA_VLAN={0x6, 0x5, 0x6}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x34}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) r10 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r10, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740a1bd000004000680"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000040000014000400ff0100000000000000000000000000010c0002800500010000000000440002800c000280050001000800000006000340d4e91a4b2c00018014000300000000000000000000000000000000dab4000400fe8000000000000000000000000000aa0800074000000000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 12m51.410479171s ago: executing program 5 (id=2648): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r1 = add_key(&(0x7f0000000800)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001380)="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", 0x559, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r2, 0x11}, &(0x7f0000000140)=ANY=[], 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1e, 0xfffffffc, @mcast2}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1e, 0xfffffffc, @mcast2}, 0x1c) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) (async) close(r0) 12m50.979295166s ago: executing program 5 (id=2649): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x700, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2d, {0x9, 0x0, 0x200001, 0x0, 0x0, 0x400}}) 12m50.275525788s ago: executing program 1 (id=2650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x7f7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r1, &(0x7f0000000180)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0xff6a}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) 12m50.093253291s ago: executing program 5 (id=2651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0xfffc, 0x0, 0x1, 0x53f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) 12m49.93524345s ago: executing program 1 (id=2652): syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000209"], 0x0) syz_emit_ethernet(0x96, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200040086dd6018232500602c00fe80000000000000000000000c0000bbfe8000000000000000000000000000aa890a02"], 0x0) 12m49.680843837s ago: executing program 1 (id=2653): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r4, &(0x7f0000002480)=""/4096, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a09457"], 0x0}, 0x0) syz_usb_connect$midi(0x5, 0x38, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@delchain={0x64, 0x65, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xd}, {0xa, 0x4}, {0x3, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_MASK={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4572}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xffffffff}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xb}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x48084) bind$packet(r1, &(0x7f0000000180)={0x11, 0xfa, r3, 0x1, 0x4, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000d1a7000100feffffff000000000008"], 0x38}}, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000003c0)={[{0x8, 0x3, 0x9, 0x4, 0x5, 0x1b, 0x1, 0xcd, 0x8, 0x1, 0x9, 0x8, 0x9}, {0x10001, 0x9, 0x1, 0x8, 0x81, 0xff, 0x7, 0x3, 0x80, 0xfd, 0xc, 0x3}, {0x5, 0x7, 0xf1, 0x9, 0x40, 0xff, 0x3, 0x7, 0x3, 0x3, 0x0, 0xf, 0x9c}], 0x5}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m49.5478674s ago: executing program 3 (id=2654): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x402, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x6}, {0xfff1, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x10004005) munlockall() madvise(&(0x7f00000c4000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r8, @ANYBLOB="8d234678927a1873b3befa8cc2effe9e295034666cac4a054be87ae99388bc6661a48a3a2529b8e27d7fd69339ec93a5b5a8ce60ba9bfae3cff8b350211c6cc46e1f4872686873d8bd0b62c25b0c20ecb1d3e653a39ff1363e317fed2c245b5716738600cfb112545172e80cbff2cd3d64491cb5482bc783322beda92f983ccdd1ad59902003c040de15606d8a39ab24f5d90fd9acf5a6af1d770cce46d05e4b192b69fa4e2212da3212e5350768d361288aebb8838b8c669ac49132fac961e6291baf675702679f3543cdd7ac"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 12m49.342511571s ago: executing program 5 (id=2655): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x4040020) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0xc, r4, 0x1, 0x2}, 0x14) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x21000000}, 0x0) 12m45.770711319s ago: executing program 1 (id=2656): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e80300002020000000000000000000f5"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x0) 12m45.401609509s ago: executing program 5 (id=2657): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000000000000000fffd", @ANYRES32, @ANYBLOB="01000000020000001c0012000c"], 0x3c}}, 0x0) 12m44.918853016s ago: executing program 1 (id=2658): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000fc40f2043612000000000001090224"], 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xd, &(0x7f00000008c0)=@string={0xd, 0x3, "f3b53076a5df5bb67233e0"}}, {0x0, 0x0}, {0x2, &(0x7f0000000a00)=@string={0x2}}, {0x0, 0x0}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x40400d0) 12m44.875975613s ago: executing program 0 (id=2659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) socket$kcm(0x2, 0x8, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x158, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x158, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {}, 0x1c, 0x11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0x110, 0xd0}, {0x28}}}}, 0x378) 12m44.773473416s ago: executing program 5 (id=2660): epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) socket(0x28, 0x1, 0x7) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000b00)={0x0, 0x2, 0x3010, 0x2, 0x3}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r5, r6, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x21, &(0x7f00000001c0), 0x1, 0x40}) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x1000000, 0x55, 0x0, r4}, &(0x7f0000000380)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_ublk_add_dev(r4, r8, r5, r6, &(0x7f0000000540)={0x2e, 0x8, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x8003, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) getrlimit(0xf, &(0x7f0000000000)) r10 = fsmount(0xffffffffffffffff, 0x0, 0xfc) ioctl$SNDRV_PCM_IOCTL_UNLINK(r10, 0x4161, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 12m29.503328567s ago: executing program 33 (id=2647): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x100) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x33, 0x0, @fd, 0x3, 0x0, 0x0, 0x10, 0x1, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000a00)={0xa, 0x3ff, 0x0, 0x0, 0x8}, 0x1}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) userfaultfd(0x1) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0xe, 0x18c6}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x34, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0xf2, 0xb}, [@NDA_VLAN={0x6, 0x5, 0x6}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x34}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) r10 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r10, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740a1bd000004000680"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000040000014000400ff0100000000000000000000000000010c0002800500010000000000440002800c000280050001000800000006000340d4e91a4b2c00018014000300000000000000000000000000000000dab4000400fe8000000000000000000000000000aa0800074000000000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 12m29.16604755s ago: executing program 34 (id=2659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) socket$kcm(0x2, 0x8, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x158, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x158, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {}, 0x1c, 0x11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0x110, 0xd0}, {0x28}}}}, 0x378) 12m28.611112789s ago: executing program 35 (id=2658): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000fc40f2043612000000000001090224"], 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xd, &(0x7f00000008c0)=@string={0xd, 0x3, "f3b53076a5df5bb67233e0"}}, {0x0, 0x0}, {0x2, &(0x7f0000000a00)=@string={0x2}}, {0x0, 0x0}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x40400d0) 12m28.300662262s ago: executing program 36 (id=2660): epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) socket(0x28, 0x1, 0x7) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000b00)={0x0, 0x2, 0x3010, 0x2, 0x3}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r5, r6, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x21, &(0x7f00000001c0), 0x1, 0x40}) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x1000000, 0x55, 0x0, r4}, &(0x7f0000000380)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_ublk_add_dev(r4, r8, r5, r6, &(0x7f0000000540)={0x2e, 0x8, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x8003, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) getrlimit(0xf, &(0x7f0000000000)) r10 = fsmount(0xffffffffffffffff, 0x0, 0xfc) ioctl$SNDRV_PCM_IOCTL_UNLINK(r10, 0x4161, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 12m28.039472719s ago: executing program 37 (id=2654): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x402, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x6}, {0xfff1, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x10004005) munlockall() madvise(&(0x7f00000c4000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r8, @ANYBLOB="8d234678927a1873b3befa8cc2effe9e295034666cac4a054be87ae99388bc6661a48a3a2529b8e27d7fd69339ec93a5b5a8ce60ba9bfae3cff8b350211c6cc46e1f4872686873d8bd0b62c25b0c20ecb1d3e653a39ff1363e317fed2c245b5716738600cfb112545172e80cbff2cd3d64491cb5482bc783322beda92f983ccdd1ad59902003c040de15606d8a39ab24f5d90fd9acf5a6af1d770cce46d05e4b192b69fa4e2212da3212e5350768d361288aebb8838b8c669ac49132fac961e6291baf675702679f3543cdd7ac"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 10.454512818s ago: executing program 9 (id=5331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xab0}, [@ldst={0x7, 0x3, 0x2, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa00}, 0x94) 10.279377062s ago: executing program 6 (id=5333): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, 0x0) 10.279008433s ago: executing program 9 (id=5334): r0 = socket(0x2, 0x80805, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xfde2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010100"], 0x1c}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) 8.816688074s ago: executing program 9 (id=5338): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_usb_connect(0x0, 0x61, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) r1 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2d0e00) r2 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r3 = io_uring_setup(0x7fd, &(0x7f0000000080)={0x0, 0xed43, 0x10000, 0x3, 0x1f9, 0x0, r2}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x9, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) writev(r1, &(0x7f00000033c0)=[{&(0x7f0000000340)="7911e0b785cfe06b506424e201dd38db098daf8367cf5afae31051c923197d7558f7ecd84ea11cf3dc9a5d53523c1ae332b02fb899e07f0751f692071c7154ba69bbc7b25a35977212f9c0e46bd1f92248426115ba6caf5006b065ef9e8554d8574e828f758951da414b963fd69d4940d2ea4b0d0d2e7981b875cfc26597e9e0a289a52155c7fb0ec94e91fff501362458c59bda5f25f345c5c6f2c734e53c17ca0e6da52ab4a6f58006af0e8c9efc123315f43bb5e8cb039588866803c1a7817baeb2a6f93f", 0xc6}, {0x0}], 0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700", 0xd) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r7 = fsopen(&(0x7f00000001c0)='hpfs\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r12, {0xd, 0x7}, {0x8, 0x1}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x44080) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\\\xea\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000269000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x2, 0x3) sendmsg$inet(r4, 0x0, 0x40000) 8.27530478s ago: executing program 8 (id=5341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty, 0x3}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000269000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x2, 0x3) sendmsg$inet(r4, 0x0, 0x40000) 6.988290866s ago: executing program 9 (id=5343): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000001600)={0x100080000, 0x0, 0x0, &(0x7f0000000300), {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x5, &(0x7f0000000040)=0x4000000ff9, 0xf) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3]}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x6cb9, 0xffffffff, 0x7, 0xffffffff, 0xffffffff, 0x0, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xfffff7ff, 0xffffffff, 0xffffe001, 0x2, 0xffffffff]], '\x00', [{0xd, 0x14, 0x0, 0x0, 0x1}, {0x9, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x0, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x1, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0xd0a2}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) socket$netlink(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x9, r1, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc)=0x8002, 0x5, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x34fffffe) 6.17216653s ago: executing program 2 (id=5346): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000480)={{r0, &(0x7f0000000040)='}{(::+*\x00', 0x220600, &(0x7f0000000080)={@align=0x1, {0xeb, 0x0, 0x7fff, 0x1000}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}, 0x1, &(0x7f0000000440)=[{0x1, 0x23cfe415, &(0x7f0000000140)='.)', &(0x7f0000000340)="d24acac2e271dd15356f8f4b0272fc7892f388298824703253355f9a31fb284ad1ff923e07262d9baeed235c2e957cfc7308a58959b6162f88543130d3a0fc47bb0d4b7c7decd5e778d0ac31cfc82cb529e2702c62e37768c8670ed680db63c27fd473858de9d01418d34fc1b5cf2a171de590ae465f48e9eba38217f252786c2a0faaed5a066acaceed8d6845e6057e68ea44d76230cd1b4abf05e39c9952b2ffc3c29ddd98406d090dc13ac37412c587d34cd6cb3c3f791e37bd223e32149faff17f778416dd17ca89d59377a5e5c1d1c12271321b092edf90f860081931c6352f92da", 0xe4, 0x2}]}) 5.911253831s ago: executing program 9 (id=5347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x9, 0x3, 0xfffffffe}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000080)={0xfffffff7, 0x3, 0x9, 0x0, 0xfffffffa}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) r5 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) wait4(r5, 0x0, 0x40000000, &(0x7f0000000000)) 5.208991656s ago: executing program 2 (id=5349): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="05170000fffe0002140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00B'], 0x44}, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0) 5.043545181s ago: executing program 2 (id=5350): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000120"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 4.801038223s ago: executing program 6 (id=5351): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, r3, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000000009) clock_getres(0xfffffffffffffffb, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x4000) 4.745016123s ago: executing program 2 (id=5352): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x0, 0xff, 0x7fff7ffc}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) clock_gettime(0x7, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_clone(0x220ec180, 0x0, 0xd2, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000800619f676b635b80000000000000000000000000000050fa01c8ceded855ef482c25d570da2878a81eb0c4407e7316b8a71d2d31211af6af03310aed8b2103b6757d4d0b73e8971fcc189e6dd21"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1b, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x40, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000002240)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r8, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_usb_connect(0x0, 0x83, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500200502440012015f17639010203010902710001270800050904b4f502399df16009050c1008000209090905030440000445004d316a595e9ac2de93cd510ea8864157e196175916f611dcb988a831d12e9d3867350cb30322ef94565e7091"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 3.686862042s ago: executing program 6 (id=5353): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r2 = syz_usb_connect$uac3(0x0, 0xc8, &(0x7f0000000100)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x10, 0x499, 0x500d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x3, 0x20, 0x0, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x13, 0x79f}, [@selector_unit={0x9, 0x24, 0xc, 0x6, 0x4, "d67d8e46"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0xdedd, 0x4, 0x8}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1034, 0x7, 0x7, "53b1a3509915100d89"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x1, "d852e1fc22"}]}, {{0x9, 0x5, 0x1, 0x9, 0x100, 0xc, 0x4b, 0xfb, {0xa, 0x25, 0x25, 0x1, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x6, 0x5b, 0x6, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x1, 0x8, 0x7, "7f45", "8fd407"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x2, 0x8, {0xa, 0x25, 0x25, 0x7, 0xb, 0x8001}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xf7, 0xd, 0xfc, 0xff, 0xad}, 0x19, &(0x7f0000000280)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0xdf, 0xf01e, 0xb0e0, [0x3f0f, 0xff0000]}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c3f}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x408}}, {0xc5, &(0x7f0000000340)=@string={0xc5, 0x3, "4209ea1e8d8627b8e603a80990779c83aa396c86a5de580083f31291394a31af9cae05fe1a5974dce2d31b2893cec46ffe1a08c1e62d818c538d80ad9db02fd7510f1ccf213d7f6fe568cb29f26bbc282a572a7cc232a16811760f50b62554d130ca367c81374a62fee6f6b06df4396b5a8d83ce3c99e4dc219dc2bd8d1f2b203830bfd8e641d2e269ea15df86744c890800e96643fd7efdd22f8d3b8c8578f7866add846c427215e23d57ba5cbd2101e350bc600f342a1fdc73ec6ddfe40362c491f1"}}]}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002140000", 0xfe60) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000000d40)={0xb24, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xaf8, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1d}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "baae4cc5a06166640dbcc019b99cd61ac8e973d3a10ce8b490a15b184efd97d693c72176124eb31dd2f4b6eeacb78be682b4f44e133ced98de65ccc83941d501269da37cffa4faf85514149e8b6d7a5dcb31a1494435032b8b40c9af5af8e402aa04262208033abad27d"}, @NFTA_SET_ELEM_EXPRESSIONS={0x27c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x224, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x214, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x8000}, @NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x4}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x9}, @NFTA_DYNSET_EXPR={0x40, 0x7, 0x0, 0x1, {{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_DYNSET_EXPRESSIONS={0x158, 0xa, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x38, 0xa, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1e}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffff81}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, {0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x110, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "b21d438664b75831dc5828fdbc07cabeb3d62f41021c06f00229042c9c0c18d8670d1026fb112ab9d600235dabf713ef8526d9ca92d92a889c856a3f453984fd680ee275a4bd4c5ec9c55b4587eed88e085ffc37df0a5b409d2cc097dfe37592961faa6b5689777fa15f596a1987f4abd73337ced32f5e8d481617134d78421a3a0607745379507e230120ba7d153c01e7c7bd91ff27888f87d299b1c6779b09e6f0b14860c50f88d78e2404c833c3191ccae2ff1c2e22"}, @NFTA_DATA_VALUE={0x1f, 0x1, "7e37667bd09ad0f4153ba08f6bfe68972262d95b76d8e719b05678"}, @NFTA_DATA_VALUE={0x2f, 0x1, "6110016eb5c21084b25d98e42bfcd2c054c92eb95e1c07043c390a4fc631b089c6fe7a1dfb9d371a878b46"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4000000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x280, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "a9c676944980fdc561c4eab1884a8eb3faadbfac2da7858ab5249d61d4e0a590b2abe095ae8f97f0b3bf6186f3e38e5ea3f557d0a1d23af242089b371c4f0f3bc186e68fcc3c92c9e096fa6388638f85101818bf27ef5a178441133c394b935cf00da9184e74aa15467783f3cea49023fc9a5d21c5de9b9680e51c347cfc84e6aefc80b66aae50082d5a1f2db9a9888768146622a28e45a829abeb71daf110f30b0d9da4bf25c3a4"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "3fd79f00d0e7abced0f6608611c68f9f2b4bf1bb2bdf27a0de675e024bf0d851f679e976c916ddc9b3d667f88747338381dea062b0db300a6300f00565002e3c6322c44d17fa19992c99a866dda40d579ae78f804e80cd5ed905b0f5deca791e6b152bc3afebbb6848aba248a30b898475ba3fe6183b1dd2e76d"}, @NFTA_DATA_VALUE={0xcf, 0x1, "24bee48c93145894ae2f12ae8565687362dd82c660b8664dcc74248944186b5c07df264c29414e4992c59bc37aca990f3200070a74c08cbc15395400de2240ae206f805323b5b80d9d06bf5645c1bc79ac32f9120ac380670e34167bd0ddac06b3d3fbaf368a99441686fe95fa2e4757af19328099a02c5dd5dc09a6ff1dbe97de1ad98f2f6fa59bb205a512dccbaac8907a782e6bcf4f43f132d0bbfce9aea84f81c30ec75d389ccc4078607000b2e9d5a9d6815af412b08a08a096b2e5633a87be17aab1770ce09429fe"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x350, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7c2a6c722a6222e37d424a14664c9da8cd"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1115004527aecfaa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xe3, 0x1, "25c33c7e852d9240bb36a9bd564f1e16ed406e9e876218538d93c65f828fb96496a1b059a7b3f58b9c8b8bbb7878d7568cadd5f9fc769fb3035ea28a2247546a8f9ed31707e34f5c9d3c73eeca450c2b25239614fa7c04eadcd219ab168a7620554f4ea8f232589f16e132b45731085076c23b28500fc9e25574dcd630f78661650b8083729353e764d3b9b53ac3c210a6d1febd321f3fc606fc1f2d06be64f49b9e7c70df4dc83a77ab2c148f52a5f901233fc8238357f973101d1bd284e12113f518e0dbcfc096e463ae80c8842b1ad6df21aa9652be618e7f74fc2db33d"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0xb24}, 0x1, 0x0, 0x0, 0x48}, 0x20000000) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="20310100002074fae163651d506e232f95c2cbd8cc316b183af67e4a39747b3495d744adfb6ec5bf0765a725d25d7dfcfa837e9ab637b7be038692ade83667a5994e0d5a8eb4864b1a91dd455d6a04fec467fef9e0db11a724679e020000000b916428885c351962a4ce7b"], 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000840)={&(0x7f00000007c0)=[{0xcd, 0x2000, 0xe9, &(0x7f0000000500)="9533bd064785d6a4b8d28368f2b06af5b52c9f36225a99e96860eafcb50a4faf44ac8fa53c417c6ab18d67ec07e520621dd1b11cff68c43120c13e6adc9762bbe6e2e8ebe58ee1a368b2249cff2f1ca2039547e60919266408968297a4874db8cdee7d9d77f6eb5c4b614ca1d8c46d411ab6b4077ef577e605398c647e71d5c18792fe8624782b59aae9021fac114c69d251471265cf1968f39624adf5cdd39c3763ab666e3b8ee1dc4bd166a648aad552606958a5381190a4b8bc10b0a3edfffcfa1f887091671d9b7c72d77221f7ab3719a9a6cdb40332939e5c77d5522494263b71a282bd369f1d"}, {0x6, 0x4000, 0x89, &(0x7f0000000600)="30c9ec3e9eda712bbf54b3a16043343a28c28385d6a281323f8c48acb91752318bc3e1c1e950471873a7733b593277de9143a7bfaf0913a34bbe4ecb0ea7f8c9d543ca331d21519d86d0bcc584a7a79cf450ed993a15c0684538b4e259879fe8ed842e8bf979078fcdf0b90a789742a7559a52d2db8ec2caaae3ccc86b828753c8050762ecc2c12e14"}, {0x1, 0x1010, 0x34, &(0x7f00000006c0)="11ead8a1c86879ed082fdae18881121ccdec45e49af9caa3d21e2d59e7bd9b9ed2596983eb2c7438ad0fe209365b41e6274531ad"}, {0xd, 0x4001, 0x23, &(0x7f0000000700)="8891ab32463ebd8d3004103cab9b4b0b60096aaec079b9ae553876a582347e3d8227f5"}, {0xff, 0x400, 0x56, &(0x7f0000000740)="783d606b2f662246c84cec968d6354f7cc208c28d55419b356a906b26bee905cbb9433e0731b9bdfbb8579a447253dfecd91739cbf4e48afe0313d9092dc61d51e51da6b71e9a00c768da556b2f3ec297184831c5941"}], 0x5}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x249fdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x0, 0x3}}}}]}, 0x48}}, 0x0) write(r0, &(0x7f0000000200)="7472616e73706f72743d6c6f6f702c6e716e3d6e716e2e323031342d30382e6f72672e6e766d657870726573732e6469736391766572788d7af0897a6c5d0a", 0x3f) 2.85586843s ago: executing program 8 (id=5354): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}, 0x7ffffffe}, 0x0) 2.646138057s ago: executing program 8 (id=5355): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'fo\x00', 0x11, 0x10000004, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x10000, 0x1cb, 0x29, 0x12d58}}, 0xfeec) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) sendto$packet(r8, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a80000810000a8880000990000", 0x20, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r9, 0x1, 0xc, 0x6, @local}, 0x14) (async) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x294}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10002, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000010101030000000000000000020000000c00198008000100ad0400001800018014000180080003"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCSISO7816(r12, 0xc0285443, &(0x7f0000000200)={0x5, 0x9, 0x6, 0x8, 0x1}) 2.435237771s ago: executing program 9 (id=5356): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0x2, 0xfa11}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000140), 0xe, 0x208200) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xe, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="990bdc7f71238a7590359dcaa347e9aa13cb91d8dc56c67bdaf39eff9fa5684e755a4f3083fd801c53e51bc52111c2f1613d3adaa134a925205bacf45756e718cf43251c29ce25212228186a662e517b083b6a824dee825e5dd1359acb0c4a0cf84f2a0e220b19753f6a061e49c796c5a9921bfebfa538c0314948dacbc2c4be23480589c339f8a7f37de3ee59a06567f0de2aaa9cafc08d8d18453475e8678bb413c876c43ba91530033ae1707c7d6a9a0bbc2e2728884811377aab5243f8c12757ebbe52841b4794674f24453e05f6a0ae25431c1ff7374f5c5f00abce", @ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0xfffffffffffffdb8}, 0x94) fsopen(&(0x7f0000000200)='adfs\x00', 0x1) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c0002800500050000000000080004000100000008000300ff0f"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) close(r2) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x98, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'virt_wifi0\x00', {}, 0x0, 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x0, 0x0, 0x6], 0x0, 0x5}, {0x0, [0x1, 0x6, 0x1], 0x0, 0x1}}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x66}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4}, {0x11e, 0x0, 0x6}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, 0x0, 0x20000080) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f00000001c0)={0x1d, r11}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) 2.338306761s ago: executing program 8 (id=5357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a80180002801400018008001a000100000008001a"], 0x44}, 0x1, 0x0, 0x100000000000000}, 0x0) 2.194015147s ago: executing program 7 (id=5358): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000600000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 2.130470754s ago: executing program 8 (id=5359): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0x5, 0x4000, 0x0, 0x0}], 0x1}) 1.900365945s ago: executing program 7 (id=5360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c00030006000000000000b40800010063707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.712789526s ago: executing program 7 (id=5361): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000100"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1.287217276s ago: executing program 7 (id=5362): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 1.130683998s ago: executing program 2 (id=5363): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r5, 0x1009}], 0x1, 0x8000007) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002ac0)={0x18, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x4, 0x167}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1.105354062s ago: executing program 7 (id=5364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000052c0)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0xb}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xe3d, 0x5, 0x3, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}, @filter_kind_options=@f_fw={{}, {0x0, 0x2, [@TCA_FW_MASK={0x0, 0x5, 0x2}]}}]}, 0x60}}, 0x24040084) 763.19093ms ago: executing program 7 (id=5365): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0x0, 0x10, 0x0, 0x0}], 0x1}) 487.75895ms ago: executing program 6 (id=5366): syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000209"], 0x0) syz_emit_ethernet(0x96, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200040086dd6018232500602c00fe8000000000000000000000000000bbfe8000000000000000400000000000aa890a02"], 0x0) 400.91243ms ago: executing program 8 (id=5367): fsopen(0x0, 0x1) syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x8, 0x1, 0x3b5}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0x902, 0x0, 0x0, 0x1000, 0x3ff, 0x0, 0x0, 0x82}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1510, 0x20, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dc, 0x1, 0xfffffffe, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90a, 0x2, 0xfffffffd, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x82c4, 0x1, 0x365}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x376, 0x0, 0x0}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='+'], 0x14}, 0x1, 0x0, 0x0, 0x800c006}, 0x4000091) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000737000/0xd000)=nil, 0xd000, 0x13) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140021001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000003c000000030a01020000000000f9ffff017bc10f00030091abc12404cf378042f26c43f91f68d8a90767c0bc00000014000000020a0900000000000000000000000000140000001100010000000000000000000000000a00"/152], 0x98}}, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 253.014677ms ago: executing program 6 (id=5368): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000080)={0x40, 0x4, 0xbd, {0xbd, 0x31, "f03e909cd749b6500683fb4195c5c88bab37f505e712c5ec016a8b4919fa40968e06f6a53a55eb638fbe8982121d787e51b5321d4bbc229bde123cd3632c0c86bbf6ece899723ab79a49dce0a0257b771810c5e239185afbaa8709d8a75347d2f07d924e062cd430b35735577b54294ec5cbff6f58d9e7fc44345fd31946764cb822588d4855efbc456073a67042c1dd5ea401e998555453ef92251644b898438964df1cbcf4fd4175d36f31922b4c5848161241e5d68ef171a2e5"}}, &(0x7f0000000180)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "a55e84d1ee0bab1793463f69fe3bd0540fd662f04bbd37ae294f5b9c411e3602511ea5fed8321f3c3793f9e71497532883603a9b3455231c2fafad84e74fb4649e2ea2d3980ca625f27fa53bf75d95e5b0bde332d4e3bd16ef4afa6b2e9efdfa41eb90b4f0291b29ebdfba8a486e12c5d40a50aded31b6c43bc1bdb2f38b1c536c1fa024500fe96a4e602be81108192d8fc3c1a45530a736df988756cb5473f4ba967150021e42a519f77426e588f8450b81362054c4448cd0051855cec3faa9b657307b50f2c4349e80d05e6c44862bebc7369f50ba"}}, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@local=@item_012={0x0, 0x2, 0xa}, @main=@item_012={0x1, 0x0, 0x9, 'h'}, @global=@item_4={0x3, 0x1, 0x0, "60b4e1e6"}, @global=@item_012={0x1, 0x1, 0xa, 't'}, @global=@item_4={0x3, 0x1, 0x7, "87d8b70b"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x7, 0x1, {0x22, 0x8d1}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x14, 0x3, 'o9.'}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x1, 0x4b, "0087e0ddab4a1f87bcb96377d5142e5189aaeb9a41dabf3cd4f28c556f85db59240e0e1843d0f0fda987a65abe4ef8efae93986da2c627d07f8dd5cc64f9fda79b36b6a88953b0f9c439e0"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000500)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=5369): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r2, 0x2}, 0xc) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100007e60b"], 0x20}], 0x1}, 0x0) kernel console output (not intermixed with test programs): x130 [ 1261.876385][T23039] proc_submiturb+0x134/0x1a0 [ 1261.876407][T23039] ? usbdev_ioctl+0x13f/0x2120 [ 1261.876431][T23039] ? __pfx_proc_submiturb+0x10/0x10 [ 1261.876473][T23039] usbdev_ioctl+0x10fc/0x2120 [ 1261.876501][T23039] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1261.876521][T23039] ? __fget_files+0x2a/0x420 [ 1261.876545][T23039] ? __fget_files+0x3a2/0x420 [ 1261.876569][T23039] ? __fget_files+0x2a/0x420 [ 1261.876597][T23039] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1261.876620][T23039] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1261.876643][T23039] __se_sys_ioctl+0xfc/0x170 [ 1261.876662][T23039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.876684][T23039] do_syscall_64+0x174/0x580 [ 1261.876707][T23039] ? trace_irq_disable+0x3b/0x140 [ 1261.876730][T23039] ? clear_bhb_loop+0x70/0xc0 [ 1261.876754][T23039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.876774][T23039] RIP: 0033:0x7fd1bd39e0d9 [ 1261.876792][T23039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.876808][T23039] RSP: 002b:00007fd1be2a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1261.876829][T23039] RAX: ffffffffffffffda RBX: 00007fd1bd625fa0 RCX: 00007fd1bd39e0d9 [ 1261.876844][T23039] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 1261.876858][T23039] RBP: 00007fd1be2a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.876870][T23039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.876892][T23039] R13: 00007fd1bd626038 R14: 00007fd1bd625fa0 R15: 00007fd1bd74fa48 [ 1261.876921][T23039] [ 1261.935040][ T5674] usb 10-1: Using ep0 maxpacket: 16 [ 1262.121740][ T5674] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1262.137878][ T5674] usb 10-1: no configurations [ 1262.142675][ T5674] usb 10-1: can't read configurations, error -22 [ 1262.278375][ T5674] usb usb10-port1: attempt power cycle [ 1262.371978][T23041] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5095'. [ 1262.393448][T23047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.440094][T23052] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5100'. [ 1262.670614][ T5674] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1262.723329][ T3800] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1262.743472][ T5674] usb 10-1: Using ep0 maxpacket: 16 [ 1262.766628][ T5674] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1262.803471][ T5674] usb 10-1: no configurations [ 1262.820009][ T5674] usb 10-1: can't read configurations, error -22 [ 1262.906546][ T3800] usb 8-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1262.932317][ T3800] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.968112][ T3800] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.979251][ T5674] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1262.989574][ T3800] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.021671][ T3800] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.032453][ T5674] usb 10-1: Using ep0 maxpacket: 16 [ 1263.043567][ T5674] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1263.064915][ T3800] usb 8-1: config 0 descriptor?? [ 1263.079099][ T5674] usb 10-1: no configurations [ 1263.111334][ T5674] usb 10-1: can't read configurations, error -22 [ 1263.141154][ T5674] usb usb10-port1: unable to enumerate USB device [ 1263.313977][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5103'. [ 1263.675991][ T3800] usbhid 8-1:0.0: can't add hid device: -71 [ 1263.689032][ T3800] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1263.716310][ T3800] usb 8-1: USB disconnect, device number 19 [ 1263.820544][T23087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1263.827711][ T5612] usb 9-1: new full-speed USB device number 118 using dummy_hcd [ 1263.836654][T23087] FAULT_INJECTION: forcing a failure. [ 1263.836654][T23087] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 1263.852812][T23087] CPU: 0 UID: 0 PID: 23087 Comm: syz.6.5108 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.852840][T23087] Tainted: [L]=SOFTLOCKUP [ 1263.852847][T23087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1263.852859][T23087] Call Trace: [ 1263.852866][T23087] [ 1263.852874][T23087] dump_stack_lvl+0xe8/0x150 [ 1263.852906][T23087] should_fail_ex+0x40c/0x560 [ 1263.852935][T23087] iommufd_get_object+0x78/0x4b0 [ 1263.853085][T23087] ? __pfx_iommufd_get_object+0x10/0x10 [ 1263.853114][T23087] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1263.853147][T23087] iommufd_ioas_map+0x289/0x4c0 [ 1263.853188][T23087] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 1263.853222][T23087] iommufd_fops_ioctl+0x465/0x600 [ 1263.853255][T23087] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1263.853287][T23087] ? __fget_files+0x2a/0x420 [ 1263.853316][T23087] ? __fget_files+0x2a/0x420 [ 1263.853342][T23087] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1263.853363][T23087] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1263.853392][T23087] __se_sys_ioctl+0xfc/0x170 [ 1263.853410][T23087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.853430][T23087] do_syscall_64+0x174/0x580 [ 1263.853452][T23087] ? trace_irq_disable+0x3b/0x140 [ 1263.853474][T23087] ? clear_bhb_loop+0x70/0xc0 [ 1263.853496][T23087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.853515][T23087] RIP: 0033:0x7efd3619e0d9 [ 1263.853532][T23087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.853548][T23087] RSP: 002b:00007efd37092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.853568][T23087] RAX: ffffffffffffffda RBX: 00007efd36425fa0 RCX: 00007efd3619e0d9 [ 1263.853582][T23087] RDX: 0000200000000000 RSI: 0000000000003b85 RDI: 0000000000000004 [ 1263.853595][T23087] RBP: 00007efd37092090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.853607][T23087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.853618][T23087] R13: 00007efd36426038 R14: 00007efd36425fa0 R15: 00007efd3654fa48 [ 1263.853646][T23087] [ 1263.915127][ T5674] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1264.005165][ T5612] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1264.186584][ T5612] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1264.198496][ T5612] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1264.236430][ T5612] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1264.254318][ T5674] usb 3-1: device descriptor read/64, error -71 [ 1264.289964][ T5612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.299885][ T5612] usb 9-1: Product: syz [ 1264.305385][ T5612] usb 9-1: Manufacturer: syz [ 1264.320258][ T5612] usb 9-1: SerialNumber: syz [ 1264.347199][T23079] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1264.504116][ T5674] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1264.575301][T23079] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1264.646280][ T5674] usb 3-1: device descriptor read/64, error -71 [ 1264.764029][ T5674] usb usb3-port1: attempt power cycle [ 1264.783970][T20945] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1264.953507][T20945] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1264.978416][T20945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.994264][T20945] usb 7-1: Product: syz [ 1265.000333][T20945] usb 7-1: Manufacturer: syz [ 1265.005456][T20945] usb 7-1: SerialNumber: syz [ 1265.015081][T20945] usb 7-1: config 0 descriptor?? [ 1265.128487][ T5674] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1265.154450][ T5674] usb 3-1: device descriptor read/8, error -71 [ 1265.199581][T23079] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1265.244371][T20945] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1265.404455][ T5674] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1265.439081][T23079] netlink: 8716 bytes leftover after parsing attributes in process `syz.8.5107'. [ 1265.460820][ T5674] usb 3-1: device descriptor read/8, error -71 [ 1265.595553][ T5674] usb usb3-port1: unable to enumerate USB device [ 1265.641852][T23128] netlink: 'syz.9.5119': attribute type 1 has an invalid length. [ 1265.653303][T20944] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1265.809250][T23128] bridge6: entered promiscuous mode [ 1265.818782][T23128] bond4: (slave bridge6): making interface the new active one [ 1265.828163][T23128] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 1265.833601][T20944] usb 8-1: Using ep0 maxpacket: 8 [ 1265.865102][T20944] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1265.865176][T23128] bridge7: entered promiscuous mode [ 1265.884875][T23128] bond4: (slave bridge7): Enslaving as a backup interface with an up link [ 1265.921052][T20944] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1265.933963][T20944] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1265.944086][T20944] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1265.954177][T20944] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1265.964547][T20944] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1266.055730][ T5612] cdc_ncm 9-1:1.0: failed to get mac address [ 1266.073664][ T5612] cdc_ncm 9-1:1.0: bind() failure [ 1266.078819][T20944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.103303][ T5612] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1266.121364][ T5612] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1266.145964][ T5612] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1266.165672][ T5612] usb 9-1: USB disconnect, device number 118 [ 1266.336566][T20944] usb 8-1: GET_CAPABILITIES returned 0 [ 1266.346426][T20944] usbtmc 8-1:16.0: can't read capabilities [ 1266.610370][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.620543][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.629644][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.638727][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.647798][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.664227][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.673335][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.682410][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.691586][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.700677][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.710963][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.714517][ T5612] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 1266.720079][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.736836][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.740976][T20945] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1266.745932][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.748082][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.773662][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1266.820493][ T5674] usb 8-1: USB disconnect, device number 20 [ 1266.853957][T20945] usb 7-1: USB disconnect, device number 17 [ 1266.954387][ T5612] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1266.980460][ T5612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.988767][ T5612] usb 9-1: Product: syz [ 1266.993039][ T5612] usb 9-1: Manufacturer: syz [ 1266.997846][ T5612] usb 9-1: SerialNumber: syz [ 1267.128513][T23145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5123'. [ 1267.212698][T23146] vlan10: entered allmulticast mode [ 1267.218141][T23146] bridge9: entered allmulticast mode [ 1267.240486][T23145] bridge9: port 1(erspan0) entered blocking state [ 1267.284649][T23145] bridge9: port 1(erspan0) entered disabled state [ 1267.293417][T23145] erspan0: entered allmulticast mode [ 1267.334163][T23145] erspan0: entered promiscuous mode [ 1267.385356][T23145] bridge9: port 1(erspan0) entered blocking state [ 1267.392038][T23145] bridge9: port 1(erspan0) entered forwarding state [ 1267.455304][ T5612] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1267.488301][ T5612] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1267.538641][T23152] macsec1: entered allmulticast mode [ 1267.551174][T23154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5127'. [ 1267.573035][T23152] gretap0: entered allmulticast mode [ 1267.644851][T23152] gretap0: left allmulticast mode [ 1267.843665][ T3800] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1267.923257][ T24] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1268.015804][ T3800] usb 10-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1268.057572][ T3800] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.085434][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1268.103301][ T3800] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.124244][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 1268.135588][ T3800] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1268.149565][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1268.161688][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1268.171348][T20944] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1268.181086][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.214242][ T3800] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.226670][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1268.246849][ T3800] usb 10-1: config 0 descriptor?? [ 1268.256751][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1268.264329][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.293225][ T24] usb 3-1: 0:1 : does not exist [ 1268.298185][ T24] usb 3-1: 0:2 : does not exist [ 1268.344366][T20944] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1268.365805][T20944] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1268.376970][T20944] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1268.388436][T20944] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1268.427127][T20944] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.439965][T20944] usb 8-1: Product: syz [ 1268.445860][T23167] fuse: Bad value for 'fd' [ 1268.450816][T20944] usb 8-1: Manufacturer: syz [ 1268.456962][T20944] usb 8-1: SerialNumber: syz [ 1268.468093][T23162] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1268.509023][T23158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.522492][T23158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.548881][ T24] usb 3-1: 6:0: failed to get current value for ch 1 (-22) [ 1268.572838][ T24] usb 3-1: 6:0: failed to get current value for ch 0 (-22) [ 1268.640002][ T24] usb 3-1: USB disconnect, device number 78 [ 1268.691268][T23162] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1268.757250][ T3800] usbhid 10-1:0.0: can't add hid device: -71 [ 1268.764236][ T5612] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1268.765032][ T3800] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1268.806454][ T3800] usb 10-1: USB disconnect, device number 11 [ 1268.979326][T23177] netlink: 'syz.6.5135': attribute type 34 has an invalid length. [ 1268.987450][T23177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5135'. [ 1268.997022][T23177] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1269.321433][T23162] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1269.428458][ T5612] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1269.461553][ T5612] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1269.505641][ T5612] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1269.547766][ T5612] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1269.570853][T23162] netlink: 8716 bytes leftover after parsing attributes in process `syz.7.5130'. [ 1269.607033][ T5612] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1269.647846][ T5612] usb 9-1: USB disconnect, device number 119 [ 1270.187009][T20944] cdc_ncm 8-1:1.0: failed to get mac address [ 1270.207821][T20944] cdc_ncm 8-1:1.0: bind() failure [ 1270.276971][T20944] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1270.314071][T20944] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1270.341078][T20944] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 1270.360801][T23194] gretap0: entered promiscuous mode [ 1270.397061][T23194] macsec1: entered allmulticast mode [ 1270.421002][T23194] gretap0: entered allmulticast mode [ 1270.452612][T20944] usb 8-1: USB disconnect, device number 21 [ 1270.467192][T23194] gretap0: left allmulticast mode [ 1270.497040][T23194] gretap0: left promiscuous mode [ 1270.886178][T23200] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1271.034231][ T3800] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1271.053199][T20944] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1271.094080][T23210] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1271.150591][T23210] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1271.169002][T23210] tipc: Enabled bearer , priority 10 [ 1271.217052][ T3800] usb 9-1: device descriptor read/64, error -71 [ 1271.274409][T20944] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1271.293441][ T24] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1271.326796][T20944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.335722][T20944] usb 7-1: Product: syz [ 1271.351875][T20944] usb 7-1: Manufacturer: syz [ 1271.370051][T20944] usb 7-1: SerialNumber: syz [ 1271.388929][T23215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5148'. [ 1271.466348][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1271.473462][ T3800] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 1271.483208][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1271.494271][ T24] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1271.506339][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1271.523361][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1271.548845][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.561043][ T24] usb 8-1: Product: syz [ 1271.582246][ T24] usb 8-1: Manufacturer: syz [ 1271.598046][ T24] usb 8-1: SerialNumber: syz [ 1271.613232][ T3800] usb 9-1: device descriptor read/64, error -71 [ 1271.628169][T23212] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1271.656750][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1271.670402][ T24] usb 8-1: MIDIStreaming interface descriptor not found [ 1271.745811][ T3800] usb usb9-port1: attempt power cycle [ 1271.788643][T20944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1271.820610][T20944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1271.826001][T23219] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1271.867971][T23212] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5147'. [ 1271.895797][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 1271.895813][ T29] audit: type=1326 audit(1786939690.358:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23211 comm="syz.7.5147" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe94879e0d9 code=0x0 [ 1272.058009][T23221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.075587][T23221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.113286][ T3800] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 1272.135665][T23221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.153285][T20945] tipc: Node number set to 3664630468 [ 1272.195389][ T3800] usb 9-1: device descriptor read/8, error -71 [ 1272.204597][T23221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.259314][T23221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.273618][T23221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.287279][T23221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.305436][T23221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.473836][ T3800] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1272.516076][ T3800] usb 9-1: device descriptor read/8, error -71 [ 1272.622506][T23226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1272.636482][ T3800] usb usb9-port1: unable to enumerate USB device [ 1273.063263][ T3800] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1273.102989][T20944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1273.225388][ T3800] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1273.235925][ T3800] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1273.246831][ T3800] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1273.264553][ T3800] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.272830][ T3800] usb 10-1: Product: syz [ 1273.277227][ T3800] usb 10-1: Manufacturer: syz [ 1273.281943][ T3800] usb 10-1: SerialNumber: syz [ 1273.290200][ T3800] usb 10-1: config 0 descriptor?? [ 1273.300798][ T3800] streamzap 10-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1273.568728][T23233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.582567][T23233] loop8: detected capacity change from 0 to 7 [ 1273.593012][T23233] Dev loop8: unable to read RDB block 7 [ 1273.606046][T23233] loop8: unable to read partition table [ 1273.615089][T23233] loop8: partition table beyond EOD, truncated [ 1273.627334][T23233] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1273.745383][T20944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1273.765478][T20944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1273.778005][T20944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1273.788705][T20944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1273.804472][T20944] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1273.829848][T20944] usb 7-1: USB disconnect, device number 18 [ 1273.880920][ T4979] Dev loop8: unable to read RDB block 7 [ 1273.901732][ T4979] loop8: unable to read partition table [ 1273.916784][ T4979] loop8: partition table beyond EOD, truncated [ 1273.968179][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5154'. [ 1274.007959][ T4979] Dev loop8: unable to read RDB block 7 [ 1274.013988][ T4979] loop8: unable to read partition table [ 1274.019868][ T4979] loop8: partition table beyond EOD, truncated [ 1274.157062][ T4979] Dev loop8: unable to read RDB block 7 [ 1274.169225][ T4979] loop8: unable to read partition table [ 1274.181574][ T4979] loop8: partition table beyond EOD, truncated [ 1274.211100][ T24] usb 8-1: USB disconnect, device number 22 [ 1274.252591][T23242] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5157'. [ 1274.275804][T23244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.343731][T20944] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1274.401576][T19824] udevd[19824]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1274.544257][T20944] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 1274.574458][T20944] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1274.600156][T20944] usb 3-1: string descriptor 0 read error: -22 [ 1274.616753][T20944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.671794][ T4979] Dev loop8: unable to read RDB block 7 [ 1274.685552][ T4979] loop8: unable to read partition table [ 1274.700459][ T4979] loop8: partition table beyond EOD, truncated [ 1274.782386][ T4979] Dev loop8: unable to read RDB block 7 [ 1274.797122][ T4979] loop8: unable to read partition table [ 1274.812717][ T4979] loop8: partition table beyond EOD, truncated [ 1274.907324][ T4979] Dev loop8: unable to read RDB block 7 [ 1274.913026][ T4979] loop8: unable to read partition table [ 1274.913741][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1274.927567][ T4979] loop8: partition table beyond EOD, truncated [ 1275.076052][T23240] libceph: resolve '0.0.0.0.[' (ret=-3): failed [ 1275.083200][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1275.091936][ T24] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1275.117924][ T24] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1275.146946][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.176201][ T24] usb 8-1: config 0 descriptor?? [ 1275.193858][ T24] rndis_host 8-1:0.0: missing cdc header descriptor [ 1275.213761][ T24] cdc_acm 8-1:0.0: Control and data interfaces are not separated! [ 1275.235350][ T24] cdc_acm 8-1:0.0: This needs exactly 3 endpoints [ 1275.257263][ T24] cdc_acm 8-1:0.0: probe with driver cdc_acm failed with error -22 [ 1275.296588][ T4979] Dev loop8: unable to read RDB block 7 [ 1275.306095][T20944] usbhid 3-1:1.0: can't add hid device: -71 [ 1275.311462][ T4979] loop8: unable to read partition table [ 1275.324155][T20944] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1275.329379][ T4979] loop8: partition table beyond EOD, truncated [ 1275.351812][T20944] usb 3-1: USB disconnect, device number 79 [ 1275.402629][ T24] usb 8-1: USB disconnect, device number 23 [ 1275.445343][ T4979] Dev loop8: unable to read RDB block 7 [ 1275.458536][ T4979] loop8: unable to read partition table [ 1275.473590][ T4979] loop8: partition table beyond EOD, truncated [ 1275.495203][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5166'. [ 1275.548535][ T4979] Dev loop8: unable to read RDB block 7 [ 1275.558891][ T4979] loop8: unable to read partition table [ 1275.565373][ T4979] loop8: partition table beyond EOD, truncated [ 1275.892405][ T24] usb 10-1: USB disconnect, device number 12 [ 1275.961753][T23278] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5167'. [ 1276.601702][T23293] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1276.851980][T23314] fuse: Bad value for 'group_id' [ 1276.857652][T23314] fuse: Bad value for 'group_id' [ 1276.876890][T23316] qrtr: Invalid version 0 [ 1277.023310][ T5674] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1277.193331][ T5674] usb 3-1: Using ep0 maxpacket: 8 [ 1277.235164][ T5674] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1277.307135][T23329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5185'. [ 1277.323945][ T5674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.353725][ T5674] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1277.367254][ T5674] pvrusb2: ********** [ 1277.378593][ T5674] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1277.396120][ T5674] pvrusb2: Important functionality might not be entirely working. [ 1277.410246][T23332] vlan11: entered allmulticast mode [ 1277.415810][T23332] bridge11: entered allmulticast mode [ 1277.427137][ T5674] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1277.440983][T23329] erspan0: left allmulticast mode [ 1277.451150][T23329] erspan0: left promiscuous mode [ 1277.457910][T23329] bridge10: port 1(erspan0) entered disabled state [ 1277.465869][ T5674] pvrusb2: ********** [ 1277.472749][T23329] bridge11: port 1(erspan0) entered blocking state [ 1277.484471][T20944] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1277.492365][T23329] bridge11: port 1(erspan0) entered disabled state [ 1277.500918][T23329] erspan0: entered allmulticast mode [ 1277.524424][T23329] erspan0: entered promiscuous mode [ 1277.533254][T23329] bridge11: port 1(erspan0) entered blocking state [ 1277.539929][T23329] bridge11: port 1(erspan0) entered forwarding state [ 1277.561403][ T2354] pvrusb2: Invalid write control endpoint [ 1277.623581][ T24] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1277.643979][T20944] usb 7-1: Using ep0 maxpacket: 16 [ 1277.649963][T20944] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1277.682770][T20944] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.715241][T20944] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.728581][T20944] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1277.753684][T20944] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1277.762974][T20944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.788438][T20944] usb 7-1: config 0 descriptor?? [ 1277.790735][ T2354] pvrusb2: Invalid write control endpoint [ 1277.806586][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1277.825947][ T5674] usb 3-1: USB disconnect, device number 80 [ 1277.832081][ T24] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1277.844270][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1277.864727][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.877448][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1277.893454][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1277.907134][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1277.930487][ T2354] pvrusb2: Device being rendered inoperable [ 1277.937028][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1277.954838][ T2354] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1277.979239][ T2354] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1277.999233][ T24] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1278.018908][ T2354] pvrusb2: Attached sub-driver cx25840 [ 1278.018951][ T24] usb 8-1: Product: syz [ 1278.029152][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1278.059580][ T24] usb 8-1: Manufacturer: syz [ 1278.071386][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1278.101007][ T24] usb 8-1: SerialNumber: syz [ 1278.151086][ T24] usb 8-1: config 0 descriptor?? [ 1278.303517][ T24] rc_core: IR keymap rc-imon-rsc not found [ 1278.311570][ T24] Registered IR keymap rc-empty [ 1278.328298][ T24] rc rc0: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1278.365984][ T24] input: iMON Station as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input94 [ 1278.433655][ T24] usb 8-1: USB disconnect, device number 24 [ 1278.462529][T20944] usbhid 7-1:0.0: can't add hid device: -71 [ 1278.486276][T20944] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1278.565267][T20944] usb 7-1: USB disconnect, device number 19 [ 1278.760121][T23350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.773774][ T29] audit: type=1326 audit(1786939697.228:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.8.5190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15d0f9e0d9 code=0x0 [ 1278.903327][T14563] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1279.001001][T23353] qrtr: Invalid version 0 [ 1279.073599][T14563] usb 3-1: Using ep0 maxpacket: 32 [ 1279.082706][T14563] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1279.096731][T14563] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1279.120883][T14563] usb 3-1: config 1 interface 2 altsetting 242 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1279.136228][T14563] usb 3-1: config 1 interface 2 has no altsetting 1 [ 1279.145511][T14563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.163260][T14563] usb 3-1: Product: syz [ 1279.167574][T14563] usb 3-1: Manufacturer: syz [ 1279.172226][T14563] usb 3-1: SerialNumber: syz [ 1279.190071][T14563] snd-ua101 3-1:1.1: sample format descriptor not found [ 1279.197315][T14563] snd-ua101 3-1:1.0: invalid num_altsetting [ 1279.343298][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1279.373221][T20944] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1279.400382][T23345] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20000 [ 1279.457815][T14563] usb 3-1: USB disconnect, device number 81 [ 1279.503332][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1279.510032][ T24] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1279.525396][T20944] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1279.531996][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.544208][ T24] usb 7-1: Product: syz [ 1279.548931][ T24] usb 7-1: Manufacturer: syz [ 1279.555110][ T24] usb 7-1: SerialNumber: syz [ 1279.560686][T20944] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.575542][ T24] usb 7-1: config 0 descriptor?? [ 1279.582368][T20944] usb 8-1: Product: syz [ 1279.587041][T20944] usb 8-1: Manufacturer: syz [ 1279.595680][ T24] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1279.602786][T20944] usb 8-1: SerialNumber: syz [ 1279.864361][T14563] usb 7-1: USB disconnect, device number 20 [ 1279.961576][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1279.973491][ T24] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 1279.992279][ T29] audit: type=1326 audit(1786939698.448:11021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.057165][T20944] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1280.069250][ T29] audit: type=1326 audit(1786939698.448:11022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.093991][T20944] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1280.105860][ T29] audit: type=1326 audit(1786939698.448:11023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.131235][ T29] audit: type=1326 audit(1786939698.448:11024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.158014][ T29] audit: type=1326 audit(1786939698.448:11025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.213808][ T24] usb 10-1: New USB device found, idVendor=85b5, idProduct=58e2, bcdDevice= 0.00 [ 1280.238432][ T29] audit: type=1326 audit(1786939698.448:11026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.263603][ T29] audit: type=1326 audit(1786939698.448:11027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.271593][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1280.301590][ T29] audit: type=1326 audit(1786939698.488:11028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.334654][ T29] audit: type=1326 audit(1786939698.488:11029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23370 comm="syz.6.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3619e0d9 code=0x7ffc0000 [ 1280.348328][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1280.370234][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1280.383453][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.396312][ T24] usb 10-1: config 0 descriptor?? [ 1280.409666][T23365] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1280.800325][T23379] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1280.839685][ T24] hid-generic 0003:85B5:58E2.0046: ignoring exceeding usage max [ 1280.853812][T23379] PKCS7: Only support pkcs7_signedData type [ 1280.871097][ T24] hid-generic 0003:85B5:58E2.0046: unknown main item tag 0x0 [ 1280.879386][ T24] hid-generic 0003:85B5:58E2.0046: unknown main item tag 0x0 [ 1280.887431][ T24] hid-generic 0003:85B5:58E2.0046: unknown main item tag 0x0 [ 1280.895506][ T24] hid-generic 0003:85B5:58E2.0046: unknown main item tag 0x0 [ 1280.913677][ T24] hid-generic 0003:85B5:58E2.0046: unknown main item tag 0x0 [ 1280.945197][ T24] hid-generic 0003:85B5:58E2.0046: unknown main item tag 0x0 [ 1280.975427][ T24] hid-generic 0003:85B5:58E2.0046: unknown main item tag 0x0 [ 1281.006214][ T24] hid-generic 0003:85B5:58E2.0046: unknown main item tag 0x0 [ 1281.078809][ T24] hid-generic 0003:85B5:58E2.0046: hidraw0: USB HID v0.08 Device [HID 85b5:58e2] on usb-dummy_hcd.9-1/input0 [ 1281.337565][T20944] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1281.613338][ T24] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 1281.753259][T20945] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1281.786926][ T24] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1281.813239][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1281.845782][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1281.882158][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1281.913762][T20945] usb 7-1: Using ep0 maxpacket: 16 [ 1281.920388][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.939395][T20945] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1281.950319][ T24] usb 9-1: Product: syz [ 1281.954515][T20945] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.977370][T20945] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.989032][T20945] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1282.009901][T20944] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1282.028108][T20945] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1282.042288][T20945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.051956][T20944] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1282.065489][T20944] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1282.078134][T20945] usb 7-1: config 0 descriptor?? [ 1282.097208][ T24] usb 9-1: Manufacturer: syz [ 1282.103570][T20944] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1282.118878][ T24] usb 9-1: SerialNumber: syz [ 1282.119049][T20944] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1282.152452][T20944] usb 8-1: USB disconnect, device number 25 [ 1282.160317][ T24] usb 9-1: config 0 descriptor?? [ 1282.180737][T23393] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1282.192325][T23393] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1282.222765][ T24] usb 9-1: ucan: probing device on interface #0 [ 1282.605903][T20944] usb 10-1: USB disconnect, device number 13 [ 1282.639712][T23393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.689420][T23393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.703395][T20945] usbhid 7-1:0.0: can't add hid device: -71 [ 1282.725479][ T24] ucan 9-1:0.0: probe with driver ucan failed with error -71 [ 1282.732506][T20945] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1282.767034][ T24] usb 9-1: USB disconnect, device number 124 [ 1282.778013][T20945] usb 7-1: USB disconnect, device number 21 [ 1283.083252][T20944] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1283.243906][T20944] usb 10-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 1283.275942][T20944] usb 10-1: config index 0 descriptor too short (expected 1051, got 27) [ 1283.295662][T20944] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 1283.312957][T20944] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1283.347502][T23422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5212'. [ 1283.357101][T20944] usb 10-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 1283.401197][T20944] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1283.438447][T20944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.452293][T23422] macsec1: entered allmulticast mode [ 1283.487995][T23422] gretap0: entered allmulticast mode [ 1283.495073][T20944] usb 10-1: Product: syz [ 1283.507089][T20944] usb 10-1: Manufacturer: syz [ 1283.527576][T20944] usb 10-1: SerialNumber: syz [ 1283.551121][T20944] usb 10-1: config 0 descriptor?? [ 1283.560761][T23405] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1283.660169][T23434] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5215'. [ 1283.965834][T23404] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5205'. [ 1284.046066][T23404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.116261][T23404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.153273][T20945] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1284.186865][T20944] keyspan 10-1:0.0: Keyspan 4 port adapter converter detected [ 1284.206884][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7 [ 1284.238752][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81 [ 1284.258944][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1 [ 1284.288872][T20944] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1284.309702][T20945] usb 9-1: Using ep0 maxpacket: 8 [ 1284.334108][T20945] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1284.343346][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 82 [ 1284.367793][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2 [ 1284.382278][T20945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.408764][T20945] usb 9-1: Product: syz [ 1284.417190][T20945] usb 9-1: Manufacturer: syz [ 1284.421975][T20945] usb 9-1: SerialNumber: syz [ 1284.430316][T20944] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1284.439507][T20945] usb 9-1: config 0 descriptor?? [ 1284.456063][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83 [ 1284.467065][T20945] gspca_main: se401-2.14.0 probing 047d:5003 [ 1284.503768][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 3 [ 1284.527127][T23453] binder_alloc: binder_alloc_mmap_handler: 23450 200000ffd000-200001000000 already mapped failed -16 [ 1284.561311][T20944] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1284.572151][T23451] binder_alloc: 23450: binder_alloc_buf, no vma [ 1284.595336][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 84 [ 1284.615128][T20944] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4 [ 1284.632414][T20944] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1284.675341][T23440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.690250][T20944] usb 10-1: USB disconnect, device number 14 [ 1284.748734][T23440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.771094][T23440] fuse: Bad value for 'fd' [ 1284.792859][T20944] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1284.864999][T20944] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1284.880823][T20944] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1284.902629][T20944] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1284.920487][T20944] keyspan 10-1:0.0: device disconnected [ 1284.950076][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 1284.950101][ T29] audit: type=1400 audit(1786939703.408:11084): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A3A768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F053BB89F0E4A42E195BD2AF8A91A6DD5C9FBCCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=23439 comm="syz.8.5217" [ 1285.086334][ T5612] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1285.112400][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5224'. [ 1285.253307][ T5612] usb 3-1: Using ep0 maxpacket: 32 [ 1285.258751][T20945] gspca_se401: ExtraFeatures: 255 [ 1285.268492][ T5612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1285.276473][ T5612] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=20.c1 [ 1285.294507][ T5612] usb 3-1: config 3 has an invalid interface number: 2 but max is 1 [ 1285.325279][ T5612] usb 3-1: config 3 has an invalid interface number: 19 but max is 1 [ 1285.336476][ T5612] usb 3-1: config 3 has no interface number 0 [ 1285.366575][ T5612] usb 3-1: config 3 has no interface number 1 [ 1285.373662][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1285.402047][ T5612] usb 3-1: too many endpoints for config 3 interface 19 altsetting 6: 36, using maximum allowed: 30 [ 1285.427549][ T5612] usb 3-1: config 3 interface 19 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 1285.476089][ T5612] usb 3-1: config 3 interface 19 has no altsetting 0 [ 1285.494501][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.520318][T20945] input: se401 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input95 [ 1285.530260][ T5612] usb 3-1: Product: syz [ 1285.543343][ T5612] usb 3-1: Manufacturer: syz [ 1285.558039][T20945] usb 9-1: USB disconnect, device number 125 [ 1285.568332][ T9] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1285.577956][ T5612] usb 3-1: SerialNumber: syz [ 1285.622730][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.653243][ T9] usb 7-1: Product: syz [ 1285.670743][ T9] usb 7-1: Manufacturer: syz [ 1285.683222][T20944] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1285.704390][ T9] usb 7-1: SerialNumber: syz [ 1285.732557][ T9] usb 7-1: config 0 descriptor?? [ 1285.825172][T20944] usb 10-1: device descriptor read/64, error -71 [ 1285.850517][ T5612] rtsx_usb 3-1:3.2: probe with driver rtsx_usb failed with error -22 [ 1285.887028][ T5612] rtsx_usb 3-1:3.19: probe with driver rtsx_usb failed with error -22 [ 1285.925218][ T5612] usb 3-1: USB disconnect, device number 82 [ 1286.094651][T20944] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1286.162954][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5228'. [ 1286.214683][T23459] loop3: detected capacity change from 0 to 7 [ 1286.239794][T23459] Dev loop3: unable to read RDB block 7 [ 1286.248649][T20944] usb 10-1: device descriptor read/64, error -71 [ 1286.254899][T23459] loop3: AHDI p1 p2 [ 1286.271413][T23459] loop3: partition table partially beyond EOD, truncated [ 1286.301383][T23459] loop3: p1 start 1702000233 is beyond EOD, truncated [ 1286.328276][ T9] usb 7-1: Firmware version (0.0) predates our first public release. [ 1286.337277][ T9] usb 7-1: Please update to version 0.2 or newer [ 1286.374355][T20944] usb usb10-port1: attempt power cycle [ 1286.397056][ T9] usb 7-1: USB disconnect, device number 22 [ 1286.714740][T20944] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1286.744105][T20944] usb 10-1: device descriptor read/8, error -71 [ 1286.763476][ T24] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 1286.843376][ T5612] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1286.939141][ T24] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1286.971729][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.986310][T20944] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1287.013990][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1287.026800][T20944] usb 10-1: device descriptor read/8, error -71 [ 1287.035162][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1287.049922][ T5612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1287.081207][ T5612] usb 3-1: New USB device found, idVendor=2001, idProduct=f115, bcdDevice=39.76 [ 1287.087558][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1287.100764][ T5612] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1287.143829][ T5612] usb 3-1: can't read configurations, error -71 [ 1287.144997][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.173447][T20944] usb usb10-port1: unable to enumerate USB device [ 1288.618600][T23508] FAULT_INJECTION: forcing a failure. [ 1288.618600][T23508] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.644389][T23508] CPU: 0 UID: 0 PID: 23508 Comm: syz.9.5238 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.644416][T23508] Tainted: [L]=SOFTLOCKUP [ 1288.644422][T23508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1288.644433][T23508] Call Trace: [ 1288.644440][T23508] [ 1288.644447][T23508] dump_stack_lvl+0xe8/0x150 [ 1288.644478][T23508] should_fail_ex+0x40c/0x560 [ 1288.644498][T23508] should_failslab+0xa8/0x100 [ 1288.644518][T23508] __kmalloc_noprof+0xfe/0x720 [ 1288.644559][T23508] ? security_sk_alloc+0x52/0x360 [ 1288.644581][T23508] ? security_sk_alloc+0x52/0x360 [ 1288.644602][T23508] ? __kmalloc_noprof+0x1ad/0x720 [ 1288.644627][T23508] security_sk_alloc+0x52/0x360 [ 1288.644644][T23508] sk_prot_alloc+0x101/0x210 [ 1288.644658][T23508] ? sk_alloc+0x27/0x390 [ 1288.644683][T23508] sk_alloc+0x3a/0x390 [ 1288.644707][T23508] __netlink_create+0x62/0x260 [ 1288.644728][T23508] ? __pfx_genl_release+0x10/0x10 [ 1288.644753][T23508] netlink_create+0x3ca/0x590 [ 1288.644778][T23508] ? __pfx_genl_unbind+0x10/0x10 [ 1288.644795][T23508] ? __pfx_genl_bind+0x10/0x10 [ 1288.644815][T23508] __sock_create+0x4b3/0x9d0 [ 1288.644857][T23508] __sys_socket+0xd6/0x1b0 [ 1288.644884][T23508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.644903][T23508] __x64_sys_socket+0x7a/0x90 [ 1288.644931][T23508] do_syscall_64+0x174/0x580 [ 1288.644946][T23508] ? trace_irq_disable+0x3b/0x140 [ 1288.644962][T23508] ? clear_bhb_loop+0x70/0xc0 [ 1288.644989][T23508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.645009][T23508] RIP: 0033:0x7f8309f9f947 [ 1288.645026][T23508] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.645041][T23508] RSP: 002b:00007f830af01f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1288.645059][T23508] RAX: ffffffffffffffda RBX: 00007f830a225fa0 RCX: 00007f8309f9f947 [ 1288.645076][T23508] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1288.645084][T23508] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1288.645092][T23508] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000001 [ 1288.645100][T23508] R13: 00007f830a226038 R14: 00007f830a225fa0 R15: 00007f830a34fa48 [ 1288.645119][T23508] [ 1289.179235][T23499] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5236'. [ 1289.192976][T23499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5236'. [ 1289.640629][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5241'. [ 1289.713462][T14563] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1289.820670][ T24] gud 9-1:1.0: probe with driver gud failed with error -71 [ 1289.845990][T14563] usb 7-1: device descriptor read/64, error -71 [ 1289.883252][ T24] usb 9-1: USB disconnect, device number 126 [ 1289.982675][T23523] binder_alloc: 23520: binder_alloc_buf, no vma [ 1290.004527][T23527] binder: 23520:23527 ioctl c0086420 200000000240 returned -22 [ 1290.026797][T23522] binder: 23520:23522 ioctl c0086423 200000000280 returned -22 [ 1290.123481][T14563] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1290.180404][T23531] ip_tables: iptables: counters copy to user failed while replacing table [ 1290.273574][T14563] usb 7-1: device descriptor read/64, error -71 [ 1290.396449][T14563] usb usb7-port1: attempt power cycle [ 1290.463952][ T24] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 1290.633169][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1290.643683][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1290.651544][ T24] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1290.661992][ T24] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 1290.670435][ T24] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.680737][ T24] usb 9-1: config 4 has no interface number 0 [ 1290.683734][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1290.695963][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.714257][ T24] usb 9-1: Product: syz [ 1290.722258][ T24] usb 9-1: Manufacturer: syz [ 1290.728089][ T24] usb 9-1: SerialNumber: syz [ 1290.773347][T14563] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1290.795198][T14563] usb 7-1: device descriptor read/8, error -71 [ 1290.853265][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1290.859193][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1290.869922][ T9] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.880964][ T9] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.890808][ T9] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1290.904084][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1290.910741][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.922870][ T9] usb 8-1: config 0 descriptor?? [ 1290.972911][ T24] uvcvideo 9-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1290.981819][ T24] uvcvideo 9-1:4.147: No valid video chain found. [ 1290.992607][ T24] usb 9-1: USB disconnect, device number 127 [ 1291.033588][T14563] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1291.055267][T14563] usb 7-1: device descriptor read/8, error -71 [ 1291.174133][T14563] usb usb7-port1: unable to enumerate USB device [ 1291.270021][T23542] syz.2.5250 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1291.282002][T23542] CPU: 0 UID: 0 PID: 23542 Comm: syz.2.5250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.282037][T23542] Tainted: [L]=SOFTLOCKUP [ 1291.282046][T23542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1291.282057][T23542] Call Trace: [ 1291.282066][T23542] [ 1291.282073][T23542] dump_stack_lvl+0xe8/0x150 [ 1291.282103][T23542] dump_header+0xd3/0x4b0 [ 1291.282128][T23542] oom_kill_process+0x3ab/0x970 [ 1291.282150][T23542] out_of_memory+0x1064/0x1480 [ 1291.282165][T23542] ? try_charge_memcg+0xbca/0x1590 [ 1291.282199][T23542] ? __pfx_out_of_memory+0x10/0x10 [ 1291.282214][T23542] ? do_raw_spin_unlock+0xf5/0x210 [ 1291.282241][T23542] try_charge_memcg+0xc74/0x1590 [ 1291.282276][T23542] ? __pfx_try_charge_memcg+0x10/0x10 [ 1291.282302][T23542] ? percpu_ref_tryget+0x15/0x180 [ 1291.282334][T23542] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 1291.282354][T23542] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 1291.282375][T23542] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 1291.282410][T23542] kmem_cache_alloc_lru_noprof+0x358/0x5f0 [ 1291.282431][T23542] ? kmem_cache_alloc_lru_noprof+0x150/0x5f0 [ 1291.282449][T23542] ? sock_alloc_inode+0x2c/0x1a0 [ 1291.282471][T23542] ? sock_alloc_inode+0x2c/0x1a0 [ 1291.282497][T23542] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1291.282518][T23542] sock_alloc_inode+0x2c/0x1a0 [ 1291.282541][T23542] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1291.282562][T23542] alloc_inode+0x6a/0x1b0 [ 1291.282583][T23542] __sock_create+0x12d/0x9d0 [ 1291.282607][T23542] ? ksys_write+0x242/0x270 [ 1291.282631][T23542] ? __pfx___se_sys_futex+0x10/0x10 [ 1291.282659][T23542] __sys_socket+0xd6/0x1b0 [ 1291.282701][T23542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.282719][T23542] __x64_sys_socket+0x7a/0x90 [ 1291.282747][T23542] do_syscall_64+0x174/0x580 [ 1291.282770][T23542] ? trace_irq_disable+0x3b/0x140 [ 1291.282797][T23542] ? clear_bhb_loop+0x70/0xc0 [ 1291.282823][T23542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.282855][T23542] RIP: 0033:0x7fd1bd39e0d9 [ 1291.282872][T23542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.282889][T23542] RSP: 002b:00007fd1be2a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1291.282910][T23542] RAX: ffffffffffffffda RBX: 00007fd1bd625fa0 RCX: 00007fd1bd39e0d9 [ 1291.282924][T23542] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 1291.282936][T23542] RBP: 00007fd1bd435024 R08: 0000000000000000 R09: 0000000000000000 [ 1291.282948][T23542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.282960][T23542] R13: 00007fd1bd626038 R14: 00007fd1bd625fa0 R15: 00007fd1bd74fa48 [ 1291.282990][T23542] [ 1291.283020][T23542] memory: usage 0kB, limit 0kB, failcnt 604 [ 1291.572466][T23542] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1291.580172][T23542] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1291.587256][T23542] Memory cgroup stats for /syz2/test: [ 1291.587418][T23542] cache 0 [ 1291.595983][T23542] rss 0 [ 1291.598809][T23542] rss_huge 0 [ 1291.602040][T23542] shmem 0 [ 1291.605095][T23542] mapped_file 0 [ 1291.608588][T23542] dirty 0 [ 1291.611560][T23542] writeback 0 [ 1291.615134][T23542] workingset_refault_anon 0 [ 1291.619680][T23542] workingset_refault_file 0 [ 1291.634036][T23542] swap 0 [ 1291.637224][T23542] swapcached 0 [ 1291.640667][T23542] pgpgin 0 [ 1291.643830][T23542] pgpgout 0 [ 1291.646985][T23542] pgfault 8 [ 1291.650141][T23542] pgmajfault 0 [ 1291.678135][T23542] inactive_anon 0 [ 1291.686482][T23542] active_anon 0 [ 1291.690016][T23542] inactive_file 0 [ 1291.695175][T23542] active_file 0 [ 1291.698732][T23542] unevictable 0 [ 1291.702237][T23542] hierarchical_memory_limit 0 [ 1291.708015][T23542] hierarchical_memsw_limit 9223372036854771712 [ 1291.714707][T23542] total_cache 0 [ 1291.718225][T23542] total_rss 0 [ 1291.721547][T23542] total_rss_huge 0 [ 1291.729851][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 1291.738727][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1291.749462][T23542] total_shmem 0 [ 1291.762282][T23542] total_mapped_file 0 [ 1291.769318][ T9] usb 8-1: USB disconnect, device number 26 [ 1291.780965][T23542] total_dirty 0 [ 1291.786893][T23542] total_writeback 0 [ 1291.806103][T23542] total_workingset_refault_anon 0 [ 1291.822780][T23542] total_workingset_refault_file 0 [ 1291.831343][T23542] total_swap 0 [ 1291.835404][T23542] total_swapcached 0 [ 1291.839331][T23542] total_pgpgin 0 [ 1291.842890][T23542] total_pgpgout 0 [ 1291.846846][T23542] total_pgfault 8 [ 1291.850535][T23542] total_pgmajfault 0 [ 1291.861268][T23542] total_inactive_anon 0 [ 1291.866118][T23542] total_active_anon 0 [ 1291.870171][T23542] total_inactive_file 0 [ 1291.874622][T23542] total_active_file 0 [ 1291.878645][T23542] total_unevictable 0 [ 1291.882640][T23542] anon_cost 0 [ 1291.886296][T23542] file_cost 0 [ 1291.889625][T23542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.5250,pid=23541,uid=0 [ 1291.908067][T23542] Memory cgroup out of memory: Killed process 23541 (syz.2.5250) total-vm:102384kB, anon-rss:1432kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1292.001366][T23542] socket: no more sockets [ 1292.030234][T23552] netlink: 'syz.8.5252': attribute type 13 has an invalid length. [ 1292.593327][T14563] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1292.686272][T20944] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1292.771821][T14563] usb 10-1: Using ep0 maxpacket: 32 [ 1292.779225][T14563] usb 10-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 8.ba [ 1292.790728][T14563] usb 10-1: config 252 has an invalid interface number: 30 but max is 0 [ 1292.804434][T14563] usb 10-1: config 252 has no interface number 0 [ 1292.819865][T14563] usb 10-1: config 252 interface 30 altsetting 16 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1292.862610][T14563] usb 10-1: config 252 interface 30 has no altsetting 0 [ 1292.863578][T20944] usb 8-1: Using ep0 maxpacket: 16 [ 1292.898281][T20944] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1292.908908][T20944] usb 8-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 1292.925150][T20944] usb 8-1: config 16 has an invalid interface number: 44 but max is 0 [ 1292.938860][T20944] usb 8-1: config 16 has no interface number 0 [ 1292.951559][T14563] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.962104][T14563] usb 10-1: Product: syz [ 1292.969175][T14563] usb 10-1: Manufacturer: syz [ 1292.975856][T14563] usb 10-1: SerialNumber: syz [ 1293.003827][T20944] usb 8-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 1293.020046][T20944] usb 8-1: config 16 interface 44 has no altsetting 0 [ 1293.056023][T20944] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.076292][T20944] usb 8-1: Product: syz [ 1293.087245][T20944] usb 8-1: Manufacturer: syz [ 1293.101847][T20944] usb 8-1: SerialNumber: syz [ 1293.150014][T23561] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1293.420313][T23561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.447577][T14563] ljca 10-1:252.30: bulk endpoints not found [ 1293.454105][T23561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.486496][T23567] loop8: detected capacity change from 0 to 7 [ 1293.517282][T23567] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1293.539224][T14563] usb 10-1: USB disconnect, device number 19 [ 1293.573443][T23567] loop8: partition table partially beyond EOD, truncated [ 1293.595235][T20944] cypress_cy7c63 8-1:16.44: Cypress CY7C63xxx device now attached [ 1293.644122][T20944] usb 8-1: USB disconnect, device number 27 [ 1293.660995][T23567] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1293.680420][T20944] cypress_cy7c63 8-1:16.44: Cypress CY7C63xxx device now disconnected [ 1293.752616][T23567] loop8: p2 start 121280928 is beyond EOD, truncated [ 1293.816471][T18107] udevd[18107]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1294.443273][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1294.553201][ T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1294.593689][ T24] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1294.615332][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.625074][ T24] usb 7-1: Product: syz [ 1294.631984][ T24] usb 7-1: Manufacturer: syz [ 1294.641646][ T24] usb 7-1: SerialNumber: syz [ 1294.653718][ T24] usb 7-1: config 0 descriptor?? [ 1294.713321][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1294.737062][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1294.779309][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.802444][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1294.834998][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.856209][ T9] usb 10-1: Product: syz [ 1294.882889][ T9] usb 10-1: Manufacturer: syz [ 1294.900604][ T9] usb 10-1: SerialNumber: syz [ 1294.921967][ T9] usb 10-1: config 0 descriptor?? [ 1295.080296][T23573] loop3: detected capacity change from 0 to 7 [ 1295.107388][T23573] Dev loop3: unable to read RDB block 7 [ 1295.131183][T23573] loop3: AHDI p3 p4 [ 1295.151199][T23573] loop3: partition table partially beyond EOD, truncated [ 1295.176772][T23573] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1295.210336][ T24] usb 7-1: Firmware version (0.0) predates our first public release. [ 1295.234331][ T24] usb 7-1: Please update to version 0.2 or newer [ 1295.339606][ T24] usb 7-1: USB disconnect, device number 27 [ 1295.883238][ T9] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1296.056651][T23596] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1296.064863][ T9] usb 3-1: device descriptor read/64, error -71 [ 1296.084361][T23596] kvm: pic: single mode not supported [ 1296.092775][T23596] kvm: pic: non byte read [ 1296.114116][T23596] kvm: pic: level sensitive irq not supported [ 1296.114177][T23596] kvm: pic: non byte read [ 1296.131148][T23596] kvm: pic: level sensitive irq not supported [ 1296.131211][T23596] kvm: pic: non byte read [ 1296.143930][T23596] kvm: pic: level sensitive irq not supported [ 1296.143976][T23596] kvm: pic: non byte read [ 1296.160563][T23601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.180688][ T29] audit: type=1326 audit(1786939714.638:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23599 comm="syz.8.5271" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15d0f9e0d9 code=0x0 [ 1296.213894][ T24] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1296.303224][ T9] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1296.394415][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1296.406150][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.417163][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1296.430347][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1296.433566][ T9] usb 3-1: device descriptor read/64, error -71 [ 1296.443340][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1296.460879][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1296.473424][T20944] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1296.490776][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.499707][ T24] usb 7-1: Product: syz [ 1296.504403][ T24] usb 7-1: Manufacturer: syz [ 1296.509201][ T24] usb 7-1: SerialNumber: syz [ 1296.518900][ T24] usb 7-1: config 0 descriptor?? [ 1296.530763][ T24] xbox_remote_probe: endpoint_in message size==0? [ 1296.583945][ T9] usb usb3-port1: attempt power cycle [ 1296.627289][T20944] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1296.638664][T20944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.649952][T20944] usb 8-1: config 0 descriptor?? [ 1296.660119][T20944] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1296.739424][T23594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.749560][T23594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.860274][T20944] gspca_spca508: reg_read err -32 [ 1296.923247][ T9] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1296.953776][ T9] usb 3-1: device descriptor read/8, error -71 [ 1297.203265][ T9] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1297.247991][ T9] usb 3-1: device descriptor read/8, error -71 [ 1297.373586][ T9] usb usb3-port1: unable to enumerate USB device [ 1297.381905][T20944] gspca_spca508: reg_read err -110 [ 1297.412163][T20944] gspca_spca508: reg_read err -32 [ 1297.440151][T20944] gspca_spca508: reg_read err -32 [ 1297.461351][T20944] gspca_spca508: reg write: error -32 [ 1297.479749][T20944] spca508 8-1:0.0: probe with driver spca508 failed with error -32 [ 1297.527387][T14563] usb 10-1: USB disconnect, device number 20 [ 1297.669438][T23615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.683829][ T29] audit: type=1326 audit(1786939716.148:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1297.714611][ T29] audit: type=1326 audit(1786939716.168:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1297.790484][ T29] audit: type=1326 audit(1786939716.168:11089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1297.858561][ T29] audit: type=1326 audit(1786939716.168:11088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1297.921312][ T29] audit: type=1326 audit(1786939716.168:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1297.988540][ T29] audit: type=1326 audit(1786939716.168:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1298.065506][ T29] audit: type=1326 audit(1786939716.168:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1298.129660][ T29] audit: type=1326 audit(1786939716.168:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1298.264545][ T29] audit: type=1326 audit(1786939716.168:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8309f9e0d9 code=0x7ffc0000 [ 1298.598073][T23619] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5275'. [ 1298.926372][T23624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1299.087123][T14563] usb 7-1: USB disconnect, device number 28 [ 1299.096257][ T5612] usb 8-1: USB disconnect, device number 28 [ 1299.264106][T20944] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1299.272377][ T9] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1299.313565][ T24] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1299.444112][T20944] usb 9-1: Using ep0 maxpacket: 8 [ 1299.449593][ T9] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1299.459750][T20944] usb 9-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 1299.470712][ T9] usb 10-1: config 0 has no interfaces? [ 1299.474529][ T24] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1299.487666][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.498913][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1299.509108][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.511996][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1299.519385][T20944] usb 9-1: config 0 has an invalid interface number: 125 but max is 0 [ 1299.539189][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1299.549476][ T24] usb 3-1: Product: syz [ 1299.550671][ T9] usb 10-1: Product: syz [ 1299.558541][ T24] usb 3-1: Manufacturer: syz [ 1299.563456][ T24] usb 3-1: SerialNumber: syz [ 1299.564793][ T9] usb 10-1: Manufacturer: syz [ 1299.574077][T20944] usb 9-1: config 0 has no interface number 0 [ 1299.577861][ T24] usb 3-1: config 0 descriptor?? [ 1299.581590][ T9] usb 10-1: SerialNumber: syz [ 1299.604381][T20944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.614462][ T24] usb 3-1: no audio or video endpoints found [ 1299.628108][ T9] usb 10-1: config 0 descriptor?? [ 1299.639559][T20944] usb 9-1: config 0 descriptor?? [ 1299.653017][T20944] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1299.818072][ T24] usb 3-1: USB disconnect, device number 89 [ 1299.994524][ T5674] usb 10-1: USB disconnect, device number 21 [ 1300.056608][T20944] gspca_spca501: reg write: error -71 [ 1300.072934][T20944] spca501 9-1:0.125: Reg write failed for 0x02,0xa048,0x00 [ 1300.098736][T20944] spca501 9-1:0.125: probe with driver spca501 failed with error -22 [ 1300.142660][T20944] usb 9-1: USB disconnect, device number 2 [ 1300.157162][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.170785][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.437178][T23647] loop8: detected capacity change from 0 to 7 [ 1300.445970][T23647] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1300.454404][T23647] loop8: partition table partially beyond EOD, truncated [ 1300.461904][T23647] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1300.472990][T23647] loop8: p2 start 121280928 is beyond EOD, truncated [ 1300.483283][T20943] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1300.527637][T18107] udevd[18107]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1300.610245][T20944] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1300.653266][T20943] usb 8-1: Using ep0 maxpacket: 16 [ 1300.667629][T20943] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1300.682420][T20943] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.695099][T20943] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1300.711239][T20943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.722735][T20943] usb 8-1: Product: syz [ 1300.735685][T20943] usb 8-1: Manufacturer: syz [ 1300.740415][T20943] usb 8-1: SerialNumber: syz [ 1300.748606][T20943] usb 8-1: config 0 descriptor?? [ 1300.784679][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1300.792303][T20944] usb 7-1: Using ep0 maxpacket: 8 [ 1300.814952][T20944] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1300.840624][T20944] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 1300.852286][T20944] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 1300.853680][ T5674] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1300.864184][T20944] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1300.910094][T22664] team0: Port device team_slave_1 removed [ 1300.918379][T23655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5289'. [ 1300.925662][T20944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.941225][T20944] usb 7-1: Product: syz [ 1300.947310][T20944] usb 7-1: Manufacturer: syz [ 1300.951984][T20944] usb 7-1: SerialNumber: syz [ 1300.972586][T20944] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 1300.982105][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1300.989864][T20944] usb 7-1: no configuration chosen from 1 choice [ 1300.996909][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1301.012866][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.031674][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.034213][ T5674] usb 10-1: device descriptor read/64, error -71 [ 1301.048071][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.067222][ T9] usb 3-1: config 0 descriptor?? [ 1301.122477][T23657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.303264][ T5674] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1301.434023][ T5674] usb 10-1: device descriptor read/64, error -71 [ 1301.489020][T23649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.499429][T23649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.512711][ T9] hid (null): unknown global tag 0xe [ 1301.518841][ T9] hid (null): unknown global tag 0xd [ 1301.525174][ T9] hid (null): unknown global tag 0xe [ 1301.530665][ T9] hid (null): report_id 0 is invalid [ 1301.536203][ T9] hid (null): invalid report_size -1536022896 [ 1301.542486][ T9] hid (null): unknown global tag 0xd [ 1301.549040][ T9] hid (null): unknown global tag 0xe [ 1301.554039][ T5674] usb usb10-port1: attempt power cycle [ 1301.711733][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 1301.893431][ T5674] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1301.915736][ T5674] usb 10-1: device descriptor read/8, error -71 [ 1301.945087][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 1301.953788][ T9] letsketch 0003:6161:4D15.0047: probe with driver letsketch failed with error -71 [ 1301.973562][ T9] usb 3-1: USB disconnect, device number 90 [ 1302.173492][ T5674] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1302.194804][ T5674] usb 10-1: device descriptor read/8, error -71 [ 1302.293387][T14563] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1302.314201][ T5674] usb usb10-port1: unable to enumerate USB device [ 1302.449302][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5292'. [ 1302.458670][T14563] usb 9-1: device descriptor read/64, error -71 [ 1302.728786][T14563] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1302.788730][T23683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.800948][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 1302.800975][ T29] audit: type=1326 audit(1786939721.258:11207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1302.836979][ T29] audit: type=1326 audit(1786939721.258:11208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1302.862573][ T29] audit: type=1326 audit(1786939721.278:11209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1302.896241][ T29] audit: type=1326 audit(1786939721.278:11210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1302.921470][T14563] usb 9-1: device descriptor read/64, error -71 [ 1302.928137][ T29] audit: type=1326 audit(1786939721.278:11211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1302.953831][ T29] audit: type=1326 audit(1786939721.278:11212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1302.978496][ T29] audit: type=1326 audit(1786939721.278:11214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1303.003286][ T29] audit: type=1326 audit(1786939721.278:11213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1303.029018][ T29] audit: type=1326 audit(1786939721.278:11215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1303.054125][T14563] usb usb9-port1: attempt power cycle [ 1303.074132][ T29] audit: type=1326 audit(1786939721.278:11216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.2.5298" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1303.262266][T20944] usb 8-1: USB disconnect, device number 29 [ 1303.384566][ T9] usb 7-1: USB disconnect, device number 29 [ 1303.403791][T14563] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1303.435713][T14563] usb 9-1: device descriptor read/8, error -71 [ 1303.719435][T14563] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1303.754032][T14563] usb 9-1: device descriptor read/8, error -71 [ 1303.783514][ T5674] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1303.823331][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1303.865904][T14563] usb usb9-port1: unable to enumerate USB device [ 1303.900348][T23703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1303.953670][ T5674] usb 3-1: Using ep0 maxpacket: 8 [ 1303.965183][ T5674] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1303.981825][ T5674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.993752][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1304.008809][ T5674] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1304.021494][ T5674] pvrusb2: ********** [ 1304.027667][ T5674] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1304.038331][ T5674] pvrusb2: Important functionality might not be entirely working. [ 1304.038511][ T9] usb 7-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1304.047477][ T5674] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1304.067415][ T5674] pvrusb2: ********** [ 1304.079026][ T9] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1304.089782][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.112892][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1304.215174][ T2354] pvrusb2: Invalid write control endpoint [ 1304.316133][ T2354] pvrusb2: Invalid write control endpoint [ 1304.351641][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1304.375526][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1304.404201][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1304.418714][T23690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.434192][ T5674] usb 3-1: USB disconnect, device number 91 [ 1304.436036][T23690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.460393][ T2354] pvrusb2: Device being rendered inoperable [ 1304.477287][ T2354] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1304.486310][ T2354] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1304.502692][ T2354] pvrusb2: Attached sub-driver cx25840 [ 1304.510011][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1304.520748][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1304.535198][T23690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.578448][T23690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.609788][ T9] gspca_sn9c2028: read1 error -71 [ 1304.628026][ T9] gspca_sn9c2028: read1 error -71 [ 1304.646210][ T9] gspca_sn9c2028: read1 error -71 [ 1304.664315][ T9] sn9c2028 7-1:220.0: probe with driver sn9c2028 failed with error -71 [ 1304.682155][ T9] usb 7-1: USB disconnect, device number 30 [ 1304.773949][T23708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5308'. [ 1304.884722][T23713] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5310'. [ 1305.043599][ T5674] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1305.171290][T23725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.213886][ T5674] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1305.224197][ T5674] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 1305.232976][ T5674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1305.234865][ T9] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1305.256831][ T5674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1305.291373][ T5674] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.301045][ T5674] usb 8-1: Product: syz [ 1305.310868][ T5674] usb 8-1: Manufacturer: syz [ 1305.321868][ T5674] usb 8-1: SerialNumber: syz [ 1305.334804][ T5674] usb 8-1: config 0 descriptor?? [ 1305.393271][ T9] usb 10-1: device descriptor read/64, error -71 [ 1305.554057][ T5674] usb 8-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 1305.613209][T20944] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1305.629139][ T5674] usb 8-1: USB disconnect, device number 30 [ 1305.643536][ T9] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1305.764470][T20944] usb 7-1: Using ep0 maxpacket: 16 [ 1305.783290][ T9] usb 10-1: device descriptor read/64, error -71 [ 1305.790174][T20944] usb 7-1: New USB device found, idVendor=0582, idProduct=012f, bcdDevice= 0.40 [ 1305.820690][T20944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.842192][T20944] usb 7-1: Product: ᠊ [ 1305.842773][T23738] FAULT_INJECTION: forcing a failure. [ 1305.842773][T23738] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.867363][T20944] usb 7-1: Manufacturer: ь [ 1305.892139][T23738] CPU: 1 UID: 0 PID: 23738 Comm: syz.2.5321 Tainted: G L syzkaller #0 PREEMPT(full) [ 1305.892165][T23738] Tainted: [L]=SOFTLOCKUP [ 1305.892173][T23738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1305.892184][T23738] Call Trace: [ 1305.892191][T23738] [ 1305.892199][T23738] dump_stack_lvl+0xe8/0x150 [ 1305.892233][T23738] should_fail_ex+0x40c/0x560 [ 1305.892264][T23738] should_failslab+0xa8/0x100 [ 1305.892293][T23738] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1305.892316][T23738] ? skb_clone+0x212/0x3a0 [ 1305.892341][T23738] ? skb_clone+0x212/0x3a0 [ 1305.892369][T23738] skb_clone+0x212/0x3a0 [ 1305.892395][T23738] __netlink_deliver_tap+0x413/0x860 [ 1305.892430][T23738] ? netlink_deliver_tap+0x2e/0x1b0 [ 1305.892454][T23738] netlink_deliver_tap+0x19c/0x1b0 [ 1305.892478][T23738] netlink_unicast+0x77f/0x940 [ 1305.892509][T23738] netlink_sendmsg+0x813/0xb40 [ 1305.892540][T23738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.892567][T23738] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1305.892592][T23738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.892615][T23738] sock_sendmsg_nosec+0x13a/0x180 [ 1305.892644][T23738] __sys_sendto+0x408/0x5a0 [ 1305.892669][T23738] ? __pfx___sys_sendto+0x10/0x10 [ 1305.892712][T23738] ? rcu_is_watching+0x15/0xb0 [ 1305.892748][T23738] __x64_sys_sendto+0xde/0x100 [ 1305.892772][T23738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.892793][T23738] do_syscall_64+0x174/0x580 [ 1305.892815][T23738] ? trace_irq_disable+0x3b/0x140 [ 1305.892838][T23738] ? clear_bhb_loop+0x70/0xc0 [ 1305.892861][T23738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.892879][T23738] RIP: 0033:0x7fd1bd35e90e [ 1305.892896][T23738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1305.892912][T23738] RSP: 002b:00007fd1be29fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1305.892931][T23738] RAX: ffffffffffffffda RBX: 00007fd1be2a16c0 RCX: 00007fd1bd35e90e [ 1305.892945][T23738] RDX: 0000000000000020 RSI: 00007fd1be2a0000 RDI: 0000000000000005 [ 1305.892956][T23738] RBP: 0000000000000000 R08: 00007fd1be29ff04 R09: 000000000000000c [ 1305.892968][T23738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1305.892979][T23738] R13: 00007fd1be29ff58 R14: 00007fd1be2a0000 R15: 0000000000000000 [ 1305.893008][T23738] [ 1305.914126][ T9] usb usb10-port1: attempt power cycle [ 1306.140795][T23732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.149783][T23732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.163050][T20944] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1306.176499][T20944] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1306.250632][T20944] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1306.380040][T18107] udevd[18107]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.441890][T23752] Cannot find add_set index 0 as target [ 1306.462207][T23752] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5326'. [ 1306.491452][T23754] lo: Caught tx_queue_len zero misconfig [ 1306.523467][ T9] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1306.546093][ T9] usb 10-1: device descriptor read/8, error -71 [ 1306.553251][T20944] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1306.703543][T20944] usb 3-1: Using ep0 maxpacket: 8 [ 1306.710681][T20944] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1306.721606][T20944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.724252][T23755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.733408][ T5612] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1306.748294][T23755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.757923][T20944] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1306.766153][T20943] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1306.781051][T20944] pvrusb2: ********** [ 1306.785203][ T9] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1306.793021][T20944] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1306.804745][T20944] pvrusb2: Important functionality might not be entirely working. [ 1306.812727][T20944] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1306.824460][T20944] pvrusb2: ********** [ 1306.828950][ T9] usb 10-1: device descriptor read/8, error -71 [ 1306.903259][ T5612] usb 9-1: device descriptor read/64, error -71 [ 1306.949946][ T9] usb usb10-port1: unable to enumerate USB device [ 1306.956574][T20943] usb 8-1: Using ep0 maxpacket: 16 [ 1306.965951][ T2354] pvrusb2: Invalid write control endpoint [ 1306.971989][T20943] usb 8-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1306.979639][T20943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.989750][T20943] usb 8-1: Product: syz [ 1306.994021][T20943] usb 8-1: Manufacturer: syz [ 1306.998633][T20943] usb 8-1: SerialNumber: syz [ 1307.011481][T20943] usb 8-1: config 0 descriptor?? [ 1307.026500][T20943] usb 8-1: selecting invalid altsetting 1 [ 1307.032394][T20943] technisat-usb2: could not set alternate setting to 0 [ 1307.089702][ T2354] pvrusb2: Invalid write control endpoint [ 1307.099826][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1307.112430][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1307.120516][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1307.134028][ T2354] pvrusb2: Device being rendered inoperable [ 1307.140035][ T2354] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1307.147196][ T2354] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1307.155621][ T2354] pvrusb2: Attached sub-driver cx25840 [ 1307.157343][ T5612] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1307.168816][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1307.168831][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1307.194239][ T5674] usb 3-1: USB disconnect, device number 92 [ 1307.225360][T20943] technisat-usb2: firmware version: 233.0 [ 1307.231328][T20943] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1307.323324][ T5612] usb 9-1: device descriptor read/64, error -71 [ 1307.433566][ T5612] usb usb9-port1: attempt power cycle [ 1307.629132][T20943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1307.639032][T20943] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1307.648001][T20943] usb 8-1: media controller created [ 1307.653431][T20943] technisat-usb2: i2c-error: out failed 53 = -22 [ 1307.659813][T20943] dvb-usb: MAC address reading failed. [ 1307.674528][T20943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1307.720643][T20943] DVB: Unable to find symbol stv090x_attach() [ 1307.773315][ T5612] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1307.794819][ T5612] usb 9-1: device descriptor read/8, error -71 [ 1307.819629][T23761] netlink: 'syz.2.5329': attribute type 1 has an invalid length. [ 1307.875330][T23761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1307.897278][T23763] veth3: entered allmulticast mode [ 1307.901393][T20943] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1307.921038][T23763] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1307.977906][T23761] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1307.992880][T20943] rc_core: IR keymap rc-technisat-usb2 not found [ 1308.006568][T20943] Registered IR keymap rc-empty [ 1308.026212][T20943] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1308.042073][T23761] macvlan2: entered promiscuous mode [ 1308.046320][ T5612] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1308.048977][T23761] macvlan2: entered allmulticast mode [ 1308.067316][T23761] bond4: entered promiscuous mode [ 1308.073862][T23761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1308.082291][T23761] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1308.102005][T20943] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input96 [ 1308.124037][ T5612] usb 9-1: device descriptor read/8, error -71 [ 1308.124067][T23761] bond4: left promiscuous mode [ 1308.146031][T20943] dvb-usb: schedule remote query interval to 100 msecs. [ 1308.153996][T20943] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1308.172714][T20943] usb 8-1: USB disconnect, device number 31 [ 1308.244425][ T5612] usb usb9-port1: unable to enumerate USB device [ 1308.313789][T20943] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1308.415708][ T5612] usb 7-1: USB disconnect, device number 31 [ 1308.743268][T20943] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1308.813579][ T5674] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1308.823268][ T5612] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1308.894285][T20943] usb 10-1: Using ep0 maxpacket: 32 [ 1308.899991][T20943] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1308.910367][T20943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.922525][T20943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.930794][T20943] usb 10-1: Product: syz [ 1308.935202][T20943] usb 10-1: Manufacturer: syz [ 1308.939917][T20943] usb 10-1: SerialNumber: syz [ 1308.948563][T20943] usb 10-1: config 0 descriptor?? [ 1308.961688][T20943] cdc_ether 10-1:0.0: missing cdc header descriptor [ 1308.970221][T20943] usb 10-1: unsupported MDLM descriptors [ 1308.976053][ T5612] usb 7-1: Using ep0 maxpacket: 8 [ 1308.983641][ T5674] usb 8-1: Using ep0 maxpacket: 8 [ 1308.990312][ T5612] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1309.000222][ T5674] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1309.002542][ T5612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.024889][T20944] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1309.032802][ T5674] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1309.039982][ T5612] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1309.057223][ T5674] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1309.062815][ T5612] pvrusb2: ********** [ 1309.072600][ T5612] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1309.082917][ T5612] pvrusb2: Important functionality might not be entirely working. [ 1309.090942][ T5612] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1309.105032][ T5612] pvrusb2: ********** [ 1309.107036][ T5674] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1309.133850][ T5674] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1309.145911][ T5674] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1309.159030][ T5674] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.171619][T20943] usb 10-1: USB disconnect, device number 30 [ 1309.213702][T20944] usb 3-1: Using ep0 maxpacket: 16 [ 1309.219900][T20944] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1309.232976][T20944] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 1309.243959][T20944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1309.254690][ T2354] pvrusb2: Invalid write control endpoint [ 1309.261244][T20944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.277423][T20944] usb 3-1: Product: syz [ 1309.287626][T20944] usb 3-1: Manufacturer: syz [ 1309.298185][T20944] usb 3-1: SerialNumber: syz [ 1309.317533][T20944] usb 3-1: 0:2 : does not exist [ 1309.354963][ T2354] pvrusb2: Invalid write control endpoint [ 1309.360757][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1309.372202][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1309.380390][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1309.391021][ T2354] pvrusb2: Device being rendered inoperable [ 1309.400453][ T2354] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1309.400999][ T5674] usb 8-1: GET_CAPABILITIES returned 0 [ 1309.414228][ T5674] usbtmc 8-1:16.0: can't read capabilities [ 1309.415240][ T2354] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1309.428977][ T2354] pvrusb2: Attached sub-driver cx25840 [ 1309.434768][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1309.446693][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1309.470090][ T5674] usb 7-1: USB disconnect, device number 32 [ 1309.517010][T20944] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1309.558683][T20944] usb 3-1: USB disconnect, device number 93 [ 1309.623266][T18107] udevd[18107]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1309.640210][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.649346][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.658424][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.667520][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.677586][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.686684][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.695794][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.704876][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.724614][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.733716][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.742817][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.769788][T23787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1309.787599][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 1309.787612][ T29] audit: type=1326 audit(1786939728.248:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1309.819519][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.828602][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.837688][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.846781][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1309.873221][ T29] audit: type=1326 audit(1786939728.278:11335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1309.878649][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1309.908558][ T29] audit: type=1326 audit(1786939728.278:11336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1309.937524][ T29] audit: type=1326 audit(1786939728.278:11337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1309.963729][ T29] audit: type=1326 audit(1786939728.278:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1309.990860][T20944] usb 8-1: USB disconnect, device number 32 [ 1310.025627][ T29] audit: type=1326 audit(1786939728.318:11339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1310.050558][ T29] audit: type=1326 audit(1786939728.318:11340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1310.077673][ T29] audit: type=1326 audit(1786939728.318:11341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1310.123338][ T29] audit: type=1326 audit(1786939728.318:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1310.181906][ T29] audit: type=1326 audit(1786939728.318:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23786 comm="syz.8.5337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d0f9e0d9 code=0x7ffc0000 [ 1310.234425][T20943] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1310.384245][T20943] usb 10-1: Using ep0 maxpacket: 16 [ 1310.398910][T20943] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1310.431371][ T5612] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1310.442254][T20943] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1310.462792][T20943] usb 10-1: config 9 has an invalid interface number: 57 but max is 0 [ 1310.493637][T20943] usb 10-1: config 9 has no interface number 0 [ 1310.510269][T20943] usb 10-1: config 9 interface 57 has no altsetting 0 [ 1310.538327][T20943] usb 10-1: string descriptor 0 read error: -22 [ 1310.555826][T20943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.603268][ T5612] usb 3-1: Using ep0 maxpacket: 16 [ 1310.609087][ T5612] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1310.637840][ T5612] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.672624][ T5612] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.698958][ T5612] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1310.759226][ T5612] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1310.784385][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.822334][ T5612] usb 3-1: config 0 descriptor?? [ 1310.864839][T23789] dvmrp8: entered allmulticast mode [ 1311.073704][ T24] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1311.166489][T20943] video4linux radio48: keene_cmd_main failed (-71) [ 1311.184122][T20943] radio-keene 10-1:9.57: V4L2 device registered as radio48 [ 1311.256453][T20943] usb 10-1: USB disconnect, device number 31 [ 1311.294158][ T24] usb 8-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1311.334575][ T5612] mcp2200 0003:04D8:00DF.0048: item 0 4 0 9 parsing failed [ 1311.349843][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.366413][ T5612] mcp2200 0003:04D8:00DF.0048: can't parse reports [ 1311.390271][ T5612] mcp2200 0003:04D8:00DF.0048: probe with driver mcp2200 failed with error -22 [ 1311.413824][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.439032][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1311.512323][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.551606][ T24] usb 8-1: config 0 descriptor?? [ 1311.566150][ T5612] usb 3-1: USB disconnect, device number 94 [ 1311.988809][ T24] logitech-hidpp-device 0003:046D:C262.0049: unknown main item tag 0x0 [ 1311.998752][ T24] logitech-hidpp-device 0003:046D:C262.0049: unknown main item tag 0x3 [ 1312.043452][ T24] logitech-hidpp-device 0003:046D:C262.0049: item fetching failed at offset 23/24 [ 1312.195597][ T24] logitech-hidpp-device 0003:046D:C262.0049: hidpp_probe:parse failed [ 1312.211874][T23813] qrtr: Invalid version 0 [ 1312.234881][ T24] logitech-hidpp-device 0003:046D:C262.0049: probe with driver logitech-hidpp-device failed with error -22 [ 1312.281166][ T5612] usb 8-1: USB disconnect, device number 33 [ 1313.333465][ T5674] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1313.513551][ T5674] usb 10-1: Using ep0 maxpacket: 8 [ 1313.521374][ T5674] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1313.558449][ T5674] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1313.589229][ T5674] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1313.616102][ T5674] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1313.677953][ T5612] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1313.685757][ T5674] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1313.728033][ T5674] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.775400][ T5674] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.851588][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1313.923241][ T5612] usb 8-1: Using ep0 maxpacket: 16 [ 1313.933603][ T5612] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1313.980969][ T5612] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1314.020157][ T5674] usb 10-1: GET_CAPABILITIES returned 0 [ 1314.032023][ T5674] usbtmc 10-1:16.0: can't read capabilities [ 1314.049352][ T5612] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.087794][ T5612] usb 8-1: Product: syz [ 1314.104359][ T5612] usb 8-1: Manufacturer: syz [ 1314.119299][ T5612] usb 8-1: SerialNumber: syz [ 1314.138808][ T5612] usb 8-1: config 0 descriptor?? [ 1314.159093][T23834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1314.253923][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.263138][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.272302][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.281471][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.290642][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.342884][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.373937][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.383107][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.392260][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.401384][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.410512][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.419638][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.455478][T23835] pimreg: entered allmulticast mode [ 1314.513430][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.522584][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.531706][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.540833][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1314.794895][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 1314.794906][ T29] audit: type=1326 audit(1786939733.258:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1314.839058][ T5612] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1314.926143][ T29] audit: type=1326 audit(1786939733.288:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1314.992017][ T29] audit: type=1326 audit(1786939733.288:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1315.022657][ T29] audit: type=1326 audit(1786939733.288:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1315.089328][T14563] usb 10-1: USB disconnect, device number 32 [ 1315.122229][ T29] audit: type=1326 audit(1786939733.288:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1315.187968][ T29] audit: type=1326 audit(1786939733.288:11818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1315.245927][ T29] audit: type=1326 audit(1786939733.288:11819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1315.299356][ T29] audit: type=1326 audit(1786939733.288:11820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd1bd39e0d9 code=0x7ffc0000 [ 1315.361241][ T29] audit: type=1326 audit(1786939733.288:11821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23822 comm="syz.9.5347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8309f5e90e code=0x7ffc0000 [ 1315.412747][ T29] audit: type=1326 audit(1786939733.288:11822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23822 comm="syz.9.5347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8309f5e90e code=0x7ffc0000 [ 1315.508879][T20945] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1315.673386][T20945] usb 7-1: Using ep0 maxpacket: 32 [ 1315.712322][ T5612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1315.724781][T20945] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1315.750793][ T5612] usb 3-1: New USB device found, idVendor=2001, idProduct=f115, bcdDevice=39.76 [ 1315.762704][T20945] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1315.782715][T20945] usb 7-1: config 0 has no interface number 0 [ 1315.803600][ T5612] usb 3-1: config 39 has an invalid interface number: 180 but max is 0 [ 1315.817539][T20945] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1315.840640][ T5612] usb 3-1: config 39 has no interface number 0 [ 1315.874265][T20945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.898037][ T5612] usb 3-1: config 39 interface 180 has no altsetting 0 [ 1315.933628][T20945] usb 7-1: Product: syz [ 1315.965849][T20945] usb 7-1: Manufacturer: syz [ 1315.995031][T20945] usb 7-1: SerialNumber: syz [ 1316.004552][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.036572][T20945] usb 7-1: config 0 descriptor?? [ 1316.045995][ T5612] usb 3-1: Product: syz [ 1316.099128][ T5612] usb 3-1: Manufacturer: syz [ 1316.128796][T20945] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1316.148684][ T5612] usb 3-1: SerialNumber: syz [ 1316.185913][T20945] em28xx 7-1:0.132: Video interface 132 found: [ 1316.317961][T23844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.388586][T23844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.530351][T20943] usb 8-1: USB disconnect, device number 34 [ 1316.617304][T20945] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1316.719685][T23864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5358'. [ 1316.830088][T23865] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5356'. [ 1316.918726][T23865] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5356'. [ 1316.928640][ T5674] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1317.093198][ T5674] usb 9-1: Using ep0 maxpacket: 8 [ 1317.099429][ T5674] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1317.146907][ T5674] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.212807][ T5674] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1317.261273][T23871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5361'. [ 1317.271945][ T5674] pvrusb2: ********** [ 1317.291577][ T5674] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1317.339641][ T5674] pvrusb2: Important functionality might not be entirely working. [ 1317.385487][ T5674] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1317.426969][T22664] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discverxzzl]! [ 1317.429733][ T5674] pvrusb2: ********** [ 1317.500313][ T2354] pvrusb2: Invalid write control endpoint [ 1317.527331][T23844] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discverxzzl]" [ 1317.631111][ T5612] gspca_main: pac207-2.14.0 probing 2001:f115 [ 1317.674033][ T5612] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1317.765297][ T5674] usb 9-1: USB disconnect, device number 11 [ 1317.799265][ T2354] pvrusb2: Invalid write control endpoint [ 1317.836632][ T5612] usb 3-1: USB disconnect, device number 95 [ 1317.850613][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1317.893547][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1317.949377][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1317.962319][T20945] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1317.991389][ T2354] pvrusb2: Device being rendered inoperable [ 1318.019949][T20945] em28xx 7-1:0.132: board has no eeprom [ 1318.028736][ T2354] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1318.074660][ T2354] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1318.094031][T20945] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1318.120023][T20945] em28xx 7-1:0.132: analog set to bulk mode. [ 1318.129185][ T2354] pvrusb2: Attached sub-driver cx25840 [ 1318.143827][ T5612] em28xx 7-1:0.132: Registering V4L2 extension [ 1318.150682][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1318.186691][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1318.254814][ T24] usb 7-1: USB disconnect, device number 33 [ 1318.276316][ T24] em28xx 7-1:0.132: Disconnecting em28xx [ 1318.303525][T20944] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1318.483200][T20944] usb 8-1: Using ep0 maxpacket: 8 [ 1318.493232][ T5612] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1318.509002][T20944] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1318.520739][ T5612] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1318.547674][T20944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.559219][ T5612] em28xx 7-1:0.132: No AC97 audio processor [ 1318.610045][T20944] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1318.649422][T20944] pvrusb2: ********** [ 1318.663822][T20944] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1318.774915][ T5612] usb 7-1: Decoder not found [ 1318.780202][T20944] pvrusb2: Important functionality might not be entirely working. [ 1318.792159][ T5612] em28xx 7-1:0.132: failed to create media graph [ 1318.825574][T20944] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1318.865836][ T5612] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1318.902758][T23896] pim6reg: entered allmulticast mode [ 1318.958197][T23896] syz_tun (unregistering): left allmulticast mode [ 1318.967703][T20944] pvrusb2: ********** [ 1318.988336][T23894] ================================================================== [ 1318.996419][T23894] BUG: KASAN: slab-use-after-free in v4l2_open+0x397/0x3a0 [ 1319.003700][T23894] Read of size 4 at addr ffff8880541d4860 by task v4l_id/23894 [ 1319.011231][T23894] [ 1319.013549][T23894] CPU: 1 UID: 0 PID: 23894 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1319.013568][T23894] Tainted: [L]=SOFTLOCKUP [ 1319.013573][T23894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1319.013581][T23894] Call Trace: [ 1319.013587][T23894] [ 1319.013592][T23894] dump_stack_lvl+0xe8/0x150 [ 1319.013613][T23894] print_address_description+0x55/0x1e0 [ 1319.013631][T23894] ? v4l2_open+0x397/0x3a0 [ 1319.013646][T23894] print_report+0x58/0x70 [ 1319.013661][T23894] kasan_report+0x117/0x150 [ 1319.013681][T23894] ? v4l2_open+0x397/0x3a0 [ 1319.013698][T23894] v4l2_open+0x397/0x3a0 [ 1319.013713][T23894] chrdev_open+0x4d9/0x600 [ 1319.013728][T23894] ? __pfx_chrdev_open+0x10/0x10 [ 1319.013741][T23894] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1319.013764][T23894] ? __pfx_chrdev_open+0x10/0x10 [ 1319.013776][T23894] do_dentry_open+0x816/0x1380 [ 1319.013795][T23894] vfs_open+0x3b/0x340 [ 1319.013808][T23894] ? path_openat+0x2e2d/0x3830 [ 1319.013828][T23894] path_openat+0x2e44/0x3830 [ 1319.013848][T23894] ? kasan_save_track+0x3e/0x80 [ 1319.013864][T23894] ? do_sys_openat2+0xcc/0x200 [ 1319.013879][T23894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.013899][T23894] do_file_open+0x23e/0x4a0 [ 1319.013919][T23894] ? __pfx_do_file_open+0x10/0x10 [ 1319.013944][T23894] ? _raw_spin_unlock+0x28/0x50 [ 1319.013956][T23894] ? alloc_fd+0x651/0x6c0 [ 1319.013974][T23894] do_sys_openat2+0x115/0x200 [ 1319.013990][T23894] ? __pfx_do_sys_openat2+0x10/0x10 [ 1319.014006][T23894] ? exc_page_fault+0x6a/0xc0 [ 1319.014021][T23894] ? do_user_addr_fault+0xc4a/0x1340 [ 1319.014041][T23894] __x64_sys_openat+0x138/0x170 [ 1319.014057][T23894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.014070][T23894] do_syscall_64+0x174/0x580 [ 1319.014084][T23894] ? trace_irq_disable+0x3b/0x140 [ 1319.014100][T23894] ? clear_bhb_loop+0x70/0xc0 [ 1319.014114][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.014127][T23894] RIP: 0033:0x7f5b4d2a7407 [ 1319.014139][T23894] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1319.014150][T23894] RSP: 002b:00007ffd8374a8e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1319.014163][T23894] RAX: ffffffffffffffda RBX: 00007f5b4d954880 RCX: 00007f5b4d2a7407 [ 1319.014173][T23894] RDX: 0000000000000000 RSI: 00007ffd8374af1a RDI: ffffffffffffff9c [ 1319.014182][T23894] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1319.014189][T23894] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1319.014197][T23894] R13: 00007ffd8374ab30 R14: 00007f5b4dabb000 R15: 000055b8e2d0c4d8 [ 1319.014212][T23894] [ 1319.014217][T23894] [ 1319.100479][ T2354] pvrusb2: Invalid write control endpoint [ 1319.102413][T23894] Allocated by task 5612: [ 1319.102426][T23894] kasan_save_track+0x3e/0x80 [ 1319.292949][T23894] __kasan_kmalloc+0x93/0xb0 [ 1319.297532][T23894] __kmalloc_cache_noprof+0x32d/0x660 [ 1319.302908][T23894] em28xx_v4l2_init+0x103/0x3300 [ 1319.307929][T23894] em28xx_init_extension+0x120/0x1d0 [ 1319.313209][T23894] process_scheduled_works+0xa8e/0x14e0 [ 1319.318757][T23894] worker_thread+0xa47/0xfb0 [ 1319.323333][T23894] kthread+0x388/0x470 [ 1319.327412][T23894] ret_from_fork+0x514/0xb70 [ 1319.332012][T23894] ret_from_fork_asm+0x1a/0x30 [ 1319.336768][T23894] [ 1319.339080][T23894] Freed by task 5612: [ 1319.343040][T23894] kasan_save_track+0x3e/0x80 [ 1319.347707][T23894] kasan_save_free_info+0x40/0x50 [ 1319.352725][T23894] __kasan_slab_free+0x5c/0x80 [ 1319.357479][T23894] kfree+0x1c5/0x640 [ 1319.361360][T23894] em28xx_v4l2_init+0x1919/0x3300 [ 1319.366380][T23894] em28xx_init_extension+0x120/0x1d0 [ 1319.371659][T23894] process_scheduled_works+0xa8e/0x14e0 [ 1319.377194][T23894] worker_thread+0xa47/0xfb0 [ 1319.381766][T23894] kthread+0x388/0x470 [ 1319.385823][T23894] ret_from_fork+0x514/0xb70 [ 1319.390426][T23894] ret_from_fork_asm+0x1a/0x30 [ 1319.395283][T23894] [ 1319.397607][T23894] The buggy address belongs to the object at ffff8880541d4000 [ 1319.397607][T23894] which belongs to the cache kmalloc-8k of size 8192 [ 1319.411646][T23894] The buggy address is located 2144 bytes inside of [ 1319.411646][T23894] freed 8192-byte region [ffff8880541d4000, ffff8880541d6000) [ 1319.425609][T23894] [ 1319.427943][T23894] The buggy address belongs to the physical page: [ 1319.434352][T23894] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x541d0 [ 1319.443124][T23894] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1319.451620][T23894] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1319.459167][T23894] page_type: f5(slab) [ 1319.463163][T23894] raw: 00fff00000000040 ffff88801b002280 dead000000000100 dead000000000122 [ 1319.472094][T23894] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1319.480666][T23894] head: 00fff00000000040 ffff88801b002280 dead000000000100 dead000000000122 [ 1319.489334][T23894] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1319.497997][T23894] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1319.506655][T23894] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1319.515317][T23894] page dumped because: kasan: bad access detected [ 1319.521717][T23894] page_owner tracks the page as allocated [ 1319.527413][T23894] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 23833, tgid 23832 (), ts 1317385343607, free_ts 1317355501405 [ 1319.548237][T23894] post_alloc_hook+0x1f9/0x250 [ 1319.552992][T23894] get_page_from_freelist+0x21fa/0x2270 [ 1319.558529][T23894] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1319.564325][T23894] allocate_slab+0x79/0x5e0 [ 1319.569163][T23894] refill_objects+0x2d5/0x350 [ 1319.573835][T23894] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1319.579387][T23894] __kmalloc_cache_noprof+0x3a7/0x660 [ 1319.584762][T23894] audit_log_d_path+0xb8/0x1a0 [ 1319.589526][T23894] audit_log_d_path_exe+0x42/0x70 [ 1319.594536][T23894] audit_log_task+0x2c3/0x3d0 [ 1319.599220][T23894] audit_seccomp+0x85/0x190 [ 1319.603716][T23894] __seccomp_filter+0xd14/0x1e00 [ 1319.608654][T23894] do_syscall_64+0x10e/0x580 [ 1319.613235][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.619115][T23894] page last free pid 23855 tgid 23855 stack trace: [ 1319.625614][T23894] __free_frozen_pages+0xc1e/0xd10 [ 1319.630725][T23894] __slab_free+0x274/0x2c0 [ 1319.635129][T23894] qlist_free_all+0x99/0x100 [ 1319.639719][T23894] kasan_quarantine_reduce+0x148/0x160 [ 1319.645165][T23894] __kasan_slab_alloc+0x22/0x80 [ 1319.650024][T23894] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1319.655470][T23894] jbd2__journal_start+0x145/0x5c0 [ 1319.660588][T23894] __ext4_journal_start_sb+0x203/0x5d0 [ 1319.666043][T23894] ext4_dirty_inode+0x93/0x110 [ 1319.670802][T23894] __mark_inode_dirty+0x3a8/0x13b0 [ 1319.675907][T23894] file_update_time_flags+0x3ee/0x4a0 [ 1319.681281][T23894] ext4_page_mkwrite+0x224/0x1140 [ 1319.686297][T23894] do_page_mkwrite+0x147/0x310 [ 1319.691071][T23894] do_pte_missing+0x757/0x34b0 [ 1319.695822][T23894] handle_mm_fault+0x1b36/0x3080 [ 1319.700757][T23894] do_user_addr_fault+0xa4d/0x1340 [ 1319.705864][T23894] [ 1319.708189][T23894] Memory state around the buggy address: [ 1319.713803][T23894] ffff8880541d4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1319.721846][T23894] ffff8880541d4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1319.729890][T23894] >ffff8880541d4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1319.737948][T23894] ^ [ 1319.745132][T23894] ffff8880541d4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1319.753189][T23894] ffff8880541d4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1319.761261][T23894] ================================================================== [ 1319.859859][ T5612] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1319.893531][T20944] usb 8-1: USB disconnect, device number 35 [ 1319.927388][ T24] em28xx 7-1:0.132: Closing input extension [ 1320.062175][ T2354] pvrusb2: Invalid write control endpoint [ 1320.078641][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1320.100916][ T24] em28xx 7-1:0.132: Freeing device [ 1320.129267][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1320.140286][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1320.160608][ T2354] pvrusb2: Device being rendered inoperable [ 1320.166779][ T2354] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1320.175326][ T2354] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1320.199439][T23894] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1320.206669][T23894] CPU: 1 UID: 0 PID: 23894 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.217262][T23894] Tainted: [L]=SOFTLOCKUP [ 1320.221581][T23894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1320.231634][T23894] Call Trace: [ 1320.234913][T23894] [ 1320.237846][T23894] vpanic+0x56c/0xa60 [ 1320.241843][T23894] ? __pfx_vpanic+0x10/0x10 [ 1320.246357][T23894] panic+0xc5/0xd0 [ 1320.250093][T23894] ? __pfx_panic+0x10/0x10 [ 1320.254516][T23894] ? preempt_schedule_thunk+0x16/0x40 [ 1320.259892][T23894] ? preempt_schedule_thunk+0x16/0x40 [ 1320.265292][T23894] ? v4l2_open+0x397/0x3a0 [ 1320.269727][T23894] check_panic_on_warn+0x89/0xb0 [ 1320.274671][T23894] ? v4l2_open+0x397/0x3a0 [ 1320.279089][T23894] end_report+0x73/0x170 [ 1320.283338][T23894] ? v4l2_open+0x397/0x3a0 [ 1320.287767][T23894] kasan_report+0x128/0x150 [ 1320.292276][T23894] ? v4l2_open+0x397/0x3a0 [ 1320.296703][T23894] v4l2_open+0x397/0x3a0 [ 1320.300959][T23894] chrdev_open+0x4d9/0x600 [ 1320.305381][T23894] ? __pfx_chrdev_open+0x10/0x10 [ 1320.310321][T23894] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1320.316662][T23894] ? __pfx_chrdev_open+0x10/0x10 [ 1320.321621][T23894] do_dentry_open+0x816/0x1380 [ 1320.326409][T23894] vfs_open+0x3b/0x340 [ 1320.330490][T23894] ? path_openat+0x2e2d/0x3830 [ 1320.335282][T23894] path_openat+0x2e44/0x3830 [ 1320.339891][T23894] ? kasan_save_track+0x3e/0x80 [ 1320.344748][T23894] ? do_sys_openat2+0xcc/0x200 [ 1320.349529][T23894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.355604][T23894] do_file_open+0x23e/0x4a0 [ 1320.360117][T23894] ? __pfx_do_file_open+0x10/0x10 [ 1320.365163][T23894] ? _raw_spin_unlock+0x28/0x50 [ 1320.370015][T23894] ? alloc_fd+0x651/0x6c0 [ 1320.374352][T23894] do_sys_openat2+0x115/0x200 [ 1320.379036][T23894] ? __pfx_do_sys_openat2+0x10/0x10 [ 1320.384240][T23894] ? exc_page_fault+0x6a/0xc0 [ 1320.388930][T23894] ? do_user_addr_fault+0xc4a/0x1340 [ 1320.394223][T23894] __x64_sys_openat+0x138/0x170 [ 1320.399078][T23894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.405148][T23894] do_syscall_64+0x174/0x580 [ 1320.409750][T23894] ? trace_irq_disable+0x3b/0x140 [ 1320.414775][T23894] ? clear_bhb_loop+0x70/0xc0 [ 1320.419451][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.425344][T23894] RIP: 0033:0x7f5b4d2a7407 [ 1320.429763][T23894] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1320.449384][T23894] RSP: 002b:00007ffd8374a8e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1320.457804][T23894] RAX: ffffffffffffffda RBX: 00007f5b4d954880 RCX: 00007f5b4d2a7407 [ 1320.465788][T23894] RDX: 0000000000000000 RSI: 00007ffd8374af1a RDI: ffffffffffffff9c [ 1320.473769][T23894] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1320.481735][T23894] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1320.489713][T23894] R13: 00007ffd8374ab30 R14: 00007f5b4dabb000 R15: 000055b8e2d0c4d8 [ 1320.497690][T23894] [ 1320.501304][T23894] Kernel Offset: disabled [ 1320.505628][T23894] Rebooting in 86400 seconds..