last executing test programs: 9m23.388513077s ago: executing program 3 (id=1630): syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000140000004500002800002700008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1703d5a490780038"], 0x36) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000340)={0x4}) syz_usb_connect(0x2, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c02"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="b75db6c5", 0x4) r2 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000006c0)="858e69dcb2a9c546132a1c628554d66530f4a584ed5f153bbb70d795ed697d269010cc7aa59efa7774ad0e3517d97789f922e98ccc21f650e327a43ed634a60612bf847d1e161c7f361b99a5ed9262cea3d2ba97d53dfa690de7f254874fc9b86bc2b6a83b30fb1978e65722c2da70d9b816751b09d9b0825b087dc1c32b0570697adcba42d38e862790d92fc53412d51255157f1f694eee9f913863eb9b831d61a91636dbfc15b7968a4cf84b33c0202a26c129f12faa5fa5d2845767969b6bbad32eae1cef853e56acc84484626854b5d5cb907ce72394e2eb1fa98fdb", 0xde}, {&(0x7f00000007c0)="868ff893891781183ce422f0ae596d5edcdca7934a199c38aedbda5eb826c0826e998e66de91de4f3a744eb728ca9f106769ee23b39b8ac07fc5aa9fce546107ca36bff07196148edda4547c45d06a8900b759a6048dc0678420b037c22afc8e2cf521bef1996b777904b61d895a04173df1cde06a345fec7fffebcbae5d4cd350d88042fbcb4b31784c78237fad9ecfac83fce32f475a54e91316b4ec75a28099bdf4f9f3c0e5f96cf77de3e3d93c50c8b35c284c50dd", 0xb7}, {&(0x7f0000000880)="f067efd35c5fa651f1c53e81dcfeca8811c5c9d66ee1b922888736b297508eaccfc774e06259e0ca0e76e1f7e45f62c56818d6d17a266d16c3401102e10e2318702a1b27fcd238565c1284562c35b9c79bf002ef78005405d2d4d1ac0ec9812588d953e10d75736cbb23030176cf35da3cec7ed47d9f9e7fd6edb1450a87252f157909a311044ab83a06", 0x8a}, {&(0x7f0000000580)="66bcd05f1f678df5cdd1e87051d1c15b075f0502", 0x14}], 0x5, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xf8, 0x117, 0x2, 0xe4, "0a47679e59a11b039a15711771603e2d9b41d41f23844e67df92804c8a76a5b1478908e18540a1138e4178d4c6e0573686bb090d39e2a1a63daf9c27289bdea7bb08631e2aef2c766fc569258915f043a30c9daacdb18ae9ecfcd545d27344cb86f932d07783cabe762e193e272ec0a88ec4f01e10618f82413198625db8824f2a7ea7b16eaa384e9978cffbd3e8276352eddd2389941e463af402275997cf982972e853dda53df03a51e7b775c66173f6bd6e1cb237741f5122178ae1ceea884399167971bb9a730b33369d5deace62a748538c42d287e98f51ce4d9bc672ef9cb64f6a"}, @iv={0xfffffffffffffe5a, 0x117, 0x2, 0xe2, "5e59e6cfda3521296416ff85655f3b4f8d457c5dc97bf96853d998ec81f6b0499a87838018c05dbdc51cb92341fd12c8dc8609afff7e4ff11d7cd6b523d74c4fed7846fc6f6f3e122f72c74fb2815395031b587738c537766bc4635f5d897fb20b2f3e66f6cd2d289e0e3f281455ed1928059bba8ae47bae5bba1c1054c8560c8e0129eda2253ca7a3b706f91e9c26e01691c707998022f90bda071069428f0e2e52eeb494458d00dda41492bd665b1fdace3236c3f5c6a80c5dbfe45b076c6d5a9702a85f4fa5e7ad3154fcd8bacd79994fe1a3d87db4473d71c0467fe27c0de300"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xf0, 0x117, 0x2, 0xd8, "d245e541e59cfdcdebfd45143fe2b2c1090ebca518a3010ffc67918dadc854fec0cfc094cea0de30913c2bedba77569ad0c62156612ac78e99822f9e4ca6771c5abe745a49915610faf03c3bc35f349552945f2d7be6467b248885ed2f94fca4a105cb9de0f060f1c3ff36763f7226962e97afd2e9e18ad0ec40e88997f9d2732469624db7a85aafa06b7a9af71233e675de82b571f1b43e77b32bea23a8499d8f3c34d917beec2082767819cbeeee2dc0e87e5f3d3a6e580a9bcd79d7597fc7e3144a4be3354bddee15dd2f2434bbe50732bdad92d18fa0"}, @op={0x18}], 0x328, 0x90}], 0x1, 0x20040081) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 9m22.612918914s ago: executing program 3 (id=1635): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)={0x20, 0x1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m21.924246526s ago: executing program 3 (id=1637): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 9m20.992893374s ago: executing program 3 (id=1644): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14000000}}, './file0\x00'}) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x8}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x2, 0x2}}, 0x10) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000940)={0x60, 0x163eb1b24d6be96d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41, 0x300}}}, 0x10) 9m20.729418819s ago: executing program 3 (id=1647): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x30, r1, 0xba950000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m20.349238956s ago: executing program 3 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x51, 0x6, &(0x7f0000000080)={0x14, "660c00cd242a12e1afc8093bde5d137491501690d647be351982617e31e80ed798"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd23, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x24040840) 9m19.666943964s ago: executing program 32 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x51, 0x6, &(0x7f0000000080)={0x14, "660c00cd242a12e1afc8093bde5d137491501690d647be351982617e31e80ed798"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd23, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x24040840) 7m37.47490619s ago: executing program 5 (id=2092): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x0) 7m37.060547728s ago: executing program 5 (id=2094): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc010643a, &(0x7f0000000080)={0x20000000, 0x3, 0x9}) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000080)={@any, 0x2}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000340)={r4, 0x4, &(0x7f0000000200)=[0x48, 0x400, 0x7, 0x4000], &(0x7f0000000240)=[0x8, 0xb, 0x4], 0x14, 0x5, 0x8, &(0x7f0000000280)=[0x3, 0x9, 0xc2, 0x0, 0x4], &(0x7f00000002c0)=[0x9, 0x81, 0x1ff, 0x1, 0x800, 0x0, 0x1fffe, 0x1, 0x7, 0xe5d]}) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xffff, 0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 7m36.561462044s ago: executing program 5 (id=2096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r4, 0x5421, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)={0x14, r6, 0x339, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044001}, 0xc860) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xef1955720cc6dc20}, 0x4001) 7m35.029028796s ago: executing program 5 (id=2104): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x80, 0x8, 0x0, 0x2, 0xd4, 0x0, 0x0, 0x10, 0x2}}, 0x50) read$dsp(r1, &(0x7f00000002c0)=""/140, 0x8c) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 7m34.965739227s ago: executing program 5 (id=2105): r0 = socket(0x40000000015, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c"], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, r0, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40010000, 0x1}) r1 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749d, 0x4, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) 7m34.528661542s ago: executing program 5 (id=2107): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000891}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000008000000000500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000008000000000500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0xfe, 0xfffff018}, {0x80000006, 0x0, 0x0, 0x7fff}]}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x106080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r8) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c43", 0x8, 0xfffffffffffffffb) (async) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c43", 0x8, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 7m34.162953428s ago: executing program 33 (id=2107): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000891}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000008000000000500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000008000000000500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0xfe, 0xfffff018}, {0x80000006, 0x0, 0x0, 0x7fff}]}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x106080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r8) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c43", 0x8, 0xfffffffffffffffb) (async) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c43", 0x8, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 10.256501237s ago: executing program 0 (id=3941): syz_usb_connect(0x7, 0x3b9, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="d23822f48c34a32bf43131f4873f77e51d433dd61a57f5a526ba61cec5d53ccd2262d8c90dd650cbe42136d08dd794d229229d5bb2048984e4fdfe5935e8d3f539cf86dfc3b2a5c38f07dc7bd7a4a4275fc1e6e573d40a9dc3b1bfb3f23970b14b242df56725e0ca66f7f2396b64960e99e48cbc14ca244dd164df34e5cb4698e6437d3ef59dba355e1a617e743982d3071cb320db408b3f95b9ae6ea646cfcf55b963c17305f7677224400e5f00344633d73b94f257da273621c9c4e9c45473f01dbb822b6779949ae86305a3bc25a6ab91b9ae025f00ff2e9c641bb0fa43e61d8b80642a11"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x1, 0x5000, 0x2000, &(0x7f0000dec000/0x2000)=nil}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x12, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000cef000/0x2000)=nil) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002840)="543d117976e43c3596c9ad7b1c1412111c9d647ca30f2bbd", 0x18}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x40000) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x20ec25, 0x400, 0x0, 0x803d6}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x6c, 0x4007, @fd_index=0xa, 0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0xd}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000200025a725bd7000fddbdf250a001055ff000001000000000800060000000000140080e0000000000000000000000040000000000000008044482fa4a3b98206ec6e25472e9ce71155af2d07221e43424e0b91c08c6dbe7ac0ade6ae4c7813a8684fc25e43c17180ef51579c40765b37689943fad9a67230b89d59b2166b0efaeefc9ef26a22f6397cdc05924154e24fde8d5c22289623edb721da9315d7280862a5a060c61e94c7bcd52bc055834768346c74ee62"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 7.001337911s ago: executing program 0 (id=3955): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x8, 0x80000000}, 0xc) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="ff7f0900010000800200"], 0x18) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x4e, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x48000) (async) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0x1, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) (rerun: 32) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, 0x0, 0x0) (rerun: 64) syz_io_uring_setup(0x1798, &(0x7f0000000340)={0x0, 0xa09e, 0x40, 0x3, 0xfdfffffe, 0x0, r0}, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) (async) io_uring_enter(r0, 0x1e79, 0x9d92, 0x44, 0x0, 0x0) (async, rerun: 64) mremap(&(0x7f000035f000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000873000/0x3000)=nil) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) 6.259085014s ago: executing program 6 (id=3960): r0 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r3 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x400, 0x80001, 0x35f}, &(0x7f00000000c0)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x22, 0x0, 0x0, 0x4}]}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) (async) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x8d, 0x0, 0x2000000}]}) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000400)=0xb) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf252600000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000f8fffc1f0f358fe6e84a001e001f000040130600080000000e00002400f30002000100d800ff7fb982930003000800d6000e9a01000080080081000600f4eb1e001f000800190300000000000000800080001f00000001004839000010000008004200020000000400af000a00060008021100000100000a00340002024202020200"/152], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) keyctl$session_to_parent(0x12) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) fallocate(r10, 0x11, 0x40, 0x4000000007c000) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKRRPART(r10, 0x125f, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0xfffffffe, 0x88000000, 0x3, 0x7, 0x0, 0x80}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connbytes={{0x38}, {[{0x4e336bf2}, {0x10001}], 0x2, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096217a06e354070c0a00001c7f08270200000083000080000b09007a15837d8f0ae4"], 0x0}, 0x0) syz_usb_disconnect(r7) 6.012378553s ago: executing program 6 (id=3962): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) ioctl$TUNGETVNETHDRSZ(r0, 0xb701, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x10, 0x0, 0x200, 0x6, {{0x12, 0x4, 0x2, 0x1, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0xb, 0x84, [@private=0xa010101, @multicast1]}, @timestamp_addr={0x44, 0x14, 0xf9, 0x1, 0xc, [{@multicast2, 0x1}, {@broadcast, 0x80000000}]}, @rr={0x7, 0xf, 0xbc, [@rand_addr=0x64010102, @loopback, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x7, 0x1, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x20, 0xf, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ee5c000066312b606f3e86a6e2f7c5dbf8f99ed5fbc7a2d4e80928b06f44856833a4eb43bbc2b9a0fc6a21113733ccda9044d320faaabbece799d086082a86621eb991c4c6370bcd12913528d1ea595d5ec4d9a8a8f6340970abdf4173b18f14d2f052cab8e0a8e67487298add30a21170daa5594c7e83ae20d4831a91a13965fc89b85e08543ca68ca36f956e5c1d3f92f51be5f73fff", @ANYRES16=r4, @ANYBLOB="000125bd7000ffdbdf250b0000002000018008000100", @ANYRES32=r5, @ANYBLOB="1400020067656e657665310000000000000000005000018008000100", @ANYRES32=r6, @ANYBLOB="08000300010000001400020073797a6b616c6c6572310000000000001400020076657468305f746f5f7465616d00000014000200626174616476300000000000000000003c000180140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="20000180140002007465616d5f736c6176655f31000000000800030002000000"], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00022bbd784002080000376c0000"], 0x14}, 0x1, 0x0, 0x0, 0x404c054}, 0x4004801) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="06c9a27685"], 0x0) r7 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f00000003c0)={&(0x7f00001be000/0x4000)=nil, 0x4000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom1\x00', 0x2, 0x0) 5.880330889s ago: executing program 0 (id=3963): getpgrp(0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x118d, &(0x7f0000000240)={0x0, 0xd00d, 0x0, 0xffffffff, 0x25e}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 5.69643749s ago: executing program 6 (id=3964): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xb}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x2, 0x4, 0x3c0, 0xffffffff, 0x220, 0xe0, 0xe0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, [0x0, 0xffffffff, 0x0, 0x6000000], [0x0, 0x0, 0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x2f, 0x0, 0x7, 0x6b}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x4}, {}, {0x4}, 0x6, 0x40}}}, {{@ipv6={@mcast2, @empty, [0x0, 0xff000000], [0x0, 0xffffffff], 'sit0\x00', 'dvmrp0\x00', {}, {0xff}, 0x2b, 0x0, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x1, [0x1, 0x1, 0x5, 0x3, 0x401, 0x6, 0x3, 0x6, 0xffc0, 0xff, 0xe, 0x6, 0x8004, 0x400, 0x8, 0x2], 0x2}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) write(0xffffffffffffffff, &(0x7f0000000000)="93b761aff1e914002b02f51db392295da4ae649afb02327aaa", 0x19) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x1, 0x180, 0x9, 0x10, 0xf1, 0x100, 0x80, 0x2, 0x80, 0x9, 0x0, 0x9, 0x80000000000, 0xbdb], 0x41000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.484471513s ago: executing program 6 (id=3967): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x8000, 0x4, 0x2d5}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xa101}, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r5, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000001c0)="bb09", 0x2}], 0x2, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) r6 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) close(r6) r7 = inotify_init1(0x800) fcntl$setstatus(r6, 0x4, 0x2c00) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000000000818080000000000000"], 0x38}}, 0x0) r9 = gettid() fcntl$setown(r6, 0x8, r9) fcntl$setsig(r7, 0xa, 0xe) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) inotify_init1(0x80800) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x1ff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 5.326550335s ago: executing program 4 (id=3969): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000400)={{r0}, "6ae560ddb96cdf70638d7546d139346d1ef43cd843882a5a01b2da735c726b15151f5a001c5189f5e7c40d5659d2aa5cb8dce68d70c1a8e94f1846deb5fcdc219819b84496c2569b76799b5384dbdd35e798d9b15fb552dec8ea69c65eb149f532ddc8997134dbd1159d769d0f2435b9a480d939bfe2060c083823e51a5b8d2f791e128f11763f35011e31e7743106f548b465bc100ce5533f7ce5fb898ae178be52865f465df433de4fc9b547cec63125e50351c9e0b766fdbee347892e0a87ed89220198e167f6a583fdf38c01fbf6ccb86a6cd92e9a1f725591e4151af9e1586834b1a80f99561c87015441bb9b8022dfaeca2dfda276486b05588c5c8ae20e567d210b8227aca7b926058857973ec25695c1bb4cbe97c0f4d0282fb96a4110a2b000fc7b3205445ccde33ca9f9a650ec128812b88156a4fbe83421cb093a761ba662ec01950592a88fe0c2a27e04f719fa726759577c061677f4d2747da9fcfad2d6eb36be3f6ba84a6107727ecd19603dd7f7cadefba6e85625916a5a6d9f3283d547186443383d8c40c1942c1753d1a9b5130301e9c87b906ba3fb3a02c616811799cebc99e1d056c9993905e4a96b5177fb140c144683edcd8c75137ebf088adf9fb9b160adae940971d8569c342dedc13cfe801094f4ad067082840df3c664e70a0903669b3efcdc91faf662de8551b3171602446db810c7db894be0e4b416a71a98ce9ffbacc1346f0b6e6bdd241e5cbb83b1b36c92e54af06eae539bbcdf7aec52396ea25b4e4e17e500e3ddb6347965b74f26e45606ac32c45a4dbd72df68849d20b8d926e548e3246a43c4f98658d6f4e8ac9f029640f70b48e8ea58f7b4df46caba097b5c492d07e19c9e39d3155f1591c0f2451ba6d4728893ec7361592980bfc6bfb43eb0f83cc7124a86c0f497ef01b35b7e1b423d9db6c5310b154078699f786363ce15468130219b9fc7e1cdecad84834a97b57be22e38c27105c3abd7e521b1bd20fdf2c12fb7fe99414ac1a6c5b998d093af65fe08cfbb47bcff377c33822fc5db21377677cdc1588275f3ef5c42e2813a86667273b5b465e598100b49e194366e5895a2ba70c5e805e087d1ffcb5edff44a637a925bf5ff26b63e237957366985724bec657b0b0629b9a88671acc33440646910c7584c1267dc89ff0e6caee5ab4767ce447c2d6c3d0c6526146824de7f71a56d067999421a92dbfea08f65c6081f988f4a0a3f7f1ab2019ede8bafd9a38c039849f23f4e3acf91911bd51cbf295850ce19d87ffefc7311aad764c1a8e85f7c01763e2ef1e8adf52df5935ceb5fdee4bba1adde2c7e7d99d0e5a58edb58a18ac42a2d1c6e76b2178c2c182dcdac9e28fab04898ff49fd8d8ad28b0a08e2b2674c2fceea816f896225e9fdf72511544392165ba164fccf033966fcfdc0317e1d71793de343701c43b0883d13394bd3bf6c571d2006dce1ac1d1f90648104facea8207a794fc7a5993832ac79f2e96523b916c689e2c162b4be330e4be470f5f4d0f959426fed33c2aced0debbf10d15e6072a6de9dc57ef38b437b25bfac86d0b3af2930431357a533c61015e513ef7c13d8e49db79fd6158cb10d224b10f88e46e2e5c71efa06053b0c81e6fe28ba72047c27a873c89f87e1b8ff2b226b5c1caa1bd64b5f6681113162b08ba6f1cb84e6443a37b449bfa1ded99596f22c56ea2da38b05d5e05ec4648aef21eb2485a86b60c867ef84d5c8a84c1e5e49748110b08e9cbcfa58727d4d50924049b9daee2f5f7954aa75067964d9457b13674ef1f9574867b7a57539a2b1c960cbd678ff4e9314ddab243e08f0350c88aaefc7b6eea4198e26c987b8913fd14d857ef7bbfd5f1e13bb99894c5ff2ca7d0ca14f642b88d20d45e2f8dee84063d42705a86c6b9dbbb1c4e5e0231fefd08f26457744d215270bc335d68a3c6dd8b2931741288b24741236249b29a4ff24ef0930766a0e6fcde4c36dddfa8fe3e877a7bd5ce5f3c2edebf0d7a38c77e7cfb5266291cb395cc8391050529f954d67e5d66ad32a61274843886bcca7259a878f0a1897398b60dd7d524725bd426d3f5b9e12c4e53438e30b1f88e1fca2ef3ac8c577281ef15e9f17a1bf1567e47d68dd87a2c54f2a890e9bb96d6a1d54b1123b29a836db646d8d6b3c576b336ef83631daf14c0993a73674e6343f451f4740a4b86c603c2a7cb083535e3cca350962da344917c166373d18d82356118a1d49da3037e644ebcb49a08244fcaf355ce9ef8e61e5e17a8729370a15e53144e53e2305a5231ae5a981fe22e12991ac5c020adafa05e39bef362de7a4e1f3aaccd259b78de5ea49059dc4d9dcbdd45b507817d96e532f81d5f8b0a526229c2e9d2fcce79db12dde4c045dd8249a4f7985d28fc6f8c1f23ddf3a66fe8e43dee3117326925d3b87d98a588c56e011006e35af6ca2fa95ab126ffd941c295db16f50908b6c97a00bc81aff0205268e1c0823d639f080ea2c9b190613e04147f71fe4a98b49e3be6f6a01d56d023a7e9c80053cb92cf52d1d1f9fa442b5fbf9490d038e295d31dc79ad1fad0b5444f8a3d00e692cc93e15cc9df3e3a0072927e5165367ac4eb65ac74f03f337714ba1a4621d5d92930a2516a36520f41589bd60887bd8fd57dd53df38c2efe0dc804f88e30d4509f97ea571adfa862d2360ea1ac6b9e5adf9a1b0f487b57e5cf66f5c73327b1a57d8ae49e2496719585e63281dc626cd84b928d37fb853e23e939d050bdc917156d28f091dcb99fec943b948b93e4a14f8d53d3c940764ebfe9bd519804bbbc4063dd486c6ab4e9d8eb0f10ab5ff9325b89c1864a41bdf53c102fa23ec9557c73748c87c94cdb606f0d9a8b20504d8d9fd9c824b23896352166332e0dc4586c980f61c0e2097b3445ed9cfe2a436079447d1c42eb87dfd1cf689dab93cb74d5e2d3b221710b2912acd9436419b930bd62ea3f15d072a3d0b84601c900b637e31ef4e130584515d9eaca5db68f6557458873bc9e68a8330d05c4c81bd2c59bfadb3efa3e6e6876e37d5151bc56ed023b2fd7659bbd0ed5e7dda8c602a1f2329931af61063162bc5ce567f4d81e7907c554a8fbff234ae93079c9d5a125e79b0165ce59f094d06e28aed5479cf49f01bb477fcf6a9efc64c9821aa6d4af4164154eff2db20d8833d92d3a27dc8c34d1d157b9423becfcc4913766a6ec6650677abfe27f048e5791490f9e72596518ac424afd5faf55be1d214df1474f72c8ad7679ff55d748803c4ca51a5a710c4eeb8ac5bdd31a4e8aaef3f9a3eead050d9e5743741676f40287b92381fe68b288c47d8cac4db2de02ab19330f3225349bf6944c7ae8e1df8203050ebc6a714afef0c0a7bd30d836f8526cba1e62377e9fb922d857c68e606292872855846cacb30e7e80ae5cb1d9406347a8b1a0dbf967c394f7b3b8b2558c3d1ff8503b34541728bd5e2d050d8b21a1efc3fa220f2e304ee0ee955b5d69699ce871d255bbb9bd952ad6d39387e4210f6c2666da301b2573624adf5a26757ea4d7abc82948711adfbef4d90a3cfa88d029a8943fff0fb3f6775ee29dd060737e6a271d9938b8c8cd4fc6426fa6f00385c522397ec3173e2fc1bf73ede18c0f5df9b58985c2d36769ecf3ddc32f17cedefc26526bf275c7fb2beea3063f84f36487ef08c48a0cfe4fe9d104fa50c8a207c3c953243d32180537f2193416ffb9630a26cd8a62857229866e04af9b1a75c7247b41ea7845936b98c0098e12d1a23c984a470c9c8adf190d9ff49ab216403451ffc5f128281188f15232cfddbcf2530010fc25ba852a25367f36c98925096ce565fa293bea8c0a47b23f6d5d52a10b8cba11b0a1747585c754ab33b3f59c6692bd39fe388145a86069c11201f06b147cbd8813312d2d60a339b07b17255b66827061cacb3ab3a4115e65ef4bafa6d5b5919d7c4e6807795b204ae1c11b49b3f823fccecf1053da330e2032f4876e2c24aa79c6636228e977317ede8cedf0d8e0146c5e3514378ca8dc218fd0a75ba80c265e3ee837479942d530dee33c59849bee95e52aea7478ffcc501988a869eb07524bbc9945de6a503541c899c50ceab0fb6e1d0d2b22e8a375c3ebf82b56c26c3ed5c2e6b7211e3156a323cc9d80a6264c28e4019a19365c71a66b8ec49df957e3fe2eb3b0fc9f05adaff5add0681b860f53216a568bbe61a16818a91b280e6ba1c06b643aeb5ca1f4e3079455a50db5ab2c593f412da85e1f2b29941688239ee841969aeb8fc4291eb682fb4253a2bd3e6e540ca8f0b26856f262d0a3527b5ed2ab961ed26370f23e53637a6d4196a9bfb3ac9a8eb6f867e07ba84b2ab83225da89b8887cb58eb106a1b8272586da529b74b9e198e58b34569b95540b82c874a83da4cf4ff3f67181e65e8a6987854090564d3eac2dcee83573013f66aac3abb987ce9df3b7b44f423bf7198c3e2f1d40c11ec3c775a019d4133344992306a03a8130e064951fec7148e303b70a42e8ce9ad838aeb25d0ce45ce2b8b00208852f00b2e10fea0307617bf73430dc61b2ab182b60cbc634811ed1b6f5674362425399b5a6dc80021c7640f3332ed25c89bd8c48a0f7a6742cbb7305d946823d47fca7b8d41e5a3b3852b9ed4fe45aea1364e969cebc6471266bee843ffda563c3b95428e926ce27319f208b97da0047d158fbe780aaecbb23319ba0b61b78de50bb60651110147e4d03143f9dd7915aef6fc8b239de1525e88228a3b8823a0397daaea5d70f0988c4e4c1a2babf720548e66308ef82e40544d761220e314f4d16de0ca4b5461578ef3317342c891a92e7a87846def1cdeac27f85208e87b852c997073480eca0ece198b2a0113572032b0c88c65527f14dfc1e01199a5f5f067946fd830f8047f5323db3301f0234adf71b142b9d5588e9cf677af4af9e2bd3c40e57a1614f262669c2d76b8c0241f46db06096e0d9c52387e052391e99e13e9b6f7062ffd205d7cacfef3fa369ecb88970e0b952fd44a6acdece48a1eddda2ce01839d1abb4b6a1ec6519c6498193b7316dace8f64e52fd899b7c996cfe87be991b450226c078eb0164930066b193e797d049fa64eb8729d783cb846260b303320f6539dc9924e34af0523f61c34f731f63ebb5ed7c161dfb757a2461d2ac0e7e47c81eb5303e643984adb9f4fc7e8fcca8a97336c3e8d596adb526ee4bb306d6150f0c394708ef16427bc5615520aee4e40f8cd6677d5337d2e06bba40df6ab58a15816491e62cfe27c8b8321d49f96df843c2f2d5f302aa54ef296c9c5e0577ed9b22f4519d82bfb5e9480ddbd3924851d2b68e6ef4ffa8cf62c04bf08e23efee1510b75e9b194c0d365f018ecda0d2647b911a22f12bc17b297ffb56271d78a23d1b93cf05c0828d5f2797e4f805de63cf458e0efcc88f08d46f3a80a5b8f0cdc719b0f7701a6299cfaf8792c722965da6557c8d0244a232c127688a8613b2125e8adf079e0c557558c9c91101e951c9ab50ff23ac8aa233335119b7008a0962f17e21cfef3010032ef7c5664fc19d3dc0d3cc80e3717df4900e7182e28946d2faba747ea8b907d9a7939f03faa9026239acee8ba69011a07e04e8018e9d59cf427f7d6ff3cb9f52fe8c62da946dd1e5190eb0a5e533a21147abcc26efb7d9384397244a64e6341e97b8bb15cbd88cfc5b8a3ed3fdc47b12bed1c393086c02bc9ae1809c3c0d8ad2d175186b233eeb7b54678fcb3e5cfa5ea6db54f1f6610fab9473969a751507"}) exit(0xbfd8) getdents64(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x7, {0xffff, 0x1}, {0x48, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x5b, 0x5, 0x7, 0x3, "9c2b45e4f5d79691f27b531f369941f2a0f2705a4bf9f627ddcd18809190aa8c"}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xa1, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000039000100faff870004004719e0c3360fa82e0900ec009ca591c964bb"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.992606736s ago: executing program 1 (id=3971): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x8}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffd010, 0xa01) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000003080)=@v={0x93, 0xa, 0x90, 0xd, @generic=0x1, 0x5, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'nicvf0\x00'}) socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000100000001030000000000000000000009000000ff020000000000000000000000000001000000003200000002000000200100000000000000000000000000010000000000000000000000000300000000000000e0000002000000000000000000000000000000002b"], 0x23c}}, 0x8000000) 4.991824053s ago: executing program 2 (id=3972): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x38, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x20}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x38, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x20}) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x1) socket$tipc(0x1e, 0x5, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000240)=""/163, 0xa3}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000240)=""/163, 0xa3}) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) memfd_secret(0x0) (async) r6 = memfd_secret(0x0) futimesat(r6, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)=0x40) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)=0x40) openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="84010000100001000000000000010000fe880000000000000000000001fe8000000000000000000000000000bb000107141a1c4e641ad3b00000003a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0100002500190326bd700000800000010000000800ce1ae731f73e00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x24044004) io_setup(0x202, &(0x7f0000000200)) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0x4, 0x0, r7}) socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="3900000013009c89a5a965e140c3e4ffff01000000010000005600000025060000000084000400000007fd17e5ffff080004", 0x32}], 0x1) (async) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="3900000013009c89a5a965e140c3e4ffff01000000010000005600000025060000000084000400000007fd17e5ffff080004", 0x32}], 0x1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="55b60000030000000000000080abd9be6e287ad8c5167c85ba504a4436fc2835596c87d6217244ff57b57d281e31dd873d48f8bf745a4413b69fd67519099134a980033c2c0d0234cb89933da666c163b19b3555fbfa9a46fc6fbd4a49c87b4bce0dd7b70e13e16a291fc52859eb60dcc700"/129, @ANYRES16=r9], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) 4.951337977s ago: executing program 1 (id=3973): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) 4.945010108s ago: executing program 0 (id=3974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01}, [@jmp={0x7, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, &(0x7f0000000500)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x8}, @fwd={0x9}]}, {0x0, [0x30]}}, &(0x7f0000000580)=""/21, 0x33, 0x15, 0x0, 0x15e3588d}, 0x28) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xe3e7, 0x4) syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080), &(0x7f00000001c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x7fff, 0x1c}, 0xc) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x5393, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="b00000f60f000104ddffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000018a0000140003006970766c616e31000000000000000000540012800b0001006970766c616e0000440002800600010000000000060002000200000006000100020000000600020001000000060001000000000006000100020000000600020000000000060001000200000008000f000000000008001f00040000001800348014003500626f6e645f736c6176655f3100000000"], 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000000)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) read$FUSE(r9, &(0x7f0000003040)={0x2020}, 0x2020) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}], 0x20) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 4.701358903s ago: executing program 2 (id=3975): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r0 = accept$packet(0xffffffffffffffff, &(0x7f00000020c0), &(0x7f0000002100)=0x14) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002140)) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000002, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x39a904175f124fbf}) r8 = fanotify_init(0x200, 0x40000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r8, 0x101, 0x8000011, r9, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000003180)={0x1, 0x184, 0x1000, &(0x7f0000002180)=""/4096}) read$FUSE(r10, &(0x7f0000000080)={0x2020}, 0x2037) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x262100, 0x30) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) time(0x0) statx(r11, &(0x7f0000000180)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000001c0)) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.595523212s ago: executing program 1 (id=3976): r0 = socket$inet6(0xa, 0x80000, 0x2245) socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000020000103000000000000000002000000000000001c80000014001100626f6e64300099e778735489a950ceb6"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(&(0x7f0000000240)='/dev/video#\x00', 0x40, 0x80, &(0x7f0000000300)={0xfffffffffffffffb, 0x4, 0x3ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r4, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf8b", 0x22) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') getdents64(r7, 0x0, 0x0) 3.777124009s ago: executing program 4 (id=3977): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d000000140000"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x84, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB], 0xc8}}, 0x0) 2.436072035s ago: executing program 4 (id=3978): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x8, 0xeb, {{0x11, 0x4, 0x1, 0x1f, 0x44, 0x64, 0x0, 0x0, 0xaee43a966bce9f7, 0x0, @private=0x8, @remote, {[@noop, @cipso={0x86, 0x2e, 0x0, [{0x5, 0x12, "74f061bf07effc04d5071395b7b60e9c"}, {0x7, 0xd, "83312eb8cd01a16fe65f67"}, {0x0, 0x6, "135cda05"}, {0x1, 0x3, 'X'}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000100)={0x1240, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x35, 0x3, "5f8e99c47e7dc7cbb0bd2b80a9cab030395b63a2cc62820b530e134a36c9b2daf002aad3e5e8bf6380309c71379e44b4c6"}, @ETHTOOL_A_WOL_MODES={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7, 0x4, "dd311f"}]}, @ETHTOOL_A_WOL_MODES={0x1194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2edb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#!/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '}@&$/*.#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03^\xa0#,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '-+#@\']@%%+^,+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.%-:-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xd3(!#/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!)$\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':]-}.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(@)+\\.\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe60d}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x66, 0x5, "d969fe55baa58f6f921653826e1c770be647bdddb42c2b4f748e4e535b490b46a85a7bc69ddb25f1734e8633aee5acf3ec3b1e71c9612d5514057a1864fde6dfc54b1eda4b85562401788b023f64f618aea12e4607d9e1f67e80266e8b561a3c8110"}]}]}, 0x1240}, 0x1, 0x0, 0x0, 0x40008d4}, 0x20044085) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000013c0), 0x4040, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x80600, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, 0x140f, 0x20, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x400c080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x80, 0x0) mkdirat(r3, &(0x7f0000001580)='./file0\x00', 0x26) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000015c0)={0x0, 0xce, 0x6, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000019c0)={0x1, 0xbfc8, @start={r5, 0x0, "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", "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"}, [0x7, 0x40, 0x1, 0x401, 0x100000000, 0x80000001, 0x5, 0x0, 0x7fff, 0xd, 0x6, 0x7, 0x8, 0x8, 0x1a, 0x1000, 0x9e4, 0x0, 0x0, 0x22, 0x7, 0xff, 0x3, 0x2f, 0x8, 0xcb6e, 0x7, 0x0, 0x7, 0x8, 0x1, 0x9, 0x400, 0x4b8, 0x15ffa965, 0x1eef, 0x5, 0x8000, 0x9, 0x5, 0x4, 0x7, 0x9, 0x10001, 0xfffffffffffffff9, 0x1f, 0x9, 0x7, 0x7, 0x90e, 0x3, 0x4, 0xb346, 0x7fffffffffffffff, 0x8, 0x6, 0x2, 0x9, 0x81, 0x1, 0x939, 0x9, 0x1, 0x4eb]}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000002400)={@ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x1ff, 0x1, 0x5, 0x200, 0xe, 0x2000000, r1}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000002480)={0x9588}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000024c0)={0x0, 0x2}, &(0x7f0000002500)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002540)={r7, 0x0, 0x1, [0x10]}, 0xa) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000002580)={0x9, 0x9c5f, 0x1, 0x7, 0x4, 0x0, [{0x7, 0x2, 0xe9cb, '\x00', 0x8}, {0x0, 0x7, 0x5, '\x00', 0x1202}, {0x80000000, 0x3, 0xfff, '\x00', 0x80c}, {0x7, 0x262b, 0xa00000, '\x00', 0x1}]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000026c0)={&(0x7f0000002680)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000002740)={0x0, r8, 0x2, 0x2, 0xfc}) statx(r3, &(0x7f0000002800)='./file0\x00', 0x0, 0x4, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000002940)=[0xffffffffffffffff, 0x0]) syz_mount_image$fuse(&(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x40000, &(0x7f0000002980)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}], [{@smackfsdef}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, '\xff\xff'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}, 0x0, 0x0, &(0x7f0000002ac0)="db1935020d075302acc3096f91114496b9476306cd891b3188462046b78d2d7d0519257ca708d14e98d412c84c8cf3437f6fceb87b63b4d6b5e9076e978a2d562268389df91fa548cc10efc1b1b48fd83104e77d1f662a7655dc018a137aae06dc09c5e76c09f89bc54044f794d81159b9ae1760") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002b40)={0x0}, &(0x7f0000002b80)=0xc) process_vm_readv(r11, &(0x7f0000002e00)=[{&(0x7f0000002bc0)=""/241, 0xf1}, {&(0x7f0000002cc0)=""/248, 0xf8}, {&(0x7f0000002dc0)=""/41, 0x29}], 0x3, &(0x7f0000002ec0)=[{&(0x7f0000002e40)=""/122, 0x7a}], 0x1, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000002f00)) readahead(r2, 0xa5, 0x8) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000002fc0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x40, r12, 0x808, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0xaf3d0dacdafc017a}, 0x80) file_getattr(0xffffffffffffffff, &(0x7f00000030c0)='./file0\x00', &(0x7f0000003100), 0x18, 0x800) 2.117546615s ago: executing program 1 (id=3979): syz_usb_connect(0x5, 0x7f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d709b630ae5b4ad6800008036042402050524060000052400ec000d240301030000000600050081052401000309050904100000050f09058203ff03060c0309050a0330"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc5) 1.906109008s ago: executing program 2 (id=3980): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48180, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48180, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x70e8) splice(r0, &(0x7f0000000080)=0xd9e, r0, &(0x7f00000000c0)=0x101, 0x401, 0x2) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x74a7, &(0x7f0000000100)={0x0, 0x4304, 0x20, 0x2, 0x321}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r2 = syz_io_uring_setup(0x74a7, &(0x7f0000000100)={0x0, 0x4304, 0x20, 0x2, 0x321}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) syz_open_dev$hidraw(&(0x7f0000000240), 0x3219, 0x100) r6 = open$dir(&(0x7f0000000280)='./file0\x00', 0x244000, 0x40) faccessat2(r6, &(0x7f00000002c0)='./file0\x00', 0x9, 0x0) (async) faccessat2(r6, &(0x7f00000002c0)='./file0\x00', 0x9, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000840)={0x0, 0x7, 0x0, &(0x7f0000000300)=[{}, {0x80000000}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x8, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b80)={0x0, 0x3, 0x0, &(0x7f00000008c0)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000a00)=[{}, {}], 0x2, 0x0, &(0x7f0000000b00)=[{}, {0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000b40)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000c00)={{r7, 0x0, 0x4, [0x80000000, 0x2343]}, {r8, 0x0, 0x1, [0xf, 0x1]}, 0x4, [0xca6000, 0x9]}) r9 = fsopen(&(0x7f0000000c40)='v7\x00', 0x0) fsmount(r9, 0x0, 0x8) (async) r10 = fsmount(r9, 0x0, 0x8) ftruncate(r9, 0x9c8) (async) ftruncate(r9, 0x9c8) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000cc0)=@IORING_OP_UNLINKAT={0x24, 0x48, 0x0, r10, 0x0, &(0x7f0000000c80)='./file0/file0\x00', 0x0, 0x200, 0x0, {0x0, r11}}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x18, 0x1406, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000e00)={0x0, 0x4, 0x6, 0x5}) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) fsopen(&(0x7f0000000e40)='ntfs3\x00', 0x1) (async) fsopen(&(0x7f0000000e40)='ntfs3\x00', 0x1) link(&(0x7f0000000e80)='./file0/file0\x00', &(0x7f0000000ec0)='./file0\x00') ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f0000000f00)="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") name_to_handle_at(r6, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)=@reiserfs_4={0x10, 0x4, {0x3, 0x7fff, 0x2b, 0x51}}, &(0x7f0000001080), 0x1000) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x100, 0x100, 0x260, 0x260, 0x260, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f00000010c0), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x2c, 0x5, 0xc, 0x1, 0x4, 0x17b}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xc0}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x2, 0x1, [0x5, 0x2, 0x9ebb, 0x9, 0x200, 0x8, 0x0, 0x9ecc, 0x4, 0x6, 0x6, 0x2f9, 0x401, 0x41b, 0x80, 0x5], 0x6}}, @common=@mh={{0x28}, {"e4e0"}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv6=@loopback, 0x2c, 0x1f, 0x5123}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xff, 0xff000000, 0xff], [0xff, 0xffffffff, 0xff, 0xfffefe], 'team_slave_0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x3c, 0xef, 0x4, 0x4}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hl={{0x28}, {0x1, 0x6}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0xb, 0x6a}}}, {{@ipv6={@local, @mcast1, [0xff, 0xffffff00, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'ip6_vti0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x88, 0x9, 0x5, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) ioctl$BLKSECDISCARD(r10, 0x127d, &(0x7f0000001800)=0x1) (async) ioctl$BLKSECDISCARD(r10, 0x127d, &(0x7f0000001800)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r10) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, r12, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000a011}, 0x4800) 1.676828195s ago: executing program 4 (id=3981): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x42ac02, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x673ec22e}, {0x73c, 0x673ec22f}, 0x1001, 0x5}) 1.650829409s ago: executing program 0 (id=3982): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0xc}}], 0x1, 0x45) 1.587781952s ago: executing program 6 (id=3983): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x8}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffd010, 0xa01) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000003080)=@v={0x93, 0xa, 0x90, 0xd, @generic=0x1, 0x5, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'nicvf0\x00'}) socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000100000001030000000000000000000009000000ff020000000000000000000000000001000000003200000002000000200100000000000000000000000000010000000000000000000000000300000000000000e0000002000000000000000000000000000000002b"], 0x23c}}, 0x8000000) 1.288693547s ago: executing program 4 (id=3984): getpgrp(0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x118d, &(0x7f0000000240)={0x0, 0xd00d, 0x0, 0xffffffff, 0x25e}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 1.256781618s ago: executing program 0 (id=3985): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) r2 = socket(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES32=r2], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x4000009, 0x1d, "534a85015f0f2b8f5dd68b0cb81a0553fbc127b115288b93ac3782f15e7fe002c05a09fb03ce28eefc8e3633ac36a000", "4eb50fabe4d9a620f7327881d26a2b29a8e1f42f7907521c250cacdcb6f027ac9ff0cc0ac6a807db43e82b13d8bc1bb0ad752906a0a2c501ecab0549c519248f", "e892038420710000009c8400", [0x8]}) 1.220918277s ago: executing program 2 (id=3986): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x242ed}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x1, {0xffffdffd, 0x4, 0xb, 0x8001}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000006c0)={0x1, 0x0, [{0x4d0, 0x0, 0x8}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x1, 0x200, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @remote}}}}) 1.220294495s ago: executing program 6 (id=3987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) removexattr(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0xd7, &(0x7f0000000140)={0x0, 0x4, 0x80, 0x2, 0xb7}, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) r10 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x4000}, {r4, 0x2046}, {r10, 0x10}, {r9, 0xa8}], 0x4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100037d5464402505a4a4e90a01020301099098ce2c1b00019ac610020904fb0601a65b76000905050100040607019393cb06cd3ef08353392148da01517e390037228193f8a4cc6b1c17b415b9316a4aac34e6adaf1dd9a15bbe58b584428ba80722dc5ba5b13633b4d8b754034bd11e339bf6cd0514310d6b6575ff2ec9781300"/146], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) 392.416286ms ago: executing program 2 (id=3988): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) (async, rerun: 32) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async, rerun: 32) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x16}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006599d80a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac1c25f393ff0b8dc43af1802"}, {0x19, 0x1, '\x00'/12}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b1890d60b9de0ead3f4897b1d5064921b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3"}, {0x21, 0x7, "e6ffffffffffff0100001300000000000000000000008879e66485201a0015ca8374000000000000000000f4001c000000000000000000"}, {0x18, 0x2000024c, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x5, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) (rerun: 32) r2 = syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, &(0x7f0000013000), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f00000004c0)={0x3, 0x0, &(0x7f0000000840)=[{0x0}], 0x0, 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x6, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0}, 0x20) (async, rerun: 32) read(r1, &(0x7f0000000140)=""/83, 0x53) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async, rerun: 32) syz_kvm_add_vcpu$x86(r0, &(0x7f0000000100)={0x0, 0x0}) (rerun: 32) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) 201.321671ms ago: executing program 1 (id=3989): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5e, &(0x7f0000000a80)=ANY=[@ANYBLOB="5e03e46b53b83d89570e655066f122b56e0e08d9023c19b0bd22f369944f15ac1cc4d0b6f8012794edb82579fb2afdac7aaa746e3910fa15bbd69236f43432543c58604b99b55944fce03bd23dcd259947c2fc75bfd930b481df320cb8ec"]}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 92.511087ms ago: executing program 4 (id=3990): pipe(&(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x72, 0x59, 0x20, 0x1608, 0x301, 0xf124, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd7, 0x0, 0x0, 0xf8, 0x5b, 0xeb}}]}}]}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) cachestat(r4, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000b06010100000000000000ea1d65057082d4aaecc88a8d54b9ff000000000004000700090002005b797a3100000004050001000f0000004ff3a898e169bde5631d07d7ce7d9b1714d449eb244bc07ee1b44c1613f98e34d308732f5ff2855abfcea18c05ee5b413fd09c14cc625e06ce4498aa8f3c31123aa46eae2100000000b81fa2ca64a9123e145fe013ded2ac738e941458923fc955c8c6945c92d74a99efababbc5f6f3ba6fd47b23425256ead8509390936ec5e2003addfc2acd510f9d4a71a71ae0b4abace7539554b461fd1e1027de32d3b322961a9cf8bcd4a857a67c33ef5"], 0x2c}}, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) fsopen(0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) io_uring_setup(0x162e, &(0x7f00000002c0)={0x0, 0xd38b, 0x1000, 0x1, 0x348}) r7 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) 0s ago: executing program 2 (id=3991): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x18b}]}, 0x28}}, 0x20000000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8001) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x2, 0x1, 0x1}, &(0x7f0000000040)=[{}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) kernel console output (not intermixed with test programs): gth 0, skipping remainder of the config [ 916.113338][T24271] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 916.132620][T24271] usb 3-1: config 0 has no interface number 0 [ 916.138876][T24271] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 916.179234][T24271] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 916.234057][T24271] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 916.256387][T24271] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 916.276792][T24271] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 916.314678][T24271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.340733][T24271] usb 3-1: Product: syz [ 916.366244][T24271] usb 3-1: Manufacturer: syz [ 916.373610][T24271] usb 3-1: SerialNumber: syz [ 916.391816][T24271] usb 3-1: config 0 descriptor?? [ 916.408601][ T6452] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 916.448650][T24271] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 916.905357][ T5929] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 917.345088][ T5929] usb 3-1: USB disconnect, device number 108 [ 917.724323][ T6547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.210669][ T5929] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 918.240789][ T5891] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 918.366234][ T5929] usb 5-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 918.378173][ T5929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.389361][ T5929] usb 5-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 918.399077][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 918.407375][ T5929] usb 5-1: SerialNumber: syz [ 918.414882][ T5891] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 918.429139][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.448583][ T5891] usb 2-1: config 0 descriptor?? [ 918.472151][ T5891] gspca_main: spca508-2.14.0 probing 8086:0110 [ 918.608902][ T6603] syzkaller0: entered promiscuous mode [ 918.614896][ T6603] syzkaller0: entered allmulticast mode [ 918.626353][ T6598] could not allocate digest TFM handle sha512-avx2 [ 918.643208][ T5929] usb 5-1: 0:2 : does not exist [ 918.664903][ T5891] gspca_spca508: reg_read err -32 [ 918.677004][ T5929] usb 5-1: USB disconnect, device number 106 [ 918.732597][ T6731] udevd[6731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.880623][ T5891] gspca_spca508: reg_read err -71 [ 918.896724][ T5891] gspca_spca508: reg_read err -71 [ 918.904828][ T5891] gspca_spca508: reg_read err -71 [ 918.910437][ T5891] gspca_spca508: reg write: error -71 [ 918.916328][ T5891] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 918.933492][ T5891] usb 2-1: USB disconnect, device number 84 [ 919.044044][T24626] usb 1-1: USB disconnect, device number 76 [ 919.100788][ T5929] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 919.269915][ T5929] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 919.306430][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.315220][ T5929] usb 7-1: Product: syz [ 919.319437][ T5929] usb 7-1: Manufacturer: syz [ 919.325339][ T5929] usb 7-1: SerialNumber: syz [ 919.349392][ T5929] usb 7-1: config 0 descriptor?? [ 919.366190][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 919.758756][ T5929] usb 7-1: USB disconnect, device number 102 [ 919.846693][ T6730] udevd[6730]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.184693][ T5891] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 920.362828][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 920.371328][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.405626][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.426985][ T5891] usb 2-1: too many endpoints for config 1 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 920.455142][ T5891] usb 2-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 920.513180][ T5891] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 920.546271][ T5891] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 920.578503][ T5891] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.599912][ T5891] usb 2-1: config 1 interface 0 has no altsetting 1 [ 920.702363][ T5891] usb 2-1: config 1 interface 1 has no altsetting 0 [ 920.738158][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 920.752895][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.774509][ T5891] usb 2-1: Product: syz [ 920.784982][ T5891] usb 2-1: Manufacturer: syz [ 920.793727][ T5891] usb 2-1: SerialNumber: syz [ 921.156447][ T5891] usb 2-1: selecting invalid altsetting 0 [ 921.173503][ T5891] usb 2-1: selecting invalid altsetting 0 [ 921.180118][ T5891] cdc_ncm 2-1:1.0: bind() failure [ 921.246432][ T5891] usb 2-1: selecting invalid altsetting 0 [ 921.269299][ T5891] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -22 [ 921.293120][ T5891] usb 2-1: selecting invalid altsetting 0 [ 921.308497][ T5891] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -22 [ 921.331175][ T5891] usb 2-1: selecting invalid altsetting 0 [ 921.336975][ T5891] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 921.381974][ T5891] usb 2-1: USB disconnect, device number 85 [ 921.674328][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3563'. [ 921.895125][ T6763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.696867][ T6790] 8021q: VLANs not supported on ip6_vti0 [ 922.949409][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'. [ 923.061249][ T5929] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 923.220362][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 923.259778][ T5929] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 923.282902][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.316306][ T5929] usb 1-1: Product: syz [ 923.341275][ T5929] usb 1-1: Manufacturer: syz [ 923.368988][ T5929] usb 1-1: SerialNumber: syz [ 923.419187][ T5929] usb 1-1: config 0 descriptor?? [ 923.437404][ T5929] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 923.682873][ T5929] usb 1-1: USB disconnect, device number 77 [ 924.070244][ T5929] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 924.251309][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 924.270510][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 924.300226][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 924.321296][ T5929] usb 5-1: language id specifier not provided by device, defaulting to English [ 924.336637][ T5929] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 924.348063][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.360024][ T5929] usb 5-1: Manufacturer: ‰ [ 924.375314][ T5929] usb 5-1: SerialNumber: syz [ 924.395846][ T5929] usb 5-1: config 0 descriptor?? [ 924.408108][ T5929] em28xx 5-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 924.427938][ T5929] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 924.620245][ T10] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 924.670431][ T5929] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 924.677111][ T5929] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 924.685807][ T5929] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 924.693383][ T5929] em28xx 5-1:0.0: No AC97 audio processor [ 924.711369][ T5929] usb 5-1: USB disconnect, device number 107 [ 924.722582][ T5929] em28xx 5-1:0.0: Disconnecting em28xx [ 924.761169][ T5929] em28xx 5-1:0.0: Freeing device [ 924.808697][ T6926] ptrace attach of "./syz-executor exec"[30808] was attempted by "./syz-executor exec"[6926] [ 924.856405][ T10] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 924.870736][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.878990][ T10] usb 7-1: Product: syz [ 924.891535][ T10] usb 7-1: Manufacturer: syz [ 924.896192][ T10] usb 7-1: SerialNumber: syz [ 924.924165][ T5891] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 924.958503][ T10] usb 7-1: config 0 descriptor?? [ 925.090306][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 925.112611][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.144549][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.180293][ T5891] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 925.220244][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.314383][ T5891] usb 2-1: config 0 descriptor?? [ 925.481077][ T10] usb 7-1: Firmware version (0.0) predates our first public release. [ 925.491659][ T10] usb 7-1: Please update to version 0.2 or newer [ 925.751459][ T6946] geneve2: entered promiscuous mode [ 925.758672][ T6946] geneve2: entered allmulticast mode [ 925.836486][ T5891] ft260 0003:0403:6030.003A: unknown main item tag 0x0 [ 925.859449][ T5891] ft260 0003:0403:6030.003A: unknown main item tag 0x0 [ 925.914750][ T10] usb 7-1: USB disconnect, device number 103 [ 925.961814][ T5891] ft260 0003:0403:6030.003A: chip code: 6424 8183 [ 926.215942][ T5891] ft260 0003:0403:6030.003A: failed to retrieve system status [ 926.243576][ T5891] ft260 0003:0403:6030.003A: probe with driver ft260 failed with error -5 [ 926.390572][ T6979] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 926.419678][ T5911] usb 2-1: USB disconnect, device number 86 [ 926.920465][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 926.926647][ T6926] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 927.594694][ T6926] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 927.601086][ T6926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 927.607101][ T6926] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 927.615830][ T6926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 927.622667][ T6926] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 927.635728][ T6926] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 927.646434][ T6926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 927.653313][ T6926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 927.662887][ T6926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 927.950965][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 928.492555][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3593'. [ 928.548784][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3593'. [ 928.707187][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.929158][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 928.958550][ T10] usb 2-1: config 1 has no interface number 0 [ 928.972107][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.000369][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 929.049103][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.050263][ T5911] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 929.070721][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.117474][ T10] usb 2-1: Product: syz [ 929.139005][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 929.156731][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 929.176149][ T10] usb 2-1: Manufacturer: syz [ 929.191454][ T10] usb 2-1: SerialNumber: syz [ 929.248991][ T10] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 929.268920][ T10] cdc_ncm 2-1:1.1: bind() failure [ 929.281220][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 929.322546][ T5911] usb 5-1: config 0 has no interfaces? [ 929.346061][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 929.381339][ T5911] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 929.394589][ T5911] usb 5-1: Manufacturer: syz [ 929.410118][ T5911] usb 5-1: config 0 descriptor?? [ 929.440682][ T10] usb 2-1: USB disconnect, device number 87 [ 929.470291][ T5918] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 929.610339][T24271] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 929.642171][ T745] Bluetooth: hci1: command 0x0406 tx timeout [ 929.649101][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 929.657297][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.680385][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.704738][ T5918] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 929.718472][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.730356][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 929.757531][ T5918] usb 3-1: config 0 descriptor?? [ 929.784742][T24271] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 929.833920][T24271] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 929.866220][T24271] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 929.888764][T24271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.928974][ T7065] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 929.933073][ T7083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3602'. [ 929.988699][ T5918] hid-steam 0003:28DE:1142.003B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 930.002809][T24271] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 930.110258][ T5918] hid-steam 0003:28DE:1142.003B: Steam wireless receiver connected [ 930.178343][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.235097][ T7056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.258279][ T7056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.265895][ T5918] hid-steam 0003:28DE:1142.003C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 930.317720][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.412129][ T7121] pim6reg1: entered promiscuous mode [ 930.507175][T24271] usb 1-1: USB disconnect, device number 78 [ 930.527231][ T7121] pim6reg1: entered allmulticast mode [ 930.622118][ T7132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.013938][ T5911] usb 5-1: USB disconnect, device number 108 [ 931.200655][T24271] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 931.384319][T24271] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 931.416193][T24271] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 931.441195][T24271] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 931.470230][T24271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.508083][ T7063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 931.519152][ T7170] netlink: 'syz.1.3607': attribute type 2 has an invalid length. [ 931.522717][T24271] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 931.544504][ T7170] netlink: 'syz.1.3607': attribute type 1 has an invalid length. [ 931.640565][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 931.661069][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.669119][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.719938][ T7182] fuse: Bad value for 'fd' [ 931.724573][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 931.724629][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 931.819595][ T745] Bluetooth: hci4: command 0x0c1a tx timeout [ 931.926437][ T5918] usb 3-1: USB disconnect, device number 109 [ 931.974364][ T5918] hid-steam 0003:28DE:1142.003B: Steam wireless receiver disconnected [ 932.116973][ T7210] netlink: 'syz.4.3611': attribute type 25 has an invalid length. [ 932.620625][ T5918] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 932.670432][ T5929] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 932.790443][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 932.801246][ T5918] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 932.809977][ T5918] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 932.821202][ T5918] usb 2-1: config 166 has no interface number 0 [ 932.827637][ T5918] usb 2-1: config 166 has no interface number 1 [ 932.828831][ T5929] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 932.834672][ T5918] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 932.856844][ T5918] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 932.858760][ T5929] usb 7-1: config 0 has no interface number 0 [ 932.868721][ T5918] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 932.886775][ T5918] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 932.892967][ T5929] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 932.925716][ T5918] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 932.930827][ T10] usb 1-1: USB disconnect, device number 79 [ 932.952722][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.967788][ T5918] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 932.970252][ T5929] usb 7-1: Product: syz [ 933.000034][ T5918] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 933.028719][ T5929] usb 7-1: Manufacturer: syz [ 933.037713][ T5918] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 933.053919][ T5929] usb 7-1: SerialNumber: syz [ 933.066912][ T5918] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 933.087063][ T5918] usb 2-1: config 166 interface 177 has no altsetting 0 [ 933.095249][ T5918] usb 2-1: config 166 interface 34 has no altsetting 0 [ 933.096439][ T5929] usb 7-1: config 0 descriptor?? [ 933.111168][ T5918] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 933.123984][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.135750][ T5918] usb 2-1: Product: syz [ 933.140977][ T5918] usb 2-1: Manufacturer: syz [ 933.145921][ T5918] usb 2-1: SerialNumber: syz [ 933.320417][T24271] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 933.361139][ T5918] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 933.390792][ T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 933.487240][T24271] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 933.500292][T24271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.527698][T24271] usb 3-1: config 0 descriptor?? [ 933.543266][T24271] cp210x 3-1:0.0: cp210x converter detected [ 933.564342][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 933.594374][ T5918] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 933.602116][ T10] usb 1-1: config 1 has an invalid interface number: 50 but max is 0 [ 933.602147][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.602167][ T10] usb 1-1: config 1 has no interface number 0 [ 933.602241][ T10] usb 1-1: config 1 interface 50 altsetting 4 endpoint 0x6 has invalid maxpacket 1792, setting to 1024 [ 933.602270][ T10] usb 1-1: config 1 interface 50 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 1024 [ 933.602294][ T10] usb 1-1: config 1 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 933.602322][ T10] usb 1-1: config 1 interface 50 has no altsetting 0 [ 933.605081][ T10] usb 1-1: New USB device found, idVendor=04f1, idProduct=f319, bcdDevice=d9.b1 [ 933.686464][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.710250][ T10] usb 1-1: Product: syz [ 933.714531][ T10] usb 1-1: Manufacturer: syz [ 933.719199][ T10] usb 1-1: SerialNumber: syz [ 933.739342][T24271] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 933.749160][ T7254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 933.761577][T24271] cp210x 3-1:0.0: querying part number failed [ 933.774942][T24271] usb 3-1: cp210x converter now attached to ttyUSB0 [ 933.810430][ T745] Bluetooth: hci2: command 0x0c1a tx timeout [ 933.845843][ T5918] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 933.880339][ T745] Bluetooth: hci4: command 0x0c1a tx timeout [ 933.898322][ T5918] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 933.916335][ T7286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3619'. [ 933.927198][ T5918] uvcvideo 2-1:166.34: No valid video chain found. [ 933.946848][ T7286] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3619'. [ 933.957922][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.959818][ T5918] usb 2-1: USB disconnect, device number 88 [ 933.972670][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.005105][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.029771][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.056446][ T5929] asix 7-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 193 [ 935.450665][ T5918] usb 7-1: USB disconnect, device number 104 [ 935.805132][ T7353] netlink: 'syz.1.3626': attribute type 46 has an invalid length. [ 935.813517][ T7353] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3626'. [ 935.890294][ T5918] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 935.984683][ T5929] usb 3-1: USB disconnect, device number 110 [ 935.994390][ T5929] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 936.059704][ T5918] usb 7-1: device descriptor read/64, error -71 [ 936.228434][T24271] usb 1-1: USB disconnect, device number 80 [ 936.276889][ T5929] cp210x 3-1:0.0: device disconnected [ 936.303302][ T7360] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 936.350670][ T5918] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 936.550228][ T5918] usb 7-1: device descriptor read/64, error -71 [ 936.703608][ T5918] usb usb7-port1: attempt power cycle [ 937.050432][ T5918] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 937.167915][ T5918] usb 7-1: device descriptor read/8, error -71 [ 937.546367][T24271] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 937.559761][ T5918] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 937.591057][ T5918] usb 7-1: device descriptor read/8, error -71 [ 937.701975][ T5918] usb usb7-port1: unable to enumerate USB device [ 937.735821][T24271] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 937.745248][T24271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.753770][T24271] usb 5-1: Product: syz [ 937.760426][T24271] usb 5-1: Manufacturer: syz [ 937.772829][T24271] usb 5-1: SerialNumber: syz [ 938.213773][T24271] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 938.240370][T24271] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 938.623318][ T7418] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3638'. [ 938.725797][ T7419] process 'memfd:-BNIjpppm' started with executable stack [ 938.912683][ T7430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.164963][ T7449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 939.280361][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 939.420291][ T10] usb 1-1: device descriptor read/64, error -71 [ 939.660490][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 939.800576][ T10] usb 1-1: device descriptor read/64, error -71 [ 939.911510][ T10] usb usb1-port1: attempt power cycle [ 940.073180][ T7474] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3650'. [ 940.090092][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.102169][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.115152][T24271] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 940.133998][T24271] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 940.144657][T24271] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 940.159460][T24271] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 940.190531][T24271] usb 5-1: USB disconnect, device number 109 [ 940.260988][ T5929] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 940.273938][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 940.300400][ T797] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 940.308964][ T10] usb 1-1: device descriptor read/8, error -71 [ 940.432334][ T5929] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.444205][ T5929] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 940.457140][ T5929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 940.466558][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.474931][ T5929] usb 2-1: Product: syz [ 940.479196][ T5929] usb 2-1: Manufacturer: syz [ 940.484319][ T5929] usb 2-1: SerialNumber: syz [ 940.489844][ T797] usb 3-1: config 4 has an invalid interface number: 28 but max is 0 [ 940.509978][ T5929] cdc_mbim 2-1:1.0: skipping garbage [ 940.515514][ T797] usb 3-1: config 4 has no interface number 0 [ 940.524388][ T797] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 940.533616][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.541755][ T797] usb 3-1: Product: syz [ 940.545960][ T797] usb 3-1: Manufacturer: syz [ 940.550639][ T797] usb 3-1: SerialNumber: syz [ 940.561988][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 940.574426][ T797] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.28/input/input120 [ 940.601273][ T10] usb 1-1: device descriptor read/8, error -71 [ 940.710829][ T10] usb usb1-port1: unable to enumerate USB device [ 940.718174][ T7467] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 940.765478][ T797] bcm5974 3-1:4.28: could not read from device [ 940.787112][ T5180] bcm5974 3-1:4.28: could not read from device [ 940.795627][ T797] input: failed to attach handler mousedev to device input120, error: -5 [ 940.810519][ T5180] bcm5974 3-1:4.28: could not read from device [ 940.818308][ T5180] bcm5974 3-1:4.28: could not read from device [ 940.827454][ T797] usb 3-1: USB disconnect, device number 111 [ 941.139410][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.151823][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.385927][ T7467] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 941.403629][ T5929] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 941.429601][ T5929] wwan wwan0: port wwan0mbim0 attached [ 941.460342][ T797] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 941.468569][ T5929] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 7e:57:35:4a:ce:6d [ 941.613458][ C0] wdm_int_callback: 21 callbacks suppressed [ 941.613483][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.626126][ C0] wdm_int_callback: 21 callbacks suppressed [ 941.626142][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.639508][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.646230][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.652971][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.659657][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.666096][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.672786][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.679313][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.686020][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.695986][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.702684][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.709219][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.715915][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.722587][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.729297][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.740932][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 941.747752][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 941.754042][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 941.764091][T24271] usb 2-1: USB disconnect, device number 89 [ 941.786810][T24271] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 941.983584][T24271] wwan wwan0: port wwan0mbim0 disconnected [ 942.499620][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3663'. [ 942.703372][T24271] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 942.891360][T24271] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 942.908545][T24271] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.936647][T24271] usb 1-1: config 0 interface 0 has no altsetting 0 [ 942.956312][T24271] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 942.986485][T24271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.011460][T24271] usb 1-1: config 0 descriptor?? [ 943.409081][T24271] usbhid 1-1:0.0: can't add hid device: -71 [ 943.447498][T24271] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 943.519145][T24271] usb 1-1: USB disconnect, device number 85 [ 943.971331][T24271] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 944.132160][ T7686] xt_ecn: cannot match TCP bits for non-tcp packets [ 944.171536][T24271] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 944.211254][T24271] usb 1-1: config 0 has no interface number 0 [ 944.229830][T24271] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 944.260736][T24271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.268873][T24271] usb 1-1: Product: syz [ 944.297213][T24271] usb 1-1: Manufacturer: syz [ 944.317905][T24271] usb 1-1: SerialNumber: syz [ 944.356647][T24271] usb 1-1: config 0 descriptor?? [ 944.443734][ T7705] netlink: 'syz.6.3676': attribute type 1 has an invalid length. [ 944.596628][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.611331][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.682327][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.708956][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.727436][ T7696] could not allocate digest TFM handle blake2b-512-generic [ 944.910763][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.919689][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.178727][T24271] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 945.190405][T24271] uvcvideo 1-1:0.64: No valid video chain found. [ 945.206406][T24271] usb 1-1: USB disconnect, device number 86 [ 945.351347][ T7747] fuse: Bad value for 'user_id' [ 945.358864][ T7747] fuse: Bad value for 'user_id' [ 945.651051][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.711472][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.870266][T24271] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 946.173556][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 946.280324][ T24] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 946.393588][ T7785] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3687'. [ 946.420590][ T24] usb 1-1: device descriptor read/64, error -71 [ 946.671736][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 946.830356][ T24] usb 1-1: device descriptor read/64, error -71 [ 946.950527][ T5918] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 947.014193][ T24] usb usb1-port1: attempt power cycle [ 947.122679][ T5918] usb 2-1: config 1 has no interfaces? [ 947.132759][ T5918] usb 2-1: New USB device found, idVendor=1410, idProduct=2130, bcdDevice=99.1e [ 947.146184][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.172997][ T5918] usb 2-1: Product: syz [ 947.189870][ T5918] usb 2-1: Manufacturer: syz [ 947.214380][ T5918] usb 2-1: SerialNumber: syz [ 947.370798][ T797] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 947.370876][ T24] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 947.420977][ T24] usb 1-1: device descriptor read/8, error -71 [ 947.572228][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.590245][ T797] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 947.606051][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.639274][ T797] usb 3-1: config 0 descriptor?? [ 947.670329][ T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 947.690995][ T24] usb 1-1: device descriptor read/8, error -71 [ 947.801423][ T24] usb usb1-port1: unable to enumerate USB device [ 947.884118][ T797] usbhid 3-1:0.0: can't add hid device: -71 [ 947.892695][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.910319][ T797] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 947.910388][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.937420][ T797] usb 3-1: USB disconnect, device number 112 [ 948.397157][ T30] audit: type=1326 audit(1770570644.285:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 948.445352][ T797] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 948.450282][ T30] audit: type=1326 audit(1770570644.285:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 948.495799][ T30] audit: type=1326 audit(1770570644.325:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742235b78e code=0x7ffc0000 [ 948.576873][ T30] audit: type=1326 audit(1770570644.325:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 948.619672][ T7844] netlink: 'syz.6.3695': attribute type 3 has an invalid length. [ 948.636677][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.649014][ T30] audit: type=1326 audit(1770570644.325:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 948.671520][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.700244][ T797] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.709492][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.717779][ T30] audit: type=1326 audit(1770570644.325:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 948.748705][ T797] usb 3-1: config 0 descriptor?? [ 948.765846][ T30] audit: type=1326 audit(1770570644.325:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 948.883053][ T5929] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 949.056952][ T5929] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 949.073455][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.103653][ T5929] usb 7-1: config 0 has no interface number 0 [ 949.109853][ T5929] usb 7-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 949.173090][ T5929] usb 7-1: config 0 interface 200 has no altsetting 0 [ 949.208472][ T7868] netlink: 'syz.4.3698': attribute type 1 has an invalid length. [ 949.219423][ T5929] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 949.244911][ T7868] netlink: 'syz.4.3698': attribute type 2 has an invalid length. [ 949.254574][ T797] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 949.278599][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.294545][ T5929] usb 7-1: Product: syz [ 949.298780][ T5929] usb 7-1: Manufacturer: syz [ 949.321232][ T5929] usb 7-1: SerialNumber: syz [ 949.336679][ T5929] usb 7-1: config 0 descriptor?? [ 949.500227][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.501134][ T5911] usb 2-1: USB disconnect, device number 90 [ 949.598698][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.613224][ T5929] usbhid 7-1:0.200: couldn't find an input interrupt endpoint [ 949.654462][ T5929] usb 7-1: USB disconnect, device number 109 [ 949.835964][ T10] usb 3-1: USB disconnect, device number 113 [ 950.082092][ T5929] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 950.320940][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 950.385138][ T5929] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 950.397797][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.420605][ T5929] usb 5-1: Product: syz [ 950.424836][ T5929] usb 5-1: Manufacturer: syz [ 950.431834][ T5929] usb 5-1: SerialNumber: syz [ 950.439733][ T5929] usb 5-1: config 0 descriptor?? [ 950.499650][ T5929] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 950.748507][ T7944] fuse: Bad value for 'rootmode' [ 950.791948][ T10] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 950.963477][ T7949] fuse: Unknown parameter '' [ 950.980263][ T5827] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 951.074920][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.102060][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 951.163048][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 951.214559][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.244608][ T10] usb 7-1: config 0 descriptor?? [ 951.268439][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 951.450357][ T10] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 951.530928][ T797] usb 7-1: USB disconnect, device number 110 [ 951.652354][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 951.678966][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.699149][ T10] usb 2-1: Product: syz [ 951.714822][ T10] usb 2-1: Manufacturer: syz [ 951.732478][ T10] usb 2-1: SerialNumber: syz [ 951.769089][ T10] usb 2-1: config 0 descriptor?? [ 951.942908][ T7987] program syz.0.3709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 951.997580][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 952.085118][ T30] audit: type=1326 audit(1770570647.975:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.0.3709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c4f99aeb9 code=0x0 [ 952.588027][ T7999] tipc: Enabled bearer , priority 0 [ 952.600201][ T7999] syzkaller0: entered promiscuous mode [ 952.605924][ T7999] syzkaller0: entered allmulticast mode [ 952.942379][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'. [ 952.966050][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3711'. [ 952.979463][ T8006] netlink: 'syz.0.3711': attribute type 12 has an invalid length. [ 953.015729][ T7989] tipc: Resetting bearer [ 953.029554][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 953.046976][ T10] usb 2-1: USB disconnect, device number 91 [ 953.175975][ T7989] tipc: Disabling bearer [ 953.410433][ T5929] gspca_sonixj: reg_w err -110 [ 953.415277][ T5929] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 953.453903][ T30] audit: type=1326 audit(1770570649.345:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.1.3713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9683b9aeb9 code=0x0 [ 954.168590][ T5929] usb 5-1: USB disconnect, device number 112 [ 954.260231][ T30] audit: type=1400 audit(1770570650.145:970): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=2926292D5CFD5D2B5B2FC8245D4021 pid=8060 comm="syz.2.3719" [ 954.290895][ T5827] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 954.540307][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 954.547989][ T5827] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 954.611888][ T5827] usb 1-1: config 0 has no interface number 0 [ 954.629086][ T5827] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 954.671027][ T5827] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 954.725726][ T5827] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 954.742469][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.765555][ T5827] usb 1-1: Product: syz [ 954.784964][ T5827] usb 1-1: Manufacturer: syz [ 954.940415][ T5827] usb 1-1: SerialNumber: syz [ 954.959743][ T5827] usb 1-1: config 0 descriptor?? [ 955.176746][ T30] audit: type=1326 audit(1770570651.065:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.1.3721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9683b9aeb9 code=0x0 [ 955.238474][ T5827] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 955.290251][ T5827] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 955.338938][ T5827] usb 1-1: USB disconnect, device number 91 [ 955.605490][ T8095] trusted_key: syz.0.3725 sent an empty control message without MSG_MORE. [ 955.799234][ T8110] random: crng reseeded on system resumption [ 955.961854][ T5929] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 956.122109][ T5929] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 956.134644][ T5929] usb 1-1: config 0 has no interface number 0 [ 956.146077][ T5929] usb 1-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 956.231317][ T5929] usb 1-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 956.244015][ T5929] usb 1-1: config 0 interface 84 has no altsetting 0 [ 956.251434][ T5929] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 956.263414][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.291895][ T5929] usb 1-1: config 0 descriptor?? [ 956.303452][ T8104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 956.379167][ T5929] option 1-1:0.84: GSM modem (1-port) converter detected [ 956.536971][ T8101] delete_channel: no stack [ 956.556006][ T8129] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3730'. [ 957.840300][ T5827] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 958.012748][ T5827] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 958.029255][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.065924][ T5827] usb 7-1: config 0 descriptor?? [ 958.430248][ T797] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 958.443594][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3735'. [ 958.453245][ T8161] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3735'. [ 958.610546][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 958.636192][ T797] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.649916][ T797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 958.657924][ T797] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 958.668848][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.682674][ T797] usb 2-1: config 0 descriptor?? [ 958.751333][ T5918] usb 1-1: USB disconnect, device number 92 [ 958.764031][ T5918] option 1-1:0.84: device disconnected [ 959.104695][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.115053][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.207185][ T797] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0 [ 959.232953][ T797] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0 [ 959.260820][ T797] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0 [ 959.285222][ T797] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0 [ 959.305450][ T797] logitech-djreceiver 0003:046D:C71B.003E: unknown main item tag 0x0 [ 959.320611][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 959.493857][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 959.520291][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.548738][ T10] usb 3-1: Product: syz [ 959.563539][ T10] usb 3-1: Manufacturer: syz [ 959.576442][ T10] usb 3-1: SerialNumber: syz [ 959.605596][ T10] usb 3-1: config 0 descriptor?? [ 959.772950][ T5827] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 959.821550][ T5827] usb 7-1: USB disconnect, device number 111 [ 959.844128][ T10] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 959.870013][ T10] f81604 3-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 959.890882][ T10] f81604 3-1:0.0: probe with driver f81604 failed with error -121 [ 960.176580][ T8229] xt_l2tp: invalid flags combination: 8 [ 960.197865][ T8229] batadv0: entered promiscuous mode [ 960.240065][ T8229] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 960.391222][ T5827] usb 2-1: USB disconnect, device number 92 [ 960.640485][ T5911] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 960.710262][ T5929] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 960.791943][ T5911] usb 5-1: device descriptor read/64, error -71 [ 960.890282][ T5929] usb 7-1: Using ep0 maxpacket: 32 [ 960.906605][ T5929] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 960.927146][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.945061][ T5929] usb 7-1: config 0 descriptor?? [ 960.958642][ T5929] gspca_main: sunplus-2.14.0 probing 041e:400b [ 961.040455][ T5911] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 961.126351][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.141409][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.190304][ T5911] usb 5-1: device descriptor read/64, error -71 [ 961.341504][ T5911] usb usb5-port1: attempt power cycle [ 961.470651][ T5929] gspca_sunplus: reg_w_riv err -110 [ 961.476011][ T5929] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 961.703181][ T5911] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 961.740807][ T5911] usb 5-1: device descriptor read/8, error -71 [ 962.164676][ T8297] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3754'. [ 962.180657][ T5911] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 962.211922][ T5911] usb 5-1: device descriptor read/8, error -71 [ 962.376004][ T5911] usb usb5-port1: unable to enumerate USB device [ 962.554818][ T5929] usb 3-1: USB disconnect, device number 115 [ 962.687226][ T5911] usb 7-1: USB disconnect, device number 112 [ 963.050257][ T797] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 963.117280][ T8327] program syz.6.3758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 963.212997][ T797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 963.223126][ T797] usb 1-1: not running at top speed; connect to a high speed hub [ 963.236216][ T797] usb 1-1: config 6 has an invalid interface number: 4 but max is 0 [ 963.246446][ T797] usb 1-1: config 6 has no interface number 0 [ 963.259423][ T797] usb 1-1: config 6 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1032, setting to 64 [ 963.274862][ T797] usb 1-1: config 6 interface 4 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 963.296354][ T797] usb 1-1: config 6 interface 4 has no altsetting 0 [ 963.306559][ T797] usb 1-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 963.315977][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.335324][ T797] usb 1-1: Product: syz [ 963.339847][ T797] usb 1-1: Manufacturer: syz [ 963.347940][ T797] usb 1-1: SerialNumber: syz [ 963.361805][ T8308] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 963.370354][ T5911] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 963.373677][ T8308] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 963.400914][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 963.410509][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3762'. [ 963.469587][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3762'. [ 963.512338][ T8349] veth1: entered promiscuous mode [ 963.530394][ T8349] veth1: left promiscuous mode [ 963.541942][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 963.549806][ T5911] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 963.572577][ T5911] usb 3-1: config 0 has no interface number 0 [ 963.585026][ T5911] usb 3-1: config 0 interface 128 has no altsetting 0 [ 963.606550][ T5911] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=a5.bc [ 963.607493][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 963.623632][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.630086][ T8308] netlink: 'syz.0.3755': attribute type 5 has an invalid length. [ 963.651543][ T5911] usb 3-1: Product: syz [ 963.660306][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.660377][ T8308] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3755'. [ 963.680746][ T5911] usb 3-1: Manufacturer: syz [ 963.685389][ T5911] usb 3-1: SerialNumber: syz [ 963.706838][ T10] usb 2-1: config 0 descriptor?? [ 963.715430][ T5911] usb 3-1: config 0 descriptor?? [ 963.754406][ T5911] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 963.776216][ T5911] usb 3-1: setting power ON [ 963.786785][ T5911] dvb-usb: bulk message failed: -22 (2/0) [ 963.804713][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 963.831047][ T5911] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 963.860084][ T5911] usb 3-1: media controller created [ 963.863324][ T797] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 963.934396][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 963.972099][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3760'. [ 964.021021][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 964.040046][ T797] usb 1-1: USB disconnect, device number 93 [ 964.068585][ T5911] usb 3-1: digital interface selection failed (-22) [ 964.106092][ T5911] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 964.152164][ T5911] usb 3-1: setting power OFF [ 964.157420][ T5911] dvb-usb: bulk message failed: -22 (2/0) [ 964.166277][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.180324][ T5911] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 964.210993][ T5911] (NULL device *): no alternate interface [ 964.232567][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 964.343928][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 964.374331][ T10] [drm] Initialized udl on minor 2 [ 964.393143][ T5911] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 964.400681][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 964.430367][ T5911] usb 3-1: USB disconnect, device number 116 [ 964.477149][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 964.505560][ T5929] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 964.528398][ T10] usb 2-1: USB disconnect, device number 93 [ 964.545767][ T5929] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 965.030493][ T5911] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 965.143686][ T8443] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3769'. [ 965.191018][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 965.199454][ T5911] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 965.219853][ T5911] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 965.240454][ T5911] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 965.260508][ T5911] usb 1-1: config 8 has no interface number 0 [ 965.260829][ T5929] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 965.271452][ T5911] usb 1-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 965.328651][ T5911] usb 1-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 965.351578][ T5911] usb 1-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.385307][ T5911] usb 1-1: config 8 interface 223 has no altsetting 0 [ 965.426628][ T5911] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 965.449950][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.468979][ T5911] usb 1-1: Product: syz [ 965.475179][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.510263][ T5929] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 965.514044][ T5911] usb 1-1: Manufacturer: syz [ 965.540213][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.564013][ T5929] usb 3-1: config 0 descriptor?? [ 965.628395][ T5911] usb 1-1: SerialNumber: syz [ 965.683193][ T8424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 965.958261][ T5911] usb 1-1: USB disconnect, device number 94 [ 966.125830][ T5929] hid-picolcd 0003:04D8:C002.003F: unknown main item tag 0x0 [ 966.156469][ T5929] hid-picolcd 0003:04D8:C002.003F: unknown main item tag 0x0 [ 966.184934][ T5929] hid-picolcd 0003:04D8:C002.003F: unknown main item tag 0x0 [ 966.210541][ T5929] hid-picolcd 0003:04D8:C002.003F: unknown main item tag 0x0 [ 966.230203][ T5929] hid-picolcd 0003:04D8:C002.003F: item fetching failed at offset 6/7 [ 966.262394][ T5929] hid-picolcd 0003:04D8:C002.003F: device report parse failed [ 966.292169][ T5929] hid-picolcd 0003:04D8:C002.003F: probe with driver hid-picolcd failed with error -22 [ 967.763151][ T8517] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3780'. [ 967.812697][ T8514] fuse: Bad value for 'rootmode' [ 968.093057][ T5929] usb 3-1: USB disconnect, device number 117 [ 968.868107][ T8606] syzkaller1: entered promiscuous mode [ 968.874233][ T8606] syzkaller1: entered allmulticast mode [ 968.875168][ T8610] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 969.024705][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3792'. [ 969.035254][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.163416][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.199743][ T8626] kAFS: unable to lookup cell '' [ 969.220397][ T5911] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 969.370269][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 969.404132][ T5911] usb 3-1: config 1 interface 0 has no altsetting 0 [ 969.423849][ T5911] usb 3-1: string descriptor 0 read error: -22 [ 969.430547][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 969.439722][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.547354][ T5918] IPVS: starting estimator thread 0... [ 969.640422][ T8644] IPVS: using max 49 ests per chain, 117600 per kthread [ 969.688621][ T5911] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 969.752655][ T5911] usb 3-1: USB disconnect, device number 118 [ 970.019643][T24626] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 970.241073][T24626] usb 7-1: Using ep0 maxpacket: 8 [ 970.277954][T24626] usb 7-1: config 1 has an invalid interface number: 222 but max is 0 [ 970.306653][T24626] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 970.334287][T24626] usb 7-1: config 1 has no interface number 0 [ 970.362025][T24626] usb 7-1: too many endpoints for config 1 interface 222 altsetting 245: 158, using maximum allowed: 30 [ 970.402892][ T5929] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 970.442244][T24626] usb 7-1: config 1 interface 222 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 970.477870][T24626] usb 7-1: config 1 interface 222 has no altsetting 0 [ 970.533799][T24626] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 970.544286][T24626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.574635][T24626] usb 7-1: Product: syz [ 970.584006][T24626] usb 7-1: Manufacturer: syz [ 970.594894][T24626] usb 7-1: SerialNumber: syz [ 970.640320][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 970.814943][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.849603][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.897850][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 970.980512][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 971.005235][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.045019][ T24] usb 2-1: config 0 descriptor?? [ 971.528808][ T24] plantronics 0003:047F:FFFF.0040: reserved main item tag 0xd [ 971.574866][ T24] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 971.760299][ T5918] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 971.795353][ T24] usb 2-1: USB disconnect, device number 94 [ 971.920287][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 972.041750][ T5918] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 972.050274][ T5918] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 972.061235][ T5918] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 972.071662][ T5918] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 972.097164][ T5918] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.112220][ T5918] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 972.145175][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.388406][ T5918] usb 1-1: GET_CAPABILITIES returned 0 [ 972.394442][ T5918] usbtmc 1-1:16.0: can't read capabilities [ 972.633971][ T8733] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 972.643918][ T5929] usb 1-1: USB disconnect, device number 96 [ 973.729807][T24626] usb 7-1: USB disconnect, device number 113 [ 973.751169][ T5929] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 974.271480][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 974.278335][ T5929] usb 2-1: config index 0 descriptor too short (expected 46935, got 18) [ 974.288065][ T5929] usb 2-1: config 0 has too many interfaces: 116, using maximum allowed: 32 [ 974.298338][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.309198][ T5929] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 116 [ 974.367032][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 974.396794][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.413421][ T5929] usb 2-1: Product: syz [ 974.426956][ T5929] usb 2-1: Manufacturer: syz [ 974.434678][ T5929] usb 2-1: SerialNumber: syz [ 974.450008][ T5929] usb 2-1: config 0 descriptor?? [ 974.482960][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3814'. [ 974.749920][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.760436][ T5918] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 974.776573][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.840916][ T5929] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 974.924291][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 974.944080][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 974.970292][ T5918] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 974.978648][ T5918] usb 3-1: config 0 has no interface number 0 [ 974.996507][ T5918] usb 3-1: config 0 interface 238 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 975.021496][ T5918] usb 3-1: config 0 interface 238 has no altsetting 0 [ 975.031053][ T5918] usb 3-1: New USB device found, idVendor=06e0, idProduct=f108, bcdDevice=9e.70 [ 975.031957][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.043499][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.059272][ T5918] usb 3-1: Product: syz [ 975.065058][ T5918] usb 3-1: Manufacturer: syz [ 975.069708][ T5918] usb 3-1: SerialNumber: syz [ 975.074838][ T24] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 975.082399][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.117693][ T5929] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 975.128385][ T5929] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 975.130517][ T5918] usb 3-1: config 0 descriptor?? [ 975.154215][ T5929] usb 7-1: Manufacturer: syz [ 975.165662][ T8810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 975.190992][ T5929] usb 7-1: config 0 descriptor?? [ 975.284817][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 975.314531][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.337204][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 975.348037][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 975.368803][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.390943][ T24] usb 1-1: config 0 descriptor?? [ 975.429768][ T30] audit: type=1326 audit(1770570671.315:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.2.3815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe79ff9aeb9 code=0x0 [ 976.124164][ T8838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.096166][ T8823] 8021q: VLANs not supported on nlmon0 [ 977.131916][ T5929] usbhid 7-1:0.0: can't add hid device: -71 [ 977.140889][ T5929] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 977.204327][ T24] usb 2-1: USB disconnect, device number 95 [ 977.225392][ T5929] usb 7-1: USB disconnect, device number 114 [ 977.657062][ T5918] ti_usb_3410_5052 3-1:0.238: TI USB 3410 1 port adapter converter detected [ 977.657312][ T5918] ti_usb_3410_5052 3-1:0.238: missing endpoints [ 977.682228][ T5918] usb 3-1: USB disconnect, device number 119 [ 977.839105][ T8880] mmap: syz.2.3821 (8880): VmData 37593088 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 978.240237][ T5929] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 978.507654][ T5918] usb 1-1: USB disconnect, device number 97 [ 979.047093][ T8924] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 979.824689][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3831'. [ 979.915752][ T8943] bridge_slave_1: left allmulticast mode [ 979.923496][ T8943] bridge_slave_1: left promiscuous mode [ 979.930715][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.939790][ T797] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 980.085586][ T8943] bridge_slave_0: left allmulticast mode [ 980.092314][ T8943] bridge_slave_0: left promiscuous mode [ 980.098371][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.141848][ T797] usb 7-1: Using ep0 maxpacket: 32 [ 980.152521][ T797] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 980.170560][ T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.219108][ T797] usb 7-1: config 0 descriptor?? [ 980.268292][ T797] gspca_main: sunplus-2.14.0 probing 041e:400b [ 980.732903][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.761861][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.030941][ T797] gspca_sunplus: reg_r err -71 [ 981.066655][ T797] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 981.113485][ T797] usb 7-1: USB disconnect, device number 115 [ 981.228478][T24038] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.265579][ T8975] loop4: detected capacity change from 0 to 7 [ 981.305718][ T8975] loop4: [POWERTEC] p1 p2 [ 981.344706][ T8975] loop4: p1 start 1764718181 is beyond EOD, truncated [ 981.400524][ T8975] loop4: p2 size 786432 extends beyond EOD, truncated [ 981.545291][T24038] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.655567][ T6731] udevd[6731]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 981.806208][T24038] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.980605][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3838'. [ 982.025329][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3838'. [ 982.032594][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3838'. [ 982.084679][T24038] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.200976][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 982.201939][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3838'. [ 982.225871][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 982.237168][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 982.254931][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 982.262888][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 982.861472][T24038] bridge_slave_1: left allmulticast mode [ 982.877399][T24038] bridge_slave_1: left promiscuous mode [ 982.887761][T24038] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.929736][T24038] bridge_slave_0: left allmulticast mode [ 982.943870][T24038] bridge_slave_0: left promiscuous mode [ 982.949802][T24038] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.981622][ T9082] loop4: detected capacity change from 0 to 7 [ 982.988223][ T30] audit: type=1326 audit(1770570678.865:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.019374][ T9084] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3848'. [ 983.030961][ T9082] loop4: [POWERTEC] p1 p2 [ 983.035712][ T9082] loop4: p1 start 1764718181 is beyond EOD, truncated [ 983.063567][ T9082] loop4: p2 size 786432 extends beyond EOD, truncated [ 983.071063][ T30] audit: type=1326 audit(1770570678.865:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.103892][ T30] audit: type=1326 audit(1770570678.905:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.197294][ T30] audit: type=1326 audit(1770570678.905:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.203276][ T6731] udevd[6731]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 983.268332][ T30] audit: type=1326 audit(1770570678.905:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.296858][ T30] audit: type=1326 audit(1770570678.905:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.330377][ T30] audit: type=1326 audit(1770570678.905:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.379692][ T30] audit: type=1326 audit(1770570678.935:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.404548][ T30] audit: type=1326 audit(1770570678.935:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 983.429535][ T30] audit: type=1326 audit(1770570678.935:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.4.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 984.360509][ T5844] Bluetooth: hci0: command tx timeout [ 984.388867][ T9126] FAULT_INJECTION: forcing a failure. [ 984.388867][ T9126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.402393][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.6.3855 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.402413][ T9126] Tainted: [L]=SOFTLOCKUP [ 984.402418][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 984.402425][ T9126] Call Trace: [ 984.402430][ T9126] [ 984.402436][ T9126] dump_stack_lvl+0xe8/0x150 [ 984.402455][ T9126] should_fail_ex+0x412/0x560 [ 984.402472][ T9126] _copy_from_user+0x2d/0xb0 [ 984.402485][ T9126] __sys_connect+0x156/0x450 [ 984.402500][ T9126] ? __pfx___sys_connect+0x10/0x10 [ 984.402532][ T9126] ? __pfx_ksys_write+0x10/0x10 [ 984.402565][ T9126] __x64_sys_connect+0x7a/0x90 [ 984.402589][ T9126] do_syscall_64+0xe2/0xf80 [ 984.402609][ T9126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.402619][ T9126] ? trace_irq_disable+0x37/0x100 [ 984.402630][ T9126] ? clear_bhb_loop+0x60/0xb0 [ 984.402651][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.402662][ T9126] RIP: 0033:0x7f13c259aeb9 [ 984.402674][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.402684][ T9126] RSP: 002b:00007f13c3534028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 984.402698][ T9126] RAX: ffffffffffffffda RBX: 00007f13c2815fa0 RCX: 00007f13c259aeb9 [ 984.402707][ T9126] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 984.402714][ T9126] RBP: 00007f13c3534090 R08: 0000000000000000 R09: 0000000000000000 [ 984.402722][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.402729][ T9126] R13: 00007f13c2816038 R14: 00007f13c2815fa0 R15: 00007f13c293fa48 [ 984.402746][ T9126] [ 984.584599][ T24] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 984.631737][T24038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.644537][T24038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.658903][T24038] bond0 (unregistering): Released all slaves [ 984.688104][T24038] bond1 (unregistering): Released all slaves [ 984.706992][T24038] bond2 (unregistering): Released all slaves [ 984.729442][ T9079] batadv_slave_1: entered promiscuous mode [ 984.738161][ T9090] batadv_slave_1: left promiscuous mode [ 984.743868][ T24] usb 5-1: device descriptor read/64, error -71 [ 984.752632][ T9133] openvswitch: netlink: Flow actions attr not present in new flow. [ 984.782752][ T9108] gtp0: entered promiscuous mode [ 984.800353][ T9108] gtp0: entered allmulticast mode [ 984.943469][T24038] tipc: Left network mode [ 984.961519][ T9152] syz.1.3858 (9152): attempted to duplicate a private mapping with mremap. This is not supported. [ 984.997406][ T24] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 985.100602][ T5827] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 985.151082][ T24] usb 5-1: device descriptor read/64, error -71 [ 985.219764][ T9188] loop4: detected capacity change from 0 to 7 [ 985.228924][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 985.247839][ T6731] loop4: [POWERTEC] p1 p2 [ 985.252689][ T6731] loop4: p1 start 1764718181 is beyond EOD, truncated [ 985.280557][ T5827] usb 7-1: Using ep0 maxpacket: 32 [ 985.288805][ T6731] loop4: p2 size 786432 extends beyond EOD, truncated [ 985.300703][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.311888][ T24] usb usb5-port1: attempt power cycle [ 985.331849][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.343152][ T5827] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 985.354717][ T9188] loop4: [POWERTEC] p1 p2 [ 985.360503][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.375310][ T5827] usb 7-1: config 0 descriptor?? [ 985.380510][ T9188] loop4: p1 start 1764718181 is beyond EOD, truncated [ 985.380539][ T9188] loop4: p2 size 786432 extends beyond EOD, truncated [ 985.438440][ T5827] hub 7-1:0.0: USB hub found [ 985.456372][ T6731] udevd[6731]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 985.605339][ T6731] udevd[6731]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 985.670283][ T24] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 985.695607][ T24] usb 5-1: device descriptor read/8, error -71 [ 985.754812][ T9137] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3857'. [ 985.891744][ T5911] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 985.962153][ T24] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 986.031115][ T24] usb 5-1: device descriptor read/8, error -71 [ 986.050272][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 986.074938][ T5911] usb 2-1: config 1 has an invalid descriptor of length 217, skipping remainder of the config [ 986.107641][ T5911] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 986.141493][ T24] usb usb5-port1: unable to enumerate USB device [ 986.155892][ T5911] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 986.209531][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.268955][ T5911] usb 2-1: Product: syz [ 986.310301][ T5911] usb 2-1: Manufacturer: syz [ 986.325241][ T5911] usb 2-1: SerialNumber: syz [ 986.440240][ T5844] Bluetooth: hci0: command tx timeout [ 986.456873][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.497938][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.526589][ T9016] bridge_slave_0: entered allmulticast mode [ 986.577352][ T9016] bridge_slave_0: entered promiscuous mode [ 986.702611][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.735944][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.760978][ T9016] bridge_slave_1: entered allmulticast mode [ 986.791374][ T9016] bridge_slave_1: entered promiscuous mode [ 986.968913][T24038] hsr_slave_0: left promiscuous mode [ 986.983552][T24038] hsr_slave_1: left promiscuous mode [ 987.016404][T24038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.034740][T24038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.059233][T24038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.075329][T24038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.205358][ T9329] FAULT_INJECTION: forcing a failure. [ 987.205358][ T9329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.222726][T24038] veth1_macvtap: left promiscuous mode [ 987.232453][T24038] veth0_macvtap: left promiscuous mode [ 987.239152][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.4.3866 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.239182][ T9329] Tainted: [L]=SOFTLOCKUP [ 987.239190][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 987.239200][ T9329] Call Trace: [ 987.239214][ T9329] [ 987.239222][ T9329] dump_stack_lvl+0xe8/0x150 [ 987.239248][ T9329] should_fail_ex+0x412/0x560 [ 987.239266][ T9329] _copy_to_user+0x31/0xb0 [ 987.239279][ T9329] simple_read_from_buffer+0xe1/0x170 [ 987.239298][ T9329] proc_fail_nth_read+0x1bb/0x230 [ 987.239317][ T9329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 987.239335][ T9329] ? rw_verify_area+0x2a6/0x4d0 [ 987.239350][ T9329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 987.239368][ T9329] vfs_read+0x20c/0xa70 [ 987.239384][ T9329] ? fdget_pos+0x246/0x320 [ 987.239400][ T9329] ? __pfx___mutex_lock+0x10/0x10 [ 987.239414][ T9329] ? __pfx_vfs_read+0x10/0x10 [ 987.239430][ T9329] ? __fget_files+0x2a/0x420 [ 987.239444][ T9329] ? __fget_files+0x3a0/0x420 [ 987.239456][ T9329] ? __fget_files+0x2a/0x420 [ 987.239472][ T9329] ksys_read+0x150/0x270 [ 987.239489][ T9329] ? __pfx_ksys_read+0x10/0x10 [ 987.239511][ T9329] do_syscall_64+0xe2/0xf80 [ 987.239523][ T9329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.239534][ T9329] ? trace_irq_disable+0x37/0x100 [ 987.239545][ T9329] ? clear_bhb_loop+0x60/0xb0 [ 987.239559][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.239574][ T9329] RIP: 0033:0x7f742235b78e [ 987.239586][ T9329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 987.239596][ T9329] RSP: 002b:00007f7423314fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 987.239610][ T9329] RAX: ffffffffffffffda RBX: 00007f74233156c0 RCX: 00007f742235b78e [ 987.239619][ T9329] RDX: 000000000000000f RSI: 00007f74233150a0 RDI: 0000000000000004 [ 987.239627][ T9329] RBP: 00007f7423315090 R08: 0000000000000000 R09: 0000000000000000 [ 987.239634][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.239641][ T9329] R13: 00007f7422616038 R14: 00007f7422615fa0 R15: 00007f742273fa48 [ 987.239660][ T9329] [ 987.457446][T24038] veth1_vlan: left promiscuous mode [ 987.462854][T24038] veth0_vlan: left promiscuous mode [ 987.924103][ T5827] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 987.971394][ T5827] usbhid 7-1:0.0: can't add hid device: -71 [ 987.977755][ T5827] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 988.075773][ T5827] usb 7-1: USB disconnect, device number 116 [ 988.537406][ T5844] Bluetooth: hci0: command tx timeout [ 988.720209][ T5827] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 988.870565][ T5827] usb 7-1: device descriptor read/64, error -71 [ 988.940308][ T5918] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 989.100322][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 989.108218][ T5918] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 989.116925][ T5827] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 989.147305][ T5918] usb 5-1: config 0 has no interface number 0 [ 989.162620][ T5918] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 989.184533][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 989.194264][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.216440][ T5918] usb 5-1: Product: syz [ 989.220943][ T5918] usb 5-1: Manufacturer: syz [ 989.225564][ T5918] usb 5-1: SerialNumber: syz [ 989.271498][ T5918] usb 5-1: config 0 descriptor?? [ 989.291690][ T5827] usb 7-1: device descriptor read/64, error -71 [ 989.401715][ T5827] usb usb7-port1: attempt power cycle [ 989.432083][ T5918] msi2500 5-1:0.246: Registered as swradio24 [ 989.438266][ T5918] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 989.540741][ T5918] usb 5-1: USB disconnect, device number 122 [ 989.591387][T24271] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 989.732634][T24271] usb 1-1: device descriptor read/64, error -71 [ 989.760302][ T5827] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 989.791192][ T5827] usb 7-1: device descriptor read/8, error -71 [ 989.805696][T24038] team0 (unregistering): Port device team_slave_1 removed [ 989.874483][T24038] team0 (unregistering): Port device team_slave_0 removed [ 989.970387][T24271] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 990.030349][ T5827] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 990.061135][ T5827] usb 7-1: device descriptor read/8, error -71 [ 990.110389][T24271] usb 1-1: device descriptor read/64, error -71 [ 990.172341][ T5827] usb usb7-port1: unable to enumerate USB device [ 990.220637][T24271] usb usb1-port1: attempt power cycle [ 990.312559][ T9399] input: syz1 as /devices/virtual/input/input125 [ 990.573281][T24271] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 990.600300][ T5844] Bluetooth: hci0: command tx timeout [ 990.601258][T24271] usb 1-1: device descriptor read/8, error -71 [ 990.760592][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.793375][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.845351][ T9432] loop4: detected capacity change from 0 to 7 [ 990.855077][T24271] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 990.857215][ T6009] loop4: [POWERTEC] p1 p2 [ 990.884004][ T6009] loop4: p1 start 1764718181 is beyond EOD, truncated [ 990.892078][ T6009] loop4: p2 size 786432 extends beyond EOD, truncated [ 990.917239][ T9016] team0: Port device team_slave_0 added [ 990.923556][T24271] usb 1-1: device descriptor read/8, error -71 [ 990.938466][ T9016] team0: Port device team_slave_1 added [ 990.965268][ T9432] loop4: [POWERTEC] p1 p2 [ 990.989379][ T9432] loop4: p1 start 1764718181 is beyond EOD, truncated [ 991.027827][ T9432] loop4: p2 size 786432 extends beyond EOD, truncated [ 991.040719][T24271] usb usb1-port1: unable to enumerate USB device [ 991.067809][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.112987][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.139874][ T5911] usb 2-1: USB disconnect, device number 96 [ 991.219338][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.249759][ T6009] udevd[6009]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 991.260873][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.306630][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.393797][ T6731] udevd[6731]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 991.408193][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.576325][ T9016] hsr_slave_0: entered promiscuous mode [ 991.593217][ T797] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 991.612685][ T9016] hsr_slave_1: entered promiscuous mode [ 991.634392][ T9016] debugfs: 'hsr0' already exists in 'hsr' [ 991.640908][ T9016] Cannot create hsr debugfs directory [ 991.669207][ T9529] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3879'. [ 991.775027][ T797] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 991.809871][ T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.840232][ T797] usb 7-1: Product: syz [ 991.844518][ T797] usb 7-1: Manufacturer: syz [ 991.860250][ T797] usb 7-1: SerialNumber: syz [ 991.868510][ T797] usb 7-1: config 0 descriptor?? [ 991.892543][ T797] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 992.040494][T24271] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 992.329884][T24271] usb 5-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 992.352502][T24271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 992.401997][T24271] usb 5-1: SerialNumber: syz [ 992.410937][ T797] gspca_stk1135: reg_w 0x2 err -110 [ 992.421241][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 992.459478][T24271] usb 5-1: config 0 descriptor?? [ 992.473196][ T797] gspca_stk1135: Sensor write failed [ 992.495710][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 992.506378][T24271] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 992.515738][ T797] gspca_stk1135: Sensor write failed [ 992.646584][T24271] dvb-usb: bulk message failed: -22 (3/0) [ 992.813966][T24271] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 992.828011][T24271] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 992.846579][T24271] usb 5-1: media controller created [ 992.854102][T24271] dvb-usb: bulk message failed: -22 (5/0) [ 992.880567][T24271] dvb-usb: MAC address reading failed. [ 992.926697][T24271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.954872][T24271] dvb-usb: bulk message failed: -22 (6/0) [ 992.964974][T24271] dvb-usb: bulk message failed: -22 (6/0) [ 992.970848][T24271] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 992.997190][T24271] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input126 [ 992.997819][ T9619] hsr_slave_0: left promiscuous mode [ 993.024085][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 993.029589][T24271] dvb-usb: schedule remote query interval to 100 msecs. [ 993.041605][T24271] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 993.051549][ T797] gspca_stk1135: Sensor read failed [ 993.057150][ T9619] hsr_slave_1: left promiscuous mode [ 993.086342][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.093092][T24271] usb 5-1: USB disconnect, device number 123 [ 993.138807][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.149079][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 993.159163][ T797] gspca_stk1135: Sensor read failed [ 993.168044][ T797] gspca_stk1135: Detected sensor type unknown (0x0) [ 993.178901][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 993.185747][ T797] gspca_stk1135: Sensor read failed [ 993.196545][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 993.217439][ T797] gspca_stk1135: Sensor read failed [ 993.263294][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 993.263412][T24271] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 993.350050][ T797] gspca_stk1135: Sensor write failed [ 993.364815][ T797] gspca_stk1135: serial bus timeout: status=0x00 [ 993.466373][ T797] gspca_stk1135: Sensor write failed [ 993.495548][ T797] stk1135 7-1:0.0: probe with driver stk1135 failed with error -110 [ 994.038968][ T9694] FAULT_INJECTION: forcing a failure. [ 994.038968][ T9694] name failslab, interval 1, probability 0, space 0, times 0 [ 994.084291][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 994.093822][ T9694] CPU: 1 UID: 0 PID: 9694 Comm: syz.1.3887 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.093853][ T9694] Tainted: [L]=SOFTLOCKUP [ 994.093870][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 994.093882][ T9694] Call Trace: [ 994.093890][ T9694] [ 994.093898][ T9694] dump_stack_lvl+0xe8/0x150 [ 994.093930][ T9694] should_fail_ex+0x412/0x560 [ 994.093960][ T9694] should_failslab+0xa8/0x100 [ 994.093984][ T9694] __kmalloc_noprof+0xde/0x7e0 [ 994.094004][ T9694] ? io_cache_alloc_new+0x40/0x100 [ 994.094034][ T9694] io_cache_alloc_new+0x40/0x100 [ 994.094067][ T9694] __io_prep_rw+0x2bf/0xed0 [ 994.094096][ T9694] ? __pfx___io_prep_rw+0x10/0x10 [ 994.094112][ T9694] ? percpu_ref_get_many+0x21/0x1e0 [ 994.094138][ T9694] ? percpu_ref_get_many+0x21/0x1e0 [ 994.094175][ T9694] io_prep_rwv+0x8e/0x440 [ 994.094193][ T9694] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 994.094219][ T9694] ? __pfx_io_prep_rwv+0x10/0x10 [ 994.094246][ T9694] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 994.094270][ T9694] io_submit_sqes+0xad2/0x2130 [ 994.094324][ T9694] __se_sys_io_uring_enter+0x2f7/0x2c30 [ 994.094364][ T9694] ? ksys_write+0x1e6/0x270 [ 994.094395][ T9694] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 994.094412][ T9694] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 994.094442][ T9694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 994.094469][ T9694] ? __fget_files+0x3a0/0x420 [ 994.094498][ T9694] ? fput+0xa0/0xd0 [ 994.094520][ T9694] ? ksys_write+0x242/0x270 [ 994.094543][ T9694] ? __pfx_ksys_write+0x10/0x10 [ 994.094568][ T9694] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 994.094591][ T9694] do_syscall_64+0xe2/0xf80 [ 994.094608][ T9694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.094626][ T9694] ? trace_irq_disable+0x37/0x100 [ 994.094645][ T9694] ? clear_bhb_loop+0x60/0xb0 [ 994.094668][ T9694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.094686][ T9694] RIP: 0033:0x7f9683b9aeb9 [ 994.094705][ T9694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.094722][ T9694] RSP: 002b:00007f9684b11028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 994.094744][ T9694] RAX: ffffffffffffffda RBX: 00007f9683e15fa0 RCX: 00007f9683b9aeb9 [ 994.094757][ T9694] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 994.094769][ T9694] RBP: 00007f9684b11090 R08: 0000000000000000 R09: 0000000000000000 [ 994.094791][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.094803][ T9694] R13: 00007f9683e16038 R14: 00007f9683e15fa0 R15: 00007f9683f3fa48 [ 994.094836][ T9694] [ 994.375851][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 994.375870][ T30] audit: type=1326 audit(1770570690.265:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.4.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 994.405591][ T30] audit: type=1326 audit(1770570690.265:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.4.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 994.618787][ T797] usb 7-1: USB disconnect, device number 121 [ 995.078932][ T9016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 995.114256][ T9016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 995.131724][ T9784] netlink: 'syz.6.3891': attribute type 1 has an invalid length. [ 995.183691][ T9016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 995.210860][ T9016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 995.211424][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3891'. [ 995.336264][ T9784] bond5: entered promiscuous mode [ 995.342068][ T9784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 995.560286][ T5929] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 995.702323][ T5929] usb 7-1: device descriptor read/64, error -71 [ 995.805337][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.817605][ T9853] program syz.1.3894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.888947][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.916976][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.924243][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.932058][T24271] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 995.940444][ T5929] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 996.002704][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.009948][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.090459][ T5929] usb 7-1: device descriptor read/64, error -71 [ 996.130092][T24271] usb 5-1: device descriptor read/64, error -71 [ 996.207206][ T5929] usb usb7-port1: attempt power cycle [ 996.261901][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.380853][ T10] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 996.388829][T24271] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 996.423651][ T9016] veth0_vlan: entered promiscuous mode [ 996.466336][ T9016] veth1_vlan: entered promiscuous mode [ 996.531141][T24271] usb 5-1: device descriptor read/64, error -71 [ 996.567135][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 996.579430][ T9016] veth0_macvtap: entered promiscuous mode [ 996.585790][ T5929] usb 7-1: new full-speed USB device number 124 using dummy_hcd [ 996.603986][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 996.651468][T24271] usb usb5-port1: attempt power cycle [ 996.669237][ T5929] usb 7-1: device descriptor read/8, error -71 [ 996.695243][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 996.723868][ T9016] veth1_macvtap: entered promiscuous mode [ 996.729710][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 996.743841][ T9877] syzkaller1: entered promiscuous mode [ 996.749356][ T9877] syzkaller1: entered allmulticast mode [ 996.768177][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 996.795960][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 996.856955][ T10] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 996.890624][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.920621][ T5929] usb 7-1: new full-speed USB device number 125 using dummy_hcd [ 996.928595][ T10] usb 1-1: Product: syz [ 996.937441][ T10] usb 1-1: Manufacturer: syz [ 996.952863][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.987893][ T10] usb 1-1: SerialNumber: syz [ 996.993222][ T5929] usb 7-1: device descriptor read/8, error -71 [ 997.000512][T24271] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 997.012044][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.048679][T24271] usb 5-1: device descriptor read/8, error -71 [ 997.067492][T24036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.070851][ T10] usb 1-1: config 0 descriptor?? [ 997.105731][T24036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.131020][ T9890] FAULT_INJECTION: forcing a failure. [ 997.131020][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 997.150979][ T5929] usb usb7-port1: unable to enumerate USB device [ 997.187030][T24036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.203391][ T10] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 997.230661][T24038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.239956][ T10] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 997.248933][ T9890] CPU: 1 UID: 0 PID: 9890 Comm: syz.1.3898 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.248961][ T9890] Tainted: [L]=SOFTLOCKUP [ 997.248966][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 997.248973][ T9890] Call Trace: [ 997.248979][ T9890] [ 997.248985][ T9890] dump_stack_lvl+0xe8/0x150 [ 997.249005][ T9890] should_fail_ex+0x412/0x560 [ 997.249022][ T9890] should_failslab+0xa8/0x100 [ 997.249036][ T9890] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 997.249054][ T9890] ? __alloc_skb+0x1d7/0x390 [ 997.249066][ T9890] ? __local_bh_enable_ip+0xd0/0x130 [ 997.249078][ T9890] ? __alloc_skb+0x193/0x390 [ 997.249091][ T9890] __alloc_skb+0x1d7/0x390 [ 997.249106][ T9890] alloc_skb_with_frags+0xca/0x890 [ 997.249124][ T9890] ? is_bpf_text_address+0x26/0x2b0 [ 997.249140][ T9890] sock_alloc_send_pskb+0x878/0x990 [ 997.249166][ T9890] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 997.249187][ T9890] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 997.249202][ T9890] unix_dgram_sendmsg+0x460/0x18e0 [ 997.249217][ T9890] ? aa_file_perm+0x12d/0x1630 [ 997.249235][ T9890] ? aa_file_perm+0x440/0x1630 [ 997.249255][ T9890] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 997.249267][ T9890] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 997.249283][ T9890] ? __pfx_aa_file_perm+0x10/0x10 [ 997.249299][ T9890] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 997.249314][ T9890] sock_write_iter+0x503/0x550 [ 997.249341][ T9890] ? __pfx_sock_write_iter+0x10/0x10 [ 997.249363][ T9890] ? bpf_lsm_file_permission+0x9/0x20 [ 997.249376][ T9890] ? security_file_permission+0x75/0x260 [ 997.249388][ T9890] ? rw_verify_area+0x255/0x4d0 [ 997.249404][ T9890] ? __pfx_sock_write_iter+0x10/0x10 [ 997.249420][ T9890] io_write+0xb4d/0x1700 [ 997.249439][ T9890] ? __pfx_io_write+0x10/0x10 [ 997.249449][ T9890] ? __fget_files+0x2a/0x420 [ 997.249463][ T9890] ? __fget_files+0x2a/0x420 [ 997.249482][ T9890] ? __fget_files+0x3a0/0x420 [ 997.249495][ T9890] __io_issue_sqe+0x180/0x4b0 [ 997.249512][ T9890] ? io_file_get_normal+0xe9/0x2d0 [ 997.249532][ T9890] io_issue_sqe+0x165/0x1060 [ 997.249553][ T9890] io_submit_sqes+0xbf3/0x2130 [ 997.249599][ T9890] __se_sys_io_uring_enter+0x2f7/0x2c30 [ 997.249637][ T9890] ? ksys_write+0x1e6/0x270 [ 997.249664][ T9890] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 997.249681][ T9890] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 997.249707][ T9890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 997.249733][ T9890] ? __fget_files+0x3a0/0x420 [ 997.249750][ T9890] ? fput+0xa0/0xd0 [ 997.249764][ T9890] ? ksys_write+0x242/0x270 [ 997.249788][ T9890] ? __pfx_ksys_write+0x10/0x10 [ 997.249806][ T9890] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 997.249819][ T9890] do_syscall_64+0xe2/0xf80 [ 997.249831][ T9890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.249842][ T9890] ? trace_irq_disable+0x37/0x100 [ 997.249853][ T9890] ? clear_bhb_loop+0x60/0xb0 [ 997.249866][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.249877][ T9890] RIP: 0033:0x7f9683b9aeb9 [ 997.249889][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.249900][ T9890] RSP: 002b:00007f9684b11028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 997.249914][ T9890] RAX: ffffffffffffffda RBX: 00007f9683e15fa0 RCX: 00007f9683b9aeb9 [ 997.249922][ T9890] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 997.249930][ T9890] RBP: 00007f9684b11090 R08: 0000000000000000 R09: 0000000000000000 [ 997.249937][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.249945][ T9890] R13: 00007f9683e16038 R14: 00007f9683e15fa0 R15: 00007f9683f3fa48 [ 997.249962][ T9890] [ 997.627876][T24271] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 997.671145][T24271] usb 5-1: device descriptor read/8, error -71 [ 998.000529][T24271] usb usb5-port1: unable to enumerate USB device [ 998.069805][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.149887][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.225227][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.277986][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.904836][ T5827] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 999.110416][ T5827] usb 3-1: Using ep0 maxpacket: 8 [ 999.110519][ T9943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3902'. [ 999.126537][ T5827] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 999.150337][ T5827] usb 3-1: config 0 has an invalid interface number: 150 but max is 64 [ 999.182142][ T5827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.221002][ T5827] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 999.238919][ T5827] usb 3-1: config 0 has no interface number 0 [ 999.270429][ T5827] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 999.317745][ T5827] usb 3-1: config 0 interface 150 has no altsetting 0 [ 999.343920][ T5827] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 999.380220][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.423627][ T9943] binder: 9942:9943 ioctl c0306201 200000001a80 returned -14 [ 999.423728][ T5827] usb 3-1: config 0 descriptor?? [ 999.827294][ T10] usb 1-1: USB disconnect, device number 102 [ 1000.060305][T24271] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1000.103103][ T9921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.113546][ T9921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.172385][ T5911] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1000.220059][ T9990] loop5: detected capacity change from 0 to 7 [ 1000.230306][T24271] usb 5-1: Using ep0 maxpacket: 32 [ 1000.235681][ T9990] loop5: [POWERTEC] p1 [ 1000.252297][T24271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.270644][ T9990] loop5: p1 start 419431808 is beyond EOD, truncated [ 1000.273576][T24271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.327664][T24271] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1000.341717][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 1000.369313][ T5911] usb 7-1: config 37 has an invalid interface number: 13 but max is 0 [ 1000.399636][ T5911] usb 7-1: config 37 has no interface number 0 [ 1000.413503][T24271] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1000.427034][ T5911] usb 7-1: config 37 interface 13 has no altsetting 0 [ 1000.437556][T24271] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1000.459086][ T5911] usb 7-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=e4.c4 [ 1000.482690][T24271] usb 5-1: Product: syz [ 1000.486908][T24271] usb 5-1: Manufacturer: syz [ 1000.495489][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.511228][T24271] usb 5-1: SerialNumber: syz [ 1000.519430][ T5911] usb 7-1: Product: syz [ 1000.536411][ T5911] usb 7-1: Manufacturer: syz [ 1000.549612][ T5911] usb 7-1: SerialNumber: syz [ 1000.560531][T24271] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input127 [ 1000.789984][ T5911] usb 7-1: bad CDC descriptors [ 1000.834822][ T5911] usb 7-1: USB disconnect, device number 126 [ 1000.841015][ T30] audit: type=1326 audit(1770570696.725:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.4.3905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0xffff0000 [ 1000.987711][T24271] usb 3-1: USB disconnect, device number 120 [ 1001.023215][ T9996] input: syz0 as /devices/virtual/input/input128 [ 1001.499855][T10078] loop4: detected capacity change from 0 to 7 [ 1001.540244][T10078] loop4: [POWERTEC] p1 p2 [ 1001.570418][T10078] loop4: p1 start 1764718181 is beyond EOD, truncated [ 1001.577341][T10078] loop4: p2 size 786432 extends beyond EOD, truncated [ 1001.671948][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3912'. [ 1001.717812][ T6731] udevd[6731]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1002.001538][T10099] netlink: 'syz.0.3916': attribute type 8 has an invalid length. [ 1002.033468][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1002.126357][T10099] bond0: entered promiscuous mode [ 1002.146054][T10099] bond_slave_0: entered promiscuous mode [ 1002.288873][T10099] bond_slave_1: entered promiscuous mode [ 1002.331635][T10099] gretap0: entered promiscuous mode [ 1002.392722][T10099] bond0: left promiscuous mode [ 1002.410090][T10099] bond_slave_0: left promiscuous mode [ 1002.429603][T10099] bond_slave_1: left promiscuous mode [ 1002.570236][T10099] gretap0: left promiscuous mode [ 1003.539719][T24271] usb 5-1: USB disconnect, device number 2 [ 1003.656615][T24271] appletouch 5-1:1.0: input: appletouch disconnected [ 1003.941309][T10162] loop4: detected capacity change from 0 to 7 [ 1004.014928][ T6731] loop4: [POWERTEC] p1 p2 [ 1004.030719][ T6731] loop4: p1 start 1764718181 is beyond EOD, truncated [ 1004.037557][ T6731] loop4: p2 size 786432 extends beyond EOD, truncated [ 1004.102013][T10162] loop4: [POWERTEC] p1 p2 [ 1004.123539][T10162] loop4: p1 start 1764718181 is beyond EOD, truncated [ 1004.151394][T10162] loop4: p2 size 786432 extends beyond EOD, truncated [ 1004.303072][ T5929] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1004.312752][ T6731] udevd[6731]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1004.406740][ T6731] udevd[6731]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1004.420353][ T30] audit: type=1326 audit(1770570700.305:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.446214][T24271] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 1004.461012][ T30] audit: type=1326 audit(1770570700.305:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.510548][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 1004.519749][ T5929] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1004.524691][ T30] audit: type=1326 audit(1770570700.405:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.569436][ T30] audit: type=1326 audit(1770570700.405:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.592744][T24271] usb 1-1: device descriptor read/64, error -71 [ 1004.632274][ T30] audit: type=1326 audit(1770570700.405:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.634247][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.714191][ T30] audit: type=1326 audit(1770570700.405:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.724969][ T5929] usb 7-1: config 0 has no interface number 0 [ 1004.778341][ T30] audit: type=1326 audit(1770570700.405:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.805442][ T30] audit: type=1326 audit(1770570700.415:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.831365][T24271] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 1004.836887][ T5929] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1004.855957][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.883826][ T5929] usb 7-1: Product: syz [ 1004.889733][ T5929] usb 7-1: Manufacturer: syz [ 1004.894866][ T5929] usb 7-1: SerialNumber: syz [ 1004.895257][ T30] audit: type=1326 audit(1770570700.415:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742239aeb9 code=0x7ffc0000 [ 1004.915140][ T5929] usb 7-1: config 0 descriptor?? [ 1004.930355][ T5918] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1004.943541][ T5929] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1004.951529][ T5929] uvcvideo 7-1:0.31: No valid video chain found. [ 1005.000294][T24271] usb 1-1: device descriptor read/64, error -71 [ 1005.087186][ T5918] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1005.096636][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.104912][ T5918] usb 3-1: Product: syz [ 1005.109192][ T5918] usb 3-1: Manufacturer: syz [ 1005.115201][T24271] usb usb1-port1: attempt power cycle [ 1005.120945][ T5918] usb 3-1: SerialNumber: syz [ 1005.128357][ T5918] usb 3-1: config 0 descriptor?? [ 1005.142107][ T5918] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1005.159165][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3924'. [ 1005.173099][ T5827] usb 7-1: USB disconnect, device number 127 [ 1005.210435][ T5929] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1005.372266][ T5929] usb 2-1: config index 0 descriptor too short (expected 16484, got 100) [ 1005.380961][ T5929] usb 2-1: config 0 has an invalid interface number: 75 but max is 0 [ 1005.389074][ T5929] usb 2-1: config 0 has no interface number 0 [ 1005.395392][ T5929] usb 2-1: config 0 interface 75 has no altsetting 0 [ 1005.413772][ T5929] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e3, bcdDevice=1a.b2 [ 1005.424115][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.432258][ T5929] usb 2-1: Product: syz [ 1005.436855][ T5929] usb 2-1: Manufacturer: syz [ 1005.443246][ T5929] usb 2-1: SerialNumber: syz [ 1005.451467][ T5929] usb 2-1: config 0 descriptor?? [ 1005.460320][T24271] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 1005.482036][T24271] usb 1-1: device descriptor read/8, error -71 [ 1005.685152][ T5929] usb 2-1: USB disconnect, device number 97 [ 1005.723845][T24271] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 1005.762457][T24271] usb 1-1: device descriptor read/8, error -71 [ 1005.869031][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1005.870901][T24271] usb usb1-port1: unable to enumerate USB device [ 1006.140516][ T5929] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1006.155415][T10195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.166992][T10195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.235104][T10262] kvm: pic: non byte write [ 1006.280319][ T5929] usb 2-1: device descriptor read/64, error -71 [ 1006.530406][ T5929] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1006.661546][ T5929] usb 2-1: device descriptor read/64, error -71 [ 1006.770582][ T5929] usb usb2-port1: attempt power cycle [ 1006.784683][ T5918] gspca_stk1135: reg_w 0x200 err -71 [ 1006.792108][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 1006.808016][ T5918] gspca_stk1135: Sensor write failed [ 1006.814404][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 1006.821647][ T5918] gspca_stk1135: Sensor write failed [ 1006.827171][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 1006.833724][ T5918] gspca_stk1135: Sensor read failed [ 1006.849323][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 1006.856649][ T5918] gspca_stk1135: Sensor read failed [ 1006.862426][ T5918] gspca_stk1135: Detected sensor type unknown (0x0) [ 1006.869069][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 1006.891491][ T5918] gspca_stk1135: Sensor read failed [ 1006.906973][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 1006.914823][ T5918] gspca_stk1135: Sensor read failed [ 1006.920473][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 1006.926844][ T5918] gspca_stk1135: Sensor write failed [ 1006.933177][ T5918] gspca_stk1135: serial bus timeout: status=0x00 [ 1006.939680][ T5918] gspca_stk1135: Sensor write failed [ 1006.960376][ T5918] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1006.979605][ T5918] usb 3-1: USB disconnect, device number 121 [ 1007.120212][ T5929] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1007.140995][ T5929] usb 2-1: device descriptor read/8, error -71 [ 1007.380398][ T5929] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1007.411625][ T5929] usb 2-1: device descriptor read/8, error -71 [ 1007.522939][ T5929] usb usb2-port1: unable to enumerate USB device [ 1007.600631][ T797] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1007.760321][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 1007.770082][ T797] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1007.781279][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.789373][ T797] usb 5-1: Product: syz [ 1007.794410][ T797] usb 5-1: Manufacturer: syz [ 1007.799045][ T797] usb 5-1: SerialNumber: syz [ 1007.807690][ T797] usb 5-1: config 0 descriptor?? [ 1007.822616][ T797] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1007.921067][ T5918] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1007.983576][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1008.090320][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 1008.104056][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1008.122956][ T5918] usb 3-1: config 14 has an invalid interface number: 115 but max is 0 [ 1008.140759][ T5918] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.160201][ T5918] usb 3-1: config 14 has no interface number 0 [ 1008.166433][ T5918] usb 3-1: config 14 interface 115 has no altsetting 0 [ 1008.187762][ T5918] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1008.210248][T24271] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1008.217903][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.226715][ T5918] usb 3-1: Product: syz [ 1008.240188][ T5918] usb 3-1: Manufacturer: 搐倸㟸঒룱ꖜꎁ໷⟧ஊ‗쨃꿹埆৆謸˜㙀얗쑠形羞喨ጢ૔堈誫蝓엸ꙓ֩솷╬쟠㍿콌翱鮮⥞プ螟 [ 1008.270231][ T5918] usb 3-1: SerialNumber: syz [ 1008.350774][T24271] usb 7-1: device descriptor read/64, error -71 [ 1008.590296][T24271] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1008.752737][T24271] usb 7-1: device descriptor read/64, error -71 [ 1008.874740][T24271] usb usb7-port1: attempt power cycle [ 1009.029114][ T797] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 1009.052102][ T797] usb 5-1: USB disconnect, device number 3 [ 1009.230372][T24271] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1009.261129][T24271] usb 7-1: device descriptor read/8, error -71 [ 1009.500345][T24271] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1009.522970][T24271] usb 7-1: device descriptor read/8, error -71 [ 1009.642883][T24271] usb usb7-port1: unable to enumerate USB device [ 1009.677077][T10347] trusted_key: encrypted_key: insufficient parameters specified [ 1010.814399][ T5918] usb 3-1: USB disconnect, device number 122 [ 1011.731395][ T797] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1011.870856][T10432] Cannot find del_set index 0 as target [ 1011.924059][ T797] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 1011.936938][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1011.949901][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 1011.964479][ T797] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 1011.973935][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.988066][ T797] usb 3-1: config 0 descriptor?? [ 1012.025590][T10414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1012.046754][T10440] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1012.230969][T10450] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3967'. [ 1012.369157][ T797] usbhid 3-1:0.0: can't add hid device: -71 [ 1012.382943][ T797] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1012.442719][ T797] usb 3-1: USB disconnect, device number 123 [ 1012.635189][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3973'. [ 1013.180411][ T797] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1013.708027][ T797] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1013.716855][ T797] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1013.734161][ T797] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1013.912702][ T797] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1013.923748][ T797] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1013.937689][ T797] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1013.946929][ T797] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1013.955151][ T797] usb 1-1: Product: syz [ 1013.959334][ T797] usb 1-1: Manufacturer: syz [ 1014.005179][ T797] cdc_wdm 1-1:1.0: skipping garbage [ 1014.023037][ T797] cdc_wdm 1-1:1.0: skipping garbage [ 1014.247699][ T797] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1014.254427][ T797] cdc_wdm 1-1:1.0: Unknown control protocol [ 1015.790358][ T10] usb 1-1: USB disconnect, device number 107 [ 1016.142857][T24626] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1016.330233][T24626] usb 2-1: Using ep0 maxpacket: 32 [ 1016.337398][T24626] usb 2-1: config 2 has an invalid interface number: 194 but max is 0 [ 1016.350203][T24626] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.388317][T24626] usb 2-1: config 2 has no interface number 0 [ 1016.400555][T24626] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1016.454992][T24626] usb 2-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1016.482982][T24626] usb 2-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1016.498275][T24626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.515145][T10587] bond_slave_0: entered promiscuous mode [ 1016.520963][T10587] bond_slave_1: entered promiscuous mode [ 1016.538886][T10587] macsec1: entered allmulticast mode [ 1016.550355][T10587] bond0: entered allmulticast mode [ 1016.576524][T10587] bond_slave_0: entered allmulticast mode [ 1016.583775][T10587] bond_slave_1: entered allmulticast mode [ 1016.621346][T10587] bond0: left allmulticast mode [ 1016.626448][T10587] bond_slave_0: left allmulticast mode [ 1016.635666][T10587] bond_slave_1: left allmulticast mode [ 1016.655155][T10587] bond_slave_0: left promiscuous mode [ 1016.660729][T10587] bond_slave_1: left promiscuous mode [ 1016.704291][ T797] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1016.739263][T24626] usb 2-1: string descriptor 0 read error: -71 [ 1016.776720][T24626] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1016.895306][ T797] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1016.935410][ T797] usb 1-1: config 0 has no interface number 0 [ 1016.952034][ T797] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1016.963515][ T797] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1016.979369][ T797] usb 1-1: config 0 interface 255 has no altsetting 0 [ 1016.994453][ T797] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1017.023503][T24626] usb 2-1: USB disconnect, device number 102 [ 1017.050998][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.071571][ T797] usb 1-1: config 0 descriptor?? [ 1017.092328][ T797] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 1017.318733][T10642] IPv6: addrconf: prefix option has invalid lifetime [ 1017.365451][ T5827] usb 1-1: USB disconnect, device number 108 [ 1017.383000][ T5929] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1017.644428][ T5929] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1017.700338][T24626] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1017.844676][ T5929] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1017.860266][ T5929] usb 7-1: can't read configurations, error -61 [ 1017.860528][T10661] [ 1017.868989][T10661] ===================================================== [ 1017.875911][T10661] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1017.883356][T10661] syzkaller #0 Tainted: G L [ 1017.889346][T10661] ----------------------------------------------------- [ 1017.896272][T10661] syz.2.3991/10661 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1017.904000][T10661] ffffffff8e20c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1017.912705][T10661] [ 1017.912705][T10661] and this task is already holding: [ 1017.920088][T10661] ffff88805498f520 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1017.928829][T10661] which would create a new lock dependency: [ 1017.934716][T10661] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1017.942302][T10661] [ 1017.942302][T10661] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1017.951835][T10661] (kbd_event_lock){..-.}-{3:3} [ 1017.951858][T10661] [ 1017.951858][T10661] ... which became SOFTIRQ-irq-safe at: [ 1017.964485][T10661] lock_acquire+0x106/0x330 [ 1017.969078][T10661] _raw_spin_lock+0x2e/0x40 [ 1017.973676][T10661] kbd_event+0xd6/0x40d0 [ 1017.978114][T10661] input_handle_events_default+0xd4/0x1a0 [ 1017.983928][T10661] input_pass_values+0x288/0x890 [ 1017.988989][T10661] input_event_dispose+0x3e5/0x6b0 [ 1017.994218][T10661] input_inject_event+0x1dd/0x340 [ 1017.999330][T10661] kd_sound_helper+0x19f/0x210 [ 1018.004211][T10661] input_handler_for_each_handle+0x101/0x1c0 [ 1018.010276][T10661] call_timer_fn+0x192/0x5a0 [ 1018.014977][T10661] __run_timer_base+0x652/0x8b0 [ 1018.019939][T10661] run_timer_softirq+0xb7/0x170 [ 1018.024883][T10661] handle_softirqs+0x22a/0x7c0 [ 1018.029742][T10661] __irq_exit_rcu+0x5f/0x150 [ 1018.034529][T10661] irq_exit_rcu+0x9/0x30 [ 1018.038862][T10661] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1018.044574][T10661] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1018.050728][T10661] preempt_schedule_irq+0x48/0xa0 [ 1018.055833][T10661] irqentry_exit+0x597/0x620 [ 1018.060518][T10661] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1018.066079][T10661] lockdep_unregister_key+0x2d5/0x350 [ 1018.071549][T10661] __qdisc_destroy+0x166/0x3f0 [ 1018.076415][T10661] dev_shutdown+0x93/0x440 [ 1018.080938][T10661] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1018.087454][T10661] default_device_exit_batch+0x981/0xa00 [ 1018.093364][T10661] ops_undo_list+0x52b/0x940 [ 1018.098047][T10661] cleanup_net+0x4df/0x7b0 [ 1018.102559][T10661] process_scheduled_works+0xaec/0x17a0 [ 1018.108189][T10661] worker_thread+0xda6/0x1360 [ 1018.112955][T10661] kthread+0x726/0x8b0 [ 1018.117108][T10661] ret_from_fork+0x51b/0xa40 [ 1018.121862][T10661] ret_from_fork_asm+0x1a/0x30 [ 1018.126726][T10661] [ 1018.126726][T10661] to a SOFTIRQ-irq-unsafe lock: [ 1018.133731][T10661] (tasklist_lock){.+.+}-{3:3} [ 1018.133754][T10661] [ 1018.133754][T10661] ... which became SOFTIRQ-irq-unsafe at: [ 1018.146480][T10661] ... [ 1018.146488][T10661] lock_acquire+0x106/0x330 [ 1018.153652][T10661] _raw_read_lock+0x36/0x50 [ 1018.158263][T10661] __do_wait+0xde/0x740 [ 1018.162501][T10661] do_wait+0x1e7/0x4f0 [ 1018.166736][T10661] kernel_wait+0xd6/0x1c0 [ 1018.171233][T10661] call_usermodehelper_exec_work+0xbe/0x230 [ 1018.177207][T10661] process_scheduled_works+0xaec/0x17a0 [ 1018.182870][T10661] worker_thread+0xda6/0x1360 [ 1018.187625][T10661] kthread+0x726/0x8b0 [ 1018.191771][T10661] ret_from_fork+0x51b/0xa40 [ 1018.196537][T10661] ret_from_fork_asm+0x1a/0x30 [ 1018.201385][T10661] [ 1018.201385][T10661] other info that might help us debug this: [ 1018.201385][T10661] [ 1018.211627][T10661] Chain exists of: [ 1018.211627][T10661] kbd_event_lock --> &f_owner->lock --> tasklist_lock [ 1018.211627][T10661] [ 1018.224383][T10661] Possible interrupt unsafe locking scenario: [ 1018.224383][T10661] [ 1018.232702][T10661] CPU0 CPU1 [ 1018.238239][T10661] ---- ---- [ 1018.243613][T10661] lock(tasklist_lock); [ 1018.247863][T10661] local_irq_disable(); [ 1018.254630][T10661] lock(kbd_event_lock); [ 1018.261505][T10661] lock(&f_owner->lock); [ 1018.268455][T10661] [ 1018.272181][T10661] lock(kbd_event_lock); [ 1018.276692][T10661] [ 1018.276692][T10661] *** DEADLOCK *** [ 1018.276692][T10661] [ 1018.284827][T10661] 2 locks held by syz.2.3991/10661: [ 1018.290302][T10661] #0: ffff88802c7229e0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1018.298854][T10661] #1: ffff88805498f520 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1018.307989][T10661] [ 1018.307989][T10661] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1018.318385][T10661] -> (kbd_event_lock){..-.}-{3:3} { [ 1018.323862][T10661] IN-SOFTIRQ-W at: [ 1018.328114][T10661] lock_acquire+0x106/0x330 [ 1018.334787][T10661] _raw_spin_lock+0x2e/0x40 [ 1018.341464][T10661] kbd_event+0xd6/0x40d0 [ 1018.347894][T10661] input_handle_events_default+0xd4/0x1a0 [ 1018.355796][T10661] input_pass_values+0x288/0x890 [ 1018.362914][T10661] input_event_dispose+0x3e5/0x6b0 [ 1018.370199][T10661] input_inject_event+0x1dd/0x340 [ 1018.377425][T10661] kd_sound_helper+0x19f/0x210 [ 1018.384367][T10661] input_handler_for_each_handle+0x101/0x1c0 [ 1018.392627][T10661] call_timer_fn+0x192/0x5a0 [ 1018.399386][T10661] __run_timer_base+0x652/0x8b0 [ 1018.406425][T10661] run_timer_softirq+0xb7/0x170 [ 1018.413536][T10661] handle_softirqs+0x22a/0x7c0 [ 1018.420472][T10661] __irq_exit_rcu+0x5f/0x150 [ 1018.427315][T10661] irq_exit_rcu+0x9/0x30 [ 1018.433816][T10661] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1018.441615][T10661] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1018.449760][T10661] preempt_schedule_irq+0x48/0xa0 [ 1018.456947][T10661] irqentry_exit+0x597/0x620 [ 1018.463700][T10661] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1018.471321][T10661] lockdep_unregister_key+0x2d5/0x350 [ 1018.478872][T10661] __qdisc_destroy+0x166/0x3f0 [ 1018.485798][T10661] dev_shutdown+0x93/0x440 [ 1018.492426][T10661] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1018.501004][T10661] default_device_exit_batch+0x981/0xa00 [ 1018.508899][T10661] ops_undo_list+0x52b/0x940 [ 1018.515662][T10661] cleanup_net+0x4df/0x7b0 [ 1018.522257][T10661] process_scheduled_works+0xaec/0x17a0 [ 1018.529986][T10661] worker_thread+0xda6/0x1360 [ 1018.536873][T10661] kthread+0x726/0x8b0 [ 1018.543114][T10661] ret_from_fork+0x51b/0xa40 [ 1018.549866][T10661] ret_from_fork_asm+0x1a/0x30 [ 1018.556797][T10661] INITIAL USE at: [ 1018.560945][T10661] lock_acquire+0x106/0x330 [ 1018.567620][T10661] _raw_spin_lock_irqsave+0x40/0x60 [ 1018.574899][T10661] vt_reset_unicode+0x2b/0x1a0 [ 1018.581756][T10661] reset_vc+0x68/0x1b0 [ 1018.587894][T10661] vc_init+0x70/0x4a0 [ 1018.593948][T10661] con_init+0x377/0x6a0 [ 1018.600178][T10661] console_init+0xfc/0x3e0 [ 1018.606755][T10661] start_kernel+0x226/0x3d0 [ 1018.613337][T10661] x86_64_start_reservations+0x24/0x30 [ 1018.620888][T10661] x86_64_start_kernel+0x143/0x1c0 [ 1018.628090][T10661] common_startup_64+0x13e/0x147 [ 1018.635102][T10661] } [ 1018.637851][T10661] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1018.646065][T10661] -> (&tty->flow.lock){....}-{3:3} { [ 1018.651529][T10661] INITIAL USE at: [ 1018.655597][T10661] lock_acquire+0x106/0x330 [ 1018.662004][T10661] _raw_spin_lock_irqsave+0x40/0x60 [ 1018.669116][T10661] start_tty+0x20/0x70 [ 1018.675082][T10661] n_tty_set_termios+0xa7c/0x10c0 [ 1018.682030][T10661] tty_set_termios+0xdb3/0x1800 [ 1018.688786][T10661] set_termios+0x566/0x710 [ 1018.695117][T10661] tty_mode_ioctl+0x4a6/0x7d0 [ 1018.701779][T10661] tty_ioctl+0x9c5/0xde0 [ 1018.707918][T10661] __se_sys_ioctl+0xfc/0x170 [ 1018.714427][T10661] do_syscall_64+0xe2/0xf80 [ 1018.720837][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.728652][T10661] } [ 1018.731313][T10661] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1018.740154][T10661] ... acquired at: [ 1018.744117][T10661] _raw_spin_lock_irqsave+0x40/0x60 [ 1018.749515][T10661] stop_tty+0x2f/0x150 [ 1018.753744][T10661] kbd_event+0x2ec1/0x40d0 [ 1018.758337][T10661] input_handle_events_default+0xd4/0x1a0 [ 1018.764218][T10661] input_pass_values+0x288/0x890 [ 1018.769325][T10661] input_event_dispose+0x330/0x6b0 [ 1018.774600][T10661] input_inject_event+0x1dd/0x340 [ 1018.779879][T10661] evdev_write+0x325/0x4c0 [ 1018.784462][T10661] vfs_write+0x29a/0xb90 [ 1018.788880][T10661] ksys_write+0x150/0x270 [ 1018.793373][T10661] do_syscall_64+0xe2/0xf80 [ 1018.798051][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.804104][T10661] [ 1018.806416][T10661] -> (&new->fa_lock){....}-{3:3} { [ 1018.811622][T10661] INITIAL USE at: [ 1018.815594][T10661] lock_acquire+0x106/0x330 [ 1018.821827][T10661] _raw_write_lock_irq+0x3d/0x50 [ 1018.828503][T10661] fasync_remove_entry+0xf1/0x1c0 [ 1018.835269][T10661] sock_fasync+0x85/0xf0 [ 1018.841261][T10661] __fput+0x8a5/0xa70 [ 1018.847000][T10661] task_work_run+0x1d9/0x270 [ 1018.853414][T10661] do_exit+0x69b/0x2310 [ 1018.859646][T10661] do_group_exit+0x21b/0x2d0 [ 1018.865969][T10661] __x64_sys_exit_group+0x3f/0x40 [ 1018.872735][T10661] __pfx_syscall_get_nr+0x0/0x10 [ 1018.879415][T10661] do_syscall_64+0xe2/0xf80 [ 1018.885653][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.893299][T10661] INITIAL READ USE at: [ 1018.897726][T10661] lock_acquire+0x106/0x330 [ 1018.904415][T10661] _raw_read_lock_irqsave+0x48/0x60 [ 1018.911796][T10661] kill_fasync+0x199/0x4d0 [ 1018.918404][T10661] sock_wake_async+0x137/0x160 [ 1018.925435][T10661] sock_def_error_report+0x332/0x390 [ 1018.932892][T10661] sk_error_report+0x48/0x270 [ 1018.939780][T10661] unix_dgram_connect+0x96b/0xc20 [ 1018.947061][T10661] __sys_connect+0x312/0x450 [ 1018.954005][T10661] __x64_sys_connect+0x7a/0x90 [ 1018.960942][T10661] do_syscall_64+0xe2/0xf80 [ 1018.967720][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.975898][T10661] } [ 1018.978480][T10661] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1018.987336][T10661] ... acquired at: [ 1018.991213][T10661] _raw_read_lock_irqsave+0x48/0x60 [ 1018.996584][T10661] kill_fasync+0x199/0x4d0 [ 1019.001181][T10661] __start_tty+0x18c/0x220 [ 1019.005802][T10661] start_tty+0x2b/0x70 [ 1019.010055][T10661] n_tty_set_termios+0xa7c/0x10c0 [ 1019.015271][T10661] tty_set_termios+0xdb3/0x1800 [ 1019.020298][T10661] set_termios+0x566/0x710 [ 1019.024912][T10661] tty_mode_ioctl+0x4a6/0x7d0 [ 1019.029753][T10661] tty_ioctl+0x9c5/0xde0 [ 1019.034262][T10661] __se_sys_ioctl+0xfc/0x170 [ 1019.039025][T10661] do_syscall_64+0xe2/0xf80 [ 1019.043700][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.049754][T10661] [ 1019.052083][T10661] -> (&f_owner->lock){....}-{3:3} { [ 1019.057308][T10661] INITIAL USE at: [ 1019.061191][T10661] lock_acquire+0x106/0x330 [ 1019.067250][T10661] _raw_write_lock_irq+0x3d/0x50 [ 1019.073738][T10661] __f_setown+0x67/0x370 [ 1019.079534][T10661] generic_setlease+0xba2/0xed0 [ 1019.085948][T10661] do_fcntl_add_lease+0x35e/0x470 [ 1019.092609][T10661] fcntl_setlease+0x123/0x180 [ 1019.098842][T10661] do_fcntl+0x8b3/0x1a20 [ 1019.104725][T10661] __se_sys_fcntl+0xc8/0x150 [ 1019.110872][T10661] do_syscall_64+0xe2/0xf80 [ 1019.116928][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.124473][T10661] INITIAL READ USE at: [ 1019.128790][T10661] lock_acquire+0x106/0x330 [ 1019.135277][T10661] _raw_read_lock_irqsave+0x48/0x60 [ 1019.142469][T10661] send_sigio+0x38/0x370 [ 1019.148698][T10661] dnotify_handle_event+0x169/0x440 [ 1019.155895][T10661] fsnotify+0x1831/0x1ae0 [ 1019.162231][T10661] fsnotify_mkdir+0x121/0x180 [ 1019.168901][T10661] vfs_mkdir+0x78f/0x870 [ 1019.175231][T10661] do_mkdirat+0x27d/0x4b0 [ 1019.181578][T10661] __x64_sys_mkdirat+0x87/0xa0 [ 1019.188354][T10661] do_syscall_64+0xe2/0xf80 [ 1019.194891][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.202786][T10661] } [ 1019.205277][T10661] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1019.214116][T10661] ... acquired at: [ 1019.217903][T10661] _raw_read_lock_irqsave+0x48/0x60 [ 1019.223439][T10661] send_sigio+0x38/0x370 [ 1019.227937][T10661] kill_fasync+0x24d/0x4d0 [ 1019.232515][T10661] lease_break_callback+0x26/0x30 [ 1019.237700][T10661] __break_lease+0x741/0x1b80 [ 1019.242548][T10661] try_break_deleg+0xb1/0x120 [ 1019.247384][T10661] vfs_unlink+0x31f/0x650 [ 1019.251870][T10661] do_unlinkat+0x2e3/0x590 [ 1019.256546][T10661] __x64_sys_unlink+0x47/0x50 [ 1019.261380][T10661] do_syscall_64+0xe2/0xf80 [ 1019.266042][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.272091][T10661] [ 1019.274401][T10661] [ 1019.274401][T10661] the dependencies between the lock to be acquired [ 1019.274408][T10661] and SOFTIRQ-irq-unsafe lock: [ 1019.287890][T10661] -> (tasklist_lock){.+.+}-{3:3} { [ 1019.293005][T10661] HARDIRQ-ON-R at: [ 1019.296972][T10661] lock_acquire+0x106/0x330 [ 1019.303115][T10661] _raw_read_lock+0x36/0x50 [ 1019.309251][T10661] __do_wait+0xde/0x740 [ 1019.315046][T10661] do_wait+0x1e7/0x4f0 [ 1019.320756][T10661] kernel_wait+0xd6/0x1c0 [ 1019.326728][T10661] call_usermodehelper_exec_work+0xbe/0x230 [ 1019.334264][T10661] process_scheduled_works+0xaec/0x17a0 [ 1019.341452][T10661] worker_thread+0xda6/0x1360 [ 1019.347788][T10661] kthread+0x726/0x8b0 [ 1019.353492][T10661] ret_from_fork+0x51b/0xa40 [ 1019.359714][T10661] ret_from_fork_asm+0x1a/0x30 [ 1019.366120][T10661] SOFTIRQ-ON-R at: [ 1019.370086][T10661] lock_acquire+0x106/0x330 [ 1019.376254][T10661] _raw_read_lock+0x36/0x50 [ 1019.382393][T10661] __do_wait+0xde/0x740 [ 1019.388193][T10661] do_wait+0x1e7/0x4f0 [ 1019.393899][T10661] kernel_wait+0xd6/0x1c0 [ 1019.399868][T10661] call_usermodehelper_exec_work+0xbe/0x230 [ 1019.407421][T10661] process_scheduled_works+0xaec/0x17a0 [ 1019.414609][T10661] worker_thread+0xda6/0x1360 [ 1019.420933][T10661] kthread+0x726/0x8b0 [ 1019.426666][T10661] ret_from_fork+0x51b/0xa40 [ 1019.432910][T10661] ret_from_fork_asm+0x1a/0x30 [ 1019.439349][T10661] INITIAL USE at: [ 1019.443511][T10661] lock_acquire+0x106/0x330 [ 1019.449580][T10661] _raw_write_lock_irq+0x3d/0x50 [ 1019.456085][T10661] copy_process+0x2199/0x3980 [ 1019.462314][T10661] kernel_clone+0x248/0x870 [ 1019.468471][T10661] user_mode_thread+0x110/0x180 [ 1019.474893][T10661] rest_init+0x23/0x300 [ 1019.480621][T10661] start_kernel+0x380/0x3d0 [ 1019.486681][T10661] x86_64_start_reservations+0x24/0x30 [ 1019.493716][T10661] x86_64_start_kernel+0x143/0x1c0 [ 1019.500399][T10661] common_startup_64+0x13e/0x147 [ 1019.506901][T10661] INITIAL READ USE at: [ 1019.511233][T10661] lock_acquire+0x106/0x330 [ 1019.517747][T10661] _raw_read_lock+0x36/0x50 [ 1019.524255][T10661] __do_wait+0xde/0x740 [ 1019.530408][T10661] do_wait+0x1e7/0x4f0 [ 1019.536905][T10661] kernel_wait+0xd6/0x1c0 [ 1019.543228][T10661] call_usermodehelper_exec_work+0xbe/0x230 [ 1019.551135][T10661] process_scheduled_works+0xaec/0x17a0 [ 1019.558697][T10661] worker_thread+0xda6/0x1360 [ 1019.565406][T10661] kthread+0x726/0x8b0 [ 1019.571478][T10661] ret_from_fork+0x51b/0xa40 [ 1019.578057][T10661] ret_from_fork_asm+0x1a/0x30 [ 1019.584812][T10661] } [ 1019.587313][T10661] ... key at: [] tasklist_lock+0x18/0x40 [ 1019.595165][T10661] ... acquired at: [ 1019.598971][T10661] _raw_read_lock+0x36/0x50 [ 1019.603654][T10661] send_sigurg+0x12b/0x420 [ 1019.608238][T10661] sk_send_sigurg+0x6c/0x2e0 [ 1019.613004][T10661] queue_oob+0x42c/0x4f0 [ 1019.617429][T10661] unix_stream_sendmsg+0xcb1/0xe80 [ 1019.622700][T10661] ____sys_sendmsg+0xa68/0xad0 [ 1019.627640][T10661] ___sys_sendmsg+0x2a5/0x360 [ 1019.632749][T10661] __sys_sendmmsg+0x27c/0x4e0 [ 1019.637593][T10661] __x64_sys_sendmmsg+0xa0/0xc0 [ 1019.642606][T10661] do_syscall_64+0xe2/0xf80 [ 1019.647271][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.653332][T10661] [ 1019.655644][T10661] [ 1019.655644][T10661] stack backtrace: [ 1019.661527][T10661] CPU: 1 UID: 0 PID: 10661 Comm: syz.2.3991 Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.661545][T10661] Tainted: [L]=SOFTLOCKUP [ 1019.661550][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1019.661557][T10661] Call Trace: [ 1019.661565][T10661] [ 1019.661570][T10661] dump_stack_lvl+0xe8/0x150 [ 1019.661586][T10661] __lock_acquire+0x2a94/0x2cf0 [ 1019.661607][T10661] ? send_sigurg+0x12b/0x420 [ 1019.661622][T10661] lock_acquire+0x106/0x330 [ 1019.661636][T10661] ? send_sigurg+0x12b/0x420 [ 1019.661652][T10661] _raw_read_lock+0x36/0x50 [ 1019.661663][T10661] ? send_sigurg+0x12b/0x420 [ 1019.661676][T10661] send_sigurg+0x12b/0x420 [ 1019.661690][T10661] sk_send_sigurg+0x6c/0x2e0 [ 1019.661701][T10661] queue_oob+0x42c/0x4f0 [ 1019.661714][T10661] ? __pfx_queue_oob+0x10/0x10 [ 1019.661726][T10661] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1019.661741][T10661] unix_stream_sendmsg+0xcb1/0xe80 [ 1019.661751][T10661] ? sched_clock+0x3f/0x60 [ 1019.661766][T10661] ? finish_task_switch+0x161/0x920 [ 1019.661782][T10661] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.661796][T10661] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1019.661808][T10661] ? finish_task_switch+0x23c/0x920 [ 1019.661821][T10661] ? aa_sock_msg_perm+0xda/0x1b0 [ 1019.661835][T10661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1019.661846][T10661] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1019.661856][T10661] ____sys_sendmsg+0xa68/0xad0 [ 1019.661871][T10661] ? __might_fault+0xaf/0x130 [ 1019.661888][T10661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1019.661903][T10661] ? import_iovec+0x73/0xa0 [ 1019.661920][T10661] ___sys_sendmsg+0x2a5/0x360 [ 1019.661934][T10661] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.661948][T10661] ? __pfx____sys_sendmsg+0x10/0x10 [ 1019.661963][T10661] ? preempt_schedule_common+0x82/0xd0 [ 1019.661974][T10661] ? preempt_schedule_thunk+0x16/0x30 [ 1019.661995][T10661] ? __fget_files+0x2a/0x420 [ 1019.662007][T10661] ? __fget_files+0x3a0/0x420 [ 1019.662021][T10661] __sys_sendmmsg+0x27c/0x4e0 [ 1019.662036][T10661] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1019.662049][T10661] ? do_futex+0x395/0x420 [ 1019.662066][T10661] ? __pfx_do_fcntl+0x10/0x10 [ 1019.662083][T10661] ? rcu_is_watching+0x15/0xb0 [ 1019.662096][T10661] __x64_sys_sendmmsg+0xa0/0xc0 [ 1019.662111][T10661] do_syscall_64+0xe2/0xf80 [ 1019.662122][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.662133][T10661] ? trace_irq_disable+0x37/0x100 [ 1019.662144][T10661] ? clear_bhb_loop+0x60/0xb0 [ 1019.662156][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.662167][T10661] RIP: 0033:0x7f857779aeb9 [ 1019.662180][T10661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.662190][T10661] RSP: 002b:00007f857863b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1019.662205][T10661] RAX: ffffffffffffffda RBX: 00007f8577a15fa0 RCX: 00007f857779aeb9 [ 1019.662214][T10661] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000006 [ 1019.662221][T10661] RBP: 00007f8577808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1019.662229][T10661] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 1019.662236][T10661] R13: 00007f8577a16038 R14: 00007f8577a15fa0 R15: 00007f8577b3fa48 [ 1019.662248][T10661] [ 1020.319610][T24626] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.344210][T24626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1020.379048][ T5929] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1020.387450][T24626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1020.398158][T24626] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1020.440456][ T797] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1020.453407][T24626] usb 2-1: string descriptor 0 read error: -71 [ 1020.461554][T24626] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1020.472396][T24626] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1020.483541][T24626] usb 2-1: config 0 descriptor?? [ 1020.489024][T24626] usb 2-1: can't set config #0, error -71 [ 1020.499277][T24626] usb 2-1: USB disconnect, device number 103 [ 1020.790252][ T797] usb 5-1: device not accepting address 4, error -71