last executing test programs: 8m26.324019421s ago: executing program 1 (id=508): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000300)=""/56}, 0x20) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000008280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x80, 0x2, 0x3f7}) io_uring_enter(r2, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0xc008744c, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) 8m25.232518601s ago: executing program 1 (id=515): syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = io_uring_setup(0x178e, &(0x7f0000000440)={0x0, 0x52be, 0x100, 0xfffffffe, 0x14e}) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) openat$rtc(0xffffffffffffff9c, 0x0, 0x400000, 0x0) (rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x20, 0x4, 0x0, 0xee2, 0x8, 0x3}, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb01"], 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) (async) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) close_range(r0, 0xffffffffffffffff, 0x0) 8m24.03113884s ago: executing program 1 (id=517): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r1, &(0x7f0000000580)="2af49d0ad156", 0x6) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0xea) 8m23.684383378s ago: executing program 1 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x100}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000380)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff}, {0x10, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010002, &(0x7f0000000700)={0x77359400}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8m23.261884674s ago: executing program 1 (id=522): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3486dd6075e71000103a00fe800000000000000000000000000000ff0200000000000000800000000000018c009078000500060000000000000005"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) r1 = getpid() ioprio_get$pid(0x2, r1) pipe2(&(0x7f0000000f40), 0x80880) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r2, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x10201, 0x0, 0xeeee8000, 0x1000, &(0x7f0000cc4000/0x1000)=nil}) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'lo\x00', @remote}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000580)="b1", 0x1, 0x4000, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r5}) 8m22.882147849s ago: executing program 1 (id=524): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r2, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 8m21.923379738s ago: executing program 32 (id=524): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r2, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 17.005950548s ago: executing program 0 (id=2544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x220402, 0x0) r2 = io_uring_setup(0x185d, &(0x7f0000000500)={0x0, 0xc8a1, 0xc000, 0x1, 0x324, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x900) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x7, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x1010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x4000010, r4, 0x6ceda000) futex(&(0x7f000000cffc), 0x80000000000b, 0x3, 0x0, &(0x7f0000000080), 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x0, 0x3, 0xd59f80, 0x5, 0x2800, 0x10, 0x3, 0x2, 0x2800, 0xf20, 0xffffffff, 0x0, 0x1, 0x10, {0x401}, 0xce, 0x9}}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffdffff}]}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="4021020000000200815692dcd53ac7ef8a15e4a347df528904fa0f7fc6a883f4e2f5ad5ee8afcb616eea1d7034eb136aacb37a5e8b6e964372d61131bb809706ba3dd0b491d616aa0fc4a96ea865c7fe676a6a673866b765949b0464b0d18dae4cdc5aabdc5ccc"], &(0x7f0000000340)=ANY=[]}, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="b400b170d0f78dda6dbf2ffdbc315f3a0fefd16bc5697e4ea262c7961d9821a86457676b74b6", 0x26}], 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) shutdown(r0, 0x1) 14.831247207s ago: executing program 0 (id=2553): bpf$PROG_LOAD(0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "3cb4af5bcb9e66f7", "0a196dc09a0603c3c7e8fcab94b3e9b5a5b24975109c5009d31f58182e5c101d", "1c524045", "d260c294cf385bdb"}, 0x38) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000580)) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) rmdir(0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4180) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40d00, 0x0) 8.739815159s ago: executing program 5 (id=2570): io_setup(0x239f, &(0x7f0000000380)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x0, 0xff}, 'port1\x00', 0x0, 0xc1860, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) eventfd2(0x2, 0x80800) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000080)={0x40, 0x10, 0xa9, {0xa9, 0xd, "8a44b94dafd804aed5d7f3cc0ff3969db826b04d3942c7fab77d899a6609b58101c69a6e6dfa2d547ef680eed30c1cd694179707eccb66cb9abdc88dbe0ea714513adc155894aa9b2a6f06b3e36a5afba80b56c50bbd854efb46fef6bfce3da5f4c280cdbe6b53029d6b99e4b87dd791473f3e3b2f5abdd5488573c573e51da82aba35d4ed942e68a22c34b22a50dfb73315f4f3dfea5ef946e3349091ef440c442325d2f00f6f"}}, &(0x7f0000000500)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "a96dc3325e91743bbee474b2aaeb92d20a29c6cc196f8943d2831d47df409bdb5ee88741ed50eded197ea9b5c6fdff1b780906cd1f9ee97cbad707644b9bf0e3c5c067814487a80863ab2096d657b0006d5b30d9c1cc49b4dee97bd13f3017beda22d6a6883ccf117248dd7b476f30e09b23e64847d99f3ff36e4bc39b9f9e45e464e11e3e00415c4011acd31b2c2e6537a68a6fbb4f337f13507311510634ee095a7e7e5a97ed74e09a6fb7431cedf26414dcad9b3dcc8770a12b7abedf47f9"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x6, 0xc0, "ebe97d9b644bc51177d538e90ebf3762a6b450a01f1c54b6ff6ab32be3cfba34f2c3b7e7663431ed4848392fb35de76a11b46d9474c1b3d7bc854f9fe71c9f4759499de4a8e3c9c7403640b368ba551a4d9316ea76ebffff2d9c4e6de91eb65573703b17d8158a0a292c061f35b656f355053734de0274a01df2d29646b3ab2f80edad8fd250e7e2dd1c76fc346a37566b70f04df7e93926ea37f6ac36311e149c07fb6ef13659f5b155a21dc334bbe07e78b213eb01265d49bff861b645c154"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9a}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "d8cb"}, &(0x7f0000000800)={0x20, 0x82, 0x3, 'Z@V'}, &(0x7f0000000840)={0x20, 0x83, 0x1, "b9"}, &(0x7f0000000880)={0x20, 0x84, 0x1, '\n'}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "e59c4d"}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @meta={0x4331434d, 0x1dad0a13, 0x4fdb, 0xec20, 0x35334504}}) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 6.890195s ago: executing program 2 (id=2574): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1a9100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6(0xa, 0xa, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32, @ANYRES32, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000380)='./file0\x00', 0x2000, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {}, [{0x2, 0x5}, {0x2, 0x1}, {0x2, 0x4, r2}], {}, [{0x8, 0x2, 0xee01}], {0x10, 0x2}, {0x20, 0x6}}, 0x44, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000200)) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000500)=0x42268597) 6.765228561s ago: executing program 4 (id=2575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4840) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000001040), &(0x7f0000001080)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000001140)={0x11, 0x1b, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$FIONCLEX(r0, 0x5450) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002bc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x709d28, 0x2, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff1}, {0xc, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6.330461851s ago: executing program 3 (id=2576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f00000009c0)={&(0x7f00000000c0)=@rc={0x1f, @none, 0x61}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)="d5c889746ce7500c2562e48bc6884ecebf1d728f1137bde03bd7a7d7401917b347a265978fb783a89fc1d77635584980862c441452916c429def786e69b71fcef600de822a3e3cd48981b5976693cd4824fdc86ecaba469f39e1c984f071cee94587fecc5dfa6ae64e8445b44b4cda98865e9704bc30cf576ffd55681781c90252", 0x81}, {&(0x7f0000000400)="06bb479cdcf1e0104590d85a9149ff102b63b302ebdc987af51783d6dc72f685fff14aa05072e313a28ca287bafc86365a4ecba746c9ea0dd8bc747f404429c33d10847665bb87546753512d7c546b12cabea1cfe876f3a9e26812da2f3e878d8acecdd3c4350615da8cd5a188010ab7c5c072e10695356f8a3d8a4d68b14e01eac31f9e86734cda82305f7b5b66303788a93e2a56c27c25730c7a3d5488d85e73437e4ae0836d48664a8b728590726774165985e02935c2abe60af6b296b72bc9998ac3", 0xc4}, {&(0x7f0000000500)="a67bdfd3e8868120d8843aff04e21bef848dd5c790f5d2696c65c37a4f298ae09a2c489d2986dbc4342d4fd094edd10517725af1e37b5dbed6d03ed9949cd8aff425ec", 0x43}, {&(0x7f0000000580)="16208b85ee986a882b055b87a3f1a2b861444bcf7a5a4e3bbdca0994e17d110d9b8838eb465c184dd9b7fea141067fb6a4ced49a2502e7b3d56c8a770461fb637fc5bc71125868b7644a6c4f1e6c284f080c1e443446f670e631789136de65d9b45543403b66df5528937612d7f11705ba8f14dbf64758a1124df875c5f61015a8e3da268f93b83167a28e70200f14d92f500e14323ccd6222c0de40b1689c94aa88951c2e75ddeb7698797e0ca85417fe0cf9c2fa516f69a3667862311d9f64054c2d17c319ebd17d3c02e5c661", 0xce}, {&(0x7f0000000680)="f68cc0d5462466c7a7b50ddba386ad67", 0x10}, {&(0x7f00000006c0)="22a4b626d06220b443fce5ccec7353ebb0f76f56c4483a6fbcdb780fc07210683d807684154718ab45ba8360ac994acac1c322ec3ec26cee54eb169f81d00f05161993300541ba7b63cac3990c68e632562daa9c928d034a7bd98cdd4da88b046a7d71e5083d830c4106b3fc0e44cc77b8af345998748ffc2778fe724e193781f83632d20960268f150dbad7d03954358adbb752383c3602b55eac138bf0ea63a69d8d", 0xa3}, {&(0x7f0000000780)="25b4ea4436543e6c20eaaa05f874b8bb09e2c14d8c6944411bcdb502244356cb", 0x20}, {&(0x7f00000007c0)="8b98db1c371263e9023a12f28b730554ae305622b5d2b934dc58049e12f0b6ec7f8550b30637f03762a05e1e58bf334542bc0fe2477f36ffff9de6e3ec1ac28819f80e85c5d5bf226d853a9419c86b40b581", 0x52}, {&(0x7f0000000840)="e86a4535d8998c86f4207ab28e0ec7eb3baaf2005e43c7bcc3f77f2e410581851d84c9c6a53ddbc35041b5e4e1e909ed35d37f65431e10a06e03198d519f5e40953503eb1a7ca2aaff5d3c5e55ea9b2479c9de", 0x53}], 0x9, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x24}}], 0x18}, 0x4000080) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x3, 0x3, 0x2, @generic=0x5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.194300073s ago: executing program 4 (id=2577): io_setup(0x239f, &(0x7f0000000380)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x0, 0xff}, 'port1\x00', 0x0, 0xc1860, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) eventfd2(0x2, 0x80800) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000080)={0x40, 0x10, 0xa9, {0xa9, 0xd, "8a44b94dafd804aed5d7f3cc0ff3969db826b04d3942c7fab77d899a6609b58101c69a6e6dfa2d547ef680eed30c1cd694179707eccb66cb9abdc88dbe0ea714513adc155894aa9b2a6f06b3e36a5afba80b56c50bbd854efb46fef6bfce3da5f4c280cdbe6b53029d6b99e4b87dd791473f3e3b2f5abdd5488573c573e51da82aba35d4ed942e68a22c34b22a50dfb73315f4f3dfea5ef946e3349091ef440c442325d2f00f6f"}}, &(0x7f0000000500)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "a96dc3325e91743bbee474b2aaeb92d20a29c6cc196f8943d2831d47df409bdb5ee88741ed50eded197ea9b5c6fdff1b780906cd1f9ee97cbad707644b9bf0e3c5c067814487a80863ab2096d657b0006d5b30d9c1cc49b4dee97bd13f3017beda22d6a6883ccf117248dd7b476f30e09b23e64847d99f3ff36e4bc39b9f9e45e464e11e3e00415c4011acd31b2c2e6537a68a6fbb4f337f13507311510634ee095a7e7e5a97ed74e09a6fb7431cedf26414dcad9b3dcc8770a12b7abedf47f9"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x6, 0xc0, "ebe97d9b644bc51177d538e90ebf3762a6b450a01f1c54b6ff6ab32be3cfba34f2c3b7e7663431ed4848392fb35de76a11b46d9474c1b3d7bc854f9fe71c9f4759499de4a8e3c9c7403640b368ba551a4d9316ea76ebffff2d9c4e6de91eb65573703b17d8158a0a292c061f35b656f355053734de0274a01df2d29646b3ab2f80edad8fd250e7e2dd1c76fc346a37566b70f04df7e93926ea37f6ac36311e149c07fb6ef13659f5b155a21dc334bbe07e78b213eb01265d49bff861b645c154"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9a}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "d8cb"}, &(0x7f0000000800)={0x20, 0x82, 0x3, 'Z@V'}, &(0x7f0000000840)={0x20, 0x83, 0x1, "b9"}, &(0x7f0000000880)={0x20, 0x84, 0x1, '\n'}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "e59c4d"}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000001c0)={0x1, @meta={0x4331434d, 0x1dad0a13, 0x4fdb, 0xec20, 0x35334504}}) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 6.092214471s ago: executing program 2 (id=2578): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) io_setup(0x8, &(0x7f0000000040)=0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xe}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}]}, 0x40}}, 0x804) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r5}) syz_usb_connect$uac1(0x3, 0xd3, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x4095, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x87, 0x0, 0xbe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x2b}, [@selector_unit={0x7, 0x24, 0x5, 0x6, 0x79, "a377"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x3, 0xc, "1d23f6c1"}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x5, "a2"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x603, 0x5, 0x6, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xf6, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x9, 0x5, {0x7, 0x25, 0x1, 0xc, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x8, 0x2, 0xfb}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x4, 0x8, 0x1, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xe, 0xb, 0xdf, "b7247a960f05385dfa"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0xd, 0x10, 0x1, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x9, 0x7, 0x3, 0x63}]}, {{0x9, 0x5, 0x82, 0x9, 0x320, 0x8, 0x9, 0x6, {0x7, 0x25, 0x1, 0x8, 0x3, 0x400}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x3a, 0x2, 0xb, 0x20, 0x4}, 0x4a, &(0x7f0000000480)={0x5, 0xf, 0x4a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x6, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2331eb48f1fceeda0f648e6a75ca252c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x5, 0x2, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x3, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x7, 0x4196, 0x7}]}, 0x2, [{0x3f, &(0x7f0000000500)=@string={0x3f, 0x3, "126497280a86c0a2d8de986b43e5f3f1463a92eff40e776fe024ac5539c9776587cd77f6a26013fde380a7c116db598570b659aa06b8e82bde896a91a1"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c09}}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x80000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0xff, 0x7, 0xa, 0x1ff, 0x1}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d0001000000000904"], 0x0) socket$netlink(0x10, 0x3, 0x12) io_submit(r1, 0x3, &(0x7f0000000a00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f00000007c0)="0ff45e6212122385f23f6e2953608c7efd990682030cb287fcadde2d056f2bbde98ca5d5e49f50ca5a71d4973b0a8d08850fbc6d0f07b2e36e478edee8312f5f8256a0142775a285", 0x48, 0x3}, 0x0, 0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 6.078762894s ago: executing program 5 (id=2579): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x500}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x0, 0x1, 0x0, {0x9, 0x0, 0x7ff, 0xf800, 0xce}, {0x0, 0x1, 0x8, 0xa, 0x1ff}, 0x6, 0x80000001, 0x3}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x4bf7, 0x1, 0xffff57f7, 0x9}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.030543538s ago: executing program 0 (id=2580): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000087c0), 0x0, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000100)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) eventfd(0x7) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffd9d, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r7, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@delneigh={0x48, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x80, 0x92, 0x6}, [@NDA_SRC_VNI={0x8, 0xb, 0x5}, @NDA_SRC_VNI={0x8, 0xb, 0x5}, @NDA_DST_MAC={0xa}, @NDA_NH_ID={0x8, 0xd, 0x401}, @NDA_PROTOCOL={0x5, 0xc, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c810}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=@ceph_nfs_confh={0x10, 0x2, {0x7, 0x9}}, &(0x7f0000002300), 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$midi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0205710, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) 5.615437666s ago: executing program 3 (id=2581): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000140), 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000600)={0x0, 0xc, 0xfb, {0xfb, 0x3, "a58c5ef50a3c6eea865c0ae980c4acdea872d1256f7723839e924d7e05981b144b14a9c5030009276a04cd51243819b0c77832234c1e9d54262ab383bfd7f23622c12bcde2ee6c9a8e59af99e4888d6883de1616e9adc472ac1165917328d1930d52469fe2b95519086ecf9580fa0f78251637697c6d87974f51b9cafdf41f44cfc44ac8999c18dc6151ba8346d63b5f3986e6151bcdb9fdc8c205880dc35be4bec97ec31ac0d3657af3d5d6c5abc2eb0489c22f674558916df6ea7730344eee7060f600a1c7b20016cf6216fde41a972527338418b1a622c24cca7ebc6c4de63f0b4e0bb58439fac81dac4e17a3533a92ee41670bedaca01d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000500)={0x34, &(0x7f0000000240)={0x20, 0x31, 0x80, "a04ddb869508a56dd2a5af530cbb1890ff99c10aac1bd94aad38536ebf316b0a8527204aa9186e4e2afc78ea85b78ac9ef2c2f1abbfb14afbd2a8724a08b0a4b2789453301b162fab2efa4c07baafdaa053736a94722b9e81e2d94a6dc7d811fd45390b9b5307e32cea4ee3643797433adb74a0dc8aa1737954f13f524c6babd"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x37, {0x35, "8533fc07778f407939d02eed6a5144a27ec56bf5125671a5ad929a6a0f62d6591bef8be0a7c50c2bc6d67d37389f502ec78bca7425"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x81}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000005c0)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000a80)={0x2c, &(0x7f0000000040)={0x0, 0x30, 0xd5, {0xd5, 0x5, "28afad9784bac4a215fcc3475b7efc9d3eacc2ed7e551006d5e1560e94301e70b43918efbe93b431a27e94fcd6067701edf94358f223073435164de3ef02e0087c743cd4224fdb1acf505045178c274813d95b2fb2d8c66a1b8e02a640424657f209f0131d613d04ece6e2947ede7a16368c17b294f40fc7bfb6006a00905ce5d24106c34a243393eb16453602359370729750153cbf850788b8ec3b4f79f21b085e0c76f609c880159e1a2c51d021fca1a5724e4b44785f0ede262f0d6a3d7df705dbf0e7310e4520010fce895ee3ab4f7aae"}}, &(0x7f0000000740)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b3248689f34cf22442cac672f969b04cb7793da0e10a360ec3812dedc5cdb190768c35c88782b2f81a19701ad42b869e2e48ee48ee7cb22b081b4d1cebef2a317cb6f02c1239860d66def99d73135db573a7860562a1ec3601b3d3d9fa6bae8e7b4fb7e76b9538e30c732063a29c3c75825f"}}, &(0x7f00000007c0)={0x0, 0xf, 0x1c2, {0x5, 0xf, 0x1c2, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "efde4bf0ca8c7ad86ab81731933a62a0"}, @generic={0xc, 0x10, 0x2, "4401f74027bd6583f6"}, @generic={0xb1, 0x10, 0x3, "350bdfa86b4a248ef98d5aeea14309d1187ff951d012ce4bca8066582c27fb4e2d4d24feed3b3f85b07f604afa1903774f0565840636830250438b857d9572a0c10d9a85a4bce926f1a9493692e3c4586d82e583b5f35cd51b9e39476ed98cab371aeed469ec9842da33f0b9a5d2f616aad2abb46dc08087a4df4200fe82c71db7940957a5507715942f38481130a2f12848159c9f561d2069a440df35af54fca5392acaa634a2adf054a9274fd4"}, @generic={0xcd, 0x10, 0xa, "47be416d66cdefa6e5b1f8a192617e3cd6863f0adb70063e613ab0d30cb9fcff6278771eae72ad79bae3197f042526b38161ec8dd3d556675555dd5527e1f673ba5f09bbdc12d7852ca17e19e7ffba729626758107ea7db25c49f47863d1cc737f5aa546704af1814c864554541ba0ac2c9d9b1bc57de5536f0e27897cd6d7b3a65a14b326a18d4070f5803f1983e6433a6fe833d80a63f8aba92cd8bf2e79b484a8dcf2144ac6eec9969a73452fa7e88747eb60d53b7d014aff42872f2b93eef421fbc66f3f3297eefe"}, @ptm_cap={0x3}, @generic={0x1c, 0x10, 0x3, "be0b93d11f7e68c229e3549b1daf85f4ba5f45b34ead9af704"}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7a, 0x3, 0xc, 0xdc, "a61eb730", "d8ff377f"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0xf, 0x4, 0x3, 0x3, 0x7}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000ac0)={0x20, 0x7857b81559c9b9f5, 0xb9, "ddbae60fdd74bb34d6f39af554282e0790c03eb3c3bc2d5551f2e26a690012752c697280b59668bc15dc056d08e901b9b80c3ebfacec1df3e6c143faec9cf62a16f33035fc8502488a2adf8a61db0b28925a8d5c798571edc167d6e8693a277afdaa1365c0f3e0b40c812b799e427d3637e1b58dcfbfe11593c41641763452c751b90162784f784c66861c66d374a5a15b106959350f3d03da3b4fd7423892dab143892844c03f765cae88118544a12f3df0f12977a71b1ddc"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x800, 0x1}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0xa3}, &(0x7f0000000cc0)={0x40, 0x9, 0x1}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "c105"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "e499"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.766692199s ago: executing program 2 (id=2582): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902010100000001"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000080)=0x8bb, 0x4) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.501392829s ago: executing program 3 (id=2583): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000004c0)="85", 0x1, 0xfffffffffffffffb) keyctl$read(0xb, r3, &(0x7f00000005c0)=""/235, 0x1001) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) mmap(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x4, 0x66032, 0xffffffffffffffff, 0x40000000) mremap(&(0x7f00007fd000/0xe000)=nil, 0xe000, 0x2000, 0x0, &(0x7f00007fe000/0x2000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000440)='./cgroup\x00', 0x24802, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x1, 0x0, 0x0) name_to_handle_at(r5, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000100)=@ocfs2_parent={0x18, 0x2, {{0x2, 0x9, 0xfffffffe}, {0xc830, 0x3, 0x4}}}, &(0x7f0000001500), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0x0, &(0x7f00000003c0), 0x280, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc6, 0x4f, 0x40, 0x2, 0x7, 0x5, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x1, 0x8, 0x9, 0xff, 0x4, 0x8, 0xa, 0x14, 0x7, 0x6, 0x1}, {0x1fb, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x9, 0x4, 0x8, 0x0, 0x2, 0x6}], 0xe}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x6, 0xf3b8, 0x0, 0x1000, 0x402, 0x4002004c4, 0x1000, 0x3, 0x97, 0x1000000000000007, 0x0, 0x7, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 4.463741609s ago: executing program 5 (id=2584): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x400c095) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x200, 0x3, {{0x1d, 0x4, 0x3, 0x2, 0x74, 0x67, 0x0, 0xe, 0x4, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0xc, 0x40, 0x1, 0x4, [{@rand_addr=0x64010100, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x3, [{@multicast2, 0x68}, {@multicast2, 0xff}, {@multicast1, 0x8}, {@broadcast, 0x9}]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x86, [@empty]}, @ssrr={0x89, 0x7, 0x50, [@multicast1]}, @ssrr={0x89, 0x1b, 0x7f, [@dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010100, @private=0xa010101, @broadcast, @empty, @broadcast]}]}}}}}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000003c0)={0xffffffffffffffff, 0x8, 0x9, 0x200, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000400), 0x198, 0xc0000) sendto$inet6(r2, &(0x7f0000000440)="8f66ec9a1b014566806e54c3af9cde5cb60cb99616595918fc4e9cd03607df", 0x1f, 0x4000, &(0x7f0000000480)={0xa, 0x4e24, 0x7fff, @mcast1, 0xff1c}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f00000004c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000500)=0x28) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000580)=0x70b1, 0x4) pwrite64(r2, &(0x7f00000005c0)="879c26cace1b755872db34d3878ec7ecb900d69bb9efbb385fdfd062c705f1cc90ff4e3a79de9b6276fa773b7b590942717a24f3691e235a60b8d9306114c4f4b701aadc476ca8c9681d6b71fe4716048ca89487efb0a03e44a37146d640cd12c0a90f4a8e163802d475f322343621cd4018bb814a", 0x75, 0x5) syz_usb_connect(0x1, 0x58e, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x4b, 0x9c, 0x7a, 0x10, 0x41e, 0x3f04, 0x17fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57c, 0x2, 0x81, 0x1, 0xc0, 0x0, "", [{{0x9, 0x4, 0x22, 0x64, 0x9, 0xff, 0x53, 0x78, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x38}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x3, 0x6, 0x40}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x4, 0x1d, 0x3b3d, 0xc, 0x3}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x6, 0x4, "c0"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x6, 0x5, '\v'}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x5, 0x8, 'W~'}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "fad8"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8000, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0x7, 0x12}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x4, 0x7, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x9, 0x9, 0xf}, @mdlm_detail={0x8a, 0x24, 0x13, 0x40, "5e57414bbbdcd2c0aeddf30b2144f2d2d0e3091a76e2e71ea1097fa044b18caaf758ce8846fe5e5eaff461ffe36da403cf52897ce37128ba0fc2e92fb66e53948ded76274615b52ba2937616867b87ba1a38cd29cebef8f5677cde5320186bd477bcb80e9354d63da1974f22726b1e70443a4a89536b6a8e0ae7803aab3bde333e7f06486912"}]}], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x4, 0x5, 0xc}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x7, 0x2}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7, 0x6, 0x58, [@generic={0xde, 0x31, "b1dfe9307870c5f6b6cfb0aa6307905df0c7935d80f816c0a74799bd35520c0fe68cbeb45577ccab5d908d56b9818b776c881cea7c2f28c23dccd7f0209d2f9801e985fb237fd9154cda890a51cf49b24f0a41b057cba28bde7fc7004975f520aabe4486f5bcddb8ed7080aca02ecd132edf3c3adb12ba4ee430fba7cd199a96f4f255a660df328521e4469782709cc9d2d6028638200d6803c69d929d0a11031bf620d25f3c4f52be0ac1ecbe7b1f877ca8a57a896f99102e5718e577f1ce2aeda158aa9aef8d197398c7e577aa8afd15bdb782058f809b1d72c93e"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0xff, 0x70}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x4, 0x2, 0x80, [@generic={0xaf, 0x2, "2be454149748ca881848a3c33b3e1261f100af361862a9840669eab52ae7260c7f934f1ee9d266e4be008b1bcb2fb71979ac8de05cd9d21f9c67a90db803f6b2d767d3abe0f843d336188e6e1fb50371c48ae26c71ce37df03e27988f0009feb18cf1edc92d703cc8ad7331078dc11f7b0df807636ad8e3df051f9e3c83134b27a9a20f0d5a8c96ce42686f47543b02f94496c05c1119f4fd934a3669d32d3470e0085208bb512331d451a9de9"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x2, 0x9, 0x5}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x7, 0x5, 0x7, [@generic={0xd7, 0xf, "cafea926c143fbad74a19f8c19c3f117d4e7ac57159be043e24c79816979e20e8fbbdd01a59cb2386a4acdc81dd93a60e647f795e83ea78a8202fa6138b532725d224edde9ef7dca9270701fda21eef53dfab46030893ea343b00c8435272dc49ad44b6077abed277bf37ab67825422774fadd6959e990363ffdfe24f1608f5ae6110deb1b1a40915ba96ac72469ba7034fafdd834768af5cc51c0b8df0d390349ee0ae18b7d1d25fe6f9da813e2da4631b3b9caa6ec7201597642be3f7da748d145d96cae5ac84e6a51875de04cb7dc0f903e8df7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x5, 0x9, 0x9, [@generic={0xb4, 0x7, "9f196be4201f757b502551ae6c5754c0b0d015200d688503c34def2d919f2f5da41c7c605515b7cfc5b73386a86896a65af01f4b0626fe0a488c0e659e7efb2293394e998fd8584ad3f69593d38dc834e2c10623eb97d807fd3abf82f3e2928100781b21f232b707a78e5c0513a0158c5c0001bec3be02cfc0c90562b20d3f5b5999c74ea1a6822b5b4b4584ce38196aaf6a5f7a2d104e8525f4d53b64b11751e1046a52a523e05446b646bc4ce5bdb8f350"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x0, 0x3, 0xf}}]}}, {{0x9, 0x4, 0xc0, 0x7, 0x4, 0xff, 0x5, 0x36, 0x9, [], [{{0x9, 0x5, 0x80, 0x2, 0x200, 0x1, 0xd3, 0x81, [@generic={0xa6, 0x2, "b8b7c239356d2297d3985f2539f79a325293c06bc23a9404167b39f27e48ff7aa727337d6b41198cf849b1560f839b38233067aa49ef68502036cc49eec73dd541ae53bda9f57574ae7a7d4902552a9237af7094c1943df94e0b2f9035a7c377b09bf9140ea72e4bf72d62435b679b739b30e9b61d18e31445b23f946b4b8c8bdbdc0921b04c5a48f67d02e31bc94903df385dcda867d2ab2209e879fccfeb4cea6f741a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x5, 0x3, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0x80, 0x40}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x9, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xcb, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xce7}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x200, 0x4, 0xd, 0x3, 0x8, 0x8}, 0x47, &(0x7f0000000c40)={0x5, 0xf, 0x47, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0x9, 0x96c}, @ss_container_id={0x14, 0x10, 0x4, 0x9c, "42a0465da99b4adea3b07d534260e81d"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x2, 0x1, 0xe1, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x1, 0xe, 0x7, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xff, 0x3, 0xb4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x4, 0x8000}]}, 0x1, [{0x19, &(0x7f0000000cc0)=@string={0x19, 0x3, "d4fa903a9fe5c164d453b6e8f49d10c69ac4e1189d3e09"}}]}) syz_emit_ethernet(0x99, &(0x7f0000000d40)={@random="a6068fd2dfd2", @link_local, @void, {@llc_tr={0x11, {@llc={0xfc, 0xaa, "8f", "ff6a4c391a5fd93912f10ad865a9761b7eb59fe9d22512b490d00554973473cde0c854c733cef397fcd832020ef4f15a8db0bdb770aff154295b2c3ea75af259623fe9a184aa0b320ca417a1b087e991261d46b439eae1120dfcc37ad0e8d2b8a7a73dda51bf47f0889f7643a50f9400956060175e4dfcb8dacb71a9b0a926751342ade8481ab7b4"}}}}}, &(0x7f0000000e00)={0x0, 0x4, [0xbfc, 0x971, 0xf15, 0x79c]}) fsopen(&(0x7f0000000e40)='smb3\x00', 0x0) r7 = gettid() getpgrp(r7) ioctl$VHOST_VDPA_GET_STATUS(r6, 0x8001af71, &(0x7f0000000e80)) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r8) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000f00)={@loopback, @private=0xa010100, r3}, 0xc) sendto$l2tp6(r6, &(0x7f0000000f40)="82f8e203575fbf67657f6a6eea74fa2db7e42b466a4e25270fd7ddfab5bee6edb117c8fe2289a7a1dc3facb804d8c170b6d7cbe0895738a98cb70d8f808efb97c863d100db1b474a6226818a", 0x4c, 0x200040c0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000fc0)={0x4, 0x81, @value=0x5}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000001000)={'veth1_macvtap\x00', 0x1}) faccessat(r6, &(0x7f0000001040)='./file0\x00', 0x34) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001080)={'#! ', './file0', [{0x20, 'tunl0\x00'}, {0x20, '\xc1\\}'}, {0x20, '/%#'}, {0x20, 'veth1_macvtap\x00'}], 0xa, "78b462ee369146bbe7f3577e374bce57a4917b9f5f52d09efa97babf129f9871904ec073f98fe2741029fe71d537329e3184925cd5de2259008c8a96ac9bc501d11161cdc03e5a5f7dbf9fc8"}, 0x75) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000001180)=@assoc_value={0x0, 0xffffff80}, &(0x7f00000011c0)=0x8) 3.88163251s ago: executing program 3 (id=2585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18300000fdffffff0000000000000500180100002020782500000000002020207b1af8ff"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x24, &(0x7f0000000280)=""/36, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f95010201010902120001000000000904"], 0x0) 3.691515838s ago: executing program 4 (id=2586): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x7) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0x0, r5, {0x7, 0x2b, 0x1, 0x100000, 0x8, 0x40, 0x4d428497, 0x3ff, 0x0, 0x0, 0x10, 0x4}}, 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0x0, 0x0) (async) read$FUSE(r4, &(0x7f0000002340)={0x2020}, 0x2020) (async) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x7) (async) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0x0, r5, {0x7, 0x2b, 0x1, 0x100000, 0x8, 0x40, 0x4d428497, 0x3ff, 0x0, 0x0, 0x10, 0x4}}, 0x50) (async) 3.556483363s ago: executing program 5 (id=2587): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x171202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = dup2(r0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x202000, 0x0) fchmod(r2, 0x40) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)=0x200002) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010103f709091a1f1847f97d77a3dc7866a0236aa9e90f0048083412cd4a72b642e58d2b12b731c33b467a412e2c7fa577a4677b6a50edeebecb54abab283e2580ed8c964937a40ee5e1d4acd7fccd91866097bad4eb0fa7e135f548d07433b7aa9e63839a0ca23416d9"], 0x0) clock_adjtime(0xffffffd3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) close(0xffffffffffffffff) 3.354934185s ago: executing program 2 (id=2588): unshare(0x36050c80) r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000540)={0x0, 0x0, 0x8, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYRES8=0x0], 0x0) 3.270929435s ago: executing program 4 (id=2589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x4000) syz_usb_connect$uac3(0x2, 0x9f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x5, 0x10, 0x5, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x29, 0x8000}, [@output_terminal={0x13, 0x24, 0x3, 0x6, 0x403, 0x2, 0x2, 0x5e, 0x3, 0x2, 0xb678}, @source_unit={0xc, 0x24, 0xb, 0x2, 0x4, 0x8, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x5, 0x7b, {0xa, 0x25, 0x25, 0x7, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x8, 0x0, {0xa, 0x25, 0x25, 0x40, 0x2, 0x7}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0x6, 0x3, 0x5, 0x10, 0x7f}, 0x0, 0x0}) 3.075701691s ago: executing program 3 (id=2590): bpf$PROG_LOAD(0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "3cb4af5bcb9e66f7", "0a196dc09a0603c3c7e8fcab94b3e9b5a5b24975109c5009d31f58182e5c101d", "1c524045", "d260c294cf385bdb"}, 0x38) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000580)) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) rmdir(0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4180) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40d00, 0x0) 2.792087535s ago: executing program 0 (id=2591): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11483, 0x2140c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x3d97}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) 2.661962252s ago: executing program 5 (id=2592): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) io_setup(0x8, &(0x7f0000000040)=0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xe}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}]}, 0x40}}, 0x804) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r5}) syz_usb_connect$uac1(0x3, 0xd3, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x4095, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x87, 0x0, 0xbe, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x2b}, [@selector_unit={0x7, 0x24, 0x5, 0x6, 0x79, "a377"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x3, 0xc, "1d23f6c1"}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x5, "a2"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x603, 0x5, 0x6, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xf6, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x9, 0x5, {0x7, 0x25, 0x1, 0xc, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x8, 0x2, 0xfb}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x4, 0x8, 0x1, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xe, 0xb, 0xdf, "b7247a960f05385dfa"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0xd, 0x10, 0x1, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x9, 0x7, 0x3, 0x63}]}, {{0x9, 0x5, 0x82, 0x9, 0x320, 0x8, 0x9, 0x6, {0x7, 0x25, 0x1, 0x8, 0x3, 0x400}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x3a, 0x2, 0xb, 0x20, 0x4}, 0x4a, &(0x7f0000000480)={0x5, 0xf, 0x4a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x6, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2331eb48f1fceeda0f648e6a75ca252c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x5, 0x2, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x3, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x7, 0x4196, 0x7}]}, 0x2, [{0x3f, &(0x7f0000000500)=@string={0x3f, 0x3, "126497280a86c0a2d8de986b43e5f3f1463a92eff40e776fe024ac5539c9776587cd77f6a26013fde380a7c116db598570b659aa06b8e82bde896a91a1"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c09}}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x80000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b39310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0xff, 0x7, 0xa, 0x1ff, 0x1}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d0001000000000904"], 0x0) socket$netlink(0x10, 0x3, 0x12) io_submit(r1, 0x3, &(0x7f0000000a00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f00000007c0)="0ff45e6212122385f23f6e2953608c7efd990682030cb287fcadde2d056f2bbde98ca5d5e49f50ca5a71d4973b0a8d08850fbc6d0f07b2e36e478edee8312f5f8256a0142775a285", 0x48, 0x3}, 0x0, 0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e04000000000000bf300000000000005504000001ed0a002501020017ffffff460400007fffffff7b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 2.483887514s ago: executing program 2 (id=2593): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x88, 0x0, 0x2, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x1800, 0xfffffffb}, 0x0) socket(0x29, 0x800, 0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac8483f5761d76cfaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8c510b4a16421b5cb56afda00", "67e20d00", 0x7afc, 0x3, 0x4, 0x3, 0x7ff}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) eventfd(0xfffffff9) r4 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r4, 0x0, 0x0, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80000) r7 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x8, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000308010400000000000000000500000805000300840000000c0004402600094000000a00"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x20000054) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 2.307996313s ago: executing program 0 (id=2594): pipe2(&(0x7f0000000040), 0x0) (async) pipe2(&(0x7f0000000040), 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000000)={0x10, 0x3720}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x4}]}) 1.710404992s ago: executing program 0 (id=2595): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x6f1}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000500) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffff8, 0x8001, 0x5, 0x3, 0x8, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x2a, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r11, 0xc0bc5351, &(0x7f0000000880)={0x7fffffff, 0x0, 'client0\x00', 0x1, "58bce704dbc440b3", "9d90d0fdb4265737a8875ee6ad4a12144dcb790a237251b1afb8e59fee184fd7", 0x8, 0x1dec4ed6}) syz_usb_connect(0x1, 0x36, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1.417000923s ago: executing program 5 (id=2596): io_setup(0x239f, &(0x7f0000000380)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x0, 0xff}, 'port1\x00', 0x0, 0xc1860, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000080)={0x40, 0x10, 0xa9, {0xa9, 0xd, "8a44b94dafd804aed5d7f3cc0ff3969db826b04d3942c7fab77d899a6609b58101c69a6e6dfa2d547ef680eed30c1cd694179707eccb66cb9abdc88dbe0ea714513adc155894aa9b2a6f06b3e36a5afba80b56c50bbd854efb46fef6bfce3da5f4c280cdbe6b53029d6b99e4b87dd791473f3e3b2f5abdd5488573c573e51da82aba35d4ed942e68a22c34b22a50dfb73315f4f3dfea5ef946e3349091ef440c442325d2f00f6f"}}, &(0x7f0000000500)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "a96dc3325e91743bbee474b2aaeb92d20a29c6cc196f8943d2831d47df409bdb5ee88741ed50eded197ea9b5c6fdff1b780906cd1f9ee97cbad707644b9bf0e3c5c067814487a80863ab2096d657b0006d5b30d9c1cc49b4dee97bd13f3017beda22d6a6883ccf117248dd7b476f30e09b23e64847d99f3ff36e4bc39b9f9e45e464e11e3e00415c4011acd31b2c2e6537a68a6fbb4f337f13507311510634ee095a7e7e5a97ed74e09a6fb7431cedf26414dcad9b3dcc8770a12b7abedf47f9"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x6, 0xc0, "ebe97d9b644bc51177d538e90ebf3762a6b450a01f1c54b6ff6ab32be3cfba34f2c3b7e7663431ed4848392fb35de76a11b46d9474c1b3d7bc854f9fe71c9f4759499de4a8e3c9c7403640b368ba551a4d9316ea76ebffff2d9c4e6de91eb65573703b17d8158a0a292c061f35b656f355053734de0274a01df2d29646b3ab2f80edad8fd250e7e2dd1c76fc346a37566b70f04df7e93926ea37f6ac36311e149c07fb6ef13659f5b155a21dc334bbe07e78b213eb01265d49bff861b645c154"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9a}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "d8cb"}, &(0x7f0000000800)={0x20, 0x82, 0x3, 'Z@V'}, &(0x7f0000000840)={0x20, 0x83, 0x1, "b9"}, &(0x7f0000000880)={0x20, 0x84, 0x1, '\n'}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "e59c4d"}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x1, @meta={0x4331434d, 0x1dad0a13, 0x4fdb, 0xec20, 0x35334504}}) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 1.336458314s ago: executing program 4 (id=2597): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a4000000000090002007379"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = syz_open_dev$loop(&(0x7f0000001800), 0x8, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900000000000000000000000000000000000a00", [0x100000000, 0x8000000000000000]}}) 953.554471ms ago: executing program 4 (id=2598): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800005fffffffff9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x3, 0x1e, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x2}}, @sadb_key={0x10, 0x9, 0x398, 0x0, "f605f8d295d39e3e90a02788951d3da655f9cb7838652b180507efa38b42f5c219f6999fba9f1a89c369c65385fe8d3e174b7caa90413c776a26a30e8729262d3642ff60b993060eeaebe247b1e844799ac3983b02435701a7b5b24518fc95e20c27264aee5ea53e09dc0e53079687c1a2071e"}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff2, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}}]}, 0xf0}, 0x1, 0x7}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 419.499203ms ago: executing program 3 (id=2599): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x3eb080, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x7156}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa91, 0xffffffff}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001580)={{0x2, 0x1, 0x7000000, 0x4274, 'syz0\x00', 0x9}, 0x2, 0x20, 0x5, r7, 0x1, 0x5c7, 'syz0\x00', &(0x7f0000000340)=['/dev/adsp1\x00'], 0xb}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000004000000000000"], 0x48) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0xffffffec, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x7, [{0x7fffffff, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x4}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x0, 0x0, 0x3}}, 0xfffffffd}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) 0s ago: executing program 2 (id=2600): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x1000000, 0x0, 0x14}, 0x40) kernel console output (not intermixed with test programs): 0 probing 041e:400b [ 616.384999][T14019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2164'. [ 616.489636][T14021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.525730][T14021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.545985][T14021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.574469][T14021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.750542][T14024] loop2: detected capacity change from 0 to 7 [ 616.770536][T14024] Dev loop2: unable to read RDB block 7 [ 616.787833][T14024] loop2: AHDI p1 p2 p3 p4 [ 616.801975][T14024] loop2: partition table partially beyond EOD, truncated [ 616.816626][T14024] loop2: p1 start 1601398130 is beyond EOD, truncated [ 616.833993][T14024] loop2: p2 start 1702059890 is beyond EOD, truncated [ 616.852194][T14024] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 616.960744][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 616.974363][ T808] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 616.992425][T14015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.033697][T14015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.080893][ T5686] gspca_sunplus: reg_r err -71 [ 617.093591][ T5686] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 617.130325][ T5686] usb 1-1: USB disconnect, device number 7 [ 617.188180][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 617.243678][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.272688][ T808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 617.300917][ T808] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 617.327009][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.373095][ T808] usb 5-1: config 0 descriptor?? [ 617.378214][T14030] loop8: detected capacity change from 0 to 7 [ 617.393310][T14030] Dev loop8: unable to read RDB block 7 [ 617.426618][T14030] loop8: unable to read partition table [ 617.441545][T14029] loop4: detected capacity change from 0 to 2640 [ 617.455687][T14030] loop8: partition table beyond EOD, truncated [ 617.474423][T14029] ldm_validate_partition_table(): Disk read failed. [ 617.481298][T14030] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 617.511544][T14029] Dev loop4: unable to read RDB block 0 [ 617.547910][T14029] loop4: unable to read partition table [ 617.605562][T14029] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 618.273084][ T5686] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 618.298805][T14043] kAFS: unable to lookup cell 'ÿ' [ 618.344907][T14043] kAFS: unable to lookup cell '(,c¾Ì' [ 618.463378][ T5686] usb 1-1: Using ep0 maxpacket: 8 [ 618.498379][ T5686] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 618.546040][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.600753][ T5686] usb 1-1: Product: syz [ 618.617524][ T5686] usb 1-1: Manufacturer: syz [ 618.639015][ T5686] usb 1-1: SerialNumber: syz [ 618.676316][ T5686] usb 1-1: config 0 descriptor?? [ 618.944517][ T5686] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 619.087582][T14047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2174'. [ 619.803558][ T5625] usb 5-1: USB disconnect, device number 7 [ 619.904783][T14052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.931996][T14052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.063847][ T5686] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 620.101840][ T5686] usb 1-1: USB disconnect, device number 8 [ 620.663454][ T808] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 620.835234][T14060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.867037][T14060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.878644][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 620.898337][ T808] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 620.921944][ T808] usb 5-1: config 0 has no interface number 0 [ 620.942665][ T808] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 620.975651][ T808] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 621.011427][ T808] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 621.050278][ T808] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 621.066289][ T808] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 621.093324][ T808] usb 5-1: Product: syz [ 621.138533][ T808] usb 5-1: config 0 descriptor?? [ 621.176992][ T808] iowarrior 5-1:0.8: no interrupt-in endpoint found [ 621.397139][ T808] usb 5-1: USB disconnect, device number 8 [ 621.603127][ T5625] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 621.640305][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'. [ 621.763310][ T5625] usb 1-1: Using ep0 maxpacket: 32 [ 621.785486][ T5625] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 621.808034][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.840330][ T5625] usb 1-1: config 0 descriptor?? [ 621.875321][ T5625] gspca_main: sunplus-2.14.0 probing 041e:400b [ 622.007613][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.045878][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.141224][T14078] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2185'. [ 622.167564][T14071] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2183'. [ 622.298494][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.316607][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.341869][T14082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.351368][T14082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.363400][ T5686] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 622.483929][T14065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.496329][T14065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.509005][ T5625] gspca_sunplus: reg_r err -71 [ 622.521860][ T5625] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 622.536374][ T5686] usb 5-1: Using ep0 maxpacket: 32 [ 622.548831][ T5686] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 622.562941][ T5686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.576396][ T5625] usb 1-1: USB disconnect, device number 9 [ 622.586069][ T5686] usb 5-1: config 0 has no interface number 0 [ 622.597109][ T5686] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 622.614296][ T5686] usb 5-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 622.628022][ T5686] usb 5-1: config 0 interface 8 has no altsetting 0 [ 622.660203][ T5686] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 622.675944][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.686277][ T5686] usb 5-1: Product: syz [ 622.690680][ T5686] usb 5-1: Manufacturer: syz [ 622.697062][ T5686] usb 5-1: SerialNumber: syz [ 622.711604][ T5686] usb 5-1: config 0 descriptor?? [ 623.000738][T14089] pic_ioport_write: 257 callbacks suppressed [ 623.000789][T14089] kvm: pic: level sensitive irq not supported [ 623.009038][T14089] picdev_read: 257 callbacks suppressed [ 623.009099][T14089] kvm: pic: non byte read [ 623.042764][ T5686] ath6kl: Failed to submit usb control message: -71 [ 623.051019][ T5686] ath6kl: unable to send the bmi data to the device: -71 [ 623.068998][ T5686] ath6kl: Unable to send get target info: -71 [ 623.077917][T14089] kvm: pic: level sensitive irq not supported [ 623.077995][T14089] kvm: pic: non byte read [ 623.090925][ T5686] ath6kl: Failed to init ath6kl core: -71 [ 623.118965][ T5686] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 623.130844][T14089] kvm: pic: level sensitive irq not supported [ 623.130917][T14089] kvm: pic: non byte read [ 623.151952][ T5686] usb 5-1: USB disconnect, device number 9 [ 623.174684][T14089] kvm: pic: level sensitive irq not supported [ 623.174760][T14089] kvm: pic: non byte read [ 623.260057][T14089] kvm: pic: level sensitive irq not supported [ 623.260135][T14089] kvm: pic: non byte read [ 623.306514][T14089] kvm: pic: level sensitive irq not supported [ 623.306590][T14089] kvm: pic: non byte read [ 623.328276][T14089] kvm: pic: level sensitive irq not supported [ 623.328351][T14089] kvm: pic: non byte read [ 623.359566][T14089] kvm: pic: level sensitive irq not supported [ 623.359644][T14089] kvm: pic: non byte read [ 623.433634][T14089] kvm: pic: level sensitive irq not supported [ 623.433728][T14089] kvm: pic: non byte read [ 623.511792][T14089] kvm: pic: level sensitive irq not supported [ 623.511865][T14089] kvm: pic: non byte read [ 623.610504][T14103] loop3: detected capacity change from 0 to 7 [ 623.661482][T14103] Dev loop3: unable to read RDB block 7 [ 623.692303][T14103] loop3: unable to read partition table [ 623.716636][T14103] loop3: partition table beyond EOD, truncated [ 623.742280][T14103] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 623.943136][ T5686] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 624.113002][ T5686] usb 5-1: Using ep0 maxpacket: 32 [ 624.142746][ T5686] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 624.170375][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.231995][ T5686] usb 5-1: config 0 descriptor?? [ 624.256399][ T5686] gspca_main: sq930x-2.14.0 probing 041e:403c [ 624.269869][T14117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2196'. [ 624.497948][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.505060][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.605390][T14122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.344369][T14136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.363252][T14136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.398233][T14136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.425062][T14136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.561897][T14137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2192'. [ 625.753428][ T5686] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 625.761395][ T5686] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 625.802359][ T5686] usb 5-1: USB disconnect, device number 10 [ 626.267536][T14148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.346565][T14148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.356903][T14150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.369523][T14150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.479394][T14153] loop3: detected capacity change from 0 to 7 [ 626.529862][T14153] Dev loop3: unable to read RDB block 7 [ 626.548086][T14153] loop3: unable to read partition table [ 626.584559][T14153] loop3: partition table beyond EOD, truncated [ 626.620176][T14153] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 626.864857][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2206'. [ 626.981988][T14163] netem: incorrect ge model size [ 627.095493][T14163] netem: change failed [ 627.167248][T14168] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2208'. [ 627.321894][T13368] Bluetooth: hci0: unexpected event for opcode 0x204e [ 627.583076][ T808] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 627.758242][ T808] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 627.778570][ T808] usb 1-1: config 0 has no interface number 0 [ 627.785417][ T808] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 627.799155][ T808] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 627.818454][ T808] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 627.850272][ T808] usb 1-1: config 0 interface 11 has no altsetting 0 [ 627.875526][ T808] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 627.888806][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.916422][ T808] usb 1-1: config 0 descriptor?? [ 627.923047][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 627.939249][T14170] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 627.947651][T14170] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 627.969059][ T808] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 627.990291][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 628.005399][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 628.022707][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 628.022784][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2211'. [ 628.041492][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 628.051037][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 628.059869][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 628.081064][ T808] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 628.089371][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 628.106917][ T10] usb 5-1: config 1 has an invalid interface number: 81 but max is 0 [ 628.125457][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 628.136055][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 628.157414][ T10] usb 5-1: config 1 has no interface number 0 [ 628.170798][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 628.191948][ T10] usb 5-1: config 1 interface 81 altsetting 2 has a duplicate endpoint with address 0x87, skipping [ 628.203607][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 628.211519][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 628.221879][ T10] usb 5-1: config 1 interface 81 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 628.235407][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 628.244389][ T10] usb 5-1: config 1 interface 81 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 628.256999][ T808] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 628.267428][ T10] usb 5-1: config 1 interface 81 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 628.289817][ T808] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 628.301401][ T10] usb 5-1: config 1 interface 81 altsetting 2 endpoint 0x2 has invalid maxpacket 2047, setting to 64 [ 628.314159][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2211'. [ 628.337564][ T808] usb 1-1: USB disconnect, device number 10 [ 628.348613][ T10] usb 5-1: config 1 interface 81 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 628.378319][ T808] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 628.392702][ T10] usb 5-1: config 1 interface 81 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 628.423213][ T10] usb 5-1: config 1 interface 81 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 628.441421][ T808] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 628.465168][ T10] usb 5-1: config 1 interface 81 has no altsetting 0 [ 628.486302][ T808] keyspan 1-1:0.11: device disconnected [ 628.495442][ T10] usb 5-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=5b.06 [ 628.517993][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.536407][ T10] usb 5-1: Product: 晊⌦å½å‹¾è®–襪ê‘ì´ì»…롪ᒜ㙥㥜ìŸì”¢î°… [ 628.545201][ T10] usb 5-1: Manufacturer: 嬠á¯á«½ë£­å¤“즽‫슠塆ԣἔ尢ꌞ﴿퓻⬒⛚ꑖ뼌臬豴ꚣ뺡걂車톸ë±æµŽä†±æ—žë³¦ä¸œê½±æ’ªâ¢§è«¿á­Žê–‹íŽ¤ê›¯ïƒâº‘Ç‘ç®î¨¬æ·¬æ‡ë¤µèŸ®ã±¬ë‰ªá­„ê¿–ï Œê–¹é¸½ì¯ [ 628.568565][ T10] usb 5-1: SerialNumber: syz [ 628.796636][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.804225][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.848673][ T10] rndis_host 5-1:1.81: skipping garbage [ 628.866622][ T10] rndis_host 5-1:1.81: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 628.935205][ T10] option 5-1:1.81: GSM modem (1-port) converter detected [ 629.028286][ T10] usb 5-1: USB disconnect, device number 11 [ 629.089953][ T10] option 5-1:1.81: device disconnected [ 629.203401][ T808] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 629.287365][T14181] pic_ioport_write: 168 callbacks suppressed [ 629.287388][T14181] kvm: pic: level sensitive irq not supported [ 629.321546][T14181] picdev_read: 168 callbacks suppressed [ 629.321569][T14181] kvm: pic: non byte read [ 629.373250][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 629.386456][T14181] kvm: pic: level sensitive irq not supported [ 629.386534][T14181] kvm: pic: non byte read [ 629.403780][ T808] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 629.503335][T14181] kvm: pic: level sensitive irq not supported [ 629.510356][T14181] kvm: pic: non byte read [ 629.524095][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.693342][ T808] usb 1-1: config 0 descriptor?? [ 629.727813][T14181] kvm: pic: level sensitive irq not supported [ 629.727915][T14181] kvm: pic: non byte read [ 629.750456][ T808] gspca_main: sunplus-2.14.0 probing 041e:400b [ 629.778983][T14181] kvm: pic: level sensitive irq not supported [ 629.779079][T14181] kvm: pic: non byte read [ 629.836123][T14181] kvm: pic: level sensitive irq not supported [ 629.836213][T14181] kvm: pic: non byte read [ 629.927209][T14181] kvm: pic: level sensitive irq not supported [ 629.927318][T14181] kvm: pic: non byte read [ 629.959073][T14181] kvm: pic: level sensitive irq not supported [ 629.959149][T14181] kvm: pic: non byte read [ 630.162458][T14181] kvm: pic: level sensitive irq not supported [ 630.162532][T14181] kvm: pic: non byte read [ 630.294786][T14181] kvm: pic: level sensitive irq not supported [ 630.294879][T14181] kvm: pic: non byte read [ 630.488626][T14198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.569104][T14198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.653316][ T808] gspca_sunplus: reg_r err -110 [ 630.658432][ T808] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 632.015789][ T5712] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 632.210520][ T5712] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.232041][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'. [ 632.258453][ T10] usb 1-1: USB disconnect, device number 11 [ 632.269015][ T5712] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.330880][ T5712] usb 5-1: config 0 interface 0 has no altsetting 0 [ 632.357749][ T5712] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 632.410145][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.475252][ T5712] usb 5-1: config 0 descriptor?? [ 632.779805][T14212] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2220'. [ 633.391651][ T5712] usbhid 5-1:0.0: can't add hid device: -71 [ 633.418539][ T5712] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 633.514248][ T5712] usb 5-1: USB disconnect, device number 12 [ 633.597823][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.634320][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.788888][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.853189][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.019475][T14230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2225'. [ 634.487338][T14216] loop4: detected capacity change from 0 to 2640 [ 634.499545][T14216] buffer_io_error: 35 callbacks suppressed [ 634.499565][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.517099][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.550331][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.560915][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.576881][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.596497][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.620930][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.659153][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.694724][T14216] ldm_validate_partition_table(): Disk read failed. [ 634.707759][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.746397][T14216] Buffer I/O error on dev loop4, logical block 0, async page read [ 634.779344][T14216] Dev loop4: unable to read RDB block 0 [ 634.796176][T14216] loop4: unable to read partition table [ 634.824520][T14216] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 634.846865][T14238] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 634.902603][T14238] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 635.163822][ T5695] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 635.343221][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 635.367374][ T5695] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 635.399847][T14254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2232'. [ 635.409349][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.425751][ T5695] usb 1-1: config 0 descriptor?? [ 635.451441][ T5695] gspca_main: sunplus-2.14.0 probing 041e:400b [ 635.722127][T14260] syz.4.2235 (14260): drop_caches: 0 [ 635.977041][T14261] pic_ioport_write: 79 callbacks suppressed [ 635.977066][T14261] kvm: pic: level sensitive irq not supported [ 635.990151][T14261] picdev_read: 79 callbacks suppressed [ 636.039614][T14261] kvm: pic: non byte read [ 636.071276][T14261] kvm: pic: level sensitive irq not supported [ 636.071380][T14261] kvm: pic: non byte read [ 636.202288][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.260225][T14261] kvm: pic: level sensitive irq not supported [ 636.260342][T14261] kvm: pic: non byte read [ 636.324779][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.363340][ T5695] gspca_sunplus: reg_r err -110 [ 636.374963][ T5695] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 636.414016][T14261] kvm: pic: level sensitive irq not supported [ 636.414096][T14261] kvm: pic: non byte read [ 636.615984][T14261] kvm: pic: level sensitive irq not supported [ 636.616064][T14261] kvm: pic: non byte read [ 636.776791][T14261] kvm: pic: level sensitive irq not supported [ 636.776901][T14261] kvm: pic: non byte read [ 636.902563][T14261] kvm: pic: level sensitive irq not supported [ 636.902636][T14261] kvm: pic: non byte read [ 637.051063][T14261] kvm: pic: level sensitive irq not supported [ 637.062157][T14261] kvm: pic: non byte read [ 637.190620][T14261] kvm: pic: level sensitive irq not supported [ 637.202664][T14261] kvm: pic: non byte read [ 637.315337][T14261] kvm: pic: level sensitive irq not supported [ 637.315423][T14261] kvm: pic: non byte read [ 637.509442][ T5712] usb 1-1: USB disconnect, device number 12 [ 638.036027][T14281] loop3: detected capacity change from 0 to 7 [ 638.062805][T14281] Dev loop3: unable to read RDB block 7 [ 638.079590][T14281] loop3: unable to read partition table [ 638.092489][T14281] loop3: partition table beyond EOD, truncated [ 638.111047][T14281] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 638.204201][ T5686] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 638.387956][ T5686] usb 5-1: Using ep0 maxpacket: 32 [ 638.421199][ T5686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.458866][ T5686] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 638.517280][T14284] loop4: detected capacity change from 0 to 2640 [ 638.537691][ T5686] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 638.561008][T14284] ldm_validate_partition_table(): Disk read failed. [ 638.599891][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.601031][T14284] Dev loop4: unable to read RDB block 0 [ 638.658157][ T5686] usb 5-1: config 0 descriptor?? [ 638.683482][T14284] loop4: unable to read partition table [ 638.799367][T14284] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 639.218443][T14298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2245'. [ 639.364626][T14294] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2243'. [ 639.442488][T14302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.476386][T14302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.448281][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.503255][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.049699][ T5695] usb 5-1: USB disconnect, device number 13 [ 641.886189][T14317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.008590][T14317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.702266][T14322] loop3: detected capacity change from 0 to 7 [ 642.736194][T14322] Dev loop3: unable to read RDB block 7 [ 642.765998][T14322] loop3: unable to read partition table [ 642.778949][T14322] loop3: partition table beyond EOD, truncated [ 642.797387][T14322] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 642.936041][ T144] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.980434][ T144] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.028856][ T144] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.089531][ T144] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.130237][ T144] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.163138][ T144] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.210242][ T144] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.304799][ T144] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.553263][ T5695] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 643.564121][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.583282][ T5686] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 643.601554][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.743028][ T5695] usb 1-1: Using ep0 maxpacket: 32 [ 643.752978][ T5686] usb 5-1: Using ep0 maxpacket: 16 [ 643.764453][ T5695] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 643.778821][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.788838][ T5686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.810372][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.822617][ T5695] usb 1-1: config 0 descriptor?? [ 643.829090][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.863957][ T5695] gspca_main: sunplus-2.14.0 probing 041e:400b [ 643.879094][ T5686] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 643.903615][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.917230][ T5686] usb 5-1: config 0 descriptor?? [ 643.972657][T14332] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2256'. [ 644.001746][T14334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.015660][T14334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.424735][ T5686] hid-picolcd 0003:04D8:F002.0023: No report with id 0xf3 found [ 644.433071][ T5686] hid-picolcd 0003:04D8:F002.0023: No report with id 0xf4 found [ 644.446069][T14343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.466727][T14343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.477044][T14341] pic_ioport_write: 74 callbacks suppressed [ 644.477066][T14341] kvm: pic: level sensitive irq not supported [ 644.505372][T14341] picdev_read: 74 callbacks suppressed [ 644.505395][T14341] kvm: pic: non byte read [ 644.571230][ T5686] usb 5-1: USB disconnect, device number 14 [ 644.613508][T14341] kvm: pic: level sensitive irq not supported [ 644.616383][T14341] kvm: pic: non byte read [ 644.630533][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.645431][T14341] kvm: pic: level sensitive irq not supported [ 644.645535][T14341] kvm: pic: non byte read [ 644.688038][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.743616][T14341] kvm: pic: level sensitive irq not supported [ 644.743901][T14341] kvm: pic: non byte read [ 644.755725][ T5695] gspca_sunplus: reg_r err -110 [ 644.760757][ T5695] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 644.811033][T14341] kvm: pic: level sensitive irq not supported [ 644.811248][T14341] kvm: pic: non byte read [ 644.824673][T14341] kvm: pic: level sensitive irq not supported [ 644.838211][T14341] kvm: pic: non byte read [ 645.031844][T14341] kvm: pic: level sensitive irq not supported [ 645.031951][T14341] kvm: pic: non byte read [ 645.073490][T14341] kvm: pic: level sensitive irq not supported [ 645.073622][T14341] kvm: pic: non byte read [ 645.318568][T14341] kvm: pic: level sensitive irq not supported [ 645.318845][T14341] kvm: pic: non byte read [ 645.348348][T14359] loop3: detected capacity change from 0 to 7 [ 645.361345][T14359] Dev loop3: unable to read RDB block 7 [ 645.375358][T14359] loop3: unable to read partition table [ 645.395590][T14359] loop3: partition table beyond EOD, truncated [ 645.402680][T14359] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 645.414832][T14341] kvm: pic: level sensitive irq not supported [ 645.414952][T14341] kvm: pic: non byte read [ 645.731061][ T5695] usb 1-1: USB disconnect, device number 13 [ 645.802763][T14364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.839816][T14364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.077440][T14367] fuse: Bad value for 'fd' [ 646.827660][T14377] kAFS: unable to lookup cell 'ÿ' [ 646.884244][T14377] kAFS: unable to lookup cell '(,c¾Ì' [ 647.444464][T14385] binder: BINDER_SET_CONTEXT_MGR already set [ 647.528827][T14387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.549280][T14385] binder: 14381:14385 ioctl 4018620d 2000000000c0 returned -16 [ 647.593748][T14387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.117694][ T808] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 648.273558][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 648.309322][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.329970][ T808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.441302][ T808] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 648.471052][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.580057][ T808] usb 5-1: config 0 descriptor?? [ 648.586312][T14395] loop9: detected capacity change from 0 to 7 [ 648.605875][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.615223][ C0] buffer_io_error: 32 callbacks suppressed [ 648.615236][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.640331][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.662430][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.672103][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.686055][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.695363][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.712797][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.722150][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.740442][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.749681][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.761413][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.770703][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.794626][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.803874][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.811899][T14395] ldm_validate_partition_table(): Disk read failed. [ 648.845894][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.855165][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.864065][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 648.873302][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.882334][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.893440][T14395] Dev loop9: unable to read RDB block 0 [ 648.910923][T14395] loop9: unable to read partition table [ 648.924751][T14395] loop9: partition table beyond EOD, truncated [ 648.958037][T14395] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 649.629962][T14403] loop3: detected capacity change from 0 to 7 [ 649.661370][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.676425][T14403] Dev loop3: unable to read RDB block 7 [ 649.689048][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.712312][T14403] loop3: unable to read partition table [ 649.732704][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.745750][T14403] loop3: partition table beyond EOD, truncated [ 649.755288][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.778247][T14403] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 649.900710][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.933950][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.037899][T14409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.077708][T14410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.082509][T14409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.131946][T14410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.342832][T14409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.353586][T14409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.913384][ T5695] usb 5-1: USB disconnect, device number 15 [ 651.506208][T14420] fuse: Bad value for 'fd' [ 651.646343][T14425] FAULT_INJECTION: forcing a failure. [ 651.646343][T14425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.701148][T14425] CPU: 0 UID: 0 PID: 14425 Comm: syz.4.2284 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.701185][T14425] Tainted: [L]=SOFTLOCKUP [ 651.701194][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.701212][T14425] Call Trace: [ 651.701222][T14425] [ 651.701233][T14425] dump_stack_lvl+0xe8/0x150 [ 651.701267][T14425] should_fail_ex+0x412/0x560 [ 651.701305][T14425] _copy_from_iter+0x1d3/0x1670 [ 651.701337][T14425] ? irqentry_exit+0x218/0x760 [ 651.701375][T14425] ? lockdep_hardirqs_on+0x7a/0x110 [ 651.701408][T14425] ? irqentry_exit+0x218/0x760 [ 651.701440][T14425] ? trace_irq_disable+0x3b/0x140 [ 651.701480][T14425] ? __pfx__copy_from_iter+0x10/0x10 [ 651.701520][T14425] ? skb_put+0x11b/0x210 [ 651.701558][T14425] netlink_sendmsg+0x6c0/0xb40 [ 651.701728][T14425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.701764][T14425] ? aa_sock_msg_perm+0xf1/0x1b0 [ 651.701800][T14425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.701837][T14425] ____sys_sendmsg+0x972/0x9f0 [ 651.701905][T14425] ? __might_fault+0xaf/0x130 [ 651.701942][T14425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.701987][T14425] ? import_iovec+0x73/0xa0 [ 651.702025][T14425] ___sys_sendmsg+0x2a5/0x360 [ 651.702056][T14425] ? __lock_acquire+0x6b5/0x2cf0 [ 651.702088][T14425] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.702172][T14425] ? __fget_files+0x2a/0x420 [ 651.702199][T14425] ? __fget_files+0x3a0/0x420 [ 651.702238][T14425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 651.702275][T14425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.702319][T14425] ? __pfx_ksys_write+0x10/0x10 [ 651.702363][T14425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.702390][T14425] do_syscall_64+0x15f/0xf80 [ 651.702421][T14425] ? trace_irq_disable+0x3b/0x140 [ 651.702453][T14425] ? clear_bhb_loop+0x40/0x90 [ 651.702481][T14425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.702504][T14425] RIP: 0033:0x7f3843f9ce59 [ 651.702524][T14425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.702543][T14425] RSP: 002b:00007f3844eff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.702568][T14425] RAX: ffffffffffffffda RBX: 00007f3844215fa0 RCX: 00007f3843f9ce59 [ 651.702584][T14425] RDX: 0000000004000044 RSI: 0000200000000440 RDI: 0000000000000003 [ 651.702597][T14425] RBP: 00007f3844eff090 R08: 0000000000000000 R09: 0000000000000000 [ 651.702611][T14425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.702625][T14425] R13: 00007f3844216038 R14: 00007f3844215fa0 R15: 00007f384433fa48 [ 651.702660][T14425] [ 652.797539][T14434] pic_ioport_write: 80 callbacks suppressed [ 652.797562][T14434] kvm: pic: level sensitive irq not supported [ 652.817795][T14442] netlink: 'syz.2.2287': attribute type 62 has an invalid length. [ 652.846261][T14434] picdev_read: 80 callbacks suppressed [ 652.846281][T14434] kvm: pic: non byte read [ 653.078123][T14446] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 653.190226][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.221533][T14449] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2289'. [ 653.243563][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.284653][T14439] kvm: pic: level sensitive irq not supported [ 653.284741][T14439] kvm: pic: non byte read [ 654.169900][T14456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.265855][T14456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.802946][T14458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2292'. [ 654.847340][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 654.887241][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 655.465237][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 655.465258][ T30] audit: type=1326 audit(1778962931.865:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 655.519695][ T30] audit: type=1326 audit(1778962931.895:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 655.578714][ T30] audit: type=1326 audit(1778962931.905:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 655.622659][ T30] audit: type=1326 audit(1778962931.955:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 655.657693][ T30] audit: type=1326 audit(1778962931.955:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 655.699311][ T30] audit: type=1326 audit(1778962931.955:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 655.724182][ T5729] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 655.748390][ T30] audit: type=1326 audit(1778962931.955:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9fed39cbc2 code=0x7ffc0000 [ 655.820858][ T30] audit: type=1326 audit(1778962931.965:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9fed39cbc2 code=0x7ffc0000 [ 655.870690][ T30] audit: type=1326 audit(1778962931.965:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 655.915126][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.926848][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.959888][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 655.977426][ T30] audit: type=1326 audit(1778962931.965:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14470 comm="syz.5.2297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 656.109692][ T5729] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 656.153580][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.201456][ T5729] usb 1-1: config 0 descriptor?? [ 656.218518][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.316656][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.453514][T14490] FAULT_INJECTION: forcing a failure. [ 656.453514][T14490] name failslab, interval 1, probability 0, space 0, times 0 [ 656.478980][T14490] CPU: 1 UID: 0 PID: 14490 Comm: syz.5.2303 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.479026][T14490] Tainted: [L]=SOFTLOCKUP [ 656.479035][T14490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.479047][T14490] Call Trace: [ 656.479056][T14490] [ 656.479065][T14490] dump_stack_lvl+0xe8/0x150 [ 656.479098][T14490] should_fail_ex+0x412/0x560 [ 656.479124][T14490] should_failslab+0xa8/0x100 [ 656.479164][T14490] __kmalloc_cache_noprof+0x88/0x660 [ 656.479193][T14490] ? __pfx_stack_trace_save+0x10/0x10 [ 656.479257][T14490] ? rtnl_newlink+0x136/0x1bb0 [ 656.479341][T14490] rtnl_newlink+0x136/0x1bb0 [ 656.479368][T14490] ? kasan_save_track+0x3e/0x80 [ 656.479393][T14490] ? kasan_save_free_info+0x46/0x50 [ 656.479416][T14490] ? __kasan_slab_free+0x5c/0x80 [ 656.479437][T14490] ? dev_hard_start_xmit+0x2cd/0x830 [ 656.479527][T14490] ? __dev_queue_xmit+0x14d9/0x3950 [ 656.479556][T14490] ? __netlink_deliver_tap+0x5ad/0x850 [ 656.479584][T14490] ? netlink_deliver_tap+0x19c/0x1b0 [ 656.479604][T14490] ? netlink_unicast+0x730/0x8e0 [ 656.479620][T14490] ? netlink_sendmsg+0x813/0xb40 [ 656.479660][T14490] ? __pfx_rtnl_newlink+0x10/0x10 [ 656.479684][T14490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.479738][T14490] ? kasan_quarantine_put+0xbb/0x1f0 [ 656.479758][T14490] ? lockdep_hardirqs_on+0x7a/0x110 [ 656.479795][T14490] ? nlmon_xmit+0xb0/0x100 [ 656.479877][T14490] ? kmem_cache_free+0x182/0x650 [ 656.479912][T14490] ? __lock_acquire+0x6b5/0x2cf0 [ 656.479932][T14490] ? __dev_queue_xmit+0x2b6/0x3950 [ 656.479976][T14490] ? __local_bh_enable_ip+0xd0/0x130 [ 656.479997][T14490] ? lockdep_hardirqs_on+0x7a/0x110 [ 656.480035][T14490] ? __dev_queue_xmit+0x2b6/0x3950 [ 656.480062][T14490] ? __local_bh_enable_ip+0xd0/0x130 [ 656.480080][T14490] ? __dev_queue_xmit+0x2b6/0x3950 [ 656.480134][T14490] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 656.480173][T14490] ? __pfx_rtnl_newlink+0x10/0x10 [ 656.480201][T14490] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 656.480224][T14490] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 656.480242][T14490] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.480274][T14490] ? ref_tracker_free+0x693/0x840 [ 656.480354][T14490] ? __pfx_ref_tracker_free+0x10/0x10 [ 656.480373][T14490] ? __asan_memcpy+0x40/0x70 [ 656.480390][T14490] ? __skb_clone+0x63/0x7a0 [ 656.480433][T14490] netlink_rcv_skb+0x232/0x4b0 [ 656.480464][T14490] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.480491][T14490] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.480533][T14490] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.480554][T14490] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.480595][T14490] netlink_unicast+0x75c/0x8e0 [ 656.480633][T14490] netlink_sendmsg+0x813/0xb40 [ 656.480682][T14490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.480706][T14490] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.480744][T14490] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.480776][T14490] ____sys_sendmsg+0x972/0x9f0 [ 656.480805][T14490] ? __might_fault+0xaf/0x130 [ 656.480837][T14490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.480865][T14490] ? import_iovec+0x73/0xa0 [ 656.480907][T14490] ___sys_sendmsg+0x2a5/0x360 [ 656.480935][T14490] ? __lock_acquire+0x6b5/0x2cf0 [ 656.480960][T14490] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.481015][T14490] ? __fget_files+0x2a/0x420 [ 656.481046][T14490] ? __fget_files+0x3a0/0x420 [ 656.481082][T14490] __x64_sys_sendmsg+0x1bd/0x2a0 [ 656.481114][T14490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.481150][T14490] ? __pfx_ksys_write+0x10/0x10 [ 656.481178][T14490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.481210][T14490] do_syscall_64+0x15f/0xf80 [ 656.481239][T14490] ? trace_irq_disable+0x3b/0x140 [ 656.481268][T14490] ? clear_bhb_loop+0x40/0x90 [ 656.481294][T14490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.481309][T14490] RIP: 0033:0x7f9fed39ce59 [ 656.481324][T14490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.481348][T14490] RSP: 002b:00007f9fee2db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.481371][T14490] RAX: ffffffffffffffda RBX: 00007f9fed615fa0 RCX: 00007f9fed39ce59 [ 656.481386][T14490] RDX: 0000000004000044 RSI: 0000200000000440 RDI: 0000000000000003 [ 656.481399][T14490] RBP: 00007f9fee2db090 R08: 0000000000000000 R09: 0000000000000000 [ 656.481411][T14490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.481422][T14490] R13: 00007f9fed616038 R14: 00007f9fed615fa0 R15: 00007f9fed73fa48 [ 656.481453][T14490] [ 656.967518][ T5729] hid_parser_main: 35 callbacks suppressed [ 656.967609][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.072962][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.111829][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.164680][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.226369][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.269907][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.313880][T14503] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2305'. [ 657.317948][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.364269][T14505] fuse: Invalid rootmode [ 657.378685][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.411675][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.488393][ T5729] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 657.547795][ T5729] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 657.629409][ T5729] usb 1-1: USB disconnect, device number 14 [ 657.750669][T14513] fuse: Invalid rootmode [ 657.817297][T14510] fido_id[14510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 658.859577][T14533] loop8: detected capacity change from 0 to 7 [ 658.902409][T14533] Dev loop8: unable to read RDB block 7 [ 658.929461][T14533] loop8: unable to read partition table [ 658.958498][T14533] loop8: partition table beyond EOD, truncated [ 658.990447][T14533] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 659.131457][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2316'. [ 659.161213][T14536] loop8: detected capacity change from 0 to 8 [ 659.177215][T14539] FAULT_INJECTION: forcing a failure. [ 659.177215][T14539] name failslab, interval 1, probability 0, space 0, times 0 [ 659.200044][T14536] Dev loop8: unable to read RDB block 8 [ 659.210209][T14536] loop8: unable to read partition table [ 659.222448][T14539] CPU: 1 UID: 0 PID: 14539 Comm: syz.5.2316 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.222484][T14539] Tainted: [L]=SOFTLOCKUP [ 659.222492][T14539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 659.222505][T14539] Call Trace: [ 659.222516][T14539] [ 659.222526][T14539] dump_stack_lvl+0xe8/0x150 [ 659.222560][T14539] should_fail_ex+0x412/0x560 [ 659.222584][T14539] should_failslab+0xa8/0x100 [ 659.222630][T14539] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 659.222660][T14539] ? __alloc_skb+0x186/0x7d0 [ 659.222684][T14539] ? __alloc_skb+0x1d0/0x7d0 [ 659.222712][T14539] ? __local_bh_enable_ip+0xd0/0x130 [ 659.222731][T14539] __alloc_skb+0x1d0/0x7d0 [ 659.222750][T14539] ? netlink_ack_tlv_len+0x6c/0x210 [ 659.222794][T14539] netlink_ack+0x146/0xa50 [ 659.222826][T14539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 659.222853][T14539] ? ref_tracker_free+0x693/0x840 [ 659.222882][T14539] ? __pfx_ref_tracker_free+0x10/0x10 [ 659.222907][T14539] ? __asan_memcpy+0x40/0x70 [ 659.222929][T14539] ? __skb_clone+0x63/0x7a0 [ 659.222965][T14539] netlink_rcv_skb+0x2b6/0x4b0 [ 659.222994][T14539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 659.223030][T14539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 659.223070][T14539] ? netlink_deliver_tap+0x2e/0x1b0 [ 659.223113][T14539] ? netlink_deliver_tap+0x2e/0x1b0 [ 659.223146][T14539] netlink_unicast+0x75c/0x8e0 [ 659.223186][T14539] netlink_sendmsg+0x813/0xb40 [ 659.223214][T14539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.223253][T14539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 659.223283][T14539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 659.223313][T14539] ____sys_sendmsg+0x972/0x9f0 [ 659.223349][T14539] ? __might_fault+0xaf/0x130 [ 659.223377][T14539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.223422][T14539] ? import_iovec+0x73/0xa0 [ 659.223457][T14539] ___sys_sendmsg+0x2a5/0x360 [ 659.223483][T14539] ? __lock_acquire+0x6b5/0x2cf0 [ 659.223515][T14539] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.223578][T14539] ? __fget_files+0x2a/0x420 [ 659.223603][T14539] ? __fget_files+0x3a0/0x420 [ 659.223636][T14539] __x64_sys_sendmsg+0x1bd/0x2a0 [ 659.223672][T14539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 659.223700][T14539] ? __pfx_ksys_write+0x10/0x10 [ 659.223745][T14539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.223768][T14539] do_syscall_64+0x15f/0xf80 [ 659.223796][T14539] ? trace_irq_disable+0x3b/0x140 [ 659.223831][T14539] ? clear_bhb_loop+0x40/0x90 [ 659.223849][T14539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.223864][T14539] RIP: 0033:0x7f9fed39ce59 [ 659.223893][T14539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.223911][T14539] RSP: 002b:00007f9fee2db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.223933][T14539] RAX: ffffffffffffffda RBX: 00007f9fed615fa0 RCX: 00007f9fed39ce59 [ 659.223948][T14539] RDX: 0000000004000044 RSI: 0000200000000440 RDI: 0000000000000003 [ 659.223961][T14539] RBP: 00007f9fee2db090 R08: 0000000000000000 R09: 0000000000000000 [ 659.223974][T14539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.223991][T14539] R13: 00007f9fed616038 R14: 00007f9fed615fa0 R15: 00007f9fed73fa48 [ 659.224054][T14539] [ 659.549896][T14536] loop8: partition table beyond EOD, truncated [ 659.556273][T14536] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 660.135818][T14543] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 660.194360][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.240687][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.269361][T14547] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 660.325801][T14546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.390811][T14546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.576469][T14558] fuse: Invalid rootmode [ 660.896912][ T5686] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 661.033238][ T5686] usb 1-1: device descriptor read/64, error -71 [ 661.263085][T14571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.276607][T14571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.290955][T14571] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2323'. [ 661.303248][ T5686] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 661.453115][ T5686] usb 1-1: device descriptor read/64, error -71 [ 661.491017][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 661.518135][T14576] loop4: detected capacity change from 0 to 2640 [ 661.529798][T14576] buffer_io_error: 10 callbacks suppressed [ 661.529818][T14576] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.546625][T14576] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.557085][T14576] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.567944][ T5686] usb usb1-port1: attempt power cycle [ 661.577229][T14576] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.586080][T14576] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.595052][T14576] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.603580][T14576] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.611935][T14576] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.657601][T14577] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.690147][T14576] ldm_validate_partition_table(): Disk read failed. [ 661.702333][T14577] Buffer I/O error on dev loop4, logical block 0, async page read [ 661.735041][T14576] Dev loop4: unable to read RDB block 0 [ 661.748448][T14580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.766664][T14580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.780874][T14576] loop4: unable to read partition table [ 661.811249][T14576] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 661.933253][ T5686] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 661.973804][ T5686] usb 1-1: device descriptor read/8, error -71 [ 662.021807][ T4993] ldm_validate_partition_table(): Disk read failed. [ 662.057950][ T4993] Dev loop4: unable to read RDB block 0 [ 662.066349][ T4993] loop4: unable to read partition table [ 662.224161][ T5686] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 662.267035][ T5686] usb 1-1: device descriptor read/8, error -71 [ 662.296869][T14594] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2332'. [ 662.315674][T14594] 0·: renamed from hsr0 [ 662.329707][T14594] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 662.340688][T14594] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.352178][T14594] 0·: entered allmulticast mode [ 662.358970][T14594] hsr_slave_0: entered allmulticast mode [ 662.365703][T14594] hsr_slave_1: entered allmulticast mode [ 662.373766][T14594] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 662.395331][ T5686] usb usb1-port1: unable to enumerate USB device [ 662.438366][T14598] kAFS: unable to lookup cell 'ÿ' [ 662.460801][T14598] kAFS: unable to lookup cell '(,c¾Ì' [ 662.829611][T14608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.868319][T14608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.040802][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.070541][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.103852][T14614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.134793][T14614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.936321][T14618] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2339'. [ 663.988463][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.027320][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.531571][T14622] loop3: detected capacity change from 0 to 7 [ 664.546433][T14622] Dev loop3: unable to read RDB block 7 [ 664.554301][T14622] loop3: unable to read partition table [ 664.560936][T14622] loop3: partition table beyond EOD, truncated [ 664.580978][T14622] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 664.878684][T14629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.934442][T14629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.976868][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.999543][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.163395][ T5712] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 665.233023][ T5686] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 665.333138][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 665.345206][ T5712] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 665.353886][ T5712] usb 1-1: config 0 has no interface number 0 [ 665.360207][ T5712] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 665.371593][ T5712] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 665.389908][ T5712] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 665.402451][ T5712] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.418244][ T5686] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 665.426846][ T5686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.437814][ T5686] usb 5-1: config 0 has no interface number 0 [ 665.446375][ T5686] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 665.459727][ T5712] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 665.469663][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.478097][ T5686] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 665.489731][ T5712] usb 1-1: Product: syz [ 665.494537][ T5712] usb 1-1: Manufacturer: syz [ 665.499679][ T5712] usb 1-1: SerialNumber: syz [ 665.506763][ T5686] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 665.517410][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.526687][ T5712] usb 1-1: config 0 descriptor?? [ 665.532107][ T5686] usb 5-1: Product: syz [ 665.547189][ T5686] usb 5-1: Manufacturer: syz [ 665.558058][ T5686] usb 5-1: SerialNumber: syz [ 665.578365][ T5686] usb 5-1: config 0 descriptor?? [ 665.600102][T14638] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 665.687915][ T5686] vmk80xx 5-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 665.703685][ T5686] vmk80xx 5-1:0.6: probe with driver vmk80xx failed with error -22 [ 665.750449][ T5712] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 665.817881][ T808] usb 5-1: USB disconnect, device number 16 [ 666.103481][T14632] SET target dimension over the limit! [ 666.204050][ C0] iowarrior 1-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 666.222190][ T5686] usb 1-1: USB disconnect, device number 19 [ 666.444051][T14658] loop3: detected capacity change from 0 to 7 [ 666.451405][T14658] Dev loop3: unable to read RDB block 7 [ 666.461109][T14658] loop3: unable to read partition table [ 666.475940][T14658] loop3: partition table beyond EOD, truncated [ 666.494272][T14658] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 666.877785][T14672] syzkaller1: entered promiscuous mode [ 666.906213][T14672] syzkaller1: entered allmulticast mode [ 666.951415][T14676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.977132][T14676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.332062][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.348666][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.496638][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.513217][ T5686] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 667.526488][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.715771][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 667.736357][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 667.770198][ T5686] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 667.792138][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.825407][ T5686] usb 1-1: Product: syz [ 667.843436][ T5686] usb 1-1: Manufacturer: syz [ 667.865044][ T5686] usb 1-1: SerialNumber: syz [ 667.879584][ T5686] usb 1-1: config 0 descriptor?? [ 667.912401][T14692] fuse: Bad value for 'rootmode' [ 668.186844][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 668.263512][T14697] team0: Port device team_slave_0 removed [ 668.461184][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2367'. [ 668.504715][T14699] IPv6: NLM_F_CREATE should be specified when creating new route [ 668.520657][ T5686] usb 1-1: USB disconnect, device number 20 [ 668.588629][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 668.613294][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.641994][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.078704][T14706] FAULT_INJECTION: forcing a failure. [ 669.078704][T14706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 669.131286][T14706] CPU: 0 UID: 0 PID: 14706 Comm: syz.0.2369 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.131323][T14706] Tainted: [L]=SOFTLOCKUP [ 669.131331][T14706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.131345][T14706] Call Trace: [ 669.131353][T14706] [ 669.131362][T14706] dump_stack_lvl+0xe8/0x150 [ 669.131393][T14706] should_fail_ex+0x412/0x560 [ 669.131426][T14706] prepare_alloc_pages+0x22a/0x650 [ 669.131467][T14706] __alloc_frozen_pages_noprof+0x12f/0x380 [ 669.131503][T14706] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 669.131537][T14706] ? __pfx_policy_nodemask+0x10/0x10 [ 669.131578][T14706] alloc_pages_mpol+0x235/0x490 [ 669.131613][T14706] folio_alloc_mpol_noprof+0x39/0x160 [ 669.131647][T14706] vma_alloc_folio_noprof+0xe1/0x1e0 [ 669.131682][T14706] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 669.131725][T14706] do_wp_page+0x118a/0x4cc0 [ 669.131756][T14706] ? __pte_offset_map+0x29/0x240 [ 669.131791][T14706] ? __pfx_do_wp_page+0x10/0x10 [ 669.131812][T14706] ? do_raw_spin_lock+0x12b/0x2f0 [ 669.131845][T14706] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 669.131885][T14706] handle_mm_fault+0x151f/0x3170 [ 669.131926][T14706] ? handle_mm_fault+0xee/0x3170 [ 669.131958][T14706] ? __pfx_handle_mm_fault+0x10/0x10 [ 669.132003][T14706] ? lock_mm_and_find_vma+0xa7/0x340 [ 669.132035][T14706] do_user_addr_fault+0x75b/0x1340 [ 669.132076][T14706] exc_page_fault+0x6a/0xc0 [ 669.132108][T14706] asm_exc_page_fault+0x26/0x30 [ 669.132139][T14706] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 669.132158][T14706] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 669.132171][T14706] RSP: 0018:ffffc9000670fa08 EFLAGS: 00050206 [ 669.132185][T14706] RAX: ffffffff84b23f01 RBX: 0000000000000e40 RCX: 0000000000000140 [ 669.132196][T14706] RDX: 0000000000000000 RSI: ffff88803a0f8d40 RDI: 0000200000001000 [ 669.132206][T14706] RBP: ffffc9000670fb48 R08: ffff88803a0f8e7f R09: 1ffff1100741f1cf [ 669.132218][T14706] R10: dffffc0000000000 R11: ffffed100741f1d0 R12: 0000200000001140 [ 669.132229][T14706] R13: 00007ffffffff000 R14: ffff88803a0f8040 R15: 0000200000000300 [ 669.132245][T14706] ? _copy_to_user+0x1/0xb0 [ 669.132273][T14706] _copy_to_user+0x8a/0xb0 [ 669.132296][T14706] bpf_test_finish+0x191/0x6b0 [ 669.132383][T14706] ? __pfx_bpf_test_finish+0x10/0x10 [ 669.132404][T14706] ? eth_type_trans+0x484/0x7e0 [ 669.132478][T14706] bpf_prog_test_run_skb+0x1250/0x2260 [ 669.132515][T14706] ? __fget_files+0x3a0/0x420 [ 669.132533][T14706] ? __fget_files+0x2a/0x420 [ 669.132554][T14706] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 669.132575][T14706] bpf_prog_test_run+0x2c7/0x340 [ 669.132598][T14706] __sys_bpf+0x643/0x950 [ 669.132623][T14706] ? __pfx___sys_bpf+0x10/0x10 [ 669.132659][T14706] ? ksys_write+0x242/0x270 [ 669.132682][T14706] ? __pfx_ksys_write+0x10/0x10 [ 669.132706][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.132722][T14706] __x64_sys_bpf+0x7c/0x90 [ 669.132743][T14706] do_syscall_64+0x15f/0xf80 [ 669.132765][T14706] ? trace_irq_disable+0x3b/0x140 [ 669.132788][T14706] ? clear_bhb_loop+0x40/0x90 [ 669.132806][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.132821][T14706] RIP: 0033:0x7f8e4d99ce59 [ 669.132857][T14706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.132872][T14706] RSP: 002b:00007f8e4e86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 669.132892][T14706] RAX: ffffffffffffffda RBX: 00007f8e4dc15fa0 RCX: 00007f8e4d99ce59 [ 669.132912][T14706] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 669.132922][T14706] RBP: 00007f8e4e86e090 R08: 0000000000000000 R09: 0000000000000000 [ 669.132931][T14706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.132939][T14706] R13: 00007f8e4dc16038 R14: 00007f8e4dc15fa0 R15: 00007f8e4dd3fa48 [ 669.132963][T14706] [ 670.267597][T14712] loop8: detected capacity change from 0 to 7 [ 670.289828][T14712] Dev loop8: unable to read RDB block 7 [ 670.304110][T14712] loop8: unable to read partition table [ 670.321912][T14712] loop8: partition table beyond EOD, truncated [ 670.337051][T14712] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 670.493473][ T5712] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 670.579712][T14714] fuse: fd is not a fuse device [ 670.633227][ T5712] usb 5-1: device descriptor read/64, error -71 [ 670.883227][ T5712] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 671.056520][ T5712] usb 5-1: device descriptor read/64, error -71 [ 671.089439][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2376'. [ 671.157371][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.193973][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.204359][ T5712] usb usb5-port1: attempt power cycle [ 671.302012][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.303471][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.315353][T14730] netlink: 'syz.0.2379': attribute type 46 has an invalid length. [ 671.563359][ T5712] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 671.615265][ T5712] usb 5-1: device descriptor read/8, error -71 [ 671.798845][T14740] loop8: detected capacity change from 0 to 7 [ 671.824861][T14740] Dev loop8: unable to read RDB block 7 [ 671.845623][T14740] loop8: unable to read partition table [ 671.864750][T14740] loop8: partition table beyond EOD, truncated [ 671.875255][T14740] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 671.886183][ T5712] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 671.906938][T14742] loop3: detected capacity change from 0 to 7 [ 671.937873][T14742] Dev loop3: unable to read RDB block 7 [ 671.954078][ T5712] usb 5-1: device descriptor read/8, error -71 [ 671.961411][T14742] loop3: unable to read partition table [ 671.976961][T14742] loop3: partition table beyond EOD, truncated [ 672.000274][T14742] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 672.084365][ T5712] usb usb5-port1: unable to enumerate USB device [ 672.535192][T14751] batadv0: entered promiscuous mode [ 672.552970][T14751] x_tables: duplicate underflow at hook 3 [ 672.589567][T14755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.614574][T14755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.724880][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 672.724899][ T30] audit: type=1326 audit(1778962949.125:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.5.2391" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fed39ce59 code=0x0 [ 672.904267][T14766] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 672.984170][T14770] loop8: detected capacity change from 0 to 7 [ 672.994793][T14770] Dev loop8: unable to read RDB block 7 [ 673.004592][T14770] loop8: unable to read partition table [ 673.016686][T14770] loop8: partition table beyond EOD, truncated [ 673.034486][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2394'. [ 673.043876][T14770] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 673.060936][T14769] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 673.096035][T14769] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 673.257989][T14775] loop3: detected capacity change from 0 to 7 [ 673.275793][T14775] Dev loop3: unable to read RDB block 7 [ 673.291900][T14775] loop3: unable to read partition table [ 673.302728][T14766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.317595][T14775] loop3: partition table beyond EOD, truncated [ 673.326199][T14775] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 673.404546][T14773] bond2: (slave gretap1): making interface the new active one [ 673.464472][T14773] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 673.484455][T14772] macvlan0: entered promiscuous mode [ 673.491193][T14772] macvlan0: entered allmulticast mode [ 673.497853][T14772] bond2: entered promiscuous mode [ 673.503317][T14772] gretap1: entered promiscuous mode [ 673.514006][T14772] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 673.528063][T14772] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 673.541591][T14772] bond2: left promiscuous mode [ 673.548187][T14772] gretap1: left promiscuous mode [ 673.715611][T14778] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.742673][T14784] --map-set only usable from mangle table [ 673.756866][T14778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.838463][T14778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.849379][T14778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.867135][T14778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.879258][T14778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.895712][T14778] veth1_vlan: left promiscuous mode [ 673.910773][T14778] veth0_vlan: left promiscuous mode [ 673.919700][T14778] veth0_vlan: entered promiscuous mode [ 673.930101][T14778] veth1_vlan: entered promiscuous mode [ 673.944697][T14778] veth1_macvtap: left promiscuous mode [ 673.951870][T14778] veth0_macvtap: left promiscuous mode [ 673.959401][T14778] veth0_macvtap: entered promiscuous mode [ 673.967137][T14778] veth1_macvtap: entered promiscuous mode [ 673.999757][T14778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.007429][ T5625] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 674.020836][T14778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.030190][T14778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.040265][T14778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.057757][T14778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.131584][T14778] batadv_slave_1: entered promiscuous mode [ 674.141482][T14778] batadv_slave_1: entered allmulticast mode [ 674.166611][ T5625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.192103][ T5625] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.222287][ T5625] usb 5-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 674.257253][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.301012][ T5625] usb 5-1: config 0 descriptor?? [ 674.457042][T14799] loop4: detected capacity change from 0 to 2640 [ 674.479242][T14799] buffer_io_error: 29 callbacks suppressed [ 674.479262][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.501722][ T8327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.524339][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.578896][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.618493][ T30] audit: type=1326 audit(1778962951.015:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14798 comm="syz.3.2402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b7db9ce59 code=0x0 [ 674.686927][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.731323][ T8327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.739193][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.830595][ T8327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.841826][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.852578][ T5695] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 674.936004][ T8327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.951648][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 675.024835][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 675.080132][T14799] ldm_validate_partition_table(): Disk read failed. [ 675.110015][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.129262][ T5885] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 675.150527][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.164681][ T5695] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 675.180540][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 675.207629][ T5625] usb 5-1: string descriptor 0 read error: -71 [ 675.254415][ T5625] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 675.262617][T14799] Buffer I/O error on dev loop4, logical block 0, async page read [ 675.299235][ T5625] usb 5-1: USB disconnect, device number 21 [ 675.327933][T14799] Dev loop4: unable to read RDB block 0 [ 675.418733][T14799] loop4: unable to read partition table [ 675.485446][T14799] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 675.585671][T14816] loop8: detected capacity change from 0 to 7 [ 675.605750][T14816] Dev loop8: unable to read RDB block 7 [ 675.630068][T14816] loop8: unable to read partition table [ 675.647443][T14816] loop8: partition table beyond EOD, truncated [ 675.668085][T14816] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 675.832734][ T4993] ldm_validate_partition_table(): Disk read failed. [ 675.858835][ T4993] Dev loop4: unable to read RDB block 0 [ 675.879062][ T4993] loop4: unable to read partition table [ 675.991077][T14825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2410'. [ 676.012326][T14823] loop3: detected capacity change from 0 to 7 [ 676.036556][T14825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2410'. [ 676.053948][T14823] Dev loop3: unable to read RDB block 7 [ 676.078647][T14823] loop3: unable to read partition table [ 676.102289][T14823] loop3: partition table beyond EOD, truncated [ 676.142701][T14823] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 676.173970][ T8327] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 676.221513][ T8327] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 676.340527][ T4993] ldm_validate_partition_table(): Disk read failed. [ 676.353754][T14830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.367393][ T4993] Dev loop4: unable to read RDB block 0 [ 676.382377][T14830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.393944][ T4993] loop4: unable to read partition table [ 676.568717][T14830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.692665][ T8333] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 677.216908][ T894] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 677.561084][T14847] kvm: pic: level sensitive irq not supported [ 677.561202][T14847] kvm: pic: non byte read [ 677.631069][T14847] kvm: pic: level sensitive irq not supported [ 677.631174][T14847] kvm: pic: non byte read [ 677.666538][T14847] kvm: pic: level sensitive irq not supported [ 677.666638][T14847] kvm: pic: non byte read [ 677.707253][T14847] kvm: pic: level sensitive irq not supported [ 677.707363][T14847] kvm: pic: non byte read [ 677.726649][T14847] kvm: pic: level sensitive irq not supported [ 677.726753][T14847] kvm: pic: non byte read [ 677.760142][T14847] kvm: pic: level sensitive irq not supported [ 677.765958][T14847] kvm: pic: non byte read [ 677.791309][T14847] kvm: pic: level sensitive irq not supported [ 677.791412][T14847] kvm: pic: non byte read [ 677.858637][T14847] kvm: pic: level sensitive irq not supported [ 677.858727][T14847] kvm: pic: non byte read [ 678.045370][T14851] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.086715][T14847] kvm: pic: level sensitive irq not supported [ 678.094982][T14847] kvm: pic: non byte read [ 678.123418][T14847] kvm: pic: level sensitive irq not supported [ 678.123493][T14847] kvm: pic: non byte read [ 678.323309][ T894] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 678.369038][T14857] loop8: detected capacity change from 0 to 7 [ 678.391838][T14857] Dev loop8: unable to read RDB block 7 [ 678.409281][T14857] loop8: unable to read partition table [ 678.418081][T14857] loop8: partition table beyond EOD, truncated [ 678.432171][T14857] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 678.495393][ T894] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 678.528521][ T894] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 678.580719][ T894] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 678.601287][ T894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.696824][T14855] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 678.748268][ T894] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 678.770903][T14862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.771295][T14862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.931005][T14863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.931382][T14863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.168404][ T894] usb 5-1: USB disconnect, device number 22 [ 679.606650][T14865] loop3: detected capacity change from 0 to 7 [ 679.672174][T14865] Dev loop3: unable to read RDB block 7 [ 679.701057][T14865] loop3: unable to read partition table [ 679.730413][T14865] loop3: partition table beyond EOD, truncated [ 679.753688][T14865] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 680.173374][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 680.386068][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2427'. [ 680.483058][ T808] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 680.621902][T14881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.663146][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 680.675312][T14881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.690326][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.715309][ T808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 680.734193][ T808] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 680.735531][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 680.774476][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.840649][ T808] usb 5-1: config 0 descriptor?? [ 680.841386][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.916269][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.063150][T14891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.090561][T14891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.291375][T14891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.318994][T14891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.628218][ T9] hid_parser_main: 5 callbacks suppressed [ 681.632760][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.655110][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.666250][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.677507][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.687231][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.697292][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.705933][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.715022][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.724583][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.738481][ T9] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 681.777551][ T9] hid-generic 00A0:0006:0003.0025: hidraw0: HID v0.05 Device [syz0] on syz0 [ 681.895000][ T808] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 682.094605][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 682.108914][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 682.140361][ T808] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 682.161233][ T808] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 682.185073][ T808] usb 1-1: config 0 has no interface number 0 [ 682.191529][ T808] usb 1-1: config 0 interface 31 has no altsetting 0 [ 682.205079][ T808] usb 1-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=cc.d6 [ 682.222216][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.257494][ T808] usb 1-1: Product: syz [ 682.287325][ T808] usb 1-1: Manufacturer: syz [ 682.300980][ T808] usb 1-1: SerialNumber: syz [ 682.325041][ T808] usb 1-1: config 0 descriptor?? [ 682.544475][ T808] rndis_host 1-1:0.31: invalid descriptor buffer length [ 682.563223][T14903] loop4: detected capacity change from 0 to 2640 [ 682.576307][ T808] rndis_host 1-1:0.31: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 682.593547][T14903] buffer_io_error: 53 callbacks suppressed [ 682.593565][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.605812][ T808] cdc_acm 1-1:0.31: invalid descriptor buffer length [ 682.661055][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.683614][ T808] usb 1-1: USB disconnect, device number 21 [ 682.740576][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.775522][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.793266][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.810299][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.830208][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.854537][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.878897][T14903] ldm_validate_partition_table(): Disk read failed. [ 682.912574][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.938795][T14903] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.948318][T14903] Dev loop4: unable to read RDB block 0 [ 682.956657][T14903] loop4: unable to read partition table [ 682.964966][T14903] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 683.020548][ T4993] ldm_validate_partition_table(): Disk read failed. [ 683.046797][ T4993] Dev loop4: unable to read RDB block 0 [ 683.065364][ T4993] loop4: unable to read partition table [ 683.289733][ T894] usb 5-1: USB disconnect, device number 23 [ 683.349493][T14909] loop3: detected capacity change from 0 to 7 [ 683.388336][T14909] Dev loop3: unable to read RDB block 7 [ 683.415014][T14909] loop3: unable to read partition table [ 683.451489][T14909] loop3: partition table beyond EOD, truncated [ 683.473783][T14909] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 683.516242][T14915] netlink: 'syz.4.2436': attribute type 15 has an invalid length. [ 684.169812][T14930] loop5: detected capacity change from 0 to 7 [ 684.210995][T14930] Dev loop5: unable to read RDB block 7 [ 684.223900][T14930] loop5: AHDI p1 p2 p3 [ 684.229032][T14930] loop5: partition table partially beyond EOD, truncated [ 684.240270][T14930] loop5: p1 start 1601398130 is beyond EOD, truncated [ 684.251980][T14930] loop5: p2 start 1702059890 is beyond EOD, truncated [ 684.592007][T14937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.604508][T14937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.605578][ T5729] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 684.716753][T14945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.726897][T14941] pic_ioport_write: 168 callbacks suppressed [ 684.726918][T14941] kvm: pic: level sensitive irq not supported [ 684.741394][T14945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.756377][T14941] picdev_read: 168 callbacks suppressed [ 684.756395][T14941] kvm: pic: non byte read [ 684.784885][T14941] kvm: pic: level sensitive irq not supported [ 684.784973][T14941] kvm: pic: non byte read [ 684.805399][ T5729] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 684.829393][T14941] kvm: pic: level sensitive irq not supported [ 684.829449][T14941] kvm: pic: non byte read [ 684.840431][ T5729] usb 5-1: config 0 has no interface number 0 [ 684.849292][ T5729] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 684.865654][T14941] kvm: pic: level sensitive irq not supported [ 684.865874][T14941] kvm: pic: non byte read [ 684.882562][T14941] kvm: pic: level sensitive irq not supported [ 684.882657][T14941] kvm: pic: non byte read [ 684.901622][T14941] kvm: pic: level sensitive irq not supported [ 684.901715][T14941] kvm: pic: non byte read [ 684.913433][T14941] kvm: pic: level sensitive irq not supported [ 684.913516][T14941] kvm: pic: non byte read [ 684.922420][ T5729] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.936990][T14941] kvm: pic: level sensitive irq not supported [ 684.937067][T14941] kvm: pic: non byte read [ 684.948652][T14941] kvm: pic: level sensitive irq not supported [ 684.948725][T14941] kvm: pic: non byte read [ 684.959700][T14941] kvm: pic: level sensitive irq not supported [ 684.959784][T14941] kvm: pic: non byte read [ 684.966680][ T5729] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 685.005903][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.040528][ T5729] usb 5-1: config 0 interface 1 has no altsetting 0 [ 685.060975][ T5729] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 685.109936][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.119134][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.151816][ T5729] usb 5-1: config 0 descriptor?? [ 685.779412][ T5729] usbhid 5-1:0.1: can't add hid device: -71 [ 685.792877][ T5729] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 685.827346][ T5729] usb 5-1: USB disconnect, device number 24 [ 685.938266][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.945285][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.953087][ T30] audit: type=1326 audit(1778962962.345:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.5.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 686.001229][ T30] audit: type=1326 audit(1778962962.385:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.5.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 686.096716][ T30] audit: type=1326 audit(1778962962.385:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.5.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 686.157576][ T30] audit: type=1326 audit(1778962962.385:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.5.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 686.222389][ T30] audit: type=1326 audit(1778962962.385:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.5.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 686.280316][ T30] audit: type=1326 audit(1778962962.385:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.5.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 686.348142][ T30] audit: type=1326 audit(1778962962.395:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.5.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fed39ce59 code=0x7ffc0000 [ 687.076209][ T5729] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 687.242987][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 687.252620][ T5729] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 687.261464][ T5729] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 687.272091][ T5729] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 687.285095][ T5729] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 687.300861][ T5729] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.319058][ T5729] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 687.333983][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.677192][T14984] fuse: Unknown parameter '0x00000000000000040x0000000000000005' [ 687.779166][ T5729] usb 5-1: USB disconnect, device number 25 [ 687.876104][T14989] loop3: detected capacity change from 0 to 7 [ 687.885109][T14989] Dev loop3: unable to read RDB block 7 [ 687.890806][T14989] loop3: unable to read partition table [ 687.897441][T14989] loop3: partition table beyond EOD, truncated [ 687.905984][T14989] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 688.470390][T14999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.493043][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 688.504254][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 688.546011][T15003] kAFS: unable to lookup cell 'ÿ' [ 688.553500][T15003] kAFS: unable to lookup cell '(,c¾Ì' [ 688.816856][T15011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.838254][T15011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.633521][T15025] loop3: detected capacity change from 0 to 7 [ 689.641373][T15025] Dev loop3: unable to read RDB block 7 [ 689.654187][T15025] loop3: unable to read partition table [ 689.671595][T15025] loop3: partition table beyond EOD, truncated [ 689.695096][T15025] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 689.955901][T15034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.036404][T15038] loop8: detected capacity change from 0 to 7 [ 690.067952][T15038] Dev loop8: unable to read RDB block 7 [ 690.099141][T15038] loop8: unable to read partition table [ 690.114334][T15038] loop8: partition table beyond EOD, truncated [ 690.122326][T15038] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 690.499522][T15047] kAFS: unable to lookup cell 'ÿ' [ 690.508459][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.522149][T15047] kAFS: unable to lookup cell '(,c¾Ì' [ 690.544861][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.706045][T15050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.748428][T15050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.887376][T15053] macvtap1: entered promiscuous mode [ 690.895595][T15053] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 690.919664][T15055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.943434][T15055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.037377][T15056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.040016][T15056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.168567][T15058] loop3: detected capacity change from 0 to 7 [ 691.187032][T15058] Dev loop3: unable to read RDB block 7 [ 691.199444][T15058] loop3: unable to read partition table [ 691.205699][T15058] loop3: partition table beyond EOD, truncated [ 691.216965][T15058] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 691.502648][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2481'. [ 691.525694][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2481'. [ 691.610492][T15060] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 691.624223][T15060] bond2 (unregistering): Released all slaves [ 691.734387][T15069] pic_ioport_write: 168 callbacks suppressed [ 691.734405][T15069] kvm: pic: level sensitive irq not supported [ 691.741506][T15069] picdev_read: 168 callbacks suppressed [ 691.741522][T15069] kvm: pic: non byte read [ 691.780107][T15069] kvm: pic: level sensitive irq not supported [ 691.780169][T15069] kvm: pic: non byte read [ 691.791933][ T5729] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 691.817675][T15069] kvm: pic: level sensitive irq not supported [ 691.817812][T15069] kvm: pic: non byte read [ 691.866783][T15069] kvm: pic: level sensitive irq not supported [ 691.866919][T15069] kvm: pic: non byte read [ 691.878911][T15069] kvm: pic: level sensitive irq not supported [ 691.898232][T15069] kvm: pic: non byte read [ 691.918994][T15073] rdma_op ffff88807ae7d9f0 conn xmit_rdma 0000000000000000 [ 691.929571][T15069] kvm: pic: level sensitive irq not supported [ 691.929647][T15069] kvm: pic: non byte read [ 691.949285][T15073] netlink: 'syz.3.2486': attribute type 10 has an invalid length. [ 691.963155][ T5729] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 691.973839][ T5729] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 691.982258][T15075] loop8: detected capacity change from 0 to 7 [ 691.992483][T15073] geneve1: entered promiscuous mode [ 692.001242][T15075] Dev loop8: unable to read RDB block 7 [ 692.009327][T15069] kvm: pic: level sensitive irq not supported [ 692.009381][T15069] kvm: pic: non byte read [ 692.026509][ T5729] usb 1-1: Product: syz [ 692.027599][T15075] loop8: unable to read partition table [ 692.037773][T15075] loop8: partition table beyond EOD, truncated [ 692.050793][T15075] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 692.061706][T15069] kvm: pic: level sensitive irq not supported [ 692.061811][T15069] kvm: pic: non byte read [ 692.069471][ T5729] usb 1-1: Manufacturer: syz [ 692.092243][T15069] kvm: pic: level sensitive irq not supported [ 692.092330][T15069] kvm: pic: non byte read [ 692.109007][ T5729] usb 1-1: SerialNumber: syz [ 692.126507][T15073] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 692.155989][ T5729] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 692.168624][T15069] kvm: pic: level sensitive irq not supported [ 692.168729][T15069] kvm: pic: non byte read [ 692.218485][ T5729] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 692.256698][ T5729] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 692.302960][ T5729] usb 1-1: media controller created [ 692.458934][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 692.540054][T15079] fuse: Unknown parameter 'user_id00000000000000000000' [ 692.641940][ T5729] usb 1-1: selecting invalid altsetting 1 [ 692.669678][ T5729] set interface failed [ 692.670265][ T5729] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 692.731328][ T5729] error writing reg: 0xff, val: 0x00 [ 692.885899][ T5729] dvb_usb_mxl111sf 1-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 692.997602][ T5729] usb 1-1: USB disconnect, device number 23 [ 693.200016][T15095] kAFS: unable to lookup cell 'ÿ' [ 693.225344][T15095] kAFS: unable to lookup cell '(,c¾Ì' [ 693.610675][T15101] loop3: detected capacity change from 0 to 7 [ 693.658806][T15101] Dev loop3: unable to read RDB block 7 [ 693.688613][T15101] loop3: unable to read partition table [ 693.706030][T15101] loop3: partition table beyond EOD, truncated [ 693.725746][T15101] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 694.141542][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'. [ 694.481275][ T30] audit: type=1800 audit(1778962970.875:1731): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2498" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 694.806409][T15137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2501'. [ 694.913295][ T5695] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 695.104118][ T5695] usb 1-1: Using ep0 maxpacket: 16 [ 695.137645][ T5695] usb 1-1: config 0 has no interfaces? [ 695.165490][ T5695] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 695.197764][ T5695] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 695.228148][ T5695] usb 1-1: Manufacturer: syz [ 695.238785][T15146] fuse: Unknown parameter 'user_id00000000000000000000' [ 695.281977][T15150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.299098][ T5695] usb 1-1: config 0 descriptor?? [ 696.293404][T15160] loop3: detected capacity change from 0 to 7 [ 696.318065][T15160] Dev loop3: unable to read RDB block 7 [ 696.332477][ T1017] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.351042][T15160] loop3: unable to read partition table [ 696.373572][ T1017] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.384829][T15160] loop3: partition table beyond EOD, truncated [ 696.406442][T15160] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 696.749223][ T144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.790220][ T144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.845594][ T30] audit: type=1326 audit(1778962973.245:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 696.981646][ T30] audit: type=1326 audit(1778962973.245:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 697.100532][ T30] audit: type=1326 audit(1778962973.245:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 697.188848][ T30] audit: type=1326 audit(1778962973.275:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 697.311198][ T30] audit: type=1326 audit(1778962973.275:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 697.410962][ T30] audit: type=1326 audit(1778962973.275:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 697.436237][ T30] audit: type=1326 audit(1778962973.275:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 697.466478][ T30] audit: type=1326 audit(1778962973.275:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 697.547037][ T30] audit: type=1326 audit(1778962973.275:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15163 comm="syz.4.2507" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3843f9ce59 code=0x7ffc0000 [ 697.655129][T15183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2510'. [ 697.781204][T15189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.816917][T15189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.887307][T15189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.940897][T15189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.028509][T15189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.141138][T15189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.161579][T15197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.172425][T15198] syzkaller1: entered promiscuous mode [ 698.194429][T15198] syzkaller1: entered allmulticast mode [ 698.210894][T15197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.335925][T15201] fuse: Unknown parameter 'user_id00000000000000000000' [ 698.431748][ T894] usb 1-1: USB disconnect, device number 24 [ 698.603762][T15210] loop3: detected capacity change from 0 to 7 [ 698.634874][T15210] Dev loop3: unable to read RDB block 7 [ 698.659183][T15210] loop3: unable to read partition table [ 698.685082][T15210] loop3: partition table beyond EOD, truncated [ 698.716851][T15210] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 698.876091][T15217] loop8: detected capacity change from 0 to 7 [ 698.900819][T15217] Dev loop8: unable to read RDB block 7 [ 698.926071][T15217] loop8: unable to read partition table [ 698.953457][T15217] loop8: partition table beyond EOD, truncated [ 698.993565][T15217] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 699.413083][T15239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.455165][T15239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.498217][T15239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.542355][T15239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.767143][T15254] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2528'. [ 700.051678][T15261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.103792][T15261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.148801][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 700.377367][ T894] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 700.580736][ T894] usb 5-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 700.606827][T15277] loop3: detected capacity change from 0 to 7 [ 700.615170][T15279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.615580][ T894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.641421][T15279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.655029][ T894] usb 5-1: Product: syz [ 700.659719][T15277] Dev loop3: unable to read RDB block 7 [ 700.675573][ T894] usb 5-1: Manufacturer: â°‰ [ 700.682172][T15277] loop3: unable to read partition table [ 700.692217][ T894] usb 5-1: SerialNumber: syz [ 700.699715][T15277] loop3: partition table beyond EOD, truncated [ 700.722647][T15277] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 700.972370][T15290] loop8: detected capacity change from 0 to 7 [ 700.976915][T15290] Dev loop8: unable to read RDB block 7 [ 700.977365][T15290] loop8: unable to read partition table [ 700.977688][T15290] loop8: partition table beyond EOD, truncated [ 700.977723][T15290] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 701.268172][T15297] fuse: Bad value for 'fd' [ 701.537099][ T894] usb 5-1: USB disconnect, device number 26 [ 701.634062][ T5686] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 701.674402][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.803347][ T5686] usb 1-1: device descriptor read/64, error -71 [ 702.137322][ T5686] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 702.323352][ T5686] usb 1-1: device descriptor read/64, error -71 [ 702.474964][ T5686] usb usb1-port1: attempt power cycle [ 702.863766][ T5686] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 702.931155][ T5686] usb 1-1: device descriptor read/8, error -71 [ 703.214911][ T5686] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 703.274043][ T5686] usb 1-1: device descriptor read/8, error -71 [ 703.410064][ T5686] usb usb1-port1: unable to enumerate USB device [ 703.931252][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.012375][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.112751][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.177045][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.427300][ T30] audit: type=1326 audit(1778962980.825:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90c5f9ce59 code=0x0 [ 704.493322][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 704.553112][ T30] audit: type=1326 audit(1778962980.915:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c5f9ce59 code=0x7ffc0000 [ 704.604919][T15350] loop3: detected capacity change from 0 to 7 [ 704.626380][ T30] audit: type=1326 audit(1778962980.925:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c5f9ce59 code=0x7ffc0000 [ 704.663116][T15350] Dev loop3: unable to read RDB block 7 [ 704.669058][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 704.683469][T15350] loop3: unable to read partition table [ 704.690836][ T30] audit: type=1326 audit(1778962980.925:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c5f9ce59 code=0x7ffc0000 [ 704.726993][T15350] loop3: partition table beyond EOD, truncated [ 704.747187][T15350] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 704.792123][ T30] audit: type=1326 audit(1778962980.925:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f90c5f9ce59 code=0x7ffc0000 [ 704.905348][ T30] audit: type=1326 audit(1778962980.975:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c5f9ce59 code=0x7ffc0000 [ 705.031624][ T30] audit: type=1326 audit(1778962980.975:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90c5f9cbc2 code=0x7ffc0000 [ 705.135555][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 705.162261][ T30] audit: type=1326 audit(1778962980.975:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f90c5f9cc57 code=0x7ffc0000 [ 705.338223][T15366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.359449][ T30] audit: type=1326 audit(1778962980.985:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f90c5f59b51 code=0x7ffc0000 [ 705.387142][T15366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.512092][ T30] audit: type=1326 audit(1778962980.985:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.2.2543" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f90c5f9dc49 code=0x7ffc0000 [ 705.626076][T15362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.695231][T15362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.161977][T15377] fuse: Bad value for 'fd' [ 708.230427][T15412] misc userio: The device must be registered before sending interrupts [ 708.265799][T15414] tipc: Enabling of bearer rejected, failed to enable media [ 708.300286][T15417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2557'. [ 708.361810][T15412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.459276][T15412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.900755][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.955460][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.213948][ T894] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 709.429331][ T894] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 709.471351][ T894] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 709.510511][ T894] usb 5-1: Product: syz [ 709.531841][ T894] usb 5-1: Manufacturer: syz [ 709.549916][T15430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.577363][ T894] usb 5-1: SerialNumber: syz [ 709.624434][ T894] usb 5-1: config 0 descriptor?? [ 709.632789][T15430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.935198][ T9] usb 5-1: USB disconnect, device number 27 [ 710.984112][ T894] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 711.166494][T15444] pic_ioport_write: 79 callbacks suppressed [ 711.166519][T15444] kvm: pic: level sensitive irq not supported [ 711.198116][ T894] usb 5-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 711.223290][T15444] picdev_read: 79 callbacks suppressed [ 711.223312][T15444] kvm: pic: non byte read [ 711.241503][ T894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.262913][ T894] usb 5-1: Product: syz [ 711.278946][ T894] usb 5-1: Manufacturer: â°‰ [ 711.289862][ T894] usb 5-1: SerialNumber: syz [ 711.950442][ T894] usb 5-1: USB disconnect, device number 28 [ 712.491187][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.563550][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.876921][T15463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.922194][T15463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.126446][T15467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.260774][T15467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.533121][ T808] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 713.571185][T15471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.613635][T15471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.703144][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 713.726144][ T808] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 713.750967][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 713.776019][ T808] usb 5-1: Product: syz [ 713.790546][ T808] usb 5-1: Manufacturer: syz [ 713.800641][ T808] usb 5-1: SerialNumber: syz [ 713.840033][ T808] usb 5-1: config 0 descriptor?? [ 713.876222][ T808] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 714.061848][ T808] gspca_sn9c2028: read1 error -32 [ 714.083139][ T808] gspca_sn9c2028: read1 error -32 [ 714.090192][T15469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.120147][T15469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.379154][T15473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.436705][T15473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.580609][ T808] usb 5-1: USB disconnect, device number 29 [ 714.876355][T15481] netlink: 'syz.4.2575': attribute type 10 has an invalid length. [ 715.517617][T15489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.553144][T15489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.686242][T15494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.686869][T15494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.791692][T15490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.792250][T15490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.793764][ T894] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 715.959513][T15497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.976913][ T894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 716.004830][ T894] usb 5-1: config 1 interface 0 has no altsetting 0 [ 716.025785][T15497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.061978][ T894] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 716.081883][ T894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.097370][ T894] usb 5-1: Product: syz [ 716.108722][ T894] usb 5-1: Manufacturer: syz [ 716.127596][ T894] usb 5-1: SerialNumber: syz [ 716.859250][T15505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.928620][T15505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.036277][ T894] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input72 [ 717.096339][T15512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.118155][T15512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.142592][ T4978] bcm5974 5-1:1.0: could not read from device [ 717.174458][ T4978] bcm5974 5-1:1.0: could not read from device [ 717.198979][T15510] binder: 15508:15510 ioctl 5100 0 returned -22 [ 717.226222][ T894] usb 5-1: USB disconnect, device number 30 [ 717.235044][ T4978] bcm5974 5-1:1.0: could not read from device [ 717.589970][T15518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.635602][T15518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.982120][T15525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.018772][T15525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.143957][T15527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.179776][T15527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.582994][ T5729] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 718.785119][ T5729] usb 5-1: not running at top speed; connect to a high speed hub [ 718.816199][ T5729] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 718.884744][ T5729] usb 5-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 718.947286][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.977290][ T5729] usb 5-1: Product: syz [ 718.985678][T15540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.994303][ T5729] usb 5-1: Manufacturer: syz [ 718.999157][ T5729] usb 5-1: SerialNumber: syz [ 719.005580][T15540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.111154][T15543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.111617][T15543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.189501][T15546] raw_sendmsg: syz.2.2593 forgot to set AF_INET. Fix it! [ 719.205689][T15548] netlink: 'syz.0.2594': attribute type 4 has an invalid length. [ 719.219943][T15549] netlink: 'syz.0.2594': attribute type 4 has an invalid length. [ 719.257198][ T5729] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 719.280564][ T5729] usb 5-1: unit 94 not found! [ 719.304190][T15550] netlink: 'syz.0.2594': attribute type 4 has an invalid length. [ 719.323743][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'. [ 719.377300][ T5729] usb 5-1: USB disconnect, device number 31 [ 719.397727][T15548] netlink: 'syz.0.2594': attribute type 4 has an invalid length. [ 719.502257][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.996284][ T5729] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 720.112630][T15556] loop8: detected capacity change from 0 to 7 [ 720.150615][T15555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.159739][T15556] Dev loop8: unable to read RDB block 7 [ 720.167308][ T5729] usb 1-1: device descriptor read/64, error -71 [ 720.174427][T15556] loop8: unable to read partition table [ 720.186577][T15556] loop8: partition table beyond EOD, truncated [ 720.187701][T15555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.193853][T15556] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 720.312522][T15557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.364414][T15557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.453171][ T5729] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 720.623296][ T5729] usb 1-1: device descriptor read/64, error -71 [ 720.763606][ T5729] usb usb1-port1: attempt power cycle [ 720.973620][ T5625] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 721.135156][ T5729] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 721.158019][ T5625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 721.175456][ T5729] usb 1-1: device descriptor read/8, error -71 [ 721.190748][ T5625] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 721.217804][ T5625] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 721.247122][ T5625] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 721.281914][ T5625] usb 5-1: Manufacturer: syz [ 721.309651][ T5625] usb 5-1: config 0 descriptor?? [ 721.340143][ T5625] smsusb:smsusb_probe: board id=9, interface number 0 [ 721.401043][ T5625] smsusb:siano_media_device_register: media controller created [ 721.441481][ T5625] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 721.443266][ T5729] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 721.472680][ T5625] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 721.505974][ T5729] usb 1-1: device descriptor read/8, error -71 [ 721.515817][ T5625] ------------[ cut here ]------------ [ 721.521382][ T5625] !PageLargeKmalloc(page) [ 721.521412][ T5625] WARNING: mm/slub.c:6475 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:3/5625 [ 721.536033][ T5625] Modules linked in: [ 721.542474][ T5625] CPU: 1 UID: 0 PID: 5625 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.553890][ T5625] Tainted: [L]=SOFTLOCKUP [ 721.559664][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.569918][ T5625] Workqueue: usb_hub_wq hub_event [ 721.575186][ T5625] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 721.581320][ T5625] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 cd 68 fc 8d 5b 41 5e 5d e9 df 4b 02 ff [ 721.601616][ T5625] RSP: 0018:ffffc90004176b20 EFLAGS: 00010206 [ 721.608317][ T5625] RAX: 00000000ff000000 RBX: ffffea0002065880 RCX: 0000000000000001 [ 721.616512][ T5625] RDX: ffffc9001a90c000 RSI: ffff888081962000 RDI: ffffea0002065880 [ 721.624975][ T5625] RBP: 0000000000000000 R08: ffff88803b124a03 R09: 1ffff11007624940 [ 721.633088][ T5625] R10: dffffc0000000000 R11: ffffed1007624941 R12: 1ffff1100519ee82 [ 721.634909][ T5729] usb usb1-port1: unable to enumerate USB device [ 721.641323][ T5625] R13: 0000000000000000 R14: ffff88803b124a60 R15: dffffc0000000000 [ 721.641348][ T5625] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 721.641369][ T5625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 721.641386][ T5625] CR2: 0000200000034030 CR3: 000000006ca9c000 CR4: 00000000003526f0 [ 721.684144][ T5625] Call Trace: [ 721.687537][ T5625] [ 721.690518][ T5625] usb_free_urb+0xd0/0x120 [ 721.695083][ T5625] smsusb_term_device+0x1d7/0x3e0 [ 721.700304][ T5625] smsusb_probe+0x1aba/0x2280 [ 721.705134][ T5625] ? __pfx_smsusb_probe+0x10/0x10 [ 721.710227][ T5625] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 721.716210][ T5625] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 721.722130][ T5625] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 721.727997][ T5625] usb_probe_interface+0x659/0xc70 [ 721.733311][ T5625] ? __pfx_usb_probe_interface+0x10/0x10 [ 721.739040][ T5625] really_probe+0x267/0xaf0 [ 721.744015][ T5625] __driver_probe_device+0x1ef/0x380 [ 721.749358][ T5625] driver_probe_device+0x4f/0x240 [ 721.754532][ T5625] __device_attach_driver+0x279/0x430 [ 721.759966][ T5625] bus_for_each_drv+0x258/0x2f0 [ 721.764960][ T5625] ? __pfx___device_attach_driver+0x10/0x10 [ 721.770962][ T5625] ? __pfx_bus_for_each_drv+0x10/0x10 [ 721.778098][ T5625] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.783427][ T5625] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 721.789343][ T5625] __device_attach+0x2c5/0x450 [ 721.794244][ T5625] ? __pfx___device_attach+0x10/0x10 [ 721.799600][ T5625] ? _raw_spin_unlock+0x28/0x50 [ 721.804985][ T5625] device_initial_probe+0xa1/0xd0 [ 721.810160][ T5625] bus_probe_device+0x12a/0x220 [ 721.815121][ T5625] device_add+0x7e9/0xbb0 [ 721.819625][ T5625] usb_set_configuration+0x1a87/0x2110 [ 721.825257][ T5625] usb_generic_driver_probe+0x8d/0x150 [ 721.830859][ T5625] usb_probe_device+0x1c4/0x3b0 [ 721.836190][ T5625] ? __pfx_usb_probe_device+0x10/0x10 [ 721.841633][ T5625] really_probe+0x267/0xaf0 [ 721.846249][ T5625] __driver_probe_device+0x1ef/0x380 [ 721.851642][ T5625] driver_probe_device+0x4f/0x240 [ 721.856797][ T5625] __device_attach_driver+0x279/0x430 [ 721.862250][ T5625] bus_for_each_drv+0x258/0x2f0 [ 721.867553][ T5625] ? __pfx___device_attach_driver+0x10/0x10 [ 721.874201][ T5625] ? __pfx_bus_for_each_drv+0x10/0x10 [ 721.879633][ T5625] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.884994][ T5625] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 721.890961][ T5625] __device_attach+0x2c5/0x450 [ 721.896219][ T5625] ? __pfx___device_attach+0x10/0x10 [ 721.901615][ T5625] ? _raw_spin_unlock+0x28/0x50 [ 721.906589][ T5625] device_initial_probe+0xa1/0xd0 [ 721.911667][ T5625] bus_probe_device+0x12a/0x220 [ 721.916636][ T5625] device_add+0x7e9/0xbb0 [ 721.921056][ T5625] usb_new_device+0xa08/0x16f0 [ 721.926312][ T5625] ? __pfx_usb_new_device+0x10/0x10 [ 721.931596][ T5625] ? _raw_spin_unlock_irq+0x23/0x50 [ 721.937473][ T5625] hub_event+0x2a1c/0x4f30 [ 721.941946][ T5625] ? do_raw_spin_unlock+0xf5/0x210 [ 721.947525][ T5625] ? __pfx_hub_event+0x10/0x10 [ 721.952389][ T5625] ? process_scheduled_works+0xa70/0x1860 [ 721.958539][ T5625] ? process_scheduled_works+0xa70/0x1860 [ 721.964387][ T5625] ? process_scheduled_works+0xa70/0x1860 [ 721.970208][ T5625] process_scheduled_works+0xb5d/0x1860 [ 721.975946][ T5625] ? __pfx_process_scheduled_works+0x10/0x10 [ 721.982066][ T5625] ? assign_work+0x3d5/0x5e0 [ 721.987153][ T5625] worker_thread+0xa53/0xfc0 [ 721.991812][ T5625] kthread+0x389/0x470 [ 721.996020][ T5625] ? __pfx_worker_thread+0x10/0x10 [ 722.001199][ T5625] ? __pfx_kthread+0x10/0x10 [ 722.005902][ T5625] ret_from_fork+0x514/0xb70 [ 722.010541][ T5625] ? __pfx_ret_from_fork+0x10/0x10 [ 722.016481][ T5625] ? __switch_to+0xc79/0x1410 [ 722.021260][ T5625] ? __pfx_kthread+0x10/0x10 [ 722.026022][ T5625] ret_from_fork_asm+0x1a/0x30 [ 722.030886][ T5625] [ 722.033995][ T5625] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 722.041420][ T5625] CPU: 1 UID: 0 PID: 5625 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.052395][ T5625] Tainted: [L]=SOFTLOCKUP [ 722.056853][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 722.066936][ T5625] Workqueue: usb_hub_wq hub_event [ 722.072049][ T5625] Call Trace: [ 722.075358][ T5625] [ 722.078404][ T5625] vpanic+0x56c/0xa60 [ 722.082549][ T5625] ? __pfx__printk+0x10/0x10 [ 722.087220][ T5625] ? __pfx_vpanic+0x10/0x10 [ 722.091860][ T5625] ? is_bpf_text_address+0x292/0x2b0 [ 722.097217][ T5625] ? is_bpf_text_address+0x26/0x2b0 [ 722.102638][ T5625] panic+0xc5/0xd0 [ 722.106394][ T5625] ? __pfx_panic+0x10/0x10 [ 722.110923][ T5625] ? ret_from_fork_asm+0x1a/0x30 [ 722.116002][ T5625] __warn+0x315/0x4c0 [ 722.120139][ T5625] ? free_large_kmalloc+0x9b/0x110 [ 722.125329][ T5625] ? free_large_kmalloc+0x9b/0x110 [ 722.130515][ T5625] __report_bug+0x29a/0x540 [ 722.135181][ T5625] ? free_large_kmalloc+0x9b/0x110 [ 722.140347][ T5625] ? __pfx___report_bug+0x10/0x10 [ 722.145685][ T5625] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.150956][ T5625] ? irqentry_exit+0x218/0x760 [ 722.155787][ T5625] ? rcu_is_watching+0x15/0xb0 [ 722.160625][ T5625] ? free_large_kmalloc+0x9d/0x110 [ 722.165795][ T5625] ? free_large_kmalloc+0x9b/0x110 [ 722.170963][ T5625] report_bug+0x16a/0x220 [ 722.175523][ T5625] ? free_large_kmalloc+0x9b/0x110 [ 722.180676][ T5625] ? free_large_kmalloc+0x9d/0x110 [ 722.185841][ T5625] handle_bug+0x9c/0x200 [ 722.190125][ T5625] exc_invalid_op+0x1a/0x50 [ 722.194741][ T5625] asm_exc_invalid_op+0x1a/0x20 [ 722.199630][ T5625] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 722.205386][ T5625] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 cd 68 fc 8d 5b 41 5e 5d e9 df 4b 02 ff [ 722.225043][ T5625] RSP: 0018:ffffc90004176b20 EFLAGS: 00010206 [ 722.231147][ T5625] RAX: 00000000ff000000 RBX: ffffea0002065880 RCX: 0000000000000001 [ 722.239149][ T5625] RDX: ffffc9001a90c000 RSI: ffff888081962000 RDI: ffffea0002065880 [ 722.247190][ T5625] RBP: 0000000000000000 R08: ffff88803b124a03 R09: 1ffff11007624940 [ 722.255209][ T5625] R10: dffffc0000000000 R11: ffffed1007624941 R12: 1ffff1100519ee82 [ 722.263207][ T5625] R13: 0000000000000000 R14: ffff88803b124a60 R15: dffffc0000000000 [ 722.271249][ T5625] usb_free_urb+0xd0/0x120 [ 722.275720][ T5625] smsusb_term_device+0x1d7/0x3e0 [ 722.280781][ T5625] smsusb_probe+0x1aba/0x2280 [ 722.285625][ T5625] ? __pfx_smsusb_probe+0x10/0x10 [ 722.290701][ T5625] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 722.296297][ T5625] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 722.302241][ T5625] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 722.307936][ T5625] usb_probe_interface+0x659/0xc70 [ 722.313195][ T5625] ? __pfx_usb_probe_interface+0x10/0x10 [ 722.318922][ T5625] really_probe+0x267/0xaf0 [ 722.323494][ T5625] __driver_probe_device+0x1ef/0x380 [ 722.328828][ T5625] driver_probe_device+0x4f/0x240 [ 722.333932][ T5625] __device_attach_driver+0x279/0x430 [ 722.339362][ T5625] bus_for_each_drv+0x258/0x2f0 [ 722.344284][ T5625] ? __pfx___device_attach_driver+0x10/0x10 [ 722.350220][ T5625] ? __pfx_bus_for_each_drv+0x10/0x10 [ 722.355657][ T5625] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.361164][ T5625] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 722.367018][ T5625] __device_attach+0x2c5/0x450 [ 722.371860][ T5625] ? __pfx___device_attach+0x10/0x10 [ 722.377207][ T5625] ? _raw_spin_unlock+0x28/0x50 [ 722.382106][ T5625] device_initial_probe+0xa1/0xd0 [ 722.387347][ T5625] bus_probe_device+0x12a/0x220 [ 722.392250][ T5625] device_add+0x7e9/0xbb0 [ 722.396634][ T5625] usb_set_configuration+0x1a87/0x2110 [ 722.402180][ T5625] usb_generic_driver_probe+0x8d/0x150 [ 722.407686][ T5625] usb_probe_device+0x1c4/0x3b0 [ 722.412592][ T5625] ? __pfx_usb_probe_device+0x10/0x10 [ 722.418004][ T5625] really_probe+0x267/0xaf0 [ 722.422577][ T5625] __driver_probe_device+0x1ef/0x380 [ 722.427916][ T5625] driver_probe_device+0x4f/0x240 [ 722.432989][ T5625] __device_attach_driver+0x279/0x430 [ 722.438410][ T5625] bus_for_each_drv+0x258/0x2f0 [ 722.443294][ T5625] ? __pfx___device_attach_driver+0x10/0x10 [ 722.449235][ T5625] ? __pfx_bus_for_each_drv+0x10/0x10 [ 722.454820][ T5625] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.460071][ T5625] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 722.465946][ T5625] __device_attach+0x2c5/0x450 [ 722.470752][ T5625] ? __pfx___device_attach+0x10/0x10 [ 722.476184][ T5625] ? _raw_spin_unlock+0x28/0x50 [ 722.481079][ T5625] device_initial_probe+0xa1/0xd0 [ 722.486146][ T5625] bus_probe_device+0x12a/0x220 [ 722.491048][ T5625] device_add+0x7e9/0xbb0 [ 722.495440][ T5625] usb_new_device+0xa08/0x16f0 [ 722.500259][ T5625] ? __pfx_usb_new_device+0x10/0x10 [ 722.505511][ T5625] ? _raw_spin_unlock_irq+0x23/0x50 [ 722.510763][ T5625] hub_event+0x2a1c/0x4f30 [ 722.515218][ T5625] ? do_raw_spin_unlock+0xf5/0x210 [ 722.520433][ T5625] ? __pfx_hub_event+0x10/0x10 [ 722.525254][ T5625] ? process_scheduled_works+0xa70/0x1860 [ 722.531028][ T5625] ? process_scheduled_works+0xa70/0x1860 [ 722.536787][ T5625] ? process_scheduled_works+0xa70/0x1860 [ 722.542548][ T5625] process_scheduled_works+0xb5d/0x1860 [ 722.548170][ T5625] ? __pfx_process_scheduled_works+0x10/0x10 [ 722.554197][ T5625] ? assign_work+0x3d5/0x5e0 [ 722.558835][ T5625] worker_thread+0xa53/0xfc0 [ 722.563501][ T5625] kthread+0x389/0x470 [ 722.567608][ T5625] ? __pfx_worker_thread+0x10/0x10 [ 722.572757][ T5625] ? __pfx_kthread+0x10/0x10 [ 722.577393][ T5625] ret_from_fork+0x514/0xb70 [ 722.582028][ T5625] ? __pfx_ret_from_fork+0x10/0x10 [ 722.587198][ T5625] ? __switch_to+0xc79/0x1410 [ 722.591914][ T5625] ? __pfx_kthread+0x10/0x10 [ 722.596566][ T5625] ret_from_fork_asm+0x1a/0x30 [ 722.601390][ T5625] [ 722.605267][ T5625] Kernel Offset: disabled [ 722.609612][ T5625] Rebooting in 86400 seconds..