last executing test programs: 30m45.713243784s ago: executing program 2 (id=571): socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r1, 0x406, r1) socket$xdp(0x2c, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) 30m45.567977172s ago: executing program 2 (id=572): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00, 0x3}) r0 = socket$packet(0x11, 0x7, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x50040, 0x91) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f140)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000002580)="b5a02c8d9c31948bd0c302b0432c4d8f62ca79e817ab9c5bf6848cc146af8e509d573162b31b3d99d432cd4af6039def85e616fa4d7bc5fa703b880e1f733c650dc2005f7f635dd3ee0e70ecc841787cc6a6ebb0729efd97d8d9239bdfd198ca325a3c718b73f7cdfc115f4a8f06433987b03799d3f75fe4671a47f4354a6f29a78fa1f38e71", 0x86}], 0x1, &(0x7f0000002840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, 0xffffffffffffffff, r1, r1, r1, 0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r0, r0, 0xffffffffffffffff, r0, r0, r0]}}], 0xd0, 0x20008000}}, {{&(0x7f0000002940)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f00000029c0)="8974f0bfcb17f808a3214bda0517cd1df3abcae9f93c47c7ea110ea185e27b6755dafac83f02ac03b248ad87003107e5823f8bc1bb54aef398fd4c665f9e029e8768493c136632073e6d9dfe5734fff0314f188ff54cec2ea8f5", 0x5a}, {&(0x7f0000002a40)="c0bd2257ba279cf39e20439f01bcd099a506156ae8c25916689c35e9bd863ffd575e48d7102aedd41ba63c413ffe5092cd3ba97e9868f6c1612ad2014895d8e9b9cadcba5d4753d18e88", 0x4a}, {&(0x7f0000002ac0)="e6474837da0bfb9317195633a4b337062a337a3e5b2f", 0x16}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="92570d42ec76e2a7ff67d1c12f6d1d262edba09f7b39554f45257f4ceaefa5dd", 0x20}, {&(0x7f0000003b40)="013ec74228ef1da7f639075ea3fbc0235fcd5c8d9494f33a7dfac434f169c77155378bb0b5c5aca8a33b620cfcf6426db75b110a28618df81bec832eaeb6715fdab81c2b9d2e4cb318cbe33fd0d928fbac1f18b716174263872b1f0d71124cb703c19e6de3bd6a385177d953d88f2268bcf7b2f1", 0x74}], 0x6, &(0x7f0000003c80)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='@\x00\x00\x00'], 0x0, 0x20000000}}, {{&(0x7f0000003d00)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003d80)="4e8e90620ebb6e4d640d1b2949b74cba56a120e4010a9529fc8f4ae50500f82128d474c3e6c61e6299ef27aa859a73300bd13fe89ace0b1435ced0a80cbeb5e61542e3b6620df57463a01ea44b53a11b57394abc6dd4a725b09cb550a1465e23", 0x60}, {&(0x7f000000c280)="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", 0x1000}, {&(0x7f0000003e00)="8c91b7aca9ce4be0d3c5644c60a63524653297ec69c6a19b90c2412beb89bdae9b3ac2a1763b714a7014ffe692b7ff174fcd093cc80da741bfde2ae7eb696b5317daea20d12c28adf5", 0x49}, {&(0x7f0000003e80)="0de28607490e0192254c6d33c3866ca03a4c6fcf94c2140151320fc8f1ddb57ed974702d394fb187516090", 0x2b}], 0x4, &(0x7f0000003f80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x4000810}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003fc0)="e88e6ec231ae37499f518b8949b25bca2f537fe99c67e016002ef60992f13e6781a6484b4213133bfeceae9d337934e2344c690d3b2fac0d890199c0caaf2c89ca94342ecccdcc12f2ce5aa9e636507202730493dc34310400ae43", 0x5b}, {&(0x7f0000004040)="b62d5f2d678de84bfe27d8f1fd0a499d4cbce0d9af3cccaecc3ddc7343884f49a9a132fa512973a542aa9e67597126b5c4adcc9e35247c7ce6b2467d4597cf7910fd9eff15147e52f19d008a1518a99a454fa7b24e1d24d4dd1872a4dadc4f2de944f3781d2da7b9e97fd6f649adf3fe026fc00409c0dc36f9a6e2f2266030e1d067fbd4e4b519ed26eb30b1f5e220c43b18e5f2df5a7adc4ff09904ab0e740807c4fe4d2fdade649c57437eab21402af5387ed6941d9659042bf113360b2e889d0b80df6fc16992cf77ccd38f", 0xcd}, {&(0x7f000000d280)="7f58ff753c022ccbaedaf48c9a1b6d909a76ff41f4e79fe952a500822b27840ebf0694d4b109487e1d597d33c7848a6695130f037ee7f1d1b865a0985384b0a99dad987e0feae9bfced66b5e9cce240fe7d94d9885590a188ea00340c0a42e856e0ed4cae6baef1540d26de09244fbe46360e78e3fac5fedc656c64663d84fce905fcba83bde212593b07c2a71018214", 0x90}], 0x3, &(0x7f0000004180)=[@cred={{0x1c}}], 0x20, 0x4000800}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000006200)="08ff7d7220cf08631b75f13f1a091d4b45", 0x11}, {&(0x7f000000d340)="ab7b8ac63af58e5e27edd11c85d646c696db07c98f7bffc075298bb7f9be7117bdc6eb208e940b4922fd15e20fe1c5592fa388096487d8e120b9f7b0a4f8c0fc6aa7940397e2b780c8bcab08bc1037e531c4678eed1b4ed2e7b89397a1e575ef101f54e0c951fefcfbcda519fbd04858f21c", 0x72}], 0x2, &(0x7f000000d480)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120, 0x40000}}, {{0x0, 0x0, &(0x7f000000e640)=[{&(0x7f000000d640)="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", 0x1000}], 0x1, &(0x7f0000002640)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000a50068ed3b04841de76e477877148e1ac52ac458090000000000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32], 0x0, 0x24008841}}, {{&(0x7f000000e8c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000ea80)=[{&(0x7f000000ea00)="8071aaf27025c1b31e07deb1c37a89771beb9e90d3f3decff91167c11dc5da06a5c7f66314828b1796b2ee315c05cfe82b88bbc4295a9c5e15404b27a9d137c4ae9a822dedcaf9ad71f072c611905c945e98343b4b94f91b250ce0", 0x5b}], 0x1, &(0x7f000000eb00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x98, 0x90}}, {{&(0x7f000000ebc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000eec0)=[{&(0x7f000000ec40)="25dc8963a8278844ced90082ef0cf2367bcaf291fe4cd74562d8f6371a7336594e0c0920ac034c5e4810dce26fc3", 0x2e}, {&(0x7f000000ec80)="b69b900bab047eb778d5b09a76128a54666d7be59ec64380ba7ae15e3397b103f330cc57e351071900c17342b3dffb664478171ddf647cf7cbd9f84c46c3a1727a7423e2858f9fe64b99bf5c6896dd629a41c9a2eb3b0598b9c85a2b1781e50fceead306abc437a6a2cdbc3b1fa8c3548a23ca9eea111b779ae840ad76981e427ab74735fe4712ce296528c5bf4b51907088a53bd7463ddd1387691771990c7df80101b0e362600a1fca96f599f9a8e42bc5b0c832d13abf6fd1d05de516542b56dc007ae46219931203cf91f1bd5763a40b5168f8d62a83ccc7ff9e6594fdb0b0f320", 0xe3}, {0x0}, {&(0x7f000000ee00)="f380be12e5c7360ac74ebd663b4306f87992d3c30b940c4f7d04387147a4dfdc278a7c6af82da4c8", 0x28}], 0x4, 0x0, 0x0, 0x48000}}, {{&(0x7f000000ef00)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f000000f0c0)=[{0x0}, {&(0x7f000000f000)="798ae13c49f2df97042497517a846abdeaf317c2c6ad125a", 0x18}, {&(0x7f000000f040)="bfeab2a885266bd933e867ed9efb8c1b05a64dfe2308ec777817b72eb0768e8c63b44e334027d59dc881b258fbeefe5cfd78614185709173114d876a679b8097f6bfd2a00db1244bae5e668a5bcf775258", 0x51}], 0x3, &(0x7f000000f100), 0x0, 0x44000}}], 0x9, 0x4044815) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x202) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x8, 0x0, 0x103, 0x0, 0xfffb}, 0x20) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) 30m43.913793486s ago: executing program 2 (id=574): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x0, 0x4, 0x0, {0x191, 0x4000000}, {0x2, 0x2}, {0x0, 0x3, 0x20}, {0x1, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, 0x1, 0xb}) 30m43.794123806s ago: executing program 2 (id=576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f6010203010902240001000000000904000002d31a3a00090501"], 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x1, 0x1}, {}, @control={0x0, 0x4}}, {0x0, 0x0, 0xff, 0x0, @tick, {}, {}, @queue={0x0, {0x1, 0x40}}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7b7f}, {}, {0x0, 0x8}, @control}, {}], 0x70) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth0_to_bridge\x00', 0xbe8a}) r2 = accept4(r0, 0x0, 0x0, 0x80000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x6}]}}]}, 0x38}}, 0x20040850) bind$packet(r3, &(0x7f0000000180)={0x11, 0x8, r5, 0x1, 0x4a, 0x6, @broadcast}, 0x14) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00', 0x220) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r2, &(0x7f0000003dc0), 0x0, 0x0) 30m42.277287524s ago: executing program 2 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000094) 30m39.589360161s ago: executing program 2 (id=594): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) 30m38.77239877s ago: executing program 32 (id=594): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) 8.065128292s ago: executing program 4 (id=8568): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c0000970000000000000000000000000100"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f", 0x3b}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa9", 0x3}, {&(0x7f00000004c0)}], 0x2}}], 0x3, 0xc080) 7.945143031s ago: executing program 1 (id=8569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x84}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) listen(r0, 0x2000fff) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x70}}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xb, @private1, 0x9}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 7.901491584s ago: executing program 4 (id=8570): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(&(0x7f0000000000)='9p\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f00000000c0)={0x1}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000180), 0x0) connect$pppl2tp(r5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004900010029bd7000fddbdf250a006000", @ANYRES32=0x0, @ANYBLOB="f9ffffff0800020060000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x9d, 0x8, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, 0x80, 0x7800, 0x7, 0x101}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r7, 0x6}, &(0x7f00000001c0)=0xc) 7.028040024s ago: executing program 1 (id=8573): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="300000001d000000", @ANYRES32=r9, @ANYBLOB="af499d78642975317b0b56692ee4beb5c5a82c9471ab0d3c6d7f351ee47b07a7dfa6db66eff73b5586bc2bc436b91145b06597f5e4950033abd2f4670d715b08670b4ff42fc049c323a4277e7307e13e36b38edda1255600b97a94412700f1f2f3d55b5b8e7e7e07da0bb5eebca7f524c30bde521ae6ef275bbdabe5bd58421f87fc4a", @ANYRES32=r2, @ANYBLOB, @ANYRES64], 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68449}, [@IFLA_WEIGHT={0x8, 0xf, 0xb9e}]}, 0x28}}, 0x0) 5.864542033s ago: executing program 0 (id=8576): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xb}, {0x9, 0x5, 0x8, 0x2, 0x20, 0xc, 0x79, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) fanotify_init(0x4, 0x8000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xe, 0x5, 0xfffffffffffffff6, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x5, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x6, 0x2000000000004}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0xd, 0x48, {0x48, 0x5, "766b146ffe49f32b7e53eb47fc095ab94291899d2a0824370898a8952a2c25987f73d5d503cdc4ac1fadf6a3b6f1cb1ee747946e2e0fd1da5d3e2bfaa2d11b4aa1fcc8eec3ec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_adjtime(0x5, &(0x7f0000000180)={0x7, 0x1, 0x8000, 0x1, 0x0, 0x2, 0x1, 0x1, 0x8, 0x16c, 0x0, 0x100000001, 0x4, 0x6, 0x46, 0x9a, 0xffffffffffffffff, 0x1000, 0x8000, 0x6, 0xffffffffffffff22, 0x8, 0x0, 0x2, 0x8, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002080)=""/184, 0xb8}], 0x1}, 0x9}], 0x1, 0x40000022, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x20, 0x31, 0xd1, {0xd1, 0x30, "3f55a61ee115be2fbe56d1c1087a1962d879bdb1bb0df767f8d142fba9784584470124e9284f81197f845b6c726d7f5225323213d09c00d6a76fef609a703fa841c54658e1d8398dc0612c64c70cd4e71bb5a20f02b441a2cb9e91b9f30f1fd39195171a38348df4bb5c0696d1744c596ce721793314836bbbff3ef10afd276128aee4e46c2539b975b8334251a403fdf8216064136dab8fd3c969856589a77edf5cb7fde728189c25a9df23fec286ec89bc7626a8acec14a5453f9dcfe5d8b2bd25fdbc5fd58ef5cd5d5a86de7e64"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f00000003c0)={0x40, 0x6, 0xe9, "8a58e1348e81c6bfef921e5aff7ee4b60e4c8dad0a482c6fd3b24c96729adaf472cce6594f10568a4b270428a55a1fcf6d15615202aa6bf7418b2f3073fbe1586cf01a4348eec22ff4e2f98337cd3d43dd5b70d1e405211a9963fe2c7bf7e0ad0929c0107c61af0ddf00529f167eae7496875c1c43629d5291faf76740fcec2800638fdab8dcd1a90037c2eedbb1b75b12d0aa5d07fb1426f4f723ac517c56ea94bd33c62dd938c3580dae7b9fdf957931b3e22197d0d107ae58bb26ecd322450fa18cdb72715a0cd8e157c29b52d5963353b5366935091611d7ce3b72d957acfa589dca0f4d072afd"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x1, 0x1000, 0x3, 0x6, 0x9, 0x2, 0x2, 0x5, 0x3, 0x0, 0x3, 0x7a}}, &(0x7f0000000600)={0x20, 0x85, 0x4}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) r4 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300000004000070100000000fbdbdf25017c0000040042801400018008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="9c06a8cdac010243c890"], 0x30}, 0x1, 0x0, 0x0, 0x48805}, 0xc000) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x0, 0x24, 0xaa, {0xaa, 0x2, "b90a6eabf54532e0533fbbb7eee4a38e294d58864dd97fceec2561ed31e6aa777b2ca973cb8f25e7f6f49495502d688391a0dfec770e899c44ccd83a26a6a56d71cc9ba5849e71b5b2391abf4aeda1ff9a5a89a317a01a2040c4dc7f981722c31c7eabc13ec3774114fbd99c942f483c6d23dcdf1e0771c75032199bde3ab20705b0a4a32b9f978111ba92139c7c9809248ad77e58de6b871d6f8698f5dc00bb9742b2c939a54004"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x20, 0x1e, 0xc, "a2bc7290d0cd71d1a19f645c"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000009c0)={0xc0, 0x5, 0x1, "81"}, &(0x7f0000000a00)={0x40, 0x5, 0x6, "d8189edd6145"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 5.379702243s ago: executing program 4 (id=8577): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="300000001d000000", @ANYRES32=r9, @ANYBLOB="af499d78642975317b0b56692ee4beb5c5a82c9471ab0d3c6d7f351ee47b07a7dfa6db66eff73b5586bc2bc436b91145b06597f5e4950033abd2f4670d715b08670b4ff42fc049c323a4277e7307e13e36b38edda1255600b97a94412700f1f2f3d55b5b8e7e7e07da0bb5eebca7f524c30bde521ae6ef275bbdabe5bd58421f87fc4a", @ANYRES32=r2, @ANYBLOB, @ANYRES64], 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68449}, [@IFLA_WEIGHT={0x8, 0xf, 0xb9e}]}, 0x28}}, 0x0) 4.934019254s ago: executing program 5 (id=8579): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x5}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x7}, 0x0, 0x0) 4.558739748s ago: executing program 0 (id=8580): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c0000970000000000000000000000000100"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f", 0x3b}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa9", 0x3}, {&(0x7f00000004c0)}], 0x2}}], 0x3, 0xc080) 4.556018508s ago: executing program 1 (id=8581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000013000100000000000000040007000000", @ANYRES32=r2], 0x5c}}, 0x8000) 4.481426624s ago: executing program 5 (id=8582): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c000097000000000000000000000000000100"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x300}}], 0x4, 0xc080) 4.480348433s ago: executing program 3 (id=8583): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x84}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) listen(r0, 0x2000fff) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x70}}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xb, @private1, 0x9}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4.334654712s ago: executing program 5 (id=8584): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 4.277967797s ago: executing program 0 (id=8585): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x114, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, 0x0}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x60040050) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x4b4a, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000ffff00000a140000001100010000000ec20000000000000000"], 0x28}}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x1}, 0x1c) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) 4.186075697s ago: executing program 3 (id=8586): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500001813000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195}, 0x23) 4.117499494s ago: executing program 1 (id=8587): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf7, r1, 0x1, 0xff, 0x6, @local}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3', 0x6) fallocate(r3, 0x3, 0x0, 0x2) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000011c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="180000"], 0x110, 0x4000}], 0x1, 0x8081) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000000)) 4.116683618s ago: executing program 5 (id=8588): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0xa7d6, 0x200b6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x7c, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0xd, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x83, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x20000009, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000009, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x3, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x3000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7d925a62, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x5, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0xf, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x40000008, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0xbf, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0xfffffff8, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x1, 0x8, 0xc, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0x200c9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x10006, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xefe, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) (async) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0xa7d6, 0x200b6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x7c, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0xd, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x83, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x20000009, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000009, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x3, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x3000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7d925a62, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x5, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0xf, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x40000008, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0xbf, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0xfffffff8, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x1, 0x8, 0xc, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0x200c9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x10006, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xefe, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x640100fd}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0xe5, 0x4}, 0x0, 0x0, 0x10, 0x11501e69, 0x8000000000000000, 0x1}}], 0x70, 0x8004}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x5, 0x5, 0x3231564e, 0x5, 0x1, [{0x3, 0x1}, {0x5, 0xc}, {0x9, 0x351}, {0x6e, 0xffffff07}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x400, 0xf4b}], 0x0, 0x8, 0x7, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x5, 0x5, 0x3231564e, 0x5, 0x1, [{0x3, 0x1}, {0x5, 0xc}, {0x9, 0x351}, {0x6e, 0xffffff07}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x400, 0xf4b}], 0x0, 0x8, 0x7, 0x0, 0x2}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000001280)=""/238, 0xee, 0x10}) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000001280)=""/238, 0xee, 0x10}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x0) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x8, 0x2004, @fd_index=0x6, 0x40, &(0x7f0000004580)=[{&(0x7f0000001380)="56278419e55c90c2406fd3c175ca640aae87b7d79748fb59e932956665fec6da06b54816386630880f6d8af80e91a7c2e9176664d38c53e1a510e5c37bd64f93186160c1c19e729b51094d9c0e4b7db822358bedb21962d3520fac57a1d72db9c497dbeb6505878e3a74f40ee7f3bfb617d6b9b0a84ae2e9ecc36b08a4568030411e303b620a8b46c1bf", 0x8a}, {&(0x7f0000000140)="765c7d22984a360aca374be42ab569d4ba1c2518437da50e15b7dc17deaf77eecec48dfc142925ee", 0x28}, {&(0x7f0000001440)="4cd018c78a7ce03e09e1ca000a3ba75c42a07f7e89703605974fc2b9fe262a0da8fae1b73fc937f624b93deae6e3a864b6ed6a73e4d141b1b731dcf366d704a8e711038ab077ddc0539676175d5cbe8b7e59f0eb281c", 0x56}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="44c299260b83578d8d91e5bc42c5278fddd1c241e015cfdfcc4e324ae4f1ba46fd380f223fa73c578a6e0a4cf306e369f2d8ae704eff9c69392881dd74be5840ced8c105ae0c7c8ae285d1f7dbadcfd2afea2f8b41e8bc37f96fc17781332c9ff5d8c34438243b32d26a8a7590ce3c27bc8ffea2cf5fb90862c553c1f60aaa5c9115a17dca9c94f7031e354d2b740d2ac4b8a83a3291907d46018f65e32ad3c26f7a8c1f38b09f7a9b60ac18e1311d3353b562c7f52542adf7d3081b2b902332ec36b497293508c5ed3fc180c102e0a194fa5fc5384ff1d6c874e1916ddde7ddbe86fa027b555c118f7614156b62c2a73f362708eb3d2bfcffa509f13bbf46af7bfd61ee521902fb2b485fe1c2517fe9678c5254c726aeffb64efd9e0af8af3c9f536563150dc181dc3fbe00e8fe356da5cf61a848095b6a73d633282fa8d73727e81bb13e6757fae1e7403fcb3acd12664140d6bef25be8449bfc8811c2009de9752a0daf22e94c8f10570129b36ea51977c952b5218c2090ca9f9957f37688b87d9287541c1f54f007f167ed13b0839a102213a5f55af3a0618f98fb2b9e6139ecae126f24ef62f821d6a022fb0c4aa58c71e49f4a56142277599dabfae356ebf51f89578645d7fa3c01ac69f2392b64d76d2870ba748629dc17c4e1d334c08800a9511725e3132891b75c38440a3001867ae5584614da21012af873309e135e311da05bef1954b3e6b5917e7a9424b1cbe5e1c418f685db0982cb95d509191d600a610657ee9a8a6ced0b4965b35ef446f690d53c94ca7f2e6e9ed778e80fe227332039e4c86169317e3510f87e7ef11cee4a1370dfbb62d1155d368e2e11d400674b59167fe9792a573f4d3952dd6eabb70b237f02b69bc15a3cf2e4f96bde299908faf278168e9b16929f3b5c686166eee186f085597d72e5652645547f5c5c15d02022803d7872596a45cafe4d4b6878f0fb2b5ce8d1b99858d44e9b012269d1a908db7d297eacede96ce8229fe5ea97efe9108fa79d4dfef7b7134fcb40065537c504b177a45e2a4338effdf979313bdce2a8a22914b8f69b870b0679aa8ea5b295f7c1af3acd1a0b2a9163f2c8c1f812c69d9c1027bb01e121a1ad815b66630f17ccdde4c49c8a44cd76779d147d2642b1f82eb70e6bfe5ae8304371e5ee4971e5314e24409443da00992027450a2f1e5e65e1c7077322baf556a7f97b530b4163156b0a04c2b2d7afb577959e27542f720815363877c86137fc75f131d40fcd18e400dff559c2423a28519f3b3fd1e112555cebedc2c3463a777384517c182d49ddeb6741bdb1b0a0f358bac09d32d4c37c0ac5d875fa6a2d4667e7c376762713e478ebf829bac20b43f3b478ebbc87cb95fb0df41e4645dde270da1d7871eb0b086480af8eb5eb0b6897eadc621afb2d1ff752d934f6256ed75137e62744aa00d20a9a4beb5918969355ac061b7245fdec0ce327946bc6060de84fe7e74b4f990b75964d29686bd45bcc1259c88fd3c98b5206c1dc606c170237009ebecf3e67940b5748c5c8369ff26045f75fd3a1b8f90c6f266a8cb70a9fad7f5863aa8a0d77ba94adbc05a134897b59c46135cf595a9a4614868d48adb8ce95f6a8895b8660a2a0a2258211c7ea5b69382765e409adaf800d64f799bb223734c66e600bc6dbb7c51c6bf8d33fb8f565a13fc62b9d28994d38561be73fce052dba28e88cea426584ef30b447a38023d6937b8199a7159a13ad5265ada605aed2de12f4b67944ac8aa80bb0e580394ad1410c59f7dc9162e1f294f3db315fe7f446f1333a1dae5d70c4329f3cf06c259ca05e1740d65cbadb54e4432e6732957715d8c57b207a168a90147dd7ae28adcd397fd6346029b312e34b21207e23270d18aeff55d87b02f765eb1f995b15fbb031da9ab2e60abe200f3f615042a56c0bd39d12699979a9473c4076b7486e91754051767027a988e150af9e2742e20bd7c028704c9c373e5ee29ecb5abe2456e3131deb3a53b518b10ca0806b420a5c405782994a1657d1ef14513ef833db4a7d3ff68cbe71a8a2be383f26ed2ae7b270b8ac802a4009339d10ea2eca9db664a4540f575b9400789dfbb792ec44197155aaa2489a7da8f4906c6f95a0d6f8a4e911aff4070cd52f994c6c51ea5df3bd9c4e593aa3d5c8f8a49fa44594cf8a1aa89178c6f6b6287335e5be9dcc825754e91316862a254e47b2050ea64e715be70e63d15f90101c880aa9d7595aba1f03ca46ab6be13dc5a963a199372c88160e037032a92d75d0cddc2c5c118e71ac4ce1d776859a84f0a50a0b6958f7e39751722745e30f55a55dd0dba8067dc430bd795d8ba1107c9d40d50bb91a72820ff4649f50fb3ad8ef3e003b430ae25cf524f5a1e25b52cf5f0c6177d4d71f5ea24f539f2b23524422c6f85aa1084897e05ba3e1e9809a352b3d4f7b3de05a77a64177d1ee7cd984db4f47249d33dc836b4c5b4dde6bdebc37a01bc37ec959d69f82aa7d108751482c2801f4630950c20e2d6b5871bbbbe2c49b4c04444090a352585edb1485d7cb6f1630fbba8c8462d5b7d5d17a05b1391cac62659906404ca62ee86495af2d40c061f4056bbc4c53202dc5215888d8d4bca6311559bdda9405f145d6a0a348739fa79cf79474688c700a54f4a36dc7dbd240920ecb9801fb9649ec40efb75bf73eccf9ee4e98c029790f674aecc0048a6b30eee5587fb5a571fef6f934bf023930b023202cda9995a91c0c139ea5d4b5dbe6a3eb5add66f758a656cf3b94425d8e7f1ca0d82419c5caae23f1b294bccbee690338d15851b729569bf4585aa844be0d8eff1965233d827d019f423b1810c33a32e6eff7f200da4e5f783819bf93d4e8acbc43ea0b6433e0da2c165a9da9191c3d53325c3c2c0d8c6c61e5302c638583d48c2a316a7756c3110b5c3ec5e1fe0d261b2984293bc77a0ce429d599b1b2baa81af7854b5abefcd98bac2f2dd63550cd649a0b9345f80a3f75156095ae0455f29d66441acd52a13f9f104378106b4446413d2944f3a6199ccdbb9a24ef4e072551ab981b59507f5c03c61adca93ef1d108949d0a1b11887339a97cd0201376d9c53fb33ad4a93c45a16415fdc8e39351bc575963b0a3ad8c3fbdcc1aa483b712fffde94e13433a7ecd54d6183202998b86f9d008b1163dd569d4c1ea6229bf44ab3f4e1d8274a3b3279668d74584931848198be73231e71c519b7c13074ec47576f1d254e824cff041d48be81ea0356081936348aeb486800550689fbf701177de5b7bf41d87b06d56e17f6658a0d4fe126d85a811b8cd94ff8835c3a1314632c34e0508958722c7ea500891d152cd7d27e4515cebdc6979e912fd775afe3744316deacea1736363b130d0435949515a37ddf7e86c26b17d5324e80fe8269c3f00cdc18c1aaa7beb16d26cd3409cb16dbf57ece5c18839e3f1b3f45a9c0a33f63cc4e1f12a49d6a9cbc182518dc6448b328219483fc5ee13e544ac899c6f7f8be631c0e5d4bbf8a130ad85a7ece415c5de98ffe5e55c307a6d84b0cd57fefb87da1eb9fa82c07e88c129d84c569218a49d2bf4f48f816b9ce7e798a107f5a8b34422b221914f3efbbbf76f31eeeef2afd05457c9ac8e7b9f2bd616e8779ebcd538a6ad28135dd777329a0d348e29734a4937ad321d7323a4c5b08ac424652fd3187790c32b8fba6dd73aa04687db632d21bb4006e2e4e79bff030f9c65bafe8ac111efb68fcbb6959044b0a791763b8a778daa17db2ddfc548e15d34c8dc1ddd8569486f3e2f38bcd992eaca0ef54db76985f6fd5394b66014eb6c1e86fb45cc6544a246a3be61c48f21e0ca90edd89790485727ea35894bbe2c563055e2b9e2f2769ce79ae0048e2429bdbdf4e0b6c1c80f76b38ced57c55dcad175f6f409667076b4583564b933418860590b48d0031c7728d40b0a34b7313efaf85fcc6bdde35166c99eccc60d00fde460859a47650b9d8562c53edc7eb8881113b4a501f1adb9a36a0de70c48f401ee49ea102942cf08af5e3f5132404cf4846f5e4d6e1f8a98552fa7c1274b3b2d87d048b77d77eda45ec3f413ac0c08534ea8954b50da1ef30f282bb1d429708aec2d3c9b1a7f1e255a9e6a164cbce6f9e46f17a3ee1ae6f381c79e8b9b35a6c847b5d49cdb2f4a0b125a280cc437440e568bfb542810066f8d8b85765ba1b01c7d3d7054796cb0b6a18d230d374ad78d993ac9c7310a057b16f99a4e983a7c8f6fb07aa73cf0c0e95e090e4b5d58b20c38a6e39020b78e8a9b915e08d96d98c99e1211a861c9be5d5b75e06e48aae635e3fc643f3f0dc8fe69531ee1b30079b49087bfa4579d60fd99a58e8ddfac52ad8681d004262d97cc835a1dbee00d2b3e30fef8ca6bdf8aac9f88c73d6279cca4ce4547e69803608802311fbdd9f46a2541da0176f20b4b7f8ce5b0125d0e33d3cf8fc6f16bc2999fc6f012330e680377853c9787fb202e76bdbcb7a651ffff877364ccf8715226cb4d6dfb428e7e56f42e72998bee375293269f3bc23061e6318c6b1b0370f3a7dbce3deae2799b72e555dd665e8249cb477570706c125ba4bfb8e3f86ede3b7d9f6d3159d9a3c88f87342bb10551a997af93f1267a13e01cd9c3378c9885c15a09599d38460836ea9cd6479c3148893d8587ef251568ed5904e7240d5674c60e61a3ff344233d8ccc70073e93dd7d05520265389a72d722cd0e5e66a78874a14fce53486931b03d60f6a7b6286c6ee3c0e7f0f4875843dd7fcb327f20230dc553e05d5ed8071a3022cfeda8e18e9b57b895d0d3c54740a32651ea1a66c53d55cb1482bb1771f5e0c183454290d56765f1f028b2fefb1c7f0148b3ae29878a8dad1e0caa3c3ee4501edd05d74f53b405bd52a8cbe2e82da73da638cbf07ab78cfa8c2cd60620d6b8e6e01d523987b5d98069ec25096ee81efc08eea29b739a03ddb70a021449582e691edf47e12eefc60d73ed747a59589c173f74bce9f1f379d1977327cc1afbaa9638f98d467c8d0cc6c6381a9fc7e4d454027d19bc4424ef8ca110c6581b61909d742577887c3247dafeec60c6b8d0a656502c93a1b47dc4c6b19c0a121e2a9019b805f8da66947337205f37fe4ebcd0f0fb64e0b823e5478d89fde1721e31c07760fc4cf53cbef39b1b4e643352b58d9e529621ace25b1b3e4dd7befef54eebfc2ecdd45fe0ab4d3f657d6b89023710b929905594f3aee43e279204a0ffcdc05201283044e7703547a59a808053dbae9d03318430df99bc85d064a4a9722ed00b4b46502b213f6f75c8d73e0be71403f5efdc7c68e5a14fd5ef6b1f55ffef1f874fd257124d86716fb9727467243940a59f5b9edef6514c8ae453a1ad624ec7defe690d6bcd672cbc3b8b2f4ac2296eb35cfaa9c445b6fab9aaa4d632298f1329b1e8e301d0e0d966d3a817877dc5bd8c2ba3bc657c240c4eae048a0af331c919a91b3ce8cc5df8bdf5d403ab402fe83c5d20df71268c3508d103e3a881bd669e656527f540b7bd900c7c4f3800e3c21ef9a1d1b441ad950ddb0e828770ef71fd958139ff19e7bd2d93866231c6280bea4a85756cc481eb0b82add6ad493fa81760dfc8b1f3e76fcc3f2c196ce4dd4d9b8470585352acc415a4f47287aa93fe7e7aac2302dc27425256b439ebfa254521e555bd256876fa83f873eebff1c7d5973b327d41d05ba3400ea25a0a726ee0684afe0bdeacdb338f7c63aeb35b84581dab76aaf282fc0eaf33b04689db097c6e17ca6978235a51a8e9019150217b1", 0x1000}, {&(0x7f00000034c0)="f24317a2f375495dfae352a387b1c185474569be4ce9060e5cc50efac3ecc6b7384eb553221802c228ed3639f59088e65f52eec462f80311d901ea6eac62125da775c0e23430b40eb93bb8d5601791b8f217c1a20346ea0c2c46a9991813644713a4de6898893fa4bd54b581735d21a3932fe7cdeae7eb9ada8805c6641c3f0436fdc0147c91b6acaac156a2a30938c4197eca74b74f9ba109e379ea554ae97c17585124647ef640937c53d38224114ac49056df765902a15a33f3ad61173ffc9b5adc0a5b66001640ce0f712810f2790c770e0b489dad2134359d842b0f1907b42f35ed222d929fce4028efa115b5f3fa77a8c4f71ef13e859c8a8ab14b7b467e58aa792c02a70170d78743571003b3d1819e2ca0526cfb535ae2449cfcafe6f76c1ed1d447802e54cf09a2051ce180a427b3ca1cd15e3ddcfe1122b7e47619bd1c29618f25b1b6068624815ae132bdf9ebd02f8dcfda0171dbd3a908fc361fe91025cf3871806b85a4230472dacd9f0e6a671f2d836a87446d88d2130eeed5721ff5c659ca442bd48f8b034929ef4cfc4865846409a1f4e632dc2c0b8a5f8a436d8a454db716609489f1b50c44e506985b732a74422ede680a8a4bf25c7d24eab62ed2b1509169c47795736c06c0965268a2fabb1490dd80146209f39e1def042cb685070b8f6fb70283725de3571e8de95a012f7c7cd9c849e968d789bf7724283a1cea1d8934dd443fdeddcfa0d718d5e01a216c89e6ed70f4049ccbc32b88ee865860a13c919bfb80d14a20ac90a4e139d10acc0dbb1989874e24dfd44c2fcd5774b4100c63a579afa8e998611cb03f51cf7b1eb6cbcb099ed68646ec2400118ec4a4d72dd5e5c47f5b5bc9827e6553ce72b83f7fdd31939fe6f1389106edc3be8a382f4592757ba77d629bf44e2760e357bf5cdc1e2dbffe37655c8696c1bc2b9ab418175b309f073d449d4251a105108e8b38c343a63e2309c9708cf9ab76c30cb4b3e6ec331e8cfea814ff1054d18419b99cea6cf1c93df990ab0af694127c1f8c72c13b9fd6b605122b63376dcea06dd4a2ac995230edd9bc47606e77de0ebe7f26bc0f561b1c6c8de8d384087b07b076ecbee467d0f2a1f61dcb3b31f4e03b812282cab4fce21d158f44d0a396f9cef60ec270c7397fabe0642860bfd9cf5bfe9c6cdcfb41792963d9d3cfc3d7914f93a54e91ff2f0460f465dedf745bb87ed1232027a3534cf5e789fabea69f3d2e1711d2812fc8081c580bb079ea8324a3b9386dd4ad3a35a403d3b8362ea18ddb5b966d2291869e5e62d9b5b26b51c2737d7012e2a452405818971a808292ebb96a8f1a893703480f3a7abd2c61c7d449000ca449e8c94395e4970f9a631396f18f1e3b2b59bbf09f0d97ea712f4998dde3fdc8bffb7ccc87237ff8063ffa97e1292e67a76d7c03c29072b6a7a5f814ee24eb03412344e6f91ea24df8c9eb098300ae05251ae1660fc80a0cbd3a364db8010856835bfd445ea7b6b31ea3d4ef9c5012ff03df1705d5bc327e49fd591c01da867d7a734babdc8e3782b54919dbffd77b763426e5aa50b22351f7f7fef47b6d1cda2bd63e0ee130953cf6b55576daea5b090d989758e9c0abb582ac2cf79dcf53a26e7caf99533c049b555b23542e6fc7f4865e34895a84d71fe803851542eb67fa129c402f87f6c3f666f1bc203d91343cdeeb4229c69e05bc1b91105790919864004db65fa4d9bcf8227f30398d897fe9d5dc87b034cd769efd5d229dce21d4b0b0a60039533b02e512d213a1573ac01cf57ef9b432e3a915b9c26b954bfa4189974674ba4760d3c357acb6869f27e82ea97f464eb06aaa9bf96e8df7bd37e79b3843a6e00f24c71a608fbf500655eb74484c99f6d409b1ad483120f47c0f114d9fda951d18011f6aec179ec7f1a48620d0aa60246823efa6fa9458d85b25948acd4f4251373986a85972feaf6a682b0142fbc8df04fefbd16eeb9690f8fc6d25be097bb56d78057c5819a6fbeeab92c46aa7fb5b7ab764645a2f2a7f53cbdba4efc8d75eed3358a6e3c095d4a8e839f9f941a0a124ecd4a36bc2aa3bf161b15cdf313838105098c362bacf3f6ea1641994c856d2b7af8935e3a5a3d3f3c6f6549610122cb30786accc9eebfdf8658ef74137445e9c2df0b4506394871ec84da2c048be51cdcafe2a984cae24ffda14cac09b8f84f4c21dff251f810087abcb311673c2db32477a44ff0c057e86db7212f4f43445eda60e394aaa279c34041eaa6fc51920195302b8ed42c8011daa76b9ba1cde58ad8ab7c610e42c8debdca7c843149159420a71e76fe59edbd80a2ab9a4aeb65219424644e390c0b7b072bfaf5d3f3f2787bbb21a7442db33e10afc7104d60e5171a0f64e79b135a7d674290c37b653d8e9b13a1aae740a2a57ce4110cad572281011854f9ee1b41041c5c365cf385081d1b929cb59c03884264c6bbef4778a21f8bb061a708fb26d0fc244d2954361a90fbb4adf9006fad243bbba7db2cb996cb18b276faf51b42ee9605fa0938267cc55602356a50d83d21953042b8e027185efd28619bca8a43fb6983f151877fa335db0bb3f7e55590e890695a10d9e23f7a9a8e577a222aad39f5b8c23b9f52e8881ef8b200b5e4b7fd7f420132868794b04c369bb7b58d713fb5e340eff2fd626b8804e0f73c66bcbb4d40b51478a6241c3eda66b56fddc5c12c0a563fc4b8ec576e15da7d4a2e1c60d9be707fbf63514313969fa4b95375742f2579b4c9af32652900ae2661879274c5d94fab797dbbbfcd85834af074c664feb590f5f0d26aa6297b9dfc29d901f796dc7056098185480cd8a97b7f050318094712ac76f2cf799fd375e33178ba018a186af7a919edb607420a50ebb864e9d1f5faa458a2986a009310a2f44265d17225958e133248bb92a048e184f487533caafe35dc63b81d68896e9d38be812e11ab1d3dd6e4ab1e2e7e69ee522294cd5805a2cb220cbd7ff3055b2168e20a3382d52ce5afd54cbb571a3db83a0e66a482497e05ce7ba461502ee01082a7dd7ee1029f4a98fb3cbe8d57f732ff4c6f277800622c40a6595893e31a6775b7b633884d29a5731907c6b851ba751fc3f15cb2b4656cc15164f6733f1563d13965402b9ab12b82af2a0b00a571ac792a56404f325d80e48f11ec66dc0c71a4de225717aa5febd156040eca8db9d6f82544091391d2444a0bf9f1033e7ffda9223313b7c057600d6c09e97904cb11069bf621542aebd66cd69888d9a8ecf1919e5de1ddf2f2a7fb8b33a982559d0ebe3556823da88299132b5f645e2f55e4e51d46fc19f89a35be7e8333ddca3077985f8f8d526ed47173f17596d2dc676a4dff46d078ffd0df84c8c7c62269f0404cbbc090397cde551c1caaa2bd9c849e90772ffbd4c5025e3cd6daa199c1babaaac6a33702e25416ca3c2107ba315fec9880350f90c2214c0e8010f3e6fb5d4c9222e1bbec5a78b9086b9126cf7a527069c7b170aeb3f6fbf46611a13d1ef6dae142792b236c7ab418e50ab20fe19cae1335d5a3910446c627189b50b6dd916c5f7aaf4e516dea1494cdbd622494fb03f514962dc7940191a7ab4f1d8792d329411ea662493185110f3fd132fa273b2ca89910bbfa93c655441896561e5cf3dd6657f35c976ee8f38a66315d251041b6d7c02cfd6eadfe9c2a98635c4cf79ad4e9f82550333c9511387df8231753ad61e0525119a5bd667d9b51b78ce8ed2d4322b2e918d673a439722d32c859430ce492b28d32c5df0af19754d83d43067e199327ca6c96c30aeec1e4f4432b085ef3693bf4b4d210103b0b655a5f76241fa20f3d4d8d05439d4348cbf003f9321cc62e9c5674911930289e5516f8410d329c7ec07c33ca2cc9b567a8c761d02d3f7972cec15a2dc2b703af45938809f7248bfa825d4da3f320976c80713f33d145172415ae279b8b136d3dac9465b3df1a0ac7f66148d22cf0d2e31ca1c24cad06a462b66ec1fcfa6d17c0293ad1d86bc3b446fee96ffe4814bad465f4fd322ade98bb88af0b06e74aba598e650bdaeee749ec2bc9408f30e238982489769accf544072d1bed109a9c927d42576127d274b40de673a5448183c35433ea9135c5deced18094b71bd92b9fc4a5d6b51df641cb19f934cadb48781e1ce6c9365ca8eb6326ea13e4553108b96d4528d20d5b7ff742f8b94723a691842c810c2d2bed8e6da1560dc68cd613120c0082127de9825971ef2c9ff17f6e4c4538f7d484c5abc313aebc4108cc7b069c424a51338ad7da4015f5c43c81d9714fd05d5dc969d3cd0c2f81fe1fc53f3f178d74582a811dd73a05c19a7214341bc8cec353d0165f83d27967100cd918f538f4bddee13377f7f6dbd1923e67be75fccaeb3ac37519e6ea1c927a64351e4bc37fb6abcad3872e035ad6f078e10bef8806f099a0c5e2ec5e724990d490d299e3e73211196df64652ad8f552ea5ababc24e754188630f1d4d2e927e490ae6d7dbea9a08fe29a33516d4dd3c15f4cca605f5f2fbc56fad198b46f6a368d9d492b68043063df77dd56b5c3a4720ea42413755684025bacd6049a4125ef48a243ce5d40de50a5930b1208a7ee43a211f854f3ec8eb558ace250c0f11e26efc7105a12d763adb02ef3eeade0b531413bb4cfb80856569928e311644dad7e45cbce4e69a3fd371d90be2fa59bc8731ad1887fb07916d8a47573c63808a52a3b23cd260dfc7145112b2ce545ebd213cd69e809df0668dfc10bcfab6c8360f54e57b6dcb9052e531f7f10469476a467d84dc8acc34beea7d0feaab33a172627b8c4e398c1c7ca468cad0aae2cfcb2bcdd563b5a685b98ebe101258fcb17f7c5f8bcd7bc4fd205dbd5c17460c268e80b66db5bb4dc0e7cc23ccb25ecdb5efe42360bf26247af1cddabcb99935548785e45b027cc73006ddc3233b74f277395ad1cd7cbf939ec69022aa6edb46cd5956e0884d7860c07533bae9180231b5318abd55c0d43b15f3e6d1a745d82e40c9fd3ad71a9dec6a53c2d3c6660628fec260842cdd2882245282c0d989c139cf8bfe8e85e0d965f2c75bb10046ad490810396d54cf24888d2a0f471ca0c91b90107bd211fe821b68b44be9fcd5c67d009fc5fdb7ed2ad2d8519a18c3fb0d10bc9c72813e66cb4e18fe1c5f15c50d33eb358a0bbcc3e418308cd97b8ae714b1054bf486bfa807085f605ccab84eb32459dfc804e6da9caa64649ab236081924ce53ade41df1ba36a027f3c2c7330162aea0e2c5d4a9893af47ca2afaafac5b994b658c52f50372d2504a293cda9080b8ee56c16b6f4e663f951104bb9699e2271dc58008d693f0e18e04ef321b7bbf9e93ba261c7601962fad9635d6e1e2ee71ef1578f7a0bc6ca2e01c9568ec0c12f14f432c70f79d12e3f6081ba519bd1625345e34ac67e147dfa74884d8e49d3755c2e8078a2b2c6bd63e7c1b4e1b16737b7fc5a6a8cea0e6351788f8a0531bcc83d828f784317afaf81938f5ec93bb0a48863b3e9b8f4d8bb584dbb2c97050141fb8470cf3e134d557dfc7ff55af8cf66e07277372434befba99e1720c2b74aa53b67efa6b39218e6cf63c16f8d869301e17b1c9e9377789d00f250bb7f20bee15adda8936f7bbd5a999569fbc3db9c48dce52e77925f75bde9eef9b28a563e673c0731e51368dc53a9d97d6d74689bd7c6bab3418a7c9b7c2d780f205e12665f91ee3be3ce093e3c3e669d9b1a67c3e28879f2101782adea4ac6fd301fbcebe4d6f314c83e903031cbfbec760017f62", 0x1000}, {&(0x7f00000044c0)="88dd98c3111250d33a4e5d68e48abae27a0c78601a3349a9732bc6990a0deb30f18c62b239722a792aaccf3f31c7942a9b02b51152457385a26dfed500d922abd6682d10409f3547755b4df54bf66e8e7e0b6d1870d1deb0e94a6684ed0cdea1306a01779302cd9ad703c0831c77729efdc0658bd4c15b8d533c19bd2eac5a73a01a535ad71ab1b4dbe454403a3a1a778c47bbe4a50feab0b24a67c417b7dcd5ed6fa2ab9d658a5e47fb0c10f877", 0xae}], 0x7, 0x12, 0x1, {0x2, r6}}) 3.907732485s ago: executing program 1 (id=8589): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = semget$private(0x0, 0x4000000009, 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde080045000070005c000000019078ac1e0001ac1414aa03009078000800004500000000000000008900007f000001ac1e0101443c00010000000000000000ffffffff000000007f000001000000000000000000000000ac1414aa00000000e000000100000000ac1414000000000083a81c006878a4abbe4e750a4d14d23d0f7e6e72723c8a75ef69127ba96b83a3a142c8f43fad63cf61821e67b4c3b04b635601a1b85e4968c12c1d84d663969395d0427e726022a50ac0c2effa80732efa88968db3a4dd0d1b98357dcf3dadb0ff67732bd529c0"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r8) r9 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r8, 0x0) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbc1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) read$char_usb(r8, &(0x7f0000000380)=""/190, 0xbe) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x2, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r11, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 3.848631665s ago: executing program 3 (id=8590): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x8000}, &(0x7f0000000240)=0x8) 3.30974623s ago: executing program 5 (id=8591): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec010203010902"], 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x9}], 0x1, 0x40012100, 0x0) getsockname$packet(r0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) 2.95359049s ago: executing program 3 (id=8592): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x5}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x7}, 0x0, 0x0) 2.830551589s ago: executing program 3 (id=8593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r4 = syz_open_dev$media(&(0x7f0000000080), 0x2, 0x40001) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.181395156s ago: executing program 3 (id=8594): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.178174572s ago: executing program 4 (id=8595): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c0000970000000000000000000000000100"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8", 0x3d}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa9", 0x3}, {&(0x7f00000004c0)}], 0x2}}], 0x3, 0xc080) 2.071125688s ago: executing program 4 (id=8596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x84}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) listen(r0, 0x2000fff) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x70}}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xb, @private1, 0x9}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.661301544s ago: executing program 1 (id=8597): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec010203010902"], 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x9}], 0x1, 0x40012100, 0x0) getsockname$packet(r0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) 1.566486894s ago: executing program 0 (id=8598): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x1e}, [@call]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000340)=""/153, 0x0, 0x3}, 0x94) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x3800, {"e6a3785ef3ea62186288f8d2b35df471", "d35c65ff7462d83df18224e8fe7e024f", "82e70a363e66af9d666e017c542a839d"}, 0x7ad, 0x2}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) syz_usb_disconnect(r2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) r4 = syz_open_dev$midi(&(0x7f0000000100), 0x1, 0x80) close_range(r4, r3, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) (async) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x201, 0x4800003e, r5, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xf811, 0x3}, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) 1.096762487s ago: executing program 0 (id=8599): r0 = syz_io_uring_setup(0x46ca, &(0x7f0000000500)={0x0, 0x7119, 0x2000, 0x0, 0x23d}, &(0x7f0000000080)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x9, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d4", 0x2e) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}], 0x1, 0x2090) sendto$inet(r7, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) eventfd2(0x565, 0x80001) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000600)="235b558122ef2a10334fb8c3114fa523d54cf90e93b9eeb4656ad975400084cb560f53de7e3a67aa637bc7bb901fba0d52eae5fde73393ad8431987da19dbfda79bfd11be11cae64c814e94c3e6324f3d0429893154a28822cbdb804b520d2b6efc875af839dc0c79aab5bf569a3898d57061dc55d705bc18e149acc6f552556715b50c983e524a9050b85b756fe33226bd3babdecc70d618c60ee5fb89cbfd5828ef3c3f50d9d33b3a95872e642ec1799e48d1e056f6f97119160ef171331c81126bb25ed65ee052533ea6559ad052d89f7c98cf8064488148e981b137b04a769839cf01f95e220295c862abf4a6314adbe81c9a33e76762a713ba832a0", 0xfe}, {&(0x7f0000000700)="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", 0x1000}], 0x2, &(0x7f0000001740)=[@rights={{0x34, 0x1, 0x1, [r4, r5, r0, 0xffffffffffffffff, r5, r5, 0xffffffffffffffff, r2, r6]}}, @rights={{0x2c, 0x1, 0x1, [r4, r7, 0xffffffffffffffff, r5, r5, r5, r5]}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r5]}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, r3]}}, @cred={{0x1c}}], 0xd8, 0x8000}}], 0x1, 0x4008000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x3e, 0xfe, 0x38}}) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_enter(r0, 0x95d, 0xfa39, 0xc1, 0x0, 0x0) io_uring_enter(r0, 0xedd, 0x8acb, 0x41, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x50, r0, 0x8000000) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 927.53277ms ago: executing program 4 (id=8600): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x4}, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8c081, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) gettid() 182.23504ms ago: executing program 0 (id=8601): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r9, 0x2c, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="300000001d000000", @ANYRES32=r9, @ANYBLOB="af499d78642975317b0b56692ee4beb5c5a82c9471ab0d3c6d7f351ee47b07a7dfa6db66eff73b5586bc2bc436b91145b06597f5e4950033abd2f4670d715b08670b4ff42fc049c323a4277e7307e13e36b38edda1255600b97a94412700f1f2f3d55b5b8e7e7e07da0bb5eebca7f524c30bde521ae6ef275bbdabe5bd58421f87fc4a", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r10], 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68449}, [@IFLA_WEIGHT={0x8, 0xf, 0xb9e}]}, 0x28}}, 0x0) 0s ago: executing program 5 (id=8602): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x8000}, &(0x7f0000000240)=0x8) kernel console output (not intermixed with test programs): b 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1954.366692][ T6940] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1954.467535][ T6940] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1954.486345][ T6940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.701045][ T6940] usb 6-1: usb_control_msg returned -32 [ 1954.712477][ T6940] usbtmc 6-1:16.0: can't read capabilities [ 1954.926485][T16271] usb 4-1: USB disconnect, device number 26 [ 1954.975454][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8101'. [ 1955.052895][T13030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1955.071487][T13030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1955.346537][T13079] netlink: 'syz.0.8104': attribute type 3 has an invalid length. [ 1955.394776][T13087] netlink: 'syz.1.8105': attribute type 1 has an invalid length. [ 1955.542979][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8105'. [ 1955.610001][T13087] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1955.667441][T13087] macvlan3: entered promiscuous mode [ 1955.685399][T13087] macvlan3: entered allmulticast mode [ 1955.710734][T13087] bond7: entered promiscuous mode [ 1955.731982][T13087] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1955.765049][T13087] bond7: left promiscuous mode [ 1956.422663][T13160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.444341][T13160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.545810][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8112'. [ 1956.648355][T16271] usb 6-1: USB disconnect, device number 85 [ 1957.096229][T16271] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1957.350835][T16271] usb 6-1: Using ep0 maxpacket: 16 [ 1957.378127][T16271] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1957.414473][T16271] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1957.434728][T13193] netlink: 'syz.0.8116': attribute type 3 has an invalid length. [ 1957.501016][T16271] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1957.520799][T16271] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.547689][T16271] usb 6-1: config 0 descriptor?? [ 1957.731351][T13201] FAULT_INJECTION: forcing a failure. [ 1957.731351][T13201] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.744975][T13201] CPU: 0 UID: 0 PID: 13201 Comm: syz.3.8119 Tainted: G L syzkaller #0 PREEMPT(full) [ 1957.745005][T13201] Tainted: [L]=SOFTLOCKUP [ 1957.745013][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1957.745025][T13201] Call Trace: [ 1957.745032][T13201] [ 1957.745042][T13201] dump_stack_lvl+0xe8/0x150 [ 1957.745074][T13201] should_fail_ex+0x412/0x560 [ 1957.745104][T13201] should_failslab+0xa8/0x100 [ 1957.745137][T13201] ? sctp_get_port_local+0x6f2/0x1730 [ 1957.745290][T13201] kmem_cache_alloc_noprof+0x87/0x650 [ 1957.745317][T13201] sctp_get_port_local+0x6f2/0x1730 [ 1957.745356][T13201] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1957.745386][T13201] ? sctp_bind_addr_match+0x28b/0x2b0 [ 1957.745425][T13201] sctp_do_bind+0x4f1/0x9d0 [ 1957.745459][T13201] sctp_connect_new_asoc+0x270/0x6b0 [ 1957.745489][T13201] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1957.745519][T13201] ? __local_bh_enable_ip+0xd0/0x130 [ 1957.745540][T13201] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1957.745560][T13201] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1957.745581][T13201] sctp_sendmsg+0x1528/0x2c10 [ 1957.745618][T13201] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1957.745647][T13201] ? aa_sk_perm+0x6d5/0x900 [ 1957.745673][T13201] ? __pfx_aa_sk_perm+0x10/0x10 [ 1957.745696][T13201] ? sock_rps_record_flow+0x19/0x400 [ 1957.745727][T13201] ? inet_sendmsg+0x2f4/0x370 [ 1957.745747][T13201] __sys_sendto+0x627/0x7a0 [ 1957.745775][T13201] ? __pfx___sys_sendto+0x10/0x10 [ 1957.745798][T13201] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1957.745829][T13201] ? __fget_files+0x3a0/0x420 [ 1957.745863][T13201] ? ksys_write+0x242/0x270 [ 1957.745884][T13201] ? __pfx_ksys_write+0x10/0x10 [ 1957.745907][T13201] __x64_sys_sendto+0xde/0x100 [ 1957.745936][T13201] do_syscall_64+0x14d/0xf80 [ 1957.745952][T13201] ? trace_irq_disable+0x3b/0x150 [ 1957.745976][T13201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.745994][T13201] ? clear_bhb_loop+0x40/0x90 [ 1957.746015][T13201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.746033][T13201] RIP: 0033:0x7f1f06d9c799 [ 1957.746051][T13201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1957.746067][T13201] RSP: 002b:00007f1f07d0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1957.746086][T13201] RAX: ffffffffffffffda RBX: 00007f1f07015fa0 RCX: 00007f1f06d9c799 [ 1957.746099][T13201] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1957.746117][T13201] RBP: 00007f1f07d0c090 R08: 0000200000000140 R09: 000000000000001c [ 1957.746129][T13201] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 1957.746141][T13201] R13: 00007f1f07016038 R14: 00007f1f07015fa0 R15: 00007f1f0713fa48 [ 1957.746170][T13201] [ 1958.227997][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1958.345601][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1958.401255][T16271] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 1958.409144][T16271] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 1958.416899][T16271] cm6533_jd 0003:0D8C:0022.0040: item fetching failed at offset 2/5 [ 1958.506880][T16271] cm6533_jd 0003:0D8C:0022.0040: parse failed [ 1958.513130][T16271] cm6533_jd 0003:0D8C:0022.0040: probe with driver cm6533_jd failed with error -22 [ 1958.570479][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8123'. [ 1958.813039][T13244] netlink: 'syz.0.8128': attribute type 3 has an invalid length. [ 1958.817788][ T1889] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1958.886037][ T8100] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1958.976170][ T1889] usb 5-1: Using ep0 maxpacket: 8 [ 1958.989380][ T1889] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1959.001434][ T1889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1959.028439][ T1889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1959.048047][ T8100] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.070482][ T1889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1959.080751][ T8100] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1959.100986][ T1889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1959.124174][ T8100] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1959.143474][ T1889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1959.164819][ T8100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.181688][ T1889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.197462][ T8100] usb 4-1: config 0 descriptor?? [ 1959.233128][ T8100] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1959.316994][T13252] bond0: (slave syz_tun): Releasing backup interface [ 1959.421239][ T1889] usb 5-1: usb_control_msg returned -32 [ 1959.428942][ T1889] usbtmc 5-1:16.0: can't read capabilities [ 1959.756515][T16271] usb 6-1: USB disconnect, device number 86 [ 1959.780897][T13264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.803701][T13264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.117877][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.147053][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.396445][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8137'. [ 1960.466251][T16271] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1960.621192][T16271] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 1960.646252][T16271] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1960.683767][T16271] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1960.695996][T16271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.704032][T16271] usb 6-1: Product: syz [ 1960.726746][T16271] usb 6-1: Manufacturer: syz [ 1960.731495][T16271] usb 6-1: SerialNumber: syz [ 1960.753613][T13293] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 1960.852032][T13307] netlink: 'syz.0.8139': attribute type 3 has an invalid length. [ 1960.973067][T13293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.993059][T13293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.016436][T16271] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1961.041209][T16271] usb 6-1: USB disconnect, device number 87 [ 1961.503856][T16271] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1961.692583][ T6940] usb 5-1: USB disconnect, device number 118 [ 1961.808759][T22567] usb 4-1: USB disconnect, device number 27 [ 1962.316055][T22567] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1962.334168][T13365] netlink: 'syz.3.8147': attribute type 1 has an invalid length. [ 1962.455289][T22567] usb 5-1: device descriptor read/64, error -71 [ 1962.529507][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8147'. [ 1962.540441][T13365] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1962.563685][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8148'. [ 1962.591912][T13365] macvlan5: entered promiscuous mode [ 1962.598865][T13365] macvlan5: entered allmulticast mode [ 1962.606332][T13365] bond10: entered promiscuous mode [ 1962.612302][T13365] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1962.628050][T13365] bond10: left promiscuous mode [ 1962.708640][T22567] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1962.876569][T22567] usb 5-1: device descriptor read/64, error -71 [ 1962.998794][T22567] usb usb5-port1: attempt power cycle [ 1963.136701][T13416] netlink: 'syz.0.8150': attribute type 3 has an invalid length. [ 1963.186821][T16271] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1963.194447][T16271] usb 6-1: can't read configurations, error -71 [ 1963.240674][T13421] netlink: 'syz.5.8151': attribute type 3 has an invalid length. [ 1963.356530][T22567] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1963.383442][T13428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.396266][T22567] usb 5-1: device descriptor read/8, error -71 [ 1963.422450][T13428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.646783][T22567] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1963.676306][ T8090] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1963.679276][T22567] usb 5-1: device descriptor read/8, error -71 [ 1963.866597][T22567] usb usb5-port1: unable to enumerate USB device [ 1963.956076][ T8090] usb 4-1: Using ep0 maxpacket: 8 [ 1963.969991][ T8090] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1963.981811][ T8090] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1963.993166][ T8090] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1964.033059][ T8090] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1964.043877][ T8090] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1964.059200][ T8090] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1964.068906][ T8090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.180195][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8158'. [ 1964.269514][T13450] bond12: entered promiscuous mode [ 1964.282420][T13450] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1964.289812][ T8090] usb 4-1: usb_control_msg returned -32 [ 1964.298086][ T8090] usbtmc 4-1:16.0: can't read capabilities [ 1964.345103][T13488] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1964.357198][T13488] bond12: (slave sit2): The slave device specified does not support setting the MAC address [ 1964.379314][T13488] bond12: (slave sit2): Error -95 calling set_mac_address [ 1964.545564][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8159'. [ 1964.642004][T13496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.650878][T13496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.855485][T13509] FAULT_INJECTION: forcing a failure. [ 1964.855485][T13509] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.896067][T13509] CPU: 0 UID: 0 PID: 13509 Comm: syz.0.8163 Tainted: G L syzkaller #0 PREEMPT(full) [ 1964.896098][T13509] Tainted: [L]=SOFTLOCKUP [ 1964.896106][T13509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1964.896117][T13509] Call Trace: [ 1964.896125][T13509] [ 1964.896133][T13509] dump_stack_lvl+0xe8/0x150 [ 1964.896166][T13509] should_fail_ex+0x412/0x560 [ 1964.896194][T13509] should_failslab+0xa8/0x100 [ 1964.896216][T13509] ? skb_clone+0x212/0x3a0 [ 1964.896234][T13509] kmem_cache_alloc_noprof+0x87/0x650 [ 1964.896256][T13509] ? __netlink_lookup+0xc6/0x8b0 [ 1964.896280][T13509] skb_clone+0x212/0x3a0 [ 1964.896296][T13509] __netlink_deliver_tap+0x404/0x850 [ 1964.896320][T13509] ? netlink_deliver_tap+0x2e/0x1b0 [ 1964.896338][T13509] netlink_deliver_tap+0x19c/0x1b0 [ 1964.896356][T13509] netlink_unicast+0x7e3/0x9b0 [ 1964.896376][T13509] ? __pfx_netlink_unicast+0x10/0x10 [ 1964.896392][T13509] ? netlink_sendmsg+0x650/0xb40 [ 1964.896408][T13509] ? skb_put+0x11b/0x210 [ 1964.896429][T13509] netlink_sendmsg+0x813/0xb40 [ 1964.896452][T13509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1964.896471][T13509] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1964.896490][T13509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1964.896506][T13509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1964.896523][T13509] ____sys_sendmsg+0xa68/0xad0 [ 1964.896549][T13509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1964.896576][T13509] ? import_iovec+0x73/0xa0 [ 1964.896597][T13509] ___sys_sendmsg+0x2a5/0x360 [ 1964.896621][T13509] ? __pfx____sys_sendmsg+0x10/0x10 [ 1964.896662][T13509] ? __fget_files+0x2a/0x420 [ 1964.896681][T13509] ? __fget_files+0x3a0/0x420 [ 1964.896706][T13509] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1964.896728][T13509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1964.896754][T13509] ? __pfx_ksys_write+0x10/0x10 [ 1964.896776][T13509] do_syscall_64+0x14d/0xf80 [ 1964.896788][T13509] ? trace_irq_disable+0x3b/0x150 [ 1964.896808][T13509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1964.896821][T13509] ? clear_bhb_loop+0x40/0x90 [ 1964.896838][T13509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1964.896851][T13509] RIP: 0033:0x7f3139b9c799 [ 1964.896864][T13509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1964.896876][T13509] RSP: 002b:00007f313aad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1964.896890][T13509] RAX: ffffffffffffffda RBX: 00007f3139e15fa0 RCX: 00007f3139b9c799 [ 1964.896901][T13509] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1964.896909][T13509] RBP: 00007f313aad5090 R08: 0000000000000000 R09: 0000000000000000 [ 1964.896918][T13509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1964.896926][T13509] R13: 00007f3139e16038 R14: 00007f3139e15fa0 R15: 00007f3139f3fa48 [ 1964.896952][T13509] [ 1965.283153][T13517] netlink: 'syz.5.8164': attribute type 1 has an invalid length. [ 1965.380561][T13531] netlink: 'syz.4.8165': attribute type 3 has an invalid length. [ 1965.433480][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8164'. [ 1965.443735][T13561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1965.582275][T13517] macvlan7: entered promiscuous mode [ 1965.601868][T13517] macvlan7: entered allmulticast mode [ 1965.630636][T13517] bond4: entered promiscuous mode [ 1965.657147][T13517] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1965.670658][T13517] bond4: left promiscuous mode [ 1965.749086][T13568] bond13: Removing last ns target with arp_interval on [ 1965.770339][T22567] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1965.963737][T22567] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.977914][T22567] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1966.004879][T22567] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1966.014047][T22567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.048516][T22567] usb 2-1: config 0 descriptor?? [ 1966.057843][T22567] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1966.594654][ T8090] usb 4-1: USB disconnect, device number 28 [ 1966.845789][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8173'. [ 1967.485850][T13659] netlink: 'syz.4.8175': attribute type 10 has an invalid length. [ 1967.757053][T13661] netlink: 'syz.4.8175': attribute type 10 has an invalid length. [ 1967.807372][T13661] team0: Port device netdevsim0 removed [ 1968.135174][T13677] syzkaller0: entered promiscuous mode [ 1968.168826][T13677] syzkaller0: entered allmulticast mode [ 1968.440940][T16271] usb 2-1: USB disconnect, device number 63 [ 1968.776620][ T8100] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1968.926135][ T8100] usb 6-1: Using ep0 maxpacket: 8 [ 1968.942603][ T8100] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1968.958329][ T8100] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1969.003120][ T8100] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1969.036102][T16271] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1969.043892][ T8100] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1969.078211][ T8100] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1969.096344][ T8100] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1969.108700][ T8100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.236100][T16271] usb 2-1: Using ep0 maxpacket: 32 [ 1969.246842][T16271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.276028][T16271] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1969.306364][T16271] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 0 [ 1969.335990][T16271] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1969.366553][T16271] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1969.490085][ T8100] usb 6-1: usb_control_msg returned -32 [ 1969.504031][T16271] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1969.508593][ T8100] usbtmc 6-1:16.0: can't read capabilities [ 1969.522467][T16271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.550409][T16271] usb 2-1: Product: syz [ 1969.565311][T16271] usb 2-1: Manufacturer: syz [ 1969.582153][T16271] usb 2-1: SerialNumber: syz [ 1969.608266][T16271] usb 2-1: config 0 descriptor?? [ 1969.624684][T16271] gs_usb 2-1:0.0: Required endpoints not found [ 1969.843261][T13723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1969.880717][T13723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.423004][ T8100] usb 6-1: USB disconnect, device number 90 [ 1971.682551][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8188'. [ 1971.707672][ T8090] usb 2-1: USB disconnect, device number 64 [ 1971.824380][T13751] bond5: entered promiscuous mode [ 1971.858295][T13751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1972.531887][T13803] netlink: 'syz.5.8191': attribute type 1 has an invalid length. [ 1972.746284][T22567] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1972.957536][T22567] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1972.968190][T22567] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1973.140371][T22567] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1973.176926][T22567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.176945][ T8090] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1973.251880][T22567] usb 5-1: config 0 descriptor?? [ 1973.272528][T22567] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1973.327950][ T8090] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1973.356120][ T8090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1973.401835][ T8090] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1973.431777][ T8090] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1973.461653][ T8090] usb 4-1: Manufacturer: syz [ 1973.498780][ T8090] usb 4-1: config 0 descriptor?? [ 1973.738559][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.749767][ T8090] rc_core: IR keymap rc-hauppauge not found [ 1973.806891][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.818190][ T8090] Registered IR keymap rc-empty [ 1973.831552][ T8090] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1973.854926][ T8090] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input188 [ 1974.135415][ T8090] usb 4-1: USB disconnect, device number 29 [ 1974.904026][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8200'. [ 1975.015823][T13877] bond8: entered promiscuous mode [ 1975.027343][ T8090] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1975.069970][T13877] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1975.147683][T13912] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1975.154845][T13912] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 1975.203020][T13912] bond8: (slave sit1): Error -95 calling set_mac_address [ 1975.210838][ T8090] usb 4-1: Using ep0 maxpacket: 8 [ 1975.228476][ T8090] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1975.246183][ T8090] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1975.268789][ T8090] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1975.303605][ T8090] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1975.333285][ T8090] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1975.360441][ T8090] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1975.383929][ T8090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.479765][ T6940] usb 5-1: USB disconnect, device number 123 [ 1975.651440][ T8090] usb 4-1: usb_control_msg returned -32 [ 1975.657529][ T8090] usbtmc 4-1:16.0: can't read capabilities [ 1975.665773][T13946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.695889][T13946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.782928][T13939] netlink: 'syz.4.8206': attribute type 29 has an invalid length. [ 1975.813814][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.820361][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.010032][T13968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.023640][T13968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.040612][T22567] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1976.218210][T22567] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1976.236121][T22567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1976.272147][T22567] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1976.286368][T22567] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1976.294396][T22567] usb 2-1: Manufacturer: syz [ 1976.318941][T22567] usb 2-1: config 0 descriptor?? [ 1976.336592][ T8100] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 1976.469856][T22567] rc_core: IR keymap rc-hauppauge not found [ 1976.475829][T22567] Registered IR keymap rc-empty [ 1976.506654][T22567] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1976.527085][ T8100] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1976.537753][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.552330][T22567] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input189 [ 1976.565243][ T8100] usb 6-1: config 0 has no interface number 0 [ 1976.584408][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.592343][ T8100] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1976.618053][ T8100] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1976.636631][ T8090] usb 2-1: USB disconnect, device number 65 [ 1976.649513][ T8100] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1976.673121][ T8100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.698642][ T8100] usb 6-1: config 0 descriptor?? [ 1976.714576][T13974] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1976.746504][ T8100] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1976.948516][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.958276][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1977.036953][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8216'. [ 1977.161605][T14064] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8211'. [ 1977.191659][T14023] bond17: entered promiscuous mode [ 1977.230211][T14023] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1977.566409][ T8100] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1977.665041][T22567] usb 4-1: USB disconnect, device number 30 [ 1977.720361][ T8100] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1977.738635][ T8100] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1977.763861][ T8100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.803159][ T8100] usb 2-1: config 0 descriptor?? [ 1977.827674][ T8100] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1978.876190][T14125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8222'. [ 1978.887354][T14125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8222'. [ 1979.185488][ T8090] usb 6-1: USB disconnect, device number 91 [ 1979.441067][T14142] fuse: Unknown parameter '0xffffffffffffffff' [ 1980.110642][T14146] binfmt_misc: register: failed to install interpreter file ./cgroup [ 1980.329802][ T8090] usb 2-1: USB disconnect, device number 66 [ 1980.477966][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8228'. [ 1980.558155][ T30] audit: type=1800 audit(1772419942.441:2776): pid=14173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8229" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1980.725111][T14168] bond9: entered promiscuous mode [ 1980.726639][ T8090] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1980.771614][T14168] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1980.819997][T14205] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1980.849955][T14205] bond9: (slave sit1): The slave device specified does not support setting the MAC address [ 1980.894121][T14205] bond9: (slave sit1): Error -95 calling set_mac_address [ 1980.901150][ T8090] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1980.936127][ T8090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1980.960777][ T8090] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1980.970333][ T8090] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1980.984207][ T8090] usb 5-1: Manufacturer: syz [ 1981.011594][ T8090] usb 5-1: config 0 descriptor?? [ 1981.229105][ T8090] rc_core: IR keymap rc-hauppauge not found [ 1981.237677][T14163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1981.279224][T14226] i2c i2c-0: dtv_property_process_set: SET cmd 0x7665642f undefined [ 1981.287569][ T8090] Registered IR keymap rc-empty [ 1981.308307][ T8090] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1981.317749][T14163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.361518][ T8090] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input190 [ 1981.404717][T14232] netlink: 'syz.3.8231': attribute type 1 has an invalid length. [ 1981.425366][ T8090] usb 5-1: USB disconnect, device number 124 [ 1981.696523][T22567] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1981.904145][ T30] audit: type=1326 audit(1772419943.641:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1981.972574][ T30] audit: type=1326 audit(1772419943.641:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1982.003022][T14304] FAULT_INJECTION: forcing a failure. [ 1982.003022][T14304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1982.084879][T14304] CPU: 0 UID: 0 PID: 14304 Comm: syz.0.8235 Tainted: G L syzkaller #0 PREEMPT(full) [ 1982.084910][T14304] Tainted: [L]=SOFTLOCKUP [ 1982.084917][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1982.084934][T14304] Call Trace: [ 1982.084942][T14304] [ 1982.084951][T14304] dump_stack_lvl+0xe8/0x150 [ 1982.084986][T14304] should_fail_ex+0x412/0x560 [ 1982.085006][T14304] _copy_from_user+0x2d/0xb0 [ 1982.085026][T14304] kstrtouint_from_user+0xd6/0x180 [ 1982.085043][T14304] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1982.085069][T14304] proc_fail_nth_write+0x8e/0x210 [ 1982.085088][T14304] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1982.085108][T14304] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1982.085127][T14304] vfs_write+0x29a/0xb90 [ 1982.085145][T14304] ? __pfx_vfs_write+0x10/0x10 [ 1982.085159][T14304] ? __fget_files+0x2a/0x420 [ 1982.085179][T14304] ? __fget_files+0x3a0/0x420 [ 1982.085196][T14304] ? __fget_files+0x2a/0x420 [ 1982.085218][T14304] ksys_write+0x150/0x270 [ 1982.085233][T14304] ? __pfx_ksys_write+0x10/0x10 [ 1982.085255][T14304] do_syscall_64+0x14d/0xf80 [ 1982.085267][T14304] ? trace_irq_disable+0x3b/0x150 [ 1982.085285][T14304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.085299][T14304] ? clear_bhb_loop+0x40/0x90 [ 1982.085314][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.085327][T14304] RIP: 0033:0x7f3139b5cfce [ 1982.085339][T14304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1982.085350][T14304] RSP: 002b:00007f313aab3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1982.085364][T14304] RAX: ffffffffffffffda RBX: 00007f313aab46c0 RCX: 00007f3139b5cfce [ 1982.085374][T14304] RDX: 0000000000000001 RSI: 00007f313aab40a0 RDI: 0000000000000006 [ 1982.085382][T14304] RBP: 00007f313aab4090 R08: 0000000000000000 R09: 0000000000000000 [ 1982.085407][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1982.085415][T14304] R13: 00007f3139e16128 R14: 00007f3139e16090 R15: 00007f3139f3fa48 [ 1982.085438][T14304] [ 1982.086423][T22567] usb 4-1: Using ep0 maxpacket: 32 [ 1982.301688][ T30] audit: type=1326 audit(1772419943.641:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1982.326036][ T30] audit: type=1326 audit(1772419943.641:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1982.349188][ T30] audit: type=1326 audit(1772419943.641:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1982.375037][ T30] audit: type=1326 audit(1772419943.641:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1982.398154][ T30] audit: type=1326 audit(1772419943.641:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1982.421326][ T30] audit: type=1326 audit(1772419943.641:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1982.446612][ T30] audit: type=1326 audit(1772419943.641:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14291 comm="syz.5.8233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11eb9c799 code=0x7ffc0000 [ 1982.470238][ T8100] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1982.556180][T22567] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1982.567119][T22567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.576348][T22567] usb 4-1: Product: syz [ 1982.580623][T22567] usb 4-1: Manufacturer: syz [ 1982.606262][T22567] usb 4-1: SerialNumber: syz [ 1982.646641][ T8100] usb 6-1: Using ep0 maxpacket: 32 [ 1982.657643][ T8100] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.669566][ T8100] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1982.704177][T14310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8236'. [ 1982.713861][T14310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8236'. [ 1982.855670][ T8100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.882887][ T8100] usb 6-1: config 0 descriptor?? [ 1982.927312][T22567] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 1982.938834][ T8100] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1982.946558][T22567] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1982.971975][T22567] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1982.992378][T14232] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1983.020251][T14232] bond11: (slave bond12): making interface the new active one [ 1983.057765][T14232] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1983.099190][T22567] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1983.160956][T14352] netlink: 'syz.4.8237': attribute type 1 has an invalid length. [ 1983.169791][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.225773][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.266860][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8237'. [ 1983.432250][T14360] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1983.559128][T14352] macvlan5: entered promiscuous mode [ 1983.586009][T14352] macvlan5: entered allmulticast mode [ 1983.652303][T14352] bond18: entered promiscuous mode [ 1983.668728][T14404] libceph: resolve 'c' (ret=-3): failed [ 1983.699680][T14352] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1983.809576][T14352] bond18: left promiscuous mode [ 1984.078044][T14406] netlink: 'syz.0.8239': attribute type 3 has an invalid length. [ 1984.090199][ T6940] usb 4-1: USB disconnect, device number 31 [ 1984.109114][ T6940] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1984.147108][ T6940] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1984.177127][ T6940] visor 4-1:1.0: device disconnected [ 1984.765318][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8241'. [ 1984.774649][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8241'. [ 1984.957522][ T6940] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1985.096172][ T6940] usb 4-1: device descriptor read/64, error -71 [ 1985.416264][ T6940] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1985.582117][T16271] usb 6-1: USB disconnect, device number 92 [ 1985.590154][ T6940] usb 4-1: device descriptor read/64, error -71 [ 1985.726354][ T6940] usb usb4-port1: attempt power cycle [ 1985.998978][T14460] netlink: 'syz.4.8245': attribute type 3 has an invalid length. [ 1986.086244][ T6940] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1986.150970][ T6940] usb 4-1: device descriptor read/8, error -71 [ 1986.329036][T14466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.351285][T14467] ptrace attach of "./syz-executor exec"[27834] was attempted by "./syz-executor exec"[14467] [ 1986.416423][T14466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.526437][ T6940] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1986.549107][T14466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.558848][ T6940] usb 4-1: device descriptor read/8, error -71 [ 1986.568748][T14466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.676964][ T6940] usb usb4-port1: unable to enumerate USB device [ 1987.216016][ T8100] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1987.346887][T14485] netlink: 'syz.0.8251': attribute type 3 has an invalid length. [ 1987.368368][ T8100] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1987.392532][ T8100] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1987.462325][ T8100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.521826][T14489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8252'. [ 1987.531214][T14489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8252'. [ 1987.570765][ T8100] usb 2-1: config 0 descriptor?? [ 1987.581500][ T8100] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1988.156353][ T8100] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1989.116084][ T8100] usb 4-1: Using ep0 maxpacket: 8 [ 1989.124804][ T8100] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1989.177730][ T8100] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1989.188303][ T8100] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1989.214777][ T8100] usb 4-1: Product: syz [ 1989.224777][ T8100] usb 4-1: Manufacturer: syz [ 1989.247786][ T8100] usb 4-1: SerialNumber: syz [ 1989.484299][ T8100] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1989.501645][ T8100] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 1989.538702][ T8100] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 1989.577962][ T8100] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1989.685083][ T8100] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1989.708940][ T8100] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1989.761046][ T8100] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1989.888351][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.897113][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.911841][ T8100] usb 4-1: USB disconnect, device number 36 [ 1989.925272][ T8100] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1989.978492][ T8100] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1990.012294][ T8100] visor 4-1:1.0: device disconnected [ 1990.051653][ T6940] usb 2-1: USB disconnect, device number 67 [ 1990.087367][T14543] netlink: 'syz.4.8256': attribute type 3 has an invalid length. [ 1990.193660][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1990.193680][ T30] audit: type=1800 audit(1772419952.071:2818): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8260" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1990.301542][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8257'. [ 1990.343641][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8257'. [ 1990.436610][ T6940] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1990.740939][ T6940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.758034][ T6940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.777926][ T6940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.794392][ T6940] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1990.806176][ T8100] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1990.828300][ T6940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.851630][ T6940] usb 2-1: config 0 descriptor?? [ 1990.962421][ T8100] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1990.971424][ T8100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1991.015222][ T8100] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1991.025026][ T8100] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1991.052735][ T8100] usb 5-1: Manufacturer: syz [ 1991.122463][T14588] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1991.135781][ T6940] usb 2-1: USB disconnect, device number 68 [ 1991.199039][ T8100] usb 5-1: config 0 descriptor?? [ 1991.289414][T14600] netlink: 'syz.3.8264': attribute type 10 has an invalid length. [ 1991.335786][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8264'. [ 1991.349174][ T8100] rc_core: IR keymap rc-hauppauge not found [ 1991.359306][ T8100] Registered IR keymap rc-empty [ 1991.388493][ T8100] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1991.420189][T14574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.459180][T14574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.474005][ T8100] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input191 [ 1991.518578][ T8100] usb 5-1: USB disconnect, device number 125 [ 1991.966733][ T5032] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1991.997261][T14637] netlink: 'syz.5.8267': attribute type 1 has an invalid length. [ 1992.006820][T14638] netlink: 'syz.3.8266': attribute type 1 has an invalid length. [ 1992.073455][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8266'. [ 1992.139659][ T5032] usb 2-1: Using ep0 maxpacket: 8 [ 1992.152012][T14673] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1992.173276][ T5032] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1992.199389][ T5032] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1992.230044][T14638] macvlan5: entered promiscuous mode [ 1992.235441][T14638] macvlan5: entered allmulticast mode [ 1992.246165][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8267'. [ 1992.270770][T14638] bond13: entered promiscuous mode [ 1992.275624][ T5032] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1992.277351][T14638] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1992.304056][ T5032] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1992.334495][T14638] bond13: left promiscuous mode [ 1992.349649][ T5032] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1992.366755][T14637] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1992.394380][ T5032] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1992.409392][T14637] macvlan7: entered promiscuous mode [ 1992.436308][T14637] macvlan7: entered allmulticast mode [ 1992.441843][ T5032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.466933][T14637] bond6: entered promiscuous mode [ 1992.476515][T14637] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1992.496375][ T6940] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1992.504797][T14637] bond6: left promiscuous mode [ 1992.658099][ T6940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1992.683638][ T6940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1992.706506][ T6940] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1992.708096][ T5032] usb 2-1: usb_control_msg returned -32 [ 1992.736318][ T6940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.742778][ T5032] usbtmc 2-1:16.0: can't read capabilities [ 1992.751699][ T6940] usb 5-1: config 0 descriptor?? [ 1992.782706][ T6940] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1993.060088][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1993.109220][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.129965][T14743] fuse: Bad value for 'fd' [ 1994.237612][T14764] netlink: 'syz.0.8275': attribute type 3 has an invalid length. [ 1994.304279][T14766] netlink: 'syz.0.8276': attribute type 10 has an invalid length. [ 1994.315250][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8276'. [ 1994.749350][ T5032] usb 2-1: USB disconnect, device number 69 [ 1994.917491][ T6940] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1994.996182][ T8100] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1995.099262][ T6940] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1995.109555][ T6940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1995.116276][ T5032] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1995.138802][ T6940] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1995.146207][ T8100] usb 6-1: Using ep0 maxpacket: 32 [ 1995.154793][ T8100] usb 6-1: config 0 has no interfaces? [ 1995.164085][ T8100] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1995.166740][ T6940] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1995.193980][ T8100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.286745][ T6940] usb 4-1: Manufacturer: syz [ 1995.306203][ T5032] usb 2-1: Using ep0 maxpacket: 32 [ 1995.309891][ T6940] usb 4-1: config 0 descriptor?? [ 1995.317116][ T5032] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1995.317147][ T5032] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1995.320453][ T5032] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1995.349672][ T8100] usb 6-1: Product: syz [ 1995.366106][ T8100] usb 6-1: Manufacturer: syz [ 1995.375358][ T8100] usb 6-1: SerialNumber: syz [ 1995.384964][T22567] usb 5-1: USB disconnect, device number 126 [ 1995.401317][ T5032] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1995.442331][ T8100] usb 6-1: config 0 descriptor?? [ 1995.450152][ T5032] usb 2-1: Product: syz [ 1995.454486][ T5032] usb 2-1: Manufacturer: syz [ 1995.481260][ T5032] hub 2-1:4.0: USB hub found [ 1995.537311][ T6940] rc_core: IR keymap rc-hauppauge not found [ 1995.551038][ T6940] Registered IR keymap rc-empty [ 1995.573419][T14778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.606389][ T6940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1995.638283][ T6940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input192 [ 1995.666311][T14782] netem: change failed [ 1995.677383][T14778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.712025][T22567] usb 6-1: USB disconnect, device number 93 [ 1995.782264][ T6940] usb 4-1: USB disconnect, device number 37 [ 1995.877229][T14794] fuse: Unknown parameter '' [ 1995.959192][ T5032] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 1995.961599][T14794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.975991][T14794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1996.154752][ T5032] usb 2-1: USB disconnect, device number 70 [ 1996.405640][T14872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8284'. [ 1996.495121][T14876] netlink: 'syz.3.8287': attribute type 10 has an invalid length. [ 1996.516600][T14872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8284'. [ 1996.563324][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8287'. [ 1997.239269][ T6940] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1997.465527][ T6940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1997.507375][ T6940] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1997.576712][ T6940] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1997.606257][ T6940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.645785][ T6940] usb 6-1: config 0 descriptor?? [ 1997.667994][ T6940] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1998.296497][ T5032] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1998.482661][ T8100] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1998.543300][ T5032] usb 5-1: Using ep0 maxpacket: 32 [ 1998.564882][ T5032] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 1998.602287][ T5032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.623134][ T5032] usb 5-1: Product: syz [ 1998.638714][ T5032] usb 5-1: Manufacturer: syz [ 1998.653589][ T5032] usb 5-1: SerialNumber: syz [ 1998.688259][ T8100] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1998.696962][ T8100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.728165][ T8100] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1998.775993][ T8100] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1998.784117][ T8100] usb 4-1: Manufacturer: syz [ 1999.158311][ T8100] usb 4-1: config 0 descriptor?? [ 1999.456007][ T8100] rc_core: IR keymap rc-hauppauge not found [ 1999.462022][ T8100] Registered IR keymap rc-empty [ 1999.468901][ T8100] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1999.505562][ T8100] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input193 [ 1999.656429][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.676743][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.735119][ T6940] usb 4-1: USB disconnect, device number 38 [ 1999.929525][ T8100] usb 6-1: USB disconnect, device number 94 [ 2000.008187][T14973] x_tables: duplicate underflow at hook 3 [ 2000.041252][T14974] fuse: Unknown parameter '000000000000000000000530x0000000000000003' [ 2000.270455][T14986] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8304'. [ 2000.303152][T14986] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8304'. [ 2000.700394][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8306'. [ 2000.958280][ T8100] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2001.118187][ T5032] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2001.128636][ T5032] usb 5-1: unable to issue vendor read request (ret = -71) [ 2001.148435][ T8100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2001.179634][ T8100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2001.197816][ T5032] usb 5-1: unable to issue vendor read request (ret = -71) [ 2001.215318][ T8100] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2001.232303][ T5032] usb 5-1: unable to issue vendor read request (ret = -71) [ 2001.256763][ T5032] usb 5-1: unable to issue vendor read request (ret = -71) [ 2001.275997][ T8100] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2001.296477][ T8100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.304668][ T5032] usb 5-1: unable to issue vendor read request (ret = -71) [ 2001.337884][ T5032] usb 5-1: unable to issue vendor read request (ret = -71) [ 2001.349272][ T8100] usb 4-1: config 0 descriptor?? [ 2001.376097][ T5032] usb 5-1: unable to issue vendor read request (ret = -71) [ 2001.475296][T15012] binder: 15007:15012 ioctl 40045701 2000000002c0 returned -22 [ 2001.511822][ T5032] usb 5-1: unable to issue vendor read request (ret = -71) [ 2001.736698][ T5032] usb 5-1: USB disconnect, device number 127 [ 2002.024785][T15037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2002.041772][ T8100] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2002.043427][T15037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2002.154841][ T8100] usb 4-1: USB disconnect, device number 39 [ 2003.236649][ T8100] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2003.361507][T15080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.370353][T15080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.379843][T15080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.411082][ T8100] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2003.426617][T15080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.434529][ T8100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.474769][ T8100] usb 4-1: Product: syz [ 2003.479673][ T5032] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2003.496414][ T8100] usb 4-1: Manufacturer: syz [ 2003.510312][ T8100] usb 4-1: SerialNumber: syz [ 2003.528020][ T8100] usb 4-1: config 0 descriptor?? [ 2003.551677][ T8100] ch341 4-1:0.0: ch341-uart converter detected [ 2003.666469][ T5032] usb 6-1: Using ep0 maxpacket: 8 [ 2003.675428][ T5032] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.731334][ T5032] usb 6-1: config 0 has no interfaces? [ 2003.774504][ T5032] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2003.787154][ T5032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.828306][ T5032] usb 6-1: Product: syz [ 2003.832543][ T5032] usb 6-1: Manufacturer: syz [ 2003.883771][ T5032] usb 6-1: SerialNumber: syz [ 2003.899081][ T5032] usb 6-1: config 0 descriptor?? [ 2004.164328][T15075] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2004.170890][T15075] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2004.186903][T15075] vhci_hcd vhci_hcd.0: Device attached [ 2004.203379][T15097] vhci_hcd: connection closed [ 2004.203740][T23889] vhci_hcd vhci_hcd.5: stop threads [ 2004.209691][ T5032] usb 6-1: USB disconnect, device number 95 [ 2004.245514][T23889] vhci_hcd vhci_hcd.5: release socket [ 2004.282383][T23889] vhci_hcd vhci_hcd.5: disconnect device [ 2004.562285][ T8100] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 2004.828352][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8312'. [ 2004.837590][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8312'. [ 2004.927488][T23889] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2004.937053][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8312'. [ 2004.962359][T23889] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2004.971276][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8312'. [ 2004.992269][T23889] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2005.013026][T23889] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2005.790783][T15128] netlink: 186628 bytes leftover after parsing attributes in process `syz.1.8321'. [ 2006.072517][ T1889] usb 4-1: USB disconnect, device number 40 [ 2006.082086][ T1889] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 2006.101454][ T1889] ch341 4-1:0.0: device disconnected [ 2006.228396][T16271] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2006.398584][T16271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2006.415955][T16271] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2006.431815][T16271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.456526][T16271] usb 2-1: config 0 descriptor?? [ 2006.476589][T16271] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2006.866145][ T6940] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2006.999461][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.059235][ T6940] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2007.082935][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.091609][ T6940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.102645][T16271] usb 2-1: USB disconnect, device number 71 [ 2007.153886][ T6940] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2007.216967][ T6940] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2007.259575][T15185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.268465][ T6940] usb 5-1: Manufacturer: syz [ 2007.278516][ T6940] usb 5-1: config 0 descriptor?? [ 2007.304718][T15185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.508556][ T6940] rc_core: IR keymap rc-hauppauge not found [ 2007.514541][ T6940] Registered IR keymap rc-empty [ 2007.545405][ T6940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2007.557436][T15160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.588962][ T6940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input194 [ 2007.640588][T15160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.656291][T16271] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 2007.681206][ T6940] usb 5-1: USB disconnect, device number 2 [ 2007.806864][T16271] usb 2-1: device descriptor read/64, error -71 [ 2008.026581][ T8090] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2008.056339][T16271] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 2008.209452][T16271] usb 2-1: device descriptor read/64, error -71 [ 2008.218458][ T8090] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2008.231419][ T8090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.350284][ T8090] usb 4-1: Product: syz [ 2008.354589][ T8090] usb 4-1: Manufacturer: syz [ 2008.368813][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.377839][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.386182][ T8090] usb 4-1: SerialNumber: syz [ 2008.393741][ T8090] usb 4-1: config 0 descriptor?? [ 2008.409926][ T8090] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2008.456630][T16271] usb usb2-port1: attempt power cycle [ 2008.622738][ T8090] usb 4-1: USB disconnect, device number 41 [ 2008.798645][T16271] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 2008.875714][T16271] usb 2-1: device descriptor read/8, error -71 [ 2009.494515][T16271] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 2009.546070][ T5032] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2009.597923][T16271] usb 2-1: device descriptor read/8, error -71 [ 2009.730363][ T5032] usb 4-1: Using ep0 maxpacket: 32 [ 2009.740000][ T5032] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2009.751564][T16271] usb usb2-port1: unable to enumerate USB device [ 2009.771590][ T5032] usb 4-1: config 0 has no interface number 0 [ 2009.850315][ T5032] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2009.900671][ T5032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.945524][ T5032] usb 4-1: Product: syz [ 2009.961776][ T5032] usb 4-1: Manufacturer: syz [ 2009.983718][ T5032] usb 4-1: SerialNumber: syz [ 2010.050410][ T5032] usb 4-1: config 0 descriptor?? [ 2010.517327][ T5032] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2010.529654][ T5032] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2010.768728][ T5032] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2010.817450][ T5032] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 2011.186354][T16271] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2011.339983][T16271] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2011.350094][T16271] usb 2-1: config 0 has no interface number 0 [ 2011.370416][T16271] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2011.388916][T15288] syzkaller0: entered promiscuous mode [ 2011.394593][T15288] syzkaller0: entered allmulticast mode [ 2011.410110][T16271] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2011.426272][T16271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.452541][T16271] usb 2-1: Product: syz [ 2011.483472][T16271] usb 2-1: Manufacturer: syz [ 2011.511303][T16271] usb 2-1: SerialNumber: syz [ 2011.537563][T16271] usb 2-1: config 0 descriptor?? [ 2011.569237][T15282] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2011.584403][T16271] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2011.787750][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2011.797795][T16271] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2011.870920][T15307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8341'. [ 2012.156483][ T1889] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 2012.206758][T16271] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2012.263295][ T5032] usb 2-1: USB disconnect, device number 76 [ 2012.292418][ T5032] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2012.626592][ T1889] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 2012.635009][ T1889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2012.669894][ T5032] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2012.684586][ T1889] usb 5-1: config 0 has no interfaces? [ 2012.691192][ T5032] quatech2 2-1:0.51: device disconnected [ 2012.701707][ T1889] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2012.713624][ T1889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.755865][ T1889] usb 5-1: config 0 descriptor?? [ 2012.895723][ T1889] usb 4-1: USB disconnect, device number 42 [ 2013.036042][ T5032] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2013.197867][ T5032] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2013.221013][ T5032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2013.257997][ T5032] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2013.279733][ T5032] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2013.287902][ T1889] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 2013.312233][ T5032] usb 2-1: Manufacturer: syz [ 2013.331594][ T5032] usb 2-1: config 0 descriptor?? [ 2013.461162][ T1889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.499819][ T1889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2013.516010][ T5032] rc_core: IR keymap rc-hauppauge not found [ 2013.533541][ T1889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2013.544669][ T5032] Registered IR keymap rc-empty [ 2013.554165][T15328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2013.564758][ T1889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.581629][T15328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2013.592876][ T5032] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2013.621160][ T1889] usb 4-1: Product: syz [ 2013.642698][ T1889] usb 4-1: Manufacturer: syz [ 2013.659112][ T5032] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input195 [ 2013.673633][ T1889] usb 4-1: SerialNumber: syz [ 2013.713656][ T5032] usb 2-1: USB disconnect, device number 77 [ 2013.826309][T16271] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2013.875628][T15398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2013.885568][T15398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2013.902494][T15398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2013.912099][T15398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2013.948062][T15404] sctp: [Deprecated]: syz.3.8344 (pid 15404) Use of int in maxseg socket option. [ 2013.948062][T15404] Use struct sctp_assoc_value instead [ 2014.098214][ T1889] usb 4-1: 0:2 : does not exist [ 2014.116937][T16271] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2014.126551][ T1889] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2014.128236][T16271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.142322][T16271] usb 6-1: Product: syz [ 2014.146612][T16271] usb 6-1: Manufacturer: syz [ 2014.151243][T16271] usb 6-1: SerialNumber: syz [ 2014.160309][T16271] usb 6-1: config 0 descriptor?? [ 2014.247661][T15417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2014.256873][ T1889] usb 4-1: USB disconnect, device number 43 [ 2014.407702][T15431] process '/newroot/413/file0' started with executable stack [ 2014.519880][T15440] FAULT_INJECTION: forcing a failure. [ 2014.519880][T15440] name failslab, interval 1, probability 0, space 0, times 0 [ 2014.548308][T15440] CPU: 1 UID: 0 PID: 15440 Comm: syz.1.8354 Tainted: G L syzkaller #0 PREEMPT(full) [ 2014.548344][T15440] Tainted: [L]=SOFTLOCKUP [ 2014.548352][T15440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2014.548365][T15440] Call Trace: [ 2014.548374][T15440] [ 2014.548383][T15440] dump_stack_lvl+0xe8/0x150 [ 2014.548421][T15440] should_fail_ex+0x412/0x560 [ 2014.548453][T15440] should_failslab+0xa8/0x100 [ 2014.548482][T15440] __kmalloc_noprof+0xe8/0x760 [ 2014.548505][T15440] ? sock_kmalloc+0xd6/0x160 [ 2014.548524][T15440] ? nlmsg_notify+0xf0/0x1a0 [ 2014.548547][T15440] ? nlmsg_notify+0x14a/0x1a0 [ 2014.548574][T15440] sock_kmalloc+0xd6/0x160 [ 2014.548597][T15440] ip_mc_source+0x756/0x1490 [ 2014.548722][T15440] ? ip_rt_multicast_event+0x69/0x80 [ 2014.548803][T15440] do_ip_setsockopt+0x217c/0x2ea0 [ 2014.548833][T15440] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2014.548863][T15440] ? aa_sk_perm+0x6d5/0x900 [ 2014.548892][T15440] ? __pfx_aa_sk_perm+0x10/0x10 [ 2014.548916][T15440] ? __fget_files+0x2a/0x420 [ 2014.548941][T15440] ? aa_sock_opt_perm+0xff/0x1a0 [ 2014.548965][T15440] ip_setsockopt+0x66/0x110 [ 2014.548982][T15440] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2014.549006][T15440] do_sock_setsockopt+0x17c/0x1b0 [ 2014.549036][T15440] __x64_sys_setsockopt+0x13d/0x1b0 [ 2014.549067][T15440] do_syscall_64+0x14d/0xf80 [ 2014.549084][T15440] ? trace_irq_disable+0x3b/0x150 [ 2014.549116][T15440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.549135][T15440] ? clear_bhb_loop+0x40/0x90 [ 2014.549157][T15440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.549175][T15440] RIP: 0033:0x7fbcf119c799 [ 2014.549194][T15440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2014.549210][T15440] RSP: 002b:00007fbcf1f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2014.549230][T15440] RAX: ffffffffffffffda RBX: 00007fbcf1415fa0 RCX: 00007fbcf119c799 [ 2014.549242][T15440] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000005 [ 2014.549253][T15440] RBP: 00007fbcf1f84090 R08: 000000000000000c R09: 0000000000000000 [ 2014.549263][T15440] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 2014.549274][T15440] R13: 00007fbcf1416038 R14: 00007fbcf1415fa0 R15: 00007fbcf153fa48 [ 2014.549302][T15440] [ 2014.830979][T15444] fuse: Bad value for 'fd' [ 2014.837586][T15444] binder: BINDER_SET_CONTEXT_MGR already set [ 2014.843592][T15444] binder: 15369:15444 ioctl 4018620d 200000004a80 returned -16 [ 2015.242911][ T8090] usb 5-1: USB disconnect, device number 3 [ 2016.519319][T16271] mos7840 6-1:0.0: required endpoints missing [ 2016.542084][T16271] usb 6-1: USB disconnect, device number 96 [ 2017.342276][T15504] netlink: 'syz.0.8364': attribute type 1 has an invalid length. [ 2017.408366][T15537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.431636][ T1889] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2017.546828][T15537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2017.624584][T15504] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2017.640765][ T1889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2017.645133][T15579] FAULT_INJECTION: forcing a failure. [ 2017.645133][T15579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2017.652749][ T1889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2017.676966][ T1889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2017.686982][ T1889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2017.700149][ T1889] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2017.709238][ T1889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.722414][ T1889] usb 4-1: config 0 descriptor?? [ 2017.747644][T15504] bond14: (slave bond15): making interface the new active one [ 2017.760107][T15504] bond14: (slave bond15): Enslaving as an active interface with an up link [ 2017.776114][T15579] CPU: 1 UID: 0 PID: 15579 Comm: syz.4.8366 Tainted: G L syzkaller #0 PREEMPT(full) [ 2017.776139][T15579] Tainted: [L]=SOFTLOCKUP [ 2017.776143][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2017.776152][T15579] Call Trace: [ 2017.776158][T15579] [ 2017.776164][T15579] dump_stack_lvl+0xe8/0x150 [ 2017.776190][T15579] should_fail_ex+0x412/0x560 [ 2017.776210][T15579] _copy_to_user+0x31/0xb0 [ 2017.776231][T15579] simple_read_from_buffer+0xe1/0x170 [ 2017.776252][T15579] proc_fail_nth_read+0x1bb/0x230 [ 2017.776273][T15579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2017.776292][T15579] ? rw_verify_area+0x2a6/0x4d0 [ 2017.776306][T15579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2017.776324][T15579] vfs_read+0x20c/0xa70 [ 2017.776335][T15579] ? fdget_pos+0x246/0x320 [ 2017.776359][T15579] ? __pfx___mutex_lock+0x10/0x10 [ 2017.776373][T15579] ? __pfx_vfs_read+0x10/0x10 [ 2017.776387][T15579] ? __fget_files+0x2a/0x420 [ 2017.776407][T15579] ? __fget_files+0x3a0/0x420 [ 2017.776424][T15579] ? __fget_files+0x2a/0x420 [ 2017.776447][T15579] ksys_read+0x150/0x270 [ 2017.776461][T15579] ? __pfx_ksys_read+0x10/0x10 [ 2017.776480][T15579] do_syscall_64+0x14d/0xf80 [ 2017.776492][T15579] ? trace_irq_disable+0x3b/0x150 [ 2017.776512][T15579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.776525][T15579] ? clear_bhb_loop+0x40/0x90 [ 2017.776541][T15579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.776553][T15579] RIP: 0033:0x7f2482d5cfce [ 2017.776565][T15579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2017.776576][T15579] RSP: 002b:00007f2483d1cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2017.776590][T15579] RAX: ffffffffffffffda RBX: 00007f2483d1d6c0 RCX: 00007f2482d5cfce [ 2017.776600][T15579] RDX: 000000000000000f RSI: 00007f2483d1d0a0 RDI: 0000000000000004 [ 2017.776608][T15579] RBP: 00007f2483d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 2017.776616][T15579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2017.776623][T15579] R13: 00007f2483016038 R14: 00007f2483015fa0 R15: 00007f248313fa48 [ 2017.776643][T15579] [ 2018.353952][ T1889] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2018.528410][T15590] netlink: 'syz.1.8368': attribute type 1 has an invalid length. [ 2018.617488][T15603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8368'. [ 2018.753473][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8368'. [ 2018.777370][T15603] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2018.868916][T15590] macvlan4: entered promiscuous mode [ 2018.874299][T15590] macvlan4: entered allmulticast mode [ 2018.908335][T15590] bond10: entered promiscuous mode [ 2018.914588][T15590] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 2018.952855][T15590] bond10: left promiscuous mode [ 2019.043767][T15643] macvlan7: entered promiscuous mode [ 2019.213194][ T1889] usb 4-1: USB disconnect, device number 44 [ 2019.700679][T15674] Cannot find set identified by id 1 to match [ 2020.950235][T15695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8380'. [ 2021.095353][T15701] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8382'. [ 2021.425572][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8387'. [ 2021.501303][T15720] bond7: entered promiscuous mode [ 2021.501593][T15720] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2021.666172][T16271] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2021.857736][T16271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2021.894271][T16271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2021.928048][T16271] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2021.978145][T16271] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2022.006037][T16271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.025231][T16271] usb 5-1: config 0 descriptor?? [ 2022.455107][T16271] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2022.546462][ T6940] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2022.788840][ T6940] usb 2-1: Using ep0 maxpacket: 32 [ 2022.803990][ T1889] usb 5-1: USB disconnect, device number 4 [ 2022.828528][ T6940] usb 2-1: config 0 has no interfaces? [ 2022.839824][ T6940] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2022.872327][ T6940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.932596][ T6940] usb 2-1: Product: syz [ 2022.952736][ T6940] usb 2-1: Manufacturer: syz [ 2022.967686][ T6940] usb 2-1: SerialNumber: syz [ 2022.982699][ T6940] usb 2-1: config 0 descriptor?? [ 2023.234945][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8398'. [ 2023.460252][T15827] bond8: entered promiscuous mode [ 2023.495024][T15827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2023.998617][T15878] loop5: detected capacity change from 0 to 7 [ 2024.777830][T15891] xt_hashlimit: max too large, truncated to 1048576 [ 2024.804063][T15891] No such timeout policy "syz1" [ 2024.856619][ T1889] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 2024.992365][ T1889] usb 5-1: device descriptor read/64, error -71 [ 2025.085702][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8405'. [ 2025.224462][T15903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8404'. [ 2025.233640][T15903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8404'. [ 2025.247069][T15903] tc_dump_action: action bad kind [ 2025.346054][ T1889] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 2025.476578][ T1889] usb 5-1: device descriptor read/64, error -71 [ 2025.591997][T15909] input: syz1 as /devices/virtual/input/input197 [ 2025.599216][ T1889] usb usb5-port1: attempt power cycle [ 2026.053259][ T1889] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 2026.086772][ T1889] usb 5-1: device descriptor read/8, error -71 [ 2026.115982][ T8100] usb 2-1: USB disconnect, device number 78 [ 2026.369600][ T1889] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 2026.396834][ T1889] usb 5-1: device descriptor read/8, error -71 [ 2026.508097][ T1889] usb usb5-port1: unable to enumerate USB device [ 2026.708862][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8410'. [ 2026.863583][T15934] bond9: entered promiscuous mode [ 2026.914715][T15934] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2026.938859][ T6940] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2027.088144][T15986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2027.429311][ T6940] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2027.454867][ T6940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.481322][ T6940] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2027.500332][ T6940] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2027.520046][ T6940] usb 4-1: Manufacturer: syz [ 2027.550519][ T6940] usb 4-1: config 0 descriptor?? [ 2027.677646][ T6940] rc_core: IR keymap rc-hauppauge not found [ 2027.690661][ T6940] Registered IR keymap rc-empty [ 2027.714589][ T6940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2027.716549][ T5032] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2027.753884][ T6940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input198 [ 2027.792524][T15930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.866035][ T5032] usb 6-1: device descriptor read/64, error -71 [ 2027.896451][T15930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2027.999815][ T6940] usb 4-1: USB disconnect, device number 45 [ 2028.008045][T16022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8418'. [ 2028.018303][T16022] tipc: Invalid UDP bearer configuration [ 2028.018354][T16022] tipc: Enabling of bearer rejected, failed to enable media [ 2028.114108][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8418'. [ 2028.160222][ T5032] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2028.306546][ T5032] usb 6-1: device descriptor read/64, error -71 [ 2028.437166][ T5032] usb usb6-port1: attempt power cycle [ 2028.966019][ T5032] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2029.011188][ T5032] usb 6-1: device descriptor read/8, error -71 [ 2029.089264][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8424'. [ 2029.229410][T16064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8422'. [ 2029.256267][T16064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8422'. [ 2029.289492][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8423'. [ 2029.351331][ T5032] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2029.525106][ T5032] usb 6-1: device descriptor read/8, error -71 [ 2029.579031][T16059] bond16: entered promiscuous mode [ 2029.584533][T16059] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2029.647045][ T5032] usb usb6-port1: unable to enumerate USB device [ 2029.704973][T16064] tc_dump_action: action bad kind [ 2030.025807][T16115] FAULT_INJECTION: forcing a failure. [ 2030.025807][T16115] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.052770][T16115] CPU: 1 UID: 0 PID: 16115 Comm: syz.0.8425 Tainted: G L syzkaller #0 PREEMPT(full) [ 2030.052822][T16115] Tainted: [L]=SOFTLOCKUP [ 2030.052830][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2030.052844][T16115] Call Trace: [ 2030.052852][T16115] [ 2030.052861][T16115] dump_stack_lvl+0xe8/0x150 [ 2030.052899][T16115] should_fail_ex+0x412/0x560 [ 2030.052931][T16115] should_failslab+0xa8/0x100 [ 2030.052959][T16115] __kmalloc_noprof+0xe8/0x760 [ 2030.052983][T16115] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2030.053023][T16115] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2030.053064][T16115] genl_family_rcv_msg_doit+0xd9/0x330 [ 2030.053104][T16115] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2030.053145][T16115] ? apparmor_capable+0x126/0x170 [ 2030.053179][T16115] ? bpf_lsm_capable+0x9/0x20 [ 2030.053208][T16115] ? security_capable+0x7e/0x2c0 [ 2030.053241][T16115] genl_rcv_msg+0x61c/0x7a0 [ 2030.053285][T16115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2030.053316][T16115] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2030.053337][T16115] ? __pfx_nl80211_notify_radar_detection+0x10/0x10 [ 2030.053359][T16115] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2030.053381][T16115] ? __lock_acquire+0x6b5/0x2cf0 [ 2030.053421][T16115] netlink_rcv_skb+0x232/0x4b0 [ 2030.053448][T16115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2030.053481][T16115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2030.053526][T16115] ? down_read+0x272/0x2e0 [ 2030.053546][T16115] ? genl_rcv+0xd/0x40 [ 2030.053579][T16115] genl_rcv+0x28/0x40 [ 2030.053608][T16115] netlink_unicast+0x80f/0x9b0 [ 2030.053640][T16115] ? __pfx_netlink_unicast+0x10/0x10 [ 2030.053666][T16115] ? netlink_sendmsg+0x650/0xb40 [ 2030.053691][T16115] ? skb_put+0x11b/0x210 [ 2030.053725][T16115] netlink_sendmsg+0x813/0xb40 [ 2030.053761][T16115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2030.053793][T16115] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2030.053821][T16115] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2030.053846][T16115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2030.053873][T16115] ____sys_sendmsg+0xa68/0xad0 [ 2030.053913][T16115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2030.053955][T16115] ? import_iovec+0x73/0xa0 [ 2030.054001][T16115] ___sys_sendmsg+0x2a5/0x360 [ 2030.054035][T16115] ? __pfx____sys_sendmsg+0x10/0x10 [ 2030.054096][T16115] ? __fget_files+0x2a/0x420 [ 2030.054122][T16115] ? __fget_files+0x3a0/0x420 [ 2030.054158][T16115] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2030.054190][T16115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2030.054227][T16115] ? __pfx_ksys_write+0x10/0x10 [ 2030.054259][T16115] do_syscall_64+0x14d/0xf80 [ 2030.054283][T16115] ? trace_irq_disable+0x3b/0x150 [ 2030.054321][T16115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.054340][T16115] ? clear_bhb_loop+0x40/0x90 [ 2030.054361][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.054380][T16115] RIP: 0033:0x7f3139b9c799 [ 2030.054397][T16115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2030.054412][T16115] RSP: 002b:00007f313aad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2030.054431][T16115] RAX: ffffffffffffffda RBX: 00007f3139e15fa0 RCX: 00007f3139b9c799 [ 2030.054444][T16115] RDX: 0000000000004080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2030.054455][T16115] RBP: 00007f313aad5090 R08: 0000000000000000 R09: 0000000000000000 [ 2030.054466][T16115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2030.054477][T16115] R13: 00007f3139e16038 R14: 00007f3139e15fa0 R15: 00007f3139f3fa48 [ 2030.054504][T16115] [ 2031.126313][T16135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.135055][T16135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.324397][T16155] __nla_validate_parse: 1 callbacks suppressed [ 2032.324411][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8433'. [ 2032.376950][T16155] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2032.404522][T16155] bridge2: entered allmulticast mode [ 2032.426013][ T6940] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2032.590656][ T6940] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2032.599712][ T6940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.693757][ T1889] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2032.740067][ T6940] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2032.810415][ T6940] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2032.869332][ T1889] usb 6-1: Using ep0 maxpacket: 32 [ 2032.894670][ T1889] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2032.917308][ T1889] usb 6-1: config 0 has no interface number 0 [ 2032.927354][ T6940] usb 4-1: Manufacturer: syz [ 2032.935510][ T1889] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2032.977868][ T1889] usb 6-1: config 0 interface 1 has no altsetting 0 [ 2033.007625][ T6940] usb 4-1: config 0 descriptor?? [ 2033.014746][ T1889] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2033.029537][ T1889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.048215][ T1889] usb 6-1: Product: syz [ 2033.067448][ T1889] usb 6-1: Manufacturer: syz [ 2033.074806][ T1889] usb 6-1: SerialNumber: syz [ 2033.097154][ T1889] usb 6-1: config 0 descriptor?? [ 2033.218242][ T6940] rc_core: IR keymap rc-hauppauge not found [ 2033.224190][ T6940] Registered IR keymap rc-empty [ 2033.246264][T16150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.273009][ T6940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2033.296154][T16150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.320675][ T6940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input199 [ 2033.331873][ T1889] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2033.379502][ T1889] cx231xx 6-1:0.1: Failed to read PCB config [ 2033.393241][ T1889] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 2033.418394][ T1889] usb 6-1: USB disconnect, device number 101 [ 2033.470288][ T5032] usb 4-1: USB disconnect, device number 46 [ 2033.896354][ T1889] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2034.112223][ T1889] usb 6-1: Using ep0 maxpacket: 32 [ 2034.119611][ T1889] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2034.128398][ T1889] usb 6-1: config 0 has no interface number 0 [ 2034.144397][ T1889] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2034.169485][ T1889] usb 6-1: config 0 interface 1 has no altsetting 0 [ 2034.221663][ T1889] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2034.263986][ T1889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.278139][ T1889] usb 6-1: Product: syz [ 2034.282729][ T1889] usb 6-1: Manufacturer: syz [ 2034.288562][ T1889] usb 6-1: SerialNumber: syz [ 2034.298433][ T1889] usb 6-1: config 0 descriptor?? [ 2034.544385][ T1889] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2034.559523][T16155] netlink: 'syz.5.8433': attribute type 4 has an invalid length. [ 2034.587300][T16155] netlink: 'syz.5.8433': attribute type 4 has an invalid length. [ 2034.647253][ T6940] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2034.647380][ T1889] cx231xx 6-1:0.1: Failed to read PCB config [ 2034.683415][ T1889] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 2034.733814][ T1889] usb 6-1: USB disconnect, device number 102 [ 2034.809525][ T6940] usb 2-1: Using ep0 maxpacket: 16 [ 2034.825366][ T6940] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 2034.838834][ T6940] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 2034.866645][ T6940] usb 2-1: config 166 has no interface number 0 [ 2034.890096][ T6940] usb 2-1: config 166 has no interface number 1 [ 2034.913058][ T6940] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2034.948562][ T6940] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2034.980008][ T6940] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2035.007899][ T6940] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2035.044665][ T6940] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2035.073450][ T6940] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2035.117898][ T6940] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2035.144651][ T6940] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2035.191894][ T6940] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2035.241428][ T6940] usb 2-1: config 166 interface 177 has no altsetting 0 [ 2035.258607][ T6940] usb 2-1: config 166 interface 34 has no altsetting 0 [ 2035.279827][ T6940] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2035.308448][ T6940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.337603][ T6940] usb 2-1: Product: syz [ 2035.356234][ T6940] usb 2-1: Manufacturer: syz [ 2035.371161][ T6940] usb 2-1: SerialNumber: syz [ 2035.586064][ T8090] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2035.751007][T16274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.762125][T16274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.768750][ T8090] usb 4-1: Using ep0 maxpacket: 16 [ 2035.801340][ T8090] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2035.817242][ T6940] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 2035.827183][ T8090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.835382][ T8090] usb 4-1: Product: syz [ 2035.847240][ T8090] usb 4-1: Manufacturer: syz [ 2035.864924][ T8090] usb 4-1: SerialNumber: syz [ 2035.893576][ T8090] usb 4-1: config 0 descriptor?? [ 2036.021803][T16227] netlink: 'syz.1.8439': attribute type 6 has an invalid length. [ 2036.049460][T16227] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 2036.060117][ T6940] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 2036.124391][ T6940] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 2036.154639][ T6940] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 2036.175617][ T6940] uvcvideo 2-1:166.34: No valid video chain found. [ 2036.219765][ T6940] usb 2-1: USB disconnect, device number 79 [ 2036.372130][ T8090] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2036.383293][ T8090] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2036.396386][ T8090] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2036.411528][ T8090] usb 4-1: media controller created [ 2036.528242][ T8090] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2036.648195][ T8090] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2036.662359][ T8090] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2036.851304][T16252] dtv5100: rlen = 51 is too big! [ 2036.851304][T16252] [ 2036.860333][ T8090] usb 4-1: USB disconnect, device number 47 [ 2036.914431][ T8090] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2037.150442][T16365] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2037.186167][T16331] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2037.251683][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.258087][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.321695][T16365] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2037.338630][T16365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2037.378032][T16365] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2037.401802][T16365] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2037.421581][T16365] usb 6-1: Manufacturer: syz [ 2037.438604][T16365] usb 6-1: config 0 descriptor?? [ 2037.538975][T16365] rc_core: IR keymap rc-hauppauge not found [ 2037.545547][T16365] Registered IR keymap rc-empty [ 2037.555773][T16365] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2037.580050][T16365] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input200 [ 2037.669729][T16316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.706697][T16316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.730997][T16365] usb 6-1: USB disconnect, device number 103 [ 2038.411504][T16380] FAULT_INJECTION: forcing a failure. [ 2038.411504][T16380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2038.485447][T16380] CPU: 0 UID: 0 PID: 16380 Comm: syz.5.8456 Tainted: G L syzkaller #0 PREEMPT(full) [ 2038.485478][T16380] Tainted: [L]=SOFTLOCKUP [ 2038.485485][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2038.485496][T16380] Call Trace: [ 2038.485504][T16380] [ 2038.485512][T16380] dump_stack_lvl+0xe8/0x150 [ 2038.485554][T16380] should_fail_ex+0x412/0x560 [ 2038.485581][T16380] _copy_to_user+0x31/0xb0 [ 2038.485609][T16380] simple_read_from_buffer+0xe1/0x170 [ 2038.485639][T16380] proc_fail_nth_read+0x1bb/0x230 [ 2038.485666][T16380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2038.485693][T16380] ? rw_verify_area+0x2a6/0x4d0 [ 2038.485711][T16380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2038.485737][T16380] vfs_read+0x20c/0xa70 [ 2038.485753][T16380] ? fdget_pos+0x246/0x320 [ 2038.485783][T16380] ? __pfx___mutex_lock+0x10/0x10 [ 2038.485802][T16380] ? __pfx_vfs_read+0x10/0x10 [ 2038.485822][T16380] ? __fget_files+0x2a/0x420 [ 2038.485850][T16380] ? __fget_files+0x3a0/0x420 [ 2038.485874][T16380] ? __fget_files+0x2a/0x420 [ 2038.485905][T16380] ksys_read+0x150/0x270 [ 2038.485927][T16380] ? __pfx_ksys_read+0x10/0x10 [ 2038.485954][T16380] do_syscall_64+0x14d/0xf80 [ 2038.485971][T16380] ? trace_irq_disable+0x3b/0x150 [ 2038.485997][T16380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.486016][T16380] ? clear_bhb_loop+0x40/0x90 [ 2038.486035][T16380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.486052][T16380] RIP: 0033:0x7fe11eb5cfce [ 2038.486069][T16380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2038.486085][T16380] RSP: 002b:00007fe11fb15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2038.486104][T16380] RAX: ffffffffffffffda RBX: 00007fe11fb166c0 RCX: 00007fe11eb5cfce [ 2038.486116][T16380] RDX: 000000000000000f RSI: 00007fe11fb160a0 RDI: 0000000000000006 [ 2038.486126][T16380] RBP: 00007fe11fb16090 R08: 0000000000000000 R09: 0000000000000000 [ 2038.486136][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2038.486146][T16380] R13: 00007fe11ee16038 R14: 00007fe11ee15fa0 R15: 00007fe11ef3fa48 [ 2038.486173][T16380] [ 2038.786045][ T5032] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2038.905564][T16385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.927322][ T5032] usb 2-1: device descriptor read/64, error -71 [ 2038.966848][T16385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.166566][ T5032] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2039.317262][ T5032] usb 2-1: device descriptor read/64, error -71 [ 2039.428153][ T5032] usb usb2-port1: attempt power cycle [ 2039.444202][T16401] fuse: Unknown parameter '0xffffffffffffffff' [ 2039.776759][ T5032] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2039.807023][ T5032] usb 2-1: device descriptor read/8, error -71 [ 2039.818696][T16419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8462'. [ 2039.851547][T16419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2039.883860][T16419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2040.052120][ T5032] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2040.076924][ T5032] usb 2-1: device descriptor read/8, error -71 [ 2040.197449][ T5032] usb usb2-port1: unable to enumerate USB device [ 2040.892287][ T5032] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2041.086857][ T5032] usb 6-1: Using ep0 maxpacket: 8 [ 2041.424895][ T5032] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2041.460223][ T5032] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 2041.489624][ T5032] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2041.521064][ T5032] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2041.534541][ T5032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2041.554284][ T5032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.579125][ T5032] usb 6-1: Product: syz [ 2041.583441][ T5032] usb 6-1: Manufacturer: syz [ 2041.589360][ T5032] usb 6-1: SerialNumber: syz [ 2041.636518][ T63] wlan0: Trigger new scan to find an IBSS to join [ 2041.670302][T16451] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 2041.826510][ T1889] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2041.906353][T16451] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 2042.040871][ T1889] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2042.060115][ T1889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2042.092565][ T1889] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2042.109565][ T1889] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2042.131261][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8466'. [ 2042.159382][ T1889] usb 2-1: Manufacturer: syz [ 2042.182137][ T1889] usb 2-1: config 0 descriptor?? [ 2042.768885][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.877805][ T1889] rc_core: IR keymap rc-hauppauge not found [ 2042.884010][ T1889] Registered IR keymap rc-empty [ 2042.913302][ T1889] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2042.938792][ T1889] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input201 [ 2042.963590][T16479] netlink: 'syz.0.8470': attribute type 1 has an invalid length. [ 2043.024602][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.060114][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8470'. [ 2043.090776][ T6940] usb 2-1: USB disconnect, device number 84 [ 2043.260107][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8470'. [ 2043.273707][T16479] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2043.336466][T16479] macvlan4: entered promiscuous mode [ 2043.341833][T16479] macvlan4: entered allmulticast mode [ 2043.352388][T16479] bond17: entered promiscuous mode [ 2043.359693][T16479] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 2043.375470][T16479] bond17: left promiscuous mode [ 2043.491695][ T5032] usb 6-1: bad CDC descriptors [ 2043.503585][ T5032] usb 6-1: USB disconnect, device number 104 [ 2043.556346][ T6940] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2043.697990][ T6940] usb 4-1: device descriptor read/64, error -71 [ 2043.896008][ T5032] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2043.946100][ T6940] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 2044.096110][ T6940] usb 4-1: device descriptor read/64, error -71 [ 2044.104034][ T5032] usb 6-1: Using ep0 maxpacket: 16 [ 2044.132332][ T5032] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2044.141727][ T5032] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2044.186416][ T5032] usb 6-1: Product: syz [ 2044.190638][ T5032] usb 6-1: Manufacturer: syz [ 2044.195252][ T5032] usb 6-1: SerialNumber: syz [ 2044.228518][ T6940] usb usb4-port1: attempt power cycle [ 2044.275253][ T5032] usb 6-1: config 0 descriptor?? [ 2044.555148][T16365] usb 6-1: USB disconnect, device number 105 [ 2044.599883][T16565] sctp: [Deprecated]: syz.5.8473 (pid 16565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2044.599883][T16565] Use struct sctp_sack_info instead [ 2044.616454][ T6940] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 2044.651093][ T6940] usb 4-1: device descriptor read/8, error -71 [ 2044.906133][ T6940] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 2044.936793][ T6940] usb 4-1: device descriptor read/8, error -71 [ 2045.026680][ T8100] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 2045.056078][ T6940] usb usb4-port1: unable to enumerate USB device [ 2045.166014][ T8100] usb 5-1: device descriptor read/64, error -71 [ 2045.469747][ T8100] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 2045.606597][ T8100] usb 5-1: device descriptor read/64, error -71 [ 2045.726382][ T8100] usb usb5-port1: attempt power cycle [ 2045.779572][T16634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2045.788404][T16634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.800437][T16634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2045.859237][T16634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2046.086746][ T8100] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 2046.156748][ T8100] usb 5-1: device descriptor read/8, error -71 [ 2046.416060][ T8100] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2046.457184][ T8100] usb 5-1: device descriptor read/8, error -71 [ 2046.486083][ T8090] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2046.506616][T22567] usb 6-1: new low-speed USB device number 106 using dummy_hcd [ 2046.562652][T16660] FAULT_INJECTION: forcing a failure. [ 2046.562652][T16660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2046.581940][ T8100] usb usb5-port1: unable to enumerate USB device [ 2046.607462][T16660] CPU: 1 UID: 0 PID: 16660 Comm: syz.1.8489 Tainted: G L syzkaller #0 PREEMPT(full) [ 2046.607491][T16660] Tainted: [L]=SOFTLOCKUP [ 2046.607498][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2046.607509][T16660] Call Trace: [ 2046.607517][T16660] [ 2046.607525][T16660] dump_stack_lvl+0xe8/0x150 [ 2046.607556][T16660] should_fail_ex+0x412/0x560 [ 2046.607583][T16660] _copy_from_user+0x2d/0xb0 [ 2046.607610][T16660] udp_lib_setsockopt+0x1ff/0x980 [ 2046.607635][T16660] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 2046.607660][T16660] ? aa_sock_opt_perm+0xff/0x1a0 [ 2046.607684][T16660] udp_setsockopt+0x77/0xc0 [ 2046.607702][T16660] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 2046.607718][T16660] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2046.607742][T16660] do_sock_setsockopt+0x17c/0x1b0 [ 2046.607772][T16660] __x64_sys_setsockopt+0x13d/0x1b0 [ 2046.607802][T16660] do_syscall_64+0x14d/0xf80 [ 2046.607820][T16660] ? trace_irq_disable+0x3b/0x150 [ 2046.607844][T16660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.607863][T16660] ? clear_bhb_loop+0x40/0x90 [ 2046.607885][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.607902][T16660] RIP: 0033:0x7fbcf119c799 [ 2046.607935][T16660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2046.607951][T16660] RSP: 002b:00007fbcf1f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2046.607970][T16660] RAX: ffffffffffffffda RBX: 00007fbcf1415fa0 RCX: 00007fbcf119c799 [ 2046.607983][T16660] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000003 [ 2046.607994][T16660] RBP: 00007fbcf1f84090 R08: 0000000000000004 R09: 0000000000000000 [ 2046.608006][T16660] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2046.608018][T16660] R13: 00007fbcf1416038 R14: 00007fbcf1415fa0 R15: 00007fbcf153fa48 [ 2046.608047][T16660] [ 2046.897840][T16662] loop4: detected capacity change from 0 to 1 [ 2046.930055][ T8090] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 2046.943400][ T8090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2046.965986][ T8090] usb 4-1: config 0 has no interfaces? [ 2046.981485][ T8090] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2046.999403][ T8090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 2047.007898][ T8090] usb 4-1: Product: syz [ 2047.012161][ T8090] usb 4-1: Manufacturer: syz [ 2047.019292][T16662] Dev loop4: unable to read RDB block 1 [ 2047.025050][T16662] loop4: unable to read partition table [ 2047.033111][ T8090] usb 4-1: SerialNumber: syz [ 2047.040611][T16662] loop4: partition table beyond EOD, truncated [ 2047.057653][ T8090] usb 4-1: config 0 descriptor?? [ 2047.069489][T16662] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 2047.096691][T22567] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 2047.105024][T22567] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2047.114716][T22567] usb 6-1: config 0 has no interface number 0 [ 2047.122393][T22567] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2047.133821][T22567] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2047.151589][T22567] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2047.174250][T22567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.202376][T22567] usb 6-1: config 0 descriptor?? [ 2047.296993][T16648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.307737][T16648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.335569][ T8100] usb 4-1: USB disconnect, device number 52 [ 2047.640309][T32129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2047.741248][T22567] usb 6-1: USB disconnect, device number 106 [ 2048.201283][T16706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8494'. [ 2048.625988][ T8090] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2048.779173][T16722] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8498'. [ 2048.848067][ T8090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2048.859351][ T8090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.908204][ T8090] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2048.988657][ T8090] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2049.048300][ T8090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.146429][ T8090] usb 4-1: config 0 descriptor?? [ 2049.575223][ T8090] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2049.962550][ T6940] usb 4-1: USB disconnect, device number 53 [ 2050.883775][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8504'. [ 2051.089844][T16780] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8505'. [ 2051.100426][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8505'. [ 2051.467548][T16789] netlink: 'syz.0.8509': attribute type 1 has an invalid length. [ 2051.554181][T16818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8509'. [ 2051.679874][T16789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8509'. [ 2051.691429][T16789] 8021q: adding VLAN 0 to HW filter on device bond18 [ 2051.726982][T16789] macvlan4: entered promiscuous mode [ 2051.732328][T16789] macvlan4: entered allmulticast mode [ 2051.738849][T16789] bond18: entered promiscuous mode [ 2051.744357][T16789] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 2051.852850][T16789] bond18: left promiscuous mode [ 2052.177352][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8504'. [ 2052.590048][T16847] netlink: 'syz.1.8513': attribute type 3 has an invalid length. [ 2052.616206][T16847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8513'. [ 2052.825596][T16853] netlink: 'syz.5.8515': attribute type 309 has an invalid length. [ 2052.878919][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8514'. [ 2053.220627][T16864] netlink: 'syz.5.8518': attribute type 10 has an invalid length. [ 2053.435695][T16864] __nla_validate_parse: 1 callbacks suppressed [ 2053.435708][T16864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8518'. [ 2054.350106][T16889] netlink: 186628 bytes leftover after parsing attributes in process `syz.5.8522'. [ 2054.596135][ T8100] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2054.852353][T16901] loop5: detected capacity change from 0 to 7 [ 2054.872617][ T8100] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2054.887658][T16901] Dev loop5: unable to read RDB block 7 [ 2054.898524][T16901] loop5: AHDI p4 [ 2054.902223][T16901] loop5: partition table partially beyond EOD, truncated [ 2054.905738][ T8100] usb 5-1: config 0 has no interface number 0 [ 2054.968160][ T8100] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2054.982097][ T8100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.001161][ T8100] usb 5-1: Product: syz [ 2055.005651][ T8100] usb 5-1: Manufacturer: syz [ 2055.032807][ T8100] usb 5-1: SerialNumber: syz [ 2055.067917][T16911] netlink: 'syz.0.8525': attribute type 3 has an invalid length. [ 2055.087317][T16911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8525'. [ 2055.097439][ T8100] usb 5-1: config 0 descriptor?? [ 2055.196360][T16918] support for the xor transformation has been removed. [ 2055.317504][ T8100] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2055.357604][ T8100] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2055.382270][ T8100] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2055.406390][ T8100] usb 5-1: media controller created [ 2055.467286][ T8100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2055.741823][T16944] netlink: 'syz.5.8532': attribute type 10 has an invalid length. [ 2055.759398][ T8100] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2055.779917][T16944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8532'. [ 2055.886418][T16955] xt_hashlimit: max too large, truncated to 1048576 [ 2055.919705][ T8100] usb 5-1: USB disconnect, device number 13 [ 2055.929732][T16955] No such timeout policy "syz1" [ 2056.302619][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 2056.336109][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 2056.345097][T16973] netlink: 268 bytes leftover after parsing attributes in process `syz.5.8537'. [ 2056.395161][T16978] netlink: 'syz.4.8538': attribute type 3 has an invalid length. [ 2056.435454][T16978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8538'. [ 2057.205043][T17007] netlink: 'syz.0.8547': attribute type 10 has an invalid length. [ 2057.237944][T17007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8547'. [ 2057.497751][T17037] ptrace attach of "./syz-executor exec"[1193] was attempted by "./syz-executor exec"[17037] [ 2057.914939][T17049] netlink: 'syz.3.8555': attribute type 6 has an invalid length. [ 2057.924596][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8555'. [ 2058.186064][ T8100] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2058.518221][T17061] sg_read: process 1833 (syz.0.8558) changed security contexts after opening file descriptor, this is not allowed. [ 2058.621889][ T8100] usb 4-1: Using ep0 maxpacket: 32 [ 2058.629385][ T8100] usb 4-1: config 1 has an invalid interface number: 255 but max is 0 [ 2058.656639][ T8100] usb 4-1: config 1 has no interface number 0 [ 2058.673748][ T8100] usb 4-1: too many endpoints for config 1 interface 255 altsetting 48: 48, using maximum allowed: 30 [ 2058.716583][ T8100] usb 4-1: config 1 interface 255 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 2058.770539][ T8100] usb 4-1: config 1 interface 255 has no altsetting 0 [ 2058.956559][ T8100] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 2058.994877][ T8100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.263369][ T8100] usb 4-1: Product: syz [ 2059.294085][ T8100] usb 4-1: Manufacturer: syz [ 2059.300503][ T8100] usb 4-1: SerialNumber: syz [ 2059.570762][ T8100] visor 4-1:1.255: Handspring Visor / Palm OS converter detected [ 2059.606567][ T8100] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2059.644436][ T8100] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2059.752619][T17083] loop5: detected capacity change from 0 to 4096 [ 2060.001248][T17092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.058680][T17092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.217250][ T8100] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2060.377827][ T8100] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2060.387251][ T8100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2060.417757][ T8100] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2060.427539][ T8100] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2060.458567][ T8100] usb 2-1: Manufacturer: syz [ 2060.488967][ T8100] usb 2-1: config 0 descriptor?? [ 2060.678929][ T8100] rc_core: IR keymap rc-hauppauge not found [ 2060.684974][ T8100] Registered IR keymap rc-empty [ 2060.699184][ T8100] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2060.712808][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.741082][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.754744][ T8100] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input203 [ 2060.805848][ T8100] usb 2-1: USB disconnect, device number 85 [ 2060.904444][T22567] usb 4-1: USB disconnect, device number 54 [ 2060.914406][T22567] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2060.987230][T22567] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2061.059159][T22567] visor 4-1:1.255: device disconnected [ 2061.346000][ T8090] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2061.506004][ T8090] usb 6-1: Using ep0 maxpacket: 16 [ 2061.544383][ T8090] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2061.613438][ T8090] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2061.664294][ T8090] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2061.695433][ T8090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.732362][ T8090] usb 6-1: config 0 descriptor?? [ 2062.195757][ T8090] microsoft 0003:045E:07DA.0045: ignoring exceeding usage max [ 2062.291624][ T8090] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 2062.386988][ T8090] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 2062.493077][ T8090] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 2062.521325][ T8090] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 2062.542244][ T8090] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 2062.557112][ T8090] HID 045e:07da: Invalid code 65791 type 1 [ 2062.567825][ T8090] HID 045e:07da: Invalid code 768 type 1 [ 2062.578014][ T8090] HID 045e:07da: Invalid code 769 type 1 [ 2062.600793][ T8090] HID 045e:07da: Invalid code 770 type 1 [ 2062.625546][ T8090] HID 045e:07da: Invalid code 771 type 1 [ 2062.645503][ T8090] HID 045e:07da: Invalid code 772 type 1 [ 2062.662319][ T8090] HID 045e:07da: Invalid code 773 type 1 [ 2062.687776][ T8090] HID 045e:07da: Invalid code 774 type 1 [ 2063.255436][ T8090] HID 045e:07da: Invalid code 775 type 1 [ 2063.271063][ T8090] HID 045e:07da: Invalid code 776 type 1 [ 2063.400130][T17193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8573'. [ 2063.409306][T17193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8573'. [ 2063.541084][ T8090] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0045/input/input204 [ 2063.916557][T17204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.932546][T17204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.988143][ T8090] microsoft 0003:045E:07DA.0045: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2064.033521][T17204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.047558][ T8090] usb 6-1: USB disconnect, device number 107 [ 2064.131936][T17204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.619605][T17239] FAULT_INJECTION: forcing a failure. [ 2064.619605][T17239] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.658064][T17239] CPU: 1 UID: 0 PID: 17239 Comm: syz.3.8578 Tainted: G L syzkaller #0 PREEMPT(full) [ 2064.658099][T17239] Tainted: [L]=SOFTLOCKUP [ 2064.658107][T17239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2064.658120][T17239] Call Trace: [ 2064.658128][T17239] [ 2064.658137][T17239] dump_stack_lvl+0xe8/0x150 [ 2064.658172][T17239] should_fail_ex+0x412/0x560 [ 2064.658204][T17239] should_failslab+0xa8/0x100 [ 2064.658236][T17239] ? do_getname+0x2e/0x250 [ 2064.658261][T17239] kmem_cache_alloc_noprof+0x87/0x650 [ 2064.658281][T17239] ? ksys_write+0x242/0x270 [ 2064.658301][T17239] do_getname+0x2e/0x250 [ 2064.658318][T17239] ? getname_flags+0x11/0x20 [ 2064.658337][T17239] __x64_sys_execve+0x7a/0xc0 [ 2064.658352][T17239] do_syscall_64+0x14d/0xf80 [ 2064.658368][T17239] ? trace_irq_disable+0x3b/0x150 [ 2064.658390][T17239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.658405][T17239] ? clear_bhb_loop+0x40/0x90 [ 2064.658422][T17239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.658436][T17239] RIP: 0033:0x7f1f06d9c799 [ 2064.658452][T17239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2064.658464][T17239] RSP: 002b:00007f1f07d0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2064.658480][T17239] RAX: ffffffffffffffda RBX: 00007f1f07015fa0 RCX: 00007f1f06d9c799 [ 2064.658491][T17239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 2064.658517][T17239] RBP: 00007f1f07d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 2064.658527][T17239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2064.658536][T17239] R13: 00007f1f07016038 R14: 00007f1f07015fa0 R15: 00007f1f0713fa48 [ 2064.658572][T17239] [ 2065.564385][T17269] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8588'. [ 2066.706325][ T8100] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2066.856373][T17298] ip6gretap0: entered promiscuous mode [ 2066.897538][ T8100] usb 6-1: Using ep0 maxpacket: 16 [ 2066.998782][ T8100] usb 6-1: config 0 has no interfaces? [ 2067.018151][ T8100] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2067.027434][ T8100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.056179][ T8100] usb 6-1: Product: syz [ 2067.060455][ T8100] usb 6-1: Manufacturer: syz [ 2067.126129][ T8100] usb 6-1: SerialNumber: syz [ 2067.154008][ T8100] usb 6-1: config 0 descriptor?? [ 2067.787749][ T8100] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2067.965964][ T8100] usb 4-1: Using ep0 maxpacket: 8 [ 2067.987364][ T8100] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2068.013588][ T8100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.044519][T17327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.056720][ T8100] usb 4-1: Product: syz [ 2068.066463][ T8100] usb 4-1: Manufacturer: syz [ 2068.075709][ T8100] usb 4-1: SerialNumber: syz [ 2068.092895][T17327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.105862][ T8100] usb 4-1: config 0 descriptor?? [ 2068.129860][ T8100] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2068.151574][T17327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.186050][T22567] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2068.201654][T17327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.356495][T22567] usb 2-1: Using ep0 maxpacket: 16 [ 2068.428055][T22567] usb 2-1: config 0 has no interfaces? [ 2068.469482][T22567] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2068.551586][T22567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.627971][T17340] kvm: pic: single mode not supported [ 2068.628263][T17340] kvm: pic: level sensitive irq not supported [ 2068.643737][T17340] kvm: pic: non byte write [ 2068.730124][T17340] kvm: pic: non byte write [ 2068.752726][T17340] kvm: pic: non byte write [ 2068.798675][T17340] kvm: pic: non byte write [ 2068.811614][T22567] usb 2-1: Product: syz [ 2068.874687][T22567] usb 2-1: Manufacturer: syz [ 2068.882920][T17340] kvm: pic: non byte write [ 2068.946914][T22567] usb 2-1: SerialNumber: syz [ 2068.949311][T17340] kvm: pic: non byte write [ 2068.976787][T17340] kvm: pic: non byte write [ 2069.003416][T17340] kvm: pic: non byte write [ 2069.058620][T22567] usb 2-1: config 0 descriptor?? [ 2069.157390][T17340] kvm: pic: non byte write [ 2069.392070][ T8090] usb 6-1: USB disconnect, device number 108 [ 2069.630349][T17359] [ 2069.632748][T17359] ===================================================== [ 2069.639722][T17359] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2069.647295][T17359] syzkaller #0 Tainted: G L [ 2069.653298][T17359] ----------------------------------------------------- [ 2069.660247][T17359] syz.3.8594/17359 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2069.667994][T17359] ffff88809bb7e948 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2069.676830][T17359] [ 2069.676830][T17359] and this task is already holding: [ 2069.684226][T17359] ffff88805d4fe468 (&tty->flow.lock){....}-{3:3}, at: tty_send_xchar+0x1c5/0x4d0 [ 2069.693492][T17359] which would create a new lock dependency: [ 2069.699401][T17359] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 2069.707097][T17359] [ 2069.707097][T17359] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2069.716627][T17359] (&dev->event_lock#2){..-.}-{3:3} [ 2069.716664][T17359] [ 2069.716664][T17359] ... which became SOFTIRQ-irq-safe at: [ 2069.729609][T17359] lock_acquire+0xf0/0x2e0 [ 2069.734136][T17359] _raw_spin_lock_irqsave+0x40/0x60 [ 2069.739447][T17359] input_event+0x76/0xe0 [ 2069.743883][T17359] hidinput_report_event+0xa1/0x100 [ 2069.749342][T17359] hid_report_raw_event+0x1489/0x1720 [ 2069.754822][T17359] hid_input_report+0x44b/0x580 [ 2069.759788][T17359] hid_irq_in+0x47e/0x6d0 [ 2069.764317][T17359] __usb_hcd_giveback_urb+0x376/0x540 [ 2069.769832][T17359] dummy_timer+0xbbd/0x45d0 [ 2069.774536][T17359] __hrtimer_run_queues+0x53a/0xcc0 [ 2069.779868][T17359] hrtimer_run_softirq+0x182/0x5a0 [ 2069.785140][T17359] handle_softirqs+0x22a/0x870 [ 2069.790016][T17359] __irq_exit_rcu+0x5f/0x150 [ 2069.794714][T17359] irq_exit_rcu+0x9/0x30 [ 2069.799062][T17359] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2069.804798][T17359] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2069.810887][T17359] pv_native_safe_halt+0xf/0x20 [ 2069.815846][T17359] default_idle+0x9/0x20 [ 2069.820183][T17359] default_idle_call+0x72/0xb0 [ 2069.825052][T17359] do_idle+0x1bd/0x500 [ 2069.829219][T17359] cpu_startup_entry+0x43/0x60 [ 2069.834077][T17359] start_secondary+0x101/0x110 [ 2069.838931][T17359] common_startup_64+0x13e/0x147 [ 2069.843970][T17359] [ 2069.843970][T17359] to a SOFTIRQ-irq-unsafe lock: [ 2069.851001][T17359] (tasklist_lock){.+.+}-{3:3} [ 2069.851025][T17359] [ 2069.851025][T17359] ... which became SOFTIRQ-irq-unsafe at: [ 2069.863667][T17359] ... [ 2069.863675][T17359] lock_acquire+0xf0/0x2e0 [ 2069.870784][T17359] _raw_read_lock+0x36/0x50 [ 2069.875410][T17359] __do_wait+0xde/0x740 [ 2069.879666][T17359] do_wait+0x1e7/0x540 [ 2069.883837][T17359] kernel_wait+0xd6/0x1c0 [ 2069.888278][T17359] call_usermodehelper_exec_work+0xbe/0x230 [ 2069.894275][T17359] process_scheduled_works+0xb02/0x1830 [ 2069.899918][T17359] worker_thread+0xa50/0xfc0 [ 2069.904613][T17359] kthread+0x388/0x470 [ 2069.908779][T17359] ret_from_fork+0x51e/0xb90 [ 2069.913478][T17359] ret_from_fork_asm+0x1a/0x30 [ 2069.918347][T17359] [ 2069.918347][T17359] other info that might help us debug this: [ 2069.918347][T17359] [ 2069.928576][T17359] Chain exists of: [ 2069.928576][T17359] &dev->event_lock#2 --> &tty->flow.lock --> tasklist_lock [ 2069.928576][T17359] [ 2069.941718][T17359] Possible interrupt unsafe locking scenario: [ 2069.941718][T17359] [ 2069.950043][T17359] CPU0 CPU1 [ 2069.955408][T17359] ---- ---- [ 2069.960848][T17359] lock(tasklist_lock); [ 2069.965100][T17359] local_irq_disable(); [ 2069.971858][T17359] lock(&dev->event_lock#2); [ 2069.979097][T17359] lock(&tty->flow.lock); [ 2069.986045][T17359] [ 2069.989505][T17359] lock(&dev->event_lock#2); [ 2069.994451][T17359] [ 2069.994451][T17359] *** DEADLOCK *** [ 2069.994451][T17359] [ 2070.002615][T17359] 6 locks held by syz.3.8594/17359: [ 2070.007825][T17359] #0: ffff88805d4fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2070.017674][T17359] #1: ffff88805d4fe130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: tty_send_xchar+0x268/0x4d0 [ 2070.027958][T17359] #2: ffff88805d4fe2e8 (&tty->termios_rwsem){++++}-{4:4}, at: tty_send_xchar+0x1af/0x4d0 [ 2070.037904][T17359] #3: ffff88805d4fe468 (&tty->flow.lock){....}-{3:3}, at: tty_send_xchar+0x1c5/0x4d0 [ 2070.047489][T17359] #4: ffff88805d4fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 2070.056832][T17359] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2070.065894][T17359] [ 2070.065894][T17359] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2070.076322][T17359] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2070.082071][T17359] IN-SOFTIRQ-W at: [ 2070.086350][T17359] lock_acquire+0xf0/0x2e0 [ 2070.092781][T17359] _raw_spin_lock_irqsave+0x40/0x60 [ 2070.100021][T17359] input_event+0x76/0xe0 [ 2070.106261][T17359] hidinput_report_event+0xa1/0x100 [ 2070.113468][T17359] hid_report_raw_event+0x1489/0x1720 [ 2070.120850][T17359] hid_input_report+0x44b/0x580 [ 2070.127712][T17359] hid_irq_in+0x47e/0x6d0 [ 2070.134107][T17359] __usb_hcd_giveback_urb+0x376/0x540 [ 2070.141488][T17359] dummy_timer+0xbbd/0x45d0 [ 2070.147992][T17359] __hrtimer_run_queues+0x53a/0xcc0 [ 2070.155204][T17359] hrtimer_run_softirq+0x182/0x5a0 [ 2070.162323][T17359] handle_softirqs+0x22a/0x870 [ 2070.169102][T17359] __irq_exit_rcu+0x5f/0x150 [ 2070.175704][T17359] irq_exit_rcu+0x9/0x30 [ 2070.181960][T17359] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2070.189610][T17359] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2070.197764][T17359] pv_native_safe_halt+0xf/0x20 [ 2070.204626][T17359] default_idle+0x9/0x20 [ 2070.210870][T17359] default_idle_call+0x72/0xb0 [ 2070.217642][T17359] do_idle+0x1bd/0x500 [ 2070.223720][T17359] cpu_startup_entry+0x43/0x60 [ 2070.230500][T17359] start_secondary+0x101/0x110 [ 2070.237271][T17359] common_startup_64+0x13e/0x147 [ 2070.244210][T17359] INITIAL USE at: [ 2070.248299][T17359] lock_acquire+0xf0/0x2e0 [ 2070.254639][T17359] _raw_spin_lock_irqsave+0x40/0x60 [ 2070.261767][T17359] input_inject_event+0xa5/0x340 [ 2070.268627][T17359] kbd_led_trigger_activate+0xbc/0x100 [ 2070.276067][T17359] led_trigger_set+0x535/0x960 [ 2070.282835][T17359] led_trigger_set_default+0x260/0x2a0 [ 2070.290254][T17359] led_classdev_register_ext+0x787/0x9c0 [ 2070.297815][T17359] input_leds_connect+0x517/0x790 [ 2070.304828][T17359] input_register_device+0xd00/0x1160 [ 2070.312117][T17359] atkbd_connect+0x731/0xa50 [ 2070.318631][T17359] serio_driver_probe+0x82/0xd0 [ 2070.325433][T17359] really_probe+0x267/0xaf0 [ 2070.331882][T17359] __driver_probe_device+0x18c/0x320 [ 2070.339116][T17359] driver_probe_device+0x4f/0x240 [ 2070.346070][T17359] __driver_attach+0x3e7/0x710 [ 2070.352760][T17359] bus_for_each_dev+0x23b/0x2c0 [ 2070.359553][T17359] serio_handle_event+0x20a/0xdd0 [ 2070.366500][T17359] process_scheduled_works+0xb02/0x1830 [ 2070.373976][T17359] worker_thread+0xa50/0xfc0 [ 2070.380502][T17359] kthread+0x388/0x470 [ 2070.386501][T17359] ret_from_fork+0x51e/0xb90 [ 2070.393022][T17359] ret_from_fork_asm+0x1a/0x30 [ 2070.399714][T17359] } [ 2070.402388][T17359] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 2070.411853][T17359] -> (kbd_event_lock){....}-{3:3} { [ 2070.417176][T17359] INITIAL USE at: [ 2070.421166][T17359] lock_acquire+0xf0/0x2e0 [ 2070.427356][T17359] _raw_spin_lock_irqsave+0x40/0x60 [ 2070.434313][T17359] vt_reset_unicode+0x2b/0x1a0 [ 2070.440889][T17359] reset_vc+0x68/0x1b0 [ 2070.446702][T17359] vc_init+0x70/0x4a0 [ 2070.452461][T17359] con_init+0x377/0x6a0 [ 2070.458466][T17359] console_init+0x10b/0x4d0 [ 2070.464747][T17359] start_kernel+0x22b/0x3d0 [ 2070.471040][T17359] x86_64_start_reservations+0x24/0x30 [ 2070.478286][T17359] x86_64_start_kernel+0x143/0x1c0 [ 2070.485143][T17359] common_startup_64+0x13e/0x147 [ 2070.491818][T17359] } [ 2070.494401][T17359] ... key at: [] kbd_event_lock+0x18/0xa0 [ 2070.502409][T17359] ... acquired at: [ 2070.506307][T17359] _raw_spin_lock+0x2e/0x40 [ 2070.511015][T17359] kbd_event+0xd6/0x40d0 [ 2070.515440][T17359] input_handle_events_default+0xd4/0x1a0 [ 2070.521340][T17359] input_pass_values+0x288/0x890 [ 2070.526461][T17359] input_event_dispose+0x330/0x6b0 [ 2070.531765][T17359] input_inject_event+0x1dd/0x340 [ 2070.536976][T17359] evdev_write+0x325/0x4c0 [ 2070.541583][T17359] vfs_write+0x29a/0xb90 [ 2070.546020][T17359] ksys_write+0x150/0x270 [ 2070.550525][T17359] do_syscall_64+0x14d/0xf80 [ 2070.555296][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.561363][T17359] [ 2070.563689][T17359] -> (&tty->flow.lock){....}-{3:3} { [ 2070.569007][T17359] INITIAL USE at: [ 2070.572904][T17359] lock_acquire+0xf0/0x2e0 [ 2070.578913][T17359] _raw_spin_lock_irqsave+0x40/0x60 [ 2070.585694][T17359] start_tty+0x20/0x70 [ 2070.591331][T17359] n_tty_set_termios+0xa7c/0x10c0 [ 2070.597927][T17359] tty_set_termios+0xdb3/0x1800 [ 2070.604363][T17359] set_termios+0x566/0x710 [ 2070.610358][T17359] tty_mode_ioctl+0x4a6/0x7d0 [ 2070.616602][T17359] tty_ioctl+0x9c5/0xde0 [ 2070.622415][T17359] __se_sys_ioctl+0xfc/0x170 [ 2070.628569][T17359] do_syscall_64+0x14d/0xf80 [ 2070.634723][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.642197][T17359] } [ 2070.644705][T17359] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 2070.653468][T17359] ... acquired at: [ 2070.657280][T17359] _raw_spin_lock_irqsave+0x40/0x60 [ 2070.662662][T17359] stop_tty+0x2f/0x150 [ 2070.666923][T17359] kbd_event+0x2ec1/0x40d0 [ 2070.671525][T17359] input_handle_events_default+0xd4/0x1a0 [ 2070.677429][T17359] input_pass_values+0x288/0x890 [ 2070.682554][T17359] input_event_dispose+0x330/0x6b0 [ 2070.687844][T17359] input_inject_event+0x1dd/0x340 [ 2070.693064][T17359] evdev_write+0x325/0x4c0 [ 2070.697669][T17359] vfs_write+0x29a/0xb90 [ 2070.702103][T17359] ksys_write+0x150/0x270 [ 2070.706610][T17359] do_syscall_64+0x14d/0xf80 [ 2070.711380][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.717460][T17359] [ 2070.719791][T17359] [ 2070.719791][T17359] the dependencies between the lock to be acquired [ 2070.719799][T17359] and SOFTIRQ-irq-unsafe lock: [ 2070.733329][T17359] -> (tasklist_lock){.+.+}-{3:3} { [ 2070.738652][T17359] HARDIRQ-ON-R at: [ 2070.742835][T17359] lock_acquire+0xf0/0x2e0 [ 2070.749272][T17359] _raw_read_lock+0x36/0x50 [ 2070.755789][T17359] __do_wait+0xde/0x740 [ 2070.761949][T17359] do_wait+0x1e7/0x540 [ 2070.768022][T17359] kernel_wait+0xd6/0x1c0 [ 2070.774351][T17359] call_usermodehelper_exec_work+0xbe/0x230 [ 2070.782244][T17359] process_scheduled_works+0xb02/0x1830 [ 2070.789794][T17359] worker_thread+0xa50/0xfc0 [ 2070.796390][T17359] kthread+0x388/0x470 [ 2070.802456][T17359] ret_from_fork+0x51e/0xb90 [ 2070.809048][T17359] ret_from_fork_asm+0x1a/0x30 [ 2070.815825][T17359] SOFTIRQ-ON-R at: [ 2070.819984][T17359] lock_acquire+0xf0/0x2e0 [ 2070.826444][T17359] _raw_read_lock+0x36/0x50 [ 2070.832953][T17359] __do_wait+0xde/0x740 [ 2070.839121][T17359] do_wait+0x1e7/0x540 [ 2070.845193][T17359] kernel_wait+0xd6/0x1c0 [ 2070.851527][T17359] call_usermodehelper_exec_work+0xbe/0x230 [ 2070.859425][T17359] process_scheduled_works+0xb02/0x1830 [ 2070.867012][T17359] worker_thread+0xa50/0xfc0 [ 2070.873637][T17359] kthread+0x388/0x470 [ 2070.879714][T17359] ret_from_fork+0x51e/0xb90 [ 2070.886325][T17359] ret_from_fork_asm+0x1a/0x30 [ 2070.893107][T17359] INITIAL USE at: [ 2070.897188][T17359] lock_acquire+0xf0/0x2e0 [ 2070.903519][T17359] _raw_write_lock_irq+0x3d/0x50 [ 2070.910383][T17359] copy_process+0x247a/0x3cf0 [ 2070.916977][T17359] kernel_clone+0x248/0x8e0 [ 2070.923404][T17359] user_mode_thread+0x110/0x180 [ 2070.930217][T17359] rest_init+0x23/0x300 [ 2070.936288][T17359] start_kernel+0x385/0x3d0 [ 2070.942711][T17359] x86_64_start_reservations+0x24/0x30 [ 2070.950093][T17359] x86_64_start_kernel+0x143/0x1c0 [ 2070.957141][T17359] common_startup_64+0x13e/0x147 [ 2070.964032][T17359] INITIAL READ USE at: [ 2070.968536][T17359] lock_acquire+0xf0/0x2e0 [ 2070.975311][T17359] _raw_read_lock+0x36/0x50 [ 2070.982164][T17359] __do_wait+0xde/0x740 [ 2070.988668][T17359] do_wait+0x1e7/0x540 [ 2070.995103][T17359] kernel_wait+0xd6/0x1c0 [ 2071.001778][T17359] call_usermodehelper_exec_work+0xbe/0x230 [ 2071.010020][T17359] process_scheduled_works+0xb02/0x1830 [ 2071.017919][T17359] worker_thread+0xa50/0xfc0 [ 2071.024873][T17359] kthread+0x388/0x470 [ 2071.031297][T17359] ret_from_fork+0x51e/0xb90 [ 2071.038252][T17359] ret_from_fork_asm+0x1a/0x30 [ 2071.045378][T17359] } [ 2071.048053][T17359] ... key at: [] tasklist_lock+0x18/0x40 [ 2071.056080][T17359] ... acquired at: [ 2071.060057][T17359] _raw_read_lock+0x36/0x50 [ 2071.064746][T17359] send_sigio+0x101/0x370 [ 2071.069255][T17359] kill_fasync+0x24d/0x4d0 [ 2071.073850][T17359] lease_break_callback+0x26/0x30 [ 2071.079058][T17359] __break_lease+0x81c/0x1e80 [ 2071.083922][T17359] vfs_truncate+0x449/0x540 [ 2071.088695][T17359] do_sys_truncate+0xf3/0x1c0 [ 2071.093568][T17359] __x64_sys_truncate+0x5b/0x70 [ 2071.098606][T17359] do_syscall_64+0x14d/0xf80 [ 2071.103372][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.109453][T17359] [ 2071.111778][T17359] -> (&f_owner->lock){....}-{3:3} { [ 2071.117102][T17359] INITIAL USE at: [ 2071.121081][T17359] lock_acquire+0xf0/0x2e0 [ 2071.127240][T17359] _raw_write_lock_irq+0x3d/0x50 [ 2071.133934][T17359] __f_setown+0x67/0x370 [ 2071.139946][T17359] generic_setlease+0xacf/0xff0 [ 2071.146549][T17359] do_fcntl_add_lease+0x35e/0x470 [ 2071.153329][T17359] fcntl_setlease+0x123/0x180 [ 2071.159757][T17359] do_fcntl+0x8b3/0x1a20 [ 2071.165741][T17359] __se_sys_fcntl+0xc8/0x150 [ 2071.172075][T17359] do_syscall_64+0x14d/0xf80 [ 2071.178582][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.186232][T17359] INITIAL READ USE at: [ 2071.190659][T17359] lock_acquire+0xf0/0x2e0 [ 2071.197252][T17359] _raw_read_lock_irqsave+0x48/0x60 [ 2071.204631][T17359] send_sigio+0x38/0x370 [ 2071.211045][T17359] dnotify_handle_event+0x169/0x440 [ 2071.218419][T17359] fsnotify+0x1831/0x1ae0 [ 2071.224927][T17359] vfs_set_acl+0xb09/0xc00 [ 2071.231528][T17359] filename_setxattr+0x305/0x630 [ 2071.238656][T17359] path_setxattrat+0x3eb/0x440 [ 2071.245597][T17359] __x64_sys_setxattr+0xbc/0xe0 [ 2071.252634][T17359] do_syscall_64+0x14d/0xf80 [ 2071.259398][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.267490][T17359] } [ 2071.270085][T17359] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2071.279071][T17359] ... acquired at: [ 2071.282976][T17359] _raw_read_lock_irqsave+0x48/0x60 [ 2071.288366][T17359] send_sigio+0x38/0x370 [ 2071.292833][T17359] kill_fasync+0x24d/0x4d0 [ 2071.297443][T17359] lease_break_callback+0x26/0x30 [ 2071.302645][T17359] __break_lease+0x81c/0x1e80 [ 2071.307504][T17359] vfs_create+0x39c/0x460 [ 2071.312019][T17359] filename_mknodat+0x3e8/0x660 [ 2071.317044][T17359] __se_sys_mknodat+0x3b/0x150 [ 2071.322012][T17359] do_syscall_64+0x14d/0xf80 [ 2071.326778][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.332857][T17359] [ 2071.335192][T17359] -> (&new->fa_lock){...-}-{3:3} { [ 2071.340327][T17359] IN-SOFTIRQ-R at: [ 2071.344330][T17359] lock_acquire+0xf0/0x2e0 [ 2071.350427][T17359] _raw_read_lock_irqsave+0x48/0x60 [ 2071.357288][T17359] kill_fasync+0x199/0x4d0 [ 2071.363361][T17359] sock_wake_async+0x137/0x160 [ 2071.369801][T17359] sock_def_readable+0x3c1/0x580 [ 2071.376393][T17359] tcp_data_queue+0x1e2e/0x5e50 [ 2071.382926][T17359] tcp_rcv_established+0xf45/0x2740 [ 2071.389797][T17359] tcp_v4_do_rcv+0xa90/0x1430 [ 2071.396223][T17359] tcp_v4_rcv+0x2825/0x31f0 [ 2071.402388][T17359] ip_protocol_deliver_rcu+0x221/0x440 [ 2071.409541][T17359] ip_local_deliver_finish+0x3bb/0x6f0 [ 2071.416660][T17359] NF_HOOK+0x336/0x3c0 [ 2071.422390][T17359] NF_HOOK+0x336/0x3c0 [ 2071.428117][T17359] process_backlog+0xaa3/0x1950 [ 2071.434624][T17359] __napi_poll+0xae/0x340 [ 2071.440607][T17359] net_rx_action+0x627/0xf70 [ 2071.446867][T17359] handle_softirqs+0x22a/0x870 [ 2071.453307][T17359] do_softirq+0x76/0xd0 [ 2071.459139][T17359] __local_bh_enable_ip+0xf8/0x130 [ 2071.465918][T17359] sk_stream_wait_memory+0x72b/0xf80 [ 2071.472914][T17359] tcp_sendmsg_locked+0x23ba/0x5490 [ 2071.479771][T17359] tcp_sendmsg+0x2f/0x50 [ 2071.485672][T17359] __sys_sendto+0x627/0x7a0 [ 2071.491844][T17359] __x64_sys_sendto+0xde/0x100 [ 2071.498290][T17359] do_syscall_64+0x14d/0xf80 [ 2071.504528][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.512067][T17359] INITIAL USE at: [ 2071.515970][T17359] lock_acquire+0xf0/0x2e0 [ 2071.521955][T17359] _raw_write_lock_irq+0x3d/0x50 [ 2071.528515][T17359] fasync_remove_entry+0xf1/0x1c0 [ 2071.535110][T17359] lease_modify+0x4f7/0x6c0 [ 2071.541183][T17359] locks_remove_file+0x5f0/0xf70 [ 2071.547687][T17359] __fput+0x3ae/0xa70 [ 2071.553247][T17359] task_work_run+0x1d9/0x270 [ 2071.559418][T17359] do_exit+0x69b/0x2320 [ 2071.565140][T17359] do_group_exit+0x21b/0x2d0 [ 2071.571293][T17359] get_signal+0x1284/0x1330 [ 2071.577366][T17359] arch_do_signal_or_restart+0xbc/0x830 [ 2071.584485][T17359] exit_to_user_mode_loop+0x86/0x480 [ 2071.591346][T17359] do_syscall_64+0x32d/0xf80 [ 2071.597507][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.604971][T17359] INITIAL READ USE at: [ 2071.609317][T17359] lock_acquire+0xf0/0x2e0 [ 2071.615793][T17359] _raw_read_lock_irqsave+0x48/0x60 [ 2071.623002][T17359] kill_fasync+0x199/0x4d0 [ 2071.629432][T17359] do_splice+0x109a/0x1910 [ 2071.635856][T17359] __se_sys_splice+0x353/0x490 [ 2071.642637][T17359] do_syscall_64+0x14d/0xf80 [ 2071.649248][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.657152][T17359] } [ 2071.659654][T17359] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2071.668342][T17359] ... acquired at: [ 2071.672151][T17359] _raw_read_lock_irqsave+0x48/0x60 [ 2071.677532][T17359] kill_fasync+0x199/0x4d0 [ 2071.682129][T17359] __start_tty+0x18c/0x220 [ 2071.686728][T17359] tty_send_xchar+0x1d2/0x4d0 [ 2071.691589][T17359] tty_ioctl+0x9c5/0xde0 [ 2071.696012][T17359] __se_sys_ioctl+0xfc/0x170 [ 2071.700782][T17359] do_syscall_64+0x14d/0xf80 [ 2071.705593][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.711662][T17359] [ 2071.713986][T17359] [ 2071.713986][T17359] stack backtrace: [ 2071.719895][T17359] CPU: 1 UID: 0 PID: 17359 Comm: syz.3.8594 Tainted: G L syzkaller #0 PREEMPT(full) [ 2071.719916][T17359] Tainted: [L]=SOFTLOCKUP [ 2071.719921][T17359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2071.719930][T17359] Call Trace: [ 2071.719938][T17359] [ 2071.719945][T17359] dump_stack_lvl+0xe8/0x150 [ 2071.719967][T17359] __lock_acquire+0x2a94/0x2cf0 [ 2071.719993][T17359] lock_acquire+0xf0/0x2e0 [ 2071.720010][T17359] ? kill_fasync+0x199/0x4d0 [ 2071.720026][T17359] ? do_raw_spin_lock+0x12b/0x2f0 [ 2071.720042][T17359] _raw_read_lock_irqsave+0x48/0x60 [ 2071.720063][T17359] ? kill_fasync+0x199/0x4d0 [ 2071.720077][T17359] kill_fasync+0x199/0x4d0 [ 2071.720091][T17359] ? kill_fasync+0x53/0x4d0 [ 2071.720105][T17359] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 2071.720119][T17359] __start_tty+0x18c/0x220 [ 2071.720137][T17359] tty_send_xchar+0x1d2/0x4d0 [ 2071.720156][T17359] ? __pfx_tty_send_xchar+0x10/0x10 [ 2071.720175][T17359] ? n_tty_ioctl_helper+0x343/0x4d0 [ 2071.720192][T17359] ? __pfx_n_tty_ioctl+0x10/0x10 [ 2071.720206][T17359] tty_ioctl+0x9c5/0xde0 [ 2071.720224][T17359] ? __pfx_tty_ioctl+0x10/0x10 [ 2071.720247][T17359] __se_sys_ioctl+0xfc/0x170 [ 2071.720263][T17359] do_syscall_64+0x14d/0xf80 [ 2071.720276][T17359] ? trace_irq_disable+0x3b/0x150 [ 2071.720298][T17359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.720312][T17359] ? clear_bhb_loop+0x40/0x90 [ 2071.720328][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.720342][T17359] RIP: 0033:0x7f1f06d9c799 [ 2071.720357][T17359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2071.720370][T17359] RSP: 002b:00007f1f07cca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2071.720386][T17359] RAX: ffffffffffffffda RBX: 00007f1f07016180 RCX: 00007f1f06d9c799 [ 2071.720397][T17359] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000005 [ 2071.720406][T17359] RBP: 00007f1f06e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 2071.720415][T17359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2071.720424][T17359] R13: 00007f1f07016218 R14: 00007f1f07016180 R15: 00007f1f0713fa48 [ 2071.720441][T17359] [ 2072.176144][ T8100] gspca_sonixj: reg_w1 err -110 [ 2072.348487][ T8100] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 2072.434101][T22567] usb 4-1: USB disconnect, device number 55 [ 2072.585935][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8601'. [ 2072.596355][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8601'. [ 2073.060928][ T8090] usb 2-1: USB disconnect, device number 86