last executing test programs: 7.779141082s ago: executing program 2 (id=1976): mmap(&(0x7f0000246000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x7ef34000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0xe0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) 7.157018432s ago: executing program 1 (id=1979): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req3={0x1000, 0x3a, 0x9e1, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x4000211, 0xf00) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newlink={0xa8, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xc4}}]}]}}}, @IFLA_PORT_SELF={0x64, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5ed5b3942ce882e2486f5755ab69a308"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2d34a123d47b3b08241cb95f01d88e4a"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb0}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2a8ed6b016220f8e088d99ba2942a669"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x28001}, 0x4000095) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000580)={0x3, 0x0, 0xec, &(0x7f0000000480)=""/236}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @remote, 0x1}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x7c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x0, 0x9, 0xfff8, 0xff, 0x2, 0x400]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x12, 0x0, 0x1b, 0x12, 0x6c, 0x9, 0x3, 0x56, 0x16, 0x30, 0x6, 0x5, 0x24, 0x4, 0x3, 0x24, 0x4, 0x12, 0x16, 0x2, 0x1, 0x48, 0x60, 0x1b, 0x6c]}, @NL80211_TXRATE_HE_GI={0xfffffffffffffd6a, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa, 0x1, 0x8001, 0xfffc, 0xd, 0x1, 0x200]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d91c42f341"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xd8}, 0x40001) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r6) sendmsg$L2TP_CMD_SESSION_MODIFY(r9, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r11, @ANYBLOB="54769b01220f167ed62cc8a305fd1f001205000008000000efff060000000ccb01599617b1e57f29b0aa76adbab3c672e875bc7a21e6699be8fa5879472e68d0007edd53fa5c60da341f078361beb18551e53b68bcdc8aeba99e801d3c2a77e49af475601f1888a2efac9d39031b6c96c6f5f2279b02b57166d4eeeccfddb874e72352ae14d2367b49492d44515d91021687dad26edac3c8781e76d2b174a3b85b72802e39edb06f56b7af9e3a204caadb"], 0x1c}, 0x1, 0x0, 0x0, 0xd000}, 0x1) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x6) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f00000005c0)=0x1) 7.112652264s ago: executing program 2 (id=1980): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000440)='0', 0x1) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="b1b7fd9c47dbfd05c6827b9b6fe1f77219c858a250b24c0c000010000daf4afd5f0d1061f51f00000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x804) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x80000000, 0x3, 0x4, 0x5, 0x200}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xe}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6080, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x301, r11, 0x7}, 0xfffffe8a, &(0x7f0000000080)=[{&(0x7f0000000340)='\'', 0x1}], 0x1}, 0x0) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000003c0)={0x0, 0x2, {0xffffffffffffffff}, {0xee00}, 0x2, 0x8}) quotactl_fd$Q_GETFMT(r12, 0xffffffff80000401, r13, &(0x7f0000000400)) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="e7b0b3b4f671f22f2294a68f1c7c5da6fd94bfb6c5f10044c53ebe68fc6e4f7bdcb8eaba21e772f8d42879e975d6b45dd03cb6ba8cdd0fc83ab25daae9e6b22dc164b84d96cd501a3357e30fd371c1327e56a05e334d4fcd8edf34255816c7d3b070c7aa2f5e71a6a017ad6f9a02d5fad71078015fd45d3e12b2ee080a5605072d20f430264ac0b38ce8830d4ac86553b5f8481f1e1792e05fc835a6f06cbe97ff17efbca02136f005d260250451dc38a9", 0xb1}, {&(0x7f0000000180)="7792e76148b60c7c61fcd0a34e470badde51739bc12ae9d7521cfa4c4dd7af36e8b894807123", 0x26}, {&(0x7f00000001c0)="f51a0c49234e354d612a1a87ea997ea7c605882338204d795545f9c9329d06dcc0ed5912b7eb8c6ea8a92bc50de35433c6288f307ac6065bc0827598a989a6e7d21b71f7fb106016467710799ae21f270abb2f223671fad7e525618995247c3aeb94e2016ea3f75f2d50ffd57b196f6957e02ff02ffa430e626460daba0fd2e82cfdd440c081433c6d3be600bc83bfb30399", 0x92}], 0x3, 0xd73, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f00000025c0)) 6.864133531s ago: executing program 1 (id=1982): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = userfaultfd(0x801) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$unix(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="55907b9cd67dd86fab23ed48e23d85a65838370a50548fd323b121a219d77ac6edbf127dde411298dd9e50b27fe1eae4436d7aefd80ce7c8c99219affcc8b4bd23ba927012239a43a72bd89d027ff44fccdb12986b25034ed0ec6c195e6062e42a54e180d067e0d1af6a7df128e1ec8aa83a36c38008519a0b07b69ca92bb695cdd07151c32cadba56e99625722ca1b0f7f33a86f96d607bf1d78b4765d8d392a33a06993b8a6a0087d517a6c4b42bdf644835d9eb30dc0c1711f69c613a6ca3ac8bf05bc06aa12174b5a9eac17cef1337d4e71f42881fa33387", 0xda}, {&(0x7f0000000400)="02d314c964d905ff75879488092e3836f599ff8f95fc0ad931f906f5a337c62fcd400fc35940cc84f4faa6f8dc6a279096c0c93b9d040530c479fb9fe0698365bb3861857e9a01b841866130a34043143e58a438f4f44275df9226d9e805968519966e054b12206d7b", 0x69}, {&(0x7f00000001c0)="4fe930b86a4c417cbeeb84845ff0610b643b0dfe9729485580eda4a4050551fbcb8ec5f3fe3eb68b72eb01", 0x2b}, {&(0x7f0000000480)="c6fb8dcfdf29a9c558f37394113e286c7a0c61e121bad49e2206ce372505ec6eb35d7a0d74272ebf0d4fd333deedd1a023847fdbbc038009361d5eaffd86748456dcb31b", 0x44}, {&(0x7f0000000640)="07ee0a00953a15b0bdf3625842eb049053078da1b63ac8cf5d9a01fe38403bada4b5c7f40b000d0e0d0cb7b032801eca511facda7be9cdf1fe9271b7c97b4734122574dba1718bea30c3505cf08f1eb3bd4f62ae203d78715ac860d8d9dfc72f40d3e655279857cae899dfa96acb631f2a4f506cbfd942b6f3fd9237d2c210744112b00ea5bb55a15138e71c4014f2f6468071cd4307514c5016a776305b3d0844a1d2f75bc1025dce9c84f8ad1d4a843d82818c8b3ef934d828031d6da79d6dc42b769ef0ca425ef921644c404fc1138e09c56d626c1d26f1360c2510de", 0xde}], 0x5, 0x0, 0x0, 0x20000090}}], 0x1, 0x8080) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 6.557005836s ago: executing program 2 (id=1983): r0 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) ftruncate(r0, 0x7000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newchain={0x34, 0x64, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x7}, {0x6, 0x2}, {0xd, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x9}}, @TCA_RATE={0x6, 0x5, {0x0, 0x67}}]}, 0x34}}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x8) r9 = openat$cgroup(r8, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x23e181, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x56dd40, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x83f, 0x0, 0x2}]}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x4000038) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x7, 0x5, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xb, 0x0, 0x5, 0xfffffffffffffffb, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2016d3}) ioctl$KVM_RUN(r11, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) 6.079280267s ago: executing program 1 (id=1986): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x70000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x20cf8847}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000d00", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 6.031694658s ago: executing program 2 (id=1987): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="0004570000005707a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd6410f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd9d88b7a6dcfd493f5ba27f046de8750ab72fec4066b38d5414844bcd431b5442f3877a3cd59708e847d0adb5b7c05fd3f46cdf48fbcc1185e84c84300a68440c251c870e72abb489e2269fdb3258636c4ac1d618de1e7f5b757dfe608d1c82fc2612af5bb76ed077cea145505e8cb138dcbb8bf5f1f53ef22ff4b2d9bc247b07c4d9773f7100d3ec73ca031a9310190641d927562fd127f1f4d2f70ea23b09d8a7dd4b33c0e27fd538c0a43fb3eded7da82baa805057dbd4fcb6da0e56e4267323ef94e5a56b8e944fa39b43e4420fea3621c97a5d62ff519622c3f708a2f2d64f227024f8d387df1517c5c5d77478d54450808f14bb1a940"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="2009007be946c401000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0xa, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e0001"], 0x30}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0xa) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x68) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000280)="3302e5c79b3a1ac7ba0e9d750a935b4e9fe384ba3ee445b451b55bb5bf9a1c73d6594d8989627a87d23b09acc8f471869a8b15c525fc5701d0f8fe2a129a29b4d0adb6961923d5e61de1ccbbb28be9b89502", 0x52}, {&(0x7f00000000c0)="a89775a81572248d2ad86c70d68fe64a01ad8d", 0x13}, {&(0x7f0000000100)="476a10dd0890c51f042d8e00007c4b2162f4a7ac0846b77570", 0x19}, {&(0x7f0000000300)="1eb59573754490e636c3d8780d4940d661e32b6df751f3399d23e05b6677d0a897bfe845b62add3d320e35e91d686df19c131147db80b08ce2bacef3e4d9f706cc9ea2609b8b24a1de5b07fe0f7cca7e34f742fa96c1b0c976172df50231f75d6032a94fa76937a25ae3842a306604b6c7bc82af7db2af9238e34af31d41504198a7f7b2cc5a7faa053c317ee36d2fdba496e4da99ef1813c868", 0x9a}, {&(0x7f0000000500)="4bea303b3991e645a5ee132663552d5c91d98f40055adbf32b3b4074695caa2947e5a8c4508725a0043cfef8f48f04475912aff38c6ec589a009279b3d31f2c78a07a6c2d59e7d77793fb5c9c4b88fc16b985ef17fbf330a33e96efe3df4b479cc2b96d8427a89975e1416392f7be3b6b69a80e42a7a8442f12038e96c5d9c85b45ac06815ed98ee4819e6be429c560a623e5d17dcd56eb488898d7fba0cbadd339aaeeac2f021ea820e129b9891bfb5a00abf0849e4c8d1f3a48f074fd5cff6d1966d03e060c5cf3821d02cb7cabf343d9feac753f0bb8065c28299b683b020", 0xe0}, {&(0x7f0000000740)="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", 0xfa}, {&(0x7f0000000400)="04e636a9b098a7e65da3f590cf9fa1198d23640d32a28835e9a346461acd1a9e45fc34d986fa7afb5567f292634728b8ed52d7897e2a00", 0x37}, {&(0x7f0000000440)="6934e42ddff8bb0edb045de2c67ceef079aab4d1f439556c", 0x18}], 0x8) (async) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000bf15c308390c1b0010050bc61800000000000109022400010000a0000904000005034200cb876fab01400000000000000060017ab2947bb9e094e9f3d9ff61f5d179a33a175c2d467a384e0a4a4b7500"/95], 0x0) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_control_io(r10, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x40, 0x23, 0x45, {0x45, 0x4, "0c6867d20d1ca9c16186cedffdc6376be35d9613adc65d855a99b0459fbc451bdbfa48eaef770fe46145768213adbe0adaace05b8389e73aba2d3ec2f86a722cedff07"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.819672954s ago: executing program 1 (id=1988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r1, &(0x7f000000e280)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)="cd70bfffb0d3cff542aa7ee6dce2af032ee623768b7f7f5a60c4d3ca6b5850454892236d2462033e706dad3c3dbb38a03788a3e78b8ec3aa39e9bc462ca4225eb0b4e5ee5b7eb288b53d6dc45422222e3d62b6c4dcf2d9", 0x57}, {&(0x7f0000000340)="a63a472c79172f7a9b9249fa28986aae3f65e7377351f0a5bd88118bec25499f8be122f328bd6946a68951a5e895eaab966f914136fc4950d30a121dfe473f962b5463a2cedbabfa161c84725da9f0afaae30feeb5536329f01679244db85a93217657181bc3511fcb7f8a3f368d2702972bbaa27c9c3b3b0f5887ab82c8783c315171370eb6dc3b18406b8ba8af5a4eabf009f0b1046d92604b89cf76bd74965f8b1784abfe268451", 0xa9}, {&(0x7f0000000400)="2935e4b14ca15c692aadc8c3ae6a9d85eb7b2e33438dab54cd5dca76bae5a49f930c8e8b4b0e218b8d314033db26e959dd0a820a2494e076ea96dff306519a9018ee3f5b7073bb489212e90a99c765fc6573785e7ab39fa1f574cd08712ea2d98334b09e5bb7e20484b3d3f1e35ae44e7974b4eb59e190aa", 0x78}, {&(0x7f0000000480)="eea9591b2b0740068b8a368ffaaa7ac5d681a859c32822bf42dbe4aae56ab90c862897612d5d828c02d82c169a3da6e6a30f45fbd221b67c7aa9fa9a291703e07182c7cff395e71700a116fa6c8d0b3b256a227802aef8ee8717919ca7ae48d2bc9355dd43666011c393375be181ada4122d43c616c1b392", 0x78}, {&(0x7f0000000500)="7b257639d508632aceedfeb409cdc36e1117a29d13e3447b4b41555315991e083f8330a7e28309df50e249ead105c220041a24429fd31a511c01762af341e5d53650cca6e0a215f587508101743c5f08e4d2de8cac5a7f9cd05eb15206fb8fb727309f6082a80a4a9a34f1a81df74457964fa4235bf17ffcae2233e3f98369c70f324acc45f75f07bce78deae16127969dc84a622c1bd635e8ded64029c2d1b7", 0xa0}, {&(0x7f00000005c0)="5a2eaac5dc260c4cde602d072f06cd13a71bc34a05893b07b72c333d1f5990b16c2182365940236a8c64bbdf91310e7a07a99dfa9452bc18de87a3e2c40a222af752e1aebcc8619899a485f7a8d2d3a3f798a6c6a572db8ba6", 0x59}, {&(0x7f0000000200)="f7d929bd2da7bb2fb2b524c0b2633d8d088f3079d962c61e", 0x18}], 0x7, &(0x7f00000006c0)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r1, r0, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r1, r0, 0xffffffffffffffff, r0, r1]}}], 0x60, 0x20000000}}, {{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f00000007c0)="8d90d00511fe793514f9949503529dec2152dd67233113a7d086b020db6184efab63ac6f9a16d7249c422ec16e45928b529d638a00211e496199f20ff406f6070c885e2956326d71c501cd169c99358dff6ec34365c8712ad98c7fc43cdae0a6d0fc42e1b08df2edde0c6fb75688ea1f24dd43855d04", 0x76}, {&(0x7f0000000840)="b9971f77be9c6f3b5cb2f2f653f715c05afc1e6a12d972beb49defced38a087ff18357db7f69a18d3d8cb07ec13d28d2d05e17a8ce692e9116d0a3d1b7002b84d7da3d2c0c382831a634594ae58deecfe303bd59e9413e86143816192702dbd0697abd046c3e62805804f2287648b9d4f232bc85ba3ab115dac07514abfbda9c9f79437b713fad133c212a429c6abd8cc3b218c45c43d98e302de4e8557ac4776a4da92f225add", 0xa7}, {&(0x7f0000000900)="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", 0xfa}, {&(0x7f0000000a00)="066a24eac44b24354746e7a356f4fa059a90bddcb3c7bd9c3534db97847cd1da9cdbd22403553a45b9d6e4e4c03542e0b131597d841cb5dba4a8d9343c14ca9c6aaaf1260afd0be337640c5726af1972af9b06f277fe17e2930feb10fe4070dddaa1e4b9b4aa5425e33ed35eadce4ba197b5f9abaa9b066d33f444987f77a661c297b015107b3e4ee1c0ac38c016c9c923e75b74940bbe893c94900bbe65897f6cb182963566b6a5d3d292de123505129f02c8e0f60221b8fae60ddafc957cd9c6e89fa530ed593a3aa707", 0xcb}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="d25c7ae4753b33751ea9ae5fbe1a9d8d68e18b2d10321e05ec35a46cc424ec7b3832d8f8ee961d782de5ced6bd1b4d986439b3bf7441e988804d7f5d09bf987d7c0d842fc5515dd1861a9770133f81202517d5b01a2557faff5be07033178ee45bb20819e13cbfdc15bda757b5ca40d4fc487c952ca634d94100e3c1f0a46d0f1cafe3bcc5a3429ccccbb1d2a7cf7850c21be964922167257f87cfd31369e84fc5b1d4deb15d7e0b8abcd7f2e48c4112fa2cd854093a2cdbaf67944f7750b000e1d8efa0087c9dcc24a0df5d4855f01bb6833b0e4d4c15d6729ddfe67cd2", 0xde}, {&(0x7f0000001c00)="d8a2f3150d24afcf11ea06e8b77107d00b7343e54fd264", 0x17}, {&(0x7f0000001c40)="ef4da513cbc47010dfe991f75dce3422d2d2af2b574e5341dc2ec7f0d36c040bc3bd0f4e7a32e38eab8fb45b1e628e7af2439b78900f160b3c3faa99bc7a99a8748edbbb61f755bccfed43556fd4347b7a4423606cd02418e87ca0f7b99b66c63f6361df974a14d993e1498e26e5650be98bc2990f5c74c2f49840ff8581aff161756df915ed414b3219e45e1b9af0291fc554d824", 0x95}, {&(0x7f0000002040)="309d537c74553230a19fbb4cdd56773fcc81e6c5123575a9960efa8587c0cb99f48e102ee1dcde8c844059bab2b2f2a8053ad272c6a22acb230e8f88717f6e0927938d4f949505e07727cb588e65881b9af8a077c3cf6b76a47bdde55c35169b8cfac6e20c0679f2ab8d982d9ce130", 0x6f}, {&(0x7f0000001d80)="60c61baf417507be47b62fc528a6015cf73ffc", 0x13}], 0xa, 0x0, 0x0, 0x4}}, {{&(0x7f0000001e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001f00)="afc52c80fec2dd491637848d49af24fefbc54e6ca41386051c98d677e588c2ddc8d3bd3e790e7b29dfab919f7fe7ca790133c84b098e24af1616624ac5845901ef4779d641e9c6004e7b5b8ad1d00d783ed241346db18bb6b92d6a5085ae7cc2065d4ea000c074026dde69194d33de5dd25532c2193581fa24028eeca243e121dc72f52b275af2d9e0c46e16e6ddad9cdfe03ac8e47a304ded449e8435414f812eb7fb2f87d5ac6eacb3c685ecbbc87b9fa420622acfcad6291b6046", 0xbc}, {&(0x7f0000001fc0)}], 0x2, &(0x7f0000002100)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0xc0, 0x20044801}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002200)="bc46a2caa1dc6290c6af326478779bc30831d3aba42b09976be798a6173d813993fdd996c6e0d9ba589f44c254f5", 0x2e}, {&(0x7f0000002300)="676dca46b53902fd081be0f2f6aee146ed251e518af9d11741d7ae339f536eb10010c3e227ec038267873040a118f0a0026ae1a32f70bd2efbe23e2097b8a76e378e61b0d077fe4ccfdd32e494719f9542e5c7b3e84f213994b05f7e32beecd7c933e6f9437cc635146dda43bcbe72a55bd99034041a59299ec9c620ca08128677548e69a94d2d3b5cfca3a3415c6926efcc3797573fefd80422a47657ee537f3c59dce9f5181492a930451443204dd2924c4881fcbb1d8ebba1755d0ee9fd2998d8a06bffcae5a89b87bb74e1d2dd3c7c6214b34c149dd2bff8e8c76a3fb19a43", 0xe1}, {&(0x7f0000002400)="6050cf465af889aa539644a82c7f32ca32781c1282e4fb87e911ab7331668f643fd0e1cb16c90aea72f25f685fe86dd989b8fe68fe40960ea90b548ffd23baac9dea598c460425fadbc5fabf115cc3aa61f1bbf7142f43660b7bb4e40f0895901a7d136f5ca3ab43966a88039bca9786838609cb05ffae92650a7a3bff66a0566ad2fecb5efe18a6b6c81e2ef17978fda1646e0b4dfff1a0b8ab96", 0x9b}, {&(0x7f00000024c0)="a7ca3214e1885f194c9a6cd4e2526321e4b6a69a636f148716717f6c62800e2b81cb61678e855460abaa417911a73eb655d00800f471783d61dee860b30037f70043879483dc2bc09099d7515fb25fe2e1c1ba96506108649ee20012d5bcb5a5c05e66284334306f4fafca1944a52a87fd5084f5566397b7db1477e3c6edbdca23de15c574c49a1fe3697841f240c681556fefd9", 0x94}], 0x4, &(0x7f00000025c0), 0x0, 0x8000}}, {{&(0x7f0000002640)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000005000)="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", 0x1000}, {&(0x7f00000026c0)="e8cc62990e575ca347e43d328a415858bde2665917c6a6192a8756fb20c07a2c0ee971b48e093fdafea1b50d1f0d855a5da264a85a90978db06d63accef1d148a48f29fb3e40", 0x46}, {&(0x7f0000002740)="140a78d6f98e078d384f1d2f0d9f9d5e7b3ef4f2043451f1de18ee2b365e260be223973d5a6da800d609b706b35833d4c992a4f2ac", 0x35}, {&(0x7f0000002780)="0dc4a05ca72727e16f47a8cecd9d7a082e18024138bcfd0ef3a1b43f98d1dbaf774dff747cfed7a3e381f1cad76ec8", 0x2f}, {&(0x7f00000047c0)="c7a17289b19d92e5d4b9405b08e59871771466c6d0d5ff06834f8bd02447ba33c02f3cb6d0592643099afa894ce45d4a036c84320d786c3f963dbe765eb1a24d607dc0b73f7d8669d363276033b335a4c310d0ee3383da05bca6fae90c47c1fdd653c141ee94e8b9fcda0816ee11ce1981cc10890fde1e2dc2aa0607ecaacbd67e1d245421886ac78a3397438e462380dda97de8fab5", 0x96}, {&(0x7f0000004880)="ddf4e6453a14ab7b44a45c3cd5d50568f6d4bdd621f6e9f37bd6b88b2ef9378e4f9947bf30383b916ec5d7611a1fee662d8ad8d2aeeb707683b8e04b470aa317d490c716f247c71d962ac2a42261cf2ffd126f", 0x53}, {&(0x7f0000004900)="f8c423db", 0x4}, {&(0x7f0000004940)="159f1aa87841d2108cce23cd736ce1fccca91449ded4856e93d15308c2", 0x1d}, {&(0x7f0000004a40)="c5d09ad6bc70161bb3ddccd153709e9b73abf2086c146be7eba231c182e5afa97d28da54a26f24ee86062a54edd036b1bc24dbbe2e4ee94186fe7a2fe01e228254307fb94d5a626985d1f1bd7de59dff697e289eade7b09f9f083db08c3a1408eced361441c7e88ccac6b314b1bc3bc67306441bec9f43b0a3a4e7da0e5ced8e31d26872e22dab9d7e7d8d", 0x8b}], 0x9, &(0x7f0000004bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x20000081}}, {{&(0x7f0000004c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006340)=[{&(0x7f0000004c80)="b8aab67208a6d86ba51c43065e96fff7b82cdaa5288b1afc71812128d2c3781ef15b09921eddca32b1287afa5a2b9978c32064e66eb786d45b784bd80761f569ba1d69c24628639f23e0543a73f87a510ee21c7abfa5e71d9a00ede3697d80f3a34a326873267e1e9b3b867ba653c4731932adefb32df64a15d74ea0edb892bbb56728eac015563ffbdafce557844eba", 0x90}, {&(0x7f0000004d40)="cdb46ed12e15aa636f79665d943b4bf688309d8dac45d7cd333747be34a8060a4403924a51e5fd0322a8914ed974f704368fd215e0e041418e5edc2da2582e828c16448b828f0f73027b138fdc8cda0ee197c03d3e49d2091b104331ce0040479f760fe462d74faab2edefcf283fca5b60a5b741e5e643e2c2280e4197b2b7fe9466eeeb1280509788aabad3d4ccbe95d17ae6623cf25a749cfe8a4ea71829ea582c669dfa6becb9e9bf318db497b2879171478a35bfccefcf91e7ac3c735e353e520d3e56e7eafdeb64359d9cb3dd12198c2edd182292c411bf29f49d094364dae1b4f88eab695f53ee1334c1", 0xed}, {&(0x7f0000004e40)="f7ce87b265dee72b566282a91d818501ffa6302b72f3d9a6ce38c723e92e48f9f53ac8dab919b7db24f25f16061163264a2aa0c17b324c012220077e6ff1cde1c872517c8cd8e4", 0x47}, {&(0x7f0000004ec0)="c6b4", 0x2}, {&(0x7f0000006000)="77be83e9357e66b133ff0b437a2d0cd657203afef52b22984c238eb62897c8791123235fa8ca080f851ecdcc7ff7420685628b165295057c3784c14add5d591232cd42d362de6463d1d0bb488d6a5c98d35913a1bcfdaf2e0a6929f25df5e7d34d3f1fa6601bc4425a2ebeee6d612b0d823922f2bd469c59b6549760079084c4c0fb44567dff485398f5ead77865e72ad03de42b79e4722af15b81642d56c98d833ba5a72b", 0xa5}, {&(0x7f00000060c0)="ba97d43847e5f812d583b8abe7aab72664b97f878bf8e2a5a9b5ae555b0edd29bf33b758eb643bea4848270ad04f5248131ac7b31831cc4ac2b89a21e674b9079b45a2", 0x43}, {&(0x7f0000006140)="5043cc9970a9bf5cb7b8c7a876e47b97a29ebd94f6699c9164268466eb95826938579037d3da29305963978a835afe1733f9a30c8e0c2c0ad68608c68aec4a63e3be0142c0b00beea1d642bc658b0127fd4c4a89f4d6673892089edf16102452555d48c2a058b3431fa5f12fade9eae699de24ea9e9f244c0c2230867db8cee9d0f6b5e5ff5de4aaeece5e6b71f0bd6da272acf84907559595460ca4446788465bdf2566b3853c63432a15c1042b6e2b1ce5be372ccf3df93409", 0xba}, {&(0x7f0000004f00)="5539fa145e5efd2108e31ea90de0b92223df600fe36b", 0x16}, {&(0x7f0000006200)="a55397710f23ea0d3b22aa69371bfd388a1bdbccf8501b63945fc370299b566660b7395033774f6450cc0fde634fe7783908067e185a6f960f5bfdb51ead4e69386ac6160cb5bbaba6bb5ae9968b1ba9ce7a788f7c", 0x55}, {&(0x7f0000006280)="b203ef3a563768ff4c1d0a0031d051a6442c5f2cefddd569c546c1b2aafa25a0f25cc709092ce3822c3d3ba3f862c4e3fbf2f4de15bdda70623f1d0a3ba1a6cae152f8cc1cccacd5d61af552a4fd732716f7bdf1ff5fe893ca47e55946bf3ca6509763e219d844a827ecb973ec2b38f1e7ff7427d5380f9c9c5a11cdcbceee21c5e1598eac67391664a0c714fbd0099195cac4ef3f", 0x95}], 0xa, &(0x7f0000006400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x40, 0x20040001}}, {{&(0x7f000000d080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000e100)=[{&(0x7f000000d100)="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", 0x1000}], 0x1, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x4000}}], 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007d0000004300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r5}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r5, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.350015808s ago: executing program 0 (id=1990): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket(0x28, 0x1, 0x0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, 0x0) ustat(0x2, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4800}, 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f020}) unshare(0x28000600) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401000001020000090401010101020000090501092000000180072501039a8556090402000001020000090402010101020000082402010101080a072401010203000905820920"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) 4.561138496s ago: executing program 3 (id=1992): ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000280)='./cgroup\x00', r2, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x9, @mcast2, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff, 0x40000000000000}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0x5, 0x5, 0x7, 0x3fc, 0x9, 0x3}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x100000000000044, 0x2) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) 4.173465917s ago: executing program 1 (id=1993): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000020103000000000000000000020000001800028014000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904", @ANYRES16=r1, @ANYRES8=r1], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 4.173066103s ago: executing program 3 (id=1994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fstatfs(r2, &(0x7f0000000b80)=""/4096) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r7, 0x0, 0x0, 0x1}) r9 = accept(0xffffffffffffffff, &(0x7f0000000440)=@nfc_llcp, &(0x7f0000000340)=0x80) fcntl$setlease(r9, 0x400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000000800)={0x48, 0x8, r8, 0x0, 0x2, 0x1, &(0x7f0000000b40)='L', 0x1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r10}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r11, 0x111, 0x1, 0x0, &(0x7f0000000000)=0xfffffdfc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.827980928s ago: executing program 3 (id=1995): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0xffff7fff, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_csum={0x68, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x0, 0xadb7, 0x40}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x804, 0xa, 0x10000000, 0x1, 0x9}, 0x75}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4050}, 0x0) (fail_nth: 3) 3.23265386s ago: executing program 3 (id=1998): pipe(&(0x7f0000000480)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a004a10fa77e633", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0xc0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b0001"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 3.132738628s ago: executing program 3 (id=1999): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x44, 0x19, 0x96, 0x10, 0x6b9, 0x4061, 0x188, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0xbe, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003ea000000ea031b145c1ec654ab798223bcaa5e2505853bb8b0ed01cbff6c74ad31520b8ab9"]}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x6c, {0x6c, 0x6, "bca72d03b532a32b5e4640479a2ca3755d3fe0d0f40d1236c0276e30416da02236d99e24008b60f8782321d52046be1f264136ecc5c7535d8b7708c502b0df27441a6f150151e28f049c76293a5c66997ee02efdbb8dd92038a49b0e01fe5c23ab54410ba2b506fefe55"}}, &(0x7f0000000100)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "25783fcaaf9820b9e7c4fe9d54c0dd0dedc5abe281c1041a163ad46a58c594a39d1c4ba8df7327006069f343d234b1e03d12f5e45d0e2498c34b340364f0e4f99357e5b127a85b4594021515302f8fa5751c40909b57d89a064a0994676bce66226bd4d64e06368c024017936b68c50298dea5f3d8d47c230f050aa350b4ca7d64e59c06c498445f472ebf"}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x40, 0x6, 0x50, "f9f2680b55f5be26240aa54627391f035d0b462650ebb3789f4e1e88f5647bf610c467b80f4461ae5d31b187e1aeb60f3073b3bfe06a6abc93926bffe75a79c97f67cd4356957fa6f396b6b4dca7dfea"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x0, 0xe1, {0xdf, "8b3057c08f9069a07f6068d7857f755145a207b2d870fb6dc55634430830e47b5bc0c120c7c03449582221e3dead6c9fe82456c9b26fad1ac46bbd49f977912343df34b99f392972dae6ab8b806333489bc42a996f49436d029529bb4e73372381a8e1a680b9bf773ed618639c26b6b0e5349205ec3bdebdde0f47176dfbc9570b6eca554ce0b623598e94a5e88e19224db02293d2f1e4ef6e5a8414056b36929be12d088ab05e93880cf04a6170dede026b818330298ce04a9df99dbc87e4041677316b2ce6e8faf7730e6db8c22ab50574095d3b3f9502b67c938d703be2"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x98}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x1}}) 3.012485698s ago: executing program 2 (id=2001): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2, 0x1, {0xc, @pix_mp={0x9, 0x81, 0x30395056, 0x4, 0xa, [{0xd, 0x4002}, {0x3, 0x8000}, {0xa64a80ed, 0x10001}, {0x200, 0x3ff}, {0x5, 0x1}, {0x1ff, 0x8}, {0x2007ff, 0xc}, {0x6, 0x1}], 0x3, 0xff, 0x8, 0x0, 0x5}}, 0xfff}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x281c49f, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x1}}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="001206000000d8f203751c49"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0xfffffffffffffffd, 0x0, 0x1000000002, 0x0, 0xfffffffffffffffe, 0x6}, 0x0, 0x0) syz_emit_ethernet(0xa9, &(0x7f0000000140)={@empty, @broadcast, @val={@void, {0x8100, 0x3, 0x1}}, {@x25={0x805, {0x2, 0x10, 0x1, "6af50319cff7f2dbcaa455441b38fcdbed2d75f466e9816020537be8dbacf96852f68d1ccfa051a5df63499742fd5beeb501a1ffdac91e7a712a72e919dd568e2f193e2e2eefde330d603c1a2b3d59c4ff0d24bbeabd8b512f02961ee7942076b4a764bfc26516b8221b1ed1459133810860ef5e0e49e6bed532d9792dc065cc3e574f21e5f663cadb3bc4e8417eaf9a1cb42e67"}}}}, &(0x7f0000000200)={0x0, 0x2, [0x7e, 0x40, 0x10d, 0xcd8]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.776578034s ago: executing program 0 (id=2005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000002003e00ecffffff98030000000000004b000000000000005600000000000000000000000000380001"], 0x78) (async) close(r1) (async, rerun: 32) r2 = inotify_init1(0x0) (rerun: 32) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x2000565) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}}, 0x2) 1.728949142s ago: executing program 0 (id=2006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x28, 0x0, 0x33}, 0x4080) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffff9a4, 0x7f, 0x5, 0x9, 0x7ffffffd, 0x0, 0x6235, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x6, 0x3, 0xfffffffe, 0x0, 0x7, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e2, 0x1, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0x3, 0x800, 0x7f, 0x9, 0x6, 0x10000, 0x8, 0xc10d, 0xfffffffc, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x3, 0x3, 0x4, 0x800, 0x2, 0x4, 0x7, 0x2c85, 0x6, 0x60, 0xb, 0x1, 0x6, 0x71e4, 0x1, 0x10000, 0x4000006, 0x9f3, 0x800, 0x0, 0xe842, 0x40, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc5, 0x2ff, 0xf, 0x20001, 0x550, 0x2, 0x100003, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x19, 0x10001, 0x9f, 0xe2d9, 0x787, 0x5, 0x8000, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x10100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x3ff, 0x1, 0xfffffff7, 0x1, 0x5, 0x4, 0x4, 0x6, 0x4, 0x0, 0x9, 0x407, 0x9, 0x5, 0x2, 0x1, 0x7, 0xffff8000, 0x8, 0x100003, 0x6, 0x10000, 0xfff, 0x2, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0xc5, 0x5, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x102, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x11, 0x7825], [0x3, 0x0, 0x1, 0xffc0, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x0, 0x9, 0x7fffffff, 0x3, 0x2, 0x400, 0x10009, 0x5, 0x5, 0x1002, 0xffffff7d, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0xfffffffc, 0x4, 0x8, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x5, 0x2, 0x4, 0x4, 0x3, 0x0, 0x8001, 0x80000001, 0x5, 0xb8, 0xfff, 0x0, 0x22, 0x8, 0x75, 0x9]}, 0x45c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x81, @empty, 0x80000000}}, 0x0, 0x5}, 0x90) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000180)=@in={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000300)="c90d5a1c2198591e10f12b2e0dda72bd28ba80762baac9d500689c8faa7c66c64d2ab1eec665e1d5e304a1b0e6b93aef1b486a90f67f102dc4d533da9157c63e4ab13ecfff68ec8bf301ddb9e2746b881a6af49bee343ed286d5dac8859a039ea860dc08c492828eade67d374e1d2776d4fe0a0f1c884de9d1aa9e680cdc3d09d522daa74310c74edc80cb8bdc9416042d873f8e0981a956349a8543a78035db25ee08f6ce9380ca8a", 0xa9}, {&(0x7f00000003c0)="7293012f69d69237009d218ec35574ea7ab637384ea5ddf7e7fff92bff4f62b88dc1c29c1f98c402232f2aa19b2ce068375434481da75a46efc814e8b4e0113e8f389cc89515ea8a40f58ca8f43c88383f68f75632a13e47c70b4605ec4dff62fd", 0x61}, {&(0x7f0000000440)="9ee1f55cdb18b68c22acaad936157706b600daed1763b420d0915f507a07cef621f749e8f9c66c620af941f377555cb387969e743181c104cfa85d34c2c612ef172d2b37cc71c4cb443aa7abe4793381e6e7465bf045e1ac11752416d401b192fd93d47cf87a5ef6e3a2690825eff49c0896391f1b61b553a7d4d8c76aeee8bc1f53e11eb86066fd138e2ae012a09f70f7d592cacef90d40f8dd3960a5c400c3f9e41af67400bbdeaad7ee767f1a3ef48bb1a6fe0bdfc3f0eb0c92c5e9d950c8d9a5caa71b1fc2757464c2713c281f96248b150e397ca339f487fb180c32720be9dcc9544aa8fb1fe8", 0xe9}, {&(0x7f00000001c0)="eba3e6266f477368bdcb516a5086b554084217198f88b2d869f794803cc1edd6d9cdf85be10be0bb46a9d748cb", 0x2d}, {&(0x7f0000000540)="8e3de5213adcb8992feadeb4d8466fa2dec765ba64fa3ef07ad15755196766c405bd362a04409d129c9436a383628032a3d470dcfd71494ccf268fd4bc7069b58656365c3b665d7106b91ae214ad04cf923bc7ffbcae819ae1da5041fa84524fc25fde10e47227309e2b8e7929dbaf691f312c326e5e22e086a4ec59fff0480c557e29badaec7080ff0dcb9315d2a5bffba963a923d6eddf89f78e69c4270e3d93a79013f395c1c28758c8959b89749ea127e326ebb34d0db8e36e9ef53fef9f05522d4c1e63191f8fe3d2", 0xcb}, {&(0x7f0000000780)="cba299410e97faf2d297e8ca73860328161bc0ecd34ffd017e7406de5914bfc570300b3f7a66be6d809ad7622393d09e797b989b6918f4a60e04ea714a7375acd45820c28602c99423a76144d29394ea84feda7b8ffad04e847ee6067a4b92a2a0a62cfd1368cb4387641de29a23f182c47e5015be0ebdf3cd25", 0x7a}, {&(0x7f0000000880)="b281674a9fcafe5dec5c155474d5badaeb7373fd7fd66131e9f606977b604e3c5a3b3b78c9a51e1366a683e758b160305e21861071303121445f9a95ef514a703193a69c2c8589ff10a1214761c5e1b9dc083ae879c1ad3c603df852e559e8ed710c2e30342c884398a92cb4dc243cac6f697351df8c8ae40379ccd1056e1ee1812d1f1f023fa4c32421b02de7189d23cbb40dda71679905087c15e84797a4a91d5df29e9536ffe05e01a3ff8a53c9cf452051", 0xb3}, {&(0x7f0000000800)="5c08540b88159cba9a", 0x9}, {&(0x7f00000009c0)="9310b5a3b7328ea309b547808eaa3efa70c4e08a93ce6fdf92e86e4f5d64bb483e176fa2c1a1fe4143b7414a3770cad247f7a8e84416a3f17e1bf05cb163d6e4de589d4b4970a01a9eae14ce3cce7e1ea133d8ddb02097c914af845fb46eb232e215db463b1c96e335f6124cb8a456c1a2ff7e87db4918a6439583ece803b3c0a2b9b346a00d1eb5a9e76516e11f2da1fc5c2283bbe53b76ff934d1be0c3ce8a0d097bb589acf90fbe9234bfa92ae8f65f7ef2930b99280bd15c5308b2b6d54b19dd7010b9bc53629cad58aa5a78e071752c7580695f9e1092302df5e430399d5acdd61bca4329de69f4723f250e6e446c2f323cc613d3", 0xf7}, {&(0x7f0000000ac0)="87e21b5f6acf95f02c82ed82f4075896cd7f2838cdd7e6321508d00450f1bc28442b53657eb9c6135d22982bc961b129d139c2e367e35f59d85c75119effc0b7bd20a44c308f437703e863aad5107118f353804434755e5af139b561644628a2998518af43", 0x65}], 0xa, 0x0, 0x0, 0x24000084}, {&(0x7f0000000940)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000001100)="1283ce4cebc993a095ec9c2621e0a84151cb746908f5cc3641878ce0dce672a3ffa739f382fc0365236f292311a7713facf22a0eb33910d85c5b8b0da231fd1cedf88cfea31a8c0c870da2b1fe807900bf57f3f60eafc0397386d48e83572b8021304e4d5a2c971a9c74a05cba805fbd00a89f8ac48e8bc9de20747db666f1fcc0d95e04ec61a966edf6e972bacbf426001fa441e24f1e1a8c94377af727a1a7de4af9c175e2e0415981f490d83cd31241ff4a0b87efe96d821a9d815ff1b7b55e260dd38d2b183bc78514", 0xcb}, {&(0x7f0000001200)="43056efb7022273057aab4efd283e86ad3917c145b0b6e2dec9041b42783b2f8d3782f9ca9fe148992d77ef00a3070923e3593761e0464ca5df0d48f236b5439a4c969c0979c89ba48b141c9c57ad7427771550050d31e76a8ff185763d21cf87c55d8f6b986ac2753c507", 0x6b}, {&(0x7f0000001280)="fe5abf1783417617f6b7ecd17a150ed1aeaf50b3c6d45da2e0c3482e09e430266ce3bbf00053a40ed7d17d4a477d01891730503a3eb4640ef784158e7a1a67346753a96a8e5cfba83c7a64d7e2bb91843673ba53986e32095f65421bdb196c69db196a04b8314c99251389bb74596a52443a507f10d2bc38e7835124ad89b33156eb10c7d5a7862d27e759b9027247206fe2e5bf0ef4f38dfbc6f9ef22fa9a1dcdacbc35c197409c768dae1070c74df5", 0xb0}], 0x3, 0x0, 0x0, 0x4000}, {&(0x7f0000001340)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001380)="e75ac9a260ba221af6f3f3941a684fa7ac6a7284a9fed24f2e805d21b69debf20b5a1db538fe73a43a1d60dd892ba35e11101905667a45b6", 0x38}, {&(0x7f00000013c0)="a852e461bd8cd3d24eb15e4d274f506a4b426f1b452cf5dc9e02ac23579a20d7d65e7a62369521486c7463dd1aa60a520615250cbb74bcac03a307bfd2d45ddd7089d350e278a8e70bfae938fda33d78dcd993555cb86aaee14d53c0326dc933b63490a74b256cd624ec71ca297dca6aea551a295cab285a49e64dfc4149e8eeaa6fba72b05f2017657e9eed994ee56eb2b6a8106f74314bbcb2b037d976f0fd8760dea6986df9e0eea52ce6e60c6c55e9c2d2bd5465d822eb94", 0xba}, {&(0x7f0000001480)="a842451cbeba117f3d675b77ae93ee51e42b65c0ccd6d8d283f3e2b88bcd3c3cb87853e44cd0c675b47ff89d9ce5c657642b28c865bb0be6622e814d0ce3b26377be06cbb01ba7b7b91d7f46f2f6bcf9dd7cfbb27bca14fe668ae75ce088dd3d3180c0fd8a780291643059a7fbf380b27a0674107b28e423ce31aa02b426a5a6df20e1947e867b0d0c48da23aba21f1736a679d6eddfab479bff550f5fc0f15cec543cd2", 0xa4}], 0x3, &(0x7f0000001580)=[@authinfo={0x18, 0x84, 0x6, {0xf}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x7fff, 0x7, 0x8008, 0x9, 0x0, 0x11d68, 0x811, 0x3005}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x98, 0x40}], 0x3, 0x20004000) sendmsg$NFT_BATCH(r7, 0x0, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000240)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.012997946s ago: executing program 1 (id=2008): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r2, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) 937.435257ms ago: executing program 4 (id=2009): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0xffff7fff, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_csum={0x68, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x0, 0xadb7, 0x40}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x804, 0xa, 0x10000000, 0x1, 0x9}, 0x75}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 848.463402ms ago: executing program 4 (id=2010): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = userfaultfd(0x801) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$unix(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="55907b9cd67dd86fab23ed48e23d85a65838370a50548fd323b121a219d77ac6edbf127dde411298dd9e50b27fe1eae4436d7aefd80ce7c8c99219affcc8b4bd23ba927012239a43a72bd89d027ff44fccdb12986b25034ed0ec6c195e6062e42a54e180d067e0d1af6a7df128e1ec8aa83a36c38008519a0b07b69ca92bb695cdd07151c32cadba56e99625722ca1b0f7f33a86f96d607bf1d78b4765d8d392a33a06993b8a6a0087d517a6c4b42bdf644835d9eb30dc0c1711f69c613a6ca3ac8bf05bc06aa12174b5a9eac17cef1337d4e71f42881fa33387", 0xda}, {&(0x7f0000000400)="02d314c964d905ff75879488092e3836f599ff8f95fc0ad931f906f5a337c62fcd400fc35940cc84f4faa6f8dc6a279096c0c93b9d040530c479fb9fe0698365bb3861857e9a01b841866130a34043143e58a438f4f44275df9226d9e805968519966e054b12206d7b", 0x69}, {&(0x7f00000001c0)="4fe930b86a4c417cbeeb84845ff0610b643b0dfe9729485580eda4a4050551fbcb8ec5f3fe3eb68b72eb01", 0x2b}, {&(0x7f0000000480)="c6fb8dcfdf29a9c558f37394113e286c7a0c61e121bad49e2206ce372505ec6eb35d7a0d74272ebf0d4fd333deedd1a023847fdbbc038009361d5eaffd86748456dcb31b", 0x44}, {&(0x7f0000000640)="07ee0a00953a15b0bdf3625842eb049053078da1b63ac8cf5d9a01fe38403bada4b5c7f40b000d0e0d0cb7b032801eca511facda7be9cdf1fe9271b7c97b4734122574dba1718bea30c3505cf08f1eb3bd4f62ae203d78715ac860d8d9dfc72f40d3e655279857cae899dfa96acb631f2a4f506cbfd942b6f3fd9237d2c210744112b00ea5bb55a15138e71c4014f2f6468071cd4307514c5016a776305b3d0844a1d2f75bc1025dce9c84f8ad1d4a843d82818c8b3ef934d828031d6da79d6dc42b769ef0ca425ef921644c404fc1138e09c56d626c1d26f1360c2510de", 0xde}], 0x5, 0x0, 0x0, 0x20000090}}], 0x1, 0x8080) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 718.290919ms ago: executing program 4 (id=2011): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0x9, 0xb}, {0xfff7, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0x12, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="1400fd000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r5], 0x168}}], 0x1, 0x8000004) 606.514478ms ago: executing program 0 (id=2012): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x8010) 451.914637ms ago: executing program 0 (id=2013): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4380, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x40f0f022}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000aa000004d632000000e00000020000000000000000000000000200000000000000feffffffffffffff0000000000000000090000000000000001000000ffffffff00000000000000003f0000000000000043050000000000000400000000000000ffffffffffffff7fffffffffffffffff07000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32, @ANYBLOB="03000000"], 0x15c}, 0x1, 0x0, 0x0, 0x40082}, 0x2014) 451.661438ms ago: executing program 4 (id=2014): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfffffffd, 0x0, 0x0, 0x9aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000fe0100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 351.122957ms ago: executing program 0 (id=2015): r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0xedc7, 0x455b843fbd864c4f) (async) syz_usb_connect$cdc_ecm(0x3, 0xac, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000000010109029a000101000000090400000302020000052406000005240000000d240f01000000000000feffff042401f40f"], 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xbcc, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) (async) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020}, 0x2020) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') mq_unlink(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 203.659993ms ago: executing program 4 (id=2016): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000002080)={r1, 0x1, 0x120}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000020c0)={0x0, 0xf801, 0x5}, &(0x7f0000002100)=0x8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000002140), &(0x7f0000002180)=0x4) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000021c0), 0x200, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000002200)) read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000004300)={0xff, "9a1f29a7ec66817850136019784cc24f2fbad09b46a7f674784a9ae8139e24fc", 0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000004340)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000004380)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r4, 0x3ba0, &(0x7f0000004440)={0x48, 0x8, r6, 0x0, 0x8, 0x2020f1, 0x34, &(0x7f0000004400)="a1d7c380b49bb273c43e3f6f73fea205c47bb3f3451d6255293fd615088aeee3d3b239913d476fc43914905b114465ab4730464a", 0x5}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000004500)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000004800)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000047c0)={&(0x7f0000004540)=@bridge_getlink={0x24c, 0x12, 0x4, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x51000, 0x40}, [@IFLA_VF_PORTS={0x178, 0x18, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3e9635dd57682a389b1c4d6f733ef9b1"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6674868159414615d0c25e3fa8901f30"}, @IFLA_PORT_PROFILE={0x6, 0x2, '{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c21fff45c83dd52c2d078c8affa71fe9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d37d6e08dfe21abfbedb2081f6fa88fb"}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a09d0e9b5c7b067b222056a1c610da00"}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x13, 0x2, '/dev/dlm_plock\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "557c61cf6111d3df20ae72bcfe0d6fbc"}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7c4653bb93a19ee4e6ac42d33693d778"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3d3c9b18d1be310511056d5c88e675a1"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f1f765f8fd69a9bada38827bdad6b790"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e4ce9b841bfdbf7b73cd0d24d9be5b84"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "864afef6b60212a49d3fdbd6c39c1abd"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x18, 0x2, './binderfs2/binder0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5d265001c727b632eb0ea062c60c24cc"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7a29c2b632536b1bde0d261f602867f6"}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3}, @IFLA_PROP_LIST={0xa4, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'ipvlan0\x00'}, {0x14, 0x35, 'rose0\x00'}, {0x14, 0x35, 'pim6reg1\x00'}, {0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'geneve1\x00'}]}, @IFLA_LINK={0x8}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0x40044) clock_gettime(0x0, &(0x7f0000004840)={0x0, 0x0}) write$evdev(r4, &(0x7f0000004880)=[{{}, 0x1f, 0x8a, 0x1d}, {{0x0, 0xea60}, 0x14, 0x7, 0x9}, {{r8, r9/1000+60000}, 0x4, 0x6, 0x401}, {{0x77359400}, 0x2, 0xf, 0xffff8000}], 0x60) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000004900)={r2, 0xa5a8}, &(0x7f0000004940)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000004980)={r10, 0x52f, 0x9}, 0x8) epoll_create1(0x0) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000049c0), 0x80000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r11, 0x40046104, &(0x7f0000004a00)) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000004a40)={r2, 0x7, 0xa, [0x80, 0x8, 0x81, 0x40, 0xcc5b, 0x8, 0x401, 0x5, 0x9, 0x40]}, 0x1c) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000004a80), 0x10001) r13 = dup3(r12, r0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r13, 0xc0c89425, &(0x7f0000004ac0)={"d300cc414fe24809e67d1abe0c6ed7bc", 0x0, 0x0, {0xffffffffffffffff, 0x5}, {0x8, 0xfffff000}, 0x0, [0x401, 0x0, 0x5, 0xffff, 0xe, 0x9, 0x6, 0x1, 0xfffffffffffffb6f, 0xf, 0x4, 0x43, 0xffff, 0x4, 0x8, 0x3]}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000004bc0)=r14) ioctl$HIDIOCGREPORT(r13, 0x400c4807, &(0x7f0000004c00)={0x3, 0x200, 0x8}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000004c40), 0x2080, 0x0) ioctl$TUNSETOFFLOAD(r15, 0x400454d0, 0x2) 31.227963ms ago: executing program 4 (id=2017): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) r0 = syz_usb_connect(0x4, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23000000000109022d0101100000000904000003fe03010009cd000000000000000305057975c3e2f4a25c98490c273c6e7bdc1736f21285ce216b4d28c98ad7c5795c9048db0a92473e0e63963c682f5a6cabb6816decbc5aa69dad4b04f7d2dfb8b49ba4a5f768e532a1394b5e77720ccfaa045ee263a690f4062bd0602950ed35b31fb7c8756dc3c04e79b785919acd1645079b712d6d81f28e08d17d0b79a237ebb8051d8b259412e187c3994166664b38ff43bea3f4f4ac16da2c8d4ae0bb2714b2ee46cd3b7110645eaeba7d985d113ae9e4619bb1ca914c3b40e6977a020e15648a9b5bc42e70"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x5, 0x1, 0x1, @private1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x20, 0x7, 0x5, 0x2}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f00000005c0)="e5"}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040400000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x7f, 0x1, r10, 0x15b4}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfa0}, {}, {}, [@jmp={0x5, 0x1, 0x4, 0x2, 0x3, 0x6, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xb0}, @ringbuf_query, @generic={0x7f, 0x3, 0x0, 0x9, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[r3, r4, r6, r9, r10, r11, r12], &(0x7f00000005c0)=[{0x5, 0x2, 0xd, 0x3}], 0x10, 0x6}, 0x94) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r13, 0x40085112, &(0x7f0000000480)=@e={0xff, 0xa, 0xd, 0x44, @SEQ_CONTROLLER=0xfe, 0x12, 0xb, 0x8f}) 14.623798ms ago: executing program 2 (id=2018): socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000006c80)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000006f00)=""/108, 0x6c}, {&(0x7f0000000800)=""/97, 0x61}], 0x6, &(0x7f0000000900)=""/186, 0xba}, 0x27}, {{&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000a40)=""/131, 0x83}, {&(0x7f0000000b00)=""/245, 0xf5}, {&(0x7f0000000c00)=""/76, 0x4c}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/230, 0xe6}, {&(0x7f0000001d80)=""/72, 0x48}, {&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000001e00)=""/6, 0x6}], 0x9, &(0x7f0000001f00)=""/58, 0x3a}, 0x2}, {{&(0x7f0000001f40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/41, 0x29}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/4088, 0xff8}, {&(0x7f0000002000)=""/195, 0xc3}, {&(0x7f0000002140)=""/127, 0x7f}, {&(0x7f00000021c0)=""/241, 0xf1}, {&(0x7f00000022c0)=""/67, 0x43}], 0x7, &(0x7f00000023c0)=""/62, 0x3e}}, {{&(0x7f0000002400)=@generic, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002480)=""/22, 0x16}], 0x1, &(0x7f0000002500)=""/181, 0xb5}, 0xe}, {{&(0x7f00000025c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002640)=""/249, 0xf9}, {&(0x7f0000002740)=""/183, 0xb7}, {&(0x7f0000002800)=""/14, 0xe}], 0x3}, 0x4}, {{&(0x7f0000002880)=@sco, 0x80, &(0x7f0000004c40), 0x0, &(0x7f0000004cc0)=""/96, 0x60}, 0x5}, {{&(0x7f0000004d40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005140)=[{&(0x7f0000004dc0)=""/5, 0x5}, {&(0x7f0000004e00)=""/152, 0x98}, {&(0x7f0000004ec0)=""/85, 0x55}, {&(0x7f0000004f40)=""/40, 0x28}, {&(0x7f0000004f80)=""/186, 0xba}, {&(0x7f0000005040)=""/202, 0xca}], 0x6, &(0x7f00000051c0)=""/228, 0xe4}, 0x4}, {{&(0x7f00000052c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000005340), 0x0, &(0x7f0000005380)=""/254, 0xfe}, 0x7f}, {{&(0x7f0000005480)=@ethernet={0x0, @random}, 0x80, &(0x7f0000006880)=[{&(0x7f0000005500)=""/106, 0x6a}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/107, 0x6b}, {&(0x7f0000006600)=""/166, 0xa6}, {&(0x7f00000066c0)=""/203, 0xcb}, {&(0x7f00000067c0)=""/68, 0x44}, {&(0x7f0000006840)=""/22, 0x16}], 0x7, &(0x7f0000006900)=""/122, 0x7a}, 0x30fc}, {{&(0x7f0000006980)=@tipc=@name, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a00)=""/150, 0x96}, {&(0x7f0000006ac0)=""/66, 0x42}], 0x2, &(0x7f0000006b80)=""/228, 0xe4}, 0x4}], 0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6ce2c9b0, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r2, &(0x7f0000000340)='./file0/../file0\x00', 0x1000, &(0x7f0000000400)={0x81, 0x8, 0x100000, {r2}}, 0x20) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000640)={0x19, {{0x29, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x21}, 0xe}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x78}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) 0s ago: executing program 3 (id=2019): socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000006c80)=[{{&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000006f00)=""/108, 0x6c}, {&(0x7f0000000800)=""/97, 0x61}], 0x6, &(0x7f0000000900)=""/186, 0xba}, 0x27}, {{&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000a40)=""/131, 0x83}, {&(0x7f0000000b00)=""/245, 0xf5}, {&(0x7f0000000c00)=""/76, 0x4c}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/230, 0xe6}, {&(0x7f0000001d80)=""/72, 0x48}, {&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000001e00)=""/6, 0x6}], 0x9, &(0x7f0000001f00)=""/58, 0x3a}, 0x2}, {{&(0x7f0000001f40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/41, 0x29}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/4088, 0xff8}, {&(0x7f0000002000)=""/195, 0xc3}, {&(0x7f0000002140)=""/127, 0x7f}, {&(0x7f00000021c0)=""/241, 0xf1}, {&(0x7f00000022c0)=""/67, 0x43}], 0x7, &(0x7f00000023c0)=""/62, 0x3e}}, {{&(0x7f0000002400)=@generic, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002480)=""/22, 0x16}], 0x1, &(0x7f0000002500)=""/181, 0xb5}, 0xe}, {{&(0x7f00000025c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002640)=""/249, 0xf9}, {&(0x7f0000002740)=""/183, 0xb7}, {&(0x7f0000002800)=""/14, 0xe}], 0x3}, 0x4}, {{&(0x7f0000002880)=@sco, 0x80, &(0x7f0000004c40), 0x0, &(0x7f0000004cc0)=""/96, 0x60}, 0x5}, {{&(0x7f0000004d40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005140)=[{&(0x7f0000004dc0)=""/5, 0x5}, {&(0x7f0000004e00)=""/152, 0x98}, {&(0x7f0000004ec0)=""/85, 0x55}, {&(0x7f0000004f40)=""/40, 0x28}, {&(0x7f0000004f80)=""/186, 0xba}, {&(0x7f0000005040)=""/202, 0xca}], 0x6, &(0x7f00000051c0)=""/228, 0xe4}, 0x4}, {{&(0x7f00000052c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000005340), 0x0, &(0x7f0000005380)=""/254, 0xfe}, 0x7f}, {{&(0x7f0000005480)=@ethernet={0x0, @random}, 0x80, &(0x7f0000006880)=[{&(0x7f0000005500)=""/106, 0x6a}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/107, 0x6b}, {&(0x7f0000006600)=""/166, 0xa6}, {&(0x7f00000066c0)=""/203, 0xcb}, {&(0x7f00000067c0)=""/68, 0x44}, {&(0x7f0000006840)=""/22, 0x16}], 0x7, &(0x7f0000006900)=""/122, 0x7a}, 0x30fc}, {{&(0x7f0000006980)=@tipc=@name, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006a00)=""/150, 0x96}, {&(0x7f0000006ac0)=""/66, 0x42}], 0x2, &(0x7f0000006b80)=""/228, 0xe4}, 0x4}], 0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6ce2c9b0, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r2, &(0x7f0000000340)='./file0/../file0\x00', 0x1000, &(0x7f0000000400)={0x81, 0x8, 0x100000, {r2}}, 0x20) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000640)={0x19, {{0x29, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x21}, 0xe}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x78}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) kernel console output (not intermixed with test programs): 12006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 427.166589][ T5907] usb 5-1: device descriptor read/64, error -71 [ 427.276433][ T5907] usb usb5-port1: attempt power cycle [ 427.674686][T11441] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 427.715709][T11441] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 427.786213][ T5907] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 427.837510][ T5907] usb 5-1: device descriptor read/8, error -71 [ 428.136204][ T5907] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 428.145207][T12021] syzkaller0: entered promiscuous mode [ 428.159604][T12021] syzkaller0: entered allmulticast mode [ 428.181689][ T5907] usb 5-1: device descriptor read/8, error -71 [ 428.308505][ T5907] usb usb5-port1: unable to enumerate USB device [ 428.457336][ T5907] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 428.630653][ T5907] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.645221][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.653468][ T5907] usb 3-1: Product: syz [ 428.657800][T11443] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 428.666434][ T5907] usb 3-1: Manufacturer: syz [ 428.680142][ T5907] usb 3-1: SerialNumber: syz [ 428.683541][T12037] syzkaller0: entered promiscuous mode [ 428.691945][T12037] syzkaller0: entered allmulticast mode [ 428.838671][T11443] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 428.854401][T11443] usb 4-1: config 0 interface 0 has no altsetting 0 [ 428.862993][T12042] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1531'. [ 428.868092][T11443] usb 4-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 428.882462][T11443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.894236][T11443] usb 4-1: config 0 descriptor?? [ 428.900309][T12027] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 428.960914][T12043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.970470][T12043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.096164][T11448] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 429.248077][T11448] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 429.256452][T11448] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.266901][T11448] usb 1-1: config 0 has no interface number 0 [ 429.273088][T11448] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 429.289924][T11448] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 429.300228][T11448] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 429.322776][T11980] vhci_hcd: connection reset by peer [ 429.337497][ T35] vhci_hcd vhci_hcd.4: stop threads [ 429.348821][ T35] vhci_hcd vhci_hcd.4: release socket [ 429.355480][T11448] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 429.378289][ T35] vhci_hcd vhci_hcd.4: disconnect device [ 429.396251][T11448] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 429.421540][T12046] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 429.437310][T11448] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 429.450934][T11448] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 429.461235][T11448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.469604][T11448] usb 1-1: Product: syz [ 429.473925][T11448] usb 1-1: Manufacturer: syz [ 429.491357][T11448] usb 1-1: SerialNumber: syz [ 429.506513][T11448] usb 1-1: config 0 descriptor?? [ 429.521285][T12036] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 429.535677][T11443] usbhid 4-1:0.0: can't add hid device: -71 [ 429.545964][T11443] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 429.552879][T11448] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 429.558193][T11443] usb 4-1: USB disconnect, device number 90 [ 429.571040][T12050] input: syz1 as /devices/virtual/input/input31 [ 429.571377][T11448] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 429.593240][T11448] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 429.620067][T11448] scsi host1: microtekX6 [ 429.640740][ T95] microtek usb (rev 0.4.3): error -90 submitting URB [ 429.679272][ T2096] microtek usb (rev 0.4.3): error -90 submitting URB [ 429.720091][ T5907] cdc_ncm 3-1:1.0: failed to get mac address [ 429.726606][ T2096] microtek usb (rev 0.4.3): error -90 submitting URB [ 429.742982][ T5907] cdc_ncm 3-1:1.0: bind() failure [ 429.764716][ T5907] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 429.773875][ T2096] microtek usb (rev 0.4.3): error -90 submitting URB [ 429.791616][ T5907] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 429.801240][ T5907] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 429.829807][ T5907] usb 3-1: USB disconnect, device number 59 [ 430.456167][T11448] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 430.609128][T11448] usb 4-1: config 0 has an invalid interface number: 127 but max is 0 [ 430.618288][T11448] usb 4-1: config 0 has no interface number 0 [ 430.624423][T11448] usb 4-1: config 0 interface 127 altsetting 170 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.636016][T11448] usb 4-1: config 0 interface 127 altsetting 170 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.648121][T11448] usb 4-1: config 0 interface 127 has no altsetting 0 [ 430.654918][T11448] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 430.664691][T11448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.679707][ T5907] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 430.696580][T11448] usb 4-1: config 0 descriptor?? [ 430.846113][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 430.853369][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.864740][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.877677][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 430.896927][ T5907] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.906220][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.968396][ T5907] usb 3-1: config 0 descriptor?? [ 431.160947][T11448] uclogic 0003:28BD:0909.0027: interface is invalid, ignoring [ 431.397371][T11448] usb 4-1: USB disconnect, device number 91 [ 431.428099][ T5907] microsoft 0003:045E:07DA.0028: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 431.443530][ T5907] microsoft 0003:045E:07DA.0028: no inputs found [ 431.451265][ T5907] microsoft 0003:045E:07DA.0028: could not initialize ff, continuing anyway [ 431.639372][T11448] usb 1-1: USB disconnect, device number 80 [ 431.698394][ T5907] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 431.709266][ T5907] hid-generic 0000:0000:0000.0029: hidraw2: HID v0.00 Device [syz1] on syz0 [ 431.736247][ T5910] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 432.076250][ T29] audit: type=1326 audit(1771784119.340:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.094522][T12087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 432.116953][ T29] audit: type=1326 audit(1771784119.340:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.117004][ T29] audit: type=1326 audit(1771784119.340:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.117043][ T29] audit: type=1326 audit(1771784119.350:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.117082][ T29] audit: type=1326 audit(1771784119.350:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.117120][ T29] audit: type=1326 audit(1771784119.350:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.117155][ T29] audit: type=1326 audit(1771784119.350:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.117189][ T29] audit: type=1326 audit(1771784119.360:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.117225][ T29] audit: type=1326 audit(1771784119.360:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.306522][T12087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 432.358514][ T29] audit: type=1326 audit(1771784119.360:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12080 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077db9c629 code=0x7ffc0000 [ 432.501424][T11448] usb 3-1: USB disconnect, device number 60 [ 432.547059][T12091] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 433.067705][T11443] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 433.731076][T11443] usb 5-1: Using ep0 maxpacket: 8 [ 433.814809][T11443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 433.855789][T11443] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 433.873578][T11443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 433.948237][T11443] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 433.959722][T12109] syzkaller0: entered promiscuous mode [ 433.965196][T12109] syzkaller0: entered allmulticast mode [ 433.970895][T11443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.002573][T11443] usb 5-1: Product: syz [ 434.022250][T11443] usb 5-1: Manufacturer: syz [ 434.063595][T11443] usb 5-1: SerialNumber: syz [ 434.144241][T11443] usb 5-1: config 0 descriptor?? [ 434.212785][T11443] radioshark 5-1:0.0: Invalid radioSHARK device [ 434.240464][T11443] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 434.268941][T11443] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 434.296169][T11441] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 434.431099][T12096] netlink: 'syz.4.1543': attribute type 2 has an invalid length. [ 434.470947][T12096] @;: entered promiscuous mode [ 434.536248][T11441] usb 3-1: Using ep0 maxpacket: 32 [ 434.548511][T11441] usb 3-1: config 7 has an invalid interface number: 108 but max is 2 [ 434.557072][T11441] usb 3-1: config 7 has an invalid interface number: 3 but max is 2 [ 434.565069][T11441] usb 3-1: config 7 has an invalid interface number: 12 but max is 2 [ 434.574117][T11441] usb 3-1: config 7 has no interface number 0 [ 434.829981][T11441] usb 3-1: config 7 has no interface number 1 [ 434.837147][T11441] usb 3-1: config 7 has no interface number 2 [ 434.847040][T11441] usb 3-1: config 7 interface 108 has no altsetting 0 [ 434.854551][T11441] usb 3-1: config 7 interface 3 has no altsetting 0 [ 434.861669][T11441] usb 3-1: config 7 interface 12 has no altsetting 0 [ 434.879260][T11441] usb 3-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=fa.39 [ 434.888593][T11443] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 434.923782][T11441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.952411][T11441] usb 3-1: Product: syz [ 434.966765][T11441] usb 3-1: Manufacturer: syz [ 434.980885][T11441] usb 3-1: SerialNumber: syz [ 435.049876][T11443] usb 1-1: device descriptor read/64, error -71 [ 435.224746][T11441] qmi_wwan 3-1:7.3: probe with driver qmi_wwan failed with error -22 [ 435.249273][T11441] usb 3-1: USB disconnect, device number 61 [ 435.306191][T11443] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 435.446203][T11443] usb 1-1: device descriptor read/64, error -71 [ 435.566681][T11443] usb usb1-port1: attempt power cycle [ 435.750539][T11441] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 435.766563][T11441] hid-generic 0000:0000:0000.002A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 435.906159][T11443] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 435.937232][T11443] usb 1-1: device descriptor read/8, error -71 [ 436.190553][T11441] usb 5-1: USB disconnect, device number 70 [ 436.206135][T11443] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 436.223748][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.247015][T11443] usb 1-1: device descriptor read/8, error -71 [ 436.248350][T11448] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 436.264770][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.293249][T12146] binder: 12145:12146 ioctl c0306201 200000000380 returned -14 [ 436.356407][T11443] usb usb1-port1: unable to enumerate USB device [ 436.456125][T11448] usb 4-1: Using ep0 maxpacket: 32 [ 436.463353][T11448] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.472813][T11448] usb 4-1: config 127 has an invalid interface number: 158 but max is 0 [ 436.481312][T11448] usb 4-1: config 127 has no interface number 0 [ 436.487800][T11448] usb 4-1: config 127 interface 158 has no altsetting 0 [ 436.496897][T11448] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5 [ 436.506271][T11448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.514283][T11448] usb 4-1: Product: syz [ 436.518506][T11448] usb 4-1: Manufacturer: syz [ 436.523105][T11448] usb 4-1: SerialNumber: syz [ 437.184985][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.240922][T12169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.266679][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.286690][T12169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.420820][T12189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 438.434259][T12189] netlink: 'syz.1.1568': attribute type 10 has an invalid length. [ 438.446264][T12189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1568'. [ 438.472416][T12189] batadv0: entered promiscuous mode [ 438.483033][T12189] bridge0: port 3(batadv0) entered blocking state [ 438.494740][T12189] bridge0: port 3(batadv0) entered disabled state [ 438.697967][ T1079] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 438.707779][ T1079] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 439.155570][T11441] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 439.214132][T11441] hid-generic 0000:0000:0000.002B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 439.570564][T11448] comedi comedi5: could not switch to alternate setting 1 [ 439.583040][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 439.583057][ T29] audit: type=1800 audit(1771784126.820:611): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1570" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1590 res=0 errno=0 [ 439.643150][T11448] usbduxfast 4-1:127.158: driver 'usbduxfast' failed to auto-configure device. [ 439.672394][T11448] usb 4-1: USB disconnect, device number 92 [ 440.150209][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.159780][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.742333][T11443] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 440.946281][T11443] usb 3-1: device descriptor read/64, error -71 [ 440.995465][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057c02400: rx timeout, send abort [ 441.006014][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c02400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 441.217931][T11443] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 441.376218][T11443] usb 3-1: device descriptor read/64, error -71 [ 441.446148][T11448] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 441.497586][T11443] usb usb3-port1: attempt power cycle [ 441.643579][T11448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.654645][T11448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.668113][T11448] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.687796][T11448] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 441.706588][T11448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.742550][T11448] usb 5-1: config 0 descriptor?? [ 441.947106][T11443] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 441.990792][T11443] usb 3-1: device descriptor read/8, error -71 [ 442.232384][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.242412][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.360625][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.362853][T11443] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 442.385664][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.400099][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.407874][T11443] usb 3-1: device descriptor read/8, error -71 [ 442.418527][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.425683][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.487349][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.494448][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.533670][T11443] usb usb3-port1: unable to enumerate USB device [ 442.563858][T11448] gembird 0003:11FF:3331.002C: unknown main item tag 0x0 [ 442.591777][T11448] gembird 0003:11FF:3331.002C: hidraw1: USB HID v0.05 Device [HID 11ff:3331] on usb-dummy_hcd.4-1/input0 [ 442.627820][T11448] usb 5-1: USB disconnect, device number 71 [ 442.779789][T12241] fido_id[12241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 443.472278][T11448] hid-generic 0000:0000:0000.002D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 445.753916][T11448] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 445.921947][T12317] dummy0: entered promiscuous mode [ 445.927802][T12317] vlan2: entered promiscuous mode [ 445.946199][T11448] usb 5-1: Using ep0 maxpacket: 32 [ 445.957005][T11448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.970880][T11448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.005240][T12318] netlink: 'syz.3.1600': attribute type 16 has an invalid length. [ 446.045788][T12318] netlink: 'syz.3.1600': attribute type 17 has an invalid length. [ 446.046335][T11448] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 446.093295][T11448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.125168][T11448] usb 5-1: config 0 descriptor?? [ 446.150483][T12318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.248273][T12320] loop5: detected capacity change from 9711 to 32767 [ 446.314374][ T8162] Buffer I/O error on dev loop5, logical block 4095, async page read [ 446.596188][ T5906] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 446.745066][T11448] ft260 0003:0403:6030.002E: chip code: 6424 8183 [ 446.781274][ T5906] usb 3-1: config 27 interface 0 altsetting 17 has an endpoint descriptor with address 0x6C, changing to 0xC [ 446.830487][ T5906] usb 3-1: config 27 interface 0 altsetting 17 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 446.888187][ T5906] usb 3-1: config 27 interface 0 altsetting 17 endpoint 0xB has invalid wMaxPacketSize 0 [ 446.941772][ T5906] usb 3-1: config 27 interface 0 altsetting 17 bulk endpoint 0xB has invalid maxpacket 0 [ 446.984628][ T5906] usb 3-1: config 27 interface 0 has no altsetting 0 [ 447.006277][ T5906] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 447.049709][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.117531][ T5906] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.126164][T11441] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 447.167647][ T5906] usb 3-1: invalid MIDI in EP 0 [ 447.181732][T11443] usb 5-1: USB disconnect, device number 72 [ 447.286244][T11441] usb 1-1: device descriptor read/64, error -71 [ 447.502183][ T5906] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 447.586812][T11441] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 447.766259][T11441] usb 1-1: device descriptor read/64, error -71 [ 447.896548][T12349] loop2: detected capacity change from 0 to 7 [ 447.898624][T11441] usb usb1-port1: attempt power cycle [ 447.906632][T12349] Dev loop2: unable to read RDB block 7 [ 447.955903][T12349] loop2: unable to read partition table [ 447.956295][T12349] loop2: partition table beyond EOD, truncated [ 447.957799][T12349] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 448.224673][T11463] usb 3-1: USB disconnect, device number 66 [ 448.296413][T11441] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 448.326700][T11441] usb 1-1: device descriptor read/8, error -71 [ 448.428821][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.475826][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.568787][T11441] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 448.616884][T11441] usb 1-1: device descriptor read/8, error -71 [ 448.987793][T11441] usb usb1-port1: unable to enumerate USB device [ 449.136133][ T5906] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 449.211776][T12365] IPVS: sh: FWM 3 0x00000003 - no destination available [ 449.221397][T11441] IPVS: starting estimator thread 0... [ 449.230740][T12367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1614'. [ 449.246297][T12367] ip6gre0: left allmulticast mode [ 449.316405][T12378] IPVS: using max 27 ests per chain, 64800 per kthread [ 449.319494][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 449.346163][ T5906] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 449.380770][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.442353][ T5906] usb 3-1: config 0 descriptor?? [ 449.675855][ T35] IPVS: stop unused estimator thread 0... [ 449.686625][T12376] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 449.694576][T12376] netlink: 'syz.2.1615': attribute type 2 has an invalid length. [ 449.703773][T12376] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 449.714871][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'. [ 449.732608][ T5906] usb 3-1: string descriptor 0 read error: -71 [ 449.743880][ T5906] cp210x 3-1:0.0: cp210x converter detected [ 449.929119][ T5906] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 449.939867][ T5906] cp210x 3-1:0.0: querying part number failed [ 449.962081][T12386] binder: 12379:12386 ioctl c018620c 200000000000 returned -1 [ 450.032334][T11463] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 450.042796][ T29] audit: type=1326 audit(1771784137.230:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 450.359313][ T29] audit: type=1326 audit(1771784137.230:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 450.382143][ T5906] usb 3-1: cp210x converter now attached to ttyUSB0 [ 450.440223][ T5906] usb 3-1: USB disconnect, device number 67 [ 450.479917][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 450.493300][ T29] audit: type=1326 audit(1771784137.230:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 450.522734][T11463] usb 5-1: Using ep0 maxpacket: 8 [ 450.522924][ T5906] cp210x 3-1:0.0: device disconnected [ 450.570246][ T29] audit: type=1326 audit(1771784137.230:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 450.571390][T11463] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 450.613240][T11463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.710606][ T29] audit: type=1326 audit(1771784137.230:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 450.852775][T11463] usb 5-1: config 0 descriptor?? [ 450.857402][ T29] audit: type=1326 audit(1771784137.240:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 451.048687][ T29] audit: type=1326 audit(1771784137.240:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 451.111147][T11463] usb 5-1: string descriptor 0 read error: -71 [ 451.127912][T11463] uvcvideo 5-1:0.0: Found multiple Units with ID 1 [ 451.139269][ T29] audit: type=1326 audit(1771784137.240:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 451.141282][T11463] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 451.209738][T11463] uvcvideo 5-1:0.0: No valid video chain found. [ 451.217977][ T29] audit: type=1326 audit(1771784137.240:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 451.252345][T11463] usb 5-1: USB disconnect, device number 73 [ 451.448195][ T29] audit: type=1326 audit(1771784137.240:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.3.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 451.932098][T12407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 452.114535][T12413] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 452.176884][ T1079] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 452.185739][ T1079] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 452.230343][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1623'. [ 452.289642][ T1079] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 452.321909][T12407] bond12 (unregistering): (slave geneve2): Releasing backup interface [ 452.364289][T12407] bond12 (unregistering): Released all slaves [ 452.420302][T12401] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 452.429864][T12401] netlink: 'syz.3.1622': attribute type 2 has an invalid length. [ 452.481323][T12410] m>e5n: entered promiscuous mode [ 452.542677][ T1079] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 452.989871][ T1079] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.061267][ T1079] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.572167][T11463] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 453.857597][T11463] usb 5-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 453.896183][T11463] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.924995][T11463] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.935120][T11463] usb 5-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 453.949194][T11463] usb 5-1: config 0 interface 0 has no altsetting 0 [ 453.957476][T11463] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 453.967645][T11463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.977473][T11463] usb 5-1: config 0 descriptor?? [ 454.064430][T12460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1636'. [ 454.470277][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.480032][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.568327][T11463] usb 5-1: string descriptor 0 read error: -71 [ 454.575326][T11463] uclogic 0003:5543:004D.002F: failed retrieving string descriptor #200: -71 [ 454.584361][T11463] uclogic 0003:5543:004D.002F: failed retrieving pen parameters: -71 [ 454.593657][T11463] uclogic 0003:5543:004D.002F: failed probing pen v2 parameters: -71 [ 454.607841][T11463] uclogic 0003:5543:004D.002F: failed probing parameters: -71 [ 454.615855][T11463] uclogic 0003:5543:004D.002F: probe with driver uclogic failed with error -71 [ 454.694523][T11463] usb 5-1: USB disconnect, device number 74 [ 454.823236][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 455.277737][ T5910] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 455.410174][T12476] loop3: detected capacity change from 0 to 7 [ 455.435510][T12476] Dev loop3: unable to read RDB block 7 [ 455.441348][ T5910] usb 1-1: device descriptor read/64, error -71 [ 455.487115][T12476] loop3: unable to read partition table [ 455.630564][T12476] loop3: partition table beyond EOD, truncated [ 455.659753][T12476] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 455.747037][ T5910] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 455.798281][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 455.916700][ T5910] usb 1-1: device descriptor read/64, error -71 [ 455.961190][T12481] openvswitch: netlink: IPv4 tunnel dst address is zero [ 456.030740][ T5910] usb usb1-port1: attempt power cycle [ 456.613573][ T5910] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 456.666835][ T5910] usb 1-1: device descriptor read/8, error -71 [ 456.706130][T11463] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 456.797574][T12495] syzkaller0: entered promiscuous mode [ 456.815435][T12495] syzkaller0: entered allmulticast mode [ 456.871789][T11463] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 456.886424][T11463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.915307][T12499] netlink: 63 bytes leftover after parsing attributes in process `syz.4.1647'. [ 456.954461][ T5910] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 457.025375][ T5910] usb 1-1: device descriptor read/8, error -71 [ 457.040174][T11463] usb 3-1: Product: syz [ 457.050146][T11463] usb 3-1: Manufacturer: syz [ 457.062907][T11463] usb 3-1: SerialNumber: syz [ 457.080738][T11463] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 457.113312][T11459] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 457.136317][ T5910] usb usb1-port1: unable to enumerate USB device [ 457.215843][ T5907] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 457.366093][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 457.379077][ T5907] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 457.387764][ T5907] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 457.398557][ T5907] usb 5-1: config 179 has no interface number 0 [ 457.404959][ T5907] usb 5-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 457.449091][ T5907] usb 5-1: config 179 interface 65 has no altsetting 0 [ 457.457543][ T5907] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 457.467823][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.558851][T12483] syzkaller0: entered promiscuous mode [ 457.584620][T12483] syzkaller0: entered allmulticast mode [ 457.737758][T12507] tun0: tun_chr_ioctl cmd 1074025675 [ 457.746448][T12507] tun0: persist enabled [ 457.830501][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 457.830527][ T29] audit: type=1326 audit(1771784145.100:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.4.1647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404d19c629 code=0x0 [ 458.040622][T12507] tun0: tun_chr_ioctl cmd 1074025675 [ 458.053419][T12507] tun0: persist enabled [ 458.146174][T11459] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 458.172696][T12517] loop3: detected capacity change from 0 to 7 [ 458.199062][T11459] ath9k_htc: Failed to initialize the device [ 458.208100][T12517] Dev loop3: unable to read RDB block 7 [ 458.216833][T12517] loop3: unable to read partition table [ 458.250451][T12517] loop3: partition table beyond EOD, truncated [ 458.259342][T12517] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 458.391984][ T5910] usb 3-1: USB disconnect, device number 68 [ 458.420898][ T5910] usb 3-1: ath9k_htc: USB layer deinitialized [ 460.184255][ T5906] usb 5-1: USB disconnect, device number 75 [ 460.311050][T12546] kAFS: unable to lookup cell '' [ 460.365235][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 460.631343][T12561] syzkaller0: entered promiscuous mode [ 460.644258][T12561] syzkaller0: entered allmulticast mode [ 460.838811][T12568] loop3: detected capacity change from 0 to 7 [ 460.846498][ T5910] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 460.896336][ T8162] Dev loop3: unable to read RDB block 7 [ 460.912185][ T8162] loop3: unable to read partition table [ 460.924801][ T8162] loop3: partition table beyond EOD, truncated [ 460.944411][T12568] Dev loop3: unable to read RDB block 7 [ 460.952288][T12568] loop3: unable to read partition table [ 460.965685][T12568] loop3: partition table beyond EOD, truncated [ 460.994045][T12568] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 461.043446][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 461.060473][ T5910] usb 5-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 461.096213][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.146078][ T5910] usb 5-1: Product: syz [ 461.150354][ T5910] usb 5-1: Manufacturer: syz [ 461.169959][ T5910] usb 5-1: SerialNumber: syz [ 461.187499][ T5910] usb 5-1: config 0 descriptor?? [ 461.212370][ T5910] usb 5-1: bad CDC descriptors [ 461.608092][ T5910] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 461.625054][T12595] loop6: detected capacity change from 0 to 7 [ 461.653204][ T8162] Dev loop6: unable to read RDB block 7 [ 461.658921][ T8162] loop6: unable to read partition table [ 461.664978][ T8162] loop6: partition table beyond EOD, truncated [ 461.691991][T12595] Dev loop6: unable to read RDB block 7 [ 461.698018][T12595] loop6: unable to read partition table [ 461.704115][T12595] loop6: partition table beyond EOD, truncated [ 461.712183][T12595] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 461.786143][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 461.813141][ T5910] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 461.833486][ T5910] usb 4-1: config 0 has no interface number 0 [ 461.865304][ T5910] usb 4-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 461.885030][ T5910] usb 4-1: config 0 interface 115 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.072707][ T5910] usb 4-1: New USB device found, idVendor=eb12, idProduct=2875, bcdDevice=6f.3f [ 462.085669][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.095104][ T5910] usb 4-1: Product: syz [ 462.100380][ T5910] usb 4-1: Manufacturer: syz [ 462.105252][ T5910] usb 4-1: SerialNumber: syz [ 462.115927][ T5910] usb 4-1: config 0 descriptor?? [ 463.365281][T12611] sg_write: data in/out 67150913/122 bytes for SCSI command 0x0-- guessing data in; [ 463.365281][T12611] program syz.0.1675 not setting count and/or reply_len properly [ 463.547143][T12617] loop3: detected capacity change from 0 to 7 [ 463.563096][T12617] Dev loop3: unable to read RDB block 7 [ 463.577183][T12617] loop3: unable to read partition table [ 463.589980][T12617] loop3: partition table beyond EOD, truncated [ 463.603072][T12617] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 463.673379][ T5910] usb 5-1: USB disconnect, device number 76 [ 463.746179][T11459] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 463.985373][T12620] @: renamed from bond_slave_0 [ 464.047938][T11459] usb 3-1: Using ep0 maxpacket: 16 [ 464.065001][T11459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.077669][T11459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.092801][T11459] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 464.123630][T12626] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 464.130070][T11459] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 464.140871][T11459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.213947][T12626] bond12: entered promiscuous mode [ 464.259437][T11459] usb 3-1: config 0 descriptor?? [ 464.293693][ T5910] usb 4-1: USB disconnect, device number 93 [ 464.398440][T12626] 8021q: adding VLAN 0 to HW filter on device bond12 [ 464.594185][T12626] bond12: (slave bridge10): making interface the new active one [ 464.615137][T12626] bridge10: entered promiscuous mode [ 464.628354][T12626] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 464.726747][T11459] hid-multitouch 0003:0457:07DA.0030: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 465.040950][T12650] loop6: detected capacity change from 0 to 7 [ 465.048120][T12650] Dev loop6: unable to read RDB block 7 [ 465.053716][T12650] loop6: unable to read partition table [ 465.076720][T12650] loop6: partition table beyond EOD, truncated [ 465.086161][T12650] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 465.136169][ T5906] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 465.304048][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 465.318310][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 465.375845][ T5906] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 465.407256][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.434832][ T5906] usb 5-1: config 0 descriptor?? [ 465.450029][T12645] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 465.673318][T12645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.684403][T12645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.714061][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 465.722630][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 465.759285][ T5906] usb 5-1: USB disconnect, device number 77 [ 465.893275][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.910364][T12664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.921376][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.931597][T12664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.991723][T12666] ip6t_srh: unknown srh invflags 4000 [ 466.196112][ T5906] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 466.346087][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 466.363846][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 466.376168][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 466.391569][ T5906] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 466.408565][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.476986][ T5906] usb 5-1: config 0 descriptor?? [ 466.495014][ T5906] hub 5-1:0.0: bad descriptor, ignoring hub [ 466.504561][ T5906] hub 5-1:0.0: probe with driver hub failed with error -5 [ 466.521581][T11459] usb 3-1: USB disconnect, device number 69 [ 466.635822][T12673] netlink: 'syz.2.1696': attribute type 1 has an invalid length. [ 466.879195][T12673] bond6: entered promiscuous mode [ 466.912756][T12673] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.086907][ T5906] uclogic 0003:5543:0003.0031: hidraw1: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 467.169438][T12685] loop6: detected capacity change from 0 to 7 [ 467.180231][T12685] Dev loop6: unable to read RDB block 7 [ 467.185841][T12685] loop6: unable to read partition table [ 467.199052][T12685] loop6: partition table beyond EOD, truncated [ 467.218867][T12685] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 467.349050][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.357689][T11459] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 467.370560][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.386905][T12693] netlink: 'syz.1.1702': attribute type 5 has an invalid length. [ 467.480619][T12696] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 467.533423][T11459] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 467.542623][T11459] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 467.573797][T11459] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 467.583014][T11459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.591227][ T5910] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 467.615656][T11459] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 467.746156][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 467.753454][ T5910] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 467.764945][ T5910] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 467.776536][ T5910] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 467.789686][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.800282][ T5910] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 467.816485][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 467.832988][ T5910] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 467.845454][T11459] gspca_sn9c2028: read1 error -71 [ 467.851375][T11459] gspca_sn9c2028: read1 error -71 [ 467.857013][T11459] gspca_sn9c2028: read1 error -71 [ 467.862669][T11459] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 467.876173][T11459] usb 4-1: USB disconnect, device number 94 [ 467.882341][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.928894][ T5910] usb 3-1: config 0 descriptor?? [ 468.118864][T12702] loop3: detected capacity change from 0 to 7 [ 468.128073][ T8162] Dev loop3: unable to read RDB block 7 [ 468.134700][ T8162] loop3: unable to read partition table [ 468.147647][ T8162] loop3: partition table beyond EOD, truncated [ 468.157548][ T5910] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 468.192098][T12702] Dev loop3: unable to read RDB block 7 [ 468.197856][T12702] loop3: unable to read partition table [ 468.204172][T12702] loop3: partition table beyond EOD, truncated [ 468.210709][T12702] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 468.403323][T12704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.429996][T12704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.759071][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 469.267735][T11441] usb 5-1: USB disconnect, device number 78 [ 469.268179][T12721] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 469.355523][T12726] loop6: detected capacity change from 0 to 7 [ 469.396369][T12726] Dev loop6: unable to read RDB block 7 [ 469.410784][T12721] bond6: entered promiscuous mode [ 469.420752][T12724] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 469.431702][T12726] loop6: unable to read partition table [ 469.438588][T12721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.447493][T12726] loop6: partition table beyond EOD, truncated [ 469.473380][T12726] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 469.513031][T12729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1711'. [ 469.558105][T12724] bond13: entered promiscuous mode [ 469.593010][T12724] bond13: entered allmulticast mode [ 469.619140][T12724] 8021q: adding VLAN 0 to HW filter on device bond13 [ 469.802979][T12738] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1714'. [ 469.837031][ T5910] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 470.049145][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 470.070057][ T5910] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 470.081349][ T5910] usb 1-1: config 0 has no interface number 0 [ 470.095091][ T5910] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.153115][ T5910] usb 1-1: config 0 interface 85 has no altsetting 0 [ 470.226686][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 470.235775][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.274179][ T5910] usb 1-1: Product: syz [ 470.283265][ T5910] usb 1-1: Manufacturer: syz [ 470.295273][ T5910] usb 1-1: SerialNumber: syz [ 470.306738][T11441] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 470.311616][ T5910] usb 1-1: config 0 descriptor?? [ 470.414048][ T5907] usb 3-1: USB disconnect, device number 70 [ 470.423394][ T5907] usblp0: removed [ 470.486400][T11441] usb 5-1: Using ep0 maxpacket: 16 [ 470.524036][T11441] usb 5-1: config 0 has no interfaces? [ 470.535337][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.546865][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.567435][T11441] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.576946][T11441] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.598233][T11441] usb 5-1: Manufacturer: syz [ 470.616531][T11441] usb 5-1: config 0 descriptor?? [ 470.734705][T12754] netlink: 'syz.2.1719': attribute type 2 has an invalid length. [ 470.809678][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.812060][T12754] : entered promiscuous mode [ 470.861105][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.014800][ T5910] appletouch 1-1:0.85: Geyser mode initialized. [ 471.063457][ T5910] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input33 [ 471.238790][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.261038][ T5910] usb 1-1: USB disconnect, device number 93 [ 471.355357][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.469012][ T5910] appletouch 1-1:0.85: input: appletouch disconnected [ 471.749708][T12768] loop6: detected capacity change from 0 to 7 [ 471.778216][T12768] Dev loop6: unable to read RDB block 7 [ 471.796820][T12768] loop6: unable to read partition table [ 471.808867][T12768] loop6: partition table beyond EOD, truncated [ 471.839625][T12768] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 471.955002][T12772] could not allocate digest TFM handle poly1305-neon [ 472.034112][T12782] netlink: 'syz.3.1728': attribute type 1 has an invalid length. [ 472.111379][T12782] bond0: entered promiscuous mode [ 472.239550][T12782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.303894][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.316454][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.353247][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.362378][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.443025][T12793] syzkaller0: entered promiscuous mode [ 472.454539][T12793] syzkaller0: entered allmulticast mode [ 472.870035][ T5910] usb 5-1: USB disconnect, device number 79 [ 473.317057][ T5907] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 473.566841][ T5907] usb 1-1: device descriptor read/64, error -71 [ 473.642016][T12815] loop6: detected capacity change from 0 to 7 [ 473.875065][T12815] Dev loop6: unable to read RDB block 7 [ 473.896404][T12815] loop6: unable to read partition table [ 473.913151][T12815] loop6: partition table beyond EOD, truncated [ 473.933708][T12815] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 473.944230][ T5907] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 474.018112][ T5190] Dev loop6: unable to read RDB block 7 [ 474.027512][ T5190] loop6: unable to read partition table [ 474.044185][ T5190] loop6: partition table beyond EOD, truncated [ 474.146853][ T5907] usb 1-1: device descriptor read/64, error -71 [ 474.276617][ T5907] usb usb1-port1: attempt power cycle [ 474.436124][T11441] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 474.607461][T11441] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 474.608954][T12831] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 474.636427][ T5907] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 474.664116][T11441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.685389][T11441] usb 3-1: Product: syz [ 474.692759][T11441] usb 3-1: Manufacturer: syz [ 474.698948][ T5907] usb 1-1: device descriptor read/8, error -71 [ 474.714820][T11441] usb 3-1: SerialNumber: syz [ 474.723000][T11441] usb 3-1: config 0 descriptor?? [ 474.754238][T11441] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 474.795845][T12834] syzkaller0: entered promiscuous mode [ 474.808349][T12834] syzkaller0: entered allmulticast mode [ 474.956135][ T5907] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 474.987588][ T5907] usb 1-1: device descriptor read/8, error -71 [ 475.106840][ T5907] usb usb1-port1: unable to enumerate USB device [ 475.176153][ T5910] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 475.254632][ T8162] Buffer I/O error on dev loop5, logical block 4095, async page read [ 475.306130][ T5910] usb 4-1: device descriptor read/64, error -71 [ 475.314183][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1748'. [ 475.323863][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1748'. [ 475.396430][T12848] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1748'. [ 475.546113][ T5910] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 475.576304][ T5907] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 475.687035][ T5910] usb 4-1: device descriptor read/64, error -71 [ 475.728465][ T5907] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.737165][ T5907] usb 5-1: config 0 has no interface number 0 [ 475.743474][ T5907] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 475.755542][ T5907] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 475.767778][ T5907] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 475.777724][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.790544][ T5907] usb 5-1: config 0 descriptor?? [ 475.796398][ T5910] usb usb4-port1: attempt power cycle [ 475.805049][T12838] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 475.831184][ T5907] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 476.114894][ T5907] usb 5-1: USB disconnect, device number 80 [ 476.121066][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 476.137608][ T5910] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 476.170110][T11441] gspca_sunplus: reg_w_riv err -71 [ 476.175452][T11441] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 476.177989][ T5910] usb 4-1: device descriptor read/8, error -71 [ 476.208697][T11441] usb 3-1: USB disconnect, device number 71 [ 476.409878][ T8162] Buffer I/O error on dev loop5, logical block 4095, async page read [ 476.416163][T11459] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 476.426652][ T5910] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 476.467734][ T5910] usb 4-1: device descriptor read/8, error -71 [ 476.576365][ T5910] usb usb4-port1: unable to enumerate USB device [ 476.582800][T11459] usb 1-1: Using ep0 maxpacket: 16 [ 476.590426][T11459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.602147][T11459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.612908][T11459] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.629221][T11459] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.638559][T11459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.648875][T11459] usb 1-1: config 0 descriptor?? [ 477.085068][T11459] microsoft 0003:045E:07DA.0032: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 477.111525][T11459] microsoft 0003:045E:07DA.0032: no inputs found [ 477.121854][T11459] microsoft 0003:045E:07DA.0032: could not initialize ff, continuing anyway [ 477.271775][T11441] usb 1-1: USB disconnect, device number 98 [ 478.166853][T11443] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 478.326317][T11441] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 478.346131][T11443] usb 1-1: Using ep0 maxpacket: 8 [ 478.351382][ T5907] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 478.376145][T11443] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.423487][T11443] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.434918][T11443] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.460967][T11443] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.520395][T11443] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.529777][T11441] usb 4-1: Using ep0 maxpacket: 32 [ 478.542330][T11443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.551854][T11441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.566929][T11441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.579955][T11441] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 478.590474][T11441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.600527][ T5907] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 478.609111][ T5907] usb 3-1: config 0 has no interface number 0 [ 478.619265][T11441] usb 4-1: config 0 descriptor?? [ 478.624431][ T5907] usb 3-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 478.641801][T11441] hub 4-1:0.0: USB hub found [ 478.649885][ T5907] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 478.659110][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.667469][ T5907] usb 3-1: Product: syz [ 478.671795][ T5907] usb 3-1: Manufacturer: syz [ 478.676904][ T5907] usb 3-1: SerialNumber: syz [ 478.689415][T12902] loop6: detected capacity change from 0 to 7 [ 478.691766][ T5907] usb 3-1: config 0 descriptor?? [ 478.701504][T12902] Dev loop6: unable to read RDB block 7 [ 478.708010][T12885] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 478.719293][T12902] loop6: unable to read partition table [ 478.736891][ T5907] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 478.747255][T12902] loop6: partition table beyond EOD, truncated [ 478.787725][T12902] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 478.788369][T11443] usb 1-1: GET_CAPABILITIES returned 0 [ 478.844210][T11441] hub 4-1:0.0: 1 port detected [ 478.849128][T11443] usbtmc 1-1:16.0: can't read capabilities [ 478.924674][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.936675][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.958762][ T35] usb 3-1: Failed to submit usb control message: -71 [ 478.959983][T11443] usb 3-1: USB disconnect, device number 72 [ 478.966163][ T35] usb 3-1: unable to send the bmi data to the device: -71 [ 478.993234][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.002701][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.011816][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.021783][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.030905][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.040023][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.049132][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.058316][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.067414][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.081688][ T35] usb 3-1: unable to get target info from device [ 479.089351][ T35] usb 3-1: could not get target info (-71) [ 479.095284][ T35] usb 3-1: could not probe fw (-71) [ 479.147869][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.157111][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.166238][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.175316][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.184414][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.198179][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.207472][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 479.230771][ T5907] usb 1-1: USB disconnect, device number 99 [ 479.486842][T11441] hub 4-1:0.0: activate --> -90 [ 479.636641][T11443] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 479.684356][T12922] syzkaller0: entered promiscuous mode [ 479.694860][T12922] syzkaller0: entered allmulticast mode [ 479.756570][T11443] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 479.919405][T12932] SET target dimension over the limit! [ 480.117062][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 480.233989][T12941] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 480.419827][T11459] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 480.429082][T11441] usb 4-1-port1: cannot reset (err = -71) [ 480.435325][T11441] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad? [ 480.456736][T11443] usb 4-1: USB disconnect, device number 99 [ 480.469020][T11441] usb 4-1-port1: attempt power cycle [ 480.616142][T11459] usb 5-1: Using ep0 maxpacket: 8 [ 480.745214][T11459] usb 5-1: unable to get BOS descriptor or descriptor too short [ 480.755137][T11459] usb 5-1: config 254 has an invalid interface number: 79 but max is 0 [ 480.816320][T11459] usb 5-1: config 254 has no interface number 0 [ 480.823656][T11459] usb 5-1: config 254 interface 79 altsetting 129 bulk endpoint 0x4 has invalid maxpacket 1024 [ 480.834425][T11459] usb 5-1: config 254 interface 79 altsetting 129 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 480.867435][T11459] usb 5-1: config 254 interface 79 has no altsetting 0 [ 480.876719][T11459] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=bd.b4 [ 480.902131][T11459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.912624][T11459] usb 5-1: Product: syz [ 480.916923][T11459] usb 5-1: Manufacturer: syz [ 480.921738][T11459] usb 5-1: SerialNumber: syz [ 480.947966][T12932] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 481.165244][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 481.186650][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 481.195539][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 481.245649][T11459] redrat3 5-1:254.79: Couldn't find all endpoints [ 481.311865][T11459] usb 5-1: USB disconnect, device number 81 [ 481.338379][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 481.351913][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.419300][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.421128][T12963] syzkaller0: entered promiscuous mode [ 481.466237][ T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 481.475330][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.485339][T12963] syzkaller0: entered allmulticast mode [ 481.513192][ T24] usb 3-1: config 0 descriptor?? [ 481.527348][ T24] pxrc 3-1:0.0: Could not find endpoint [ 481.539635][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 481.730086][T12949] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1779'. [ 481.837236][T12971] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1779'. [ 482.014385][ T5910] usb 3-1: USB disconnect, device number 73 [ 482.066758][T12978] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1787'. [ 482.098854][T11459] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 482.203687][T12984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'. [ 482.227039][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 482.247896][T12984] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 482.260194][T12984] bond7 (unregistering): Released all slaves [ 482.268061][T11459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.288627][T11459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.308879][T11459] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 482.321496][T11459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.339430][T11459] usb 4-1: config 0 descriptor?? [ 482.376126][ T5910] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 482.498385][T12992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.536177][T12992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.765766][T11459] hid_parser_main: 31 callbacks suppressed [ 482.765789][T11459] hid-steam 0003:28DE:1142.0033: unknown main item tag 0x0 [ 482.789108][T11459] hid-steam 0003:28DE:1142.0033: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 482.863190][T11459] hid-steam 0003:28DE:1142.0033: Steam wireless receiver connected [ 482.876306][T11459] hid-steam 0003:28DE:1142.0033: No HID_FEATURE_REPORT submitted - nothing to read [ 482.903266][T13003] xt_hashlimit: size too large, truncated to 1048576 [ 482.934266][T11459] hid-steam 0003:28DE:1142.0034: unknown main item tag 0x0 [ 482.977319][T11459] hid-steam 0003:28DE:1142.0034: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 483.055361][T13013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.086791][T13013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.142314][T11459] usb 4-1: USB disconnect, device number 104 [ 483.183631][T13012] fido_id[13012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 483.200537][T11459] hid-steam 0003:28DE:1142.0033: Steam wireless receiver disconnected [ 483.225695][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.257444][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.686234][T11459] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 483.826186][ T5910] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 483.846122][T11459] usb 5-1: Invalid ep0 maxpacket: 64 [ 483.856153][T11448] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 483.976135][T11459] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 483.983805][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 483.992387][ T5910] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 484.001529][ T5910] usb 3-1: config 0 has no interface number 0 [ 484.008561][ T5910] usb 3-1: config 0 interface 12 has no altsetting 0 [ 484.016618][T11448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.030402][T11448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.046213][ T5910] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 484.055965][T11448] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 484.065375][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.079151][T11448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.087646][ T5910] usb 3-1: Product: syz [ 484.092138][ T5910] usb 3-1: Manufacturer: syz [ 484.099357][ T5910] usb 3-1: SerialNumber: syz [ 484.104935][T11448] usb 1-1: config 0 descriptor?? [ 484.117815][ T5910] usb 3-1: config 0 descriptor?? [ 484.156357][T11459] usb 5-1: Invalid ep0 maxpacket: 64 [ 484.162320][T11459] usb usb5-port1: attempt power cycle [ 484.345801][T11448] usbhid 1-1:0.0: can't add hid device: -71 [ 484.360076][T11448] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 484.377306][T11448] usb 1-1: USB disconnect, device number 101 [ 484.506133][T11459] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 484.526933][T11459] usb 5-1: Invalid ep0 maxpacket: 64 [ 484.697215][T11448] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 484.706443][T11459] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 484.736952][T11459] usb 5-1: Invalid ep0 maxpacket: 64 [ 484.744632][T11459] usb usb5-port1: unable to enumerate USB device [ 484.846177][T11448] usb 1-1: Using ep0 maxpacket: 32 [ 484.864605][T11448] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 484.878108][T11448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.946344][T11448] usb 1-1: config 0 descriptor?? [ 485.026243][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 485.067394][T13048] loop2: detected capacity change from 0 to 7 [ 485.156501][ T8155] Dev loop2: unable to read RDB block 7 [ 485.162306][ T8155] loop2: unable to read partition table [ 485.168157][T11448] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 485.175812][ T8155] loop2: partition table beyond EOD, truncated [ 485.195191][T13048] Dev loop2: unable to read RDB block 7 [ 485.195456][T11448] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.210614][T13048] loop2: unable to read partition table [ 485.214169][T13028] ======================================================= [ 485.214169][T13028] WARNING: The mand mount option has been deprecated and [ 485.214169][T13028] and is ignored by this kernel. Remove the mand [ 485.214169][T13028] option from the mount to silence this warning. [ 485.214169][T13028] ======================================================= [ 485.257443][T11448] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 485.271242][T13048] loop2: partition table beyond EOD, truncated [ 485.278135][T11448] usb 1-1: media controller created [ 485.305356][T13048] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 485.327441][T11448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.339609][ T5190] Dev loop2: unable to read RDB block 7 [ 485.353830][ T5190] loop2: unable to read partition table [ 485.396700][ T5190] loop2: partition table beyond EOD, truncated [ 485.514025][T11448] az6027: usb out operation failed. (-71) [ 485.531900][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.559057][T11448] az6027: usb out operation failed. (-71) [ 485.575552][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.590961][T11448] stb0899_attach: Driver disabled by Kconfig [ 485.617995][T11448] az6027: no front-end attached [ 485.617995][T11448] [ 485.657984][T11448] az6027: usb out operation failed. (-71) [ 485.663798][T11448] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 485.704934][ T5910] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 485.717286][ T5910] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 485.724629][ T5910] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 485.738560][T11448] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 485.774585][ T5910] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 485.784635][T11448] dvb-usb: schedule remote query interval to 400 msecs. [ 485.813807][T11448] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 485.836829][ T5910] usb 3-1: USB disconnect, device number 74 [ 485.852712][T11448] usb 1-1: USB disconnect, device number 102 [ 485.896809][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1814'. [ 486.039342][T11448] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 486.117752][ T29] audit: type=1326 audit(1771784173.390:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13076 comm="syz.4.1816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404d19c629 code=0x0 [ 486.154937][ T29] audit: type=1326 audit(1771784173.390:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13076 comm="syz.4.1816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404d19c629 code=0x0 [ 486.264261][T13084] syzkaller0: entered promiscuous mode [ 486.270901][T13084] syzkaller0: entered allmulticast mode [ 486.273697][T13087] FAULT_INJECTION: forcing a failure. [ 486.273697][T13087] name failslab, interval 1, probability 0, space 0, times 0 [ 486.290853][T13087] CPU: 0 UID: 0 PID: 13087 Comm: syz.4.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.290880][T13087] Tainted: [L]=SOFTLOCKUP [ 486.290887][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.290901][T13087] Call Trace: [ 486.290908][T13087] [ 486.290916][T13087] dump_stack_lvl+0xe8/0x150 [ 486.290946][T13087] should_fail_ex+0x412/0x560 [ 486.290971][T13087] should_failslab+0xa8/0x100 [ 486.290993][T13087] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 486.291013][T13087] ? __lock_acquire+0x6b5/0x2cf0 [ 486.291034][T13087] ? __get_vm_area_node+0x13f/0x300 [ 486.291064][T13087] __get_vm_area_node+0x13f/0x300 [ 486.291091][T13087] __vmalloc_node_range_noprof+0x372/0x1730 [ 486.291110][T13087] ? copy_process+0x508/0x3cf0 [ 486.291132][T13087] ? refill_obj_stock+0x117/0x9b0 [ 486.291161][T13087] ? percpu_ref_get_many+0x19/0x140 [ 486.291188][T13087] ? percpu_ref_get_many+0x19/0x140 [ 486.291212][T13087] ? __memcg_slab_post_alloc_hook+0x3df/0xa80 [ 486.291240][T13087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 486.291260][T13087] ? rcu_is_watching+0x15/0xb0 [ 486.291285][T13087] ? memcpy_and_pad+0x48/0x80 [ 486.291306][T13087] __vmalloc_node_noprof+0xc2/0x100 [ 486.291323][T13087] ? copy_process+0x508/0x3cf0 [ 486.291344][T13087] ? copy_process+0x508/0x3cf0 [ 486.291367][T13087] dup_task_struct+0x228/0x9a0 [ 486.291386][T13087] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.291409][T13087] copy_process+0x508/0x3cf0 [ 486.291431][T13087] ? kstrtoull+0x12f/0x1d0 [ 486.291449][T13087] ? kstrtouint+0x6e/0xe0 [ 486.291471][T13087] ? get_pid_task+0x20/0x1f0 [ 486.291487][T13087] ? __pfx_copy_process+0x10/0x10 [ 486.291507][T13087] ? get_pid_task+0x20/0x1f0 [ 486.291519][T13087] ? get_pid_task+0x20/0x1f0 [ 486.291537][T13087] kernel_clone+0x248/0x8e0 [ 486.291562][T13087] ? __pfx_kernel_clone+0x10/0x10 [ 486.291589][T13087] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 486.291616][T13087] __x64_sys_clone+0x1b6/0x230 [ 486.291639][T13087] ? __pfx___x64_sys_clone+0x10/0x10 [ 486.291671][T13087] ? __pfx_ksys_write+0x10/0x10 [ 486.291695][T13087] do_syscall_64+0x14d/0xf80 [ 486.291733][T13087] ? trace_irq_disable+0x3b/0x150 [ 486.291753][T13087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.291769][T13087] ? clear_bhb_loop+0x40/0x90 [ 486.291787][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.291813][T13087] RIP: 0033:0x7f404d19c629 [ 486.291833][T13087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.291847][T13087] RSP: 002b:00007f404dfc4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 486.291863][T13087] RAX: ffffffffffffffda RBX: 00007f404d415fa0 RCX: 00007f404d19c629 [ 486.291874][T13087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7400 [ 486.291884][T13087] RBP: 00007f404dfc5090 R08: 0000000000000000 R09: 0000000000000000 [ 486.291893][T13087] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 486.291902][T13087] R13: 00007f404d416038 R14: 00007f404d415fa0 R15: 00007f404d53fa48 [ 486.291926][T13087] [ 486.292005][T13087] syz.4.1819: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 486.629394][T13087] CPU: 0 UID: 0 PID: 13087 Comm: syz.4.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.629422][T13087] Tainted: [L]=SOFTLOCKUP [ 486.629429][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.629439][T13087] Call Trace: [ 486.629447][T13087] [ 486.629454][T13087] dump_stack_lvl+0xe8/0x150 [ 486.629483][T13087] warn_alloc+0x249/0x340 [ 486.629508][T13087] ? __pfx_warn_alloc+0x10/0x10 [ 486.629528][T13087] ? __get_vm_area_node+0x13f/0x300 [ 486.629558][T13087] ? __get_vm_area_node+0x2b5/0x300 [ 486.629592][T13087] __vmalloc_node_range_noprof+0x397/0x1730 [ 486.629610][T13087] ? refill_obj_stock+0x117/0x9b0 [ 486.629640][T13087] ? percpu_ref_get_many+0x19/0x140 [ 486.629668][T13087] ? percpu_ref_get_many+0x19/0x140 [ 486.629700][T13087] ? __memcg_slab_post_alloc_hook+0x3df/0xa80 [ 486.629728][T13087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 486.629748][T13087] ? rcu_is_watching+0x15/0xb0 [ 486.629772][T13087] ? memcpy_and_pad+0x48/0x80 [ 486.629792][T13087] __vmalloc_node_noprof+0xc2/0x100 [ 486.629810][T13087] ? copy_process+0x508/0x3cf0 [ 486.629832][T13087] ? copy_process+0x508/0x3cf0 [ 486.629855][T13087] dup_task_struct+0x228/0x9a0 [ 486.629879][T13087] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.629905][T13087] copy_process+0x508/0x3cf0 [ 486.629931][T13087] ? kstrtoull+0x12f/0x1d0 [ 486.629952][T13087] ? kstrtouint+0x6e/0xe0 [ 486.629984][T13087] ? get_pid_task+0x20/0x1f0 [ 486.630012][T13087] ? __pfx_copy_process+0x10/0x10 [ 486.630036][T13087] ? get_pid_task+0x20/0x1f0 [ 486.630050][T13087] ? get_pid_task+0x20/0x1f0 [ 486.630071][T13087] kernel_clone+0x248/0x8e0 [ 486.630105][T13087] ? __pfx_kernel_clone+0x10/0x10 [ 486.630138][T13087] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 486.630172][T13087] __x64_sys_clone+0x1b6/0x230 [ 486.630198][T13087] ? __pfx___x64_sys_clone+0x10/0x10 [ 486.630230][T13087] ? __pfx_ksys_write+0x10/0x10 [ 486.630257][T13087] do_syscall_64+0x14d/0xf80 [ 486.630278][T13087] ? trace_irq_disable+0x3b/0x150 [ 486.630301][T13087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.630316][T13087] ? clear_bhb_loop+0x40/0x90 [ 486.630338][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.630354][T13087] RIP: 0033:0x7f404d19c629 [ 486.630372][T13087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.630386][T13087] RSP: 002b:00007f404dfc4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 486.630405][T13087] RAX: ffffffffffffffda RBX: 00007f404d415fa0 RCX: 00007f404d19c629 [ 486.630418][T13087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7400 [ 486.630430][T13087] RBP: 00007f404dfc5090 R08: 0000000000000000 R09: 0000000000000000 [ 486.630441][T13087] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 486.630452][T13087] R13: 00007f404d416038 R14: 00007f404d415fa0 R15: 00007f404d53fa48 [ 486.630478][T13087] [ 486.630499][T13087] Mem-Info: [ 486.923663][T11448] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 486.923663][T13087] active_anon:10545 inactive_anon:0 isolated_anon:0 [ 486.923663][T13087] active_file:18703 inactive_file:53565 isolated_file:0 [ 486.923663][T13087] unevictable:793 dirty:202 writeback:0 [ 486.923663][T13087] slab_reclaimable:13388 slab_unreclaimable:106276 [ 486.923663][T13087] mapped:31168 shmem:5457 pagetables:1483 [ 486.923663][T13087] sec_pagetables:0 bounce:0 [ 486.923663][T13087] kernel_misc_reclaimable:0 [ 486.923663][T13087] free:1260222 free_pcp:27715 free_cma:0 [ 486.995981][T13087] Node 0 active_anon:42236kB inactive_anon:0kB active_file:74812kB inactive_file:214080kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:124668kB dirty:808kB writeback:0kB shmem:20292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14092kB pagetables:5816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 487.005141][T13099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.032228][T13087] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 487.043807][T13099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.071044][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.106182][T13087] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.147089][T13087] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 487.152987][T13087] Node 0 DMA32 free:1130752kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42204kB inactive_anon:0kB active_file:74812kB inactive_file:214080kB unevictable:1540kB writepending:808kB zspages:0kB present:3129332kB managed:2552844kB mlocked:4kB bounce:0kB free_pcp:63188kB local_pcp:42296kB free_cma:0kB [ 487.186487][T13097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.186739][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.196327][T11448] usb 1-1: Using ep0 maxpacket: 32 [ 487.208670][T13097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.222312][T13087] lowmem_reserve[]: 0 0 0 [ 487.224576][T11448] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 487.241188][T13087] 0 0 [ 487.243888][T13087] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.274436][T11448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.285003][T13087] lowmem_reserve[]: 0 0 0 0 0 [ 487.291082][T11448] usb 1-1: config 0 descriptor?? [ 487.306365][T13087] Node 1 Normal free:3897872kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:44704kB local_pcp:26304kB free_cma:0kB [ 487.355357][T11448] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 487.366597][T13087] lowmem_reserve[]: 0 0 0 0 0 [ 487.371352][T13087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 487.384231][T13087] Node 0 DMA32: 2581*4kB (UM) 3463*8kB (UM) 1897*16kB (UM) 698*32kB (UM) 383*64kB (UME) 159*128kB (UME) 66*256kB (UM) 30*512kB (UM) 22*1024kB (UME) 5*2048kB (UME) 227*4096kB (UM) = 1130396kB [ 487.409514][T13087] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.422136][T13087] Node 1 Normal: 0*4kB 6*8kB (UME) 12*16kB (UME) 17*32kB (UME) 14*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 3*2048kB (UME) 948*4096kB (UM) = 3897872kB [ 487.449946][T13087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.491040][T13087] Node 0 hugepages_total=6 hugepages_free=1 hugepages_surp=3 hugepages_size=2048kB [ 487.526616][T13087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.537313][T13087] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 487.549543][T13087] 77878 total pagecache pages [ 487.554410][T13087] 1 pages in swap cache [ 487.637276][T13087] Free swap = 124992kB [ 487.793713][T13087] Total swap = 124996kB [ 487.799753][T13087] 2097051 pages RAM [ 487.803770][T13087] 0 pages HighMem/MovableOnly [ 487.808696][T13087] 427004 pages reserved [ 487.831768][T13087] 0 pages cma reserved [ 487.855073][T13060] bridge_slave_0: left allmulticast mode [ 487.863594][T13060] bridge_slave_0: left promiscuous mode [ 487.890306][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.909690][T13114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.921168][T13114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.934865][T13060] bridge_slave_1: left allmulticast mode [ 487.950255][T13114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.960050][T13114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.971222][T13060] bridge_slave_1: left promiscuous mode [ 487.992638][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.009650][T13114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.020070][T13060] team0: Port device team_slave_0 removed [ 488.086513][T13114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.097002][T13060] team0: Port device team_slave_1 removed [ 488.103167][T13060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.388449][T13114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.409794][T13114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.423956][T13060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.484664][T13060] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 488.596642][T11441] usb 1-1: USB disconnect, device number 103 [ 488.876519][T13124] loop6: detected capacity change from 0 to 7 [ 488.883727][T13124] Dev loop6: unable to read RDB block 7 [ 488.899058][T13124] loop6: unable to read partition table [ 488.907601][T13124] loop6: partition table beyond EOD, truncated [ 488.946199][T13124] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 489.871231][T13147] syzkaller0: entered promiscuous mode [ 489.946578][T13147] syzkaller0: entered allmulticast mode [ 490.217474][T11448] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 490.381806][T11448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.431408][T11448] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.486320][T11448] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 490.537260][T11448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.579484][T11448] usb 5-1: config 0 descriptor?? [ 490.918699][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.933473][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.965880][T13183] loop2: detected capacity change from 0 to 7 [ 490.986340][T13183] loop2: [ 490.991335][T11448] aureal 0003:0755:2626.0035: unknown main item tag 0x0 [ 491.005099][T11448] aureal 0003:0755:2626.0035: unknown main item tag 0x0 [ 491.006435][T13183] loop2: partition table partially beyond EOD, truncated [ 491.020011][T11448] aureal 0003:0755:2626.0035: unknown main item tag 0x0 [ 491.036455][T11448] aureal 0003:0755:2626.0035: unknown main item tag 0x0 [ 491.142424][T11448] aureal 0003:0755:2626.0035: unknown main item tag 0x0 [ 491.171494][T11448] aureal 0003:0755:2626.0035: unknown main item tag 0x0 [ 491.195575][T13151] vlan2: entered promiscuous mode [ 491.201107][T13151] bridge0: entered promiscuous mode [ 491.210017][T11448] aureal 0003:0755:2626.0035: unknown main item tag 0x0 [ 491.244496][T11448] aureal 0003:0755:2626.0035: hidraw1: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.4-1/input0 [ 491.284256][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 491.342053][T13190] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1834'. [ 491.545590][T13195] loop6: detected capacity change from 0 to 7 [ 491.555628][ T8162] Dev loop6: unable to read RDB block 7 [ 491.567190][ T8162] loop6: unable to read partition table [ 491.590937][ T8162] loop6: partition table beyond EOD, truncated [ 491.618261][T13195] Dev loop6: unable to read RDB block 7 [ 491.634330][T13197] syzkaller0: entered promiscuous mode [ 491.638468][T13195] loop6: unable to read partition table [ 491.640767][T13197] syzkaller0: entered allmulticast mode [ 491.652633][T13195] loop6: partition table beyond EOD, truncated [ 491.659442][T13195] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 492.476204][T11441] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 492.626307][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 492.646427][T11441] usb 3-1: Using ep0 maxpacket: 8 [ 492.653392][T11441] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 492.661890][T11441] usb 3-1: config 0 has no interface number 0 [ 492.668399][T11441] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 492.677894][T11441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.688021][T11441] usb 3-1: config 0 descriptor?? [ 492.785912][T11448] usb 5-1: USB disconnect, device number 86 [ 492.857742][T13226] loop6: detected capacity change from 0 to 7 [ 492.865364][T13226] Dev loop6: unable to read RDB block 7 [ 492.871277][T13226] loop6: unable to read partition table [ 492.878093][T13226] loop6: partition table beyond EOD, truncated [ 492.884580][T13226] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 493.001528][T13228] syzkaller0: entered promiscuous mode [ 493.007593][T13228] syzkaller0: entered allmulticast mode [ 493.438499][T11441] snd-usb-audio 3-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 493.450083][T11441] usb 3-1: USB disconnect, device number 75 [ 493.584030][T13239] loop2: detected capacity change from 0 to 7 [ 493.594887][T13239] Dev loop2: unable to read RDB block 7 [ 493.610087][T13239] loop2: unable to read partition table [ 493.616171][T13239] loop2: partition table beyond EOD, truncated [ 493.622922][T13239] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 494.258436][ T8162] Buffer I/O error on dev loop5, logical block 4095, async page read [ 494.840706][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 494.861383][T13269] macsec1: entered promiscuous mode [ 494.866795][T13269] bridge0: entered promiscuous mode [ 494.872325][T13269] macsec1: entered allmulticast mode [ 494.877715][T13269] bridge0: entered allmulticast mode [ 494.884449][T13269] bridge0: port 1(macsec1) entered blocking state [ 494.891191][T13269] bridge0: port 1(macsec1) entered disabled state [ 495.033261][T11448] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 495.098048][T13272] loop3: detected capacity change from 0 to 7 [ 495.107454][T13269] bridge0: left allmulticast mode [ 495.112534][T13269] bridge0: left promiscuous mode [ 495.131102][ T8162] Dev loop3: unable to read RDB block 7 [ 495.140054][ T8162] loop3: unable to read partition table [ 495.154895][ T8162] loop3: partition table beyond EOD, truncated [ 495.182519][T13272] Dev loop3: unable to read RDB block 7 [ 495.214116][T13272] loop3: unable to read partition table [ 495.224641][T13272] loop3: partition table beyond EOD, truncated [ 495.227723][T11448] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.231643][T13272] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 495.291627][T11448] usb 4-1: config 0 interface 0 has no altsetting 0 [ 495.495460][T11448] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 495.732722][T11448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.772981][T11448] usb 4-1: config 0 descriptor?? [ 496.878171][T13300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.915489][T13300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.265824][T13306] syzkaller0: entered promiscuous mode [ 497.293473][T13306] syzkaller0: entered allmulticast mode [ 497.743080][T13315] loop3: detected capacity change from 0 to 7 [ 497.787606][T13315] Dev loop3: unable to read RDB block 7 [ 497.804285][T11448] usbhid 4-1:0.0: can't add hid device: -71 [ 497.821384][T13315] loop3: unable to read partition table [ 497.828421][T11448] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 497.839480][T13315] loop3: partition table beyond EOD, truncated [ 497.851372][T11448] usb 4-1: USB disconnect, device number 105 [ 497.857650][T13315] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 498.037171][T13318] ip6tnl1: entered allmulticast mode [ 498.476805][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1887'. [ 498.488383][T13333] openvswitch: netlink: Flow key attr not present in new flow. [ 498.645506][T13326] tipc: Enabled bearer , priority 0 [ 498.665297][T13326] syzkaller0: entered promiscuous mode [ 498.684823][T13326] syzkaller0: entered allmulticast mode [ 498.718087][T13326] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 498.782369][T13326] tipc: Resetting bearer [ 498.806562][T13326] tipc: Resetting bearer [ 498.919301][T13326] tipc: Disabling bearer [ 499.011964][T13352] loop3: detected capacity change from 0 to 7 [ 499.036157][T11448] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 499.045234][ T8162] Dev loop3: unable to read RDB block 7 [ 499.051877][ T8162] loop3: unable to read partition table [ 499.060244][ T8162] loop3: partition table beyond EOD, truncated [ 499.069596][T13352] Dev loop3: unable to read RDB block 7 [ 499.075264][T13352] loop3: unable to read partition table [ 499.083380][T13352] loop3: partition table beyond EOD, truncated [ 499.106366][T13352] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 499.196213][T11448] usb 4-1: Using ep0 maxpacket: 16 [ 499.205451][T11448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.230182][T11448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.250462][T11448] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 499.264742][T11448] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 499.276373][T11448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.294162][T11448] usb 4-1: config 0 descriptor?? [ 499.321379][T13361] ptrace attach of ""[13362] was attempted by "./syz-executor exec"[13361] [ 500.027017][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.124022][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.135873][T11448] microsoft 0003:045E:07DA.0036: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 500.158712][T11448] microsoft 0003:045E:07DA.0036: no inputs found [ 500.165188][T11448] microsoft 0003:045E:07DA.0036: could not initialize ff, continuing anyway [ 500.233478][ T29] audit: type=1326 audit(1771784187.480:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 500.300184][ T29] audit: type=1326 audit(1771784187.480:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 500.378888][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 500.576616][ T29] audit: type=1326 audit(1771784187.480:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 500.613933][ T29] audit: type=1326 audit(1771784187.480:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 500.966384][ T29] audit: type=1326 audit(1771784187.480:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 501.001886][ T29] audit: type=1326 audit(1771784187.480:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 501.065931][ T29] audit: type=1326 audit(1771784187.480:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 501.104736][ T29] audit: type=1326 audit(1771784187.480:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 501.204711][ T29] audit: type=1326 audit(1771784187.480:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 501.256527][ T29] audit: type=1326 audit(1771784187.480:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.3.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe7ad79c629 code=0x7ffc0000 [ 501.499711][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.511077][T13394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.520268][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.531229][T13394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.590561][T11441] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 501.601368][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.607925][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.757621][T11441] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 501.793630][T11441] usb 5-1: config 1 has no interface number 0 [ 501.800570][ T24] usb 4-1: USB disconnect, device number 106 [ 501.809865][T11441] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has invalid maxpacket 1576, setting to 1024 [ 501.833440][T11441] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 501.854247][T13397] tipc: New replicast peer: 255.255.255.255 [ 501.862498][T11441] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 128, changing to 11 [ 501.874604][T13397] tipc: Enabled bearer , priority 10 [ 501.926592][T11441] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 501.959192][T11441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.967310][T11441] usb 5-1: Product: syz [ 501.972071][T11441] usb 5-1: Manufacturer: syz [ 501.977112][T11441] usb 5-1: SerialNumber: syz [ 501.987515][T13401] loop3: detected capacity change from 0 to 7 [ 501.998117][T13377] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 502.011956][T13401] Dev loop3: unable to read RDB block 7 [ 502.033793][T11441] usb 5-1: Error in usbnet_get_endpoints (-22) [ 502.046544][T13401] loop3: unable to read partition table [ 502.072800][T13401] loop3: partition table beyond EOD, truncated [ 502.089774][T13401] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 502.645714][T11448] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 502.685028][T11448] hid-generic 0000:0000:0000.0037: hidraw1: HID v0.00 Device [syz1] on syz0 [ 502.806164][T11459] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 502.986612][T11441] tipc: Node number set to 3625062116 [ 503.013284][T11459] usb 1-1: Using ep0 maxpacket: 8 [ 503.036188][T11459] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.038352][T11459] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 503.073976][T11459] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 503.074004][T11459] usb 1-1: config 4 has no interface number 0 [ 503.076662][T11459] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 503.076690][T11459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.076710][T11459] usb 1-1: Product: syz [ 503.076724][T11459] usb 1-1: Manufacturer: syz [ 503.076739][T11459] usb 1-1: SerialNumber: syz [ 503.614879][T11459] uvcvideo 1-1:4.147: probe with driver uvcvideo failed with error -22 [ 503.654946][T11459] usb 1-1: USB disconnect, device number 104 [ 503.915421][T13445] loop3: detected capacity change from 0 to 7 [ 504.401804][T13445] Dev loop3: unable to read RDB block 7 [ 504.422960][T13445] loop3: unable to read partition table [ 504.436379][T13445] loop3: partition table beyond EOD, truncated [ 504.556289][T13445] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 504.583542][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 504.583617][ T24] usb 5-1: USB disconnect, device number 87 [ 504.625572][T13446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'. [ 504.647014][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1923'. [ 504.703921][T13452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1921'. [ 504.713451][T13453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1923'. [ 505.073253][T13463] netlink: 'syz.2.1929': attribute type 7 has an invalid length. [ 505.096448][T13463] netlink: 'syz.2.1929': attribute type 8 has an invalid length. [ 505.130526][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 505.223213][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 505.729816][T13490] loop3: detected capacity change from 0 to 7 [ 505.740727][T13490] Dev loop3: unable to read RDB block 7 [ 505.757919][T13490] loop3: unable to read partition table [ 505.767660][T13490] loop3: partition table beyond EOD, truncated [ 505.995555][T13490] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 506.127578][T13498] FAULT_INJECTION: forcing a failure. [ 506.127578][T13498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.214584][T13498] CPU: 0 UID: 0 PID: 13498 Comm: syz.2.1940 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.214614][T13498] Tainted: [L]=SOFTLOCKUP [ 506.214621][T13498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.214633][T13498] Call Trace: [ 506.214641][T13498] [ 506.214649][T13498] dump_stack_lvl+0xe8/0x150 [ 506.214679][T13498] should_fail_ex+0x412/0x560 [ 506.214706][T13498] _copy_to_user+0x31/0xb0 [ 506.214733][T13498] simple_read_from_buffer+0xe1/0x170 [ 506.214762][T13498] proc_fail_nth_read+0x1bb/0x230 [ 506.214788][T13498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.214813][T13498] ? rw_verify_area+0x2a6/0x4d0 [ 506.214830][T13498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.214855][T13498] vfs_read+0x20c/0xa70 [ 506.214872][T13498] ? fdget_pos+0x246/0x320 [ 506.214900][T13498] ? __pfx___mutex_lock+0x10/0x10 [ 506.214917][T13498] ? __pfx_vfs_read+0x10/0x10 [ 506.214937][T13498] ? __fget_files+0x2a/0x420 [ 506.214984][T13498] ? __fget_files+0x3a0/0x420 [ 506.215006][T13498] ? __fget_files+0x2a/0x420 [ 506.215037][T13498] ksys_read+0x150/0x270 [ 506.215057][T13498] ? __pfx_ksys_read+0x10/0x10 [ 506.215084][T13498] do_syscall_64+0x14d/0xf80 [ 506.215107][T13498] ? trace_irq_disable+0x3b/0x150 [ 506.215132][T13498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.215151][T13498] ? clear_bhb_loop+0x40/0x90 [ 506.215174][T13498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.215199][T13498] RIP: 0033:0x7f0534b5cece [ 506.215217][T13498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.215233][T13498] RSP: 002b:00007f05359c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.215253][T13498] RAX: ffffffffffffffda RBX: 00007f05359c56c0 RCX: 00007f0534b5cece [ 506.215267][T13498] RDX: 000000000000000f RSI: 00007f05359c50a0 RDI: 0000000000000003 [ 506.215279][T13498] RBP: 00007f05359c5090 R08: 0000000000000000 R09: 0000000000000000 [ 506.215291][T13498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.215302][T13498] R13: 00007f0534e16038 R14: 00007f0534e15fa0 R15: 00007f0534f3fa48 [ 506.215330][T13498] [ 506.473500][T13496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.670847][T13505] netlink: 'syz.4.1943': attribute type 21 has an invalid length. [ 506.699773][T13496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.196317][ T5910] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 507.483317][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 507.546445][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 507.574187][ T5910] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 507.590659][ T5910] usb 4-1: config 0 has no interface number 0 [ 507.612671][ T5910] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 507.615241][T11441] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 507.650095][ T5910] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 507.713498][ T5910] usb 4-1: config 0 interface 88 has no altsetting 0 [ 507.773554][ T5910] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 507.791512][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 507.822160][ T5910] usb 4-1: Product: syz [ 507.832240][ T5910] usb 4-1: Manufacturer: 甘挟扊ꝲ埌ꈦꜗ雦뗮ퟱ科督悗㕛▼氧쥏ꯒቨ劍昜扽坽웒血㖮큒렉鈆ᤕ닅豲䠇ᾶ莒徦⼓㢋꾰₁짩匧䤆现빕ˋ좂閲 [ 507.852134][T11441] usb 3-1: Using ep0 maxpacket: 8 [ 507.873178][ T5910] usb 4-1: SerialNumber: ⠥ [ 507.901161][ T5910] usb 4-1: config 0 descriptor?? [ 507.932759][T11441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 507.980463][T11441] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 507.992223][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 508.072754][T11441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 508.119770][T11441] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 508.250183][T11441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.300917][T11441] usb 3-1: Product: syz [ 508.322524][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 508.350481][T11441] usb 3-1: Manufacturer: syz [ 508.376294][T11441] usb 3-1: SerialNumber: syz [ 508.457668][T11441] usb 3-1: config 0 descriptor?? [ 508.507212][T11441] radioshark 3-1:0.0: Invalid radioSHARK device [ 508.525365][T11441] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 508.597988][T11441] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 508.626560][T11459] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 508.663744][T11459] hid-generic 0000:0000:0000.0038: hidraw1: HID v0.00 Device [syz1] on syz0 [ 508.718320][T13524] netlink: 'syz.2.1946': attribute type 2 has an invalid length. [ 508.848544][T13540] bridge6: port 1(veth5) entered blocking state [ 508.855200][T13540] bridge6: port 1(veth5) entered disabled state [ 508.862650][T13540] veth5: entered allmulticast mode [ 508.899469][T13540] veth5: entered promiscuous mode [ 508.950351][T13524] @;: entered promiscuous mode [ 508.982612][T13544] bridge6: port 2(veth0_to_bond) entered blocking state [ 508.984539][T11459] usb 3-1: USB disconnect, device number 76 [ 509.011965][T13544] bridge6: port 2(veth0_to_bond) entered disabled state [ 509.035321][T13544] veth0_to_bond: entered allmulticast mode [ 509.057417][T13544] veth0_to_bond: entered promiscuous mode [ 509.067875][T11443] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 509.243541][T11443] usb 1-1: unable to get BOS descriptor or descriptor too short [ 509.252270][T11443] usb 1-1: not running at top speed; connect to a high speed hub [ 509.338353][T11443] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 509.356175][T11443] usb 1-1: config 12 has no interface number 0 [ 509.383773][T11443] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has invalid maxpacket 65339, setting to 64 [ 509.432843][T11443] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 509.444928][T11443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.462819][T11443] usb 1-1: Product: syz [ 509.517204][T11443] usb 1-1: Manufacturer: syz [ 509.551378][ T5910] input: 甘挟扊ꝲ埌ꈦꜗ雦뗮ퟱ科督悗㕛▼氧쥏ꯒቨ劍昜扽坽웒血㖮큒렉鈆ᤕ닅豲䠇ᾶ莒徦⼓㢋 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input37 [ 509.598049][ T5910] usb 4-1: USB disconnect, device number 107 [ 509.622599][T11443] usb 1-1: SerialNumber: syz [ 509.723725][T13538] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 509.812746][T13553] netlink: 'syz.3.1953': attribute type 13 has an invalid length. [ 509.877538][T13553] veth0: Caught tx_queue_len zero misconfig [ 510.024781][T11443] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.118240][T11443] usb 1-1: USB disconnect, device number 105 [ 510.150053][ T8163] udevd[8163]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.156530][ T5910] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 510.336121][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 510.348764][ T5910] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 510.361603][ T5910] usb 4-1: config 0 has no interface number 0 [ 510.369561][ T5910] usb 4-1: config 0 interface 196 has no altsetting 0 [ 510.376493][T11459] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 510.388771][ T5910] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 510.402479][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.415477][ T5910] usb 4-1: Product: syz [ 510.420544][ T5910] usb 4-1: Manufacturer: syz [ 510.426182][ T5910] usb 4-1: SerialNumber: syz [ 510.444359][ T5910] usb 4-1: config 0 descriptor?? [ 510.566165][T11459] usb 5-1: Using ep0 maxpacket: 16 [ 510.573466][T11459] usb 5-1: config 6 has an invalid interface number: 152 but max is 3 [ 510.581946][T11459] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 510.592901][T11459] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 510.602467][T11459] usb 5-1: config 6 has no interface number 0 [ 510.609054][T11459] usb 5-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 510.619804][T11459] usb 5-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 510.648626][T11459] usb 5-1: config 6 interface 152 has no altsetting 0 [ 510.665930][ T5910] ipheth 4-1:0.196: Unable to find endpoints [ 510.679749][T11459] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 510.692189][T11459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.706681][ T5910] usb 4-1: USB disconnect, device number 108 [ 510.724313][T11459] usb 5-1: Product: syz [ 510.743831][T11459] usb 5-1: Manufacturer: syz [ 510.752713][T11459] usb 5-1: SerialNumber: syz [ 510.777361][T13572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1960'. [ 511.141183][T13580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.215549][T11459] ushc 5-1:6.152: probe with driver ushc failed with error -71 [ 511.264212][T11459] usb 5-1: USB disconnect, device number 88 [ 511.722028][T13596] loop6: detected capacity change from 0 to 7 [ 511.733172][T13596] Dev loop6: unable to read RDB block 7 [ 511.742409][T13596] loop6: AHDI p1 p2 p3 p4 [ 511.786682][T13596] loop6: partition table partially beyond EOD, truncated [ 511.878584][T13596] loop6: p1 start 512 is beyond EOD, truncated [ 511.920583][T13598] syzkaller0: entered promiscuous mode [ 511.929753][T13596] loop6: p2 size 335544320 extends beyond EOD, truncated [ 511.936936][T13598] syzkaller0: entered allmulticast mode [ 511.984103][T13596] loop6: p3 start 2427370299 is beyond EOD, truncated [ 512.141005][ T8162] udevd[8162]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 513.386802][T11459] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 513.556193][T11459] usb 4-1: Using ep0 maxpacket: 8 [ 513.573125][T11459] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64 [ 513.614427][T11459] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.635148][T11459] usb 4-1: config 1 interface 0 has no altsetting 0 [ 513.658404][T11459] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 513.668451][T11459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.676982][T11459] usb 4-1: Product: ఊ [ 513.681314][T11459] usb 4-1: Manufacturer: ᇤ [ 513.686515][T11459] usb 4-1: SerialNumber: У [ 513.922918][T13629] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 514.100668][T13654] loop7: detected capacity change from 0 to 16384 [ 514.171181][T13629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.204085][T13629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.266652][T11459] usb 4-1: USB disconnect, device number 109 [ 514.596673][T13662] loop3: detected capacity change from 0 to 7 [ 514.618596][T13662] Dev loop3: unable to read RDB block 7 [ 514.633623][T13662] loop3: unable to read partition table [ 514.648821][T13662] loop3: partition table beyond EOD, truncated [ 514.664280][T13662] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 514.685267][T13668] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1985'. [ 515.048491][T11459] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 515.208309][T11459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.222644][T11459] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 515.269387][T11459] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 515.284832][T11459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.482873][T11459] usb 3-1: config 0 descriptor?? [ 516.016825][T11459] kovaplus 0003:1E7D:2D50.0039: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 516.478169][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 516.509307][T13731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.518659][T11459] kovaplus 0003:1E7D:2D50.0039: couldn't init struct kovaplus_device [ 516.518915][T13733] syzkaller0: entered promiscuous mode [ 516.528178][T11459] kovaplus 0003:1E7D:2D50.0039: couldn't install mouse [ 516.532814][T13731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.549546][T13733] syzkaller0: entered allmulticast mode [ 516.569906][T11459] kovaplus 0003:1E7D:2D50.0039: probe with driver kovaplus failed with error -5 [ 516.642319][T13733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.733985][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.754017][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.769439][T11441] usb 3-1: USB disconnect, device number 77 [ 516.776309][T11443] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 516.813005][T13738] FAULT_INJECTION: forcing a failure. [ 516.813005][T13738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.827060][T13738] CPU: 0 UID: 0 PID: 13738 Comm: syz.3.1995 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.827092][T13738] Tainted: [L]=SOFTLOCKUP [ 516.827100][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.827111][T13738] Call Trace: [ 516.827121][T13738] [ 516.827130][T13738] dump_stack_lvl+0xe8/0x150 [ 516.827161][T13738] should_fail_ex+0x412/0x560 [ 516.827188][T13738] _copy_from_iter+0x1d3/0x1670 [ 516.827215][T13738] ? rcu_is_watching+0x15/0xb0 [ 516.827245][T13738] ? __pfx__copy_from_iter+0x10/0x10 [ 516.827275][T13738] ? netlink_sendmsg+0x650/0xb40 [ 516.827297][T13738] ? skb_put+0x11b/0x210 [ 516.827324][T13738] netlink_sendmsg+0x6c0/0xb40 [ 516.827354][T13738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.827380][T13738] ? aa_sock_msg_perm+0xf1/0x1b0 [ 516.827464][T13738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.827486][T13738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.827508][T13738] ____sys_sendmsg+0xa68/0xad0 [ 516.827542][T13738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.827576][T13738] ? import_iovec+0x73/0xa0 [ 516.827603][T13738] ___sys_sendmsg+0x2a5/0x360 [ 516.827634][T13738] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.827685][T13738] ? __fget_files+0x2a/0x420 [ 516.827709][T13738] ? __fget_files+0x3a0/0x420 [ 516.827745][T13738] __x64_sys_sendmsg+0x1bd/0x2a0 [ 516.827774][T13738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.827809][T13738] ? __pfx_ksys_write+0x10/0x10 [ 516.827837][T13738] do_syscall_64+0x14d/0xf80 [ 516.827863][T13738] ? trace_irq_disable+0x3b/0x150 [ 516.827889][T13738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.827908][T13738] ? clear_bhb_loop+0x40/0x90 [ 516.827930][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.827949][T13738] RIP: 0033:0x7fe7ad79c629 [ 516.827968][T13738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.827985][T13738] RSP: 002b:00007fe7ae6e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.828005][T13738] RAX: ffffffffffffffda RBX: 00007fe7ada15fa0 RCX: 00007fe7ad79c629 [ 516.828020][T13738] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 516.828032][T13738] RBP: 00007fe7ae6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 516.828043][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.828054][T13738] R13: 00007fe7ada16038 R14: 00007fe7ada15fa0 R15: 00007fe7adb3fa48 [ 516.828082][T13738] [ 517.150138][T13741] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1996'. [ 517.190761][T11443] usb 1-1: unable to get BOS descriptor or descriptor too short [ 517.246820][T11443] usb 1-1: not running at top speed; connect to a high speed hub [ 517.266919][T11443] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.298847][T11443] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 517.337718][T11443] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 517.359334][T11443] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.382159][T11443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.407279][T11443] usb 1-1: Product: syz [ 517.417395][T11443] usb 1-1: Manufacturer: syz [ 517.425211][T13747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1998'. [ 517.479205][T11443] usb 1-1: SerialNumber: syz [ 517.736418][T11441] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 517.836207][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 517.896070][T11441] usb 4-1: Using ep0 maxpacket: 16 [ 517.911966][T11441] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 517.922011][T11441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.930253][T11441] usb 4-1: Product: syz [ 517.934942][T11441] usb 4-1: Manufacturer: syz [ 517.943359][T11441] usb 4-1: SerialNumber: syz [ 517.949630][T13760] loop6: detected capacity change from 0 to 7 [ 517.960368][T13760] Dev loop6: unable to read RDB block 7 [ 517.967233][T11441] usb 4-1: config 0 descriptor?? [ 517.981132][T13760] loop6: unable to read partition table [ 517.989028][T13760] loop6: partition table beyond EOD, truncated [ 517.995638][T13760] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 518.007649][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.035340][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 518.061119][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 518.074805][ T24] usb 3-1: Product: syz [ 518.089749][ T24] usb 3-1: Manufacturer: syz [ 518.097049][ T24] usb 3-1: SerialNumber: syz [ 518.181696][T11441] speedtch 4-1:0.0: speedtch_bind: wrong device class 68 [ 518.189335][T11441] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 518.324995][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 518.336094][T11459] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 518.498149][T11459] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 518.506696][T11459] usb 5-1: config 0 has no interface number 0 [ 518.513541][T11459] usb 5-1: config 0 interface 161 has no altsetting 0 [ 518.520584][T11459] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 518.529989][T11459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.536684][T13753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.548901][T13753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.549025][T11459] usb 5-1: config 0 descriptor?? [ 518.676844][ C1] usblp0: nonzero write bulk status received: -71 [ 518.677378][T11448] usb 3-1: USB disconnect, device number 78 [ 518.701939][T11448] usblp0: removed [ 518.742101][T11443] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 518.762763][T11443] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 518.826608][T11443] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 518.827888][T11459] usb 5-1: string descriptor 0 read error: -71 [ 518.871005][T11459] usb-storage 5-1:0.161: USB Mass Storage device detected [ 518.891070][T11459] usb-storage 5-1:0.161: Quirks match for vid 0781 pid 0100: 1 [ 518.921020][T11459] usb 5-1: USB disconnect, device number 89 [ 518.931982][T11443] usb 1-1: USB disconnect, device number 106 [ 518.984561][ T8162] udevd[8162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.955936][T13787] syzkaller0: entered promiscuous mode [ 519.968269][T13787] syzkaller0: entered allmulticast mode [ 520.172777][T13791] program syz.0.2013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.187243][T13791] netlink: 'syz.0.2013': attribute type 10 has an invalid length. [ 520.202634][T13793] loop6: detected capacity change from 0 to 7 [ 520.231421][T13793] Dev loop6: unable to read RDB block 7 [ 520.248845][T13793] loop6: unable to read partition table [ 520.260942][T13793] loop6: partition table beyond EOD, truncated [ 520.275867][T13793] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 520.522573][T11459] usb 4-1: USB disconnect, device number 110 [ 520.616293][T11443] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 520.792958][ T30] INFO: task kworker/0:8:5963 blocked for more than 143 seconds. [ 520.840843][ T30] Tainted: G L syzkaller #0 [ 520.856112][T11441] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 520.876173][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.907528][ T30] task:kworker/0:8 state:D stack:21608 pid:5963 tgid:5963 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 520.938162][ T30] Workqueue: usb_hub_wq hub_event [ 520.947915][ T30] Call Trace: [ 520.956933][ T30] [ 520.961381][ T30] __schedule+0x1585/0x5340 [ 520.971485][ T30] ? __pfx_hlock_conflict+0x10/0x10 [ 520.977630][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 520.985738][ T30] ? __pfx___schedule+0x10/0x10 [ 520.991140][ T30] ? schedule+0x90/0x360 [ 520.996976][ T30] schedule+0x164/0x360 [ 521.002813][ T30] schedule_timeout+0xc3/0x2c0 [ 521.007955][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 521.022599][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 521.051914][T11441] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 521.094939][T11441] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.116057][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.127515][T11441] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.141273][ T30] ? wait_for_completion+0x274/0x5e0 [ 521.156152][ T30] wait_for_completion+0x2cc/0x5e0 [ 521.171815][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 521.181990][T11441] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 521.197603][ T30] i2c_del_adapter+0x5c0/0x790 [ 521.215862][T11441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.224843][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 521.234940][ T30] ? __pfx_cp2112_remove+0x10/0x10 [ 521.334181][ T30] ? kernfs_put+0x40e/0x470 [ 521.417627][ T30] ? sysfs_remove_group+0x23d/0x2e0 [ 521.423309][ T30] ? __pfx_cp2112_remove+0x10/0x10 [ 521.430529][ T30] cp2112_remove+0x5b/0x100 [ 521.437715][T11441] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.446761][T11441] usb 5-1: invalid MIDI out EP 0 [ 521.452541][ T30] hid_device_remove+0x228/0x370 [ 521.459090][ T30] ? __pfx_hid_device_remove+0x10/0x10 [ 521.483607][ T30] device_release_driver_internal+0x46f/0x860 [ 521.536500][ T30] bus_remove_device+0x34d/0x440 [ 521.577900][ T30] device_del+0x527/0x8f0 [ 521.613056][ T30] ? __pfx_device_del+0x10/0x10 [ 521.623135][ T30] hid_destroy_device+0x6b/0x1b0 [ 521.643352][ T30] usbhid_disconnect+0x9f/0xc0 [ 521.659336][T13803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.668259][T13803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.679670][ T30] usb_unbind_interface+0x26e/0x910 [ 521.689135][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 521.700193][ T30] device_release_driver_internal+0x4d9/0x860 [ 521.736089][ T30] bus_remove_device+0x34d/0x440 [ 521.752884][ T30] device_del+0x527/0x8f0 [ 521.752940][ T30] ? __pfx_device_del+0x10/0x10 [ 521.753087][ T30] ? kobject_put+0x51d/0x560 [ 521.753105][ T30] usb_disable_device+0x3d4/0x8d0 [ 521.753208][ T30] usb_disconnect+0x32f/0x990 [ 521.753230][ T30] hub_event+0x1cc9/0x4f30 [ 521.753259][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 521.753295][ T30] ? __pfx_hub_event+0x10/0x10 [ 521.753334][ T30] ? process_scheduled_works+0xa25/0x1830 [ 521.753359][ T30] ? process_scheduled_works+0xa25/0x1830 [ 521.753381][ T30] process_scheduled_works+0xb02/0x1830 [ 521.753410][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 521.753434][ T30] ? assign_work+0x3d5/0x5e0 [ 521.753465][ T30] worker_thread+0xa50/0xfc0 [ 521.753513][ T30] kthread+0x388/0x470 [ 521.753525][ T30] ? __pfx_worker_thread+0x10/0x10 [ 521.753539][ T30] ? __pfx_kthread+0x10/0x10 [ 521.753550][ T30] ret_from_fork+0x51e/0xb90 [ 521.753568][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 521.753591][ T30] ? __switch_to+0xc7d/0x1450 [ 521.753649][ T30] ? __pfx_kthread+0x10/0x10 [ 521.753667][ T30] ret_from_fork_asm+0x1a/0x30 [ 521.753692][ T30] [ 521.760119][ T30] [ 521.760119][ T30] Showing all locks held in the system: [ 521.760140][ T30] 1 lock held by khungtaskd/30: [ 521.760155][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 521.760253][ T30] 2 locks held by getty/5581: [ 521.760266][ T30] #0: ffff8880369fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 521.760333][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 521.760400][ T30] 6 locks held by kworker/0:8/5963: [ 521.760413][ T30] #0: ffff888021abad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.760471][ T30] #1: ffffc90004657c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.760529][ T30] #2: ffff88802947a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 521.760587][ T30] #3: ffff888027e53198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 521.760642][ T30] #4: ffff888034db3160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 521.760696][ T30] #5: ffff888054bd5a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 521.771833][ T30] 7 locks held by kworker/1:2/11441: [ 521.771855][ T30] 5 locks held by kworker/1:8/11443: [ 521.771866][ T30] #0: ffff888021abad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.771924][ T30] #1: ffffc9000513fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.772381][ T30] #2: ffff88802935b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 521.772444][ T30] #3: ffff88802937b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 521.772502][ T30] #4: ffff888029048e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 521.772681][ T30] 4 locks held by kworker/0:14/11459: [ 521.772694][ T30] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.772751][ T30] #1: ffffc90003ee7c40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.772809][ T30] #2: ffff888025600280 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x125/0x750 [ 521.772863][ T30] #3: ffff888025720130 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80 [ 521.772922][ T30] 1 lock held by syz.0.2015/13798: [ 521.772934][ T30] 6 locks held by syz.4.2017/13811: [ 521.772947][ T30] 2 locks held by syz.3.2019/13809: [ 521.772961][ T30] [ 521.772968][ T30] ============================================= [ 521.772968][ T30] [ 521.772994][ T30] NMI backtrace for cpu 0 [ 521.773010][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 521.773034][ T30] Tainted: [L]=SOFTLOCKUP [ 521.773041][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.773051][ T30] Call Trace: [ 521.773059][ T30] [ 521.773067][ T30] dump_stack_lvl+0xe8/0x150 [ 521.773094][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 521.773124][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 521.773150][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 521.773176][ T30] sys_info+0x135/0x170 [ 521.773195][ T30] watchdog+0xfd9/0x1030 [ 521.773227][ T30] ? watchdog+0x21a/0x1030 [ 521.773260][ T30] kthread+0x388/0x470 [ 521.773278][ T30] ? __pfx_watchdog+0x10/0x10 [ 521.773302][ T30] ? __pfx_kthread+0x10/0x10 [ 521.773321][ T30] ret_from_fork+0x51e/0xb90 [ 521.773347][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 521.773367][ T30] ? __switch_to+0xc7d/0x1450 [ 521.773390][ T30] ? __pfx_kthread+0x10/0x10 [ 521.773406][ T30] ret_from_fork_asm+0x1a/0x30 [ 521.773440][ T30] [ 521.773453][ T30] Sending NMI from CPU 0 to CPUs 1: [ 521.773478][ C1] NMI backtrace for cpu 1 [ 521.773492][ C1] CPU: 1 UID: 0 PID: 13798 Comm: syz.0.2015 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.773516][ C1] Tainted: [L]=SOFTLOCKUP [ 521.773522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.773533][ C1] RIP: 0010:__lock_acquire+0x6d5/0x2cf0 [ 521.773558][ C1] Code: ba 08 00 00 00 e8 6b 44 00 00 31 ed 85 c0 0f 84 6d 0d 00 00 83 3d 3a 7f 85 18 00 75 13 48 63 44 24 18 48 0f a3 05 4b ef 81 12 <0f> 83 8a 1e 00 00 49 8b 9e 08 0b 00 00 48 83 7c 24 28 00 75 19 83 [ 521.773573][ C1] RSP: 0018:ffffc90000a087e8 EFLAGS: 00000047 [ 521.773588][ C1] RAX: 0000000000000070 RBX: ffff88807b46c808 RCX: ffffffff93c4cb90 [ 521.773601][ C1] RDX: 0000000000000008 RSI: ffff88807b46c7e8 RDI: ffff88807b46bc80 [ 521.773614][ C1] RBP: 0000000000000000 R08: ffffffff81b210c8 R09: ffff8880b8728298 [ 521.773626][ C1] R10: 0000000000000001 R11: 0000000000000100 R12: 0000000000000003 [ 521.773637][ C1] R13: ffff88807b46c7e8 R14: ffff88807b46bc80 R15: 0000000000000002 [ 521.773649][ C1] FS: 00007f3b29c9c6c0(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 521.773665][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.773677][ C1] CR2: 0000200000352030 CR3: 00000000411f0000 CR4: 00000000003526f0 [ 521.773693][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 000000007a08253c [ 521.773705][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 521.773717][ C1] Call Trace: [ 521.773723][ C1] [ 521.773732][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 521.773754][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 521.773775][ C1] lock_acquire+0xf0/0x2e0 [ 521.773795][ C1] ? hrtimer_start_range_ns+0xc8/0x1ff0 [ 521.773822][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 521.773845][ C1] ? hrtimer_start_range_ns+0xc8/0x1ff0 [ 521.773867][ C1] hrtimer_start_range_ns+0xc8/0x1ff0 [ 521.773890][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 521.773908][ C1] ? rcu_is_watching+0x15/0xb0 [ 521.773933][ C1] dummy_timer+0x4436/0x45d0 [ 521.773973][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 521.774006][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 521.774025][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 521.774047][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 521.774064][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 521.774080][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 521.774111][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 521.774134][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 521.774158][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 521.774185][ C1] handle_softirqs+0x22a/0x870 [ 521.774208][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 521.774232][ C1] __irq_exit_rcu+0x5f/0x150 [ 521.774253][ C1] irq_exit_rcu+0x9/0x30 [ 521.774273][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 521.774298][ C1] [ 521.774304][ C1] [ 521.774310][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 521.774329][ C1] RIP: 0010:finish_task_switch+0x245/0x920 [ 521.774349][ C1] Code: 00 00 48 85 db 0f 85 e8 01 00 00 e9 56 05 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 55 ce 1a 0a e8 50 7e 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 30 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 521.774370][ C1] RSP: 0018:ffffc9000506f338 EFLAGS: 00000202 [ 521.774384][ C1] RAX: 000000000001f249 RBX: 0000000000000000 RCX: 0000000080000001 [ 521.774396][ C1] RDX: 0000000000000006 RSI: ffffffff8def1e84 RDI: ffffffff8c27a880 [ 521.774407][ C1] RBP: ffffc9000506f390 R08: ffffffff90117db7 R09: 1ffffffff2022fb6 [ 521.774420][ C1] R10: dffffc0000000000 R11: fffffbfff2022fb7 R12: ffff88807b46bc80 [ 521.774436][ C1] R13: dffffc0000000000 R14: ffff888033238000 R15: ffff8880b873b918 [ 521.774455][ C1] ? finish_task_switch+0x240/0x920 [ 521.774477][ C1] __schedule+0x158d/0x5340 [ 521.774509][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 521.774536][ C1] ? __pfx___schedule+0x10/0x10 [ 521.774564][ C1] preempt_schedule_irq+0x4d/0xa0 [ 521.774587][ C1] irqentry_exit+0x599/0x620 [ 521.774611][ C1] ? rcu_is_watching+0x15/0xb0 [ 521.774644][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 521.774661][ C1] RIP: 0010:kasan_check_range+0x1c8/0x2c0 [ 521.774682][ C1] Code: 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 0f 85 a1 00 [ 521.774695][ C1] RSP: 0018:ffffc9000506f6d0 EFLAGS: 00000256 [ 521.774709][ C1] RAX: 0000000000000001 RBX: ffff88807c304f20 RCX: ffffffff8a4ab164 [ 521.774720][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88807c304f20 [ 521.774732][ C1] RBP: ffffc9000506f870 R08: ffff88807c304f27 R09: 1ffff1100f8609e4 [ 521.774744][ C1] R10: dffffc0000000000 R11: ffffed100f8609e5 R12: 0000000000000001 [ 521.774756][ C1] R13: dffffc0000000000 R14: ffffed100f8609e5 R15: 1ffff1100f8609e4 [ 521.774772][ C1] ? __unix_dgram_recvmsg+0x6a4/0xd50 [ 521.774792][ C1] __unix_dgram_recvmsg+0x6a4/0xd50 [ 521.774811][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 521.774828][ C1] ? irqentry_exit+0x59e/0x620 [ 521.774851][ C1] ? trace_irq_disable+0x3b/0x150 [ 521.774880][ C1] ? unix_dgram_recvmsg+0xb1/0xd0 [ 521.774898][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 521.774918][ C1] sock_recvmsg_nosec+0x186/0x1c0 [ 521.774939][ C1] ____sys_recvmsg+0x3e3/0x4a0 [ 521.774967][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 521.774997][ C1] ? import_iovec+0x73/0xa0 [ 521.775021][ C1] ___sys_recvmsg+0x215/0x590 [ 521.775044][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 521.775066][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 521.775092][ C1] ? trace_irq_disable+0x3b/0x150 [ 521.775126][ C1] do_recvmmsg+0x334/0x800 [ 521.775153][ C1] ? file_init_path+0x3b/0x590 [ 521.775175][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 521.775198][ C1] ? __asan_memcpy+0x40/0x70 [ 521.775226][ C1] ? __pfx_do_futex+0x10/0x10 [ 521.775252][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 521.775278][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 521.775307][ C1] do_syscall_64+0x14d/0xf80 [ 521.775331][ C1] ? trace_irq_disable+0x3b/0x150 [ 521.775355][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.775377][ C1] ? clear_bhb_loop+0x40/0x90 [ 521.775396][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.775413][ C1] RIP: 0033:0x7f3b28d9c629 [ 521.775427][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.775442][ C1] RSP: 002b:00007f3b29c9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 521.775458][ C1] RAX: ffffffffffffffda RBX: 00007f3b29016180 RCX: 00007f3b28d9c629 [ 521.775471][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 521.775482][ C1] RBP: 00007f3b28e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 521.775493][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 521.775504][ C1] R13: 00007f3b29016218 R14: 00007f3b29016180 R15: 00007f3b2913fa48 [ 521.775523][ C1] [ 521.794028][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 521.794055][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 521.794081][ T30] Tainted: [L]=SOFTLOCKUP [ 521.794092][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.794111][ T30] Call Trace: [ 521.794120][ T30] [ 521.794129][ T30] vpanic+0x56c/0xa60 [ 521.794159][ T30] ? __pfx___schedule+0x10/0x10 [ 521.794187][ T30] ? __pfx_vpanic+0x10/0x10 [ 521.794220][ T30] panic+0xc5/0xd0 [ 521.794244][ T30] ? __pfx_panic+0x10/0x10 [ 521.794270][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 521.794296][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 521.794323][ T30] watchdog+0x1023/0x1030 [ 521.794356][ T30] ? watchdog+0x21a/0x1030 [ 521.794389][ T30] kthread+0x388/0x470 [ 521.794409][ T30] ? __pfx_watchdog+0x10/0x10 [ 521.794434][ T30] ? __pfx_kthread+0x10/0x10 [ 521.794454][ T30] ret_from_fork+0x51e/0xb90 [ 521.794482][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 521.794505][ T30] ? __switch_to+0xc7d/0x1450 [ 521.794530][ T30] ? __pfx_kthread+0x10/0x10 [ 521.794551][ T30] ret_from_fork_asm+0x1a/0x30 [ 521.794591][ T30] [ 521.795050][ T30] Kernel Offset: disabled