last executing test programs: 2m14.400539756s ago: executing program 3 (id=1732): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000013c0)={0x2020}, 0x2020) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0, r0, 0x0, r1}, 0x10) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) (async) gettid() (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c0000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) (async) syz_open_dev$sndctrl(0x0, 0x458, 0x0) (async) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) 2m11.589080096s ago: executing program 1 (id=1734): r0 = socket$inet6(0xa, 0x3, 0x9) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0xb4050000) 2m11.28999509s ago: executing program 3 (id=1735): r0 = socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x800) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000060002000100000008000500", @ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd0a, 0x25dfdbfd, {0x2, 0x1f, 0x51, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'erspan0\x00'}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001800080025bd7000fcdbdf2580941400ff02ff090008000008000600ffff000008001000ffffff7f08000b001b00000006001c004e22000006001d004e24000008000400", @ANYRES32=r4, @ANYBLOB="06001500531b504f9f980835c38302690950de0600000008001000ffffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x40}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000380)={r5, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) 2m10.828564388s ago: executing program 1 (id=1737): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f00000020c0)={0x50, 0xffffffffffffffda, r1, {0x7, 0x2d, 0x7, 0x20000020, 0x5, 0xfff, 0xf, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r3 = userfaultfd(0x800) r4 = socket(0x2c, 0x3, 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000002140)={0xffffffffffffffff}) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000021c0), 0x10080, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x26) ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f0000002240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000002200)={0xf, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002300)={'syztnl2\x00', &(0x7f0000002280)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x46, 0xd, 0x20, @private0, @empty, 0x20, 0x7800, 0x2, 0x5}}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000002340)={0x1, 0x0, 0x8, r10, 0x3}, 0xc) io_uring_setup(0x1f15, &(0x7f0000002380)={0x0, 0x902a, 0x2000, 0x2, 0x2e2, 0x0, r7}) setrlimit(0x7, &(0x7f0000002400)={0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000002480)={0x3, &(0x7f0000002440)=[{0x9, 0x0, 0x0, 0x7}, {0x122, 0x2, 0x40}, {0x0, 0x9, 0x6, 0x1}]}, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f00000024c0)={{r9}, "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"}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000034c0)={0x28, 0x2, 0x0, {0x3, 0xfc, 0x9baf}}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000035c0)={&(0x7f0000c6e000/0x1000)=nil, &(0x7f0000f60000/0x2000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000d05000/0x4000)=nil, &(0x7f0000cb0000/0x2000)=nil, &(0x7f0000dc6000/0x3000)=nil, &(0x7f0000cf7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000f82000/0x1000)=nil, &(0x7f0000003500)="e045bb1b595858dbade9ab8ebc18a49341cdfb821fe0b38ccc3c107da1214e0e3658379b9330a6478e0db05747570710357a018a3a55bc1ceafc3ed23a38573eca8ae15117fdeeeb5c2f8605804ff687acd97f2cbf1ec5c6277af55a5c2b2018a36f548319ef8d703c18c2bb3e24ec4b337e425a5996b7bcbe85e959bc602b714bd1df610b016ea5baed9d64e93b875190a2f9de3a5dc9b45ff16cc14d37b88d86d1292989fd7da661be1538f44325a465615820ca576647", 0xb8, r3}, 0x68) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r7, 0x3ba0, &(0x7f0000003680)={0x48, 0x4, 0x0, 0x0, 0x24, &(0x7f0000003640)="48956b3baeb5c8d2b20e055460ae997cd1d399f7f65e9a4e1475cb0b2211868c8c209b20", 0x9}) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000003700)=0x1, 0x4) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000003740), 0x400802, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000003880)={&(0x7f0000003780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000037c0)=[0x0, 0x0], &(0x7f0000003800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003840)=[0x0], 0x4, 0x2, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f00000038c0)=r13) ftruncate(r11, 0x9) 2m10.287221393s ago: executing program 1 (id=1738): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004000000000000000000000000eeffffff0000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000290000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fefffeff00000000"]}, 0x108) 2m10.013010844s ago: executing program 4 (id=1739): set_mempolicy(0x3, 0x0, 0x40) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYBLOB="22f3efc0cf90afedee9ee3"], 0x44}, 0x1, 0x0, 0x0, 0x10040847}, 0x240008c4) 2m10.003117989s ago: executing program 3 (id=1740): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c100000008002907800000000e00003000800907800060003fa9874dc39349424f077aab502284b44b8f8fa39203d8403c2c1e6f852ea78bd2436ef2753a6b50fb27a8627dc6fe22e4d4161bbc0631734d92ad0618efb51d95891e07704d34c929f776f129f05140c2d59c3d375218933cfe100bd5dc014965be0e2d41decc98a5aa874696d7074d48b703bcdd9a57d91e5e8894d5f018a75300429d3d835b1b1d4072a206936d938a250a3275ea3c2fe9c30f1027130ed3faf6bff649ed943d4f5563bdb7ccd9b8d687c19c1"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') getdents(r5, &(0x7f0000000080)=""/60, 0x3c) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000440), 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r9, 0x4080aea2, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="26f30f2b2a0f870600b80b008ee8bad10466b80000000066ef0f01d4652b13b8fd000f00d0660fdaa45000baf80c66b8203b898566efbafc0c66ed66b828dd00000f23d80f21f86635400000700f23f8", 0x50}], 0xaaaaaaaaaaaab6b, 0x4, &(0x7f0000000400)=[@efer], 0x1) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0x21c1) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001640)=""/4090, 0xffa}], 0x1}}], 0x1, 0x10040, 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m9.61565127s ago: executing program 4 (id=1742): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xe06}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d3, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x20}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200)=0xffffffff, 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000013, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000180)=0x7, 0x4) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) recvmmsg(r5, &(0x7f00000000c0), 0x1, 0x40002142, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e26, 0x7, @remote, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x8, 0x7ff, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x1002, 0xa}}) 2m9.172362191s ago: executing program 1 (id=1743): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xffffffd7, 0x0, 0x8, 0x40003, 0x80, 0x9, 0x1, 0xfffffe0000000001, 0xfa12, 0xfffffffb}, 0x0) unshare(0x42060680) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x23}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2, 0x8}}, './file0\x00'}) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000180)={0x0, 0x762, 0x100, '\x00', &(0x7f0000000140)=0x3}) socket(0x11, 0x6, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32=r3], 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2m7.138816483s ago: executing program 0 (id=1744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect$inet(r3, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}, @ip_retopts={{0x10}}], 0x28}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, 0x0, 0x0) close(r4) r5 = syz_io_uring_setup(0xf20, 0x0, 0x0, 0x0, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x48894) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 2m5.543439239s ago: executing program 3 (id=1745): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x21, 0x2, 0x2) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000000380), 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e26, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x800}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x4048840) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80000, 0x10b) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r6 = syz_io_uring_setup(0x3deb, &(0x7f00000001c0)={0x0, 0x3885, 0x1000, 0x2, 0x10a}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) io_uring_enter(r6, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, r8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, 0x0, 0x0) 2m4.805973793s ago: executing program 2 (id=1746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x4e23, 0xd, @mcast1, 0xfffffffc}}, 0x0, 0x4, [{{0xa, 0x4e22, 0x7, @loopback, 0x1}}, {{0xa, 0x4e24, 0x7fffffff, @mcast1, 0x7fff}}, {{0xa, 0x4e22, 0x0, @loopback, 0x9}}, {{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x2}}]}, 0x290) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000001540)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) listen(r0, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40000000001004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34325241, 0x0, 0x9, [{}, {}, {}, {0x3}, {}, {}, {0x0, 0x60}]}}) dup3(r0, r1, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.188565265s ago: executing program 0 (id=1747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="15", 0x1}], 0x1}}], 0x2, 0x4000801) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x128, 0x700001b, 0x148, 0x128, 0x148, 0x220, 0x206, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0x90, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@cluster={{0x30}, {0x9, 0xa, 0x7, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x1, 0x2, 0x4, 0x1, 0x2], 0x1, 0x6}, {0xffffffffffffffff, [0x0, 0x1, 0x1, 0x0, 0x7, 0x2], 0x0, 0x2}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x0, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x1, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) 2m3.938574423s ago: executing program 3 (id=1748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0x7, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) syz_open_dev$hidraw(0x0, 0x1, 0x200000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) unshare(0x20000400) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setparam(0x0, &(0x7f0000000200)=0x2) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000306010400000000000000000300000105000100070000000900020073797a32000000005da0cec82872802846087fe5ea7169c25c614f344e89d55751713cd34899735dee3146eaa9691495bc0d24c227e60c3e8d2b441936985cc7365e01326817dd5635a79e1463f32dc44076c2f2c5824a5e297f97cfc34c5866fa6c97509c6ac6904a3a2f6be09c7c15100218ac5fd4346c765f877311bd967354539514d5756db53692fd46c85ea4966554e27ac6a92a87d4a79817fda0a81eb4be184fafef"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4008400) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r3 = syz_ublk_setup_io_uring(0x1001c, &(0x7f0000000040)={0x0, 0x30b5, 0x2000, 0x2, 0x52}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x2, 0x7a, 0x0, 0x0, 0x1000, 0x24a0000, 0x0, 0x0, 0xa0}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffff, 0x255, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x148, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x40, 0xffffffff, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7eac, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000400)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x7}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) 2m3.2718896s ago: executing program 2 (id=1749): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30"], 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(0x0, 0x0) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001400000000000008001"], 0xdc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) sendto$inet(r4, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRESHEX=r2], 0x3a) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) 2m2.008520061s ago: executing program 0 (id=1750): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32, @ANYBLOB="080005", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac1000980"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000300)) (async) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r2 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000000c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="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"/3447], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x40000000}, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r6, &(0x7f0000000040), &(0x7f0000000400)=""/72}, 0x20) (async) sendmsg$nl_generic(r3, 0x0, 0x4080040) (async) socket(0x2, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000680)=[@uexit={0x0, 0x18, 0xfffffffffffffffc}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x2e, 0x3, 0x27, 0x2}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x7, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xd, 0x80000000, 0x9, 0x9}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x683, 0xfffffffffffffa1c, 0x7, 0x4}}, @rdmsr={0x66, 0x18, {0xb05}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xe5538924f7572940}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0x8, 0x1, 0x1}}], 0x1e0}) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f00000008c0)=0x5) socket$packet(0x11, 0x3, 0x300) (async) socket$kcm(0x1e, 0x4, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1f00000000000000000000ea416c8d2030e5574745612097e3d0000080000000000000fa4722b68fc3dd99ae75baf427f3c848995c0de67f55b255eb60e799cd9f1610cb93c3485a69dc39c7c417", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000100000000000800000018110000", @ANYRES32=r3, @ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @sk_reuseport=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m0.784497264s ago: executing program 2 (id=1751): syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) syz_io_uring_setup(0x564d, &(0x7f00000002c0)={0x0, 0x0, 0x40000, 0xffffffff, 0x12b}, &(0x7f0000000280), &(0x7f0000000440), &(0x7f00000003c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, r4}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x4000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ppoll(&(0x7f0000000200)=[{r6}], 0x1, 0x0, 0x0, 0x0) 2m0.517606686s ago: executing program 0 (id=1752): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x21c4, &(0x7f0000000380)={0x0, 0xca1f, 0x10, 0x3, 0x15f}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00003f3000/0x3000)=nil, 0x3000, 0x7}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x18, &(0x7f0000000240)=0x5, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000140)=""/41, &(0x7f0000000080)=0x29) (async) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000200)) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) unshare(0x2a020400) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) (async) r9 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r9}) 1m59.89264636s ago: executing program 4 (id=1753): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004000000000000000000000000eeffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000fffff90000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fefffeff00000000"]}, 0x108) 1m59.007042511s ago: executing program 1 (id=1754): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getxattr(0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000240)={0x1, 0x1, 0x1, 0xfffe}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_REGISTER(r4, 0x4010aa0a, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m58.852249295s ago: executing program 4 (id=1755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0xe, 0x8, 0x0, 0x4, 0x5}}, {0x4}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xfffffffffffffe43, 0x1, {0x6, 0x2, 0x6, 0x0, 0xb0, 0x100, 0x1ff, 0x2}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 1m58.823367214s ago: executing program 2 (id=1756): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r1, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xc}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000200)={'exec ', 'devlink\x00'}, 0xd) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000240)=0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000003c0)={{0x7, 0x1}, 'port0\x00', 0x42, 0x100000, 0x3, 0x9, 0x6c92, 0xf8, 0x9, 0x0, 0x4, 0x83}) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44010) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20) ioctl$FITHAW(r5, 0xc0045878) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], 0x0, 0x2b, &(0x7f0000000a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x1, '\x00', 0x0, r0, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x31, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x8, 0xb6, &(0x7f0000000880)=""/182, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x33, r0, 0x8, &(0x7f0000000940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x4, 0x10, 0x1}, 0x10, r7, r3, 0x1, &(0x7f0000000d40)=[0xffffffffffffffff, r0, r5, r0, r8, r3, r0], &(0x7f0000000d80)=[{0x2, 0x5, 0x6, 0x6}], 0x10, 0x20000}, 0x94) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1a) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000e80)=0x80000000, 0x4) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000ec0)={'ip_vti0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xd, 0x5, &(0x7f0000000f00)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000f40)='syzkaller\x00', 0x248e, 0x3d, &(0x7f0000000f80)=""/61, 0x21700, 0x40, '\x00', r6, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000fc0)={0x4, 0xb, 0x9, 0x7fff}, 0x10, r7, r0, 0x0, &(0x7f0000001000)=[r8, r0, r3, r8, r3, r8, r5], 0x0, 0x10, 0x2}, 0x94) r10 = syz_open_dev$vbi(&(0x7f0000001100), 0x3, 0x2) fchmod(r10, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x200, 0x70bd25, 0x8, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x84) ioctl$BLKCRYPTOPREPAREKEY(0xffffffffffffffff, 0xc040128b, &(0x7f0000001300)={&(0x7f0000001240)="3b93295b5b3a6eb9dcf7623b0d9f950fa8b4a857cc681c93", 0x18, &(0x7f0000001280)=""/75, 0x4b}) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000001340)) r12 = socket$inet6(0xa, 0x800, 0x3) dup2(r5, r12) 1m58.707330612s ago: executing program 0 (id=1757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect$inet(r3, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}, @ip_retopts={{0x10}}], 0x28}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, 0x0, 0x0) close(r4) r5 = syz_io_uring_setup(0xf20, 0x0, 0x0, 0x0, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x48894) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 1m58.46223688s ago: executing program 3 (id=1758): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) r7 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r5, 0x0, r7, 0x0, 0xff, 0x5) write$binfmt_elf64(r4, 0x0, 0xfffffe3e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe2(0x0, 0x0) fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x12, 0xffffffffffffffff, 0x0) r9 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, 0x0, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000000)={0x6b09, 0x1a5f, 0x1}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) 1m57.65343676s ago: executing program 4 (id=1759): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20001) fgetxattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000200)=""/75, 0x4b) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m57.028466667s ago: executing program 2 (id=1760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x14}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004081}, 0x44940) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x8}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) write$P9_RVERSION(r2, 0x0, 0x0) io_uring_setup(0x1614, &(0x7f0000000200)={0x0, 0x2000, 0x3040, 0x1ffffd}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x70bd25, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x1, 0x7e, 0x6, 0x2000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0xb}}, @RTA_NH_ID={0x8, 0x1e, 0x98}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x4000080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss={0x2, 0x6}], 0x2) 1m56.648141493s ago: executing program 0 (id=1761): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x10480) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async, rerun: 64) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) (rerun: 64) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x8001, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0xffff32e0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x8, 0x0, 0x200, 0x2, 0x6, 0xfffffffd, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x4, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) (async) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) (async, rerun: 32) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 32) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz0\x00', {0x9, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0xc69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x8001, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x4, 0x91, 0x4a, 0xfe000000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x4, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x0, 0x7fff, 0x3569, 0xc68, 0x5041, 0x5, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f16, 0x7fffffff, 0x101, 0x4, 0x2, 0x8000, 0x1, 0x1, 0x6], [0x9, 0x4d78, 0x6, 0x66c, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0x8, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0x66c0, 0xffff, 0x401, 0xbfab, 0x10000, 0x5, 0x4, 0x8, 0x7, 0x10001, 0x10000, 0x7, 0x8001, 0x8, 0xd, 0x0, 0x200008, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x401, 0x822, 0x3ff, 0x100, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0x0, 0xfffffffd, 0x4, 0x9, 0x2, 0x401, 0x10000, 0x3ff, 0xc, 0x2, 0x4, 0x4, 0x8, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0x9, 0x2, 0x101, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0x6, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0xd, 0x7, 0xf61d, 0x0, 0x4, 0x6, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x1, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x3be16c6d, 0x3, 0xfffffff9, 0x401, 0x421, 0x7f, 0x80, 0x401, 0x7, 0x3, 0x401, 0x1, 0x0, 0x6, 0x5, 0x6, 0x6, 0x5, 0x1000, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x732f, 0x5, 0x1, 0xfffffffd, 0x8001, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x4]}, 0x45c) (async) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) (async) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async, rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x1ff) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000080)={{0x2, 0xcaa94196ebb29860, 0xbf65, 0x401, 'syz0\x00', 0xfffff001}, 0x0, [0x1000, 0x8, 0x1d, 0x2, 0x2, 0x554, 0x5, 0xf553, 0x4, 0x7, 0xf27d, 0xfffffffffffffffb, 0x2000000000000026, 0x4, 0xd43, 0xc615, 0xff, 0x4, 0xffffffffffffffff, 0xf87, 0x8001, 0xb4, 0xe0, 0x8, 0x9, 0xc, 0x40009, 0x4, 0xd0, 0xad0, 0x80, 0x5, 0x101, 0x4, 0x4, 0x2, 0x3, 0x2, 0x110, 0x4, 0x3, 0xfffffffffffffffc, 0x7fff, 0x2, 0x2, 0x7, 0xfffffffffffff30a, 0x0, 0x8, 0x1, 0x1, 0x4, 0x7, 0x8, 0x4c9, 0x9000000000, 0x3, 0x0, 0x6, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xffffffff, 0x81, 0x80000001, 0x3, 0xc39, 0xfffffffffffffff0, 0xc, 0x2, 0xc4bb, 0x8, 0xe000000, 0x37, 0x0, 0x3, 0x7ff, 0x8, 0x6, 0x1, 0x3, 0x80, 0x7, 0x201, 0x5c6, 0x63a, 0xba2, 0x2a19, 0x4, 0x5, 0xffffffffffffa0e5, 0x8000000000000002, 0x5, 0x8, 0x6, 0x800, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x9, 0x40, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x1be, 0x400000000000026, 0x6, 0x9, 0x80000000f, 0x9, 0x7, 0xf6, 0x200, 0x7, 0x2, 0x3, 0x3, 0x9]}) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async, rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (rerun: 32) r7 = dup(r6) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 1m55.677786178s ago: executing program 4 (id=1762): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffff63fe}]}}]}, 0x44}}, 0x2000400c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x2, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x8, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x2, 0x57, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0xa2, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x10005, 0x1c, 0x120000, 0x3, 0x6, 0xb, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400007, 0x5, 0x1003, 0x40000101, 0x10000, 0x6, 0x4, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0x401, 0x7, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r4, &(0x7f0000007900)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1f8}}], 0x2, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000440)={{&(0x7f0000000040)=[{0x4, 0x9, 0xb, {0x401, 0x8}, 0x1, 0x5, 0x5}], 0x1, 0x40, 0xd80c, 0x8d6}, {&(0x7f00000000c0)=[{0xe8f, 0x9}], 0x1, 0x10, 0xfff, 0xfffffffffffffff7}, {&(0x7f0000000100)=[0x0, 0x78d1], 0x2, 0x8, 0x7fff, 0x8}, {&(0x7f0000000280)=[{0x810, 0x4, 0x5, 0x9, 0xc}, {0x1, 0xfffffffffffffffd, 0x8, 0x0, 0x3}, {0xffff, 0x8, 0x2464, 0x2, 0x7}, {0x2, 0x9, 0x4, 0xd5f, 0x81}, {0xfe1, 0x31c, 0xffffffffffffffff}, {0x157, 0x0, 0xa0b, 0x9, 0x81}, {0x800, 0x66690805, 0x2, 0x8, 0xe76}, {0x8, 0x7, 0x8000, 0x2, 0x94}, {0x1, 0x4, 0x7f, 0x2, 0x6}], 0x9, 0x28, 0x1000, 0x5}, {&(0x7f0000000400)=[0x8, 0x0, 0x9, 0x0, 0x1, 0x7e, 0xc2, 0x7], 0x8, 0x8, 0x6, 0x1}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='fsid\x00', &(0x7f0000000800)='00000000-0000-0000-0000-000000000000\xfd', 0x0) 1m55.589357471s ago: executing program 2 (id=1763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) write$dsp(r1, &(0x7f0000000000)="20d3ff89946ae3268c918942064fa3708f55f65134c8477ce10c634aaa10a9cc09d6bf14af39641ad961d2797abad1ee8a45a3c558d9ce7024fa1fd6873dafeb216f02541a0e59fa59f3c84ce061dcb4401147e2d1c056838311fcab4d907470a24f75f31278140528c924936e1ba9662cd1935dd4406d0e490ba63cb9b87657cd1ec94fb324a4844f9c206f1b27ca067f9342fdef02b8d0651ac471bf63845ab6d4e4c461c2fb5cee2ede0ae28ee248ef67cef639e9cd079cca05b1774125f2", 0xc0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f00000001c0)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f00000000c0)={r0, 0x3}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, r7, 0x42c, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xc0d, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0x4, 0xa}, {0x1, 0x8}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1m22.449988729s ago: executing program 1 (id=1764): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000b328e26f0a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00"], 0xdc}}, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000340)='-6s]', 0x4}], 0x2) read$FUSE(r0, &(0x7f0000001d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$pid(0x1, r2, 0x2007) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000b328e26f0a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00"], 0xdc}}, 0x0) (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000340)='-6s]', 0x4}], 0x2) (async) read$FUSE(r0, &(0x7f0000001d80)={0x2020}, 0x2020) (async) ioprio_set$pid(0x1, r2, 0x2007) (async) 0s ago: executing program 32 (id=1761): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x10480) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async, rerun: 64) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) (rerun: 64) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$uinput_user_dev(r1, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x8001, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0xffff32e0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x8, 0x0, 0x200, 0x2, 0x6, 0xfffffffd, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x4, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) (async) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) (async, rerun: 32) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 32) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz0\x00', {0x9, 0x9, 0x1, 0xecb2}, 0x48, [0x8, 0x10000, 0x8, 0xc69f, 0x5d, 0x5, 0x4, 0x1, 0xa618, 0x8001, 0x1, 0xba, 0x5, 0x4000, 0xd, 0x2, 0x8, 0xd08c, 0x1, 0x4, 0x91, 0x4a, 0xfe000000, 0x7, 0x7, 0x5, 0x3, 0x3, 0x4e, 0x4, 0x2d8, 0xe, 0x5, 0x8, 0x9, 0x8, 0x2, 0x8, 0xd, 0xfffffff2, 0x0, 0x7fff, 0x3569, 0xc68, 0x5041, 0x5, 0xffff, 0x3, 0x0, 0x1ff, 0x5, 0x7, 0x5, 0x9, 0x5c8c5db, 0x8f16, 0x7fffffff, 0x101, 0x4, 0x2, 0x8000, 0x1, 0x1, 0x6], [0x9, 0x4d78, 0x6, 0x66c, 0x7, 0x1, 0x2, 0x7ff, 0x1, 0x3, 0x80000001, 0x1, 0x3, 0x36, 0x5, 0x4, 0x10000, 0x8, 0x28, 0x8, 0x6, 0x6, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0x66c0, 0xffff, 0x401, 0xbfab, 0x10000, 0x5, 0x4, 0x8, 0x7, 0x10001, 0x10000, 0x7, 0x8001, 0x8, 0xd, 0x0, 0x200008, 0x5, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x2a2, 0xc9, 0x100, 0x7, 0x7fff, 0x401, 0x822, 0x3ff, 0x100, 0x1d3, 0x10000, 0x48b3, 0x0, 0x8], [0x2, 0x6, 0x200, 0x0, 0xfffffffd, 0x4, 0x9, 0x2, 0x401, 0x10000, 0x3ff, 0xc, 0x2, 0x4, 0x4, 0x8, 0xf, 0x4, 0x6, 0xff, 0x2, 0x5, 0x9, 0x2, 0x101, 0x8, 0x5, 0xc3bcf961, 0xffffffff, 0x6, 0x9fdb, 0x4, 0x3, 0x7, 0xffffffff, 0xfffffff7, 0x3, 0x1, 0xffff8dc0, 0x6, 0x2, 0x6, 0xf, 0x0, 0x5, 0x0, 0x6, 0xd, 0x7, 0xf61d, 0x0, 0x4, 0x6, 0x3, 0x8001, 0xb, 0x3, 0xe99, 0x9, 0x8, 0x400, 0xff, 0x80000001, 0x73], [0x7f, 0x1, 0x4989, 0x4, 0x7, 0x7, 0x9, 0x9, 0x3be16c6d, 0x3, 0xfffffff9, 0x401, 0x421, 0x7f, 0x80, 0x401, 0x7, 0x3, 0x401, 0x1, 0x0, 0x6, 0x5, 0x6, 0x6, 0x5, 0x1000, 0x40007f77, 0x3, 0x6, 0x147f, 0x80000000, 0x4770, 0xefe, 0xff, 0x8, 0x3ff, 0x8738, 0x9, 0x800, 0x800, 0x3, 0x0, 0x80000000, 0x9, 0x7, 0xd7, 0x732f, 0x5, 0x1, 0xfffffffd, 0x8001, 0x5, 0xffff, 0x7, 0x0, 0x1ba38052, 0x8, 0x7, 0x84a, 0x4d0b, 0x8, 0x7, 0x4]}, 0x45c) (async) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) (async) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async, rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x1ff) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000080)={{0x2, 0xcaa94196ebb29860, 0xbf65, 0x401, 'syz0\x00', 0xfffff001}, 0x0, [0x1000, 0x8, 0x1d, 0x2, 0x2, 0x554, 0x5, 0xf553, 0x4, 0x7, 0xf27d, 0xfffffffffffffffb, 0x2000000000000026, 0x4, 0xd43, 0xc615, 0xff, 0x4, 0xffffffffffffffff, 0xf87, 0x8001, 0xb4, 0xe0, 0x8, 0x9, 0xc, 0x40009, 0x4, 0xd0, 0xad0, 0x80, 0x5, 0x101, 0x4, 0x4, 0x2, 0x3, 0x2, 0x110, 0x4, 0x3, 0xfffffffffffffffc, 0x7fff, 0x2, 0x2, 0x7, 0xfffffffffffff30a, 0x0, 0x8, 0x1, 0x1, 0x4, 0x7, 0x8, 0x4c9, 0x9000000000, 0x3, 0x0, 0x6, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xffffffff, 0x81, 0x80000001, 0x3, 0xc39, 0xfffffffffffffff0, 0xc, 0x2, 0xc4bb, 0x8, 0xe000000, 0x37, 0x0, 0x3, 0x7ff, 0x8, 0x6, 0x1, 0x3, 0x80, 0x7, 0x201, 0x5c6, 0x63a, 0xba2, 0x2a19, 0x4, 0x5, 0xffffffffffffa0e5, 0x8000000000000002, 0x5, 0x8, 0x6, 0x800, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x9, 0x40, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x1be, 0x400000000000026, 0x6, 0x9, 0x80000000f, 0x9, 0x7, 0xf6, 0x200, 0x7, 0x2, 0x3, 0x3, 0x9]}) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async, rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (rerun: 32) r7 = dup(r6) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) kernel console output (not intermixed with test programs): ber 116 using dummy_hcd [ 388.972648][ T5350] usb 4-1: USB disconnect, device number 76 [ 388.999392][ T5350] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 389.000027][ T5350] f81232 4-1:0.0: device disconnected [ 389.112469][ T1233] usb 5-1: device descriptor read/64, error -71 [ 389.203291][ T5700] gspca_sunplus: reg_w_riv err -110 [ 389.203412][ T5700] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 389.354151][ T1233] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 389.481236][ T1233] usb 5-1: device descriptor read/64, error -71 [ 389.593651][ T1233] usb usb5-port1: attempt power cycle [ 389.830587][ T2357] pvrusb2: Invalid write control endpoint [ 389.849649][ T25] usb 2-1: USB disconnect, device number 109 [ 389.932500][ T1233] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 389.954834][ T1233] usb 5-1: device descriptor read/8, error -71 [ 390.083727][ T2357] pvrusb2: Invalid write control endpoint [ 390.083745][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 390.083758][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 390.083769][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 390.083782][ T2357] pvrusb2: Device being rendered inoperable [ 390.093613][ T2357] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 390.093754][ T2357] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 390.191848][ T1233] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 390.213873][ T1233] usb 5-1: device descriptor read/8, error -71 [ 390.250573][ T2357] pvrusb2: Attached sub-driver cx25840 [ 390.250592][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 390.250605][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 390.322218][ T1233] usb usb5-port1: unable to enumerate USB device [ 390.626878][T10900] netlink: 'syz.3.1367': attribute type 2 has an invalid length. [ 390.697437][ T5350] usb 3-1: USB disconnect, device number 94 [ 391.339133][ T31] audit: type=1326 audit(1790639511.017:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.371004][ T31] audit: type=1326 audit(1790639511.047:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.375065][ T31] audit: type=1326 audit(1790639511.047:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.378306][ T31] audit: type=1326 audit(1790639511.057:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.378420][ T31] audit: type=1326 audit(1790639511.057:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.494225][ T31] audit: type=1326 audit(1790639511.127:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.494526][ T31] audit: type=1326 audit(1790639511.177:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.495318][ T31] audit: type=1326 audit(1790639511.177:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.498335][ T31] audit: type=1326 audit(1790639511.177:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 391.498506][ T31] audit: type=1326 audit(1790639511.177:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.2.1370" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a019e159 code=0x7ffc0000 [ 392.082346][ T943] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 392.155313][ T5350] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 392.233036][ T943] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 392.236488][ T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.236516][ T943] usb 2-1: Product: syz [ 392.236533][ T943] usb 2-1: Manufacturer: syz [ 392.236550][ T943] usb 2-1: SerialNumber: syz [ 392.278990][ T943] usb 2-1: USB2VGA dongle found at address 110 [ 392.312073][ T943] usb 2-1: Allocated 8 output buffers [ 392.315756][ T5350] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.331246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #306!!! [ 392.363025][ T5350] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.363046][ T5350] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.370822][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.370867][ T5350] usb 3-1: SerialNumber: syz [ 392.404746][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 392.529654][ T943] usb 2-1: Failed to early initialize device [ 392.563226][ T943] usb 2-1: USB disconnect, device number 110 [ 392.580479][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 392.586842][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 392.588623][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.588649][ T9] usb 1-1: config 0 has no interface number 0 [ 392.617985][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.618015][ T9] usb 1-1: Product: syz [ 392.618033][ T9] usb 1-1: Manufacturer: syz [ 392.618049][ T9] usb 1-1: SerialNumber: syz [ 392.661289][ T9] usb 1-1: config 0 descriptor?? [ 392.684622][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 392.684659][ T9] usb 1-1: selecting invalid altsetting 1 [ 392.684671][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 392.726895][T10927] fuse: Bad value for 'user_id' [ 392.726911][T10927] fuse: Bad value for 'user_id' [ 392.743288][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 392.746318][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 392.746371][ T9] usb 1-1: media controller created [ 392.748325][ T5350] usb 3-1: 0:2 : does not exist [ 392.807849][T10927] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 392.825258][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.021832][ T5350] usb 3-1: USB disconnect, device number 95 [ 393.054882][T10927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.096576][ T8957] udevd[8957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.202500][ T943] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 393.364666][ T943] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 393.369315][ T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.419532][ T943] usb 5-1: config 0 descriptor?? [ 393.838540][ T943] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 393.839043][ T943] [drm:udl_init] *ERROR* Selecting channel failed [ 393.931325][ T943] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 393.931355][ T943] [drm] Initialized udl on minor 1 [ 393.940490][ T943] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 393.963327][ T943] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 393.980803][ T5697] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 393.993927][ T5697] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 393.994177][ T5697] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 393.997246][ T943] usb 5-1: USB disconnect, device number 120 [ 394.023227][T10923] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 394.067705][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 394.067764][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 394.068783][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 394.153808][ T9] usb 1-1: USB disconnect, device number 87 [ 394.621243][ T943] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 394.763249][ T943] usb 3-1: device descriptor read/64, error -71 [ 395.023246][ T943] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 395.081313][ T5697] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 395.151998][ T943] usb 3-1: device descriptor read/64, error -71 [ 395.216612][ T5697] usb 1-1: device descriptor read/64, error -71 [ 395.237871][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 395.272397][ T943] usb usb3-port1: attempt power cycle [ 395.451312][ T5697] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 395.565582][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1383'. [ 395.593971][ T5697] usb 1-1: device descriptor read/64, error -71 [ 395.636923][ T943] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 395.654510][ T943] usb 3-1: device descriptor read/8, error -71 [ 395.702895][ T5697] usb usb1-port1: attempt power cycle [ 395.911344][ T943] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 395.932735][ T943] usb 3-1: device descriptor read/8, error -71 [ 396.051620][ T5697] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 396.051916][ T943] usb usb3-port1: unable to enumerate USB device [ 396.086263][ T5697] usb 1-1: device descriptor read/8, error -71 [ 396.156116][T10973] syz_tun: entered allmulticast mode [ 396.341313][ T5697] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 396.373772][ T5697] usb 1-1: device descriptor read/8, error -71 [ 396.392155][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.399359][T10973] x_tables: duplicate underflow at hook 1 [ 396.425931][T10972] syz_tun: left allmulticast mode [ 396.471370][ T5350] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 396.491507][ T5697] usb usb1-port1: unable to enumerate USB device [ 396.952929][ T5697] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 397.115888][ T5697] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 397.115922][ T5697] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 397.163539][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.163560][ T5697] usb 2-1: Product: syz [ 397.163572][ T5697] usb 2-1: Manufacturer: syz [ 397.163582][ T5697] usb 2-1: SerialNumber: syz [ 397.415152][T10981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.415703][T10981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.533411][ T5697] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 397.533464][ T5697] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 397.533483][ T5697] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 397.586387][ T5697] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 397.617873][ T5697] usb 2-1: USB disconnect, device number 111 [ 397.626374][T11003] vlan2: entered promiscuous mode [ 397.626439][T11003] bond0: entered promiscuous mode [ 397.626490][T11003] bond_slave_0: entered promiscuous mode [ 397.627165][T11003] bond_slave_1: entered promiscuous mode [ 398.508742][T11037] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1402'. [ 398.508771][T11037] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 398.911567][ T1233] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 399.062307][ T1233] usb 2-1: Using ep0 maxpacket: 32 [ 399.063290][ T1233] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 399.066027][ T1233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.066078][ T1233] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.112053][ T1233] usb 2-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 399.112111][ T1233] usb 2-1: Product: syz [ 399.112128][ T1233] usb 2-1: Manufacturer: syz [ 399.112145][ T1233] usb 2-1: SerialNumber: syz [ 399.150305][ T1233] appletouch 2-1:1.0: Could not find int-in endpoint [ 399.150335][ T1233] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 399.168640][ T1233] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 399.233907][ T5683] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 399.330602][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 399.394168][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 399.394226][ T5683] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 399.413152][ T5683] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 399.413227][ T5683] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.445186][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.445208][ T5683] usb 1-1: Product: syz [ 399.445220][ T5683] usb 1-1: Manufacturer: syz [ 399.445230][ T5683] usb 1-1: SerialNumber: syz [ 399.480603][T11055] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 399.729934][ T5683] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.729989][ T5683] usb 1-1: MIDIStreaming interface descriptor not found [ 399.970483][ T5683] usb 1-1: USB disconnect, device number 92 [ 400.185156][ T8949] udevd[8949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.701472][ T1233] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 400.831307][ T1233] usb 1-1: device descriptor read/64, error -71 [ 401.071586][ T1233] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 401.201358][ T1233] usb 1-1: device descriptor read/64, error -71 [ 401.311675][ T1233] usb usb1-port1: attempt power cycle [ 401.351246][ T5700] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 401.419074][ T5683] usb 2-1: USB disconnect, device number 112 [ 401.502341][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 401.503991][ T5700] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 401.505317][ T5700] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 401.507753][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.507781][ T5700] usb 3-1: Product: syz [ 401.507798][ T5700] usb 3-1: Manufacturer: syz [ 401.507814][ T5700] usb 3-1: SerialNumber: syz [ 401.552582][ T5700] usb 3-1: config 0 descriptor?? [ 401.574224][ T5700] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 401.597271][T11084] input: syz0 as /devices/virtual/input/input52 [ 401.651738][ T1233] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 401.671940][ T1233] usb 1-1: device descriptor read/8, error -71 [ 401.811442][ T943] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 401.901222][ T5697] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 401.920014][ T1233] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 401.932139][ T1233] usb 1-1: device descriptor read/8, error -71 [ 401.972134][ T943] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.974054][ T943] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.974089][ T943] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 401.974129][ T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.981656][T11086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 402.019441][ T943] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.041759][ T1233] usb usb1-port1: unable to enumerate USB device [ 402.072169][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 402.075004][ T5697] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 402.076169][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.076201][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.076226][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.076270][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.097839][ T5697] usb 2-1: config 0 descriptor?? [ 402.423260][ T943] usb 5-1: USB disconnect, device number 122 [ 402.761204][ T5683] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 402.912283][ T5683] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 402.916417][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.916445][ T5683] usb 4-1: Product: syz [ 402.916488][ T5683] usb 4-1: Manufacturer: syz [ 402.916507][ T5683] usb 4-1: SerialNumber: syz [ 402.920160][ T5683] usb 4-1: config 0 descriptor?? [ 402.931045][ T5683] ch341 4-1:0.0: ch341-uart converter detected [ 403.603699][ T5700] gspca_zc3xx: reg_r err -32 [ 403.624751][T11105] veth0_macvtap: Caught tx_queue_len zero misconfig [ 403.628471][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'. [ 403.765274][T11106] input: syz0 as /devices/virtual/input/input53 [ 404.176487][ T5683] ch341-uart ttyUSB0: failed to read break control: -71 [ 404.176559][ T5683] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 404.182559][ T5683] usb 4-1: USB disconnect, device number 77 [ 404.197858][ T5700] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 404.197944][ T5700] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 404.236180][ T5683] ch341 4-1:0.0: device disconnected [ 404.249359][ T5765] udevd[5765]: setting mode of /dev/bus/usb/004/077 to 020664 failed: No such file or directory [ 404.249463][ T5765] udevd[5765]: setting owner of /dev/bus/usb/004/077 to uid=0, gid=0 failed: No such file or directory [ 404.340226][ T9] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 404.501499][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 404.501574][ T9] usb 1-1: too many configurations: 253, using maximum allowed: 8 [ 404.503510][ T5697] usbhid 2-1:0.0: can't add hid device: -71 [ 404.503581][ T5697] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 404.505911][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.507300][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.508397][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.514005][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.520806][ T5697] usb 2-1: USB disconnect, device number 113 [ 404.527265][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.576182][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.587248][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.606850][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.606991][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.642537][ T9] usb 1-1: config 0 descriptor?? [ 404.682339][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 404.800290][ T5683] usb 3-1: USB disconnect, device number 100 [ 404.851783][ T5350] usb 1-1: USB disconnect, device number 97 [ 405.121434][T11116] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1426'. [ 405.371361][ T5350] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 405.501417][ T5350] usb 1-1: device descriptor read/64, error -71 [ 405.529065][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 405.741295][ T5350] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 405.871440][ T5350] usb 1-1: device descriptor read/64, error -71 [ 405.981638][ T5350] usb usb1-port1: attempt power cycle [ 406.100654][T11137] syzkaller1: entered promiscuous mode [ 406.100678][T11137] syzkaller1: entered allmulticast mode [ 406.332945][ T5350] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 406.353211][ T5350] usb 1-1: device descriptor read/8, error -71 [ 406.591216][ T5350] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 406.611989][ T5350] usb 1-1: device descriptor read/8, error -71 [ 406.721661][ T5350] usb usb1-port1: unable to enumerate USB device [ 407.047104][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.051329][ T5350] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 407.076558][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.077731][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.078177][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.079308][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.079814][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.080982][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.144658][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.145591][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.145961][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.243008][ T5350] usb 4-1: Using ep0 maxpacket: 32 [ 407.262269][ T5350] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 407.262315][ T5350] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 407.265116][ T5350] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.265142][ T5350] usb 4-1: config 0 has no interface number 0 [ 407.265186][ T5350] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.265210][ T5350] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.288710][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 407.299411][ T5350] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.299544][ T5350] usb 4-1: config 0 has no interface number 0 [ 407.299666][ T5350] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.299725][ T5350] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.315185][ T5350] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.315267][ T5350] usb 4-1: config 0 has no interface number 0 [ 407.315377][ T5350] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.315438][ T5350] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.324217][ T5350] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.324302][ T5350] usb 4-1: config 0 has no interface number 0 [ 407.324416][ T5350] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.324479][ T5350] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.357946][ T5350] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.358025][ T5350] usb 4-1: config 0 has no interface number 0 [ 407.358194][ T5350] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.358262][ T5350] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.370908][ T5350] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.370981][ T5350] usb 4-1: config 0 has no interface number 0 [ 407.373024][ T5350] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.373149][ T5350] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.406421][ T5350] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.406508][ T5350] usb 4-1: config 0 has no interface number 0 [ 407.406621][ T5350] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.406700][ T5350] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.462829][ T5350] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 407.462909][ T5350] usb 4-1: config 0 has no interface number 0 [ 407.463017][ T5350] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.463127][ T5350] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.573650][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.573720][ T5350] usb 4-1: Product: syz [ 407.573757][ T5350] usb 4-1: Manufacturer: syz [ 407.573796][ T5350] usb 4-1: SerialNumber: syz [ 407.626364][ T5350] usb 4-1: config 0 descriptor?? [ 407.641175][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 407.642313][ T5350] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 407.643492][ T9] usb 2-1: device descriptor read/all, error -61 [ 407.772037][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 407.807216][T11161] fuse: Bad value for 'fd' [ 407.832706][ T5350] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 407.911881][ T9] usb 2-1: device descriptor read/64, error -71 [ 408.023375][ T9] usb usb2-port1: attempt power cycle [ 408.048706][ T5697] usb 4-1: USB disconnect, device number 78 [ 408.068536][ T5697] etas_es58x 4-1:0.2: Disconnecting syz syz [ 408.171532][ T5683] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 408.322419][ T5683] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.323283][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.323305][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.323320][ T5683] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.323368][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.329430][ T5683] usb 5-1: config 0 descriptor?? [ 408.384440][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 408.421886][ T9] usb 2-1: device descriptor read/8, error -71 [ 408.661803][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 408.689760][ T9] usb 2-1: device descriptor read/8, error -71 [ 408.764634][ T5683] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 408.791814][ T9] usb usb2-port1: unable to enumerate USB device [ 408.927699][T11185] C: renamed from veth1_to_team [ 408.949512][T11185] netlink: 'syz.3.1444': attribute type 8 has an invalid length. [ 408.949534][T11185] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 408.950937][ T5683] usb 5-1: USB disconnect, device number 123 [ 409.027197][T11185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.130274][T11188] syzkaller1: entered promiscuous mode [ 409.130301][T11188] syzkaller1: entered allmulticast mode [ 409.942179][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 410.091541][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 410.093501][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 410.095161][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 410.095189][ T9] usb 3-1: config 0 has no interface number 0 [ 410.097592][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.097619][ T9] usb 3-1: Product: syz [ 410.097637][ T9] usb 3-1: Manufacturer: syz [ 410.097653][ T9] usb 3-1: SerialNumber: syz [ 410.157105][ T9] usb 3-1: config 0 descriptor?? [ 410.167547][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 410.189425][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.189631][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.189819][T11221] bridge_slave_0: entered allmulticast mode [ 410.221255][T11221] bridge_slave_0: entered promiscuous mode [ 410.270536][T11221] bridge_slave_0: left allmulticast mode [ 410.270566][T11221] bridge_slave_0: left promiscuous mode [ 410.270829][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.302126][ T5683] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 410.390318][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 410.406956][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 410.451830][ T5683] usb 5-1: Using ep0 maxpacket: 16 [ 410.459779][ T5683] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 410.461256][ T5683] usb 5-1: config 0 interface 0 has no altsetting 0 [ 410.461297][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.504728][ T5683] usb 5-1: config 0 descriptor?? [ 410.588358][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 32 [ 410.789336][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 410.812807][ T9] usb 3-1: USB disconnect, device number 101 [ 410.836600][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 410.858313][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 410.873634][ T9] quatech2 3-1:0.51: device disconnected [ 410.967865][ T5683] usbhid 5-1:0.0: can't add hid device: -71 [ 410.967980][ T5683] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 410.994125][ T5683] usb 5-1: USB disconnect, device number 124 [ 411.801623][ T1233] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 411.808347][T11247] ======================================================= [ 411.808347][T11247] WARNING: The mand mount option has been deprecated and [ 411.808347][T11247] and is ignored by this kernel. Remove the mand [ 411.808347][T11247] option from the mount to silence this warning. [ 411.808347][T11247] ======================================================= [ 411.961275][ T1233] usb 4-1: Using ep0 maxpacket: 8 [ 411.965534][ T1233] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 411.969364][ T1233] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 411.969393][ T1233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.969415][ T1233] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.969456][ T1233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.028506][ T1233] usb 4-1: config 0 descriptor?? [ 412.224859][T11251] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 412.230697][ T6487] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 412.237233][T11249] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 412.613518][T11260] input: syz0 as /devices/virtual/input/input54 [ 412.817264][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 412.817417][ T31] audit: type=1800 audit(1790639532.497:824): pid=11266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1459" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 412.931497][ T5350] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 413.107555][ T5350] usb 1-1: unable to get BOS descriptor or descriptor too short [ 413.107601][ T5350] usb 1-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 413.108749][ T5350] usb 1-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 413.108772][ T5350] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.112443][ T5350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.112461][ T5350] usb 1-1: Product: syz [ 413.112471][ T5350] usb 1-1: Manufacturer: syz [ 413.112481][ T5350] usb 1-1: SerialNumber: syz [ 413.320022][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 413.320291][T11268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.407118][ T5350] usb 1-1: unit 115 not found! [ 413.407147][ T5350] usb 1-1: unit 255 not found! [ 413.522755][ T5350] usb 1-1: USB disconnect, device number 102 [ 413.551568][T11268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.656427][ T8957] udevd[8957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.753609][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 413.827415][T11273] loop5: detected capacity change from 0 to 7 [ 413.830363][T11273] Dev loop5: unable to read RDB block 7 [ 413.830393][T11273] loop5: unable to read partition table [ 413.830560][T11273] loop5: partition table beyond EOD, truncated [ 413.830608][T11273] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 414.125369][ T5625] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 414.346611][T11284] kAFS: unable to lookup cell '(,c¾Ì' [ 414.864096][ T9] usb 4-1: USB disconnect, device number 79 [ 416.110014][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 416.147069][T11313] netlink: 'syz.0.1472': attribute type 11 has an invalid length. [ 416.147094][T11313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1472'. [ 416.178147][T11316] binder: BINDER_SET_CONTEXT_MGR already set [ 416.178163][T11316] binder: 11315:11316 ioctl 4018620d 200000000100 returned -16 [ 416.178731][T11316] binder: 11315:11316 ioctl c018aa3f 2000000003c0 returned -22 [ 416.179970][T11316] binder: BINDER_SET_CONTEXT_MGR already set [ 416.179982][T11316] binder: 11315:11316 ioctl 4018620d 200000004a80 returned -16 [ 416.451465][ T5350] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 416.536490][T11318] netlink: 'syz.1.1475': attribute type 12 has an invalid length. [ 416.602151][ T5350] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 416.603486][ T5350] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 416.603534][ T5350] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 416.603558][ T5350] usb 1-1: config 0 interface 0 has no altsetting 0 [ 416.607330][ T5350] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 416.607356][ T5350] usb 1-1: Product: syz [ 416.607371][ T5350] usb 1-1: Manufacturer: syz [ 416.607386][ T5350] usb 1-1: SerialNumber: syz [ 416.631184][ T5350] usb 1-1: config 0 descriptor?? [ 416.689615][ T5350] hub 1-1:0.0: bad descriptor, ignoring hub [ 416.689645][ T5350] hub 1-1:0.0: probe with driver hub failed with error -5 [ 416.712895][ T5350] usb 1-1: selecting invalid altsetting 0 [ 416.855356][ T5350] usb 1-1: USB disconnect, device number 103 [ 417.017824][T11337] netlink: 'syz.4.1480': attribute type 2 has an invalid length. [ 418.791585][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 418.791699][T11320] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 419.345322][T11320] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.345566][T11320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.345715][T11320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.345866][T11320] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 419.514636][T11342] xt_hashlimit: size too large, truncated to 1048576 [ 419.586145][T11345] xt_hashlimit: size too large, truncated to 1048576 [ 419.592371][ T5697] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 419.612970][ T5683] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 419.742572][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 419.744128][ T5697] usb 4-1: device descriptor read/all, error -71 [ 419.766361][ T5683] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.766909][ T5683] usb 3-1: config 0 has no interfaces? [ 419.813432][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.813465][ T5683] usb 3-1: Product: syz [ 419.813481][ T5683] usb 3-1: Manufacturer: syz [ 419.889917][ T5683] usb 3-1: config 0 descriptor?? [ 419.894472][ T5683] usb 3-1: can't set config #0, error -71 [ 419.918601][ T5683] usb 3-1: USB disconnect, device number 102 [ 420.517110][T11363] openvswitch: netlink: IP tunnel dst address not specified [ 420.517148][T11363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.673414][ T5350] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 420.823315][ T5350] usb 1-1: Using ep0 maxpacket: 16 [ 420.824230][ T5350] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 420.827857][ T5350] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 420.827885][ T5350] usb 1-1: config 0 has no interface number 0 [ 420.827927][ T5350] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.827956][ T5350] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.827985][ T5350] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.828005][ T5350] usb 1-1: config 0 interface 1 has no altsetting 0 [ 420.828030][ T5350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.872685][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 420.900255][ T5350] usb 1-1: config 0 descriptor?? [ 420.936277][ T5350] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 421.171869][ T5350] elan 0003:04F3:074D.0021: failed to start in urb: -90 [ 421.241760][ T5350] elan 0003:04F3:074D.0021: Get report error for parm 6: -71 [ 421.249101][ T5350] elan 0003:04F3:074D.0021: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 421.249138][ T5350] elan 0003:04F3:074D.0021: Input device is not registered [ 421.303538][ T5350] elan 0003:04F3:074D.0021: probe with driver elan failed with error -119 [ 421.330450][ T5350] usb 1-1: USB disconnect, device number 104 [ 421.364112][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 421.364162][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 421.364185][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 421.586147][T11380] fido_id[11380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 421.691524][ T5350] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 421.842766][ T5350] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 421.845147][ T5350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 421.845172][ T5350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.845189][ T5350] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.845230][ T5350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.849329][ T5350] usb 1-1: config 0 descriptor?? [ 422.148275][T11367] IPVS: You probably need to specify IP address on multicast interface. [ 422.148331][T11367] IPVS: Error connecting to the multicast addr [ 422.221295][ T1233] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 422.257088][ T5350] usbhid 1-1:0.0: can't add hid device: -71 [ 422.257195][ T5350] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 422.285417][ T5350] usb 1-1: USB disconnect, device number 105 [ 422.371878][ T1233] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 422.374304][ T1233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 422.374349][ T1233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.374394][ T1233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.448100][ T1233] usb 5-1: config 0 descriptor?? [ 422.841221][ T25] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 422.871379][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.871417][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.871446][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.871474][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.871501][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.871529][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.871556][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.871582][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.874033][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.874446][ T1233] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 422.969258][ T1233] kovaplus 0003:1E7D:2D50.0022: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 423.021183][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 423.022274][ T25] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 423.023637][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 423.023670][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 423.023700][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 423.023726][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 423.023756][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 423.026243][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.026277][ T25] usb 3-1: Product: syz [ 423.026293][ T25] usb 3-1: Manufacturer: syz [ 423.026308][ T25] usb 3-1: SerialNumber: syz [ 423.029644][ T25] usb 3-1: config 0 descriptor?? [ 423.350263][ T1233] kovaplus 0003:1E7D:2D50.0022: couldn't init struct kovaplus_device [ 423.350323][ T1233] kovaplus 0003:1E7D:2D50.0022: couldn't install mouse [ 423.384958][ T1233] kovaplus 0003:1E7D:2D50.0022: probe with driver kovaplus failed with error -71 [ 423.405847][ T1233] usb 5-1: USB disconnect, device number 125 [ 423.442223][ T25] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 423.442278][ T25] input input56: Device does not respond to id packet M [ 423.446237][ T25] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 423.446281][ T25] input input56: Device does not respond to id packet P [ 423.447279][ T25] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 423.447329][ T25] input input56: Device does not respond to id packet B [ 423.977349][ T25] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 423.979345][ T25] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 423.979972][ T25] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 423.980931][ T25] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 424.002534][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 424.025628][ T25] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56 [ 424.063387][ T25] usb 3-1: USB disconnect, device number 103 [ 424.154761][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 424.156574][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.156602][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 424.156665][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.156744][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.228904][ T9] ims_pcu 2-1:1.0: Missing CDC union descriptor [ 424.228962][ T9] ims_pcu 2-1:1.0: probe with driver ims_pcu failed with error -22 [ 424.531227][ T25] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 424.595137][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1508'. [ 424.624684][T11436] netlink: 'syz.2.1508': attribute type 5 has an invalid length. [ 424.624707][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 424.702452][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 424.702808][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 424.702857][ T25] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 424.707343][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.707372][ T25] usb 4-1: Product: syz [ 424.707390][ T25] usb 4-1: Manufacturer: syz [ 424.707406][ T25] usb 4-1: SerialNumber: syz [ 424.766378][ T25] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 424.779888][ T25] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 424.798556][ T25] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 424.814646][ T25] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 424.830167][ T25] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 424.854083][ T9] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 424.855354][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.855380][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 424.855438][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 424.856765][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.856792][ T9] usb 1-1: SerialNumber: syz [ 424.973836][ T31] audit: type=1326 audit(1790639544.657:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.006272][ T31] audit: type=1326 audit(1790639544.657:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.046382][ T31] audit: type=1326 audit(1790639544.727:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.046441][ T31] audit: type=1326 audit(1790639544.727:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.050786][ T31] audit: type=1326 audit(1790639544.727:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.050845][ T31] audit: type=1326 audit(1790639544.727:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.050920][ T31] audit: type=1326 audit(1790639544.727:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.053728][ T31] audit: type=1326 audit(1790639544.737:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.053802][ T31] audit: type=1326 audit(1790639544.737:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.075774][ T31] audit: type=1326 audit(1790639544.737:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11422 comm="syz.3.1504" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f708139e159 code=0x7ffc0000 [ 425.266927][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1504'. [ 425.386659][T11423] ipvlan0: entered promiscuous mode [ 425.417688][T11423] ipvlan0: left promiscuous mode [ 425.536823][T11430] IPVS: Error connecting to the multicast addr [ 425.616619][ T9] usb 1-1: Can't get UAC3 power state for id 10 [ 425.636203][ T9] usb 1-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 425.757212][ T5697] usb 4-1: USB disconnect, device number 82 [ 425.818129][ T5697] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 425.848226][ T5697] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 425.882330][ T5697] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 425.907664][ T5697] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 425.923822][ T5697] keyspan 4-1:1.0: device disconnected [ 426.270886][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 426.307292][ T9] usb 1-1: USB disconnect, device number 106 [ 426.413942][ T5717] udevd[5717]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.435361][ T5697] usb 2-1: USB disconnect, device number 118 [ 426.653811][T11471] binder: 11469:11471 ioctl 400c620e 200000004e40 returned -22 [ 427.111415][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 427.252626][T11487] binder: 11483:11487 ioctl c0046209 100000000000000 returned -22 [ 427.267102][T11487] fuse: Unknown parameter './cgroup.cpu/memory.limit_in_bytes' [ 427.286796][T11492] sctp: [Deprecated]: syz.0.1520 (pid 11492) Use of int in max_burst socket option deprecated. [ 427.286796][T11492] Use struct sctp_assoc_value instead [ 427.467586][T11496] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 427.504856][T11496] bond3 (unregistering): Released all slaves [ 427.581534][ T5697] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 427.736245][ T5697] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 427.737666][ T5697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 427.737693][ T5697] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 427.771009][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.771030][ T5697] usb 3-1: Product: syz [ 427.771041][ T5697] usb 3-1: Manufacturer: syz [ 427.771052][ T5697] usb 3-1: SerialNumber: syz [ 427.945588][ T5683] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 428.048287][ T5697] usb 3-1: Limiting number of CPorts to U8_MAX [ 428.104323][ T5683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 428.104380][ T5683] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 428.105829][ T5683] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 428.110443][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.110461][ T5683] usb 2-1: Product: syz [ 428.110472][ T5683] usb 2-1: Manufacturer: syz [ 428.110482][ T5683] usb 2-1: SerialNumber: syz [ 428.186193][T11502] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 428.263526][ C0] usb 3-1: check_urb_status: overflow actual length is 128 [ 428.263560][ C0] usb 3-1: arpc in-urb error -75 (dropped) [ 428.375186][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1525'. [ 428.412733][T11502] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1523'. [ 428.476035][T11495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.492346][T11495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.555426][ T5697] usb 3-1: failed to set cport flags for port 0 [ 428.555588][ T5697] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 428.589855][ T5697] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 428.610033][ T5697] usb 3-1: USB disconnect, device number 104 [ 428.856048][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 429.000193][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1529'. [ 429.025850][ T5683] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.025905][ T5683] usb 2-1: MIDIStreaming interface descriptor not found [ 429.351606][ T5683] usb 2-1: USB disconnect, device number 119 [ 429.583859][T11539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1535'. [ 429.686001][T11547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1533'. [ 429.842394][T11551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1533'. [ 430.223410][ T25] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 430.393435][ T25] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 430.394946][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.400445][ T25] usb 1-1: config 0 descriptor?? [ 430.619480][ T25] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 430.902327][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 430.995084][ T25] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 430.995113][ T25] [drm] Initialized udl on minor 1 [ 430.999864][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.000352][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 431.020352][ T5350] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.059779][ T5350] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 431.059925][ T5350] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 431.084471][ T25] usb 1-1: USB disconnect, device number 107 [ 431.392460][ T5683] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 431.531534][ T5683] usb 2-1: device descriptor read/64, error -71 [ 431.764172][T11587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1545'. [ 431.792584][ T5683] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 431.908339][T11584] tipc: Resetting bearer [ 431.941938][ T5683] usb 2-1: device descriptor read/64, error -71 [ 432.055782][ T5683] usb usb2-port1: attempt power cycle [ 432.391611][ T5683] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 432.412547][ T5683] usb 2-1: device descriptor read/8, error -71 [ 432.550704][ T31] kauditd_printk_skb: 51 callbacks suppressed [ 432.550743][ T31] audit: type=1326 audit(1790639552.227:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.581641][ T31] audit: type=1326 audit(1790639552.227:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.627892][ T31] audit: type=1326 audit(1790639552.307:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.627943][ T31] audit: type=1326 audit(1790639552.307:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.627972][ T31] audit: type=1326 audit(1790639552.307:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.628000][ T31] audit: type=1326 audit(1790639552.307:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.628027][ T31] audit: type=1326 audit(1790639552.307:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.629038][ T31] audit: type=1326 audit(1790639552.307:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.629119][ T31] audit: type=1326 audit(1790639552.307:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.629165][ T31] audit: type=1326 audit(1790639552.307:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.4.1552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 432.682179][ T5683] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 432.842852][ T5683] usb 2-1: device descriptor read/8, error -71 [ 432.849140][ T5707] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 432.952067][ T5683] usb usb2-port1: unable to enumerate USB device [ 432.984104][T11613] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 432.984126][T11613] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 433.021489][ T5707] usb 1-1: Using ep0 maxpacket: 16 [ 433.022308][ T5707] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 433.024217][ T5707] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.024245][ T5707] usb 1-1: config 0 has no interface number 0 [ 433.024275][ T5707] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.024294][ T5707] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.024311][ T5707] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.024330][ T5707] usb 1-1: config 0 interface 1 has no altsetting 0 [ 433.029016][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.096739][ T5707] usb 1-1: config 0 descriptor?? [ 433.121935][ T25] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 433.130992][ T5707] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 433.282498][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 433.286401][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 433.286458][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.286484][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.286506][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 433.312716][ T25] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 433.312751][ T25] usb 5-1: Manufacturer: syz [ 433.345757][ T25] usb 5-1: config 0 descriptor?? [ 433.578397][ T5707] elan 0003:04F3:074D.0023: failed to start in urb: -90 [ 433.795557][ T25] hid_parser_main: 222 callbacks suppressed [ 433.795580][ T25] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 433.820792][ T25] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 433.976375][ T5707] elan 0003:04F3:074D.0023: Get report error for parm 6: 0 [ 434.170401][T11626] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1552'. [ 434.300895][T11627] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5628] was attempted by ""[11627] [ 434.385404][ T5623] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 434.385631][ T5707] elan 0003:04F3:074D.0023: Get report error for parm 7: 0 [ 434.590470][ T5707] elan 0003:04F3:074D.0023: Set report error for parm 8: -71 [ 434.607730][ T5707] elan 0003:04F3:074D.0023: hidraw1: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 434.607768][ T5707] elan 0003:04F3:074D.0023: Input device is not registered [ 434.632590][ T5707] elan 0003:04F3:074D.0023: probe with driver elan failed with error -119 [ 434.653706][ T5707] usb 1-1: USB disconnect, device number 108 [ 434.848470][T11647] fido_id[11647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 435.233493][ T25] usb 5-1: reset high-speed USB device number 126 using dummy_hcd [ 435.361278][ T25] usb 5-1: device descriptor read/64, error -32 [ 435.601187][ T25] usb 5-1: reset high-speed USB device number 126 using dummy_hcd [ 435.821709][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'. [ 435.822514][T11673] PKCS7: Unsupported SignerInfo version [ 436.111308][ T1233] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 436.263301][ T1233] usb 1-1: Using ep0 maxpacket: 32 [ 436.264096][ T1233] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 436.266551][ T1233] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 436.266568][ T1233] usb 1-1: config 128 has no interfaces? [ 436.266608][ T1233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.375881][ T5350] usb 5-1: USB disconnect, device number 126 [ 436.851873][ T9] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 437.014619][ T9] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 437.020051][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.020126][ T9] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 437.020151][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 437.072642][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.072673][ T9] usb 5-1: Product: syz [ 437.072691][ T9] usb 5-1: Manufacturer: syz [ 437.072708][ T9] usb 5-1: SerialNumber: syz [ 437.592824][ C0] usb 5-1: received EP1 urb->status = -2 [ 437.592881][ T9] usb 5-1: unable to init card! (ret=-110) [ 437.593307][ T9] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 437.719424][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1569'. [ 438.266758][T11726] FAULT_INJECTION: forcing a failure. [ 438.266758][T11726] name failslab, interval 1, probability 0, space 0, times 0 [ 438.266813][T11726] CPU: 0 UID: 0 PID: 11726 Comm: syz.1.1578 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.266835][T11726] Tainted: [L]=SOFTLOCKUP [ 438.266841][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.266879][T11726] Call Trace: [ 438.266893][T11726] [ 438.266903][T11726] dump_stack_lvl+0xe8/0x150 [ 438.266940][T11726] should_fail_ex+0x410/0x560 [ 438.266973][T11726] should_failslab+0xa8/0x100 [ 438.266997][T11726] __kvmalloc_node_noprof+0x176/0x820 [ 438.267038][T11726] ? nf_hook_entries_grow+0x287/0x740 [ 438.267065][T11726] ? nf_hook_entries_grow+0x287/0x740 [ 438.267100][T11726] nf_hook_entries_grow+0x287/0x740 [ 438.267144][T11726] nf_hook_entries_insert_raw+0x4b/0x320 [ 438.267164][T11726] ? net_generic+0x1e/0x240 [ 438.267223][T11726] nf_nat_register_fn+0x1d6/0x5e0 [ 438.267265][T11726] nf_nat_inet_register_fn+0x6c/0x110 [ 438.267290][T11726] nf_tables_newchain+0x2384/0x28b0 [ 438.267313][T11726] ? __lock_acquire+0x747/0x2de0 [ 438.267359][T11726] ? __pfx_nf_tables_newchain+0x10/0x10 [ 438.267426][T11726] ? nfnl_pernet+0x23/0x240 [ 438.267466][T11726] ? __nla_parse+0x40/0x60 [ 438.267508][T11726] nfnetlink_rcv+0x1288/0x28c0 [ 438.267576][T11726] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 438.267654][T11726] ? lock_acquire+0x115/0x350 [ 438.267689][T11726] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.267720][T11726] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.267750][T11726] netlink_unicast+0x7bd/0x940 [ 438.267797][T11726] netlink_sendmsg+0x813/0xb40 [ 438.267832][T11726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.267873][T11726] ? apparmor_socket_sendmsg+0x98/0x360 [ 438.267902][T11726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.267925][T11726] sock_sendmsg_nosec+0x13a/0x180 [ 438.267956][T11726] ____sys_sendmsg+0x54e/0x850 [ 438.267996][T11726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.268038][T11726] ? import_iovec+0x73/0xa0 [ 438.268076][T11726] ___sys_sendmsg+0x2a5/0x360 [ 438.268108][T11726] ? __lock_acquire+0x747/0x2de0 [ 438.268138][T11726] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.268210][T11726] ? __fget_files+0x2a/0x420 [ 438.268234][T11726] ? __fget_files+0x3a2/0x420 [ 438.268280][T11726] __x64_sys_sendmsg+0x1b1/0x290 [ 438.268318][T11726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.268374][T11726] do_syscall_64+0x166/0x520 [ 438.268397][T11726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.268414][T11726] ? clear_bhb_loop+0x70/0xc0 [ 438.268454][T11726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.268476][T11726] RIP: 0033:0x7f1ef9d9e159 [ 438.268522][T11726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.268537][T11726] RSP: 002b:00007f1efacb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.268554][T11726] RAX: ffffffffffffffda RBX: 00007f1efa025fa0 RCX: 00007f1ef9d9e159 [ 438.268566][T11726] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 438.268593][T11726] RBP: 00007f1efacb2090 R08: 0000000000000000 R09: 0000000000000000 [ 438.268610][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.268623][T11726] R13: 00007f1efa026038 R14: 00007f1efa025fa0 R15: 00007f1efa14fa48 [ 438.268659][T11726] [ 438.805299][ T31] kauditd_printk_skb: 70 callbacks suppressed [ 438.805320][ T31] audit: type=1326 audit(1790639558.487:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.805542][ T31] audit: type=1326 audit(1790639558.487:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.805593][ T31] audit: type=1326 audit(1790639558.487:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.806892][ T31] audit: type=1326 audit(1790639558.487:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.807401][ T31] audit: type=1326 audit(1790639558.487:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.807452][ T31] audit: type=1326 audit(1790639558.487:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.808482][ T31] audit: type=1326 audit(1790639558.487:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.808574][ T31] audit: type=1326 audit(1790639558.487:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.808799][ T31] audit: type=1326 audit(1790639558.487:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 438.808856][ T31] audit: type=1326 audit(1790639558.487:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.1.1579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef9d9e159 code=0x7ffc0000 [ 439.159836][ T1233] usb 1-1: string descriptor 0 read error: -71 [ 439.166829][ T1233] usb 1-1: USB disconnect, device number 109 [ 439.447024][T11747] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 439.492702][ T5707] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 439.653997][ T5707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 439.654093][ T5707] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 439.655614][ T5707] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.655638][ T5707] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.656046][ T25] usb 5-1: USB disconnect, device number 127 [ 439.660738][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.660765][ T5707] usb 3-1: Product: syz [ 439.660782][ T5707] usb 3-1: Manufacturer: syz [ 439.660800][ T5707] usb 3-1: SerialNumber: syz [ 439.682181][ T1233] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 439.780509][ T5707] usb 3-1: selecting invalid altsetting 1 [ 439.789576][ T5707] usb 3-1: unit 6 not found! [ 439.836332][ T1233] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 439.837803][ T1233] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 439.837832][ T1233] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 439.837853][ T1233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 439.837898][ T1233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 439.837926][ T1233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 439.845276][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 439.845350][ T1233] usb 4-1: Product: syz [ 439.845400][ T1233] usb 4-1: Manufacturer: syz [ 439.868641][T11757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.879028][T11757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.927025][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.927250][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.938636][ T1233] cdc_wdm 4-1:1.0: skipping garbage [ 439.938693][ T1233] cdc_wdm 4-1:1.0: skipping garbage [ 439.983639][ T1233] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 439.983664][ T1233] cdc_wdm 4-1:1.0: Unknown control protocol [ 440.141533][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 440.271435][ T25] usb 5-1: device descriptor read/64, error -71 [ 440.378778][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.379384][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.511256][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 440.563577][T11771] FAULT_INJECTION: forcing a failure. [ 440.563577][T11771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.563612][T11771] CPU: 1 UID: 0 PID: 11771 Comm: syz.0.1588 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.563636][T11771] Tainted: [L]=SOFTLOCKUP [ 440.563656][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.563672][T11771] Call Trace: [ 440.563681][T11771] [ 440.563691][T11771] dump_stack_lvl+0xe8/0x150 [ 440.563728][T11771] should_fail_ex+0x410/0x560 [ 440.563767][T11771] _copy_from_user+0x2d/0xb0 [ 440.563792][T11771] ___sys_sendmsg+0x1c6/0x360 [ 440.563837][T11771] ? __lock_acquire+0x747/0x2de0 [ 440.563867][T11771] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.563928][T11771] ? __fget_files+0x2a/0x420 [ 440.563952][T11771] ? __fget_files+0x3a2/0x420 [ 440.564007][T11771] __x64_sys_sendmsg+0x1b1/0x290 [ 440.564043][T11771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.564088][T11771] do_syscall_64+0x166/0x520 [ 440.564122][T11771] ? trace_irq_disable+0x3b/0x140 [ 440.564148][T11771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.564172][T11771] ? clear_bhb_loop+0x70/0xc0 [ 440.564201][T11771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.564223][T11771] RIP: 0033:0x7f6b43f9e159 [ 440.564243][T11771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.564262][T11771] RSP: 002b:00007f6b44dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.564288][T11771] RAX: ffffffffffffffda RBX: 00007f6b44225fa0 RCX: 00007f6b43f9e159 [ 440.564306][T11771] RDX: 00000000240008c4 RSI: 0000200000000180 RDI: 0000000000000003 [ 440.564321][T11771] RBP: 00007f6b44dff090 R08: 0000000000000000 R09: 0000000000000000 [ 440.564336][T11771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.564350][T11771] R13: 00007f6b44226038 R14: 00007f6b44225fa0 R15: 00007f6b4434fa48 [ 440.564383][T11771] [ 440.642590][ T25] usb 5-1: device descriptor read/64, error -71 [ 440.752519][ T25] usb usb5-port1: attempt power cycle [ 441.050765][T11780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'. [ 441.101203][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 441.123939][ T25] usb 5-1: device descriptor read/8, error -71 [ 441.149011][T11778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.150878][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.153157][T11778] tipc: Resetting bearer [ 441.173049][T11778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.200482][T11782] xt_hl: Unknown Hop Limit match mode: 206 [ 441.254651][T11778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.254713][T11778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.259772][T11778] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 441.266549][T11778] veth1_vlan: left promiscuous mode [ 441.270937][T11778] veth0_vlan: left promiscuous mode [ 441.277555][T11778] veth0_vlan: entered promiscuous mode [ 441.310709][T11778] veth1_vlan: entered promiscuous mode [ 441.338699][T11778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.340393][T11778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.353004][T11778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.362953][T11778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.362975][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 441.369115][T11778] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 441.369139][T11778] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 441.395413][ T25] usb 5-1: device descriptor read/8, error -71 [ 441.451302][ T1233] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 441.501589][ T25] usb usb5-port1: unable to enumerate USB device [ 441.543296][ T5707] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 441.548385][ T5707] usb 3-1: USB disconnect, device number 105 [ 441.598088][ T8957] udevd[8957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.623093][ T1233] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 441.624674][ T1233] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 441.624802][ T1233] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 441.624846][ T1233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.631918][T11782] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 441.684558][ T1233] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 441.864773][ T1233] usb 2-1: USB disconnect, device number 124 [ 442.281483][ T25] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 442.368875][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'. [ 442.369704][T11795] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1596'. [ 442.432814][ T25] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 442.435681][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.435705][ T25] usb 1-1: config 0 has no interface number 0 [ 442.439825][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.439850][ T25] usb 1-1: Product: syz [ 442.439865][ T25] usb 1-1: Manufacturer: syz [ 442.439881][ T25] usb 1-1: SerialNumber: syz [ 442.495801][ T25] usb 1-1: config 0 descriptor?? [ 442.509966][ T25] usb 1-1: selecting invalid altsetting 1 [ 442.528799][ T25] dvb_ttusb_budget: ttusb_init_controller: error [ 442.528820][ T25] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 442.564257][ T1233] usb 4-1: USB disconnect, device number 83 [ 442.634938][ T25] DVB: Unable to find symbol stv0299_attach() [ 442.701981][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.704401][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.707904][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.727994][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.739488][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.743538][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.767261][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.767848][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.787248][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.800924][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.888069][ T25] DVB: Unable to find symbol tda8083_attach() [ 442.888081][ T25] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 443.006187][ T5683] usb 1-1: USB disconnect, device number 110 [ 443.157542][T11799] syz.3.1597 (11799): drop_caches: 2 [ 443.245690][T11811] random: crng reseeded on system resumption [ 443.294331][T11811] fuse: Bad value for 'fd' [ 443.297540][T11801] syz.3.1597 (11801): drop_caches: 2 [ 443.453406][T11816] netlink: 'syz.2.1602': attribute type 7 has an invalid length. [ 443.453431][T11816] netlink: 'syz.2.1602': attribute type 8 has an invalid length. [ 443.561956][ T5683] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 443.701343][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 443.732889][ T5683] usb 5-1: not running at top speed; connect to a high speed hub [ 443.732927][ T5683] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 443.734308][ T5683] usb 5-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 443.736206][ T5683] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 443.736232][ T5683] usb 5-1: Product: syz [ 443.736248][ T5683] usb 5-1: Manufacturer: syz [ 443.794300][ T5683] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 443.861783][ T5697] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 443.894290][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.900342][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.900391][ T9] usb 3-1: Product: syz [ 443.900434][ T9] usb 3-1: Manufacturer: syz [ 443.900452][ T9] usb 3-1: SerialNumber: syz [ 443.961887][ T5683] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 443.962546][ T5683] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 443.962606][ T5683] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 443.963364][ T5683] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 444.014789][ T5683] usb 5-1: USB disconnect, device number 6 [ 444.029404][ T5697] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 444.046213][ T8957] udevd[8957]: setting mode of /dev/bus/usb/005/006 to 020664 failed: No such file or directory [ 444.046341][ T8957] udevd[8957]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory [ 444.050671][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.050699][ T5697] usb 4-1: Product: syz [ 444.050717][ T5697] usb 4-1: Manufacturer: syz [ 444.050734][ T5697] usb 4-1: SerialNumber: syz [ 444.102376][ T5697] usb 4-1: config 0 descriptor?? [ 444.147301][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.147846][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.188982][ T12] IPVS: starting estimator thread 0... [ 444.205908][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 444.205997][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 444.206022][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 444.246192][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 444.265776][ T9] usb 3-1: USB disconnect, device number 106 [ 444.315603][T11828] IPVS: Scheduler module ip_vs_mh not found [ 444.315785][T11829] IPVS: using max 27 ests per chain, 64800 per kthread [ 444.374605][ T5697] usb 4-1: ignoring: probably an ADSL modem [ 444.394116][ T5350] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 444.463728][T11836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1607'. [ 444.541412][ T5350] usb 1-1: Using ep0 maxpacket: 32 [ 444.542021][ T5350] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 444.545675][ T5350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.545698][ T5350] usb 1-1: Product: syz [ 444.545712][ T5350] usb 1-1: Manufacturer: syz [ 444.545726][ T5350] usb 1-1: SerialNumber: syz [ 444.548503][ T5350] usb 1-1: config 0 descriptor?? [ 444.594088][ T5697] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 444.606263][ T5350] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 444.615626][ T5697] usb 4-1: USB disconnect, device number 84 [ 444.763603][ T1233] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 444.911449][ T1233] usb 2-1: Using ep0 maxpacket: 8 [ 444.917959][ T1233] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 444.937181][ T1233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.937202][ T1233] usb 2-1: Product: syz [ 444.937214][ T1233] usb 2-1: Manufacturer: syz [ 444.937225][ T1233] usb 2-1: SerialNumber: syz [ 444.940207][ T1233] usb 2-1: config 0 descriptor?? [ 445.101456][ T5697] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 445.188696][ T1233] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 445.254315][ T5697] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 445.255314][ T5697] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 445.255339][ T5697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.255358][ T5697] usb 5-1: config 0 has no interface number 0 [ 445.255398][ T5697] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 445.255425][ T5697] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 445.255452][ T5697] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.255479][ T5697] usb 5-1: config 0 interface 52 has no altsetting 0 [ 445.260598][ T5697] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 445.260625][ T5697] usb 5-1: Product: syz [ 445.260641][ T5697] usb 5-1: Manufacturer: syz [ 445.260658][ T5697] usb 5-1: SerialNumber: syz [ 445.305286][ T5697] usb 5-1: config 0 descriptor?? [ 445.568190][ T5697] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input60 [ 445.621953][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 445.774236][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 445.775933][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.799852][ T25] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 445.838971][ T9] usb 3-1: config 0 descriptor?? [ 445.848813][ T9] cp210x 3-1:0.0: cp210x converter detected [ 445.891493][ T5697] usb 5-1: USB disconnect, device number 7 [ 445.891593][ C0] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 445.975732][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 445.997349][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.997426][ T25] usb 4-1: Product: syz [ 445.997444][ T25] usb 4-1: Manufacturer: syz [ 445.997456][ T25] usb 4-1: SerialNumber: syz [ 446.082942][ T30] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 446.257777][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 446.292001][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 446.371582][ T5350] gspca_topro: reg_r err -110 [ 446.371611][ T5350] gspca_topro: Sensor soi763a [ 446.650094][ T1233] usb write operation failed. (-71) [ 446.672987][ T1233] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 446.673793][ T1233] dvbdev: DVB: registering new adapter (Terratec H7) [ 446.673844][ T1233] usb 2-1: media controller created [ 446.762903][ T1233] usb read operation failed. (-71) [ 446.765220][ T1233] usb write operation failed. (-71) [ 446.793838][ T1233] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 446.816280][ T1233] usb 2-1: USB disconnect, device number 125 [ 446.853951][ T9] usb 4-1: USB disconnect, device number 85 [ 446.889982][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.906149][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.001276][ T5350] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 447.152198][ T5350] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 447.153234][ T5350] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 447.153257][ T5350] usb 5-1: config 0 has no interface number 0 [ 447.153294][ T5350] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.153318][ T5350] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.153351][ T5350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.157255][ T5350] usb 5-1: config 0 descriptor?? [ 447.208610][ T30] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 447.209135][ T30] ath9k_htc: Failed to initialize the device [ 447.234405][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 447.267838][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 447.613804][ T5350] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 447.613832][ T5350] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 447.613852][ T5350] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 447.613870][ T5350] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 447.613888][ T5350] uclogic 0003:5543:0522.0025: unknown main item tag 0x0 [ 447.669641][ T5350] uclogic 0003:5543:0522.0025: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input17 [ 447.809676][T11864] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1615'. [ 447.839351][ T30] usb 5-1: USB disconnect, device number 8 [ 447.917582][T11884] fido_id[11884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 447.992166][ T1233] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 448.157540][ T1233] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 448.171015][ T1233] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.197175][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 448.197196][ T1233] usb 4-1: Product: syz [ 448.197207][ T1233] usb 4-1: Manufacturer: syz [ 448.197218][ T1233] usb 4-1: SerialNumber: syz [ 448.448320][ T1233] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 448.578529][ T1233] usb 1-1: USB disconnect, device number 111 [ 448.671909][ T31] kauditd_printk_skb: 100 callbacks suppressed [ 448.671931][ T31] audit: type=1326 audit(1790639568.347:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.671982][ T31] audit: type=1326 audit(1790639568.347:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.765139][ T31] audit: type=1326 audit(1790639568.447:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.765326][ T31] audit: type=1326 audit(1790639568.447:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.785021][ T31] audit: type=1326 audit(1790639568.457:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.785224][ T31] audit: type=1326 audit(1790639568.457:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.809390][ T31] audit: type=1326 audit(1790639568.457:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.821879][ T31] audit: type=1326 audit(1790639568.497:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.822035][ T31] audit: type=1326 audit(1790639568.497:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 448.826899][ T31] audit: type=1326 audit(1790639568.507:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.4.1620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f373e79e159 code=0x7ffc0000 [ 449.089609][ T30] usb 3-1: USB disconnect, device number 107 [ 449.117449][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 449.140351][ T30] cp210x 3-1:0.0: device disconnected [ 451.188241][ T5697] usb 4-1: USB disconnect, device number 86 [ 451.202061][ T5697] usblp0: removed [ 451.318050][T11940] pim6reg: entered allmulticast mode [ 451.341745][ T9] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 451.481613][ T9] usb 1-1: device descriptor read/64, error -71 [ 451.601554][ T5682] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 451.662117][ T5697] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 451.721684][ T9] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 451.722354][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 451.722380][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 451.763020][ T5682] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 451.765752][ T5682] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.765799][ T5682] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.765843][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.816496][ T5697] usb 4-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40 [ 451.817999][ T5697] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 451.818043][ T5697] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 451.820648][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.820674][ T5697] usb 4-1: Product: syz [ 451.820691][ T5697] usb 4-1: Manufacturer: syz [ 451.820707][ T5697] usb 4-1: SerialNumber: syz [ 451.862852][ T9] usb 1-1: device descriptor read/64, error -71 [ 451.972314][ T9] usb usb1-port1: attempt power cycle [ 452.130048][T11949] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 452.166976][T11951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.169996][T11951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.224713][T11925] raw-gadget.2 gadget.2: fail, usb_ep_set_halt returned -11 [ 452.226485][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 452.226615][T11925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.311959][ T9] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 452.342527][ T9] usb 1-1: device descriptor read/8, error -71 [ 452.469708][T11925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.591382][ T9] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 452.613051][ T9] usb 1-1: device descriptor read/8, error -71 [ 452.654217][ T5350] usb 3-1: USB disconnect, device number 108 [ 452.731544][ T9] usb usb1-port1: unable to enumerate USB device [ 453.081351][ T1233] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 453.231474][ T1233] usb 2-1: Using ep0 maxpacket: 8 [ 453.238115][ T1233] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 453.253346][ T1233] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 453.253405][ T1233] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.253433][ T1233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.253664][ T1233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.253690][ T1233] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.253730][ T1233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.487586][ T1233] usb 2-1: usb_control_msg returned -32 [ 453.487640][ T1233] usbtmc 2-1:16.0: can't read capabilities [ 453.578694][ T1233] usb 2-1: USB disconnect, device number 126 [ 453.810021][T11966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1638'. [ 454.161823][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 454.264478][T11973] loop5: detected capacity change from 0 to 7 [ 454.299311][T11973] Dev loop5: unable to read RDB block 7 [ 454.299349][T11973] loop5: AHDI p2 p4 [ 454.299372][T11973] loop5: partition table partially beyond EOD, truncated [ 454.300312][T11973] loop5: p4 start 254 is beyond EOD, truncated [ 454.331526][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 454.333918][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 454.335922][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 454.335950][ T9] usb 5-1: config 0 has no interface number 0 [ 454.336023][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 454.340295][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.340322][ T9] usb 5-1: Product: syz [ 454.340340][ T9] usb 5-1: Manufacturer: syz [ 454.340356][ T9] usb 5-1: SerialNumber: syz [ 454.420666][ T9] usb 5-1: config 0 descriptor?? [ 454.565401][ T5697] usb 4-1: cannot setup if 1: error -71 [ 454.565948][ T5697] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 454.588939][T11951] pim6reg: left allmulticast mode [ 454.625168][T11982] sctp: [Deprecated]: syz.1.1642 (pid 11982) Use of int in max_burst socket option. [ 454.625168][T11982] Use struct sctp_assoc_value instead [ 454.628925][ T5697] usb 4-1: cannot setup if 1: error -71 [ 454.657779][ T5697] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 454.699155][T11982] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 454.717735][ T5697] usb 4-1: cannot setup if 1: error -71 [ 454.993035][ T5697] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 455.029214][ T5697] usb 4-1: USB disconnect, device number 87 [ 455.165569][ T8957] udevd[8957]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.391796][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 455.391832][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 455.684749][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 455.684774][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 455.684789][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 455.684802][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 455.685003][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 455.750230][ T9] usb 5-1: USB disconnect, device number 9 [ 456.072042][ T5697] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 456.235480][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 456.239836][ T5697] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 456.263564][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.263601][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 456.263646][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.268880][ T5697] usb 3-1: config 0 descriptor?? [ 456.632306][T12014] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1651'. [ 456.760336][T12014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.777060][ T5697] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0026/input/input62 [ 456.803055][T12014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.806280][ T5697] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 456.835536][T12014] bond0 (unregistering): Released all slaves [ 456.945696][ T5350] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 457.001034][T12000] loop5: detected capacity change from 0 to 7 [ 457.002177][T12000] Dev loop5: unable to read RDB block 7 [ 457.002213][T12000] loop5: AHDI p1 [ 457.002235][T12000] loop5: partition table partially beyond EOD, truncated [ 457.071974][ T5350] usb 5-1: device descriptor read/64, error -71 [ 457.311235][ T5350] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 457.335512][ T5697] usb 3-1: USB disconnect, device number 109 [ 457.441546][ T5350] usb 5-1: device descriptor read/64, error -71 [ 457.562023][ T5350] usb usb5-port1: attempt power cycle [ 457.921262][ T5350] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 457.944232][ T5350] usb 5-1: device descriptor read/8, error -71 [ 458.181607][ T5350] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 458.202519][ T5350] usb 5-1: device descriptor read/8, error -71 [ 458.311860][ T5350] usb usb5-port1: unable to enumerate USB device [ 458.445240][T12043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.662673][ T5719] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 458.826994][ T5719] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 458.868247][ T5719] usb 2-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 458.868276][ T5719] usb 2-1: config 249 has 0 interfaces, different from the descriptor's value: 1 [ 458.910004][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.910034][ T5719] usb 2-1: Product: syz [ 458.910085][ T5719] usb 2-1: Manufacturer: syz [ 458.910102][ T5719] usb 2-1: SerialNumber: syz [ 458.937972][ T5719] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 458.937992][ T5719] usb 2-1: no configuration chosen from 1 choice [ 459.126193][ T31] kauditd_printk_skb: 138 callbacks suppressed [ 459.126209][ T31] audit: type=1800 audit(1790639578.807:1224): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1659" name="bus" dev="tmpfs" ino=1736 res=0 errno=0 [ 459.298546][T12068] tipc: Can't bind to reserved service type 1 [ 460.331251][ T5719] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 460.382488][ T31] audit: type=1326 audit(1790639580.067:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.4.1666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f373e79e159 code=0x0 [ 460.481960][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 460.482973][ T5719] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 460.485770][ T5719] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 460.485803][ T5719] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.485831][ T5719] usb 1-1: config 0 interface 0 has no altsetting 0 [ 460.485878][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.538835][ T5719] usb 1-1: config 0 descriptor?? [ 460.850519][T12096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1668'. [ 460.862782][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 460.900467][ T9] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.015809][ T1233] usb 2-1: USB disconnect, device number 127 [ 461.210651][T12100] fido_id[12100]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 461.405825][ T5719] hid-alps 0003:044E:120B.0028: failed read register (-32) [ 461.405969][ T5719] hid-alps 0003:044E:120B.0028: failed U1_DEV_CTRL_1 (-32) [ 461.444579][ T5719] hid-alps 0003:044E:120B.0028: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 461.500606][T12112] dlm: plock device version mismatch: kernel (1.2.0), user (1.512.0) [ 461.781250][ T5719] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 461.912567][ T5719] usb 3-1: device descriptor read/64, error -71 [ 462.151844][ T5719] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 462.281410][ T5719] usb 3-1: device descriptor read/64, error -71 [ 462.331579][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 462.392653][ T5719] usb usb3-port1: attempt power cycle [ 462.416582][T12141] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 462.482644][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 462.483405][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 462.486240][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.486266][ T9] usb 2-1: config 0 has no interface number 0 [ 462.486307][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.486349][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.545014][ T9] usb 2-1: config 0 descriptor?? [ 462.566619][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 462.731482][ T5719] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 462.754222][ T5719] usb 3-1: device descriptor read/8, error -71 [ 462.991332][ T5719] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 463.020263][ T5719] usb 3-1: device descriptor read/8, error -71 [ 463.103338][ T1233] usb 1-1: USB disconnect, device number 116 [ 463.123858][ T5719] usb usb3-port1: unable to enumerate USB device [ 463.846283][ T9] usb 2-1: USB disconnect, device number 2 [ 464.281480][ T5697] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 464.434960][ T5697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 464.435014][ T5697] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 464.440069][ T5697] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 464.440096][ T5697] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 464.440118][ T5697] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.440153][ T5697] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 464.504263][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.504302][ T5697] usb 5-1: Product: syz [ 464.504320][ T5697] usb 5-1: Manufacturer: syz [ 464.504335][ T5697] usb 5-1: SerialNumber: syz [ 464.765782][ T5697] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 464.792061][ T5697] usb 5-1: USB disconnect, device number 14 [ 465.043791][T12212] netlink: 'syz.3.1686': attribute type 29 has an invalid length. [ 465.046965][T12209] netlink: 'syz.3.1686': attribute type 29 has an invalid length. [ 465.431611][ T5697] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 465.596581][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 465.597286][ T5697] usb 2-1: not running at top speed; connect to a high speed hub [ 465.597310][ T5697] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 465.599969][ T5697] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.599993][ T5697] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.655743][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.655775][ T5697] usb 2-1: Product: syz [ 465.655792][ T5697] usb 2-1: Manufacturer: syz [ 465.655808][ T5697] usb 2-1: SerialNumber: syz [ 465.656349][T12224] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 465.656749][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1690'. [ 466.649378][T12235] netlink: 'syz.2.1693': attribute type 2 has an invalid length. [ 466.674393][ T5697] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 466.693795][ T5697] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 466.698419][ T5697] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 466.905895][ T5697] usb 2-1: USB disconnect, device number 3 [ 467.155140][ T8957] udevd[8957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.318427][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'. [ 467.743752][T12259] ip6t_rpfilter: unknown options [ 467.847571][ T5623] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 468.471881][ T1233] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 468.622495][ T1233] usb 3-1: Using ep0 maxpacket: 16 [ 468.623247][ T1233] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.627281][ T1233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.627317][ T1233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.627333][ T1233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 468.627363][ T1233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.645617][ T1233] usb 3-1: config 0 descriptor?? [ 469.171226][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 469.171744][ T1233] microsoft 0003:045E:07DA.0029: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 469.334310][ T9] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 469.335835][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.338870][ T9] usb 4-1: config 0 descriptor?? [ 469.370906][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 469.387480][T12142] syz.3.1675 (12142) used greatest stack depth: 18752 bytes left [ 469.757816][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 469.760600][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 469.760618][ T9] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 469.793217][ T9] usb 4-1: USB disconnect, device number 88 [ 469.948136][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 470.218470][ T5350] usb 3-1: USB disconnect, device number 114 [ 470.981496][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 471.144661][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 471.147444][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 471.147473][ T9] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 471.147510][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 471.157537][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.157565][ T9] usb 2-1: Product: syz [ 471.157580][ T9] usb 2-1: Manufacturer: syz [ 471.157596][ T9] usb 2-1: SerialNumber: syz [ 471.422232][ T9] uvcvideo 2-1:220.0: Found Unit with invalid ID 0 [ 471.426418][ T9] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22 [ 471.454072][ T9] usb 2-1: USB disconnect, device number 4 [ 471.719110][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 472.950204][T12357] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 473.283014][T12362] veth1_to_bond: entered promiscuous mode [ 473.415862][T12362] veth1_to_bond: entered allmulticast mode [ 473.481364][ T5350] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 473.901858][ T5697] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 474.005832][ T5350] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.061864][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 474.065479][ T5697] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 474.112377][ T5350] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.112443][ T5350] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.112496][ T5350] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 474.112524][ T5350] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.311378][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.311412][ T5350] usb 2-1: Product: syz [ 474.311430][ T5350] usb 2-1: Manufacturer: syz [ 474.311447][ T5350] usb 2-1: SerialNumber: syz [ 474.366276][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.366306][ T5697] usb 1-1: Product: syz [ 474.366323][ T5697] usb 1-1: Manufacturer: syz [ 474.366340][ T5697] usb 1-1: SerialNumber: syz [ 474.368609][T12356] veth1_to_bond: left allmulticast mode [ 474.368669][T12356] veth1_to_bond: left promiscuous mode [ 474.621841][ T5350] cdc_mbim 2-1:1.0: skipping garbage [ 474.715378][ T5697] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 474.765581][ T5697] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 474.769146][ T5697] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 474.769239][ T5697] usb 1-1: media controller created [ 474.879518][T12359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.983215][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.401274][ T5697] zl10353_read_register: readreg error (reg=127, ret==-71) [ 475.510142][T12359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.617895][ T5697] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 475.779804][ T5697] usb 1-1: USB disconnect, device number 117 [ 476.587088][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.600194][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.824898][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.631297][ T5682] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 479.914761][T12359] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 480.495596][ T5350] cdc_mbim 2-1:1.0: bind() failure [ 481.085797][ T5682] usb 1-1: device descriptor read/all, error -71 [ 481.106096][ T5350] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 481.184488][ T5350] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 481.244500][ T5350] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 481.301214][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 481.416827][ T5350] usb 2-1: USB disconnect, device number 5 [ 481.481323][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 481.860828][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 481.921915][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 481.921966][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.186277][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.186309][ T9] usb 5-1: Product: syz [ 482.186326][ T9] usb 5-1: Manufacturer: syz [ 482.186342][ T9] usb 5-1: SerialNumber: syz [ 482.316968][ T9] usb 5-1: config 0 descriptor?? [ 482.348154][ T9] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 482.348525][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 482.348596][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 482.386691][ T9] keyspan 5-1:0.0: unsupported endpoint type 0 [ 482.386818][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 482.426164][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 482.426269][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 482.426356][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 482.428286][ T9] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 482.712433][T12383] tipc: Started in network mode [ 482.712475][T12383] tipc: Node identity , cluster identity 4711 [ 482.712492][T12383] tipc: Failed to obtain node identity [ 482.712517][T12383] tipc: Enabling of bearer rejected, failed to enable media [ 483.968232][ T9] wacom 0003:056A:003F.002A: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 484.461328][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 484.628409][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 484.628465][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 484.656556][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 484.683390][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.683419][ T9] usb 1-1: Product: syz [ 484.683436][ T9] usb 1-1: Manufacturer: syz [ 484.683453][ T9] usb 1-1: SerialNumber: syz [ 484.761989][T12401] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 484.866743][T12407] macvlan2: entered promiscuous mode [ 484.866767][T12407] erspan0: entered promiscuous mode [ 484.914820][T12407] erspan0: left promiscuous mode [ 484.955011][T12402] fido_id[12402]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 485.015515][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.020477][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.253490][ T5707] usb 5-1: USB disconnect, device number 15 [ 485.300712][ T5707] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 485.336924][ T5707] keyspan 5-1:0.0: device disconnected [ 486.141862][ T5707] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 486.475883][ T5707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 486.475965][ T5707] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 486.627480][ T5707] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 486.627513][ T5707] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 486.627536][ T5707] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 486.627560][ T5707] usb 4-1: config 129 has no interface number 0 [ 486.627606][ T5707] usb 4-1: config 129 has no interface number 1 [ 486.627660][ T5707] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 486.627691][ T5707] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 486.627764][ T5707] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 486.627795][ T5707] usb 4-1: config 129 interface 135 has no altsetting 0 [ 486.627817][ T5707] usb 4-1: config 129 interface 5 has no altsetting 0 [ 487.875958][ T5707] usb 4-1: string descriptor 0 read error: -22 [ 487.876129][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.090476][ T5707] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.090640][ T5707] usb 4-1: MIDIStreaming interface descriptor not found [ 489.376906][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.376945][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 489.435499][ T5707] usb 4-1: USB disconnect, device number 89 [ 490.547995][ T9] usb 1-1: USB disconnect, device number 120 [ 492.004683][ T8949] udevd[8949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 492.710607][T12462] loop5: detected capacity change from 0 to 7 [ 492.728135][T12462] Dev loop5: unable to read RDB block 7 [ 492.728265][T12462] loop5: AHDI p1 p2 p3 [ 492.728410][T12462] loop5: partition table partially beyond EOD, truncated [ 492.728647][T12462] loop5: p1 size 16318467 extends beyond EOD, truncated [ 492.757246][T12462] loop5: p2 start 167772160 is beyond EOD, truncated [ 493.376891][T12464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.718321][ T8957] udevd[8957]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 494.447965][T12463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1749'. [ 496.231956][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 497.291714][ T5697] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 497.539374][T12493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1755'. [ 498.241706][ T5707] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 498.534343][ T5707] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.731079][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.731118][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.731144][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.731195][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.790273][ T5707] usb 4-1: config 0 descriptor?? [ 499.310717][T12510] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 499.310896][T12510] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 499.501848][ T5707] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 499.838772][ T5707] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 500.705181][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1762'. [ 502.472806][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.484689][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.917385][ C0] sched: DL replenish lagged too much [ 563.103839][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.120806][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.812978][ T4984] udevd[4984]: worker [8957] /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:047F:FFFF.002B/hidraw/hidraw0 is taking a long time [ 618.781857][ T5682] usb 4-1: reset high-speed USB device number 90 using dummy_hcd [ 624.393954][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.408483][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.478762][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 692.168408][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.181524][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.131385][ T32] INFO: task kworker/0:5:5697 blocked for more than 144 seconds. [ 720.131420][ T32] Tainted: G L syzkaller #0 [ 720.131434][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 720.131445][ T32] task:kworker/0:5 state:D stack:21160 pid:5697 tgid:5697 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 720.131513][ T32] Workqueue: usb_hub_wq hub_event [ 720.131709][ T32] Call Trace: [ 720.131754][ T32] [ 720.131832][ T32] __schedule+0x17db/0x58f0 [ 720.151491][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 720.151678][ T32] ? __pfx___schedule+0x10/0x10 [ 720.151720][ T32] ? schedule+0x90/0x2b0 [ 720.151754][ T32] schedule+0x164/0x2b0 [ 720.151788][ T32] schedule_preempt_disabled+0x13/0x30 [ 720.151818][ T32] __mutex_lock+0x7c1/0x1550 [ 720.151858][ T32] ? __mutex_lock+0x5d4/0x1550 [ 720.151896][ T32] ? hub_event+0x618/0x4d30 [ 720.170304][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 720.170360][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 720.170474][ T32] ? pm_runtime_barrier+0x140/0x1c0 [ 720.170585][ T32] hub_event+0x618/0x4d30 [ 720.170625][ T32] ? __lock_acquire+0x747/0x2de0 [ 720.170654][ T32] ? look_up_lock_class+0x57/0x110 [ 720.170710][ T32] ? register_lock_class+0x31/0x2e0 [ 720.170758][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 720.170806][ T32] ? __pfx_hub_event+0x10/0x10 [ 720.170862][ T32] ? rcu_is_watching+0x16/0xb0 [ 720.170920][ T32] ? process_scheduled_works+0x97a/0x1630 [ 720.189170][ T32] process_scheduled_works+0xc3d/0x1630 [ 720.189249][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 720.189289][ T32] ? assign_work+0x3cf/0x5d0 [ 720.189325][ T32] worker_thread+0xa47/0xfb0 [ 720.189371][ T32] ? __kthread_parkme+0x71/0x1f0