last executing test programs: 12.052739431s ago: executing program 4 (id=3602): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) (async) linkat(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) syz_usb_connect$uac2(0x3, 0x107, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x0, 0x80, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x3, 0x4b, 0x80}, [@multiply_unit={0x7, 0x24, 0xc, 0x0, 0x5, 0x1, 0x4}, @sample_rate={0xf, 0x24, 0xd, 0x5, 0x1, 0x5, [0x3, 0x3, 0x2, 0x0]}, @processing_unit={0xf, 0x24, 0x8, 0x5, 0x6, [0x0, 0x0, 0x3, 0x2, 0x0]}, @processing_unit={0x11, 0x24, 0x8, 0x1, 0x2, [0x0, 0x0, 0x2, 0x1, 0x1, 0x3]}, @extension_unit={0xc, 0x24, 0x9, 0x6, 0x4, 0x8, "9f1549159a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x2, "4a16a314"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x61b, 0x8, 0x8, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5490, 0xfffe, 0x8, 0x4a}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x5, 0x5, {0x8, 0x25, 0x1, 0x83, 0xc, 0xd, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0xe9, 0x0, 0x1, 0x0, 0x0, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x1, 0xf2, 0xf0}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0xee26, 0x23, 0x9f}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0xc, 0x0, {0x8, 0x25, 0x1, 0x0, 0xc, 0x1, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x85, 0xb1, 0x9, 0x40, 0x6}, 0x23, &(0x7f0000000240)=ANY=[@ANYBLOB="05747b8d5c9310030005006f09060003100b070b071002082a86003bac3ee8eae64217941409cbb79002e240b2dee9479139a0d45d9c7c7d64d403e1f41a6713ed4825000000"], 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x412}}]}) (async) syz_usb_connect$uac2(0x3, 0x107, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x0, 0x80, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x3, 0x4b, 0x80}, [@multiply_unit={0x7, 0x24, 0xc, 0x0, 0x5, 0x1, 0x4}, @sample_rate={0xf, 0x24, 0xd, 0x5, 0x1, 0x5, [0x3, 0x3, 0x2, 0x0]}, @processing_unit={0xf, 0x24, 0x8, 0x5, 0x6, [0x0, 0x0, 0x3, 0x2, 0x0]}, @processing_unit={0x11, 0x24, 0x8, 0x1, 0x2, [0x0, 0x0, 0x2, 0x1, 0x1, 0x3]}, @extension_unit={0xc, 0x24, 0x9, 0x6, 0x4, 0x8, "9f1549159a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x2, "4a16a314"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x61b, 0x8, 0x8, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5490, 0xfffe, 0x8, 0x4a}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x5, 0x5, {0x8, 0x25, 0x1, 0x83, 0xc, 0xd, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0xe9, 0x0, 0x1, 0x0, 0x0, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x1, 0xf2, 0xf0}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0xee26, 0x23, 0x9f}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0xc, 0x0, {0x8, 0x25, 0x1, 0x0, 0xc, 0x1, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x85, 0xb1, 0x9, 0x40, 0x6}, 0x23, &(0x7f0000000240)=ANY=[@ANYBLOB="05747b8d5c9310030005006f09060003100b070b071002082a86003bac3ee8eae64217941409cbb79002e240b2dee9479139a0d45d9c7c7d64d403e1f41a6713ed4825000000"], 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0x8, "0c844afd"}, @local=@item_012={0x2, 0x2, 0x4, '0n'}]}}, 0x0}, 0x0) 11.086234571s ago: executing program 3 (id=3607): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x0, 0x9, 0x4, 0x2, 0x1, 0x0, 0x81}}) 10.924611969s ago: executing program 3 (id=3608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0xfffffffc, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fedbdf25050000001400037404000400040005000800"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r6, 0x331, 0x70bd29, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x2801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MTU={0x8, 0x4, 0xb38}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 10.069518617s ago: executing program 4 (id=3611): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x438, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x418, 0x1, 0x0, 0x1, [@nested={0x414, 0x10, 0x0, 0x1, [@typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @nested={0x408, 0x8, 0x0, 0x1, [@nested={0xd7, 0x14a, 0x0, 0x1, [@nested={0x4, 0x6c}, @typed={0x8, 0x10c, 0x0, 0x0, @uid}, @generic="8c67a30bcaded43de927a18d3a577557148cd10c1c592d4d2d8bddbe7d1e8cf54cb4c3c108ffb6f5d29aa2773c20555926cce2977340bb4429cced67e9d054dabc21753574faf286bf1d4a8d7ad6c371859c04409b61b502c1fb6f1888b090ee692f30c2fe82c00c1f8d77324e0275f288362630b5498d181350b52131f767f21435595512eeb411226fe9296b22eada42c69cef8a9fb5882ed011f170125c138993eea7bcaa0e3568c81bea46665fdfe34821", @nested={0x4, 0xc4}, @typed={0x4, 0x93}, @nested={0x4, 0xb5}, @nested={0x4, 0x101}, @typed={0x4, 0xd8}]}, @typed={0xfd, 0x80, 0x0, 0x0, @binary="f8d033c2bb2783c7fef6958f681b19c8632cc1e37b50baf0da8f3faea9a688638bb31aa537eca0275d164cf9613bb2b9a0ac869527062ca9dcc2504ba61021be12fb02cce49d17263d9cce1a02c45357b7dd7b80766f2fbc5f1824d0bb3fe82149a14a914174b500e0469e97493b1865dbf882614f6c7d642243486fee9e1b6082d9553d07e75ae193d966258fe616a62ac1bc106d3b2929142d75d72a55606ecb9c7ae10e7f5f221b4f5046241e4dd677c3f66c6d4a3af68cd5065fce55ed3635ed19e18623f43e4942c001f3182d1c515170242b2b651df1b0bd5a87bfdf2fccf6e8f045b1f46b9f44ee086e4ca2640cf4baf29533e8b3df"}, @generic="61865fa5cc4b49519265b6e6388812e46160283d96129e916c0b491fcfbb570c482934acf779f793cbdd98eef58bba070299679ae866a07bb010627a069eaaab8500ca8d738a72fa8aae29de823cc146117bf9d895dd8dd173a21ed87d2511af6f2e495c64f7f6861880284f20ab3a0255e4fe4bb46e240ee2554269245cb24e658cf188c17a9dd895baf9deb4c7c648908fd23634d3ae863a82d80d9bbe50772e237f7b42391e289a9dacc8b37a58a050f1ffd5944cb70e34a76ccd3a4a776c67ec3978b3cc00606ec1502b75fb1eecfc41c0da4fa36fabd20dda9c070f31348faf89cf076d2704", @generic="cc6c9b838819f90a9a96c3b600a297306b7cea22b849dc014609a970efa2f6460761656dbc882747af61d16de0484f89dc07fd758ca7117a62a8acfb3135fa06dcf153afd116", @generic="92267e68fe988159fd9c01bebc1ef945bbd60f80139fb3305e0d33", @generic="4c7d1ada2e7dc5698267c7aadd4e8169f150ec22ae9aedccd06c050903d02d8ebb3fa819bab78e18361e21bb4eb13e753957718051bb8123108793f0491a3836e0cc45e2f0d24c90ad809ed11254c2665343bbd0d7ee229b38dbce972e6900dfb36ee57169e0261d5db9e741f28bef5266f15eca72", @generic="3585e18a00999d5e542b8ce82656735d75624ee5e448571f2c9a1d15405e3571c363cad72123a4a20b9d599a5bcfc181877c3435b66dcf7f58ea7ddee4391956b9f3d2d65814baa0795050f00163daffef22d3c3c018c7e48f8b5d4a16e26a14ec5b6d105e58e57d9af7e4f0e379"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x438}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120120029ee0a508f00a57d105fe0102030109021b00010700a0020904460991740dcd7bd4b2be52394b5d8701a2471f0209050210ef030e4204584713ed0e"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdfb1643af42503000000180001801400020073797a5f74756e0000000000000000000500030000000000"], 0x34}}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x84884}, 0x340488c4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0x0) 9.7951861s ago: executing program 3 (id=3613): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)={0x20, 0xb863f1de44954ad5, 0x2, 'rd'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', r2, 0x10, 0x40, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @broadcast}}}}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r3, @ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESDEC=r4], 0x0) 9.150773819s ago: executing program 2 (id=3617): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32, @ANYBLOB="019800000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x6, {0x0, 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0xc) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x60, 0x0, 0x4, {{0x3, 0x1000, 0x4381, 0x20000000000040, 0x80000001, 0x9, 0x0, 0x8005}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x4, 0xe) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000100)={'syzkaller1\x00', 0x8}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000010000000000005000000850000002f00000018000000030000000000000005000000181100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2) 8.698614114s ago: executing program 4 (id=3619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x9, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x6, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000800"], 0xa8}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) 7.998375173s ago: executing program 2 (id=3620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40025b0c, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0xa, 0x80000002}) semctl$GETZCNT(0x0, 0x0, 0x20, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="400bffeb0000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000a00)={0x2c, &(0x7f0000000480)={0x0, 0xe, 0x9f, {0x9f, 0x11, "398fff0d2787268e152b451837b7e4eb8e9ba9b506c9b9edc0f9d5bd69f50361783ff382cc3d6c0907a96a5ca1c34aac03c7e99913265dbe50eef58dcdd7b2eaaaea49a8ae6c9905f9e37941ff78549bb08be77dc50469f9188dd97ea2cdc69d128941773d72f7a164756fa5f759eb025ae898792982d63306e3fa5560f2118cca39e0df7cc794ab84f4f018f16dc58f7712121036a2f15a9610e312c2"}}, &(0x7f0000000540)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "c3f07b7a181fe5cbf9a616d9ab33a14b86ec20e5355a8763f080def2d7368375aad625f96015d2d8b1fb42365eda08d3b8d4d263960030052f998a9c1438395e66444ccf7dae386e436f92a290cad37bd996bef32425bfb79475066fc1a5ce26d89c6408f66e405144"}}, &(0x7f0000000800)={0x0, 0xf, 0xf0, {0x5, 0xf, 0xf0, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x7, 0xf0f, 0x8}, @generic={0xc8, 0x10, 0x0, "4a09476a561a6f71986c1d535bd88db214b572e830db507d809e95832df95c41ffa9676a343ef4e7e37fa4bc5eb1441fc4c1a60aa41be5f4b5009a75e71cbc5152ed3af4ff3ed2089bed9f298d289ffd6f221466e2f0042e208cc5b7e87e655f078e6b9cddb7671b3d0b0dadb1d0a7e7d61d16a521731c87cb47e530c2fdb1ea9c7c5e98a29c9814e331d4eeb5bbe83a17ed428f0d3b31585397d177ff6c374fe9dcad3836961004273d7a7cdaa8610aa8b8a72559bacbac1b68591a588ca8b6e313fcf6e0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x9}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xee, 0x1, 0xffff}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x0, 0xf2, "e10c3103", "c05fd8e2"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8be5dac8e21bdb0a, 0xa, 0x9, 0x5, 0x101, 0x9}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000a40)={0x0, 0x1b, 0x7e, "554eb233f2c19e4507f7a6d3f88541c0bace172dcc8a18557d4b15a6dd0b3336ba78158626601688d71107902a12a65f2bb8c73008f0e18b3441fdbd9c7c54b762197022e313d687dad238642460e09402ef9c77a5b55bda29cad85bf9c29742fb69777116758ccbbbe8fe70cac152786e481f386cca014e0dc2f02b3c9e"}, &(0x7f0000000b00)={0x0, 0xa, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x39}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x1a8, 0x4}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000c80)={0x40, 0xb, 0x2, '/5'}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0xce}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "2da5"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0xf02}, &(0x7f0000000e40)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x4}}) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000006c0)=[@iv={0x118, 0x117, 0x2, 0xfe, "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"}], 0x118, 0x24005810}], 0x1, 0x4a050) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = dup3(r3, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x7, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000010c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001140)={@fd, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8, 0x2, 0x2e}}, &(0x7f0000001080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 7.434988773s ago: executing program 3 (id=3621): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$cdc_ncm(0x5, 0x79, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000082505a1a4400001e80301090267000201df70010904000001020d00000b24060001f4ef554c63f505240024000d240f01fcffffffba00b4000906241abcf8e60424010302090581031000dd00000904010002020d000009058202ff03080909"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) epoll_create1(0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000000180)={0xfffffffffffffffc, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f000000d8c0)={0x0, 0x6, 0x2, 0x7, 0x0, [r2, 0x0, 0x0, r3], [0xfff, 0x1ff, 0x1, 0x4], [0x39f, 0x3, 0x3, 0x4], [0x800, 0x7, 0x7, 0x3]}) r4 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x2, 0x1, 0xdddd1000, 0x2000, &(0x7f0000ad9000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8}, '\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r10 = io_uring_setup(0x4808, &(0x7f0000000340)={0x0, 0x3d5a, 0x1000, 0x6, 0x2d2}) r11 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e, 0x0, r10}) io_uring_register$IORING_REGISTER_FILES(r11, 0x1e, &(0x7f0000000000)=[r10], 0x1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x28}}, 0x14) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r12, 0x4b40, 0x0) getgroups(0xb68d432bb60642db, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f00000001c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9}, 0x94) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r13, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 6.697361376s ago: executing program 4 (id=3624): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000040ff6943b80000000800000028f2000000008607000000ebb0", 0x20, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000460900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r3, &(0x7f0000000180)=""/133, 0x85) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000e8b000/0x2000)=nil, &(0x7f0000765000/0x4000)=nil, 0x2000, 0x2}) 5.774224953s ago: executing program 2 (id=3627): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r2, r2, 0x0, 0x80000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x63df, &(0x7f0000000040)={0x0, 0x4000c8a1, 0x200, 0x8, 0x2a}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f0000000200)='%ps \x00'}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) socket$kcm(0x11, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r4 = socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') pread64(r5, 0x0, 0x0, 0x8) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) io_uring_setup(0x3315, &(0x7f0000000040)={0x0, 0xce85, 0x800, 0x4, 0x3b8}) 5.697965361s ago: executing program 0 (id=3628): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x2, 0xfffffffff1bb0f49, 0x5, 0x9, 0x99, 0x101, 0x0, 0x0, 0x4, 0x6}}, 0x50) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x2, 0xfffffffff1bb0f49, 0x5, 0x9, 0x99, 0x101, 0x0, 0x0, 0x4, 0x6}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xac000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) 5.169102767s ago: executing program 4 (id=3629): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x7, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x2d8e, &(0x7f0000001a00)={0x0, 0x27c9, 0x0, 0x1, 0x40000}, &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) syz_ublk_setup_io_uring(0x5eea, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) signalfd(r6, &(0x7f0000000380), 0x8) rt_sigpending(&(0x7f0000000ac0), 0x8) r7 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000280)="6504", 0x2}], 0x1) r8 = syz_usb_connect$cdc_ecm(0x4, 0x63, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xb, 0x90, 0x59, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "04673fa8a0"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x7ff, 0x2}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x454, [0x1f8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x4, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0xa, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x3, 0xf4, 0x1, 0x10, 0x3}, 0x48, &(0x7f0000000480)={0x5, 0xf, 0x48, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x8, 0x880, 0x7, [0xff000f, 0xc000, 0xc000, 0x3f30]}, @ssp_cap={0x14, 0x10, 0xa, 0x70, 0x2, 0x401, 0x1e00f, 0xc81, [0xf0, 0x3f0f]}, @ssp_cap={0x10, 0x10, 0xa, 0x16, 0x1, 0x1, 0x0, 0x2, [0xf]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0xcf, &(0x7f0000000c40)=@string={0xcf, 0x3, "6a68fd3efdce6e37874985142c7f97f78b00dfb24a7ec9a77dac46d5908ee91e4433c48b7f42603a30bfd95c82f652fd7d3e65a09b6254209accc163fd226a5a172e31410c7b151bbc7a03e772552a4b3ba36b7c2b1f7a2ec973bef7f1337399a8eccbf5d80ba4bfa2251b8ebc695bf1acd0ff2a5ea44d9b937514cc05dc1c649c920deefabafbd4206e23231804e635103475bfafad6e82498dd50ce58d94c606dedbec864a0cf0ace47b4134977433930399635d52a8ff98990fd2df9bf126b90c1e9a45fd5db68d97887c1f"}}, {0xa5, &(0x7f0000000640)=@string={0xa5, 0x3, "5682579d424b1f5d8a3cbfca55df88ad21194e9d838a4d6e9b6cea8d2db257eabad9bcb690e130e0c437ceae77b9e3d3c2910ef36b03b3417f95319f2e90e2fcb31223e5664666c5e2e0159b3b556a2cbaeb092e50501c360b4e036856d33a399b8bab12904ee1920171baa8b6649ddfa4519e85c049a3aa46fd09515e170be13326044355cd1c90650af9dd67c67c074290e7ac7c7743bd55b077b88987845d537a5d"}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="6021ad000000ad21832558081a34d1c5056dc5e26c41c0f19c7b636c2e581dc9bcdf4615c1dba6441d6762ede1963e498e67f8d0bb4634e09efe833562543bd816515ba2b4fca475606e4c5b0581f3bf04c806233e2f21d4cd57d4206ac29f5f0365a1af35e384b7f64f6eb56f0bcf2870d2f052c48d31ad0316a27b340e52e48a5fc2f14853f1bee5e5b8dfeb36cace059fb252d15af47b641f1dbb1fa9495662694621b0d2d7e724dd4e1dab80474731ef67"], &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x1c, &(0x7f0000000900)={0x40, 0x17, 0xbd, "c6fcff31bfa4923a2f748c99e40783032197791bee589b4cf31be771938ec83bb0c37c3e2fc63e27d90c9cf5033d0cb4e5e3f87dd1a5917a5b3c7ddda5b378bdf4c2f654644bce3cb5b581c9fb6617c26114b1a7701c3d54b387df2fc5429ebf2c28bed56f03763feb3a9a9eb9153f612b9666b4efbc8f747ff4bbd436e3ae4f2ee4993f92f0218c2ff48b2d239ea39723a2e2c6ef78afc86508ee463ee0c84b52087eefbcd106e620a7b4c7c4d8e6bfc91911e006ee884af699abf64e"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}}) 5.082831875s ago: executing program 2 (id=3630): r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setresuid(0xee00, 0xee00, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_open_procfs(r0, 0x0) pipe(&(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000800000000000000000", @ANYRES32=0x1, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200"/28], 0x50) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ptrace(0x10, r0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000002240)={0x0}) 4.237029511s ago: executing program 3 (id=3633): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="10001a80080002000100000004002d"], 0x30}], 0x1}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000, 0x11, r8, 0x10c06000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r10 = fcntl$dupfd(r2, 0x406, r3) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) syz_clone3(&(0x7f0000001d80)={0x2100000, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000002c0), {0x2c}, &(0x7f0000000300)=""/81, 0x51, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x7, {r3}}, 0x58) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r11, 0x6, 0x4002) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_emit_vhci(0x0, 0xf) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.979220801s ago: executing program 0 (id=3635): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) unshare(0x20000400) r6 = memfd_create(&(0x7f0000000000)='-&:\xde\x86e\x10{\x00', 0x7) writev(r6, &(0x7f0000001a00)=[{&(0x7f00000000c0)="861d41797326d72d9e1df8bf8fc07e3b5a1cd175d2abc7065b97e2db05f963c97444906d17de7bf795cd5d3b4a0b7f6923d4c44de24f053b976c391c185092fe49b9b55cd2f8f3a340576367846751735642b6b33599f44eb9"}, {&(0x7f0000000a00)="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"}], 0x1) copy_file_range(r6, &(0x7f0000000080)=0x5, r2, 0x0, 0x5, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800140600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6f02000090780000"], 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_PHYS(r7, 0x4004556c, &(0x7f0000000000)='syz0\x00') symlinkat(0x0, 0xffffffffffffffff, 0x0) setuid(0xee01) r8 = userfaultfd(0x80001) readv(r8, 0x0, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 3.232955284s ago: executing program 2 (id=3637): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000000844060e804000010303010902600003010400030904001b00010100000a24010e000a0002010209040100000802000009040101"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x5, 0xb5, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff630719204000010203010902a300010103500909040000040103207a0664020303020624f7020605072401060007000b240303020200020206040624020305070624020005a006240203fa8009081325010f92e53199823d4fa35aefe8b1a3aecc2c050710200003bb400b2501075830deafc71c5809050900020000000000000009377a97bfb8d142cc200905040200040901071225010ea11464835791e2986f6331c438cc00000000000000"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0x42, 0x6, 0x201, 0x6, 0x1f, 0xec, 0xff, 0x81}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x32, 0x6, 0x0, 0x1, 0x2d}]}, 0x3, [{0x8e, &(0x7f0000000700)=@string={0x8e, 0x3, "2291db748ed0fa56319f8253a8f92c33b6278176f15d2619e1e8631075320098b96282fa5591479b9e8c0c173c49ed33a78b7cae36d403a4c1aa25889eb49e037bd2164aae24d307f3ad4dc870d4bb52cabe5607b28648a17e6fb197167e107edd93bac5395b14ee6e733e8ba48c5915071eb3d89145158016853484da760dbbfbe0c8839238c49c5d46a955"}}, {0x7a, &(0x7f0000000240)=@string={0x7a, 0x3, "9c92ae0326c80341e81376356c010db71db11728041b8b05fa1b19bcedbd70b2f4fb4ee5a2599cb709dc2308d67e3f2ecb03bdc8e008bcd9a5165e4877a2ccaec3cad8f70fa266a35d2f88d1181483807e5ee2b648be171a1751620d403a6968f6e63b9e2ec450735067b87753c174a4372cbe2c08c0f513"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x437}}]}) io_setup(0xffff, &(0x7f00000005c0)=0x0) io_getevents(r2, 0x9, 0x2, &(0x7f0000000480)=[{}, {}], &(0x7f00000004c0)={0x77359400}) syz_usb_ep_read(r1, 0x2, 0xdb, &(0x7f0000000340)=""/219) 3.203965471s ago: executing program 0 (id=3638): syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x43f8f000) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045568, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r5}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') fchdir(r6) r7 = fsopen(&(0x7f0000000700)='bpf\x00', 0x1) r8 = fcntl$dupfd(r7, 0x0, r7) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000480)='mode\x00E5\xf6\xc5\xce\xce\xf7\xcd\x94;\xa4\xcb\xc1\a\xccx\xdc\x00\xb6', &(0x7f0000000140)='7', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)='%-010d \x00'}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) r11 = dup3(r10, r9, 0x80000) write$dsp(r11, &(0x7f0000000ac0), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r12, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x7}}, './file0\x00'}) r13 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) utimensat(r13, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x9, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, @ldst={0x0, 0x1, 0x4, 0x9, 0x7, 0xffffffffffffffe0, 0x10}, @alu={0x4, 0x1, 0x0, 0x7, 0x9, 0xc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0xd, 0x19, 0x0, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000380)='GPL\x00', 0x1, 0x91, &(0x7f0000000b00)=""/145, 0x41100, 0x0, '\x00', r5, 0x1c, r6, 0x8, &(0x7f0000000540)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x3, 0x3ff, 0x7}, 0x10, 0x2aad1, r0, 0x2, &(0x7f0000000840), &(0x7f0000000940)=[{0x0, 0x4, 0x7}, {0x2, 0x1, 0x3}], 0x10, 0x4}, 0x94) r14 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbdc, 0x13d81, 0x2}, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r14, 0x21, &(0x7f0000000440), 0x1) 2.853366254s ago: executing program 0 (id=3639): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) pipe2(&(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0xffefffff, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.570716953s ago: executing program 0 (id=3640): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x0, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x1, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x0, 0x4, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x0, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x4000006, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x7, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xc00000001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000540)={0x18000000, 0x1, 0x4, 0x0, 0xad}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0xffffffff, 0x7fff, 0x34324152, 0x5, 0x2, [{0x7, 0x3}, {0x8, 0x4000000}, {0x8, 0x21}, {0xc91, 0x80000000}, {0x6, 0x9}, {0x4, 0x1000c}, {0x802, 0x2}, {0xfffffffe}], 0xb, 0x5, 0x8, 0x2, 0x5}}) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 2.397814233s ago: executing program 0 (id=3641): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110013f7c96e9dac8945700000000400109027f4346687ff099b20400feff03000100092181000301222840090581033c03000000"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x42}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x2}, @IFLA_XDP_FLAGS={0xffffffffffffff2e, 0x3, 0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x44}, 0x1, 0xba01}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xbffc, 0x6}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.981043541s ago: executing program 4 (id=3642): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018000000000800a0000100002800c00148008000c00ac1414bb"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) syz_io_uring_setup(0x6901, &(0x7f0000000080)={0x0, 0x6526, 0x0, 0x2, 0x1008, 0x0, r1}, 0x0, 0x0, 0x0) userfaultfd(0x801) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)=@newqdisc={0x210, 0x24, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0xfff3, 0x6}, {0x1, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x62, 0x80, 0x8, 0x4, 0x0, 0x401, 0x0, 0x4}}, {0xc, 0x2, [0xa, 0x200, 0x0, 0x0]}}, {{0x1c, 0x1, {0x1, 0x1, 0xffff, 0x80000001, 0x1, 0x7ff, 0x1, 0x3}}, {0xa, 0x2, [0xe, 0xf870, 0x9]}}, {{0x1c, 0x1, {0x3, 0x2c, 0xc, 0x4, 0x2, 0xd, 0x4, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x8, 0x7, 0x3, 0xff, 0x15bd9c590ff70ce1, 0x4, 0x7, 0x7}}, {0x12, 0x2, [0x7, 0x6, 0x3ff, 0x8, 0x5, 0x5, 0x6]}}, {{0x1c, 0x1, {0x8, 0x5, 0x0, 0x9, 0x1, 0x800, 0x80, 0x1}}, {0x6, 0x2, [0xaa9]}}, {{0x1c, 0x1, {0xf, 0x1, 0x280, 0x8001, 0x0, 0x1, 0x7ff, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xc3, 0x40, 0xffff, 0x7, 0x1, 0x3, 0x6, 0x6}}, {0x10, 0x2, [0x3, 0x401, 0xf2, 0x8276, 0x5, 0x8087]}}, {{0x1c, 0x1, {0x0, 0x9, 0x5dc, 0xfffff9ba, 0x2, 0x78f729b4, 0xc, 0x4}}, {0xc, 0x2, [0xfffa, 0x2, 0xff, 0xc7]}}, {{0x1c, 0x1, {0x6, 0x8, 0x87e, 0xd5, 0x1, 0x10, 0xe, 0x2}}, {0x8, 0x2, [0x5, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x4}, @TCA_PIE_TARGET={0x8, 0x1, 0x101}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x14}, @TCA_PIE_LIMIT={0x8}, @TCA_PIE_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x80}}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000080}, 0x8010) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000200)={0xaf, &(0x7f0000000140)=""/175}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f00000002c0)=0x80, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x82, 0x6, 0xfffffffc, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x5, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x80, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x87, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x315, 0x78, 0x62, 0x73b, 0xfffffe00, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x0, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x1000000c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x7, 0x4, 0x6d01, 0x5, 0x3b, 0x1, 0x200, 0x80, 0x3, 0x4, 0x4, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d3, 0xc2, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x800003, 0xfffffffb, 0x120000, 0x3, 0x6, 0x8, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0xffffffc0, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1, 0x6, 0x1, 0x10000, 0x2, 0xc, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0x8001, 0xfff]}, 0x45c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00'], 0x20) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.461246193s ago: executing program 1 (id=3644): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x4, 0x1000, 0x3fbffffffd}) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x26020480) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000300)={{0x8000000000000001, 0xb}, {0x80000001, 0xa}, 0x5, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0x2}, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001a00010027bd700003dcdf2502202001000000000020000008000300", @ANYRES32=0x0, @ANYBLOB="08001b00ac1414bb080002"], 0x34}}, 0x4040000) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x86956090991702cc, 0x85, &(0x7f0000001e80)=""/133}, {0x0, 0x0, 0x0}]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r4, 0x29f01000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)=0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x276) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000302, r7, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$UFFDIO_MOVE(r9, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000002000/0x2000)=nil, &(0x7f00001b3000/0x4000)=nil, 0x2000, 0x3}) timer_getoverrun(r0) 1.110763608s ago: executing program 1 (id=3645): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) unshare(0x20000400) r6 = memfd_create(&(0x7f0000000000)='-&:\xde\x86e\x10{\x00', 0x7) writev(r6, &(0x7f0000001a00)=[{&(0x7f00000000c0)="861d41797326d72d9e1df8bf8fc07e3b5a1cd175d2abc7065b97e2db05f963c97444906d17de7bf795cd5d3b4a0b7f6923d4c44de24f053b976c391c185092fe49b9b55cd2f8f3a340576367846751735642b6b33599f44eb9"}, {&(0x7f0000000a00)="8acc8c931628f95d971d419356dc85a334f2d252a60e47866020fa931600edd57f58a2d1ff493823bcdf7a02d2f293373636eab9d197533e7b359fb29fbfc3adcfae42ab6fe7f2ba8c810475f076e441dd21e03d00132849e7e32e40d5fb6ad15d9d367a826220bdfaa9eafe9a52722274c949d68814ff8fea9a676c7440fc5077dc227aef20f205baf80057fe147b341ea4dc76949431ca16a56174854eb79436dd60af9d837a314bb593eb7dd2b1bd2b4fa6a4956e615d3f8e7adce2cab02a469502ba930114e7719766d60158ab072211fb6cea230e35e989dccda212bb3bc6202f78a02eec9b24b2d2b7960061e97c654d52715d9a460b78d2f556af5e6762e40cf10fb2f5c5c6615d9cb88c2ef647e9397519023abbd43f30f88e9781a033eb105d3c118500d76e98674690a594d5781cde22d46d398c043657500b0823b7559377990b5fe0ecb6027535c9724a93b2eb633dca8c237142ec9dd0b47b5902c53d955e28b5806e40233327100b6309a3f35f72fc53ce86370c44f9990edb9e70ce925e359a6978054495d5c557ebbabff4fe6872f1fac1ea6354523de59292e43250aaf5fe61901d31ccaa4e52351a5b9f31a5cf8ffbbf971c6f2200cd04eb226caee6587d0f8d10949cf13a2a46a881b2d46b6c3c24f75decb4e47f87621ede4e24106a78285adeb5cf5cf3299c05e272332efcede09597303df0f8904b3fe4bfd304b2d60e6de2a570134f6fee27e11f670ee027c8718d67b9339a6734efaab3aeb9aa6f51994f37c5c6ecd3cbabb3543332005f674fdda92fd480adbde567776698d8303f317fa776afb4738d8b08c8e9b94fbf947ae104bbdd1b1afd171f46028c36282340b2d5427a5657b04bd418e3a4a5af15a068d4393315e68abcab75f3a8aa200fad013adf368dd1451188299f29b273159f18b7e35598732699fc6b64e55a2d7d7cc65f54ca367fc2b372213363d23ee645bf5e07c8151fafd251d62194c58c8aa5aa96b7c2942341cd34f9f5c3e5e768a9f47c09dcee8aa222cafca2f55d71f71df7b4ebc95fb4a606fb54e3b841358fcebb533a1d14876079669210b7a82d39962983ae0fa2b6bb9be68854426610169de7bf883ac37ab5832a9cb36822c8995fd7636911dfa28a46ea179dd1c8df59db761cdad8812799ecdb2bf5621f9c831a22943f30366a292333b9e8c3331f3bb70475fe260d1bd57198fad79caf1585f5d87ebd480c1161e650955f05c6f1fc6370aa63dafcf68b9b5b3254f429a6878338d01bcad8aabc03d98a97c815e4ac14e4598bea3eb1889aa400c2ab88925fcca18decadc8e306d98560a82e717d9ebf68633008468f8188f1087f5b1953ac2668f28518d3792953c6b0491ee79413c2b1ee9050d170c1b29cc6572a5d4f606ded8a51ce33d9456217c96515e65833e1804b0729aef1468a394bfed8b7a2c5ac0088fd887049a1bc189737e047a4ecd0b399a5aedda6a2de07946facbf759d263283b0c2650a223736fe0720a546bff64c8c48e99941c068950f270849f03937904579cd021e2d7b5f0e59f24fff321a4b5f8538c081a90de207be9b9a428c1e5c74884e95fb43b791ff08b8c47887135d91b158b041010c99fe4e0975178b4c9a36714fadc7a13ef08f64555390f5642d68a59b77968f237a3f2370f854162cbc5b083f5dcc3c91638eba126a1c0d40d05d6b08c7c5fa252087ecdf5794be5094abde8660f6db55a1d5ac250a2ff315faa2269aff5e36d4c8b958f43ef74114fd91241d22168149db3cf0099d73ef7825d1dfea425a7242cd7caec04263d4f941d5163da871a5b9ac6caed1169de7840a075013a8201cf2923a2cfd6cd14996676a5b3ad11f74d6d7fc585594271f92a23b609f4d082ded34d8f365929c63b7ab3856a79e4048bcbd78c8693dd8bff48acb638e546297930d6fc6011f88955b9df96f27ef7c1c8f96374924acb0df73dde5af4cc84b7f6d5445682a805dd85f77c7a391fa3a87eb2437cf17e9cef30168750ff37747b37d69e6f183f2d7ab17f96c98db05a0bac3dd6302568f340b1aa1bb81165b333dd48b3b2a6928ef12e5bf8ea6771a29ac4abb7f8cb2d053f82efbf786db7cec923687f6c9d6cb91b32ce6156cfe44bb610f5f60816ed8eb0c266e887c63ceabb126499ee7799cfd3f9106117ea8cd4834f7a276aa203ee0223d5d71de5dcc29fa97c22cc8c824c3c45077901f238cd173e2a3dc5914918094fb84f7bb2caa92d1109d2f26b5a4f4950c1cf30a9478926a45b699edd9bdc67ee403b3610599e4ca8107bc507f0b0385bf7d8853d3d8f61eb02b454f0da60c5848f543a84cce915b232405e4089a49d711f78ea71456eb83b56c5c660e71405425ecbfb03dd2bba31dfb4c3f180722068347e2421111a4c2138cc3d8408224f1f6777ea5595cafae9dca9bfe9c981c53688f2a0917129febcfd494f4eee2af02707770e656b91b3546490a8901ca5c9f92656c4734a21e2b83c5ec4b1d67c1f6e0948bb1e395d4dedb4e82d07ac2ef17c88176c8d92f0b3c14b403b15196a93e0fef711a466ec76e547f8f5501b4fc31b6e93cf73e54a77f9b6c6f51d2f718d9bef29d2b1e82c2a63b9cfcd0970bd395918ca915dd422bdcad4c8e38c428946dbadefcde4deeebd537c16559303d92c0bfb919f009763f9e77eeb68e671cf38890c6cd9cfcf3f4e9b1eb5842bcdeefa3c0b2507d796b426832207c5a7830b9db794d572ef51d83d8b78e60c1f8abd4f7005d42674f7d1b776195c3b57cf1c717914eaa719773a938d08252c5f8c817808fefe6a694d6783f44d514c0aa4d778f314d3e76d263910c3f143dbe754cba0f7a371a02e19141065a7d182173cfbd5e08087460be7b569b9569b76f3ef412d9ef4d2d66b6845098bb3e51d960afce09b984028c240d6de0c850df6dd941a98ffd9d95e9346f1a1229d40b412655ad2b2cae7017742be6de079136451d64aa45c0d45f9c70d9e3d2069c1e6aa98217f9031a080de388f351264c3408d5c1672673cb5ca5ab9522e377ae6b8597105fd01d319777bd3370d660a3b77eb32be044ff20e6f129cd66d78c8d446cd43c73ea28b76e7d270c3d5306614732ff6dc5c6f86d58eba68887c98f507c397ebe29b9fab3bf470133489c7f1de642c1807786941aa27d498e925a6315d25f6b04216075d297337425319c634ab91d5af4248986c0f553cdbde647799b7a4b30b5a1e0fb39e858d59c355e01a6bd312896d641a5eb4a8571633e69285842f7f163e608506ef287c36533ed63573dee717c033798e38e1a9ec3f83db55c44ce50894419066d84eba24fa4605b335e0c0c83f53f9099f5a4ba93576aa4f3dd53acde5a8bda4b86433144b8be20886d982d989ae07a79e3e23defc508062afd869e7fff7715e5e6a2137304776207036d3a944216b95a29d6cb65b30c43cff58975cb059f379c4b0573ec74a274885edc77a7d10577d1cc4bbf53e9eaa0959a0b5a94db7fa4f54ba5da925dbf8af4aaac77107fe97214a4c9be40d2bf8b35ab4d5eb508074d62b69e713e774345bc588e3e5aa8e213c64f119fb78e64bde0a4324d14cf9ed7deeeeb7051969dd5d95c73f605ada13d3da037d5f01496f4c55c3923efad67904f5ce2f91b9b0eec7a1d3ac009e375f83714865d3ba578c37718e73be90c3585d75a607d30d03751f21bb91a0b98be512170657de356ffde7454d1dccae1fe4704f9b41f102eecd45b621c48bfb849d807b23dc782dd73fd7161ce48fca153657d0608efaacf8d59e598d7c8480efc15abce1a122e852e4b6e482ac3e7bf6ec429719e01b243ba9e791513ee2010c5749638bcdf57be7a3e92f3085e8fa1d42080dfb0d4b3a40f36d49d6fccc1ba4e4b019af73bfc75d56df67942bdd6e09c1b098b61fc2f17336342b35e783ef907283354df6cd71604d18a282ccbb245d0998143771edc0a94c60412a4a013dbc80c2fc99573f71a25ee5213db3220bea855fc84a16b1d8c94b4da071db99a76428132cda6708b75ff24beda893fe26a5948906a89ac8ed809c27c9473dc607393f57b2a271e637749d3cc3e4b6fbbeb93f839794502b24158a59ba57d67b20b87e9928a6b175e7a57451653547f2ec808b7ca8e75a2fb7040cb3a60d34a4b333a36f398a5cbe8e884e99eb3e8610c61156a99977069b78ee162a97a55adb8274f08bace2c31591ce8ae7cccc1f149abea10fad96a009716df03ac2b20a0f8701c4e04621c9f99bcab3a345b3ceecc39cf3331a4ad6a3f73d8dc7163b4d6ffec9af744df56c6af3b5a0259cc292a7ddd30a47438c8cce07a8a8d30669fd49cb7bda266cd03ca07c6aa2960106d387b937fbd57d4a327d1b7a41a99ff8aecb10930bcf9c543e23ddd18c9602765d3c2a1c3a538d13ee5e7cfbbbb7c4d19e4e7c47d1f97a209413af395e967afe287abfe4a71e4669b79b4004d23304034501c5d28d198704f351749351d02d5c86d151a9cd746758387b36c66d26350145d63a4c03fcc51ecb1487333b7e3229bbc5781b911905315d59b203a770458cef3f9cbb237dafe1453bfb66d55b77b571f8eb76e54026eee3c6045f04410981581aa9384f2c337a1ecde0b1350647a741d424bd599550c52c76f271590d20c2384fdc84e7b014cb6dbf06ebf46259b279b966eb1c468e2e1090a6ad9d3186cbb4a3b4352c7dc30171f8a5ab91d8038c52f7571d83d8116a1b66f17fd7fc6d0dc2ff2cade81584e0fa09da6259a94dbbd61cd4e243a485ac272f970415b7dbea0a4ccc9c9f6f9183d16fbeca145e3a918cb29b75eff630ec0e54bcfb99afc0c4ff662740a793b79da9393daefa0360b72540fc4b325563adc6dc2abfd0f241f8e63e4589ccfa4ede50ffcb29025acec8ff7c7bcec51aa56fe7a895136af4c56fefc2fea76343bb872784de5f306b550c78ade8dc3ecb11f01c794185c08fb35e2092b16a001de6e854cb7b78a069765174449b24b4f8138da9c5c1ed64eb038c5c0517c82c832fad73aaff410b443bb6d30e51233e81272b56d6ad1d168c17a48e0c2e5776b9295133a25f21855a0d95e04f526534ca14731af35695d6548a1d8bda091c0dca09eb63b731a5131da03bfa968c2fe102505b94f14758396fe48b2bc4d6745691a9f2172ae54739a27a6e91e82fd6d3d2fc1e41d918679d1ac837db583e75ac4cc66d9c76638680baa6944cb89e232624ddea1ab4a38f4889fc1f8245e3f81aceb991c194ada745d378af35104a7fdd4a0e3d2cddeb86e0d72c5d077bc45dc84f3b397396e1f3b9d5f2fdeaafb7a5c5b9bd63126799b082446e9a1e4e7075e5c5c00541810ca355eddc4a3f824c7ede77662f539b81e89ee57acc37ae90af217a06de9221090d6ba704cf41c410a8e121c47d0735ae96b150c11af67fc984a0de626c57523d72789e3189ad797313a79d980d27380163629eeb55b08977918168442340fba49bac2e0bdbe1b09762b15e8f265266289aa243efe87bd71b73d005cdce1a9bdd3bca83225e3482bfe2bae4bfca82bdd87278b07e3f02461d4c54a6d47e06e784ba4fa0971b3f2265b24dcdb6d1c48dfaa76bfeb8799379568648ab15d7f3e526fd288645c22c572827ac907ae0b168a8b36f21cd82ebf1ace9ef6eddefaceb980fd52b68a91fa2f1b443f93b399e30827ba37a9ae25411f05f397d57669c401693b3f2fb93eb0a89a2db596386d16c30eda5a7e6c278750c09792d45c71f1ec494436dae7a48a37d55b9c6e9fe873734640"}], 0x1) copy_file_range(r6, &(0x7f0000000080)=0x5, r2, 0x0, 0x5, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800140600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6f02000090780000"], 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_PHYS(r7, 0x4004556c, &(0x7f0000000000)='syz0\x00') symlinkat(0x0, 0xffffffffffffffff, 0x0) setuid(0xee01) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 1.094407953s ago: executing program 3 (id=3646): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="0900a0"], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) (async) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000000000ec2c00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000000000ec2c00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) socket(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x23, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xde3}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x8011) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={r7, 0x1, 0x0, @broadcast}, 0x49) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r7, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) (async) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r7, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000240)={r7, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000240)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'lo\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'lo\x00', @remote}) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[], 0xfffffcd9) (async) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[], 0xfffffcd9) 562.765088ms ago: executing program 1 (id=3647): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {0x0}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 374.750311ms ago: executing program 1 (id=3648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x40}, @exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) sendmsg$nl_route_sched_retired(r2, &(0x7f000000ff00)={0x0, 0x0, &(0x7f000000fec0)={&(0x7f00000041c0)=@delchain={0x24, 0x65, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xffff, 0x5}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004090) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2, 0xc0) move_mount(r2, &(0x7f0000000280)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x102) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6be3c3f1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x740}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff57}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x51}, 0xc881) 160.973699ms ago: executing program 1 (id=3649): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4) fstat(r0, &(0x7f0000000540)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x342}) 60.32455ms ago: executing program 1 (id=3650): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) syz_io_uring_setup(0x6ff, &(0x7f0000000140)={0x0, 0xce1d, 0x10826, 0x2, 0x9c, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x81, 0x30, 0x10, 0x2a5d}, &(0x7f0000000140)=0x18) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) msgctl$MSG_STAT(0x0, 0xb, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) (async) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) (async) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) write$binfmt_script(r8, 0x0, 0x0) (async) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) (async) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x469, 0x8, 0x5, 0x5, 0x40, 0x8, 0x6, 0xe, 0x1ff, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x7, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x4, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10000, 0x2, 0x6, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x7, 0x7f, 0x4, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x4, 0x3, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0x8001, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x21, 0x1b2, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x6, 0x5, 0x4aa0, 0x3217, 0x1, 0x0, 0x4, 0x4, 0x8, 0xe, 0x6, 0x5, 0xb005, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfa, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x4, 0x9, 0x3ff, 0x7b82eae2, 0x200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x8, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x9, 0x0, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd0, 0x9, 0xa, 0xec, 0x3, 0x6, 0x5, 0x1, 0xffff8001, 0xf00, 0x9, 0x2, 0x400, 0x3, 0xfffffffd, 0x9, 0xfff, 0x6, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x9c28, 0x2, 0x2, 0x8000, 0xdb4, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0xaa, 0x9, 0x1ff, 0x2d0, 0x3, 0x6, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x6297, 0x1, 0xa9ef, 0x7, 0x100, 0x3, 0x1, 0x0, 0x8, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x6]}]}]}}]}, 0x43c}}, 0x800) 0s ago: executing program 2 (id=3651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) pselect6(0x24, &(0x7f0000001600)={0x8, 0x8, 0x7, 0x7, 0x40002c16035f, 0x1000000000000, 0xbd7, 0x7ff}, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x2d8e, 0x0, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000180)) syz_ublk_setup_io_uring(0x5eea, &(0x7f0000000080)={0x0, 0x5827, 0x2, 0x3, 0x296}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="13c1e9e8752818bbd10290e1e03e86d5"]}]}, 0x38}], 0x1}, 0xcc000) r7 = signalfd(r4, &(0x7f0000000380), 0x8) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x4, 0x4, {0xa, 0xce23, 0x7b5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) r8 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) writev(r8, &(0x7f0000000580)=[{&(0x7f0000000280)="6504", 0x2}], 0x1) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000b00), &(0x7f0000000b80)=0x4) r9 = syz_usb_connect$cdc_ecm(0x4, 0x63, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xb, 0x90, 0x59, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "04673fa8a0"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x7ff, 0x2}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x454, [0x1f8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x4, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0xa, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x3, 0xf4, 0x1, 0x10, 0x3}, 0x48, &(0x7f0000000480)={0x5, 0xf, 0x48, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x8, 0x880, 0x7, [0xff000f, 0xc000, 0xc000, 0x3f30]}, @ssp_cap={0x14, 0x10, 0xa, 0x70, 0x2, 0x401, 0x1e00f, 0xc81, [0xf0, 0x3f0f]}, @ssp_cap={0x10, 0x10, 0xa, 0x16, 0x1, 0x1, 0x0, 0x2, [0xf]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0xcf, &(0x7f0000000c40)=@string={0xcf, 0x3, "6a68fd3efdce6e37874985142c7f97f78b00dfb24a7ec9a77dac46d5908ee91e4433c48b7f42603a30bfd95c82f652fd7d3e65a09b6254209accc163fd226a5a172e31410c7b151bbc7a03e772552a4b3ba36b7c2b1f7a2ec973bef7f1337399a8eccbf5d80ba4bfa2251b8ebc695bf1acd0ff2a5ea44d9b937514cc05dc1c649c920deefabafbd4206e23231804e635103475bfafad6e82498dd50ce58d94c606dedbec864a0cf0ace47b4134977433930399635d52a8ff98990fd2df9bf126b90c1e9a45fd5db68d97887c1f"}}, {0xa5, &(0x7f0000000640)=@string={0xa5, 0x3, "5682579d424b1f5d8a3cbfca55df88ad21194e9d838a4d6e9b6cea8d2db257eabad9bcb690e130e0c437ceae77b9e3d3c2910ef36b03b3417f95319f2e90e2fcb31223e5664666c5e2e0159b3b556a2cbaeb092e50501c360b4e036856d33a399b8bab12904ee1920171baa8b6649ddfa4519e85c049a3aa46fd09515e170be13326044355cd1c90650af9dd67c67c074290e7ac7c7743bd55b077b88987845d537a5d"}}]}) syz_usb_control_io$cdc_ecm(r9, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="6021ad000000ad21832558081a34d1c5056dc5e26c41c0f19c7b636c2e581dc9bcdf4615c1dba6441d6762ede1963e498e67f8d0bb4634e09efe833562543bd816515ba2b4fca475606e4c5b0581f3bf04c806233e2f21d4cd57d4206ac29f5f0365a1af35e384b7f64f6eb56f0bcf2870d2f052c48d31ad0316a27b340e52e48a5fc2f14853f1bee5e5b8dfeb36cace059fb252d15af47b641f1dbb1fa9495662694621b0d2d7e724dd4e1dab80474731ef67"], &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x1c, &(0x7f0000000900)={0x40, 0x17, 0xbd, "c6fcff31bfa4923a2f748c99e40783032197791bee589b4cf31be771938ec83bb0c37c3e2fc63e27d90c9cf5033d0cb4e5e3f87dd1a5917a5b3c7ddda5b378bdf4c2f654644bce3cb5b581c9fb6617c26114b1a7701c3d54b387df2fc5429ebf2c28bed56f03763feb3a9a9eb9153f612b9666b4efbc8f747ff4bbd436e3ae4f2ee4993f92f0218c2ff48b2d239ea39723a2e2c6ef78afc86508ee463ee0c84b52087eefbcd106e620a7b4c7c4d8e6bfc91911e006ee884af699abf64e"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}}) kernel console output (not intermixed with test programs): netdevsim3 netdevsim1: renamed from eth1 [ 1001.477138][T17946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1001.486531][T17946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1001.499179][T17946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1001.507959][T17946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1001.531176][T17946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1001.555143][ T7290] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1001.672827][T17946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.680131][ T7302] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1001.706818][ T7290] usb 3-1: config 1 has an invalid interface number: 170 but max is 0 [ 1001.719430][ T7290] usb 3-1: config 1 has no interface number 0 [ 1001.733087][ T7290] usb 3-1: config 1 interface 170 has no altsetting 0 [ 1001.750495][T17946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.762631][ T7290] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f3.04 [ 1001.781862][ T7290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.784119][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.793214][ T7290] usb 3-1: Product: syz [ 1001.797221][ T7891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.801674][ T7290] usb 3-1: Manufacturer: syz [ 1001.813813][ T7290] usb 3-1: SerialNumber: syz [ 1001.842072][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.849398][ T7891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.863510][ T7302] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.879287][ T7302] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1001.909499][ T7302] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1001.919154][ T7302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.940036][ T7302] usb 1-1: Product: syz [ 1001.956094][ T7302] usb 1-1: Manufacturer: syz [ 1001.968700][ T7302] usb 1-1: SerialNumber: syz [ 1002.101662][T17946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.121827][T18036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.138743][T18036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.157720][T18010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.178516][T18010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.200143][ T7302] cdc_ncm 1-1:1.0: bind() failure [ 1002.243709][ T7290] hub 3-1:1.170: bad descriptor, ignoring hub [ 1002.258039][ T7302] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1002.270913][ T7290] hub 3-1:1.170: probe with driver hub failed with error -5 [ 1002.283305][ T7302] cdc_ncm 1-1:1.1: bind() failure [ 1002.297607][ T7290] usbsevseg 3-1:1.170: USB 7 Segment device now attached [ 1002.319653][ T7302] usb 1-1: USB disconnect, device number 115 [ 1002.329899][T17946] veth0_vlan: entered promiscuous mode [ 1002.356906][ T7290] usb 3-1: USB disconnect, device number 95 [ 1002.392805][T17946] veth1_vlan: entered promiscuous mode [ 1002.399132][ T7290] usbsevseg 3-1:1.170: USB 7 Segment now disconnected [ 1002.416450][ T807] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1002.498003][T17946] veth0_macvtap: entered promiscuous mode [ 1002.516629][T17946] veth1_macvtap: entered promiscuous mode [ 1002.554304][T17946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.610432][ T807] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1002.631796][T17946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.645709][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.663229][T11990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.668623][ T807] usb 2-1: Product: syz [ 1002.678417][T11990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.690263][ T807] usb 2-1: Manufacturer: syz [ 1002.692022][T11990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.708843][T11990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.710462][ T807] usb 2-1: SerialNumber: syz [ 1002.979024][ T807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1003.020120][ T5652] Bluetooth: hci3: command tx timeout [ 1003.046224][ T807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1003.058037][ T807] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1003.098955][ T807] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1003.138639][ T7891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.157982][ T807] usb 2-1: USB disconnect, device number 76 [ 1003.160077][ T7891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.241703][T11982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.257337][T11982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.296216][ T7311] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1003.500971][ T7311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.529899][T18052] xt_hashlimit: max too large, truncated to 1048576 [ 1003.552931][ T7311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.578216][ T7311] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1003.605510][ T7311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.617389][T18052] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 1003.629409][ T7311] usb 1-1: config 0 descriptor?? [ 1004.017258][ T807] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1004.185143][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 1004.207358][ T807] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1004.228661][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.247406][ T807] usb 4-1: Product: syz [ 1004.256979][ T807] usb 4-1: Manufacturer: syz [ 1004.270559][ T807] usb 4-1: SerialNumber: syz [ 1004.296857][ T807] usb 4-1: config 0 descriptor?? [ 1004.309242][ T807] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1004.490119][ T7311] hid-led 0003:27B8:01ED.003D: probe with driver hid-led failed with error -71 [ 1004.517882][ T807] usb 4-1: USB disconnect, device number 87 [ 1004.567751][ T7311] usb 1-1: USB disconnect, device number 116 [ 1004.723801][T18061] random: crng reseeded on system resumption [ 1005.030135][T18065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.053776][T18065] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1005.095105][ T5652] Bluetooth: hci3: command tx timeout [ 1005.141157][T18069] netlink: 63 bytes leftover after parsing attributes in process `syz.0.3312'. [ 1005.365270][ T5369] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1005.415218][ T5652] Bluetooth: hci5: command 0x0406 tx timeout [ 1005.540143][ T5369] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1005.549612][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1005.558326][ T5369] usb 3-1: Product: syz [ 1005.568546][ T5369] usb 3-1: config 0 descriptor?? [ 1005.579896][ T5369] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1005.590028][ T5369] usb 3-1: Detected FT232H [ 1005.786970][ T807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1005.796967][ T5369] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1005.966778][ T807] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1005.999285][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.034055][ T807] usb 5-1: Product: syz [ 1006.050298][ T807] usb 5-1: Manufacturer: syz [ 1006.060416][ T807] usb 5-1: SerialNumber: syz [ 1006.077120][ T807] usb 5-1: config 0 descriptor?? [ 1006.098568][ T807] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1006.302407][ T5369] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1006.393561][T18079] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 1006.673185][ T807] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input76 [ 1006.729367][T18095] loop5: detected capacity change from 0 to 7 [ 1006.759736][T18095] Dev loop5: unable to read RDB block 7 [ 1006.763325][T16604] usb 3-1: USB disconnect, device number 96 [ 1006.781491][T18095] loop5: unable to read partition table [ 1006.801874][T18095] loop5: partition table beyond EOD, truncated [ 1006.817409][T18095] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1006.856808][T16604] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1006.896218][T16604] ftdi_sio 3-1:0.0: device disconnected [ 1006.916431][T18079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.947050][T18079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.977614][T18099] netlink: 'syz.1.3319': attribute type 21 has an invalid length. [ 1007.014374][T18099] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3319'. [ 1007.055386][ T807] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1007.087816][ T994] usb 5-1: USB disconnect, device number 2 [ 1007.231454][ T807] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1007.255224][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.279152][ T807] usb 4-1: Product: syz [ 1007.287606][ T807] usb 4-1: Manufacturer: syz [ 1007.300977][ T807] usb 4-1: SerialNumber: syz [ 1007.428416][T18110] netlink: 'syz.2.3323': attribute type 10 has an invalid length. [ 1007.452712][T18110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.487730][T18110] bond0: (slave team0): Enslaving as an active interface with an up link [ 1007.618499][ T7302] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1007.744319][T18097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.780499][T18097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.809844][ T7302] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1007.845581][ T7302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.868106][ T7302] usb 2-1: config 0 descriptor?? [ 1007.880690][ T30] audit: type=1326 audit(1781036021.951:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1007.910657][ T7302] cp210x 2-1:0.0: cp210x converter detected [ 1007.920504][ T30] audit: type=1326 audit(1781036021.951:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1007.950359][ T30] audit: type=1326 audit(1781036021.951:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1007.986491][ T30] audit: type=1326 audit(1781036021.951:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1008.016407][ T30] audit: type=1326 audit(1781036021.951:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1008.042602][ T30] audit: type=1326 audit(1781036021.951:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1008.075118][ T30] audit: type=1326 audit(1781036021.951:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1008.126974][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 1008.144576][T18108] usb usb7: usbfs: process 18108 (syz.1.3322) did not claim interface 0 before use [ 1008.169682][T18126] veth0_macvtap: left promiscuous mode [ 1008.203206][ T30] audit: type=1326 audit(1781036021.951:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1008.247293][T18097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.299292][T18097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.303620][ T30] audit: type=1326 audit(1781036021.991:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1008.333616][ T30] audit: type=1326 audit(1781036021.991:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.2.3327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1008.413093][ T7302] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1008.428856][ T7302] cp210x 2-1:0.0: querying part number failed [ 1008.445121][T16604] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1008.473970][ T7302] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1008.488136][ T7302] usb 2-1: USB disconnect, device number 77 [ 1008.504184][ T7302] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1008.525948][ T7302] cp210x 2-1:0.0: device disconnected [ 1008.543947][T18097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.574400][T18097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.597728][T16604] usb 5-1: Using ep0 maxpacket: 16 [ 1008.616795][T16604] usb 5-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 1008.635073][T16604] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1008.652140][ T807] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1008.675730][T16604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2176, setting to 1024 [ 1008.697138][ T807] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1008.709184][T16604] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1008.740743][T16604] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1008.756789][ T807] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1008.767422][T16604] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1008.787196][ T807] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1008.799013][T16604] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1008.823156][T16604] usb 5-1: Manufacturer: syz [ 1008.833222][ T807] usb 4-1: USB disconnect, device number 88 [ 1008.847158][T16604] usb 5-1: config 0 descriptor?? [ 1008.888535][T18139] netlink: 'syz.2.3328': attribute type 15 has an invalid length. [ 1008.904991][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3328'. [ 1008.956644][T11990] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1008.982321][T11990] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1009.012289][T11990] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1009.058753][T18144] loop5: detected capacity change from 0 to 7 [ 1009.066072][T11990] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1009.086402][T18144] Dev loop5: unable to read RDB block 7 [ 1009.095052][T18144] loop5: unable to read partition table [ 1009.102694][T16604] usb 5-1: USB disconnect, device number 3 [ 1009.107858][T18144] loop5: partition table beyond EOD, truncated [ 1009.126473][T18144] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1009.224473][T18147] netlink: 'syz.2.3330': attribute type 1 has an invalid length. [ 1009.805429][ T994] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1009.838753][T18168] fuse: Unknown parameter 'fd/d' [ 1009.960660][T18174] loop5: detected capacity change from 0 to 7 [ 1009.975353][ T994] usb 2-1: device descriptor read/64, error -71 [ 1009.994306][T18174] loop5: [ 1009.997549][T18174] loop5: partition table partially beyond EOD, truncated [ 1010.103237][T18169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1010.245067][ T994] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1010.325264][ T807] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1010.425924][ T994] usb 2-1: device descriptor read/64, error -71 [ 1010.511454][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 1010.516034][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1010.519449][ T807] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1010.519484][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.519506][ T807] usb 5-1: Product: syz [ 1010.519525][ T807] usb 5-1: Manufacturer: syz [ 1010.519542][ T807] usb 5-1: SerialNumber: syz [ 1010.529532][ T807] usb 5-1: config 0 descriptor?? [ 1010.537288][ T994] usb usb2-port1: attempt power cycle [ 1010.551168][ T807] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1010.551210][ T807] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1010.896930][ T994] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1010.937646][ T994] usb 2-1: device descriptor read/8, error -71 [ 1010.981763][T18178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.001757][T18178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.197019][ T994] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1011.216980][T18206] binder: 18199:18206 unknown command 0 [ 1011.217007][T18206] binder: 18199:18206 ioctl c0306201 200000000080 returned -22 [ 1011.217015][ T7311] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1011.221540][ T994] usb 2-1: device descriptor read/8, error -71 [ 1011.223714][ T807] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1011.239235][T18206] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1011.325598][ T994] usb usb2-port1: unable to enumerate USB device [ 1011.382106][ T7311] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1011.401717][ T7311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.426869][ T7311] usb 4-1: config 0 descriptor?? [ 1011.465390][T18208] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3347'. [ 1011.646910][ T7311] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1011.654893][ T807] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1011.667866][ T807] em28xx 5-1:0.0: board has no eeprom [ 1011.735382][ T994] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1011.874419][ T7311] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1011.884919][ T7311] [drm] Initialized udl on minor 2 [ 1011.887914][T18178] m920x_read = error: -19 [ 1011.905181][ T994] usb 1-1: Using ep0 maxpacket: 8 [ 1011.917004][ T994] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1011.926888][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.935806][ T994] usb 1-1: Product: syz [ 1011.940296][ T994] usb 1-1: Manufacturer: syz [ 1011.948982][ T994] usb 1-1: SerialNumber: syz [ 1011.958557][ T994] usb 1-1: config 0 descriptor?? [ 1011.970618][ T994] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1011.975279][ T807] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1011.993091][ T994] dvb-usb: bulk message failed: -22 (2/0) [ 1012.007078][ T807] em28xx 5-1:0.0: dvb set to bulk mode. [ 1012.025364][ T994] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1012.026064][ T7302] em28xx 5-1:0.0: Binding DVB extension [ 1012.044149][ T994] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1012.054419][ T994] usb 1-1: media controller created [ 1012.060956][ T7311] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1012.076326][ T7311] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1012.107068][ T994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.179752][ T994] dvb-usb: bulk message failed: -22 (1/0) [ 1012.290146][ T994] DVB: Unable to find symbol mt352_attach() [ 1012.300841][ T994] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1012.382717][T18210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.397720][T18210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.406776][ T994] rc_core: IR keymap rc-dvico-portable not found [ 1012.418240][ T994] Registered IR keymap rc-empty [ 1012.425649][T18210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.446172][ T994] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1012.470188][T18210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.500421][ T5641] usb 4-1: USB disconnect, device number 89 [ 1012.506774][ T5369] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1012.525230][ T994] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input78 [ 1012.537061][ T7311] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1012.570323][ T5369] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1012.596218][ T994] dvb-usb: schedule remote query interval to 100 msecs. [ 1012.619871][T18210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.638353][ T994] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1012.660355][T18210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.727841][ T7311] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1012.748634][ T7311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.759751][ T994] dvb-usb: bulk message failed: -22 (1/0) [ 1012.771598][ T7311] usb 3-1: config 0 has no interface number 0 [ 1012.787870][T18210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1012.797549][ T7311] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1012.817065][ T7311] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1012.835876][ T7311] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1012.848271][ T7311] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1012.863244][ T7311] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1012.886854][ T5641] dvb-usb: bulk message failed: -22 (1/0) [ 1012.887545][ T807] usb 5-1: USB disconnect, device number 4 [ 1012.900773][ T7311] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1012.934332][ T7311] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1012.940132][ T807] em28xx 5-1:0.0: Disconnecting em28xx [ 1012.953179][ T5641] usb 1-1: USB disconnect, device number 117 [ 1012.960355][ T5369] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1012.984149][ T7311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.018708][ T7311] usb 3-1: Product: syz [ 1013.029835][ T7311] usb 3-1: Manufacturer: syz [ 1013.034916][ T7311] usb 3-1: SerialNumber: syz [ 1013.051038][ T7311] usb 3-1: config 0 descriptor?? [ 1013.054261][ T7302] em28xx 5-1:0.0: Registering input extension [ 1013.073637][ T807] em28xx 5-1:0.0: Closing input extension [ 1013.080404][T18215] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 1013.099252][ T7311] usb 3-1: will this work? Command EP is not usually 12 [ 1013.128226][ T5641] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1013.147491][ T7311] usb 3-1: will this work? Response EP is not usually 3 [ 1013.154798][ T7311] usb 3-1: will this work? Image data EP is not usually 2 [ 1013.162096][ T5369] usb 2-1: Using ep0 maxpacket: 8 [ 1013.170555][ T5369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.194273][ T7311] scsi host1: microtekX6 [ 1013.198917][ T5369] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1013.218531][ T807] em28xx 5-1:0.0: Freeing device [ 1013.233130][ T5369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.250364][T11995] usb 3-1: error -90 submitting URB [ 1013.267627][T18229] xt_hashlimit: size too large, truncated to 1048576 [ 1013.284470][ T5369] usb 2-1: config 0 descriptor?? [ 1013.291749][T11995] usb 3-1: error -90 submitting URB [ 1013.311481][ T5369] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1013.328416][ T11] usb 3-1: error -90 submitting URB [ 1013.354554][ T7302] usb 3-1: USB disconnect, device number 97 [ 1013.386590][T18231] usb 3-1: error -19 submitting URB [ 1013.515432][ T807] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1013.787085][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.801202][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.812379][ T807] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1013.823108][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.835096][ T7311] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1013.857147][ T807] usb 5-1: config 0 descriptor?? [ 1014.007536][ T7311] usb 1-1: device descriptor read/64, error -71 [ 1014.143375][T18242] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1014.167550][T18242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1014.272241][ T807] hid-led 0003:1D34:000A.003E: unknown main item tag 0x3 [ 1014.275088][ T7311] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1014.415499][ T5641] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1014.425076][ T7311] usb 1-1: device descriptor read/64, error -71 [ 1014.471647][ T807] hid-led 0003:1D34:000A.003E: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 1014.502681][ T807] hid-led 0003:1D34:000A.003E: Dream Cheeky Webmail Notifier initialized [ 1014.540546][ T7311] usb usb1-port1: attempt power cycle [ 1014.597457][ T5641] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 1014.606228][ T5641] usb 4-1: config 0 has no interface number 0 [ 1014.612428][ T5641] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 1216, setting to 64 [ 1014.625230][ T7302] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1014.630551][ T5641] usb 4-1: config 0 interface 235 has no altsetting 0 [ 1014.643105][ T5641] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1014.654361][ T5641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.662837][ T5641] usb 4-1: Product: syz [ 1014.667538][ T5641] usb 4-1: Manufacturer: syz [ 1014.672226][ T5641] usb 4-1: SerialNumber: syz [ 1014.683842][ T5641] usb 4-1: config 0 descriptor?? [ 1014.704591][ T5641] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 1014.717688][T18225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.724858][ T5641] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 1014.728754][T18225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.751626][ T807] usb 5-1: USB disconnect, device number 5 [ 1014.752248][ T5641] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 1014.789823][ T5641] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 1014.802121][ T5641] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 1014.810573][ T5641] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 1014.818815][ T5641] keyspan 4-1:0.235: unsupported endpoint type 0 [ 1014.829202][ T7302] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1014.829439][ T5641] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1014.839285][ T7302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.859371][ T7302] usb 3-1: Product: syz [ 1014.863719][ T7302] usb 3-1: Manufacturer: syz [ 1014.871506][ T7302] usb 3-1: SerialNumber: syz [ 1014.880058][ T7302] usb 3-1: config 0 descriptor?? [ 1014.906813][ T7311] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1014.936485][ T7311] usb 1-1: device descriptor read/8, error -71 [ 1015.037974][ T5641] usb 4-1: USB disconnect, device number 90 [ 1015.064995][ T5641] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1015.089101][ T5641] keyspan 4-1:0.235: device disconnected [ 1015.195398][ T7311] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1015.225297][ T5369] gspca_vc032x: reg_w err -110 [ 1015.230798][ T7311] usb 1-1: device descriptor read/8, error -71 [ 1015.237840][ T5369] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1015.355666][ T7311] usb usb1-port1: unable to enumerate USB device [ 1015.384127][ T7311] usb 2-1: USB disconnect, device number 82 [ 1015.723626][T18250] fuse: Bad value for 'fd' [ 1016.210044][T18253] FAULT_INJECTION: forcing a failure. [ 1016.210044][T18253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.242702][T18253] CPU: 1 UID: 0 PID: 18253 Comm: syz.3.3358 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.242740][T18253] Tainted: [L]=SOFTLOCKUP [ 1016.242745][T18253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.242752][T18253] Call Trace: [ 1016.242758][T18253] [ 1016.242764][T18253] dump_stack_lvl+0xe8/0x150 [ 1016.242784][T18253] should_fail_ex+0x412/0x560 [ 1016.242801][T18253] _copy_from_user+0x2d/0xb0 [ 1016.242817][T18253] input_event_from_user+0xb1/0x290 [ 1016.242840][T18253] ? __pfx_input_event_from_user+0x10/0x10 [ 1016.242861][T18253] evdev_write+0x2c7/0x4c0 [ 1016.242874][T18253] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.242891][T18253] ? __pfx_evdev_write+0x10/0x10 [ 1016.242905][T18253] ? bpf_lsm_file_permission+0x9/0x20 [ 1016.242921][T18253] ? security_file_permission+0x75/0x260 [ 1016.242937][T18253] ? rw_verify_area+0x255/0x4d0 [ 1016.242954][T18253] ? __pfx_evdev_write+0x10/0x10 [ 1016.242968][T18253] vfs_write+0x29a/0xb90 [ 1016.242989][T18253] ? __pfx_vfs_write+0x10/0x10 [ 1016.243007][T18253] ? __fget_files+0x2a/0x420 [ 1016.243024][T18253] ? __fget_files+0x2a/0x420 [ 1016.243037][T18253] ? __fget_files+0x3a0/0x420 [ 1016.243051][T18253] ? __fget_files+0x2a/0x420 [ 1016.243070][T18253] ksys_write+0x150/0x270 [ 1016.243089][T18253] ? __pfx_ksys_write+0x10/0x10 [ 1016.243111][T18253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.243124][T18253] do_syscall_64+0x174/0x580 [ 1016.243137][T18253] ? trace_irq_disable+0x3b/0x140 [ 1016.243154][T18253] ? clear_bhb_loop+0x40/0x90 [ 1016.243169][T18253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.243182][T18253] RIP: 0033:0x7f51ae79ce59 [ 1016.243201][T18253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.243217][T18253] RSP: 002b:00007f51af61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1016.243239][T18253] RAX: ffffffffffffffda RBX: 00007f51aea15fa0 RCX: 00007f51ae79ce59 [ 1016.243248][T18253] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 1016.243256][T18253] RBP: 00007f51af61f090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.243264][T18253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1016.243271][T18253] R13: 00007f51aea16038 R14: 00007f51aea15fa0 R15: 00007f51aeb3fa48 [ 1016.243290][T18253] [ 1016.613869][ T7302] usb 3-1: Firmware version (0.0) predates our first public release. [ 1016.622433][ T7302] usb 3-1: Please update to version 0.2 or newer [ 1016.829691][ T7302] usb 3-1: USB disconnect, device number 98 [ 1017.747944][T16604] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1017.916417][T16604] usb 4-1: Using ep0 maxpacket: 32 [ 1017.942416][T16604] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1017.961543][T16604] usb 4-1: config 0 has no interface number 0 [ 1017.975581][T16604] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1018.004615][T16604] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1018.043804][T16604] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1018.080107][T16604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.104528][T16604] usb 4-1: Product: syz [ 1018.110360][T16604] usb 4-1: Manufacturer: syz [ 1018.119584][T16604] usb 4-1: SerialNumber: syz [ 1018.144807][T16604] usb 4-1: config 0 descriptor?? [ 1018.171674][T16604] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1018.204731][T16604] em28xx 4-1:0.89: Video interface 89 found: [ 1018.477653][T18297] netlink: 'syz.1.3369': attribute type 7 has an invalid length. [ 1018.493171][T18297] netlink: 'syz.1.3369': attribute type 8 has an invalid length. [ 1018.772528][T16604] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1018.851085][T18309] FAULT_INJECTION: forcing a failure. [ 1018.851085][T18309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.886376][T18309] CPU: 1 UID: 0 PID: 18309 Comm: syz.0.3372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.886415][T18309] Tainted: [L]=SOFTLOCKUP [ 1018.886423][T18309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1018.886434][T18309] Call Trace: [ 1018.886442][T18309] [ 1018.886451][T18309] dump_stack_lvl+0xe8/0x150 [ 1018.886481][T18309] should_fail_ex+0x412/0x560 [ 1018.886510][T18309] _copy_from_user+0x2d/0xb0 [ 1018.886536][T18309] input_event_from_user+0xb1/0x290 [ 1018.886561][T18309] ? __pfx_input_event_from_user+0x10/0x10 [ 1018.886597][T18309] evdev_write+0x2c7/0x4c0 [ 1018.886618][T18309] ? __lock_acquire+0x6b5/0x2cf0 [ 1018.886645][T18309] ? __pfx_evdev_write+0x10/0x10 [ 1018.886669][T18309] ? bpf_lsm_file_permission+0x9/0x20 [ 1018.886706][T18309] ? security_file_permission+0x75/0x260 [ 1018.886733][T18309] ? rw_verify_area+0x255/0x4d0 [ 1018.886760][T18309] ? __pfx_evdev_write+0x10/0x10 [ 1018.886784][T18309] vfs_write+0x29a/0xb90 [ 1018.886821][T18309] ? __pfx_vfs_write+0x10/0x10 [ 1018.886851][T18309] ? __fget_files+0x2a/0x420 [ 1018.886880][T18309] ? __fget_files+0x2a/0x420 [ 1018.886902][T18309] ? __fget_files+0x3a0/0x420 [ 1018.886926][T18309] ? __fget_files+0x2a/0x420 [ 1018.886959][T18309] ksys_write+0x150/0x270 [ 1018.886990][T18309] ? __pfx_ksys_write+0x10/0x10 [ 1018.887028][T18309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.887050][T18309] do_syscall_64+0x174/0x580 [ 1018.887071][T18309] ? trace_irq_disable+0x3b/0x140 [ 1018.887100][T18309] ? clear_bhb_loop+0x40/0x90 [ 1018.887125][T18309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.887146][T18309] RIP: 0033:0x7f977279ce59 [ 1018.887166][T18309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.887182][T18309] RSP: 002b:00007f9773736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1018.887204][T18309] RAX: ffffffffffffffda RBX: 00007f9772a15fa0 RCX: 00007f977279ce59 [ 1018.887218][T18309] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 1018.887230][T18309] RBP: 00007f9773736090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.887242][T18309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1018.887253][T18309] R13: 00007f9772a16038 R14: 00007f9772a15fa0 R15: 00007f9772b3fa48 [ 1018.887287][T18309] [ 1018.955456][ T5755] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 1019.287533][ T5755] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1019.302451][ T5755] usb 3-1: config 0 has no interface number 0 [ 1019.329816][ T5755] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1019.354060][ T5755] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1019.371554][ T5755] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1019.385537][ T5755] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1019.407513][ T5755] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1019.419259][ T5755] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1019.425654][T16604] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 1019.433794][ T5755] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1019.433827][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.446684][ T5755] usb 3-1: config 0 descriptor?? [ 1019.507757][T18305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1019.517715][T16604] em28xx 4-1:0.89: board has no eeprom [ 1019.524355][T18305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1019.569772][ T5755] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1019.673823][T18326] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1019.792258][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1019.850754][T18305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1019.957764][ T5369] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1019.977013][T16604] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1019.998740][T16604] em28xx 4-1:0.89: analog set to bulk mode. [ 1020.017479][T14323] em28xx 4-1:0.89: Registering V4L2 extension [ 1020.028617][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 1020.042533][T16604] usb 4-1: USB disconnect, device number 91 [ 1020.069406][T16604] em28xx 4-1:0.89: Disconnecting em28xx [ 1020.090439][T18305] could not allocate digest TFM handle blake2b-512-generic [ 1020.115537][ T5369] usb 1-1: Using ep0 maxpacket: 8 [ 1020.131013][ T5369] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.151409][T14323] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1020.153001][ T5369] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1020.168167][T14323] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1020.168193][T14323] em28xx 4-1:0.89: No AC97 audio processor [ 1020.186905][T14323] usb 4-1: Decoder not found [ 1020.189040][ T5369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.202435][T14323] em28xx 4-1:0.89: failed to create media graph [ 1020.204199][ T5369] usb 1-1: config 0 descriptor?? [ 1020.222165][T14323] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1020.280551][T14323] em28xx 4-1:0.89: Registering snapshot button... [ 1020.314718][T14323] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input81 [ 1020.367807][T14323] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1020.385087][T16604] em28xx 4-1:0.89: Closing input extension [ 1020.391133][T16604] em28xx 4-1:0.89: Deregistering snapshot button [ 1020.443605][ T5369] usb 1-1: USB disconnect, device number 122 [ 1020.490678][T16604] em28xx 4-1:0.89: Freeing device [ 1020.731562][ T7302] usb 3-1: USB disconnect, device number 99 [ 1020.785745][ T5644] Bluetooth: hci4: command 0x0406 tx timeout [ 1020.828856][ T7302] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1020.925277][ T5369] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1020.927840][T18356] input: syz1 as /devices/virtual/input/input82 [ 1020.967594][T18355] FAULT_INJECTION: forcing a failure. [ 1020.967594][T18355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.034477][T18355] CPU: 0 UID: 0 PID: 18355 Comm: syz.2.3386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.034514][T18355] Tainted: [L]=SOFTLOCKUP [ 1021.034522][T18355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1021.034534][T18355] Call Trace: [ 1021.034544][T18355] [ 1021.034554][T18355] dump_stack_lvl+0xe8/0x150 [ 1021.034584][T18355] should_fail_ex+0x412/0x560 [ 1021.034614][T18355] _copy_from_user+0x2d/0xb0 [ 1021.034641][T18355] input_event_from_user+0xb1/0x290 [ 1021.034667][T18355] ? __pfx_input_event_from_user+0x10/0x10 [ 1021.034704][T18355] evdev_write+0x2c7/0x4c0 [ 1021.034725][T18355] ? __lock_acquire+0x6b5/0x2cf0 [ 1021.034752][T18355] ? __pfx_evdev_write+0x10/0x10 [ 1021.034776][T18355] ? bpf_lsm_file_permission+0x9/0x20 [ 1021.034813][T18355] ? security_file_permission+0x75/0x260 [ 1021.034839][T18355] ? rw_verify_area+0x255/0x4d0 [ 1021.034867][T18355] ? __pfx_evdev_write+0x10/0x10 [ 1021.034891][T18355] vfs_write+0x29a/0xb90 [ 1021.034929][T18355] ? __pfx_vfs_write+0x10/0x10 [ 1021.034956][T18355] ? __fget_files+0x2a/0x420 [ 1021.034981][T18355] ? __fget_files+0x2a/0x420 [ 1021.035003][T18355] ? __fget_files+0x3a0/0x420 [ 1021.035024][T18355] ? __fget_files+0x2a/0x420 [ 1021.035054][T18355] ksys_write+0x150/0x270 [ 1021.035084][T18355] ? __pfx_ksys_write+0x10/0x10 [ 1021.035121][T18355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.035144][T18355] do_syscall_64+0x174/0x580 [ 1021.035164][T18355] ? trace_irq_disable+0x3b/0x140 [ 1021.035192][T18355] ? clear_bhb_loop+0x40/0x90 [ 1021.035217][T18355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.035237][T18355] RIP: 0033:0x7f241819ce59 [ 1021.035257][T18355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.035273][T18355] RSP: 002b:00007f24190b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1021.035295][T18355] RAX: ffffffffffffffda RBX: 00007f2418415fa0 RCX: 00007f241819ce59 [ 1021.035309][T18355] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 1021.035322][T18355] RBP: 00007f24190b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.035334][T18355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1021.035346][T18355] R13: 00007f2418416038 R14: 00007f2418415fa0 R15: 00007f241853fa48 [ 1021.035379][T18355] [ 1021.730289][ T5369] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1021.776576][ T5369] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1021.802524][ T5369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1021.887693][ T5369] usb 5-1: Product: syz [ 1021.922391][ T5369] usb 5-1: Manufacturer: syz [ 1021.963386][ T5369] usb 5-1: SerialNumber: syz [ 1022.307982][ T5369] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1022.419286][ T5369] usb 5-1: USB disconnect, device number 6 [ 1022.480286][ T5369] usblp0: removed [ 1022.688257][T18385] xt_hashlimit: size too large, truncated to 1048576 [ 1022.877785][ T5369] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1022.909460][T18386] syzkaller0: entered promiscuous mode [ 1022.964862][T18386] syzkaller0: entered allmulticast mode [ 1023.084791][ T5369] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1023.123492][ T5369] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 1023.161686][ T5369] usb 5-1: config 0 has no interface number 0 [ 1023.189414][ T5369] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1023.212342][ T5369] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1023.242367][ T5369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.289987][ T5369] usb 5-1: config 0 descriptor?? [ 1023.884592][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3398'. [ 1023.926231][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3398'. [ 1024.039064][ T5641] usb 5-1: USB disconnect, device number 7 [ 1024.565240][ T5641] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1024.728227][ T5641] usb 5-1: config 3 has an invalid interface number: 3 but max is 1 [ 1024.749865][ T5641] usb 5-1: config 3 has an invalid interface number: 50 but max is 1 [ 1024.769596][ T5641] usb 5-1: config 3 has no interface number 0 [ 1024.791916][ T5641] usb 5-1: config 3 has no interface number 1 [ 1024.808527][ T5641] usb 5-1: config 3 interface 3 has no altsetting 0 [ 1024.822249][ T5641] usb 5-1: config 3 interface 50 has no altsetting 0 [ 1024.849806][ T5641] usb 5-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1024.878638][ T5641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.905671][ T5641] usb 5-1: Product: syz [ 1024.922013][ T5641] usb 5-1: Manufacturer: syz [ 1024.932156][ T5641] usb 5-1: SerialNumber: syz [ 1025.075068][T14323] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1025.239348][T14323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.241099][ T5641] usb 5-1: unknown number of interfaces: 2 [ 1025.263618][T14323] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1025.284809][T14323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.310244][ T5641] usb 5-1: USB disconnect, device number 8 [ 1025.319473][T14323] usb 3-1: config 0 descriptor?? [ 1025.585154][T16604] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1025.762164][T16604] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1025.786204][T16604] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1025.805983][T16604] usb 2-1: Product: syz [ 1025.830242][T16604] usb 2-1: config 0 descriptor?? [ 1025.862675][T16604] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1025.897428][T16604] usb 2-1: Detected FT232H [ 1025.995127][T18428] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1026.065839][T16604] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1026.165977][ T5755] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1026.294681][T18439] fuse: Bad value for 'fd' [ 1026.310393][ T5755] usb 5-1: device descriptor read/64, error -71 [ 1026.395863][T18443] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1026.565211][ T5755] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1026.578381][T16604] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1026.715126][ T5755] usb 5-1: device descriptor read/64, error -71 [ 1026.816032][ T7302] usb 2-1: USB disconnect, device number 83 [ 1026.856106][ T5755] usb usb5-port1: attempt power cycle [ 1026.887658][ T7302] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1026.909664][T16604] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1026.932405][ T7302] ftdi_sio 2-1:0.0: device disconnected [ 1027.103543][T16604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.133909][T16604] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1027.145743][T16604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.154775][T16604] usb 4-1: Product: syz [ 1027.162652][T16604] usb 4-1: Manufacturer: syz [ 1027.168949][T16604] usb 4-1: SerialNumber: syz [ 1027.201191][T16604] usb 4-1: config 0 descriptor?? [ 1027.215437][ T5755] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1027.219905][T16604] cdc_ether 4-1:0.0: bad CDC descriptors [ 1027.251004][T16604] usb 4-1: unsupported MDLM descriptors [ 1027.255835][ T5755] usb 5-1: device descriptor read/8, error -71 [ 1027.430793][T16604] usb 4-1: USB disconnect, device number 92 [ 1027.505214][ T5755] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1027.535826][ T5755] usb 5-1: device descriptor read/8, error -71 [ 1027.657457][ T5755] usb usb5-port1: unable to enumerate USB device [ 1027.785459][ T7302] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1027.848814][T14323] usbhid 3-1:0.0: can't add hid device: -71 [ 1027.870038][T14323] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1027.893063][T14323] usb 3-1: USB disconnect, device number 100 [ 1027.962270][ T7302] usb 2-1: config 0 has no interfaces? [ 1027.987758][ T7302] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1028.014398][ T7302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.032903][ T7302] usb 2-1: Product: syz [ 1028.043030][ T7302] usb 2-1: Manufacturer: syz [ 1028.057478][ T7302] usb 2-1: SerialNumber: syz [ 1028.080980][ T7302] usb 2-1: config 0 descriptor?? [ 1028.215264][T16604] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1028.355949][T18456] program syz.1.3417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1028.383701][T16604] usb 1-1: device descriptor read/64, error -71 [ 1028.432562][ T5641] usb 2-1: USB disconnect, device number 84 [ 1028.645505][T16604] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1028.808255][T16604] usb 1-1: device descriptor read/64, error -71 [ 1028.943099][T16604] usb usb1-port1: attempt power cycle [ 1029.325047][T16604] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1029.429200][T16604] usb 1-1: device descriptor read/8, error -71 [ 1029.514133][T14323] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1029.695352][T16604] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1029.711328][T14323] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1029.748320][T14323] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1029.764193][T16604] usb 1-1: device descriptor read/8, error -71 [ 1029.792424][T14323] usb 5-1: Product: syz [ 1029.827286][T14323] usb 5-1: config 0 descriptor?? [ 1029.852921][T14323] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1029.893248][T14323] usb 5-1: Detected FT232H [ 1029.900648][T16604] usb usb1-port1: unable to enumerate USB device [ 1030.056797][T14323] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1030.356419][ T5641] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1030.395560][ T5755] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1030.535232][ T5641] usb 4-1: Using ep0 maxpacket: 8 [ 1030.563225][ T5641] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1030.584583][ T5755] usb 2-1: Using ep0 maxpacket: 8 [ 1030.586366][T14323] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1030.596814][ T5641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.610750][ T5755] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.641700][ T5641] usb 4-1: Product: syz [ 1030.647333][ T5755] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1030.657836][ T5641] usb 4-1: Manufacturer: syz [ 1030.670198][ T5641] usb 4-1: SerialNumber: syz [ 1030.693027][ T5755] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1030.709295][ T5641] usb 4-1: config 0 descriptor?? [ 1030.719333][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.740645][ T5641] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1030.751788][ T5755] usb 2-1: Product: syz [ 1030.761605][ T5755] usb 2-1: Manufacturer: syz [ 1030.775066][ T5755] usb 2-1: SerialNumber: syz [ 1030.812890][T14323] usb 5-1: USB disconnect, device number 13 [ 1030.874016][T14323] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1030.908956][T14323] ftdi_sio 5-1:0.0: device disconnected [ 1031.159661][T18505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3430'. [ 1031.223741][T18505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1031.233476][T18505] IPv6: NLM_F_CREATE should be set when creating new route [ 1031.273220][ T5755] usb 2-1: USB disconnect, device number 85 [ 1031.297418][T18505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3430'. [ 1031.345513][T18520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1031.723735][ T5641] gspca_sq930x: ucbus_write failed -71 [ 1031.750972][ T5641] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 1031.791126][ T5641] usb 4-1: USB disconnect, device number 93 [ 1031.891910][T18540] random: crng reseeded on system resumption [ 1032.011433][T18540] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1032.018117][T18540] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1032.062753][T18540] vhci_hcd vhci_hcd.0: Device attached [ 1032.236393][ T5641] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1032.306453][ T5641] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1032.475032][ T7311] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1032.592540][T18548] vhci_hcd: connection reset by peer [ 1032.641794][ T7891] vhci_hcd vhci_hcd.4: stop threads [ 1032.647341][T16604] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1032.658305][ T7311] usb 3-1: Using ep0 maxpacket: 16 [ 1032.660049][ T7891] vhci_hcd vhci_hcd.4: release socket [ 1032.679938][ T7311] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1032.690673][ T7891] vhci_hcd vhci_hcd.4: disconnect device [ 1032.707829][ T5755] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1032.717743][ T7311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1032.743893][ T7311] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1032.774472][ T7311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.800899][ T7311] usb 3-1: Product: syz [ 1032.808904][ T7311] usb 3-1: Manufacturer: syz [ 1032.825016][ T7311] usb 3-1: SerialNumber: syz [ 1032.827880][T16604] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1032.832679][ T7311] usb 3-1: config 0 descriptor?? [ 1032.856706][T16604] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1032.860248][ T7311] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1032.875534][T16604] usb 4-1: Product: syz [ 1032.889520][ T7311] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1032.891213][T16604] usb 4-1: config 0 descriptor?? [ 1032.917291][T16604] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1032.921138][ T5755] usb 2-1: Using ep0 maxpacket: 16 [ 1032.942539][ T5755] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1032.945260][T16604] usb 4-1: Detected FT232H [ 1032.969786][ T5755] usb 2-1: config 1 has no interface number 0 [ 1032.985149][ T5755] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1033.005606][ T5755] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1033.035271][ T5755] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1033.050190][ T5755] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1033.075063][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1033.095193][ T5755] usb 2-1: Product: syz [ 1033.099461][ T5755] usb 2-1: Manufacturer: syz [ 1033.104142][ T5755] usb 2-1: SerialNumber: syz [ 1033.123095][T16604] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1033.129381][T18564] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1033.145417][T18564] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1033.470175][ T7311] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1033.486595][ T7311] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1033.526832][T18569] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1033.574110][T18564] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1033.585191][T18564] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1033.614171][ T5755] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 1033.653905][ T5755] aqc111 2-1:1.105: probe with driver aqc111 failed with error -32 [ 1033.682482][T16604] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1033.709343][T16604] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1033.763949][T16604] usb 4-1: USB disconnect, device number 94 [ 1033.836763][ T807] usb 2-1: USB disconnect, device number 86 [ 1033.843650][T16604] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1033.881002][T16604] ftdi_sio 4-1:0.0: device disconnected [ 1034.787447][T16604] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1034.806847][ T994] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1034.923293][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 1034.923341][ T30] audit: type=1326 audit(1781036048.991:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18586 comm="syz.0.3453" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f977279ce59 code=0x0 [ 1034.995074][T16604] usb 5-1: Using ep0 maxpacket: 8 [ 1035.015397][ T994] usb 2-1: Using ep0 maxpacket: 16 [ 1035.017762][T16604] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1035.032746][ T994] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1035.055697][T16604] usb 5-1: config 7 has an invalid interface number: 70 but max is 0 [ 1035.076713][T16604] usb 5-1: config 7 has no interface number 0 [ 1035.091391][ T994] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.099746][T16604] usb 5-1: config 7 interface 70 altsetting 9 endpoint 0x2 has invalid maxpacket 1007, setting to 64 [ 1035.111008][ T994] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1035.129446][T16604] usb 5-1: config 7 interface 70 has no altsetting 0 [ 1035.141661][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1035.148368][T16604] usb 5-1: string descriptor 0 read error: -22 [ 1035.158568][T16604] usb 5-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=fe.05 [ 1035.172615][ T994] usb 2-1: SerialNumber: syz [ 1035.178604][ T7311] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1035.189608][T16604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.197253][ T7311] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1035.217896][ T7311] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1035.226976][ T994] usb 2-1: 0:2 : does not exist [ 1035.234767][ T7311] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1035.244835][ T7311] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1035.258413][T16604] hso 5-1:7.70: Not our interface [ 1035.263893][ T7311] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1035.312846][T18595] xt_hashlimit: size too large, truncated to 1048576 [ 1035.337588][ T5369] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1035.477045][T18574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3449'. [ 1035.524511][ T5755] usb 3-1: USB disconnect, device number 101 [ 1035.532937][ T5369] usb 4-1: Using ep0 maxpacket: 8 [ 1035.537269][T16604] usb 5-1: USB disconnect, device number 14 [ 1035.570172][ T5369] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1035.611279][ T5369] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1035.677563][ T5369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.721028][ T5369] usb 4-1: config 0 descriptor?? [ 1035.759998][ T5369] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1036.465731][ T5369] gspca_vc032x: reg_w err -71 [ 1036.490961][ T5369] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1036.530816][ T5369] usb 4-1: USB disconnect, device number 95 [ 1036.575161][ T5755] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1036.647847][ T994] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1036.682828][ T994] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1036.709481][ T994] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1036.725560][ T807] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1036.727449][ T994] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1036.763413][ T5755] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1036.796512][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1036.805430][ T5755] usb 3-1: Product: syz [ 1036.813111][ T994] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1036.835901][ T5755] usb 3-1: config 0 descriptor?? [ 1036.850075][ T5755] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1036.879570][ T5755] usb 3-1: Detected FT232H [ 1036.886135][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 1036.894275][ T994] usb 2-1: USB disconnect, device number 87 [ 1036.906634][ T807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.924236][ T807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1036.939555][ T807] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1036.955069][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.980191][ T807] usb 5-1: Product: syz [ 1036.992423][ T807] usb 5-1: Manufacturer: syz [ 1037.007461][ T807] usb 5-1: SerialNumber: syz [ 1037.044226][ T807] usb 5-1: 0:2 : does not exist [ 1037.051391][ T5755] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1037.145115][T16604] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1037.244583][T18611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.278842][T18611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.298134][T16604] usb 1-1: device descriptor read/64, error -71 [ 1037.334091][T18611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.353547][T18611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.366945][T18625] netlink: 'syz.3.3463': attribute type 6 has an invalid length. [ 1037.442552][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3459'. [ 1037.498191][ T5641] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1037.555127][T16604] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1037.640246][ T5755] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1037.669322][ T5755] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1037.695455][ T994] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1037.705930][ T5755] usb 3-1: USB disconnect, device number 102 [ 1037.715392][T16604] usb 1-1: device descriptor read/64, error -71 [ 1037.739109][ T5755] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1037.769534][ T5755] ftdi_sio 3-1:0.0: device disconnected [ 1037.784041][ T807] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1037.835394][T16604] usb usb1-port1: attempt power cycle [ 1037.885279][ T994] usb 4-1: Using ep0 maxpacket: 16 [ 1037.899742][ T994] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 1037.921070][ T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.949538][ T994] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1037.976241][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.982130][ T807] usb 5-1: USB disconnect, device number 15 [ 1037.992214][ T994] usb 4-1: Product: syz [ 1037.995389][T14323] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1038.006498][ T994] usb 4-1: Manufacturer: syz [ 1038.012814][ T994] usb 4-1: SerialNumber: syz [ 1038.034175][ T994] usb 4-1: config 0 descriptor?? [ 1038.062114][ T994] asix 4-1:0.0: probe with driver asix failed with error -22 [ 1038.175043][T14323] usb 2-1: Using ep0 maxpacket: 32 [ 1038.185107][T16604] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1038.200808][T14323] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1038.226305][T14323] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1038.240148][T14323] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1038.252221][T14323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.263376][T16604] usb 1-1: device descriptor read/8, error -71 [ 1038.276700][T14323] usb 2-1: config 0 descriptor?? [ 1038.284455][ T994] usb 4-1: USB disconnect, device number 96 [ 1038.328269][T18631] netlink: 'syz.2.3465': attribute type 1 has an invalid length. [ 1038.336596][T18631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3465'. [ 1038.509350][T16604] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1038.540928][T16604] usb 1-1: device descriptor read/8, error -71 [ 1038.666874][T18642] kAFS: unable to lookup cell '' [ 1038.673548][T16604] usb usb1-port1: unable to enumerate USB device [ 1038.683511][T14323] usbhid 2-1:0.0: can't add hid device: -71 [ 1038.691599][T18645] kAFS: unable to lookup cell '(,c' [ 1038.699387][T14323] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1038.728438][T14323] usb 2-1: USB disconnect, device number 88 [ 1038.909456][T18650] loop5: detected capacity change from 0 to 7 [ 1038.920828][T18650] loop5: [ 1038.924058][T18650] loop5: partition table partially beyond EOD, truncated [ 1039.806053][ T994] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1039.990187][ T994] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1040.021029][ T994] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1040.045791][ T994] usb 4-1: Product: syz [ 1040.066827][ T994] usb 4-1: config 0 descriptor?? [ 1040.087293][ T994] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1040.126929][ T994] usb 4-1: Detected FT232H [ 1040.141824][ T5641] hid-generic 0003:0003:0006.003F: unknown main item tag 0x2 [ 1040.178492][ T5641] hid-generic 0003:0003:0006.003F: item fetching failed at offset 10/18 [ 1040.205261][ T5641] hid-generic 0003:0003:0006.003F: probe with driver hid-generic failed with error -22 [ 1040.291625][ T994] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1040.615292][ T7311] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1040.642443][ T994] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1040.671253][ T994] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1040.685797][T14323] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 1040.701940][ T994] usb 4-1: USB disconnect, device number 97 [ 1040.733676][ T994] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1040.762609][ T994] ftdi_sio 4-1:0.0: device disconnected [ 1040.812373][ T7311] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1040.871317][T14323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.920054][T14323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1040.951407][ T7311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1040.952318][T14323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1041.014613][ T7311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1041.019651][T14323] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1041.068280][ T7311] usb 5-1: Product: syz [ 1041.071852][T14323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.086385][ T7311] usb 5-1: Manufacturer: syz [ 1041.105439][ T7311] usb 5-1: SerialNumber: syz [ 1041.114341][T18691] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1041.157128][T14323] hub 1-1:1.0: bad descriptor, ignoring hub [ 1041.177498][T14323] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1041.195467][T18702] usb usb7: usbfs: process 18702 (syz.1.3487) did not claim interface 0 before use [ 1041.206867][T14323] cdc_wdm 1-1:1.0: skipping garbage [ 1041.221550][T14323] cdc_wdm 1-1:1.0: skipping garbage [ 1041.241681][T14323] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1041.260342][T14323] cdc_wdm 1-1:1.0: Unknown control protocol [ 1041.465171][ T994] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1041.486011][ T5755] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1041.590493][T18691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.663526][ T994] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1041.683983][T18691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.705333][ T5755] usb 3-1: Using ep0 maxpacket: 32 [ 1041.756482][ T994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.798835][ T5755] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.849984][ T994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.869618][ T5755] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1041.925102][ T994] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1041.953757][ T5755] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1041.985369][ T5755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1041.999811][ T994] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1042.015969][T16604] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1042.053991][ T5755] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1042.079766][T18714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.088234][ T994] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1042.120190][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.138762][ T994] usb 2-1: Manufacturer: syz [ 1042.146550][T18714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.175420][ T994] usb 2-1: config 0 descriptor?? [ 1042.187915][T16604] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1042.201316][T16604] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1042.212871][T16604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 22, changing to 8 [ 1042.229061][ T5755] usb 3-1: config 0 descriptor?? [ 1042.235978][T16604] usb 4-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice= 0.40 [ 1042.261123][T16604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.285078][T16604] usb 4-1: Product: syz [ 1042.302448][T16604] usb 4-1: Manufacturer: syz [ 1042.317752][T16604] usb 4-1: SerialNumber: syz [ 1042.439045][ T994] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 1042.519527][ T994] appleir 0003:05AC:8243.0040: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1042.609722][T16604] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1042.657603][ T994] usb 2-1: USB disconnect, device number 89 [ 1042.688494][ T5755] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1042.717919][ T24] usb 1-1: USB disconnect, device number 5 [ 1042.731509][ T5755] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1042.774755][ T5755] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1042.793615][ T5755] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1042.809793][ T7311] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1042.828950][ T5755] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 1042.881772][ T7311] usb 5-1: USB disconnect, device number 16 [ 1042.892269][ T5755] hid-thrustmaster 0003:044F:B65D.0041: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 1042.930456][ T5755] hid-thrustmaster 0003:044F:B65D.0041: Unexpected non-int endpoint [ 1042.948048][ T7311] usblp1: removed [ 1042.969218][ C0] hid-thrustmaster 0003:044F:B65D.0041: URB to get model id failed with error -71 [ 1042.996822][ T5755] usb 3-1: USB disconnect, device number 103 [ 1043.083880][T16604] usb 4-1: USB disconnect, device number 98 [ 1043.585407][ T5755] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1043.768005][ T5755] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1043.793025][ T5755] usb 2-1: config 0 has no interface number 0 [ 1043.799858][ T5755] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1043.820974][ T5755] usb 2-1: config 0 interface 235 has no altsetting 0 [ 1043.876286][ T994] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1043.887779][ T5755] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1043.928333][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.946551][ T5755] usb 2-1: Product: syz [ 1043.950817][ T5755] usb 2-1: Manufacturer: syz [ 1043.956045][ T5755] usb 2-1: SerialNumber: syz [ 1043.964779][ T5755] usb 2-1: config 0 descriptor?? [ 1043.986728][ T5755] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected [ 1043.994752][ T5755] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87 [ 1044.003903][ T5755] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7 [ 1044.014442][ T5755] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81 [ 1044.026028][ T5755] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1 [ 1044.033970][ T5755] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85 [ 1044.045686][ T5755] keyspan 2-1:0.235: unsupported endpoint type 0 [ 1044.054313][ T5755] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1044.063797][ T994] usb 3-1: device descriptor read/64, error -71 [ 1044.175101][ T7311] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1044.192737][ T5755] usb 2-1: USB disconnect, device number 90 [ 1044.207522][ T5755] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1044.217174][ T5641] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1044.226819][ T5755] keyspan 2-1:0.235: device disconnected [ 1044.315177][ T994] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1044.360899][ T7311] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1044.391534][ T7311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.407668][ T5641] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1044.417627][ T7311] usb 1-1: Product: syz [ 1044.421876][ T5641] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1044.430212][ T7311] usb 1-1: Manufacturer: syz [ 1044.436837][ T7311] usb 1-1: SerialNumber: syz [ 1044.441518][ T5641] usb 5-1: Product: syz [ 1044.450236][ T7311] usb 1-1: config 0 descriptor?? [ 1044.459256][ T5641] usb 5-1: config 0 descriptor?? [ 1044.471689][ T5641] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1044.479446][ T994] usb 3-1: device descriptor read/64, error -71 [ 1044.488056][ T5641] usb 5-1: Detected FT232H [ 1044.605651][ T994] usb usb3-port1: attempt power cycle [ 1044.672171][ T5641] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1044.873230][T18741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.903575][T18741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.934496][T18741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.958552][ T994] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1044.981757][T18741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.008942][ T994] usb 3-1: device descriptor read/8, error -71 [ 1045.020821][ T5641] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1045.032053][ T7311] usb 1-1: Firmware: major: 9, minor: 0, hardware type: ATUSB (0) [ 1045.063950][ T5641] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1045.095714][ T5641] usb 5-1: USB disconnect, device number 17 [ 1045.125212][ T5641] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1045.137450][ T5641] ftdi_sio 5-1:0.0: device disconnected [ 1045.270651][T18741] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1045.277830][ T994] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1045.292124][ T5369] team_slave_0: entered promiscuous mode [ 1045.302064][ T5369] team_slave_1: entered promiscuous mode [ 1045.340245][ T994] usb 3-1: device descriptor read/8, error -71 [ 1045.477110][ T994] usb usb3-port1: unable to enumerate USB device [ 1045.855176][ T7311] usb 1-1: failed to fetch extended address, random address set [ 1045.961373][ T7311] usb 1-1: USB disconnect, device number 6 [ 1046.281798][ T994] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1046.401508][T18774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1046.425044][T18774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1046.456673][T18774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1046.475350][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 1046.489303][ T994] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1046.510935][ T994] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1046.521347][ T994] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1046.531855][ T994] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1046.542284][ T5369] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 1046.561004][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.590923][ T994] usb 5-1: Product: syz [ 1046.608564][ T994] usb 5-1: Manufacturer: syz [ 1046.624758][ T994] usb 5-1: SerialNumber: syz [ 1046.647788][ T994] usb 5-1: config 0 descriptor?? [ 1046.747277][ T5369] usb 2-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.781887][ T5369] usb 2-1: string descriptor 0 read error: -22 [ 1046.792329][ T5369] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 1046.803293][ T5369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1046.821691][ T5369] ati_remote 2-1:15.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1046.855348][T16604] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1046.868829][ T994] gs_usb 5-1:0.0: Couldn't get device config: (err=-32) [ 1046.885222][ T994] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1047.015091][T16604] usb 1-1: Using ep0 maxpacket: 8 [ 1047.028018][T18776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.038786][ T5641] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1047.051739][T16604] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1047.061865][T18776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.070337][T16604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1047.083069][ T994] usb 2-1: USB disconnect, device number 91 [ 1047.096248][T16604] usb 1-1: Product: syz [ 1047.114793][T16604] usb 1-1: Manufacturer: syz [ 1047.131957][T16604] usb 1-1: SerialNumber: syz [ 1047.150771][T16604] usb 1-1: config 0 descriptor?? [ 1047.172519][T16604] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1047.214060][T18795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1047.225035][T18795] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1047.226997][ T5641] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1047.266747][ T5641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1047.290088][ T5641] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1047.309713][ T5641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.346302][ T5641] usb 3-1: config 0 descriptor?? [ 1047.583743][ T5641] ath6kl: Failed to submit usb control message: -71 [ 1047.605824][ T5641] ath6kl: unable to send the bmi data to the device: -71 [ 1047.635437][ T5641] ath6kl: Unable to send get target info: -71 [ 1047.650728][ T994] usb 5-1: USB disconnect, device number 18 [ 1047.666682][ T5641] ath6kl: Failed to init ath6kl core: -71 [ 1047.715243][ T5641] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1047.780409][ T5641] usb 3-1: USB disconnect, device number 108 [ 1048.115171][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1048.212591][T16604] gspca_sq905: bulk read fail (-22) len 0/4 [ 1048.229536][T16604] sq905 1-1:0.0: probe with driver sq905 failed with error -5 [ 1048.275438][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1048.284373][ T24] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1048.318632][T18812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1048.328244][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1048.348972][T18812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1048.365042][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.387112][ T24] usb 2-1: config 0 descriptor?? [ 1048.405055][T14323] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1048.419227][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1048.447178][ T5641] usb 1-1: USB disconnect, device number 7 [ 1048.585998][T14323] usb 4-1: Using ep0 maxpacket: 16 [ 1048.602792][T14323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1048.622029][T14323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.633438][T18812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1048.653274][T14323] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1048.664452][T14323] usb 4-1: config 1 has no interface number 0 [ 1048.691150][T14323] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1048.711267][T14323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.731507][T14323] usb 4-1: Product: syz [ 1048.742809][T14323] usb 4-1: Manufacturer: syz [ 1048.778698][T14323] usb 4-1: SerialNumber: syz [ 1049.058205][T18831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.067909][T18831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.132942][T14323] usb 4-1: unknown sample rate [ 1049.161933][T14323] usb 4-1: unknown sample rate [ 1049.205215][ T5641] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1049.271462][ T24] gspca_vc032x: reg_w err -71 [ 1049.284315][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1049.315127][ T994] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1049.332251][ T24] usb 2-1: USB disconnect, device number 92 [ 1049.393679][T14323] usb 4-1: USB disconnect, device number 99 [ 1049.407295][ T5641] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1049.450880][ T5641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.507963][ T5641] usb 5-1: config 0 descriptor?? [ 1049.544299][ T5641] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1049.980218][T18826] No buffer was provided with the request [ 1050.021771][T18826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3523'. [ 1050.079109][ T5641] gp8psk: usb in 128 operation failed. [ 1050.108075][ T5641] gp8psk: usb in 137 operation failed. [ 1050.108101][ T5641] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1050.108149][ T5641] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1050.129388][ T5641] usb 5-1: USB disconnect, device number 19 [ 1050.849967][T18862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3532'. [ 1051.020526][T18866] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3535'. [ 1051.472543][T18860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3533'. [ 1051.528897][T18860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3533'. [ 1051.943732][T18860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3533'. [ 1052.298471][T18887] openvswitch: netlink: Geneve option length err (len 1012, max 255). [ 1052.545350][ T994] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1052.707668][ T994] usb 5-1: Using ep0 maxpacket: 8 [ 1052.771140][ T994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1052.792489][ T994] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1052.802172][ T994] usb 5-1: can't read configurations, error -71 [ 1052.816507][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3543'. [ 1053.259431][ T30] audit: type=1326 audit(1781036067.311:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.284677][ T30] audit: type=1326 audit(1781036067.321:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.330519][ T30] audit: type=1326 audit(1781036067.391:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.356537][ T30] audit: type=1326 audit(1781036067.391:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.382669][ T30] audit: type=1326 audit(1781036067.391:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.407837][ T30] audit: type=1326 audit(1781036067.391:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.433101][ T30] audit: type=1326 audit(1781036067.391:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.458588][ T30] audit: type=1326 audit(1781036067.391:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.483625][ T30] audit: type=1326 audit(1781036067.391:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.508547][ T30] audit: type=1326 audit(1781036067.391:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.2.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241819ce59 code=0x7ffc0000 [ 1053.734252][T18915] IPv6: addrconf: prefix option has invalid lifetime [ 1054.035654][T18922] netlink: 'syz.3.3550': attribute type 7 has an invalid length. [ 1054.044660][T18922] netlink: 'syz.3.3550': attribute type 8 has an invalid length. [ 1054.052868][T18922] netlink: 'syz.3.3550': attribute type 13 has an invalid length. [ 1054.548210][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.554812][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.715362][T16604] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1054.750406][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 1054.807621][ T7891] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.813029][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 1054.852163][ T7891] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.900593][ T7891] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.915168][T16604] usb 4-1: Using ep0 maxpacket: 8 [ 1054.930094][T16604] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7 [ 1054.945367][ T7891] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.974567][T16604] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 7 [ 1055.036853][T16604] usb 4-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 1055.057846][T16604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.087111][T16604] usb 4-1: Product: Ц [ 1055.115390][T16604] usb 4-1: Manufacturer: ࠝ [ 1055.141443][T16604] usb 4-1: SerialNumber: Ѕ [ 1055.167397][T16604] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1055.195108][T16604] usb 4-1: no configuration chosen from 1 choice [ 1055.286068][T18939] macvtap1: entered promiscuous mode [ 1055.291984][T18939] macvtap1: entered allmulticast mode [ 1055.320080][T18939] veth1_vlan: entered allmulticast mode [ 1055.399625][T18945] binder: BINDER_SET_CONTEXT_MGR already set [ 1055.433768][T18945] binder: 18933:18945 ioctl 4018620d 200000000040 returned -16 [ 1055.449163][T18951] openvswitch: netlink: Geneve option length err (len 1012, max 255). [ 1055.485285][T16604] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1055.658356][T16604] usb 1-1: Using ep0 maxpacket: 16 [ 1055.678142][T16604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.694568][T16604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.705451][ T5641] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1055.705988][T16604] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1055.760863][T16604] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1055.777094][T16604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.789511][T18960] netlink: 'syz.4.3562': attribute type 13 has an invalid length. [ 1055.801318][T16604] usb 1-1: config 0 descriptor?? [ 1055.865146][ T5641] usb 2-1: Using ep0 maxpacket: 8 [ 1056.286390][T14323] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1056.328528][T16604] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0042/input/input86 [ 1056.465907][T14323] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1056.496147][T14323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.525693][T14323] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.559821][T14323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1056.576366][T14323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.598615][T14323] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.615453][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 1056.640144][ T5641] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1056.674333][T14323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1056.693121][ T5641] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1056.696327][T14323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.724185][ T5641] usb 2-1: can't read configurations, error -71 [ 1056.730595][T14323] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.753182][T14323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1056.777509][T14323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.791620][T14323] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.802727][T11995] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.816254][T16604] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1056.838861][T11995] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.845573][T14323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1056.862789][T11995] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.864024][T16604] usb 1-1: USB disconnect, device number 8 [ 1056.884220][T14323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1056.893781][T11995] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.900130][T14323] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1056.954815][T14323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1056.981438][T14323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1057.000009][T14323] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1057.025015][T14323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1057.036614][T14323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1057.048148][T14323] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1057.059398][T14323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1057.069958][T14323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1057.079289][T14323] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1057.091505][T14323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1057.115857][T14323] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1057.145152][T14323] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1057.160793][T14323] usb 3-1: Product: syz [ 1057.179183][T14323] usb 3-1: Manufacturer: syz [ 1057.186994][T14323] usb 3-1: SerialNumber: syz [ 1057.201451][T14323] usb 3-1: config 0 descriptor?? [ 1057.226055][T14323] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1057.402476][T18979] usb 4-1: USB disconnect, device number 100 [ 1057.445040][T16604] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1057.447207][T18982] usb 3-1: USB disconnect, device number 110 [ 1057.481764][T18982] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1057.620681][T16604] usb 1-1: config 0 has no interfaces? [ 1057.625154][ T5641] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1057.633695][T16604] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1057.662864][T16604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.682358][T16604] usb 1-1: Product: syz [ 1057.692740][T16604] usb 1-1: Manufacturer: syz [ 1057.700329][T16604] usb 1-1: SerialNumber: syz [ 1057.709161][T16604] usb 1-1: config 0 descriptor?? [ 1057.720951][T19000] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1057.741481][T19000] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1057.785009][ T5641] usb 2-1: Using ep0 maxpacket: 32 [ 1057.816019][ T5641] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1057.841848][ T5641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.860992][ T5641] usb 2-1: Product: syz [ 1057.869190][ T5641] usb 2-1: Manufacturer: syz [ 1057.873864][ T5641] usb 2-1: SerialNumber: syz [ 1057.888855][ T5641] usb 2-1: config 0 descriptor?? [ 1057.909010][ T5641] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1058.309713][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3573'. [ 1058.537093][T18994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.564590][T18994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.635636][T18975] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1058.755263][T18982] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1058.784839][ T5641] gspca_ov534_9: reg_w failed -71 [ 1058.857567][T18975] usb 3-1: config 0 has an invalid interface number: 194 but max is 0 [ 1058.875162][T18975] usb 3-1: config 0 has no interface number 0 [ 1058.887648][T18975] usb 3-1: config 0 interface 194 has no altsetting 0 [ 1058.906772][T18975] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1058.918344][T18982] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 1058.930948][T18982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.942551][T18975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.960242][T18975] usb 3-1: Product: syz [ 1058.966182][T18982] usb 4-1: config 0 has no interface number 0 [ 1058.975821][T18975] usb 3-1: Manufacturer: syz [ 1058.983806][T18982] usb 4-1: too many endpoints for config 0 interface 9 altsetting 5: 129, using maximum allowed: 30 [ 1058.998997][T18975] usb 3-1: SerialNumber: syz [ 1059.014612][T18975] usb 3-1: config 0 descriptor?? [ 1059.026004][T18982] usb 4-1: config 0 interface 9 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 1059.050248][T18975] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1059.068429][T18982] usb 4-1: config 0 interface 9 has no altsetting 0 [ 1059.086428][T18982] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1059.096641][ T5641] gspca_ov534_9: Unknown sensor 0000 [ 1059.096775][ T5641] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1059.129540][T18982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.138075][ T5641] usb 2-1: USB disconnect, device number 94 [ 1059.163624][T18982] usb 4-1: config 0 descriptor?? [ 1059.351503][T19022] openvswitch: netlink: Geneve option length err (len 1012, max 255). [ 1059.353210][T18975] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1059.382179][T16604] usb 1-1: USB disconnect, device number 9 [ 1059.387645][T18975] sq905c 3-1:0.194: Get version command failed [ 1059.402732][T19020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.415325][T18975] sq905c 3-1:0.194: probe with driver sq905c failed with error -71 [ 1059.422420][T19020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.442438][T18975] usb 3-1: USB disconnect, device number 111 [ 1059.483443][T18982] usb 4-1: string descriptor 0 read error: -71 [ 1059.501985][T18982] usbhid 4-1:0.9: couldn't find an input interrupt endpoint [ 1059.527908][T18982] usb 4-1: USB disconnect, device number 101 [ 1059.567961][T19029] netlink: 'syz.3.3577': attribute type 1 has an invalid length. [ 1059.657178][T14323] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1059.680143][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 1059.722379][T19031] gretap0: entered promiscuous mode [ 1059.816582][T14323] usb 5-1: Using ep0 maxpacket: 8 [ 1059.848363][T14323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1059.866091][T14323] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1059.884149][T14323] usb 5-1: can't read configurations, error -71 [ 1060.195382][T18975] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1060.227055][T16604] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1060.366296][T18975] usb 4-1: Using ep0 maxpacket: 32 [ 1060.397602][T18975] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1060.422861][T18975] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1060.429957][T16604] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.453770][T16604] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.473637][T18975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.516828][T18975] usb 4-1: config 0 descriptor?? [ 1060.527838][T16604] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1060.557678][T16604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.586043][T16604] usb 2-1: Product: syz [ 1060.599005][T16604] usb 2-1: Manufacturer: syz [ 1060.626341][T16604] usb 2-1: SerialNumber: syz [ 1060.650096][T16604] usb 2-1: 0:2 : does not exist [ 1060.719860][T19051] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3585'. [ 1060.988865][T19055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.017990][T19055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.018554][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.067041][T14323] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1061.077841][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.103836][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.130732][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.164166][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.192621][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.209088][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1061.230360][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.245209][T14323] usb 5-1: Using ep0 maxpacket: 16 [ 1061.259969][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.266750][T14323] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1061.290629][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.304375][T14323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.316913][T18975] magicmouse 0003:05AC:0324.0043: unknown main item tag 0x0 [ 1061.333105][T14323] usb 5-1: Product: syz [ 1061.339759][T14323] usb 5-1: Manufacturer: syz [ 1061.365939][T14323] usb 5-1: SerialNumber: syz [ 1061.369665][T18975] magicmouse 0003:05AC:0324.0043: hidraw0: USB HID vff.ff Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 1061.377446][T14323] usb 5-1: config 0 descriptor?? [ 1061.399429][T14323] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1061.423291][T18975] magicmouse 0003:05AC:0324.0043: magicmouse input not registered [ 1061.430697][T14323] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1061.451909][T18975] magicmouse 0003:05AC:0324.0043: probe with driver magicmouse failed with error -12 [ 1061.455211][T14323] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P 03) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1061.455211][T14323] Please send a copy of this message to and [ 1061.471475][T19053] netlink: 'syz.2.3586': attribute type 32 has an invalid length. [ 1061.510041][T18975] usb 4-1: USB disconnect, device number 102 [ 1061.560714][T19053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1061.690891][T18979] usb 5-1: USB disconnect, device number 24 [ 1061.922928][T19072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 1061.991077][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1061.991100][ T30] audit: type=1400 audit(1781036076.061:3124): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=19071 comm="syz.0.3589" [ 1062.288873][T18979] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1062.329138][T19084] openvswitch: netlink: Geneve option length err (len 1028, max 255). [ 1062.425014][T16604] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1062.451614][T19090] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1062.455213][T18979] usb 4-1: Using ep0 maxpacket: 16 [ 1062.507193][T18979] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1062.522195][T18979] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1062.540996][T18979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.565668][T18979] usb 4-1: Product: syz [ 1062.575084][T14323] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1062.583101][T18979] usb 4-1: Manufacturer: syz [ 1062.596502][T18979] usb 4-1: SerialNumber: syz [ 1062.610113][T16604] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1062.635648][T16604] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1062.644711][T16604] usb 3-1: Product: syz [ 1062.649769][T18979] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1062.658620][T18979] r8152-cfgselector 4-1: config 0 descriptor?? [ 1062.673232][T16604] usb 3-1: config 0 descriptor?? [ 1062.686166][T16604] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1062.707383][T16604] usb 3-1: Detected FT232H [ 1062.745088][T14323] usb 5-1: Using ep0 maxpacket: 8 [ 1062.772509][T19097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.777433][T14323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1062.784871][T19097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.799518][T19097] xt_hashlimit: size too large, truncated to 1048576 [ 1062.806140][T14323] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1062.826193][T14323] usb 5-1: can't read configurations, error -71 [ 1062.892594][T16604] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1063.006952][T18982] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1063.038113][T18977] usb 2-1: USB disconnect, device number 95 [ 1063.073667][T19076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.115797][T19076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.296875][T18979] r8152-cfgselector 4-1: USB disconnect, device number 103 [ 1063.412567][T16604] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1063.501856][T16604] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1063.544369][T16604] usb 3-1: USB disconnect, device number 112 [ 1063.575235][T18982] usb 1-1: device descriptor read/64, error -71 [ 1063.601921][T16604] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1063.626410][T18979] IPVS: starting estimator thread 0... [ 1063.634492][T19113] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1063.659656][T16604] ftdi_sio 3-1:0.0: device disconnected [ 1063.736861][T19117] IPVS: using max 53 ests per chain, 127200 per kthread [ 1063.855539][T18982] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1064.060255][T18982] usb 1-1: config 0 has no interfaces? [ 1064.065107][T14323] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1064.105706][T18982] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1064.130226][T18982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.157840][T18982] usb 1-1: Product: syz [ 1064.157868][T18982] usb 1-1: Manufacturer: syz [ 1064.157883][T18982] usb 1-1: SerialNumber: syz [ 1064.185641][T18982] usb 1-1: config 0 descriptor?? [ 1064.246546][T14323] usb 5-1: Using ep0 maxpacket: 16 [ 1064.250968][T14323] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.251008][T14323] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.251054][T14323] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1064.251092][T14323] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1064.251120][T14323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.274121][T14323] usb 5-1: config 0 descriptor?? [ 1064.628430][T16604] usb 1-1: USB disconnect, device number 11 [ 1064.698698][T19119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.726867][T19120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.735783][T19119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.762978][T19120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.799355][T14323] nzxt-smart2 0003:1E71:2009.0044: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1064.982602][T19141] netlink: 'syz.3.3608': attribute type 8 has an invalid length. [ 1064.999825][T14323] usb 5-1: USB disconnect, device number 27 [ 1065.125519][ T994] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1065.296458][T19143] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3609'. [ 1065.324386][ T994] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1065.353730][ T994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.383166][ T994] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1065.404261][ T994] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1065.421241][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.445595][ T994] usb 3-1: Product: syz [ 1065.457181][ T994] usb 3-1: Manufacturer: syz [ 1065.468489][ T994] usb 3-1: SerialNumber: syz [ 1065.763873][T19138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.778384][T19150] openvswitch: netlink: Geneve option length err (len 1028, max 255). [ 1065.806188][T19138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.911810][ T994] usb 3-1: USB disconnect, device number 113 [ 1066.095985][T18982] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1066.227764][T18974] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1066.275080][T18982] usb 5-1: Using ep0 maxpacket: 8 [ 1066.318912][T18982] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1066.333062][T18982] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1066.341203][T18982] usb 5-1: can't read configurations, error -71 [ 1066.405091][T18974] usb 4-1: Using ep0 maxpacket: 16 [ 1066.419245][T18974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1066.450717][T18974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1066.493683][T18974] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1066.510953][T18974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.524489][T18974] usb 4-1: Product: syz [ 1066.529431][T18974] usb 4-1: Manufacturer: syz [ 1066.534358][T18974] usb 4-1: SerialNumber: syz [ 1066.545598][ T994] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1066.559680][T18974] usb 4-1: config 0 descriptor?? [ 1066.590478][T19167] syz_tun: entered allmulticast mode [ 1066.616697][T18974] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1066.669285][T18974] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1066.677476][T19168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1066.731201][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 1066.750859][ T994] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1066.778034][ T994] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 1066.795735][ T994] usb 2-1: config 2 has no interface number 0 [ 1066.811502][ T994] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 1066.870700][ T994] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1066.914020][ T994] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1066.943279][ T994] usb 2-1: config 2 interface 99 has no altsetting 0 [ 1066.950388][T18974] em28xx 4-1:0.0: chip ID is em28178 [ 1066.970888][ T994] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 1066.984495][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.999529][ T994] usb 2-1: Product: syz [ 1067.028719][ T994] usb 2-1: Manufacturer: syz [ 1067.043755][ T994] usb 2-1: SerialNumber: syz [ 1067.262036][T19158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.312225][ T994] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.99/input/input87 [ 1067.327730][T19158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.437758][ T994] usb 4-1: USB disconnect, device number 104 [ 1067.482113][ T994] em28xx 4-1:0.0: Disconnecting em28xx [ 1067.613141][ T994] em28xx 4-1:0.0: Freeing device [ 1067.635975][T19165] GUP no longer grows the stack in syz.1.3615 (19165): 200000005000-200000008000 (200000004000) [ 1067.719946][T19165] CPU: 0 UID: 0 PID: 19165 Comm: syz.1.3615 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.719983][T19165] Tainted: [L]=SOFTLOCKUP [ 1067.719991][T19165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1067.720003][T19165] Call Trace: [ 1067.720017][T19165] [ 1067.720027][T19165] dump_stack_lvl+0xe8/0x150 [ 1067.720059][T19165] fixup_user_fault+0x637/0x6f0 [ 1067.720093][T19165] fault_in_user_writeable+0x71/0xd0 [ 1067.720116][T19165] futex_lock_pi+0x814/0xb10 [ 1067.720165][T19165] ? __pfx_futex_lock_pi+0x10/0x10 [ 1067.720220][T19165] ? __pfx_futex_wake_mark+0x10/0x10 [ 1067.720259][T19165] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1067.720291][T19165] do_futex+0x292/0x420 [ 1067.720318][T19165] ? __pfx_do_futex+0x10/0x10 [ 1067.720339][T19165] ? __vm_munmap+0x2e6/0x3d0 [ 1067.720366][T19165] __se_sys_futex+0x3a8/0x450 [ 1067.720395][T19165] ? __pfx___se_sys_futex+0x10/0x10 [ 1067.720418][T19165] ? rcu_is_watching+0x15/0xb0 [ 1067.720447][T19165] ? __x64_sys_futex+0x21/0xf0 [ 1067.720470][T19165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.720493][T19165] do_syscall_64+0x174/0x580 [ 1067.720515][T19165] ? clear_bhb_loop+0x40/0x90 [ 1067.720539][T19165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.720559][T19165] RIP: 0033:0x7f8311b9ce59 [ 1067.720579][T19165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.720597][T19165] RSP: 002b:00007f830fdf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1067.720619][T19165] RAX: ffffffffffffffda RBX: 00007f8311e15fa0 RCX: 00007f8311b9ce59 [ 1067.720633][T19165] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1067.720646][T19165] RBP: 00007f8311c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1067.720658][T19165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.720669][T19165] R13: 00007f8311e16038 R14: 00007f8311e15fa0 R15: 00007f8311f3fa48 [ 1067.720701][T19165] [ 1068.166997][ T994] usb 2-1: USB disconnect, device number 96 [ 1068.425052][T16604] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1068.575150][T16604] usb 3-1: Using ep0 maxpacket: 8 [ 1068.582263][T16604] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1068.597445][T18982] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1068.607253][T16604] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1068.635158][T16604] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1068.635265][ T5641] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1068.674854][T16604] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1068.715171][T16604] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1068.756721][T16604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.765078][T18982] usb 4-1: Using ep0 maxpacket: 8 [ 1068.787380][T18982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1068.805783][T18982] usb 4-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 1068.824295][T18982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1068.846785][T18982] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1068.865038][ T5641] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1068.897000][ T5641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1068.929334][T18982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1068.949191][ T5641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1068.961858][T18982] usb 4-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 1068.979690][T18982] usb 4-1: Product: syz [ 1068.984223][T18982] usb 4-1: Manufacturer: syz [ 1068.990259][T18982] usb 4-1: SerialNumber: syz [ 1068.996709][ T5641] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1069.006136][ T5641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.024327][ T5641] usb 1-1: Product: syz [ 1069.032960][ T5641] usb 1-1: Manufacturer: syz [ 1069.033136][T16604] usb 3-1: GET_CAPABILITIES returned 0 [ 1069.038368][ T5641] usb 1-1: SerialNumber: syz [ 1069.057181][ T5641] usb 1-1: config 0 descriptor?? [ 1069.063366][T19201] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1069.073911][T16604] usbtmc 3-1:16.0: can't read capabilities [ 1069.147815][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3624'. [ 1069.215692][ T5641] rc_core: IR keymap rc-streamzap not found [ 1069.221940][ T5641] Registered IR keymap rc-empty [ 1069.279990][T19197] binder: 19196:19197 ioctl c0306201 200000000680 returned -11 [ 1069.294654][ T5641] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1069.329094][T18974] usb 3-1: USB disconnect, device number 114 [ 1069.360621][ T5641] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input88 [ 1069.441159][ T5641] usb 1-1: USB disconnect, device number 12 [ 1070.164125][T18982] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 1070.219445][T18982] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1070.264340][T18982] cdc_ncm 4-1:1.0: bind() failure [ 1070.359033][T18982] usb 4-1: USB disconnect, device number 105 [ 1072.325053][T18979] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1072.497236][T18979] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1072.534270][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1072.555499][T18979] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1072.570942][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1072.589765][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1072.701577][T18979] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1072.768038][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1072.795974][T18979] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1072.810141][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1072.822522][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1072.839653][T18979] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1072.847746][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1072.859439][T18979] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1072.871967][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1072.885278][T18979] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1072.913184][T18979] usb 2-1: string descriptor 0 read error: -22 [ 1072.943539][T18979] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1072.957373][T18979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.977786][T18979] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1072.995414][ T5641] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 1073.170213][T19274] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1073.200851][ T5641] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.236395][ T5641] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1073.284710][ T5641] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1073.363502][T18979] usb 2-1: USB disconnect, device number 97 [ 1073.645622][T18982] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1073.776233][T19278] openvswitch: netlink: Message has 8 unknown bytes. [ 1073.805888][T18982] usb 1-1: device descriptor read/64, error -71 [ 1074.101992][T18982] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1074.257399][T18982] usb 1-1: device descriptor read/64, error -71 [ 1074.387187][T18982] usb usb1-port1: attempt power cycle [ 1074.419887][T19283] netlink: 'syz.1.3644': attribute type 27 has an invalid length. [ 1074.756243][T18982] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1074.820807][T18982] usb 1-1: device descriptor read/8, error -71 [ 1074.895020][T16604] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1075.070270][T16604] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1075.095069][T16604] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 40960, setting to 1024 [ 1075.112632][T18982] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1075.127913][T16604] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1075.147509][T16604] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1075.166004][T16604] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1075.169377][T18982] usb 1-1: device descriptor read/8, error -71 [ 1075.184653][T16604] usb 4-1: Product: syz [ 1075.194850][T16604] usb 4-1: Manufacturer: syz [ 1075.205069][T16604] usb 4-1: SerialNumber: syz [ 1075.228521][T16604] usb 4-1: config 0 descriptor?? [ 1075.251597][T16604] usb 4-1: selecting invalid altsetting 0 [ 1075.330452][T18982] usb usb1-port1: unable to enumerate USB device [ 1075.462139][T19287] batadv_slave_0: entered promiscuous mode [ 1075.476727][T19287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1075.505134][T19287] netlink: 'syz.3.3646': attribute type 7 has an invalid length. [ 1075.524842][T19287] netlink: 'syz.3.3646': attribute type 8 has an invalid length. [ 1075.539533][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1075.601037][T19287] veth1: entered promiscuous mode [ 1075.624205][T19287] veth0: entered promiscuous mode [ 1075.638751][T19287] erspan0: entered promiscuous mode [ 1075.653563][T19287] debugfs: 'hsr1' already exists in 'hsr' [ 1075.671982][ T5641] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1075.685762][T19287] Cannot create hsr debugfs directory [ 1075.708598][ T5641] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1075.736154][T18979] [ 1075.738541][T18979] ====================================================== [ 1075.745571][T18979] WARNING: possible circular locking dependency detected [ 1075.752684][T18979] syzkaller #0 Tainted: G L [ 1075.758660][T18979] ------------------------------------------------------ [ 1075.765674][T18979] kworker/1:9/18979 is trying to acquire lock: [ 1075.771842][T18979] ffff888057dc2d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1075.781723][T18979] [ 1075.781723][T18979] but task is already holding lock: [ 1075.789087][T18979] ffff88802b61cff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1075.798145][T18979] [ 1075.798145][T18979] which lock already depends on the new lock. [ 1075.798145][T18979] [ 1075.808545][T18979] [ 1075.808545][T18979] the existing dependency chain (in reverse order) is: [ 1075.817564][T18979] [ 1075.817564][T18979] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 1075.825316][T18979] _raw_spin_lock_bh+0x36/0x50 [ 1075.830623][T18979] hsr_dev_xmit+0x237/0x360 [ 1075.835673][T18979] dev_hard_start_xmit+0x2cd/0x830 [ 1075.841328][T18979] __dev_queue_xmit+0x14d9/0x3950 [ 1075.846980][T18979] NF_HOOK+0x33a/0x3c0 [ 1075.851577][T18979] arp_xmit+0x16c/0x270 [ 1075.856250][T18979] arp_solicit+0xbe0/0xe40 [ 1075.861186][T18979] __neigh_event_send+0xf05/0x14d0 [ 1075.866838][T18979] neigh_resolve_output+0x198/0x750 [ 1075.872598][T18979] ip_finish_output2+0xca9/0x1070 [ 1075.878191][T18979] ip_output+0x29f/0x450 [ 1075.882959][T18979] iptunnel_xmit+0x621/0xd10 [ 1075.888076][T18979] ip_tunnel_xmit+0x193a/0x1f20 [ 1075.893455][T18979] __gre_xmit+0x19e/0x240 [ 1075.898321][T18979] erspan_xmit+0xa41/0x14d0 [ 1075.903347][T18979] dev_hard_start_xmit+0x2cd/0x830 [ 1075.908977][T18979] sch_direct_xmit+0x251/0x4c0 [ 1075.914532][T18979] __dev_queue_xmit+0x180f/0x3950 [ 1075.920078][T18979] ip6_output+0x340/0x550 [ 1075.924939][T18979] ndisc_send_skb+0xd0b/0x1670 [ 1075.930307][T18979] addrconf_rs_timer+0x395/0x6d0 [ 1075.935765][T18979] call_timer_fn+0x192/0x5e0 [ 1075.940877][T18979] __run_timer_base+0x652/0x8b0 [ 1075.946272][T18979] run_timer_softirq+0xb7/0x170 [ 1075.951642][T18979] handle_softirqs+0x22a/0x840 [ 1075.956925][T18979] __irq_exit_rcu+0xca/0x220 [ 1075.962036][T18979] irq_exit_rcu+0x9/0x30 [ 1075.966804][T18979] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1075.972965][T18979] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1075.979465][T18979] pv_native_safe_halt+0xf/0x20 [ 1075.984833][T18979] default_idle+0x9/0x20 [ 1075.989608][T18979] default_idle_call+0x72/0xb0 [ 1075.994923][T18979] do_idle+0x36a/0x5f0 [ 1075.999537][T18979] cpu_startup_entry+0x43/0x60 [ 1076.004831][T18979] start_secondary+0x101/0x110 [ 1076.010116][T18979] common_startup_64+0x13e/0x147 [ 1076.015576][T18979] [ 1076.015576][T18979] -> #0 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 1076.023838][T18979] __lock_acquire+0x15a5/0x2cf0 [ 1076.029298][T18979] lock_acquire+0x106/0x350 [ 1076.034410][T18979] _raw_spin_lock+0x2e/0x40 [ 1076.039453][T18979] sch_direct_xmit+0x15f/0x4c0 [ 1076.044772][T18979] __dev_queue_xmit+0x180f/0x3950 [ 1076.050325][T18979] hsr_forward_skb+0x167e/0x2ab0 [ 1076.055794][T18979] hsr_dev_xmit+0x242/0x360 [ 1076.060820][T18979] dev_hard_start_xmit+0x2cd/0x830 [ 1076.066538][T18979] __dev_queue_xmit+0x14d9/0x3950 [ 1076.072229][T18979] ip6_output+0x340/0x550 [ 1076.077083][T18979] NF_HOOK+0x177/0x4f0 [ 1076.081695][T18979] mld_sendpack+0x8b4/0xe40 [ 1076.086723][T18979] mld_ifc_work+0x835/0xe70 [ 1076.091756][T18979] process_scheduled_works+0xb5d/0x1860 [ 1076.097822][T18979] worker_thread+0xa53/0xfc0 [ 1076.102936][T18979] kthread+0x389/0x470 [ 1076.107527][T18979] ret_from_fork+0x514/0xb70 [ 1076.112822][T18979] ret_from_fork_asm+0x1a/0x30 [ 1076.118211][T18979] [ 1076.118211][T18979] other info that might help us debug this: [ 1076.118211][T18979] [ 1076.128453][T18979] Possible unsafe locking scenario: [ 1076.128453][T18979] [ 1076.136079][T18979] CPU0 CPU1 [ 1076.141445][T18979] ---- ---- [ 1076.146804][T18979] lock(&hsr->seqnr_lock); [ 1076.151324][T18979] lock(&qdisc_xmit_lock_key#4); [ 1076.159138][T18979] lock(&hsr->seqnr_lock); [ 1076.166162][T18979] lock(&qdisc_xmit_lock_key#4); [ 1076.171189][T18979] [ 1076.171189][T18979] *** DEADLOCK *** [ 1076.171189][T18979] [ 1076.179341][T18979] 11 locks held by kworker/1:9/18979: [ 1076.184709][T18979] #0: ffff8880319a3d40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1076.195423][T18979] #1: ffffc900037afc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1076.208608][T18979] #2: ffff8880782a6530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 1076.217848][T18979] #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 1076.227182][T18979] #4: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1076.236411][T18979] #5: ffffffff8e95cd80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1076.246327][T18979] #6: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1076.255471][T18979] #7: ffff88802b61cff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1076.264954][T18979] #8: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2ab0 [ 1076.274444][T18979] #9: ffffffff8e95cd80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1076.284370][T18979] #10: ffff888028f5b228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1076.297079][T18979] [ 1076.297079][T18979] stack backtrace: [ 1076.303011][T18979] CPU: 1 UID: 0 PID: 18979 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.303034][T18979] Tainted: [L]=SOFTLOCKUP [ 1076.303040][T18979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1076.303051][T18979] Workqueue: mld mld_ifc_work [ 1076.303075][T18979] Call Trace: [ 1076.303081][T18979] [ 1076.303088][T18979] dump_stack_lvl+0xe8/0x150 [ 1076.303106][T18979] print_circular_bug+0x2e1/0x300 [ 1076.303126][T18979] check_noncircular+0x12e/0x150 [ 1076.303145][T18979] __lock_acquire+0x15a5/0x2cf0 [ 1076.303167][T18979] ? sch_direct_xmit+0x15f/0x4c0 [ 1076.303186][T18979] lock_acquire+0x106/0x350 [ 1076.303200][T18979] ? sch_direct_xmit+0x15f/0x4c0 [ 1076.303222][T18979] _raw_spin_lock+0x2e/0x40 [ 1076.303241][T18979] ? sch_direct_xmit+0x15f/0x4c0 [ 1076.303259][T18979] sch_direct_xmit+0x15f/0x4c0 [ 1076.303278][T18979] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1076.303300][T18979] __dev_queue_xmit+0x180f/0x3950 [ 1076.303315][T18979] ? mld_sendpack+0x8b4/0xe40 [ 1076.303336][T18979] ? __dev_queue_xmit+0x2b6/0x3950 [ 1076.303355][T18979] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1076.303372][T18979] ? __copy_skb_header+0xa3/0x4a0 [ 1076.303386][T18979] ? __asan_memcpy+0x40/0x70 [ 1076.303404][T18979] ? __skb_clone+0x63/0x7a0 [ 1076.303419][T18979] ? __skb_clone+0x483/0x7a0 [ 1076.303432][T18979] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1076.303450][T18979] ? skb_clone+0x246/0x3a0 [ 1076.303465][T18979] hsr_forward_skb+0x167e/0x2ab0 [ 1076.303484][T18979] ? sock_def_readable+0xae/0x550 [ 1076.303503][T18979] ? hsr_forward_skb+0xbb/0x2ab0 [ 1076.303522][T18979] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1076.303541][T18979] ? do_raw_spin_lock+0x12b/0x2f0 [ 1076.303560][T18979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1076.303579][T18979] ? dev_queue_xmit_nit+0x969/0xad0 [ 1076.303599][T18979] ? hsr_dev_xmit+0x237/0x360 [ 1076.303616][T18979] hsr_dev_xmit+0x242/0x360 [ 1076.303633][T18979] ? hsr_dev_xmit+0x2d/0x360 [ 1076.303649][T18979] dev_hard_start_xmit+0x2cd/0x830 [ 1076.303668][T18979] __dev_queue_xmit+0x14d9/0x3950 [ 1076.303685][T18979] ? __dev_queue_xmit+0x2b6/0x3950 [ 1076.303701][T18979] ? ___neigh_create+0x1c5f/0x2250 [ 1076.303720][T18979] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1076.303735][T18979] ? neigh_connected_output+0x1ea/0x460 [ 1076.303754][T18979] ? eth_header+0x11b/0x200 [ 1076.303769][T18979] ? __asan_memcpy+0x40/0x70 [ 1076.303786][T18979] ? eth_header+0x11b/0x200 [ 1076.303799][T18979] ? __pfx_eth_header+0x10/0x10 [ 1076.303813][T18979] ? neigh_connected_output+0x3b6/0x460 [ 1076.303835][T18979] ? ip6_output+0x126/0x550 [ 1076.303855][T18979] ip6_output+0x340/0x550 [ 1076.303874][T18979] ? __pfx_ip6_output+0x10/0x10 [ 1076.303892][T18979] NF_HOOK+0x177/0x4f0 [ 1076.303919][T18979] ? __pfx_NF_HOOK+0x10/0x10 [ 1076.303939][T18979] ? __pfx_dst_output+0x10/0x10 [ 1076.303957][T18979] ? lockdep_hardirqs_on+0x7a/0x110 [ 1076.303971][T18979] ? __local_bh_enable_ip+0xd0/0x130 [ 1076.303986][T18979] ? icmp6_dst_alloc+0x3a6/0x440 [ 1076.304007][T18979] mld_sendpack+0x8b4/0xe40 [ 1076.304031][T18979] ? mld_sendpack+0x213/0xe40 [ 1076.304050][T18979] ? __pfx_mld_sendpack+0x10/0x10 [ 1076.304074][T18979] mld_ifc_work+0x835/0xe70 [ 1076.304094][T18979] ? process_scheduled_works+0xa70/0x1860 [ 1076.304109][T18979] process_scheduled_works+0xb5d/0x1860 [ 1076.304132][T18979] ? __pfx_process_scheduled_works+0x10/0x10 [ 1076.304148][T18979] ? assign_work+0x3d5/0x5e0 [ 1076.304163][T18979] worker_thread+0xa53/0xfc0 [ 1076.304185][T18979] kthread+0x389/0x470 [ 1076.304202][T18979] ? __pfx_worker_thread+0x10/0x10 [ 1076.304216][T18979] ? __pfx_kthread+0x10/0x10 [ 1076.304233][T18979] ret_from_fork+0x514/0xb70 [ 1076.304249][T18979] ? __pfx_ret_from_fork+0x10/0x10 [ 1076.304263][T18979] ? __switch_to+0xc79/0x1410 [ 1076.304283][T18979] ? __pfx_kthread+0x10/0x10 [ 1076.304301][T18979] ret_from_fork_asm+0x1a/0x30 [ 1076.304322][T18979] [ 1076.725160][ T5641] usb 3-1: can't set config #1, error -71 [ 1076.736539][ T5641] usb 3-1: USB disconnect, device number 115 [ 1076.808780][T19287] batadv_slave_0: left promiscuous mode [ 1077.065604][T18979] usb 4-1: USB disconnect, device number 106