last executing test programs: 2m44.800983936s ago: executing program 3 (id=856): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e640000"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2m44.036192961s ago: executing program 3 (id=860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x1c, 0x0, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "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"}, 0x0}) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x40, 0xf, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$audion(0x0, 0x8, 0xa8c20) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_submit(0x0, 0x4, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xb, r3, &(0x7f0000000100)="3e0667fdf33af10986f2c0f4d274bf04e74f79c62743a31ecd73e2b60c6a8d18864f4380173d47215f09dd172139ece5", 0x30, 0x5, 0x0, 0x1, r2}, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfabe, r1, &(0x7f0000000480), 0x0, 0xfff, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x800, 0xffffffffffffffff, &(0x7f0000000540)="ad0a9f3fe99096cf52", 0x9, 0xd04e, 0x0, 0x3}]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000f6c62ce348279a96f3ff53fdd25135e03716205da6382fb10e2e578dd8556524df53e9317fa806e9aa39e71f7ebdae78ba01ad2ff4e084c0b05a9d59fa3c99a3eeadb89dd23bb1649938cbc75bccb7153375d0634af57b70c73e279e931d553aff542c007d"], 0x4c}}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r9 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r10 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r10, &(0x7f0000000b00)={0x2020}, 0xdcdfeeb0) r11 = dup2(r9, r8) close_range(r11, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r2, 0xa, 0x1, 0xf7d7, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)}, 0x40) 2m40.885983826s ago: executing program 3 (id=879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000007600110226bd7000fddbdf250a00060000040000080005", @ANYRES16=0x0, @ANYBLOB="68f9e3"], 0x20}, 0x1, 0x0, 0x0, 0x14000090}, 0x10) (async) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002680)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/234, 0xea}], 0x1, &(0x7f0000000540)=""/231, 0xe7}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f0000002800)=""/94, 0x5e}], 0x2, &(0x7f0000002940)=""/186, 0xba}, 0x80000001}, {{&(0x7f0000000840)=@rc, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/149, 0x95}], 0x1, &(0x7f00000009c0)=""/79, 0x4f}, 0xb99}, {{0x0, 0x51, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/5, 0x5}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/189, 0xbd}, {&(0x7f0000000c00)=""/35, 0x23}, {&(0x7f0000000c40)=""/197, 0xc5}], 0x7, &(0x7f0000000dc0)=""/244, 0xf4}, 0x10000}, {{&(0x7f0000000ec0)=@nl, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)=""/242, 0xf2}, {&(0x7f0000001040)=""/115, 0x73}], 0x2}, 0x4}, {{&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000002300)=""/195, 0xc3}, {&(0x7f0000002400)=""/155, 0x9b}, {&(0x7f0000002a00)=""/213, 0xd5}, {&(0x7f00000025c0)=""/146, 0x92}], 0x5}, 0x70f}], 0x6, 0x2, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x2000000000004, r3, 0x0, 0x0) (rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) (async) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r5 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r5}) fcntl$notify(r4, 0x402, 0x5) (async) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000180)=0x40) (async) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) (async) fsopen(0x0, 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f00000001c0)={0x0, 0x4, 0x1000000, 0x0, 0xffffffff, 0xfa000, 0x1a5e00}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) (async) write$input_event(r4, &(0x7f0000000000)={{0x0, 0xea60}, 0x5, 0x5, 0x3}, 0x18) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200", 0x32314d56}) (rerun: 32) 2m40.496959917s ago: executing program 3 (id=880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r5) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r7, &(0x7f0000000380)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x33, 0x800) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000002a5368d57334f43009d69dee96b717f676344d69e38b796c8339821a8d4f8b89d3dbbfe5395b0ae652b117c5b843427182b42304e49f0d65132ee2ea18b3e26b318dece9184e074f692d0d63704c2d7092146806397792b8ccc05b6cfb148c970c9c1bd21a8638277f046760225a68ba7d17e912808f2cb3ea78d53e2043d4f6795eb597b521a8b81821cb77ccc1c9bcfc470f4ea6443384684cf6e2d7891becbe19a39eec5994e3dbda0cd3444d288b7e76d965c1e4285454aa73cd5ed86fe615ff69d32ae3fbafa9", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7fffffffffffffff, 0x0, 0x4, 0x21, 0x8, "0f74aaa2f4af11f6ffa35d446b8ef9f0732beeb2239ae850dab40884c1b27a779803e2175893261101ba32e857e8b58f6025f9d864028bead5175d01c938ae88", "d137397b58a2b40800000000000000cfb62c8fb6814ed9f09dbad8d629071742237eac095126a9905cd74607098d80d875f850fdffaf70f8aa755c7842540162", "34c258af26e2b617090000001359e53d03d200", [0x4, 0x800000000000000]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r12 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="360000001000032400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'], 0x20}}, 0x0) io_uring_enter(r12, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xe, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1e, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000b1000000000c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000084803000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018220000", @ANYRES32=r8, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000feffff06010000f8ffffffb702000008000000b7030000180000008500000006000000bf91000000000000b7020000023d00008500000000003d53000000000000000000000000000000009953a6f21dde9213b5e986e059120e1348a24df0ca5ff5cee2c4b5fc1b1c5da12647bf7745dbadf409fe68a72a6615162c2666ccb46b47ab133f6c026512b24be29ac7ed08c01e05f4d099b868e44d3f3bf9e6a66c4da5e1e79c44cef76e5459017af64007f6584c652bb7339f1a18efd02a786723e06270869a35a5e000"/248], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', r9, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4, r4, r10, 0xffffffffffffffff, r11, r13, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff1}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 2m40.213484804s ago: executing program 3 (id=883): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x3f4}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x0, 0xd}, 0x9c) 2m38.991002648s ago: executing program 3 (id=889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) (async) r5 = mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) mq_timedreceive(r5, 0x0, 0x0, 0x9fb, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x29}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x29}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) landlock_restrict_self(r6, 0x8) (async) landlock_restrict_self(r6, 0x8) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80c}}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r8, 0x0, r8) (async) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "6bc6e11000", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) (async) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) 2m23.895025747s ago: executing program 32 (id=889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) (async) r5 = mq_open(&(0x7f0000000040)='\'\x00]\xa5\xdf?\x86\xcf\xfb\xfe\x10\xf5\xcdrGQf\x10:\xce\xb0FeP3\xb2\xd3.\xd0{\x11\xe4\x94\xfd\xaa\xbb\xbc\xe6\x19y\x1f\x92\x0f}\xaf\xa7', 0x8c1, 0xe, 0x0) mq_timedreceive(r5, 0x0, 0x0, 0x9fb, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x29}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x29}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) landlock_restrict_self(r6, 0x8) (async) landlock_restrict_self(r6, 0x8) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80c}}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r8, 0x0, r8) (async) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "6bc6e11000", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) (async) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) 7.932571943s ago: executing program 1 (id=1536): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000200)='\xc6o\n/\xc2\xaeG\x1cP\'\xac\x1fGC\x15\x99\xa4\x1d9+\xac\x9a\x1f\'\x8c\"\xab\xb4wA`Oa\x17\x8f\xf7X\xabx\xcd\xf1\xf3T\xae\xd2Q\x06u\xea\x15\xb09w\xe6\xc8K\f\xb2\xf0\x83\xe5\xb1)\xbb\xa8\xf9\xae\xb5\xa8t\xc3\x84\xb0[+\xa2\xad\xb0\x06\x8f\xb9hd\xcbv&x\b%\x86L\xf9Od\r s\xf8f\xb0\xe2N\xa9\x87\xfd\xb5\xc9E\xeb\xbe\xe6t\xdf\xe4\x0eH\xe8\\\x91\x15\xbd\xd6\x7fse\vYV\x85\xc6\xf6\x95\xa8q') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c0007800800"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={0x0, 0x2}, 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0xb, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) syz_usb_connect(0x0, 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cbe8d0205e040307c06e0102030109027e00010000000009044400000e0100000a240140000d0201020c240205010205090100010e0c240804010000a401883db20d240703020007e24dd0feeb710c24020603013f07ff00ea0e092403050101050109052406000005240000000d240f018d040000800004000f06241a0500180c"], 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000200)='\xc6o\n/\xc2\xaeG\x1cP\'\xac\x1fGC\x15\x99\xa4\x1d9+\xac\x9a\x1f\'\x8c\"\xab\xb4wA`Oa\x17\x8f\xf7X\xabx\xcd\xf1\xf3T\xae\xd2Q\x06u\xea\x15\xb09w\xe6\xc8K\f\xb2\xf0\x83\xe5\xb1)\xbb\xa8\xf9\xae\xb5\xa8t\xc3\x84\xb0[+\xa2\xad\xb0\x06\x8f\xb9hd\xcbv&x\b%\x86L\xf9Od\r s\xf8f\xb0\xe2N\xa9\x87\xfd\xb5\xc9E\xeb\xbe\xe6t\xdf\xe4\x0eH\xe8\\\x91\x15\xbd\xd6\x7fse\vYV\x85\xc6\xf6\x95\xa8q') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c0007800800"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48094) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket(0x2, 0x80805, 0x0) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={0x0, 0x2}, 0x8) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0xb, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async) syz_usb_connect(0x0, 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cbe8d0205e040307c06e0102030109027e00010000000009044400000e0100000a240140000d0201020c240205010205090100010e0c240804010000a401883db20d240703020007e24dd0feeb710c24020603013f07ff00ea0e092403050101050109052406000005240000000d240f018d040000800004000f06241a0500180c"], 0x0) (async) 6.507297607s ago: executing program 0 (id=1545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = syz_io_uring_setup(0x11a, &(0x7f0000000400)={0x0, 0x0, 0x8000, 0x3, 0x3a2, 0x0, r3}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r4, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) (async) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180), 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000654000/0x2000)=nil, 0x2000, 0x100000e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x7fff}) (async) io_uring_enter(0xffffffffffffffff, 0x47bc, 0xff000000, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x490, 0xec000000, 0xffffffffffffffff}]}) (async) memfd_secret(0x80000) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x0, 0xe) (async) r9 = gettid() r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x4, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10000000000) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) tkill(r9, 0x11) sched_setattr(r9, &(0x7f0000000040)={0x38, 0x0, 0x54, 0xa, 0xd, 0x9, 0x9, 0x0, 0x5, 0x6}, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_expedited', 0x129802, 0x10d) sendfile(r11, r8, 0x0, 0x8) 6.14502017s ago: executing program 0 (id=1547): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x471}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) 4.537160008s ago: executing program 1 (id=1552): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x45) add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @auto=[0x31, 0x0, 0x31, 0x0, 0x0, 0x34, 0x34, 0x0, 0x0, 0x0, 0x0, 0x66]}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap$KVM_VCPU(&(0x7f0000cd1000/0x4000)=nil, r2, 0x2000007, 0x120172, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x1, 0x2, 0x2000, 0x2000, &(0x7f00009c4000/0x2000)=nil}) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000003c0)={0x0, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.17179667s ago: executing program 1 (id=1553): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x1, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x6, 0x2}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) 3.580799855s ago: executing program 5 (id=1556): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0x1, 0x4}, 0x38) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000900", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 3.472241855s ago: executing program 0 (id=1557): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be5216344a412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000600)="e8700e44", 0x4}], 0x3, 0x0, 0x0, 0x40}], 0x1, 0x40800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) (async, rerun: 64) dup3(r2, r3, 0x0) (rerun: 64) connect$unix(r3, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r4) (async) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000100)={'virt_wifi0\x00', @remote}) (async) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000ac0), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000b00)={0x5, 0x59455247, 0x3, @stepwise={0x910, 0x81, 0x0, 0xffff, 0x8, 0x6}}) 3.37684581s ago: executing program 5 (id=1558): pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r2, &(0x7f0000001540)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000e80)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000ec0)="804eacf23dc45aef0e6491ce40ad35ec05fb1067bd6c0349d662fc32ee69ee28e85333fb6345ef2e4443ddbb64", 0x2d}, {&(0x7f0000000f00)="12671236c7dbc2b868a2d53e373f3c4a29dde0da91cd151eed2cba1febc4cc19b84245656fb57fb1e7f58dee1a19925fa4a841da6401cffa44f0f618d6d431833334fee23e6a442f439e324814a8a3e54f1a5f2cded005c9286b28b5e281af075d86c64daa513c66849cce4b2dc59d770d294bd0f7e64d1784cad0f7df680082326d87c786139e4ef6d677cff589564703019e38ccd4747fc8beb9f496e0d1d040cb4838b695125b", 0xa8}, {&(0x7f0000000fc0)="73fbc1b47e75e6f2e4940aaa64d22ce5a9d8d0cd6b049a921b1021517bb3fef7470c86f1fe45d430cb950b6f8df2feff36c45062936133701164d3e4d738da5ccb975f79dbfe21210a13e5006570ed6d294b7be5", 0x54}, {&(0x7f0000001040)="03dd70b05eb6b6e37d4dd3b86de901d0f52c6ebc7ca73a3c6603689edd92dea68ee1a04e5f859c8327adc8a69588826124d0b90b64433aa435bf6bd4baeac79936eef7caa20b498d2ad7ef9fe3c50eea8f89d1bda361ff3a4fa64602740fda1d81c8ab01063ae2e4b53fac3ef6a007d4950d2e0292b0f6ad5aa730cb4625ffefd39949e3cb1d7b6562f76e92b2f670de8c183ce61c9671aa86bb2469ac9784cff6349d8ee5ed8d411f65ccc91474c5f483ab4ace53f4ecfdabdc1052267ae14a9b0fe6475f37b41be6ec50eff224f9b27279d478449199343c3c4df0913b0211", 0xe0}], 0x4}}, {{&(0x7f0000001180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001400)=[{&(0x7f00000011c0)="2ee5e82a574c3df3b7eb6a414fee32dad7fd997d10accd8e2011414c0257cf1270571cc9e230822a4a5210154680b5c819c1cb5ee18a98cca6fa3e6dea2d51675afd929a8492c9e1", 0x48}, {&(0x7f0000001240)="3aa536d6242859fca23efb959933e6f9e64f27498e748948f52d2020576494760c03d47986e5824d9dedbbf71395c01ff4679c03a0037958aee34d3905c3aeb479a6839c75c0c22bebcd40ca389b18de100e717d", 0x54}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="033f403ce4f9612ba81144dc3ad8478b424a761e38bd26104c0b7455d842ad948674712770888ec5248bdd12143cb15d1846fdd9b4f607eb3828c2f951cf4389b7fda78ec728b6352754a1781e8ecb369eff029190d0d21e9be95c622b4df1ddba33a9d8ddad70e7142c6f116a95798844373cb56f9af3e996363b28f2715fa751d92570de2b256b70e02f848b285652048e0a338dfc52dfe6a7430d4e1d2468607f6c09bfd3f9ed5a04f7a337c3589494c25097b23b8756ea5c475a02f5191f63aae5f54bc38847583a19371bfc6953a1faca143fda0c400451bb2098a591fbea8d25e9015d666b5e97744e877c82bd1969b937dbcbe0821589e6d7b34552c799f9773d220364b408efb54c7b9536d2073ad2a775fc71df0d7c8463c3180e0db1ade5069d93033226c761970e7c7b1bbcd2e6ee675d0abc6063327fdde5c04725e635306f495f9723071b010e364db85731b488e43e122845cfb5f6a73b9926bd52b471354ba0c181ffc96f95b38cf410f398faf2f7dc6c1658c0a9999cff714cb624086ffbfc8b4bfec087263fa10a3942c477a8b69b5ff1bea05692a5b09334397d8cbab1f6fd991820f2a310c2324738790246390ba6891ec71bf546a149fc3962f60259cbb352d21a5f7acb5cd0c9a9d7c63b901c53084efbd39781dc1919e2fc946fc0d2c3828d4d0a5f5872e7c8b1acce0694380b5b0a690f7cdf4829f74cdf48532d0b6c4d9063d3df3dc2ce0ccd0c1152383f347d79ac9b56ecc161a32e1af5583d3a35b978d9efde3d79a5499e37dac1ca06b69a9050b0ce84af6b1520c24c38ec0fa9f2ac7d0a25475db52251f21a63bdbc350404258903f41650f8986d9981456aba3a89acf0ceefc6db703471ed2e5b5cedccf554a2b242481269821a098380bc00f7f36bd4e64bf917b74a8fd9ff77e735b40ef812566ac85908e1d08ca05fecc2b39237bee55edc4f9337ca0e5c8cd092e7f67b4c3f94ed7c65f11156afb7211fd3f93031b16fcfe58139efd291f64261e98efa0cd0d973aea9ee1ab6f260fc8d3337d386fceed3e1a823158991c29fb96ac69b9b2884c1d26735bb6ba10081921053aea1d3d573ddec48e49284da84f6c895ea65c9f95d2578f1c258d4db7f976e96b1c798bf40625c6d435acf657d3f8675997194703963336e8839382835644e0fdfd72c5042c9d4cf579e17196e2433d8843150780ef7ae9a8e151dc872c424ba51a11f39c61e8bca3fe396f3257737beed7008dcfc7888563a0e80328d83b52e8d621e2d5e05e54f7182678e3d1d632a7349b9a6931ffded7afe235e0e0b3dcf0f0748a323208abd69b5cbb28731926989dff97e849aa148a9ff5afd4d5191b0651000cc88fe6ffeec034d8c23377893a3c9ceb0e01b9ba5415fce8e828e5faa15214b72e4acf06d66c26d8dc0ee4cd48e652cad82081a26afcf3b87bf39d28ab93eabeab6090be13701a5aca70bb1d76fa3e7741e70174f3fe7eb4f8ed7c9e2f4653126c926cf50b8fde8f12e87e56a6a494874d95a455802b31aa22800ccd37ff8c907580215df3d8ece7034916eb71e5bb7757a3915b418aacc2385bcb596ac636f13461ac4baabe14e5cfcef3ed055a88de09a6a4ca6bf9820d029def011adccad82814617c031fcd987e8281405de5be7cd987325a79ba96e763730c9e1359890175cb670f007debcdf931310625912fb5ff41cb8f857ebfa356dc1ba3f5a58cfc059f5ce1235d75ab6eb1a46e652185348def1808a086f840a8c1b2be3678a14c8c798662b7f40d6b6c3369c58bc6c8c14cbed8dc1fa062259507380839273c309fc1540e4340c5c0b1aa72f4dd6f8d299671cfa1c38e7b9c6cc7a04e1092012b759a0a90622d0dd2db07765c3efc43ea4d47214e906ab5ee47e62bfb8f167371c56817e5ae19375ba5c92c6686fa87d8bdabf37d04bde8f500244e41c58f1302b526781fa469c8550194d51a0fc765dcc39bf0c861380bccdf46b86f098ed67cd43f6d890008ffd9e0faf548982423ce7e6b5b59ffa69250eec3637f3dd0bab29966d437d45b3c2dd9b6b094d1385109f0e0a51fe0525a62ea4b8cd6103784bc27d80e6f8dbeddf1fada580a8af6334cb38e24c0921b60ae83aa048d4487145b14ec440f20c6ffdc127f0469e2d2131a8e7c586e02aa29ee5c10105ab5f050fb03556aaf776c5b9aa8ae2dd0a638cf248a39e5de9e48f0aaa5dab57955ed7c45a98d61ae6208674ddfd440ea8aad8d0f3d3f546ea66f05f5fbb10217be53b362351c4e07aac73381ed2cb374e1e1e15b92470a82e2a1d1b35f42f1d7fa61a923394e5a16fd2f08b365bb41c53c040654f9b69b6c1e131eb1328e23045052e9c26f3080fc584fb71eb55d9d6f139e1624028884fda431b32269edc83d3824c4994e9fb94f22dc8d9599f5bee554f95802663ac215b2811d648995101b5b1829857bad2c5fddf5481a21de38922099159e62dca26a691fcbd08fe9db62d745de5b6124fa37d06fb3df2104ea6262f2f3edd25746bdc9b7be535f2f1d27b37bd388d5e57b58dbee68232f8d1645fbe5b6404ccee4e02e270fa266b45213762324c4c3e72b193c13e46f5c4a491aaadb11fa34c18612256a49000f828287632bfa0988c3920c52b3ca723955768dee772500210de86da81cecc8892534ec9c2e22712cf6455dd3a862936dc247cf37878b4fa4f8e02d9578bb657b160952674d3f8bff04470d891be5f9b8b8da61f0a44d3719907f11570e3e0f04e1592c75870fdb8c2a6e3316eb8d68fb86544f37cffd7245421ccdfd1bd19dc9e8478474780c0d28de5a667f7ad62ef95eaf1fe2c0f4fd216c759d87d9c21750ea4d32110715f9ddd055a26368e9acdb852273970b044cb6bc7ee9ee62c092a2948418431db59d54a69f1b18f5e5881a0fb3fe500485d4698af55bbb2651527eac53368d7091ee284b3e72aefc290a8ccebedd19b97fd842e8a7cd24acb2780960c78da1cf2636e678c0b6e925466b7f13fc755976367875d121a4a68ca2268249b03c7e3f6228558bad6fca03a78576b6f5eb156b42bcab02d4d396c453186e134b9daca3cd34cd16a75225fcb68b49cbf0840fe45c7cbb4362fd6c9f01e1babad098b5b416824367a829d88a901b2bb8563b1e56d2a22296ad40d4e8aeecabed5e4ea0e0f336b09f6909fd05cf37490bbd83888adcf5b3c43a68899e3c18ad1c530f72cc93642da258cddd4ee88774fe4950d0373b187262ce09d4169b539a93c26a985ba452ec600b91c66c085a985189d9119b201bc816cc419c365a7f2d2a2b1f068999f17185eac350f3407330b73e83cf931f04badaa5a7827adca8f458219612e804e10d4d20883cd88be38cf3d33a70a5ad089e2d369a7e9778a58a9c4baff13d0f1c6de13a0d931ebfc1a3a88fac12348fbee74a7bdb96d9a61e49d8da7c0e3a200693d61c00e78b23af62a73df678ceae01f65328dcbc7f0cc61ddc5353b009edd5305d5fb5a137014b373148bf0fdab447803bc54036b553293060a4f26930c7ff9867f470e9477c0caee3ac95c63c20982fa0ccfe82a86b4a5d526e14c0b806cc0a0ac1c3747f87e4c1878e53b3c003acf4acb3bfdc0b4ded78ce1abed7d012c742d095e4f5618f86e9eed2fa2a95dde9a4f93e08bd9809d242efd5fe511d9858ea128d4bbc725553cddc3a1de00b86bb6de71372ad231aa16d7df95f9ad58cecd5008d19007c17a83e16cbb8a12724bbad7c270efafd7b2e88011c1658363301bf2d485f80642f82b54e8aabb477116897634ce533e4613e7e06df1d2cb412a7fa15bd2ac7bfe432dd08a5e4258e1272ff4ba340adaa033d103a34efb5af05948ac70a01f1f2da8bea1a41bcd9f68263b661f1f642435d9384f76db6ee720319c33d9b9f53ee4ad9e0364bba5dabed73027d4b9b454c5fea2ffa8159499360fdaed6f2e2fb4933b5164de66e092d24b21f6cf82e52865142afa2103407da424704acc69c3a6c2679a5df093915ba82355de0117add944e2b64382d83db2dcc9e790e032b0e7cdf42ddf0635e792e135c1d247b06d9f89b027020ebbcea736fb46db6b4f0b185aa8f9fa6cec996c5fe0f5fa31a612fabcfb23bf0816414458a012ba91dfd7af358137001ea2da17841fb187b6ee485ead34cbcd05d91355e7882fe7226add8846791e5bc9aaea03bb8cd829fbd3f95a458d88afeaec8dc3a6f1fb01fc3d029299d8020e364b58562a793c1c16178a97a98651825ba32f9d902e054e07f9514f214f13c14938feb6e20ea544f092278f9fc84a2bab259f48db281591e7e331678ebc2916de0fa27f7a56740c7a3af61f80f518179a19667f6f2651f6f12a96563c19873e851101ecc11c272d9fd0d519d9556da4ac16269edba2a9d52610ab249a0fd1f10ddf3b00bb5ec4f360c85d379c72ca54c1534167ffa1d56dee7ff7661dd6c89fe749f7cee2064512166810bff73235dba65a6a9a98d30efe5880fc2bf22a9911efabbf9f22f2f0a69b1cb8574c59af345f03b3b49c13c0d95c72b66db3e9128f6fe4d9cbc19d67a11e4c3c0e325c51fdf1c25743d288dde0fa8cdabbd4c96ff56b74ff000e60c9be71ebecda45815813cf9ccebb86466b10a10e1dcc90d5db392c17eba0b419a4391c5b379863083080b21b0340e161b000169d0d25d2cc99d48aee7d816f0a1dcfc6f2bdd29a60bfcc64da6992d8c303e5ad995a23c73f96bc3267b8cea5ab8d7116564ecb2f7568fe1af3f8211e5e4f01e6940eb9c67759d26052f1e5760bc97e8eda6471223d0e7907a279720f954c33228f7cf172edd7a8bba1e514b32197a5f0d4a75d7b47d0e9a228c79bf25350127bda0fd227918f256e37b612bdeeb20f15055a410da96e1be92c5d9b680a83d0d84b04854c7a39b66a469694e95ee50889ca113f1ddaec204a3d8b10c70779d3f12a6597b62c57bee98a2fb724c7830e860d8796b6f888770cacb857a1211b5a9d499b215b7c8177b5aab453db37ce22fee96ccb015ba2e113406cd229e301c7a4fae37d128164f92a9d1fbfcdba8bacd310f753b25b7c83c118b123736b0c190cc98556aa9d6ef617bc30940b15df1afc383104aa19c1f260620448fdaaf9946a67a66f1a4237b13618aadb30c3a240940d24ae8210a304f7ff9bcc0d8b9db161c042f32d4b53ed89a921f4c983a2c66e18affde78a0471c12120553b051789cf862ae476028655fba41588b81a80efe351f4e92895353c3c95d691b467c3d920c12af550df9b7bfb252c18fa2cfee3993683a0f816cefa09acae9635bfcbd48781312f15e679d36a410b6e160c1a8f3c01e95cc9ec08fd185424c88b32c6db8f833879c14f0a7722cb4bda4a91c7b67756a0e77b0ab1e07a695e51669b112a95b45720b413ea12c5ec0b2e6f90851f14e10815da637f55bc82e1f147aa9b8639aecbcc1c2251e8f7c018c0843c2a7e05f9a3cad703b13d92e678b7da772580281a04c1d98553ee0a4b02b962a2e416efa10009784bc2eacd3a598c3ce1c4b9dda233f77b1ce52ef375810ad72b5a64a31e92dc53ec18b8c7f33bfab7cd685060c93c773c7e4737d87af0c500c8762ddf1d52595ade01a049f4c633e7081c6783f20bba608267958e2d7a4c9d7de552b485324d325f58a21e75983cae476020731527f68ecfbe899cefc062b7cc64bca82fdeac77e5d01cfc31ddfec1661f956a4cd411ee59117635ce66e2b63e42dbe1e9c446232f6bf4a47f67b4e4cd61a0027bdcec61b4c01b2711fd48af4ba49bf4", 0x1000}, {&(0x7f0000001300)="faa033344f50fcd336e86476497978bf41312169dfeb3905b9cab92194c04582c5a5995d94af18b9e19f97c8c7a01afe47597a67e8473953efa89a246a95e5061c7c66662e771d2b9c63698810d21f128adc44ed87ecf92646c88e98c9d5f5e652f89fa746a499f476e344672d29753d79c2e33075", 0x75}, {&(0x7f0000001380)="0f96e7658892cee790fe71a799ddc3ee70fa5de095858d6c9b919038b8f3cff7f68948b075a7a08dcb04875f9529fa88d73b2e4612f6795f99864ce14c406961bf510ece392213", 0x47}], 0x6, &(0x7f0000001700)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x0, [{@private=0xa010101, 0x3}]}, @lsrr={0x83, 0x1b, 0x3e, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @private=0xa010100, @empty]}, @timestamp={0x44, 0x10, 0x1d, 0x0, 0xc, [0x8, 0x9b4, 0x7]}, @rr={0x7, 0x23, 0x27, [@multicast1, @local, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010102}}}], 0x90}}], 0x3, 0xe000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.31501807s ago: executing program 0 (id=1559): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000100)=ANY=[], 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) clock_settime(0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000500)={0xffffffffffffffd4, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000f00)={0x24, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0xd, 0x3, 0x2c01}}, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40804) (async) syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "93b11c2cb835aebc71cc28179338218de6038e577d6129c0eeaa8c3339825a112edb354bf91b08e2089a6b65"}}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x7) (async) r5 = socket$inet6(0xa, 0x3, 0x7) (async) syz_usb_control_io$uac3(r1, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x20, 0xe, 0x8e, {0x8e, 0x8, "82832663bbd0839d6d928b5e435008b8e0e19e1c7550f7c88fb322b985d7fd56e4fc578db23342865dc17042732079c9abcd06b7a5d9a7dfd6009751b3a0c9fb4a93d0e2dddb6b4c1c78d499633d83007bfef75e8e3bd005fc704d4bd41f9d74449234a9a1ae46a79310f1c43fbc39d08be0dbd06ec022e06a0675c41b0bebf71073441765edfb4ff97c5fdd"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x20, 0x22, 0x5b, "e1afdc654b204e528412f3b4facbc43e56caf905d2e049726c579d747f887d33886e6d9fcd0ad449f86a2715aa118ba271430a9c842d8ada030cfcc420efbee7aa4a2eaac9d39e7333716547d1223076b7487a680669b3c11ac306"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x81, 0x3, "ff5723"}, &(0x7f0000000640)={0x20, 0x82, 0x2, "c4b0"}, &(0x7f0000000680)={0x20, 0x83, 0x3, "081707"}, &(0x7f00000006c0)={0x20, 0x84, 0x1, 'H'}, &(0x7f0000000700)={0x20, 0x85, 0x3, "4b5d8d"}}) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x8, 0x3, 0x0, {0xfffffffffffffffd, 0xc85, 0xffffffffbbfffffc, 0x0, 0x8, 0xfffffffc, 0x6, 0x0, 0x80000, 0x8000, 0x9, 0x0, 0x0, 0xfffffffe, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async) recvfrom$inet6(r4, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x6e29, 0xc, @private0}, 0x1c) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac2(r1, &(0x7f0000000940)={0x14, &(0x7f00000007c0)={0x40, 0x31, 0x48, {0x48, 0x30, "5de22540730912a917385c3f8742823562b7bd9839f0a42681375f6aba56db254e7d302b0232fe0f4e94e31c3176fc5e597c276e9ff8314322554fac755d9302fbbd421aa795"}}, &(0x7f0000000840)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "4a36241065c925a910661f0a9c48bb8dcd91ebe944cf17ac0ba87300a8e6f4f28d1818a9762461ad7a4738f1b5139f62809a1deb163899bbde32f9c8d1c9c1514663d8178b186600224b1cee3efc13e1745b3b264ca90f8612405fe79a71a28e6eb142e789e0e7a17f06faed51a9b59d746ee54ec0569e176a6248d262eaaf98b4abe845841506dc4b6eed4d0b7a7146425a665d9514510e5efbe5b087b5308d65baf024439aca5ae35ac4c5ea51c523850f73724a6f9d039f28dbcdd58dc48e5b51ed4f89f86d4925c3f62f7664e7bbfaac1acde178b3bf76781a8ec19bd22e27fa"}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000980)={0x20, 0x7, 0xb3, "d76979f3e73ed27af5f01a6cfee8e8fbfd2f8275f5e5b69c863e643b656e91b6732e66aff9a9c806a8a98b6416682b848c93ca01393418eeb420503ba7a94a943a9a2128096db6e19a7d052814c124d4c143eba192af324385b2efa53ddf37b6bda040e038f45276540f917c5325062d0c95fec6f0d8b9926966a15c7bc8494d07da8e00946b9bd49c9b4acb39431ca2bb7055b858ba18f31397f3df7c5bd0584e65be7f323eee3c1b865cfa8fbf4e840eca70"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000ac0)={0x20, 0x81, 0x1, 'X'}, &(0x7f0000000b00)={0x20, 0x82, 0x1, "06"}, &(0x7f0000000b40)={0x20, 0x83, 0x2, "cc2e"}, &(0x7f0000000b80)={0x20, 0x84, 0x1, "8d"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "0900a6"}}) 3.255459751s ago: executing program 4 (id=1560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='sit0\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x4}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x2, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x9, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[r3, 0x0, r4, r7, 0x0, r8, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) r10 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x5, 0x1, 0x601, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x28004844) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r10, 0x4048587b, &(0x7f0000000a40)={{r1, &(0x7f00000005c0)='sit0\x00', 0x1100, &(0x7f0000000600)={@align, {0x1ff, 0xd, 0x400, 0x8000000000000001}}, 0x7fff, &(0x7f0000000640), &(0x7f0000000680)=0x80000001}, 0x3, &(0x7f00000009c0)=[{0x3, 0x9, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="5812", 0x2}, {0x1, 0x1, &(0x7f0000000740)='/dev/dri/renderD128\x00', &(0x7f0000000780)="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", 0xfb, 0x2}, {0x2, 0x5, &(0x7f0000000880)='\x00', &(0x7f00000008c0)="8457cbec44aec00116aec2ccc76bea754bd41c084a5a89c0cd813f40dfa5886ca0c8caef62f871c47d1bcc6c302dcc9745e8c9e5874ffcc6f8007bc62592e66f0fcf07365031001f1f8c180f75ed12571a6c985de10827f4fb0c6adc72528a01a87b0b676f81f1514bcb76b2dc3e59527897f0101b0604c8c4d43d740dd4cecfcebba8a9b36e06658898f9514793bc08da9bc39cef55659261414e7d9320e9af3191e5321246fb887a0e6f0b253c99933252c8d1ed6840a124c0d9f9c9206c07f5be539753638a093f5d698bc355b6d6907d6fcfc9d2", 0xd6, 0x2a}]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000b00)={0x0, r6, r5, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r11, 0xc02064a5, &(0x7f0000000c00)={r12, 0x5, &(0x7f0000000b40)=[0x8000, 0x1ff, 0xff, 0x7, 0x6], &(0x7f0000000b80)=[0x4], &(0x7f0000000bc0)=[0x3, 0xfffa, 0x34aa, 0x1]}) r13 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x7fffffff, 0x10001) read$usbfs(r13, &(0x7f0000000c80)=""/4096, 0x1000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000001c80)={0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r14, 0x11a, 0x1, &(0x7f0000001d00)=@gcm_128={{0x7}, "c7a079ea27c96895", "f21e0d3cd8d49f6457b2ca12d1389086", "fd0f2866", "991b4f6d29bda3f4"}, 0x28) r15 = accept$packet(r9, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d80)=0x14) ioctl$sock_ifreq(r15, 0x8933, &(0x7f0000001e00)={'veth0_to_bridge\x00', @ifru_settings={0x800, 0x2, @cisco=&(0x7f0000001dc0)={0x3, 0x800}}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000001f40)={&(0x7f0000001e40)=[0x0, 0x0], &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0], &(0x7f0000001f00)=[0x0], 0x2, 0x6, 0x3, 0x1}) ioctl$BTRFS_IOC_SEND(r15, 0x40489426, &(0x7f0000001fc0)={{r9}, 0x6, &(0x7f0000001f80)=[0x2, 0xcc, 0xe, 0x3, 0x8, 0x0], 0x80000000, 0x2}) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002140)={&(0x7f0000002080)={0x88, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39363403}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000021c0)) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000002200)=0x80) r16 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002240), 0x128000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r16, 0x3, r0, &(0x7f0000002280)={0x100000000}) setsockopt$MRT6_DEL_MFC(r14, 0x29, 0xcd, &(0x7f00000022c0)={{0xa, 0x4e21, 0x1, @loopback, 0x4}, {0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0xffffffffffffffff, {[0x58, 0x2, 0x401, 0x5fb1f088, 0x10001, 0x7, 0x8, 0x3]}}, 0x5c) 3.088957955s ago: executing program 4 (id=1561): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r0, &(0x7f0000000000)="cb57f7f3415de9d3c084899a1a43c6193dad1dfb6d2e08a785ba682a86ddeebb9839cefb8ee6cad231", 0x29, 0x40, 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000040)=0x67c, 0x1000) 3.08622364s ago: executing program 5 (id=1562): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000ce2600000100000900000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0200006001"], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x84844) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x5e}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x5d}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xc7}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 3.040644451s ago: executing program 4 (id=1563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="f7790066baa00066b86b4266ba2100ed66ba420066ef0f29902cbb0000c4e2b1ba8c88d90000000f83001000000f7842280f07b801000000c4033921820f47a753fd", 0x42}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x82e82, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x801) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r8, 0x300, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x10000081) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000140)) write$tun(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="63460b22c6d36ec976703400000000000000000000000000fe8000000000000000000000000000242c0200fa000000000000000000000000000000000000000002000000000000000000000000000000000000000000000a00004e2200004e242000000000000002000000010000000400000001000000000000"], 0x7a) mq_open(&(0x7f0000000080)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]\xb7\xc3\x80y0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x800, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r9) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) 2.936094932s ago: executing program 5 (id=1564): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b0006006500d3"], 0x28}}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[], 0x1cb) close(r6) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) (async) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0x6) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b0006006500d3"], 0x28}}, 0x0) (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) (async) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[], 0x1cb) (async) close(r6) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async) 2.582630272s ago: executing program 1 (id=1567): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x471}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) 2.477219897s ago: executing program 4 (id=1568): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0x1, 0x4}, 0x38) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 2.235596734s ago: executing program 4 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a4000809050101000208fe0209050310ff0308"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbb5f92e8545f88c57000000000000", 0x12, 0x10014041, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$packet(r9, &(0x7f0000000540)="cdb3de296e8ea7d9221f17131a8e030ad1d619d2f2405a05c14023a55be36dfe8e334b8969e907e864c161f85a8f39b1822cd3d666e61e5ef04b34bd8055fc1712ca92e1b082c7f53800ae97e74d040d8e041ae3477a3ed879e4024079934dfae85d69423f83fdeab89a0b481d4e4c63dc2695183de7cbf94539af238b0a75205a5b2bb87ea401fe5a82f4567078f7fa97f876d9c122917c022555c0dbd220af68325d8ce38d42694a4bccbe49281b416bf5c5e9b393f880ee2e8d70d179c1d9b0", 0xc1, 0x800, 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000b010000010e0001a0838cd4a0005d2de07d2a2884ab924e5d5cbf14f1ae16299bdd4100034000"/57, @ANYRESHEX=r10], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x20004844) 2.221801554s ago: executing program 2 (id=1570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 1.968542253s ago: executing program 2 (id=1571): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x5, 0x4e21c0) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000180)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x63, '\x00', r0}, 0x94) 1.837278505s ago: executing program 5 (id=1572): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0xa, 0xff, 0x5, 0x7fc00002}]}) mmap(&(0x7f0000029000/0x4000)=nil, 0x4000, 0x300000a, 0x284031, r0, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff03013780200000000", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x801) io_submit(r3, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r2, &(0x7f0000000340), 0x2d}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 1.615414225s ago: executing program 2 (id=1573): pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r2, &(0x7f0000001540)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000e80)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000ec0)="804eacf23dc45aef0e6491ce40ad35ec05fb1067bd6c0349d662fc32ee69ee28e85333fb6345ef2e4443ddbb64", 0x2d}, {&(0x7f0000000f00)="12671236c7dbc2b868a2d53e373f3c4a29dde0da91cd151eed2cba1febc4cc19b84245656fb57fb1e7f58dee1a19925fa4a841da6401cffa44f0f618d6d431833334fee23e6a442f439e324814a8a3e54f1a5f2cded005c9286b28b5e281af075d86c64daa513c66849cce4b2dc59d770d294bd0f7e64d1784cad0f7df680082326d87c786139e4ef6d677cff589564703019e38ccd4747fc8beb9f496e0d1d040cb4838b695125b", 0xa8}, {&(0x7f0000000fc0)="73fbc1b47e75e6f2e4940aaa64d22ce5a9d8d0cd6b049a921b1021517bb3fef7470c86f1fe45d430cb950b6f8df2feff36c45062936133701164d3e4d738da5ccb975f79dbfe21210a13e5006570ed6d294b7be5", 0x54}, {&(0x7f0000001040)="03dd70b05eb6b6e37d4dd3b86de901d0f52c6ebc7ca73a3c6603689edd92dea68ee1a04e5f859c8327adc8a69588826124d0b90b64433aa435bf6bd4baeac79936eef7caa20b498d2ad7ef9fe3c50eea8f89d1bda361ff3a4fa64602740fda1d81c8ab01063ae2e4b53fac3ef6a007d4950d2e0292b0f6ad5aa730cb4625ffefd39949e3cb1d7b6562f76e92b2f670de8c183ce61c9671aa86bb2469ac9784cff6349d8ee5ed8d411f65ccc91474c5f483ab4ace53f4ecfdabdc1052267ae14a9b0fe6475f37b41be6ec50eff224f9b27279d478449199343c3c4df0913b0211", 0xe0}], 0x4}}, {{&(0x7f0000001180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001400)=[{&(0x7f00000011c0)="2ee5e82a574c3df3b7eb6a414fee32dad7fd997d10accd8e2011414c0257cf1270571cc9e230822a4a5210154680b5c819c1cb5ee18a98cca6fa3e6dea2d51675afd929a8492c9e1", 0x48}, {&(0x7f0000001240)="3aa536d6242859fca23efb959933e6f9e64f27498e748948f52d2020576494760c03d47986e5824d9dedbbf71395c01ff4679c03a0037958aee34d3905c3aeb479a6839c75c0c22bebcd40ca389b18de100e717d", 0x54}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="033f403ce4f9612ba81144dc3ad8478b424a761e38bd26104c0b7455d842ad948674712770888ec5248bdd12143cb15d1846fdd9b4f607eb3828c2f951cf4389b7fda78ec728b6352754a1781e8ecb369eff029190d0d21e9be95c622b4df1ddba33a9d8ddad70e7142c6f116a95798844373cb56f9af3e996363b28f2715fa751d92570de2b256b70e02f848b285652048e0a338dfc52dfe6a7430d4e1d2468607f6c09bfd3f9ed5a04f7a337c3589494c25097b23b8756ea5c475a02f5191f63aae5f54bc38847583a19371bfc6953a1faca143fda0c400451bb2098a591fbea8d25e9015d666b5e97744e877c82bd1969b937dbcbe0821589e6d7b34552c799f9773d220364b408efb54c7b9536d2073ad2a775fc71df0d7c8463c3180e0db1ade5069d93033226c761970e7c7b1bbcd2e6ee675d0abc6063327fdde5c04725e635306f495f9723071b010e364db85731b488e43e122845cfb5f6a73b9926bd52b471354ba0c181ffc96f95b38cf410f398faf2f7dc6c1658c0a9999cff714cb624086ffbfc8b4bfec087263fa10a3942c477a8b69b5ff1bea05692a5b09334397d8cbab1f6fd991820f2a310c2324738790246390ba6891ec71bf546a149fc3962f60259cbb352d21a5f7acb5cd0c9a9d7c63b901c53084efbd39781dc1919e2fc946fc0d2c3828d4d0a5f5872e7c8b1acce0694380b5b0a690f7cdf4829f74cdf48532d0b6c4d9063d3df3dc2ce0ccd0c1152383f347d79ac9b56ecc161a32e1af5583d3a35b978d9efde3d79a5499e37dac1ca06b69a9050b0ce84af6b1520c24c38ec0fa9f2ac7d0a25475db52251f21a63bdbc350404258903f41650f8986d9981456aba3a89acf0ceefc6db703471ed2e5b5cedccf554a2b242481269821a098380bc00f7f36bd4e64bf917b74a8fd9ff77e735b40ef812566ac85908e1d08ca05fecc2b39237bee55edc4f9337ca0e5c8cd092e7f67b4c3f94ed7c65f11156afb7211fd3f93031b16fcfe58139efd291f64261e98efa0cd0d973aea9ee1ab6f260fc8d3337d386fceed3e1a823158991c29fb96ac69b9b2884c1d26735bb6ba10081921053aea1d3d573ddec48e49284da84f6c895ea65c9f95d2578f1c258d4db7f976e96b1c798bf40625c6d435acf657d3f8675997194703963336e8839382835644e0fdfd72c5042c9d4cf579e17196e2433d8843150780ef7ae9a8e151dc872c424ba51a11f39c61e8bca3fe396f3257737beed7008dcfc7888563a0e80328d83b52e8d621e2d5e05e54f7182678e3d1d632a7349b9a6931ffded7afe235e0e0b3dcf0f0748a323208abd69b5cbb28731926989dff97e849aa148a9ff5afd4d5191b0651000cc88fe6ffeec034d8c23377893a3c9ceb0e01b9ba5415fce8e828e5faa15214b72e4acf06d66c26d8dc0ee4cd48e652cad82081a26afcf3b87bf39d28ab93eabeab6090be13701a5aca70bb1d76fa3e7741e70174f3fe7eb4f8ed7c9e2f4653126c926cf50b8fde8f12e87e56a6a494874d95a455802b31aa22800ccd37ff8c907580215df3d8ece7034916eb71e5bb7757a3915b418aacc2385bcb596ac636f13461ac4baabe14e5cfcef3ed055a88de09a6a4ca6bf9820d029def011adccad82814617c031fcd987e8281405de5be7cd987325a79ba96e763730c9e1359890175cb670f007debcdf931310625912fb5ff41cb8f857ebfa356dc1ba3f5a58cfc059f5ce1235d75ab6eb1a46e652185348def1808a086f840a8c1b2be3678a14c8c798662b7f40d6b6c3369c58bc6c8c14cbed8dc1fa062259507380839273c309fc1540e4340c5c0b1aa72f4dd6f8d299671cfa1c38e7b9c6cc7a04e1092012b759a0a90622d0dd2db07765c3efc43ea4d47214e906ab5ee47e62bfb8f167371c56817e5ae19375ba5c92c6686fa87d8bdabf37d04bde8f500244e41c58f1302b526781fa469c8550194d51a0fc765dcc39bf0c861380bccdf46b86f098ed67cd43f6d890008ffd9e0faf548982423ce7e6b5b59ffa69250eec3637f3dd0bab29966d437d45b3c2dd9b6b094d1385109f0e0a51fe0525a62ea4b8cd6103784bc27d80e6f8dbeddf1fada580a8af6334cb38e24c0921b60ae83aa048d4487145b14ec440f20c6ffdc127f0469e2d2131a8e7c586e02aa29ee5c10105ab5f050fb03556aaf776c5b9aa8ae2dd0a638cf248a39e5de9e48f0aaa5dab57955ed7c45a98d61ae6208674ddfd440ea8aad8d0f3d3f546ea66f05f5fbb10217be53b362351c4e07aac73381ed2cb374e1e1e15b92470a82e2a1d1b35f42f1d7fa61a923394e5a16fd2f08b365bb41c53c040654f9b69b6c1e131eb1328e23045052e9c26f3080fc584fb71eb55d9d6f139e1624028884fda431b32269edc83d3824c4994e9fb94f22dc8d9599f5bee554f95802663ac215b2811d648995101b5b1829857bad2c5fddf5481a21de38922099159e62dca26a691fcbd08fe9db62d745de5b6124fa37d06fb3df2104ea6262f2f3edd25746bdc9b7be535f2f1d27b37bd388d5e57b58dbee68232f8d1645fbe5b6404ccee4e02e270fa266b45213762324c4c3e72b193c13e46f5c4a491aaadb11fa34c18612256a49000f828287632bfa0988c3920c52b3ca723955768dee772500210de86da81cecc8892534ec9c2e22712cf6455dd3a862936dc247cf37878b4fa4f8e02d9578bb657b160952674d3f8bff04470d891be5f9b8b8da61f0a44d3719907f11570e3e0f04e1592c75870fdb8c2a6e3316eb8d68fb86544f37cffd7245421ccdfd1bd19dc9e8478474780c0d28de5a667f7ad62ef95eaf1fe2c0f4fd216c759d87d9c21750ea4d32110715f9ddd055a26368e9acdb852273970b044cb6bc7ee9ee62c092a2948418431db59d54a69f1b18f5e5881a0fb3fe500485d4698af55bbb2651527eac53368d7091ee284b3e72aefc290a8ccebedd19b97fd842e8a7cd24acb2780960c78da1cf2636e678c0b6e925466b7f13fc755976367875d121a4a68ca2268249b03c7e3f6228558bad6fca03a78576b6f5eb156b42bcab02d4d396c453186e134b9daca3cd34cd16a75225fcb68b49cbf0840fe45c7cbb4362fd6c9f01e1babad098b5b416824367a829d88a901b2bb8563b1e56d2a22296ad40d4e8aeecabed5e4ea0e0f336b09f6909fd05cf37490bbd83888adcf5b3c43a68899e3c18ad1c530f72cc93642da258cddd4ee88774fe4950d0373b187262ce09d4169b539a93c26a985ba452ec600b91c66c085a985189d9119b201bc816cc419c365a7f2d2a2b1f068999f17185eac350f3407330b73e83cf931f04badaa5a7827adca8f458219612e804e10d4d20883cd88be38cf3d33a70a5ad089e2d369a7e9778a58a9c4baff13d0f1c6de13a0d931ebfc1a3a88fac12348fbee74a7bdb96d9a61e49d8da7c0e3a200693d61c00e78b23af62a73df678ceae01f65328dcbc7f0cc61ddc5353b009edd5305d5fb5a137014b373148bf0fdab447803bc54036b553293060a4f26930c7ff9867f470e9477c0caee3ac95c63c20982fa0ccfe82a86b4a5d526e14c0b806cc0a0ac1c3747f87e4c1878e53b3c003acf4acb3bfdc0b4ded78ce1abed7d012c742d095e4f5618f86e9eed2fa2a95dde9a4f93e08bd9809d242efd5fe511d9858ea128d4bbc725553cddc3a1de00b86bb6de71372ad231aa16d7df95f9ad58cecd5008d19007c17a83e16cbb8a12724bbad7c270efafd7b2e88011c1658363301bf2d485f80642f82b54e8aabb477116897634ce533e4613e7e06df1d2cb412a7fa15bd2ac7bfe432dd08a5e4258e1272ff4ba340adaa033d103a34efb5af05948ac70a01f1f2da8bea1a41bcd9f68263b661f1f642435d9384f76db6ee720319c33d9b9f53ee4ad9e0364bba5dabed73027d4b9b454c5fea2ffa8159499360fdaed6f2e2fb4933b5164de66e092d24b21f6cf82e52865142afa2103407da424704acc69c3a6c2679a5df093915ba82355de0117add944e2b64382d83db2dcc9e790e032b0e7cdf42ddf0635e792e135c1d247b06d9f89b027020ebbcea736fb46db6b4f0b185aa8f9fa6cec996c5fe0f5fa31a612fabcfb23bf0816414458a012ba91dfd7af358137001ea2da17841fb187b6ee485ead34cbcd05d91355e7882fe7226add8846791e5bc9aaea03bb8cd829fbd3f95a458d88afeaec8dc3a6f1fb01fc3d029299d8020e364b58562a793c1c16178a97a98651825ba32f9d902e054e07f9514f214f13c14938feb6e20ea544f092278f9fc84a2bab259f48db281591e7e331678ebc2916de0fa27f7a56740c7a3af61f80f518179a19667f6f2651f6f12a96563c19873e851101ecc11c272d9fd0d519d9556da4ac16269edba2a9d52610ab249a0fd1f10ddf3b00bb5ec4f360c85d379c72ca54c1534167ffa1d56dee7ff7661dd6c89fe749f7cee2064512166810bff73235dba65a6a9a98d30efe5880fc2bf22a9911efabbf9f22f2f0a69b1cb8574c59af345f03b3b49c13c0d95c72b66db3e9128f6fe4d9cbc19d67a11e4c3c0e325c51fdf1c25743d288dde0fa8cdabbd4c96ff56b74ff000e60c9be71ebecda45815813cf9ccebb86466b10a10e1dcc90d5db392c17eba0b419a4391c5b379863083080b21b0340e161b000169d0d25d2cc99d48aee7d816f0a1dcfc6f2bdd29a60bfcc64da6992d8c303e5ad995a23c73f96bc3267b8cea5ab8d7116564ecb2f7568fe1af3f8211e5e4f01e6940eb9c67759d26052f1e5760bc97e8eda6471223d0e7907a279720f954c33228f7cf172edd7a8bba1e514b32197a5f0d4a75d7b47d0e9a228c79bf25350127bda0fd227918f256e37b612bdeeb20f15055a410da96e1be92c5d9b680a83d0d84b04854c7a39b66a469694e95ee50889ca113f1ddaec204a3d8b10c70779d3f12a6597b62c57bee98a2fb724c7830e860d8796b6f888770cacb857a1211b5a9d499b215b7c8177b5aab453db37ce22fee96ccb015ba2e113406cd229e301c7a4fae37d128164f92a9d1fbfcdba8bacd310f753b25b7c83c118b123736b0c190cc98556aa9d6ef617bc30940b15df1afc383104aa19c1f260620448fdaaf9946a67a66f1a4237b13618aadb30c3a240940d24ae8210a304f7ff9bcc0d8b9db161c042f32d4b53ed89a921f4c983a2c66e18affde78a0471c12120553b051789cf862ae476028655fba41588b81a80efe351f4e92895353c3c95d691b467c3d920c12af550df9b7bfb252c18fa2cfee3993683a0f816cefa09acae9635bfcbd48781312f15e679d36a410b6e160c1a8f3c01e95cc9ec08fd185424c88b32c6db8f833879c14f0a7722cb4bda4a91c7b67756a0e77b0ab1e07a695e51669b112a95b45720b413ea12c5ec0b2e6f90851f14e10815da637f55bc82e1f147aa9b8639aecbcc1c2251e8f7c018c0843c2a7e05f9a3cad703b13d92e678b7da772580281a04c1d98553ee0a4b02b962a2e416efa10009784bc2eacd3a598c3ce1c4b9dda233f77b1ce52ef375810ad72b5a64a31e92dc53ec18b8c7f33bfab7cd685060c93c773c7e4737d87af0c500c8762ddf1d52595ade01a049f4c633e7081c6783f20bba608267958e2d7a4c9d7de552b485324d325f58a21e75983cae476020731527f68ecfbe899cefc062b7cc64bca82fdeac77e5d01cfc31ddfec1661f956a4cd411ee59117635ce66e2b63e42dbe1e9c446232f6bf4a47f67b4e4cd61a0027bdcec61b4c01b2711fd48af4ba49bf4", 0x1000}, {&(0x7f0000001300)="faa033344f50fcd336e86476497978bf41312169dfeb3905b9cab92194c04582c5a5995d94af18b9e19f97c8c7a01afe47597a67e8473953efa89a246a95e5061c7c66662e771d2b9c63698810d21f128adc44ed87ecf92646c88e98c9d5f5e652f89fa746a499f476e344672d29753d79c2e33075", 0x75}, {&(0x7f0000001380)="0f96e7658892cee790fe71a799ddc3ee70fa5de095858d6c9b919038b8f3cff7f68948b075a7a08dcb04875f9529fa88d73b2e4612f6795f99864ce14c406961bf510ece392213", 0x47}], 0x6, &(0x7f0000001700)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x0, [{@private=0xa010101, 0x3}]}, @lsrr={0x83, 0x1b, 0x3e, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @private=0xa010100, @empty]}, @timestamp={0x44, 0x10, 0x1d, 0x0, 0xc, [0x8, 0x9b4, 0x7]}, @rr={0x7, 0x23, 0x27, [@multicast1, @local, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010102}}}], 0x90}}], 0x3, 0xe000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.576200008s ago: executing program 5 (id=1574): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0xfffb, 0xa}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_connect$uac3(0x5, 0xd0, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x8f0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x80, 0x10, 0xfd, {0x8, 0xb, 0x1, 0x0, 0x1, 0x24, 0x30, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x13, 0x7}, [@mixer_unit={0x9, 0x24, 0x5, 0x6, 0x0, "9a9cc6ab"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfafa, 0x2, 0xfa, 0x7}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xbf, 0x1, 0x1, 0xc, "81f2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x55, 0xc, 0x6, 0x6}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x7, 0x10, '\\', "c3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x0, 0x4, {0xa, 0x25, 0x25, 0x164100, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0x5, "c9ec7e", "027c"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x5, 0x8, 0xe, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x100, 0xf8, "b1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x6, 0xf, {0xa, 0x25, 0x25, 0x3, 0xa, 0x4}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x90, 0xc4, 0x3, 0x40, 0xff}, 0x29, &(0x7f0000000080)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x3, 0xf, 0x6, [0xffffc0, 0x1948b4b0644902bb, 0xff2080, 0xc000, 0x3f0f, 0xffff00]}]}, 0x5, [{0xdc, &(0x7f0000000240)=@string={0xdc, 0x3, "29be9ea3d7972727cb0438b99ca3f1f2f0d2dbd10ed21a4511921e2698ab4e654d1ad322f2301bacb20afe179cd842fc161c9ed048480c1d5e786d8311c79f7937ea0e7eb65a08d27cde953a1b6deb47161e3b266d526fa58625c81108e57d0c08000c9355021af0db16a9ab867d406d12bac147185eac13631c7745ed8c653db0f48a70e1098a31081bab741fceec9501afdb3cf7e49063e6488d331b6b5c89b01aa9cffd95ff3cdc469021fd44bf735f7884aae706816afb2baa76a36d5b12d1c60fcc317576775f551f146171a3c63b03d5d0bdeed9228c99"}}, {0x3a, &(0x7f00000000c0)=@string={0x3a, 0x3, "dc0943229bd2668fe93e83e96271ca0774e6e484d2b54e7ec271143dcaf94e5d2656bb51acbe4b488a7c00f90f733a464a7b36300e7ff2e4"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "5f4bf1d25a403d8471b698cf36c7788809567c37da5e2b43aba75add0b395055f81cc7fa23c813f67d652eed98430f69b920f94c4fe8a99eebe134be138af799b8a2a22deec5319ecd8c36d9a648a926228fe9687417391337ff386e56ae6129632d73ff835e3c0b7f0952f4adc0429b590810a1495ae793b303a3b2880a33ca1ff78547819f666892cc0c1f80aa0f42f3a13a978257"}}]}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904000002ffffff000905ef"], 0x0) 1.256821227s ago: executing program 2 (id=1575): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000040)={0xa, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b3244078b089b3307366d090890e0878f0e1ac6e7049b376d959b659a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec97a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f11f46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f1b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83cd06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803335ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c134b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3765b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b33c5260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000000)='{$*)!', &(0x7f0000000180)='./file0\x00', r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 1.135007532s ago: executing program 2 (id=1576): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0xfd, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x5, "902ef83831"}, 0x0}) (async) gettid() ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6001}, 0x1) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14}) 1.036170963s ago: executing program 1 (id=1577): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x1, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x6, 0x2}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) 333.048877ms ago: executing program 2 (id=1578): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400"], 0x68}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) (async) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 213.978661ms ago: executing program 0 (id=1579): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0x1, 0x4}, 0x38) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000002200", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 128.959208ms ago: executing program 0 (id=1580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x5}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x1, 0x3}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x8000000}]}]}, 0x1bc}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) chown(&(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000000)=""/126, &(0x7f00000000c0)="d78274e092b949a97169a654119218c469695680f499283c88103ed573437d0cd5cf93b0156defc1eb6878a480882f2eefd8e0274f6fe3a761567642002da74f801786cc826db9a48d9d2465d4a51730947e90e379a43e71", &(0x7f0000000380)="0de9662e5306b843726a2d8754e760a28f0fa92be8813b8b4b974ea7aae3fa443b7b6812be2d5283b2727c9b30ae573493d7deb5535601c5df113032b7d18a55546fbaa64403ba44b883291e0cf7f364461e964c659db626000008174b3d09af6a37574067a56cf030b325fb6808fac8a28dc3bf3d8e5f8d2a1fd8303f01a4f1328ccd722279742696a67d227e3bd174cb786079ad65d58c977ca7d3dc1185cc91a0c6", 0x1, r1}, 0x38) 57.860134ms ago: executing program 1 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 0s ago: executing program 4 (id=1582): mmap(&(0x7f0000246000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x7ef34000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/172, 0xac}], 0x5, &(0x7f00000008c0)=""/170, 0xaa}, 0x1}, {{&(0x7f0000000980)=@ax25={{0x3, @rose}, [@rose, @rose, @rose, @remote, @remote, @bcast]}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000a00)=""/95, 0x5f}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/168, 0xa8}], 0x1}, 0x4}], 0x3, 0x40010001, &(0x7f0000000c80)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4, 0x8041, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0xfffffffffffffe71) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0x400b601, 0x20, 0x5, 0x38f}, &(0x7f0000000240), &(0x7f0000000400)) socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0xff, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e24, 0x0, 'lc\x00', 0x6, 0xfffffffe, 0xfffffffc}, 0x2c) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x40000, 0x6, 0xffffffff, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x2, 0x0, 0x0, 0xff}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xffffffffffffffa0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 65.603852][ T9] hid-steam 0003:28DE:1142.001D: Steam wireless receiver disconnected [ 366.087241][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 366.249434][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.277736][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 366.278150][ T1209] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 366.313640][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.357736][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 366.379671][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.428366][ T9] usb 3-1: config 0 descriptor?? [ 366.649769][ T9] ath6kl: Failed to submit usb control message: -71 [ 366.687625][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 366.697709][ T9] ath6kl: Unable to send get target info: -71 [ 366.717695][ T9] ath6kl: Failed to init ath6kl core: -71 [ 366.738324][ T1209] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 366.743169][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 366.809193][ T9] usb 3-1: USB disconnect, device number 84 [ 366.958388][T10048] xt_hashlimit: size too large, truncated to 1048576 [ 367.109230][ T1209] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 367.120877][ T1209] em28xx 2-1:0.89: board has no eeprom [ 367.127942][T10053] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 367.151427][T10053] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1109'. [ 367.327439][T10057] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1111'. [ 367.448292][ T1209] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 367.467631][ T1209] em28xx 2-1:0.89: analog set to bulk mode. [ 367.473742][ T5916] em28xx 2-1:0.89: Registering V4L2 extension [ 367.780596][ T5916] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 367.791351][ T1209] usb 2-1: USB disconnect, device number 69 [ 367.805757][ T1209] em28xx 2-1:0.89: Disconnecting em28xx [ 367.971472][ T5916] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 367.994499][T10067] FAULT_INJECTION: forcing a failure. [ 367.994499][T10067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.102665][T10067] CPU: 0 UID: 0 PID: 10067 Comm: syz.4.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.102689][ T5916] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 368.102710][T10067] Tainted: [L]=SOFTLOCKUP [ 368.102718][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.102729][T10067] Call Trace: [ 368.102736][T10067] [ 368.102743][T10067] dump_stack_lvl+0xe8/0x150 [ 368.102775][T10067] should_fail_ex+0x412/0x560 [ 368.102804][T10067] _copy_from_user+0x2d/0xb0 [ 368.102832][T10067] ___sys_recvmsg+0x175/0x590 [ 368.102850][T10067] ? __lock_acquire+0x6b5/0x2cf0 [ 368.102878][T10067] ? __pfx____sys_recvmsg+0x10/0x10 [ 368.102931][T10067] do_recvmmsg+0x334/0x800 [ 368.102958][T10067] ? __pfx_do_recvmmsg+0x10/0x10 [ 368.102988][T10067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 368.103023][T10067] __x64_sys_recvmmsg+0x198/0x250 [ 368.103045][T10067] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 368.103075][T10067] do_syscall_64+0x14d/0xf80 [ 368.103091][T10067] ? trace_irq_disable+0x3b/0x150 [ 368.103117][T10067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.103135][T10067] ? clear_bhb_loop+0x40/0x90 [ 368.103158][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.103177][T10067] RIP: 0033:0x7f377f79c799 [ 368.103194][T10067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.103210][T10067] RSP: 002b:00007f37805ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 368.103230][T10067] RAX: ffffffffffffffda RBX: 00007f377fa16090 RCX: 00007f377f79c799 [ 368.103244][T10067] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 368.103256][T10067] RBP: 00007f37805ff090 R08: 0000000000000000 R09: 0000000000000000 [ 368.103267][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.103278][T10067] R13: 00007f377fa16128 R14: 00007f377fa16090 R15: 00007f377fb3fa48 [ 368.103307][T10067] [ 368.657011][ T5916] em28xx 2-1:0.89: No AC97 audio processor [ 368.877366][ T5916] usb 2-1: Decoder not found [ 368.907024][ T5916] em28xx 2-1:0.89: failed to create media graph [ 368.931416][ T5916] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 368.974708][ T5916] em28xx 2-1:0.89: Registering snapshot button... [ 369.029655][ T5916] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input42 [ 369.098126][ T5916] em28xx 2-1:0.89: Remote control support is not available for this card. [ 369.140143][ T1209] em28xx 2-1:0.89: Closing input extension [ 369.159798][ T1209] em28xx 2-1:0.89: Deregistering snapshot button [ 369.261071][ T1209] em28xx 2-1:0.89: Freeing device [ 369.336793][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 369.717673][ T5902] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 369.747434][ T1209] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 369.890784][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 369.903986][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 369.914322][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 369.916583][ T1209] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 369.930969][ T5902] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 369.934692][ T1209] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.945293][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.960665][ T5894] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 369.972883][ T5902] usb 6-1: Product: syz [ 369.978129][ T5902] usb 6-1: Manufacturer: syz [ 369.983084][ T5902] usb 6-1: SerialNumber: syz [ 369.989179][ T1209] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.015252][ T5902] usb 6-1: config 0 descriptor?? [ 370.025061][ T1209] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.029471][ T5902] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 370.080352][ T1209] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.099864][ T5902] usb 6-1: Detected SIO [ 370.104392][ T5902] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 370.181766][ T5902] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 370.201228][ T5902] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 370.208160][ T1209] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.225269][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.241610][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 370.257978][T10096] xt_hashlimit: size too large, truncated to 1048576 [ 370.368947][ T5894] usb 5-1: not running at top speed; connect to a high speed hub [ 370.472522][ T5894] usb 5-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 370.493626][ T5902] usb 6-1: USB disconnect, device number 11 [ 370.509299][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.530848][ T5902] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 370.541823][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 370.554989][ T5902] ftdi_sio 6-1:0.0: device disconnected [ 370.562195][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.610437][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.621474][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.641738][ T5894] usb 5-1: Product: syz [ 370.649869][ T5894] usb 5-1: Manufacturer: syz [ 370.654636][ T5894] usb 5-1: SerialNumber: syz [ 370.673513][ T5894] cdc_ncm 5-1:1.0: skipping garbage [ 370.679881][ T5894] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 370.689337][ T5894] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 370.696361][ T5894] cdc_ncm 5-1:1.0: bind() failure [ 370.869077][ T5902] usb 5-1: USB disconnect, device number 69 [ 370.916233][T10100] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1122'. [ 371.267777][ T24] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 371.408687][ T24] usb 3-1: device descriptor read/64, error -71 [ 371.532398][T10118] FAULT_INJECTION: forcing a failure. [ 371.532398][T10118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.558513][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.4.1126 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.558549][T10118] Tainted: [L]=SOFTLOCKUP [ 371.558557][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.558568][T10118] Call Trace: [ 371.558577][T10118] [ 371.558585][T10118] dump_stack_lvl+0xe8/0x150 [ 371.558619][T10118] should_fail_ex+0x412/0x560 [ 371.558652][T10118] _copy_from_user+0x2d/0xb0 [ 371.558682][T10118] ___sys_recvmsg+0x175/0x590 [ 371.558701][T10118] ? __lock_acquire+0x6b5/0x2cf0 [ 371.558733][T10118] ? __pfx____sys_recvmsg+0x10/0x10 [ 371.558792][T10118] do_recvmmsg+0x334/0x800 [ 371.558823][T10118] ? __pfx_do_recvmmsg+0x10/0x10 [ 371.558855][T10118] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 371.558893][T10118] __x64_sys_recvmmsg+0x198/0x250 [ 371.558919][T10118] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 371.558952][T10118] do_syscall_64+0x14d/0xf80 [ 371.558970][T10118] ? trace_irq_disable+0x3b/0x150 [ 371.559002][T10118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.559023][T10118] ? clear_bhb_loop+0x40/0x90 [ 371.559047][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.559066][T10118] RIP: 0033:0x7f377f79c799 [ 371.559081][T10118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.559092][T10118] RSP: 002b:00007f37805ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 371.559107][T10118] RAX: ffffffffffffffda RBX: 00007f377fa16090 RCX: 00007f377f79c799 [ 371.559116][T10118] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 371.559124][T10118] RBP: 00007f37805ff090 R08: 0000000000000000 R09: 0000000000000000 [ 371.559131][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.559138][T10118] R13: 00007f377fa16128 R14: 00007f377fa16090 R15: 00007f377fb3fa48 [ 371.559156][T10118] [ 371.756970][ T24] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 371.899924][ T24] usb 3-1: device descriptor read/64, error -71 [ 372.007896][ T24] usb usb3-port1: attempt power cycle [ 372.185721][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'. [ 372.357674][ T24] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 372.386318][ T24] usb 3-1: device descriptor read/8, error -71 [ 372.657766][ T24] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 372.681081][ T24] usb 3-1: device descriptor read/8, error -71 [ 372.781684][T10140] netlink: 'syz.4.1131': attribute type 15 has an invalid length. [ 372.819514][ T24] usb usb3-port1: unable to enumerate USB device [ 372.857947][ T5902] usb 2-1: USB disconnect, device number 70 [ 373.068139][T10144] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1133'. [ 373.080158][ T5894] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 373.267714][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 373.282240][ T5894] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 373.291280][ T5894] usb 5-1: config 0 has no interface number 0 [ 373.304631][ T5894] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.344666][ T5894] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 373.356739][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.365764][ T5894] usb 5-1: Product: syz [ 373.371513][ T5894] usb 5-1: Manufacturer: syz [ 373.376225][ T5894] usb 5-1: SerialNumber: syz [ 373.390115][ T5894] usb 5-1: config 0 descriptor?? [ 373.406009][ T5894] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 373.517848][ T5902] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 373.656431][ T5894] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 373.670173][ T5894] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 373.684182][ T5902] usb 2-1: device descriptor read/64, error -71 [ 373.954713][ T5902] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 374.110691][ T5902] usb 2-1: device descriptor read/64, error -71 [ 374.239858][ T5902] usb usb2-port1: attempt power cycle [ 374.614742][ T5902] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 374.660411][ T5902] usb 2-1: device descriptor read/8, error -71 [ 374.927692][ T5902] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 374.958232][ T5902] usb 2-1: device descriptor read/8, error -71 [ 375.057752][ T5916] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 375.068377][ T5902] usb usb2-port1: unable to enumerate USB device [ 375.195931][ T5902] IPVS: starting estimator thread 0... [ 375.213338][ T5916] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.222754][ T5916] usb 6-1: config 0 has no interface number 0 [ 375.229133][ T5916] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.240504][ T5916] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.252683][ T5916] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.266749][ T5916] usb 6-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 375.276751][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.289562][ T5916] usb 6-1: config 0 descriptor?? [ 375.308975][T10181] IPVS: using max 27 ests per chain, 64800 per kthread [ 375.740980][ T24] usb 5-1: USB disconnect, device number 70 [ 375.756421][T10173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.769101][T10173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.801525][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.825627][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.839196][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.846843][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.856930][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.865681][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.874621][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.888891][T10187] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1146'. [ 375.907934][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.915550][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.938034][ T5916] holtek_mouse 0003:04D9:A0C2.0020: unknown main item tag 0x0 [ 375.961835][ T5916] holtek_mouse 0003:04D9:A0C2.0020: hidraw0: USB HID v0.03 Device [HID 04d9:a0c2] on usb-dummy_hcd.5-1/input1 [ 376.635848][T10215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1155'. [ 376.708809][ T5916] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 376.871931][ T5916] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 376.885653][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.905559][ T5916] usb 5-1: Product: syz [ 376.914802][ T5916] usb 5-1: Manufacturer: syz [ 376.933603][ T5916] usb 5-1: SerialNumber: syz [ 376.955469][ T5916] usb 5-1: config 0 descriptor?? [ 377.166301][ T5916] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 377.409765][T10224] macvtap1: entered promiscuous mode [ 377.431986][T10224] macvtap1: entered allmulticast mode [ 377.457983][T10224] dummy0: entered promiscuous mode [ 377.470291][T10228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1157'. [ 377.497553][T10224] dummy0: entered allmulticast mode [ 377.538672][T10224] team0: Device macvtap1 failed to register rx_handler [ 377.572803][T10224] dummy0: left allmulticast mode [ 377.592768][T10224] dummy0: left promiscuous mode [ 377.743356][ T24] usb 6-1: USB disconnect, device number 12 [ 377.976942][T10235] FAULT_INJECTION: forcing a failure. [ 377.976942][T10235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.995013][T10235] CPU: 1 UID: 0 PID: 10235 Comm: syz.5.1159 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.995054][T10235] Tainted: [L]=SOFTLOCKUP [ 377.995061][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.995073][T10235] Call Trace: [ 377.995081][T10235] [ 377.995090][T10235] dump_stack_lvl+0xe8/0x150 [ 377.995123][T10235] should_fail_ex+0x412/0x560 [ 377.995155][T10235] _copy_from_user+0x2d/0xb0 [ 377.995187][T10235] ___sys_recvmsg+0x175/0x590 [ 377.995205][T10235] ? __lock_acquire+0x6b5/0x2cf0 [ 377.995255][T10235] ? __pfx____sys_recvmsg+0x10/0x10 [ 377.995312][T10235] do_recvmmsg+0x334/0x800 [ 377.995341][T10235] ? __pfx_do_recvmmsg+0x10/0x10 [ 377.995373][T10235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 377.995411][T10235] __x64_sys_recvmmsg+0x198/0x250 [ 377.995435][T10235] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 377.995508][T10235] do_syscall_64+0x14d/0xf80 [ 377.995527][T10235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.995546][T10235] ? clear_bhb_loop+0x40/0x90 [ 377.995569][T10235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.995587][T10235] RIP: 0033:0x7fdad819c799 [ 377.995608][T10235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.995624][T10235] RSP: 002b:00007fdad63f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 377.995646][T10235] RAX: ffffffffffffffda RBX: 00007fdad8416090 RCX: 00007fdad819c799 [ 377.995660][T10235] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 377.995673][T10235] RBP: 00007fdad63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.995685][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.995695][T10235] R13: 00007fdad8416128 R14: 00007fdad8416090 R15: 00007fdad853fa48 [ 377.995720][T10235] [ 378.515854][ T5916] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 378.535073][ T5916] usb 5-1: USB disconnect, device number 71 [ 378.583526][T10238] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1160'. [ 378.758039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.780072][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.786493][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.933090][T10249] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004' [ 379.126121][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 379.269257][T10252] netlink: 'syz.2.1161': attribute type 1 has an invalid length. [ 379.363152][T10252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.381237][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 379.393657][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 379.403336][ T9] usb 5-1: config 0 has no interface number 0 [ 379.410932][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 379.424313][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 379.443608][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.487909][ T9] usb 5-1: Product: syz [ 379.535413][ T9] usb 5-1: Manufacturer: syz [ 379.558265][ T9] usb 5-1: SerialNumber: syz [ 379.578816][ T9] usb 5-1: config 0 descriptor?? [ 379.651732][T10255] bond1: (slave veth3): Enslaving as an active interface with a down link [ 379.868476][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 379.940041][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 379.961921][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 379.978843][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 380.014932][ T9] usb 5-1: USB disconnect, device number 72 [ 380.575446][ T5929] IPVS: starting estimator thread 0... [ 380.837724][T10282] IPVS: using max 50 ests per chain, 120000 per kthread [ 380.988368][ T5929] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 380.996790][ T5916] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 381.186143][ T5929] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 381.201353][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 381.218974][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.244439][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.268049][ T5916] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 381.280330][ T5929] usb 6-1: config 0 descriptor?? [ 381.295377][ T5929] cp210x 6-1:0.0: cp210x converter detected [ 381.306875][ T5916] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 381.334970][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.371456][ T5916] usb 2-1: Product: syz [ 381.391037][ T5916] usb 2-1: Manufacturer: syz [ 381.406865][ T5916] usb 2-1: SerialNumber: syz [ 381.596998][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.608224][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.706218][ T5916] usb 2-1: 1:1: cannot set freq 15490714 to ep 0x1 [ 381.716479][ T5916] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 382.188521][ T5929] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 382.196372][ T5929] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 382.373094][ T5916] usb 2-1: USB disconnect, device number 75 [ 382.385959][ T5929] usb 6-1: cp210x converter now attached to ttyUSB0 [ 382.464452][ T5929] usb 6-1: USB disconnect, device number 13 [ 382.530262][ T5929] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 382.593326][ T5929] cp210x 6-1:0.0: device disconnected [ 382.887727][ T5887] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 382.899996][T10293] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 383.057754][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 383.069301][ T5887] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 383.089160][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.154735][ T5887] usb 3-1: Product: syz [ 383.172853][ T5887] usb 3-1: Manufacturer: syz [ 383.179897][ T5887] usb 3-1: SerialNumber: syz [ 383.193108][ T5887] usb 3-1: config 0 descriptor?? [ 383.423168][ T5887] usbserial_generic 3-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 383.441564][ T5887] usbserial_generic 3-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 383.458480][ T5887] usbserial_generic 3-1:0.0: device has no bulk endpoints [ 383.478843][ T5887] usb 3-1: USB disconnect, device number 89 [ 383.567933][ T797] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 383.698214][ T797] usb 5-1: device descriptor read/64, error -71 [ 383.973077][ T797] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 384.137773][ T797] usb 5-1: device descriptor read/64, error -71 [ 384.258044][ T797] usb usb5-port1: attempt power cycle [ 384.607726][ T797] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 384.638493][ T797] usb 5-1: device descriptor read/8, error -71 [ 384.667740][ T5887] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 384.823491][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.839427][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.861178][ T5887] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 384.877689][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.928455][ T797] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 384.958799][ T5887] usb 3-1: config 0 descriptor?? [ 384.984007][ T5887] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 384.987149][ T797] usb 5-1: device descriptor read/8, error -71 [ 385.118122][ T797] usb usb5-port1: unable to enumerate USB device [ 385.397861][ T5887] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 385.560011][ T5887] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 385.572223][ T5887] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.584293][ T5887] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.595038][ T5887] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 385.609427][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 385.616339][ T5887] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 385.626232][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.640051][ T5887] usb 6-1: config 0 descriptor?? [ 385.899823][T10339] netlink: 'syz.1.1191': attribute type 29 has an invalid length. [ 385.909795][T10339] netlink: 'syz.1.1191': attribute type 29 has an invalid length. [ 385.919185][T10339] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1191'. [ 386.063970][ T5887] hid_parser_main: 28 callbacks suppressed [ 386.063997][ T5887] hid-alps 0003:044E:120C.0021: unknown main item tag 0x2 [ 386.078244][ T5887] hid-alps 0003:044E:120C.0021: item fetching failed at offset 5/8 [ 386.086862][ T5887] hid-alps 0003:044E:120C.0021: parse failed [ 386.094513][ T5887] hid-alps 0003:044E:120C.0021: probe with driver hid-alps failed with error -22 [ 386.217517][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 386.272028][ T797] usb 6-1: USB disconnect, device number 14 [ 386.369431][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.385438][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.401943][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.417985][T10345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.427826][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.427858][ T24] usb 2-1: SerialNumber: syz [ 386.682887][ T24] usb 2-1: 0:2 : does not exist [ 386.702709][ T24] usb 2-1: unit 5 not found! [ 386.773773][ T24] usb 2-1: USB disconnect, device number 76 [ 386.857282][ T797] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 386.876760][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.117750][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 387.125459][ T797] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 387.138788][ T797] usb 5-1: config 0 has no interface number 0 [ 387.167854][ T797] usb 5-1: config 0 interface 184 has no altsetting 0 [ 387.210325][ T797] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 387.235292][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.264874][ T797] usb 5-1: Product: syz [ 387.279826][ T797] usb 5-1: Manufacturer: syz [ 387.294209][ T797] usb 5-1: SerialNumber: syz [ 387.316072][ T797] usb 5-1: config 0 descriptor?? [ 387.461798][ T5902] usb 3-1: USB disconnect, device number 90 [ 387.583263][T10367] FAULT_INJECTION: forcing a failure. [ 387.583263][T10367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.629478][T10367] CPU: 1 UID: 0 PID: 10367 Comm: syz.5.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.629513][T10367] Tainted: [L]=SOFTLOCKUP [ 387.629521][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.629533][T10367] Call Trace: [ 387.629540][T10367] [ 387.629548][T10367] dump_stack_lvl+0xe8/0x150 [ 387.629581][T10367] should_fail_ex+0x412/0x560 [ 387.629612][T10367] _copy_from_iter+0x1d3/0x1670 [ 387.629643][T10367] ? rcu_is_watching+0x15/0xb0 [ 387.629677][T10367] ? __pfx__copy_from_iter+0x10/0x10 [ 387.629713][T10367] ? netlink_sendmsg+0x650/0xb40 [ 387.629738][T10367] ? skb_put+0x11b/0x210 [ 387.629769][T10367] netlink_sendmsg+0x6c0/0xb40 [ 387.629803][T10367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.629831][T10367] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.629859][T10367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.629883][T10367] ____sys_sendmsg+0x972/0x9f0 [ 387.629901][T10367] ? __lock_acquire+0x6b5/0x2cf0 [ 387.629933][T10367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.629961][T10367] ? import_iovec+0x73/0xa0 [ 387.629990][T10367] ___sys_sendmsg+0x2a5/0x360 [ 387.630005][T10367] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.630020][T10367] ? kstrtouint+0x6e/0xe0 [ 387.630068][T10367] ? __fget_files+0x2a/0x420 [ 387.630094][T10367] ? __fget_files+0x3a0/0x420 [ 387.630130][T10367] __sys_sendmmsg+0x27c/0x4e0 [ 387.630145][T10367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 387.630155][T10367] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 387.630181][T10367] ? ksys_write+0x242/0x270 [ 387.630203][T10367] ? __pfx_ksys_write+0x10/0x10 [ 387.630231][T10367] __x64_sys_sendmmsg+0xa0/0xc0 [ 387.630251][T10367] do_syscall_64+0x14d/0xf80 [ 387.630267][T10367] ? trace_irq_disable+0x3b/0x150 [ 387.630289][T10367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.630301][T10367] ? clear_bhb_loop+0x40/0x90 [ 387.630317][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.630329][T10367] RIP: 0033:0x7fdad819c799 [ 387.630353][T10367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.630370][T10367] RSP: 002b:00007fdad8f8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 387.630391][T10367] RAX: ffffffffffffffda RBX: 00007fdad8415fa0 RCX: 00007fdad819c799 [ 387.630405][T10367] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 387.630417][T10367] RBP: 00007fdad8f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 387.630429][T10367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.630440][T10367] R13: 00007fdad8416038 R14: 00007fdad8415fa0 R15: 00007fdad853fa48 [ 387.630458][T10367] [ 387.921080][ T5929] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 388.130680][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 388.150088][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 388.167769][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 388.173738][ T5929] usb 2-1: no configurations [ 388.179694][ T5929] usb 2-1: can't read configurations, error -22 [ 388.217866][ T5902] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 388.225699][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 388.307851][ T5929] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 388.364911][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 388.380924][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 388.392260][ T797] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 388.405485][ T797] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 388.414471][T10372] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 388.422985][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 388.430634][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.442433][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 388.456128][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 388.465671][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.476958][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 388.486786][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 388.489608][ T5902] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 388.505887][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 388.516655][ T5929] usb 2-1: no configurations [ 388.516919][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.522869][ T5929] usb 2-1: can't read configurations, error -22 [ 388.530610][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 388.530645][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 388.530692][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 388.530717][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.548359][ T5929] usb usb2-port1: attempt power cycle [ 388.590008][ T5902] usb 3-1: config 0 descriptor?? [ 388.607665][ T10] usb 6-1: config 0 descriptor?? [ 388.879450][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 388.895828][ T10] usb 6-1: USB disconnect, device number 15 [ 388.905176][ T10] usblp0: removed [ 388.939106][ T5929] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 388.968555][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 388.974373][ T5929] usb 2-1: no configurations [ 388.979692][ T5929] usb 2-1: can't read configurations, error -22 [ 389.117802][ T5929] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 389.151017][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 389.167869][ T5929] usb 2-1: no configurations [ 389.172555][ T5929] usb 2-1: can't read configurations, error -22 [ 389.188078][ T5929] usb usb2-port1: unable to enumerate USB device [ 389.398573][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 389.537858][ T10] usb 6-1: device descriptor read/64, error -71 [ 389.661486][ T5929] usb 5-1: USB disconnect, device number 77 [ 389.802865][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 389.977907][ T10] usb 6-1: device descriptor read/64, error -71 [ 390.088780][ T10] usb usb6-port1: attempt power cycle [ 390.396033][T10401] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 390.404624][ T30] audit: type=1326 audit(1773184224.008:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f377f79c799 code=0x0 [ 390.430480][T10401] batman_adv: batadv0: Adding interface: netdevsim0 [ 390.439241][T10401] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.448857][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 390.466615][T10401] batman_adv: batadv0: Interface activated: netdevsim0 [ 390.538659][ T10] usb 6-1: device descriptor read/8, error -71 [ 390.631767][T10411] FAULT_INJECTION: forcing a failure. [ 390.631767][T10411] name failslab, interval 1, probability 0, space 0, times 0 [ 390.650421][T10411] CPU: 1 UID: 0 PID: 10411 Comm: syz.4.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.650444][T10411] Tainted: [L]=SOFTLOCKUP [ 390.650449][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.650456][T10411] Call Trace: [ 390.650464][T10411] [ 390.650472][T10411] dump_stack_lvl+0xe8/0x150 [ 390.650507][T10411] should_fail_ex+0x412/0x560 [ 390.650536][T10411] should_failslab+0xa8/0x100 [ 390.650561][T10411] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 390.650578][T10411] ? __alloc_skb+0x186/0x7d0 [ 390.650600][T10411] ? __alloc_skb+0x1d0/0x7d0 [ 390.650623][T10411] ? __local_bh_enable_ip+0xd0/0x130 [ 390.650653][T10411] __alloc_skb+0x1d0/0x7d0 [ 390.650677][T10411] ? netlink_ack_tlv_len+0x6c/0x210 [ 390.650706][T10411] netlink_ack+0x146/0xa50 [ 390.650728][T10411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.650750][T10411] ? ref_tracker_free+0x693/0x840 [ 390.650771][T10411] ? __copy_skb_header+0xa3/0x4a0 [ 390.650792][T10411] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.650815][T10411] ? __skb_clone+0x63/0x7a0 [ 390.650843][T10411] netlink_rcv_skb+0x2b6/0x4b0 [ 390.650867][T10411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.650887][T10411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.650908][T10411] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.650945][T10411] netlink_unicast+0x80f/0x9b0 [ 390.650978][T10411] ? __pfx_netlink_unicast+0x10/0x10 [ 390.651003][T10411] ? netlink_sendmsg+0x650/0xb40 [ 390.651026][T10411] ? skb_put+0x11b/0x210 [ 390.651057][T10411] netlink_sendmsg+0x813/0xb40 [ 390.651093][T10411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.651123][T10411] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.651150][T10411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.651176][T10411] ____sys_sendmsg+0x972/0x9f0 [ 390.651194][T10411] ? __lock_acquire+0x6b5/0x2cf0 [ 390.651228][T10411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.651266][T10411] ? import_iovec+0x73/0xa0 [ 390.651300][T10411] ___sys_sendmsg+0x2a5/0x360 [ 390.651327][T10411] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.651351][T10411] ? kstrtouint+0x6e/0xe0 [ 390.651401][T10411] ? __fget_files+0x2a/0x420 [ 390.651430][T10411] ? __fget_files+0x3a0/0x420 [ 390.651468][T10411] __sys_sendmmsg+0x27c/0x4e0 [ 390.651493][T10411] ? __pfx___sys_sendmmsg+0x10/0x10 [ 390.651510][T10411] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 390.651556][T10411] ? ksys_write+0x242/0x270 [ 390.651581][T10411] ? __pfx_ksys_write+0x10/0x10 [ 390.651609][T10411] __x64_sys_sendmmsg+0xa0/0xc0 [ 390.651632][T10411] do_syscall_64+0x14d/0xf80 [ 390.651651][T10411] ? trace_irq_disable+0x3b/0x150 [ 390.651678][T10411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.651699][T10411] ? clear_bhb_loop+0x40/0x90 [ 390.651724][T10411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.651754][T10411] RIP: 0033:0x7f377f79c799 [ 390.651775][T10411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.651792][T10411] RSP: 002b:00007f3780620028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 390.651816][T10411] RAX: ffffffffffffffda RBX: 00007f377fa15fa0 RCX: 00007f377f79c799 [ 390.651831][T10411] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 390.651844][T10411] RBP: 00007f3780620090 R08: 0000000000000000 R09: 0000000000000000 [ 390.651857][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.651869][T10411] R13: 00007f377fa16038 R14: 00007f377fa15fa0 R15: 00007f377fb3fa48 [ 390.651899][T10411] [ 390.653787][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 390.798313][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 390.800803][T10411] netlink: 'syz.4.1212': attribute type 30 has an invalid length. [ 390.828499][ T10] usb 6-1: device descriptor read/8, error -71 [ 391.168995][ T5894] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 391.221232][ T10] usb usb6-port1: unable to enumerate USB device [ 391.376499][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.437017][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.526287][ T5894] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 391.565380][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.592393][ T5894] usb 2-1: config 0 descriptor?? [ 391.633573][ T5894] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 391.949158][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 391.966099][ T24] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 392.457350][T10452] fuse: Bad value for 'user_id' [ 392.462706][T10444] fido_id[10444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 392.485439][T10452] fuse: Bad value for 'user_id' [ 392.493446][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 392.538749][T10450] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1221'. [ 392.665905][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 392.721180][T10450] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 393.310707][T10470] netlink: 'syz.0.1223': attribute type 4 has an invalid length. [ 393.335452][T10470] netlink: 'syz.0.1223': attribute type 4 has an invalid length. [ 393.363358][T10470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.389814][T10460] block device autoloading is deprecated and will be removed. [ 393.436143][T10469] macsec1: entered promiscuous mode [ 393.442142][T10469] macsec1: entered allmulticast mode [ 393.544155][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 393.558128][T10473] netlink: 'syz.2.1226': attribute type 30 has an invalid length. [ 393.742365][ T10] usb 2-1: USB disconnect, device number 81 [ 393.882335][ T5902] usbhid 3-1:0.0: can't add hid device: -32 [ 393.948047][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 394.367769][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 394.493112][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.538203][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 394.550353][ T9] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 394.574120][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.593332][ T9] usb 5-1: config 0 has no interface number 0 [ 394.607572][ T9] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 394.617796][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 394.653107][ T9] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 394.676392][T10497] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1234'. [ 394.705890][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 394.737167][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.749219][ T5902] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 394.754936][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 394.766939][T10496] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 394.793598][ T9] usb 5-1: config 0 descriptor?? [ 395.075659][T10501] syzkaller1: entered promiscuous mode [ 395.091631][T10501] syzkaller1: entered allmulticast mode [ 395.161932][T10504] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1238'. [ 395.193826][T10505] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1236'. [ 395.204661][T10505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.279038][ T30] audit: type=1326 audit(1773184228.878:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10479 comm="syz.4.1229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f377f79c799 code=0x0 [ 395.339626][ T9] usbhid 5-1:0.4: can't add hid device: -71 [ 395.356188][ T9] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 395.405954][ T9] usb 5-1: USB disconnect, device number 78 [ 395.428052][ T5902] usb 2-1: device descriptor read/64, error -71 [ 395.456380][T10511] FAULT_INJECTION: forcing a failure. [ 395.456380][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.497354][T10511] CPU: 0 UID: 0 PID: 10511 Comm: syz.2.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.497390][T10511] Tainted: [L]=SOFTLOCKUP [ 395.497396][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.497408][T10511] Call Trace: [ 395.497415][T10511] [ 395.497423][T10511] dump_stack_lvl+0xe8/0x150 [ 395.497466][T10511] should_fail_ex+0x412/0x560 [ 395.497496][T10511] _copy_from_user+0x2d/0xb0 [ 395.497528][T10511] ___sys_recvmsg+0x175/0x590 [ 395.497547][T10511] ? __lock_acquire+0x6b5/0x2cf0 [ 395.497578][T10511] ? __pfx____sys_recvmsg+0x10/0x10 [ 395.497631][T10511] do_recvmmsg+0x334/0x800 [ 395.497661][T10511] ? __pfx_do_recvmmsg+0x10/0x10 [ 395.497693][T10511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 395.497733][T10511] __x64_sys_recvmmsg+0x198/0x250 [ 395.497756][T10511] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 395.497787][T10511] do_syscall_64+0x14d/0xf80 [ 395.497805][T10511] ? trace_irq_disable+0x3b/0x150 [ 395.497830][T10511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.497850][T10511] ? clear_bhb_loop+0x40/0x90 [ 395.497874][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.497892][T10511] RIP: 0033:0x7fa49a19c799 [ 395.497912][T10511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.497929][T10511] RSP: 002b:00007fa49b0f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 395.497951][T10511] RAX: ffffffffffffffda RBX: 00007fa49a416090 RCX: 00007fa49a19c799 [ 395.497966][T10511] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 395.497979][T10511] RBP: 00007fa49b0f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.497992][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.498004][T10511] R13: 00007fa49a416128 R14: 00007fa49a416090 R15: 00007fa49a53fa48 [ 395.498035][T10511] [ 395.832717][T10517] tipc: Started in network mode [ 395.838366][T10517] tipc: Node identity , cluster identity 4711 [ 395.844461][T10517] tipc: Failed to obtain node identity [ 395.850788][T10517] tipc: Enabling of bearer rejected, failed to enable media [ 395.857589][ T5902] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 395.860458][T10518] tipc: Started in network mode [ 395.872990][T10518] tipc: Node identity , cluster identity 4711 [ 395.880409][T10518] tipc: Failed to obtain node identity [ 395.886158][T10518] tipc: Enabling of bearer rejected, failed to enable media [ 395.923222][T10517] syzkaller0: entered promiscuous mode [ 395.929221][T10517] syzkaller0: entered allmulticast mode [ 396.027679][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 396.035667][ T5902] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 396.060122][ T5902] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.075981][ T5902] usb 2-1: config 1 interface 0 has no altsetting 0 [ 396.088066][ T5902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.098104][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.106326][ T5902] usb 2-1: Manufacturer: 䥫㒘⵹硸ⷡẁ㉦ၩꛪ䳲䑁Ḹ轰焚㜣뽖ᙞ騋䃅磭倚䳊 [ 396.118047][ T5902] usb 2-1: SerialNumber: 囲⍖喋먧嫈ᙴ聐ꌪ偭뷋㮆寱쪌煯㕈叴ජ輘윉ᖁ픳콾쥱♉襁贄ຟ둷賆酊洰ᖍ䠺䱠澶튬뼥뫺ↆ笥菪戽籖甛爛럅韸悛蕁ோ⼳mߛ졠䂙줉╯旞ᨺ塣焨榧䍧鮧鴟ꀯ祈甏㔈쨉썹舌浗⤕᱅䍠뽆룟ⴱ㔀 [ 396.156546][T10499] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 396.388106][ T5902] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 396.403453][ T5902] usb 2-1: USB disconnect, device number 83 [ 397.058795][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 397.745575][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 397.757818][T10536] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1247'. [ 397.780885][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 397.791958][T10536] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 398.242792][ T5929] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 398.399421][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 398.425734][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 398.461858][ T5929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 398.472975][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 398.486163][ T5929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 35 [ 398.501134][ T5929] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 398.511638][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.523502][ T5929] usb 5-1: Product: syz [ 398.532366][ T5929] usb 5-1: Manufacturer: syz [ 398.539050][ T5929] usb 5-1: SerialNumber: syz [ 398.556341][ T5929] usb 5-1: config 0 descriptor?? [ 398.563218][T10539] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 398.613204][T10539] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 398.692100][ T5929] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 399.022197][ T10] usb 5-1: USB disconnect, device number 79 [ 399.781119][ T30] audit: type=1326 audit(1773184233.378:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 399.870188][ T30] audit: type=1326 audit(1773184233.378:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 399.904702][ T30] audit: type=1326 audit(1773184233.418:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 399.925313][T10551] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 399.940587][ T9] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 399.943689][ T30] audit: type=1326 audit(1773184233.418:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 399.981031][ T30] audit: type=1326 audit(1773184233.418:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 400.021228][T10554] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1253'. [ 400.038915][ T30] audit: type=1326 audit(1773184233.418:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 400.116166][T10559] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 400.118898][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 400.122740][T10559] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 400.145698][ T30] audit: type=1326 audit(1773184233.418:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 400.153909][T10559] vhci_hcd vhci_hcd.0: Device attached [ 400.201262][ T9] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 400.217713][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.236493][ T9] usb 5-1: Product: syz [ 400.246664][ T30] audit: type=1326 audit(1773184233.418:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 400.270438][ T9] usb 5-1: Manufacturer: syz [ 400.275126][ T9] usb 5-1: SerialNumber: syz [ 400.285765][ T30] audit: type=1326 audit(1773184233.418:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 400.318420][ T30] audit: type=1326 audit(1773184233.418:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10546 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 400.429919][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 400.443199][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 400.499226][ T10] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 400.552951][ T9] usb 5-1: selecting invalid altsetting 1 [ 400.610373][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.621483][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.638928][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 400.649435][ T24] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 400.698399][ T24] usb 6-1: Manufacturer: syz [ 400.712626][ T24] usb 6-1: config 0 descriptor?? [ 400.752712][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.765885][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.776493][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 400.776576][ T9] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 400.926693][T10560] usb 43-1: recv xbuf, 0 [ 400.933056][ T1155] vhci_hcd vhci_hcd.5: stop threads [ 400.939190][ T1155] vhci_hcd vhci_hcd.5: release socket [ 400.953065][ T1155] vhci_hcd vhci_hcd.5: disconnect device [ 400.960844][ T24] usb 6-1: USB disconnect, device number 20 [ 401.008037][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 401.564057][ T5929] usb 5-1: USB disconnect, device number 80 [ 401.724900][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1261'. [ 401.759379][T10580] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1261'. [ 401.786056][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1261'. [ 401.796310][T10580] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 402.046356][T10590] veth0: entered promiscuous mode [ 402.078504][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1263'. [ 402.097890][ T5916] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 402.304421][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 402.338987][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.361250][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.392277][ T5916] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 402.407794][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.419993][ T5916] usb 2-1: config 0 descriptor?? [ 402.687003][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 402.697770][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 402.722702][ T5916] usb 2-1: USB disconnect, device number 84 [ 403.036733][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.037910][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.048721][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.118107][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 403.277927][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 403.285968][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.301705][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.316566][ T10] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 403.328823][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.358406][ T10] usb 6-1: config 0 descriptor?? [ 403.362791][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 403.374378][T10625] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1273'. [ 403.392014][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 403.401793][T10625] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 403.738404][T10633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1275'. [ 403.773741][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.803388][T10641] openvswitch: netlink: IPv4 tun info is not correct [ 403.818373][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.869762][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x0 [ 403.904813][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x0 [ 403.921916][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x0 [ 403.934128][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x0 [ 403.942580][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x0 [ 403.954731][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x0 [ 403.991700][T10646] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1278'. [ 404.004849][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x0 [ 404.014267][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x1 [ 404.022282][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x1 [ 404.030648][ T10] pantherlord 0003:0810:0002.0023: unknown main item tag 0x7 [ 404.039328][ T10] pantherlord 0003:0810:0002.0023: unexpected long global item [ 404.051226][ T10] pantherlord 0003:0810:0002.0023: parse failed [ 404.064963][ T10] pantherlord 0003:0810:0002.0023: probe with driver pantherlord failed with error -22 [ 404.170888][ T10] usb 6-1: USB disconnect, device number 21 [ 404.184825][T10653] netem: incorrect gi model size [ 404.203267][T10653] netem: change failed [ 404.590222][T10640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.607413][T10640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 404.626231][T10640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.638217][T10640] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 404.696296][T10640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.703003][T10640] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 404.719013][T10640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.725225][T10640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 404.733849][T10640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 404.744133][T10667] fuse: Bad value for 'fd' [ 404.747679][T10640] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 404.756809][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 404.759618][T10640] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 404.778962][T10640] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 404.779094][T10666] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1284'. [ 404.804654][T10640] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 404.865924][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'. [ 404.916429][T10666] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 405.193788][T10686] loop4: detected capacity change from 0 to 1 [ 405.201868][T10686] Dev loop4: unable to read RDB block 1 [ 405.209410][T10686] loop4: unable to read partition table [ 405.215506][T10686] loop4: partition table beyond EOD, truncated [ 405.235584][T10686] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 405.300615][ T5193] Dev loop4: unable to read RDB block 1 [ 405.306312][ T5193] loop4: unable to read partition table [ 405.341238][ T5193] loop4: partition table beyond EOD, truncated [ 405.837734][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 406.020250][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 406.047870][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 406.063965][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.105663][ T10] usb 2-1: config 0 descriptor?? [ 406.294108][T10716] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 406.326358][T10717] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 406.599639][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'. [ 406.613321][T10723] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1299'. [ 406.652015][T10723] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 406.688781][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 406.759103][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 406.759129][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 406.765166][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 406.772388][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 406.807749][T10726] sctp: [Deprecated]: syz.5.1300 (pid 10726) Use of int in maxseg socket option. [ 406.807749][T10726] Use struct sctp_assoc_value instead [ 407.162717][T10734] xt_hashlimit: size too large, truncated to 1048576 [ 407.457019][T10742] openvswitch: netlink: Message has 117 unknown bytes. [ 407.660022][T10747] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 407.687003][T10746] sctp: [Deprecated]: syz.5.1304 (pid 10746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.687003][T10746] Use struct sctp_sack_info instead [ 408.133865][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 408.669208][ T10] usb 2-1: Cannot set autoneg [ 408.678520][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 408.746966][ T10] usb 2-1: USB disconnect, device number 85 [ 408.759158][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 408.841812][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 408.848657][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 408.848680][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 408.854681][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 408.990852][T10771] __nla_validate_parse: 1 callbacks suppressed [ 408.990877][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 409.059885][T10772] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1311'. [ 409.139314][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 409.189729][T10771] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 410.917837][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 411.188553][T10800] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1316'. [ 411.364090][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 411.364108][ T30] audit: type=1326 audit(1773184244.938:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.5.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad819c799 code=0x7ffc0000 [ 411.543739][ T30] audit: type=1326 audit(1773184244.958:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.5.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fdad819c799 code=0x7ffc0000 [ 411.610410][ T30] audit: type=1326 audit(1773184244.958:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.5.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad819c799 code=0x7ffc0000 [ 411.743349][ T30] audit: type=1326 audit(1773184244.958:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.5.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdad819c799 code=0x7ffc0000 [ 411.822455][ T30] audit: type=1326 audit(1773184244.958:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.5.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad819c799 code=0x7ffc0000 [ 411.921381][ T30] audit: type=1326 audit(1773184244.968:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.5.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fdad819c799 code=0x7ffc0000 [ 412.082449][ T30] audit: type=1326 audit(1773184244.968:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.5.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad819c799 code=0x7ffc0000 [ 412.456718][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 412.488783][T10824] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1323'. [ 412.564120][T10827] only policy match revision 0 supported [ 412.564145][T10827] unable to load match [ 412.570263][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 412.570296][T10830] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 412.621182][T10827] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1325'. [ 412.942090][T10850] veth1_to_bond: entered allmulticast mode [ 413.631961][T10869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1329'. [ 414.330243][T10873] syzkaller1: entered promiscuous mode [ 414.336118][T10873] syzkaller1: entered allmulticast mode [ 414.607343][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 415.359074][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.452478][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.567824][ T5894] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 415.706781][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.718644][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 415.733968][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.753638][ T5894] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 415.813497][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.836396][T10888] netlink: 'syz.2.1335': attribute type 2 has an invalid length. [ 415.848094][ T30] audit: type=1326 audit(1773184249.428:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 415.886018][T10888] @;: entered promiscuous mode [ 415.895822][ T5894] usb 5-1: config 1 has no interface number 0 [ 415.895822][ T30] audit: type=1326 audit(1773184249.428:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 415.895881][ T30] audit: type=1326 audit(1773184249.428:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fa49a19c799 code=0x7ffc0000 [ 415.959018][ T5894] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 108, changing to 10 [ 415.977882][ T5894] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 25697, setting to 1024 [ 416.010118][ T5894] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 416.020397][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.032226][ T5894] usb 5-1: Product: syz [ 416.037901][ T5894] usb 5-1: Manufacturer: syz [ 416.042943][ T5894] usb 5-1: SerialNumber: syz [ 416.140803][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'. [ 416.153518][T10896] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1337'. [ 416.170830][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1337'. [ 416.181946][T10896] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 416.214865][T10842] veth1_to_bond: left allmulticast mode [ 416.283504][T10884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.293269][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.304683][T10884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.313562][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.339967][ T5894] usb 5-1: unknown sample rate [ 416.444773][ T5894] usb 5-1: USB disconnect, device number 81 [ 416.448662][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.673492][T10909] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1340'. [ 417.317791][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 417.371435][T10923] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 417.492766][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.514029][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.526016][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.546992][ T10] usb 6-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 417.581659][ T10] usb 6-1: config 1 interface 1 has no altsetting 0 [ 417.705687][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.937130][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.945372][ T10] usb 6-1: Product: syz [ 417.988939][T10925] netlink: 'syz.1.1345': attribute type 11 has an invalid length. [ 418.012433][ T10] usb 6-1: Manufacturer: syz [ 418.029017][ T10] usb 6-1: SerialNumber: syz [ 418.058969][ T10] usb 6-1: selecting invalid altsetting 0 [ 418.085830][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 418.117117][ T10] usb 6-1: selecting invalid altsetting 0 [ 418.126087][ T10] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 418.255967][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.268273][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.301906][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 418.314801][T10932] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1348'. [ 418.344210][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 418.355509][T10932] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 418.572264][T10942] syzkaller0: left promiscuous mode [ 418.626578][T10942] syzkaller0: left allmulticast mode [ 418.812911][T10950] lo: entered allmulticast mode [ 418.912652][T10955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.942345][T10955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.956288][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.965685][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.639990][T10949] lo: left allmulticast mode [ 420.061879][ T5929] usb 6-1: USB disconnect, device number 22 [ 420.075586][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1360'. [ 420.094388][T10978] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1360'. [ 420.134580][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 420.160059][T10975] xt_hashlimit: size too large, truncated to 1048576 [ 420.178866][T10978] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 421.511981][T11016] netlink: 'syz.4.1368': attribute type 10 has an invalid length. [ 421.529662][T11016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1368'. [ 422.737711][ T5929] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 422.885175][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 422.885189][ T30] audit: type=1804 audit(1773184256.478:749): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1372" name="/newroot/293/file1" dev="fuse" ino=1 res=1 errno=0 [ 422.953986][ T5929] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 422.975084][ T5929] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 423.196462][ T5929] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 423.253426][ T5929] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 423.351338][ T5929] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 423.424170][ T5929] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 423.562337][ T5929] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 423.591838][ T5929] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 423.609633][ T5929] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 423.622332][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 423.634541][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.653428][ T5929] pwc: Logitech QuickCam detected (reserved ID). [ 423.660446][ T5929] pwc: Warning: more than 1 configuration available. [ 423.745235][ T30] audit: type=1804 audit(1773184257.338:750): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1376" name="bus" dev="ramfs" ino=40810 res=1 errno=0 [ 423.817781][ T24] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 424.118582][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.131051][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 384, setting to 64 [ 424.156046][ T24] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 424.168055][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.178135][ T24] usb 6-1: Product: syz [ 424.184550][ T24] usb 6-1: Manufacturer: syz [ 424.276902][ T24] usb 6-1: SerialNumber: syz [ 424.298063][T11058] xt_socket: unknown flags 0xc [ 424.333689][ T24] usb 6-1: config 0 descriptor?? [ 424.436832][T11053] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 424.827736][ T24] rc_core: IR keymap rc-streamzap not found [ 424.850539][ T24] Registered IR keymap rc-empty [ 424.880844][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 424.911953][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 424.912057][T11066] netlink: 'syz.4.1380': attribute type 4 has an invalid length. [ 424.969276][ T24] usb 6-1: USB disconnect, device number 23 [ 425.270329][T11073] loop3: detected capacity change from 0 to 7 [ 425.284641][T11073] Dev loop3: unable to read RDB block 7 [ 425.302384][T11073] loop3: unable to read partition table [ 425.317282][T11073] loop3: partition table beyond EOD, truncated [ 425.348099][T11073] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 425.605774][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1383'. [ 425.635424][T11078] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1383'. [ 425.695807][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 425.707533][T11078] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 425.850302][T11084] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1386'. [ 425.922944][ T5929] pwc: send_video_command error -71 [ 425.928990][ T5929] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 425.936596][ T5929] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71 [ 425.968491][ T5929] usb 2-1: USB disconnect, device number 86 [ 426.077698][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 426.171721][T11094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 426.264043][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 426.275261][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 426.297743][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.317712][ T24] usb 5-1: Product: syz [ 426.332110][ T24] usb 5-1: Manufacturer: syz [ 426.350661][ T24] usb 5-1: SerialNumber: syz [ 426.371202][ T24] usb 5-1: config 0 descriptor?? [ 426.450537][ T5894] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 426.567987][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 426.609288][ T5894] usb 6-1: not running at top speed; connect to a high speed hub [ 426.624726][ T5894] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 426.651267][ T24] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 426.670710][ T24] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 426.689652][ T5894] usb 6-1: config 95 has no interface number 0 [ 426.705694][ T5894] usb 6-1: config 95 interface 1 has no altsetting 0 [ 426.725531][ T5894] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 426.730576][ T24] usb 5-1: USB disconnect, device number 82 [ 426.737115][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.777814][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 426.787903][ T5894] usb 6-1: Product: syz [ 426.792124][ T5894] usb 6-1: Manufacturer: syz [ 426.796755][ T5894] usb 6-1: SerialNumber: syz [ 426.810756][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 426.821025][ T9] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 426.832667][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 426.850956][ T9] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 426.861324][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.870157][ T9] usb 2-1: Product: syz [ 426.874503][ T9] usb 2-1: Manufacturer: syz [ 426.879746][ T9] usb 2-1: SerialNumber: syz [ 426.903253][ T9] usb 2-1: config 0 descriptor?? [ 427.331210][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.369788][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.403501][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.421327][T11107] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1392'. [ 427.448957][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.466817][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.488288][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.695133][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.718507][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.750108][T11115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.913555][T11117] geneve2: entered promiscuous mode [ 427.919995][T11117] geneve2: entered allmulticast mode [ 428.255638][ T5894] usb 6-1: USB disconnect, device number 24 [ 428.630566][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.836163][T11121] netlink: 'syz.5.1396': attribute type 1 has an invalid length. [ 428.995267][T11121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.367200][ T5894] usb 2-1: USB disconnect, device number 87 [ 429.507829][ T10] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 429.634763][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 429.661136][ T10] usb 5-1: device descriptor read/64, error -71 [ 429.683480][T11144] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1401'. [ 429.795305][T11149] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1403'. [ 429.797336][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 429.832351][T11144] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 429.917683][ T10] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 430.019631][T11151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.079549][ T10] usb 5-1: device descriptor read/64, error -71 [ 430.124724][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.141727][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.209317][ T10] usb usb5-port1: attempt power cycle [ 430.211262][T11160] binfmt_misc: register: failed to install interpreter file ./file0 [ 430.407924][ T5894] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 430.557870][ T10] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 430.570882][ T5894] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 430.581015][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.588314][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 430.591638][ T5894] usb 6-1: Product: syz [ 430.601976][ T5894] usb 6-1: Manufacturer: syz [ 430.606792][ T10] usb 5-1: device descriptor read/8, error -71 [ 430.613563][ T5894] usb 6-1: SerialNumber: syz [ 430.622173][ T5894] r8152-cfgselector 6-1: Unknown version 0x0000 [ 430.631672][ T5894] r8152-cfgselector 6-1: config 0 descriptor?? [ 430.748497][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 430.756548][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.768985][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 430.783601][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 430.794822][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.814843][ T24] usb 2-1: Product: syz [ 430.820311][ T24] usb 2-1: Manufacturer: syz [ 430.825060][ T24] usb 2-1: SerialNumber: syz [ 430.834834][ T24] usb 2-1: config 0 descriptor?? [ 430.845636][ T5894] r8152-cfgselector 6-1: Unknown version 0x0000 [ 430.875289][T11174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.884931][T11174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.966409][ T10] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 430.979952][ T5894] r8152-cfgselector 6-1: bad CDC descriptors [ 430.995748][ T5894] r8152-cfgselector 6-1: USB disconnect, device number 25 [ 431.008160][ T10] usb 5-1: device descriptor read/8, error -71 [ 431.060172][T11170] netlink: 'syz.1.1410': attribute type 1 has an invalid length. [ 431.098265][T11170] bond3: (slave geneve3): making interface the new active one [ 431.138007][ T10] usb usb5-port1: unable to enumerate USB device [ 431.151067][T11170] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 431.292694][ T788] netdevsim netdevsim1 : set [1, 2] type 2 family 0 port 20004 - 0 [ 431.306195][ T788] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 431.316362][ T788] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 431.326883][ T788] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 431.867939][ T5916] usb 2-1: USB disconnect, device number 88 [ 431.966147][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'. [ 432.006260][T11195] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1416'. [ 432.081870][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 432.091618][T11195] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 432.418504][T11202] xt_hashlimit: size too large, truncated to 1048576 [ 432.987696][ T5929] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 433.016291][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 433.148137][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 433.155923][ T5929] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 433.177719][ T10] usb 6-1: device descriptor read/64, error -71 [ 433.191819][ T5929] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 433.202726][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.248220][ T5929] usb 2-1: Product: syz [ 433.253980][ T5929] usb 2-1: Manufacturer: syz [ 433.285045][ T5929] usb 2-1: SerialNumber: syz [ 433.361041][ T5929] pwc: Askey VC010 type 1 USB webcam detected. [ 433.447736][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 433.552457][ T5929] pwc: send_video_command error -71 [ 433.571288][ T5929] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 433.587254][ T10] usb 6-1: device descriptor read/64, error -71 [ 433.587693][ T5929] Philips webcam 2-1:76.0: probe with driver Philips webcam failed with error -71 [ 433.698173][ T5929] usb 2-1: USB disconnect, device number 89 [ 433.698699][ T10] usb usb6-port1: attempt power cycle [ 434.057618][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 434.089923][ T10] usb 6-1: device descriptor read/8, error -71 [ 434.347823][ T5929] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 434.367703][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 434.398562][ T10] usb 6-1: device descriptor read/8, error -71 [ 434.508407][ T10] usb usb6-port1: unable to enumerate USB device [ 434.509374][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 434.532861][ T5929] usb 5-1: config 0 has no interfaces? [ 434.541847][ T5929] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 434.552135][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.571312][ T5929] usb 5-1: Product: syz [ 434.585916][ T5929] usb 5-1: Manufacturer: syz [ 434.591541][ T5929] usb 5-1: SerialNumber: syz [ 434.607715][ T5929] usb 5-1: config 0 descriptor?? [ 434.714690][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.724976][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.733981][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.743564][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.752662][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.762011][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.770908][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.786412][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.798308][T11232] openvswitch: netlink: Key 2 has unexpected len 157 expected 4 [ 434.825867][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.838124][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.855545][ T5929] usb 5-1: USB disconnect, device number 87 [ 435.560445][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1432'. [ 435.590293][T11250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1432'. [ 435.771332][T11263] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 436.244728][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 436.408722][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 436.433946][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.446021][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.460007][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 436.472079][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.485585][ T9] usb 2-1: config 0 descriptor?? [ 436.579130][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 436.612965][ T10] usb 5-1: config 8 has an invalid interface number: 151 but max is 3 [ 436.622300][ T10] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 436.644524][ T10] usb 5-1: config 8 has an invalid interface number: 29 but max is 3 [ 436.657832][ T10] usb 5-1: config 8 has an invalid interface number: 249 but max is 3 [ 436.666317][ T10] usb 5-1: config 8 has an invalid interface number: 27 but max is 3 [ 436.675399][ T10] usb 5-1: config 8 has no interface number 0 [ 436.755342][ T10] usb 5-1: config 8 has no interface number 1 [ 436.777722][ T10] usb 5-1: config 8 has no interface number 2 [ 436.794417][ T10] usb 5-1: config 8 has no interface number 3 [ 436.801485][ T10] usb 5-1: config 8 interface 151 altsetting 7 endpoint 0xE has invalid maxpacket 104, setting to 64 [ 436.835157][ T10] usb 5-1: config 8 interface 151 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 436.870824][ T10] usb 5-1: config 8 interface 151 altsetting 7 bulk endpoint 0x7 has invalid maxpacket 1023 [ 436.893126][ T10] usb 5-1: config 8 interface 151 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 436.935589][ T9] hid_parser_main: 2 callbacks suppressed [ 436.935606][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 436.961801][ T10] usb 5-1: config 8 interface 151 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 436.979890][ T9] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 436.998692][ T10] usb 5-1: config 8 interface 151 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 437.010477][ T10] usb 5-1: config 8 interface 29 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 437.052032][T11286] netlink: 'syz.0.1442': attribute type 8 has an invalid length. [ 437.060981][ T10] usb 5-1: config 8 interface 29 altsetting 6 has an endpoint descriptor with address 0x1B, changing to 0xB [ 437.093788][ T10] usb 5-1: config 8 interface 29 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 437.146578][ T10] usb 5-1: config 8 interface 249 altsetting 219 has an invalid descriptor for endpoint zero, skipping [ 437.194037][ T10] usb 5-1: config 8 interface 249 altsetting 219 has a duplicate endpoint with address 0xE, skipping [ 437.266153][ T10] usb 5-1: config 8 interface 249 altsetting 219 has an invalid descriptor for endpoint zero, skipping [ 437.291560][ T10] usb 5-1: config 8 interface 249 altsetting 219 has a duplicate endpoint with address 0x4, skipping [ 437.304122][ T10] usb 5-1: config 8 interface 249 altsetting 219 has a duplicate endpoint with address 0xB, skipping [ 437.319404][ T9] cp2112 0003:10C4:EA90.0024: Part Number: 0x82 Device Version: 0xFE [ 437.328826][ T10] usb 5-1: config 8 interface 249 altsetting 219 has a duplicate endpoint with address 0x5, skipping [ 437.340837][ T10] usb 5-1: config 8 interface 151 has no altsetting 0 [ 437.350951][ T10] usb 5-1: config 8 interface 29 has no altsetting 0 [ 437.359420][ T10] usb 5-1: config 8 interface 249 has no altsetting 0 [ 437.387942][ T10] usb 5-1: config 8 interface 27 has no altsetting 0 [ 437.402661][ T10] usb 5-1: Dual-Role OTG device on HNP port [ 437.410563][ T10] usb 5-1: New USB device found, idVendor=069b, idProduct=3004, bcdDevice= 0.01 [ 437.421171][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.437757][ T10] usb 5-1: Product: 䠟﹙ᾀ袩軭랭⽃눐⇤ෳ쇳苋鼑䅀戄湀椾㫉䞤蚞ᰬ뺿낯㷞ᭂ뙐᳑⫾镥啼ốሷ쫠훺镗䃃曲槈鶺᷼㳱魏즸樮鲎水搑䯙꺾죜꼻䛀傟熖쁋䤇搠횭ﹺ鉘딿陏꟫躃蕅楾캎遐헟碠餺㻗슷曑ᘔ棲豞軑菮샽끋恤詓꯵臭䔕幾谙龗ힼ뢑귒떠ۀ嗉๎鿱塞荡陓켦㚍䦽磉瞸⡕㟳襒 [ 437.481385][ T10] usb 5-1: Manufacturer: 〉 [ 437.486395][ T10] usb 5-1: SerialNumber: ခ [ 437.498028][T11301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.507986][T11301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.523097][ T9] cp2112 0003:10C4:EA90.0024: error requesting SMBus config [ 437.562045][ T9] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -71 [ 437.572775][T11270] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 437.588629][ T9] usb 2-1: USB disconnect, device number 90 [ 437.606820][T11303] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1446'. [ 437.659061][T11306] net_ratelimit: 56 callbacks suppressed [ 437.659085][T11306] IPv6: addrconf: prefix option has invalid lifetime [ 437.760284][T11301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.775229][T11301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.792537][T11312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1449'. [ 438.369268][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.384298][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.788170][T11312] vim2m vim2m.0: vidioc_s_fmt queue busy [ 439.107007][ T9] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 439.123084][ T10] usb-storage 5-1:8.151: USB Mass Storage device detected [ 439.192494][ T10] usb-storage 5-1:8.151: Quirks match for vid 069b pid 3004: 10 [ 439.280356][ T10] usb-storage 5-1:8.29: USB Mass Storage device detected [ 439.310318][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 439.326498][ T10] usb-storage 5-1:8.29: Quirks match for vid 069b pid 3004: 10 [ 439.342954][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.365650][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.378000][ T9] usb 2-1: Product: Ⰺ [ 439.382227][ T9] usb 2-1: Manufacturer: ᘞ暪葃僔擃龵艝秩⋽藖ﲬ甲虤࿰෶↾褡䅑≶Თ᧏犯硷䓗豬鍗珬㣌艌虈꿵ᄊ겭뚭䫂徹᧚ੌ氋獠Ღⅇ掳ﰅ꫼惵륾묨㡍曢쏀ℸ㢀玷ࡨ♚쒾퍎却갖鎛⫮军澌ﮣ掞圛⚼។뼝ꔠ脋㴧㮀ែ슭떜䰯氒ڳ聛싎粖萐풄ퟹ [ 439.413652][ T9] usb 2-1: SerialNumber: 쿵﯇섂˰ᾮ鈱뇄•肂턭佫䇏掻Ꮕ믃﹌モ㫋㥸揯倀ඡ틙꧘ᡩᤌ۳ꠗ㼗嫂ਉ䵌Ↄ䯓勭䵚菴ጓ巚矐⺲䕡撩ǞἏ틂Ζ⥦낑鬢픐ᯥ과헠ꑎ⏒䋇鷌섧얰囵繈ᄯ䏄ൎ㇣뜉䨘틥뚩⧠ắ範䞬顫撕誋ᢖ뺛섄᪁鸛葬﷊ꢄ餈甐 [ 439.455437][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 439.524129][ T10] usb-storage 5-1:8.249: USB Mass Storage device detected [ 439.545566][ T10] usb-storage 5-1:8.249: Quirks match for vid 069b pid 3004: 10 [ 439.619522][ T10] usb-storage 5-1:8.27: USB Mass Storage device detected [ 439.635341][ T24] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 439.656548][ T10] usb-storage 5-1:8.27: Quirks match for vid 069b pid 3004: 10 [ 439.675652][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.704691][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 439.715686][ T24] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.755082][ T10] usb 5-1: USB disconnect, device number 88 [ 439.785733][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.824125][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.878849][T11333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.892846][T11333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.912742][T11333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.931166][T11333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.950406][ T9] usb 2-1: 1:1 : unsupported sample bitwidth 145 in 64 bytes [ 439.963288][ T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 440.020114][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.025946][ T9] usb 2-1: USB disconnect, device number 91 [ 440.036337][ T24] usb 6-1: invalid MIDI out EP 0 [ 440.100356][T11339] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 440.108779][T11339] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 440.192558][ T24] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 440.209176][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209237][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.260104][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.668871][ T9] usb 6-1: USB disconnect, device number 30 [ 440.790878][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1460'. [ 440.805562][T11363] netlink: 'syz.5.1460': attribute type 30 has an invalid length. [ 440.835321][ T8772] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.846617][ T8772] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.856250][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 440.881704][ T8772] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.899709][ T8772] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.940152][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.958458][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.017775][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 441.034092][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.051371][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.097472][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 441.128048][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 441.170645][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.190732][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.229241][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 441.252167][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.262299][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 441.313361][ T10] usb 2-1: Manufacturer: syz [ 441.360878][ T10] usb 2-1: config 0 descriptor?? [ 441.750267][ T10] rc_core: IR keymap rc-hauppauge not found [ 441.758163][ T10] Registered IR keymap rc-empty [ 441.764434][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.797825][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.819234][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 441.834231][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input45 [ 441.850636][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.880411][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.907904][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.927793][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.949226][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.978049][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 441.998144][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.017700][ T5887] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 442.017811][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.048088][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.077896][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 442.102841][ T10] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 442.112416][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 442.123835][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.152696][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.173978][T11381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.190557][T11381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.190932][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.221277][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.259166][ T5887] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 442.267663][ T10] usb 2-1: USB disconnect, device number 92 [ 442.276167][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 442.304814][ T5887] usb 6-1: SerialNumber: syz [ 442.570770][ T5887] usb 6-1: 0:2 : does not exist [ 442.669701][ T5887] usb 6-1: USB disconnect, device number 31 [ 442.744576][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.014892][T11402] futex_wake_op: syz.1.1468 tries to shift op by -1; fix this program [ 443.767814][ T5929] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 444.021497][ T5929] usb 5-1: Invalid ep0 maxpacket: 16 [ 444.278045][ T5929] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 444.437742][ T5929] usb 5-1: Invalid ep0 maxpacket: 16 [ 444.439638][ T5929] usb usb5-port1: attempt power cycle [ 444.466988][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.538142][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.715382][T11420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.738327][T11420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.784199][T11420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.807742][T11420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.853088][ T5929] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 444.889620][ T5929] usb 5-1: Invalid ep0 maxpacket: 16 [ 445.027866][ T5929] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 445.078982][ T5929] usb 5-1: Invalid ep0 maxpacket: 16 [ 445.084937][ T5929] usb usb5-port1: unable to enumerate USB device [ 445.277743][ T5929] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 445.443305][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 445.496164][ T5929] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 445.533243][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.554538][ T5929] usb 2-1: Product: syz [ 445.564367][ T5929] usb 2-1: Manufacturer: syz [ 445.578237][ T5929] usb 2-1: SerialNumber: syz [ 445.594601][ T5929] usb 2-1: config 0 descriptor?? [ 445.609167][ T5929] gspca_main: spca508-2.14.0 probing 041e:4018 [ 445.622325][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.632289][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.803562][ T5929] gspca_spca508: reg_read err -32 [ 445.810728][ T5929] gspca_spca508: reg_read err -32 [ 445.818604][ T5929] gspca_spca508: reg_read err -32 [ 445.819362][T11444] xt_hashlimit: size too large, truncated to 1048576 [ 445.831386][ T5929] gspca_spca508: reg_read err -32 [ 445.841260][T11445] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 445.868139][ T5929] gspca_spca508: reg_read err -32 [ 445.880421][ T5929] gspca_spca508: reg write: error -71 [ 445.885966][ T5929] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 445.899934][ T5929] usb 2-1: USB disconnect, device number 93 [ 445.926869][ T6081] udevd[6081]: setting owner of /dev/bus/usb/002/093 to uid=0, gid=0 failed: No such file or directory [ 446.756401][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1484'. [ 446.798966][T11466] netlink: 'syz.5.1484': attribute type 30 has an invalid length. [ 446.875887][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.908311][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.167747][ T5887] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 447.347557][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 447.356518][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.368547][ T24] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 447.378072][ T5887] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 447.389102][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.408924][ T5887] usb 2-1: config 0 descriptor?? [ 447.419818][ T5887] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 447.446261][T11490] @: renamed from veth0_vlan (while UP) [ 447.521615][T11492] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 447.549799][ T24] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 447.559217][ T24] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 447.569988][ T24] usb 6-1: config 150 has no interface number 0 [ 447.588878][ T24] usb 6-1: config 150 interface 204 has no altsetting 0 [ 447.934602][ T24] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 447.938882][ T5894] usb 2-1: USB disconnect, device number 94 [ 447.994685][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.068502][ T24] usb 6-1: Product: syz [ 448.076113][ T24] usb 6-1: Manufacturer: syz [ 448.082159][ T24] usb 6-1: SerialNumber: syz [ 448.257765][ T5887] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 448.308798][ T24] xr_serial 6-1:150.204: skipping garbage [ 448.315539][ T24] xr_serial 6-1:150.204: xr_serial converter detected [ 448.420834][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 448.441979][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 448.461830][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 448.494198][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 448.559162][ T5887] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 448.577713][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.596843][ T5887] usb 5-1: Product: syz [ 448.607770][ T5887] usb 5-1: Manufacturer: syz [ 448.624171][ T24] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 448.636840][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 448.654913][ T5887] usb 5-1: SerialNumber: syz [ 448.668641][T11512] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 448.684211][ T24] usb 6-1: USB disconnect, device number 32 [ 448.698653][ T5887] usb 5-1: config 0 descriptor?? [ 448.719392][ T5887] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 448.729273][T11511] xt_hashlimit: size too large, truncated to 1048576 [ 448.744190][ T24] xr_serial 6-1:150.204: device disconnected [ 448.940425][ T5887] scsi host1: usb-storage 5-1:0.0 [ 448.993929][ T5887] usb 5-1: USB disconnect, device number 93 [ 449.533025][ T5887] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 449.762603][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 449.829382][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 449.845932][ T5887] usb 5-1: config 16 has an invalid interface number: 15 but max is 0 [ 450.003073][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 450.011189][ T5894] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 450.093196][ T5887] usb 5-1: config 16 has no interface number 0 [ 450.112926][ T5887] usb 5-1: config 16 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 450.132774][ T5887] usb 5-1: config 16 interface 15 has no altsetting 0 [ 450.146362][ T5887] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0108, bcdDevice=8f.db [ 450.156022][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.165646][ T5887] usb 5-1: Product:   [ 450.167731][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 450.173002][ T5887] usb 5-1: Manufacturer: Ў [ 450.175118][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 450.190897][ T5894] usb 2-1: config 1 interface 0 altsetting 116 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.367635][ T5894] usb 2-1: config 1 interface 0 altsetting 116 bulk endpoint 0x82 has invalid maxpacket 16 [ 450.375423][ T5887] usb 5-1: SerialNumber: ⦁鮗㐖慦ࢴᐩ鵣練䪛暀穕叽Ώ碟⭔ና벰焄밄ⴊ起⦳䁟潕颾㶛ꃣᙆꦗ [ 450.404281][ T5894] usb 2-1: config 1 interface 0 altsetting 116 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 450.436714][ T10] usb 6-1: config 0 has no interfaces? [ 450.446233][ T5894] usb 2-1: config 1 interface 0 has no altsetting 0 [ 450.465736][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.535347][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 450.559969][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 450.570522][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.584402][ T5894] usb 2-1: Product: э [ 450.590940][ T10] usb 6-1: Manufacturer: syz [ 450.640481][ T5894] usb 2-1: Manufacturer: 䰊 [ 450.655027][ T10] usb 6-1: config 0 descriptor?? [ 450.663450][ T5894] usb 2-1: SerialNumber: ఌ [ 450.698801][T11543] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 450.706328][T11543] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 450.758972][ T5887] ftdi_sio 5-1:16.15: FTDI USB Serial Device converter detected [ 450.775608][ T5887] ftdi_sio ttyUSB0: unknown device type: 0x8fdb [ 450.822367][ T5887] usb 5-1: USB disconnect, device number 94 [ 450.858014][ T5887] ftdi_sio 5-1:16.15: device disconnected [ 451.013809][ T5894] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 451.036489][ T5894] usb 2-1: USB disconnect, device number 95 [ 451.053691][T11550] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 451.957634][ T24] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 451.997878][ T5887] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 452.031729][T11569] fuse: Unknown parameter '' [ 452.159360][ T5887] usb 2-1: device descriptor read/64, error -71 [ 452.360390][ T24] usb 5-1: config 0 has no interfaces? [ 452.371430][ T24] usb 5-1: string descriptor 0 read error: -22 [ 452.379427][ T24] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 452.389653][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 452.407765][ T5887] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 452.430963][ T24] usb 5-1: config 0 descriptor?? [ 452.557710][ T5887] usb 2-1: device descriptor read/64, error -71 [ 452.678720][ T5887] usb usb2-port1: attempt power cycle [ 453.637966][ T5887] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 453.946152][ T5887] usb 2-1: device descriptor read/8, error -71 [ 454.031102][ T5894] usb 6-1: USB disconnect, device number 33 [ 454.314244][ T5887] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 454.360153][ T5887] usb 2-1: device descriptor read/8, error -71 [ 454.517815][ T5887] usb usb2-port1: unable to enumerate USB device [ 454.889872][T11592] xt_hashlimit: size too large, truncated to 1048576 [ 454.947693][T11594] usb usb8: usbfs: process 11594 (syz.2.1515) did not claim interface 0 before use [ 455.285504][T11603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.313548][T11603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.333504][ T797] usb 5-1: USB disconnect, device number 95 [ 456.383441][T11624] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1523'. [ 457.745263][ T5887] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 457.922639][ T5887] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 457.935648][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.951207][ T5887] usb 2-1: Product: syz [ 457.955426][ T5887] usb 2-1: Manufacturer: syz [ 458.005253][ T5887] usb 2-1: SerialNumber: syz [ 461.047647][ T5929] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 461.219956][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.231827][ T5929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 461.245645][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.275956][ T5929] usb 5-1: config 0 descriptor?? [ 461.699378][T11648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.712394][T11648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.732518][ T5929] ath6kl: Failed to read usb control message: -71 [ 461.739427][ T5929] ath6kl: Unable to read the bmi data from the device: -71 [ 461.746868][ T5929] ath6kl: Unable to recv target info: -71 [ 461.762426][ T5929] ath6kl: Failed to init ath6kl core: -71 [ 461.769021][ T5929] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 461.791285][ T5929] usb 5-1: USB disconnect, device number 96 [ 463.339808][ T5887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -ETIMEDOUT [ 463.362445][ T5887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -ETIMEDOUT [ 463.385389][ T5887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 463.411262][ T5887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 463.454502][ T5887] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 463.458998][T11660] tipc: Started in network mode [ 463.507764][T11660] tipc: Node identity 4, cluster identity 4711 [ 463.534615][ T5887] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 463.565616][T11660] tipc: Node number set to 4 [ 463.582540][ T5887] usb 2-1: USB disconnect, device number 100 [ 464.026077][T11677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1536'. [ 464.158233][T11677] sctp: [Deprecated]: syz.1.1536 (pid 11677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.158233][T11677] Use struct sctp_sack_info instead [ 464.678034][ T5887] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 464.817811][ T5887] usb 2-1: device descriptor read/64, error -71 [ 464.988148][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1543'. [ 465.007788][T11693] netlink: 'syz.2.1543': attribute type 1 has an invalid length. [ 465.047798][T11693] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1543'. [ 465.077924][ T5887] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 465.227918][ T5887] usb 2-1: device descriptor read/64, error -71 [ 465.297797][ T1209] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 465.348182][ T5887] usb usb2-port1: attempt power cycle [ 465.497689][ T1209] usb 5-1: device descriptor read/64, error -71 [ 465.667720][T11717] futex_wake_op: syz.0.1547 tries to shift op by -1; fix this program [ 465.691797][T11718] tipc: Started in network mode [ 465.696919][T11718] tipc: Node identity 76b24cb8dd42, cluster identity 4711 [ 465.709165][ T5887] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 465.732645][T11718] tipc: Enabled bearer , priority 0 [ 465.748006][ T1209] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 465.758288][ T5887] usb 2-1: device descriptor read/8, error -71 [ 465.769287][T11719] syzkaller0: entered promiscuous mode [ 465.775560][T11719] syzkaller0: entered allmulticast mode [ 465.840479][T11718] tipc: Resetting bearer [ 465.853124][T11716] tipc: Resetting bearer [ 465.880384][T11716] tipc: Disabling bearer [ 466.035795][ T5887] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 466.050808][ T1209] usb 5-1: device descriptor read/64, error -71 [ 466.091925][ T5887] usb 2-1: device descriptor read/8, error -71 [ 466.168110][ T1209] usb usb5-port1: attempt power cycle [ 466.208402][ T5887] usb usb2-port1: unable to enumerate USB device [ 466.607707][ T1209] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 466.648372][ T1209] usb 5-1: device descriptor read/8, error -71 [ 467.067777][ T1209] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 467.195115][ T1209] usb 5-1: device descriptor read/8, error -71 [ 467.323299][ T1209] usb usb5-port1: unable to enumerate USB device [ 467.791736][T11738] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1554'. [ 467.838761][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1554'. [ 467.887830][T11738] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 467.971401][T11740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.007190][T11740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.044693][T11740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.120369][T11740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.337165][ T30] audit: type=1326 audit(1773184301.928:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11751 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175cd9c799 code=0x7ffc0000 [ 468.381442][ T30] audit: type=1326 audit(1773184301.928:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11751 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175cd9c799 code=0x7ffc0000 [ 468.609517][T11761] netlink: 'syz.5.1562': attribute type 15 has an invalid length. [ 468.927745][ T1209] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 469.095926][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 469.110248][ T1209] usb 6-1: Using ep0 maxpacket: 16 [ 469.123487][ T1209] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.135099][T11776] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1566'. [ 469.154489][ T1209] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.168376][T11780] futex_wake_op: syz.1.1567 tries to shift op by -1; fix this program [ 469.283629][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 469.292927][T11776] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 469.325853][ T1209] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.336012][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.364496][ T1209] usb 6-1: Product: syz [ 469.383315][ T1209] usb 6-1: Manufacturer: syz [ 469.403615][ T1209] usb 6-1: SerialNumber: syz [ 469.463375][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 469.651750][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.663626][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.695916][ T1209] usb 6-1: 0:2 : does not exist [ 469.713057][ T1209] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 469.837893][ T5887] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 469.846272][ T1209] usb 6-1: USB disconnect, device number 34 [ 469.944258][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.015404][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 470.061704][ T5887] usb 5-1: not running at top speed; connect to a high speed hub [ 470.095402][ T5887] usb 5-1: config 5 has an invalid interface number: 246 but max is 0 [ 470.114760][ T5887] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 470.136265][ T5887] usb 5-1: config 5 has no interface number 0 [ 470.162616][ T5887] usb 5-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 470.192175][ T5887] usb 5-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.212557][ T5887] usb 5-1: config 5 interface 246 has no altsetting 0 [ 470.232193][ T5887] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 470.247739][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.256013][ T5887] usb 5-1: Product: syz [ 470.263233][ T5887] usb 5-1: Manufacturer: syz [ 470.274052][ T5887] usb 5-1: SerialNumber: syz [ 470.419640][ T1209] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 470.510915][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.555192][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.592478][T11805] batadv_slave_0: entered promiscuous mode [ 470.599882][ T1209] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.623718][ T1209] usb 6-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 470.639331][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.652137][ T1209] usb 6-1: config 0 descriptor?? [ 470.764600][T11786] tap0: tun_chr_ioctl cmd 1074025677 [ 470.771527][T11786] tap0: linktype set to 774 [ 470.803036][T11786] tap0: tun_chr_ioctl cmd 1074025672 [ 470.810271][T11786] tap0: ignored: set checksum enabled [ 470.839561][T11786] bridge0: entered promiscuous mode [ 470.852819][T11786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1569'. [ 470.887165][T11796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.896041][T11796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.929640][ T5887] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 470.931704][ T75] usb 5-1: Failed to submit usb control message: -71 [ 470.953883][ T75] usb 5-1: unable to send the bmi data to the device: -71 [ 470.959178][ T5887] usb 5-1: USB disconnect, device number 101 [ 470.961850][ T75] usb 5-1: unable to get target info from device [ 470.974499][ T75] usb 5-1: could not get target info (-71) [ 470.982642][ T75] usb 5-1: could not probe fw (-71) [ 470.984510][ T1209] usb 6-1: string descriptor 0 read error: -71 [ 471.044514][ T1209] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 471.062766][ T1209] usb 6-1: USB disconnect, device number 35 [ 471.527809][ T1209] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 471.557929][ T31] INFO: task syz.3.889:9197 blocked for more than 143 seconds. [ 471.565549][ T31] Tainted: G L syzkaller #0 [ 471.587520][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.612085][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 471.622350][ T31] task:syz.3.889 state:D stack:24960 pid:9197 tgid:9197 ppid:5838 task_flags:0x400040 flags:0x00080002 [ 471.678575][ T31] Call Trace: [ 471.682030][ T31] [ 471.685004][ T31] __schedule+0x15dd/0x52d0 [ 471.697882][ T1209] usb 6-1: Using ep0 maxpacket: 8 [ 471.709641][ T1209] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 471.717644][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 471.735854][ T1209] usb 6-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 471.738525][ T31] ? __pfx___schedule+0x10/0x10 [ 471.977836][ T31] ? schedule+0x90/0x360 [ 471.982320][ T31] schedule+0x164/0x360 [ 471.986852][ T31] schedule_timeout+0xc3/0x2c0 [ 472.028371][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.029608][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 472.053642][ T1209] usb 6-1: config 0 descriptor?? [ 472.063964][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 472.078212][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.106433][ T31] ? wait_for_completion+0x274/0x5e0 [ 472.134367][ T31] wait_for_completion+0x2cc/0x5e0 [ 472.151094][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 472.177698][ T31] ? restrict_one_thread_callback+0x15b/0x570 [ 472.184255][ T31] restrict_one_thread_callback+0x320/0x570 [ 472.191461][ T31] task_work_run+0x1d9/0x270 [ 472.196503][ T31] ? __pfx_task_work_run+0x10/0x10 [ 472.207116][ T31] ? __pfx_futex_wait+0x10/0x10 [ 472.215567][ T31] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 472.232594][ T31] get_signal+0x11eb/0x1330 [ 472.246482][ T31] ? do_futex+0x333/0x420 [ 472.253849][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 472.262444][ T31] ? read_tsc+0x9/0x20 [ 472.269461][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 472.285820][ T1209] usb 6-1: string descriptor 0 read error: -71 [ 472.304920][ T1209] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 472.313468][ T31] exit_to_user_mode_loop+0x86/0x480 [ 472.323308][ T1209] usb 6-1: USB disconnect, device number 36 [ 472.330776][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.343749][ T31] do_syscall_64+0x32d/0xf80 [ 472.365431][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.382541][ T31] ? clear_bhb_loop+0x40/0x90 [ 472.387919][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.397771][ T31] RIP: 0033:0x7f4e9319c799 [ 472.402559][ T31] RSP: 002b:00007f4e9353fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 472.412302][ T31] RAX: fffffffffffffdfc RBX: 000000000004c5c1 RCX: 00007f4e9319c799 [ 472.421486][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4e9341618c [ 472.430357][ T31] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 472.440318][ T31] R10: 00007f4e9353fcb0 R11: 0000000000000246 R12: 00007f4e9353fcd0 [ 472.449103][ T31] R13: 00007f4e9341618c R14: 000000000004c5f3 R15: 00007f4e9353fcb0 [ 472.458438][ T31] [ 472.461812][ T31] INFO: task syz.3.889:9198 blocked for more than 144 seconds. [ 472.579307][ T31] Tainted: G L syzkaller #0 [ 472.585890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.595262][ T31] task:syz.3.889 state:D stack:25384 pid:9198 tgid:9197 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 472.608083][ T31] Call Trace: [ 472.616336][ T31] [ 472.619896][ T31] __schedule+0x15dd/0x52d0 [ 472.626504][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 472.635231][ T31] ? __pfx___schedule+0x10/0x10 [ 472.642032][ T31] ? schedule+0x90/0x360 [ 472.650089][ T31] schedule+0x164/0x360 [ 472.654397][ T31] schedule_timeout+0xc3/0x2c0 [ 472.661424][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 472.671192][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 472.678840][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.685244][ T31] ? wait_for_completion+0x274/0x5e0 [ 472.696635][ T31] wait_for_completion+0x2cc/0x5e0 [ 472.724410][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 472.730978][ T31] ? restrict_one_thread_callback+0x15b/0x570 [ 472.737479][ T31] restrict_one_thread_callback+0x320/0x570 [ 472.743559][ T31] task_work_run+0x1d9/0x270 [ 472.750181][ T31] ? __pfx_task_work_run+0x10/0x10 [ 472.759323][ T31] get_signal+0x11eb/0x1330 [ 472.764233][ T31] ? do_futex+0x395/0x420 [ 472.770939][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 472.779395][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 472.788491][ T31] exit_to_user_mode_loop+0x86/0x480 [ 472.795514][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.805565][ T31] do_syscall_64+0x32d/0xf80 [ 472.812307][ T31] ? trace_irq_disable+0x3b/0x150 [ 472.818330][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.824426][ T31] ? clear_bhb_loop+0x40/0x90 [ 472.830126][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.836047][ T31] RIP: 0033:0x7f4e9319c799 [ 472.841359][ T31] RSP: 002b:00007f4e9404f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 472.862514][ T31] RAX: 0000000000000116 RBX: 00007f4e93415fa0 RCX: 00007f4e9319c799 [ 472.889010][ T31] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 000000000000000b [ 472.898810][ T31] RBP: 00007f4e93232c99 R08: 0000000000000000 R09: 0000000000000000 [ 472.906804][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.917755][ T31] R13: 00007f4e93416038 R14: 00007f4e93415fa0 R15: 00007f4e9353fa48 [ 472.934421][ T31] [ 472.938228][ T31] INFO: task syz.3.889:9199 blocked for more than 144 seconds. [ 472.959926][ T31] Tainted: G L syzkaller #0 [ 472.967889][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.980218][ T31] task:syz.3.889 state:D stack:26472 pid:9199 tgid:9197 ppid:5838 task_flags:0x400140 flags:0x00080006 [ 472.996839][ T31] Call Trace: [ 473.001008][ T31] [ 473.004710][ T31] __schedule+0x15dd/0x52d0 [ 473.010097][ T31] ? register_lock_class+0x31/0x2e0 [ 473.016917][ T31] ? __pfx___schedule+0x10/0x10 [ 473.022784][ T31] ? schedule+0x90/0x360 [ 473.029761][ T31] schedule+0x164/0x360 [ 473.034015][ T31] schedule_timeout+0xc3/0x2c0 [ 473.040885][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.046442][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 473.054265][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.059910][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.065398][ T31] ? wait_for_completion+0x274/0x5e0 [ 473.072017][ T31] wait_for_completion+0x2cc/0x5e0 [ 473.078870][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 473.085316][ T31] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 473.093517][ T31] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 473.101395][ T31] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 473.109013][ T31] ? landlock_put_ruleset+0x10/0xb0 [ 473.116648][ T31] __se_sys_landlock_restrict_self+0x540/0x810 [ 473.124398][ T31] do_syscall_64+0x14d/0xf80 [ 473.132764][ T31] ? trace_irq_disable+0x3b/0x150 [ 473.139824][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.147835][ T31] ? clear_bhb_loop+0x40/0x90 [ 473.153446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.161484][ T31] RIP: 0033:0x7f4e9319c799 [ 473.167832][ T31] RSP: 002b:00007f4e9402e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 473.177678][ T31] RAX: ffffffffffffffda RBX: 00007f4e93416090 RCX: 00007f4e9319c799 [ 473.189573][ T31] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 473.199788][ T31] RBP: 00007f4e93232c99 R08: 0000000000000000 R09: 0000000000000000 [ 473.208641][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.216837][ T31] R13: 00007f4e93416128 R14: 00007f4e93416090 R15: 00007f4e9353fa48 [ 473.225591][ T31] [ 473.254954][ T31] INFO: task syz.3.889:9200 blocked for more than 145 seconds. [ 473.266153][ T31] Tainted: G L syzkaller #0 [ 473.283126][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.293200][ T31] task:syz.3.889 state:D stack:28832 pid:9200 tgid:9197 ppid:5838 task_flags:0x400140 flags:0x00080006 [ 473.305910][ T31] Call Trace: [ 473.309839][ T31] [ 473.312814][ T31] __schedule+0x15dd/0x52d0 [ 473.319698][ T31] ? __pfx___schedule+0x10/0x10 [ 473.324675][ T31] ? schedule+0x90/0x360 [ 473.329429][ T31] schedule+0x164/0x360 [ 473.333627][ T31] schedule_timeout+0xc3/0x2c0 [ 473.339023][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.344246][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 473.350340][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.355405][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.361180][ T31] ? wait_for_completion+0x274/0x5e0 [ 473.366599][ T31] wait_for_completion+0x2cc/0x5e0 [ 473.372205][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 473.378414][ T31] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 473.385255][ T31] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 473.393553][ T31] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 473.400774][ T31] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 473.408301][ T31] ? landlock_put_ruleset+0x10/0xb0 [ 473.413531][ T31] __se_sys_landlock_restrict_self+0x540/0x810 [ 473.419897][ T31] do_syscall_64+0x14d/0xf80 [ 473.424518][ T31] ? trace_irq_disable+0x3b/0x150 [ 473.429750][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.436041][ T31] ? clear_bhb_loop+0x40/0x90 [ 473.441365][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.447815][ T31] RIP: 0033:0x7f4e9319c799 [ 473.452354][ T31] RSP: 002b:00007f4e9400d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 473.461341][ T31] RAX: ffffffffffffffda RBX: 00007f4e93416180 RCX: 00007f4e9319c799 [ 473.469965][ T31] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 473.478791][ T31] RBP: 00007f4e93232c99 R08: 0000000000000000 R09: 0000000000000000 [ 473.486922][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.495949][ T31] R13: 00007f4e93416218 R14: 00007f4e93416180 R15: 00007f4e9353fa48 [ 473.504660][ T31] [ 473.508439][ T31] [ 473.508439][ T31] Showing all locks held in the system: [ 473.516425][ T31] 1 lock held by khungtaskd/31: [ 473.524647][ T31] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 473.535476][ T31] 2 locks held by klogd/5181: [ 473.540559][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 473.551135][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 473.560958][ T31] 2 locks held by getty/5582: [ 473.565666][ T31] #0: ffff888036a9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 473.575944][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 473.586679][ T31] 2 locks held by syz.4.1582/11828: [ 473.592387][ T31] #0: ffffffff8fbbe5b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 473.602891][ T31] #1: ffffffff8e764540 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 473.613387][ T31] [ 473.615759][ T31] ============================================= [ 473.615759][ T31] [ 473.630212][ T31] NMI backtrace for cpu 1 [ 473.630239][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 473.630266][ T31] Tainted: [L]=SOFTLOCKUP [ 473.630274][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.630287][ T31] Call Trace: [ 473.630295][ T31] [ 473.630305][ T31] dump_stack_lvl+0xe8/0x150 [ 473.630339][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 473.630365][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 473.630394][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 473.630422][ T31] sys_info+0x135/0x170 [ 473.630443][ T31] watchdog+0xfd9/0x1030 [ 473.630485][ T31] ? watchdog+0x21a/0x1030 [ 473.630523][ T31] kthread+0x388/0x470 [ 473.630544][ T31] ? __pfx_watchdog+0x10/0x10 [ 473.630572][ T31] ? __pfx_kthread+0x10/0x10 [ 473.630594][ T31] ret_from_fork+0x51e/0xb90 [ 473.630623][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 473.630648][ T31] ? __switch_to+0xc7d/0x1450 [ 473.630675][ T31] ? __pfx_kthread+0x10/0x10 [ 473.630696][ T31] ret_from_fork_asm+0x1a/0x30 [ 473.630740][ T31] [ 473.630752][ T31] Sending NMI from CPU 1 to CPUs 0: [ 473.754125][ C0] NMI backtrace for cpu 0 [ 473.754146][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.754169][ C0] Tainted: [L]=SOFTLOCKUP [ 473.754176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.754186][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 473.754217][ C0] Code: fe 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 82 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 473.754232][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 473.754249][ C0] RAX: 000000000072be4f RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 473.754267][ C0] RDX: 0000000000000001 RSI: ffffffff8def4b2d RDI: ffffffff8c27b380 [ 473.754279][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 473.754291][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90118bb0 [ 473.754318][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 473.754330][ C0] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 473.754345][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.754356][ C0] CR2: 00007f37805ff990 CR3: 0000000076156000 CR4: 00000000003526f0 [ 473.754373][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000041391c33 [ 473.754384][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 473.754395][ C0] Call Trace: [ 473.754403][ C0] [ 473.754409][ C0] default_idle+0x9/0x20 [ 473.754427][ C0] default_idle_call+0x72/0xb0 [ 473.754445][ C0] do_idle+0x1bd/0x500 [ 473.754466][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 473.754486][ C0] ? __pfx_do_idle+0x10/0x10 [ 473.754510][ C0] cpu_startup_entry+0x43/0x60 [ 473.754531][ C0] rest_init+0x2de/0x300 [ 473.754550][ C0] start_kernel+0x385/0x3d0 [ 473.754570][ C0] x86_64_start_reservations+0x24/0x30 [ 473.754594][ C0] x86_64_start_kernel+0x143/0x1c0 [ 473.754618][ C0] common_startup_64+0x13e/0x147 [ 473.754640][ C0] [ 473.972864][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 473.979844][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 473.990786][ T31] Tainted: [L]=SOFTLOCKUP [ 473.995171][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.005409][ T31] Call Trace: [ 474.008724][ T31] [ 474.011681][ T31] vpanic+0x56c/0xa60 [ 474.015676][ T31] ? __pfx___schedule+0x10/0x10 [ 474.020619][ T31] ? __pfx_vpanic+0x10/0x10 [ 474.025143][ T31] ? __pfx_console_unlock+0x10/0x10 [ 474.030408][ T31] panic+0xc5/0xd0 [ 474.034336][ T31] ? __pfx_panic+0x10/0x10 [ 474.038851][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 474.044235][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 474.050840][ T31] watchdog+0x1023/0x1030 [ 474.055191][ T31] ? watchdog+0x21a/0x1030 [ 474.059636][ T31] kthread+0x388/0x470 [ 474.063717][ T31] ? __pfx_watchdog+0x10/0x10 [ 474.068752][ T31] ? __pfx_kthread+0x10/0x10 [ 474.073354][ T31] ret_from_fork+0x51e/0xb90 [ 474.077961][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 474.083082][ T31] ? __switch_to+0xc7d/0x1450 [ 474.087859][ T31] ? __pfx_kthread+0x10/0x10 [ 474.092463][ T31] ret_from_fork_asm+0x1a/0x30 [ 474.097262][ T31] [ 474.100453][ T31] Kernel Offset: disabled [ 474.104804][ T31] Rebooting in 86400 seconds..