last executing test programs: 2m21.559672399s ago: executing program 2 (id=1337): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) socket(0x11, 0x3, 0x0) r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000006c0)) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000208000600480a000005000b"], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000700)={0xc0, 0x0, 0x20000}) r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x280602, 0x84) write(r5, &(0x7f0000000000)=' 0\\ 127.0.0.1 2000000000 \\calhost\n', 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000006e000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async, rerun: 64) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xbf77, 0x2, 0x2, 0x325}) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) (async) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) r7 = openat$autofs(0xffffff9c, &(0x7f0000000600), 0x400901, 0x0) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) (async, rerun: 32) r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10, 0x80800) (rerun: 32) connect$tipc(r9, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r10 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000780)={0x2e, 0x51, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r10, r15, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb2, 0x0, r10}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4, 0x2, 0x2ab, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f3e, 0x1, 0x9, 0x102, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x800, 0x2, 0x102c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x2, 0x21b, 0x0, r10}}], 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r14, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 2m21.163668099s ago: executing program 2 (id=1338): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x421, 0x800000000004, @thr={&(0x7f0000000000)="b08bbeac4f16e1dfb401e845fd", &(0x7f0000000040)="2374177b82ffd471a20c48a1a4bb9840f5942f42e8d6984252f3098399262f2134126e606559e018ff69dba51244453a2d114b522e099487bfeac66f6d258d2096f1fbcb08c230e5fa49c0d4219671e21f2e08f380f61b294f026018d596e1945432dfaa618b1cd12acb81b764e6b832193773654bc84a38254aa320a483c64a35ab5ec7f0360c86cf27b3dc0bdb3f89f9cbc6003df8402d2efac665e8e0396591b58c6ebae72511d1d982252c9c9ad3ab4e9dea274a8f05533736c18ee7d936b580fa5c1e69ce6222f3803126a297b4"}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) socket(0xa, 0x3, 0x87) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) socket(0x1e, 0x4, 0x0) socket$pppoe(0x18, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x37, 0x7ffffffa}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r1, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000022c0)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x2161850, 0x2, 0xc, 0x0, 0x100, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006ec0)="fdce655b760ca5104efaceb1d1a3923f0a715e6b766c920bda8f1c452185ce5a36bbdc3a18f831197389fc7629beb7eaffcdedf404335cc7076ed0a93e02b3b8f9e690a26217bcc194cbd13529b0ea83edd9efef902b29dce3207790ea598ac4f3580b4c988db0443ec6f948a8ef1ca513f490ab8d6d299780b310315dd97e7e107778ab25e877c10e06b1fef98271c77547e5294ff29d02bc6b7aa65fcc1de7258fda4f9955bbb902fb4986b5f8c995bd6b1a174259be4e5feef99473dc24b30c1b8243b776f107803dd272c76eba0efc9833d9c05cacc645b7fa50fbd4449bb2630a72ec5390333c605b7161694a019c27edc441d3d3e2b78ff3289fa7b8e4695897c13441dee5c63f64a67269d00508fe0b7818296a6912f5ab86af744e91585164d7df87ad5eb39046afa40f33250d6cbc353be35ce91157b44c23d17ad2c2a256c7697ac66d74a485cc3601f9105fea9b849fa61ce32e6b3be749848ff8e18ac4775649be3e4c419a5801ab84e128ebbaa290ea4debe81e0ede090638284422bd5c54816fd9d007a8ff91827e44a8e8fa97f954d3c97c4632630d1216950afa1a0a7a6e552754d59d9e323ad7d76752f9bef783b7dfa5865efbd89ed4639bfa4535a9a6621447df5ddf6f13420b0618aafe24ac2aec73b368c3967bee1c0e824bd78b3b7d882b2f3649e3f830d25ec324e82d72170d1254466bbf1fb83834b58dfe8c7b38eee4581c1bf7042c155d8753d6266514c65961351cfc9ff751e491fdcba949ad666feefa6ed2c9fe8cb411b148f2b7ea808bab95fca0e7c0ecb253a42c1151996e0f6f5911d385c3b31441f24b3c1442928d3340959790c7f7dec545129144b76bddfd1c0c8adcc49a6a3ff53ae3e85498cd6986bcddd006ba9c0426d39bc204c074e594389dc0f137f63216c18fb0487748a1b1e702453a772b398b5dafb61568944d7c5b13f795046ef9e9ab35a34a3948cc6688f8bcffca30739e924ca7c8f5a59fcf07eaf544e7582ca6d3a3d33ee3c75811bab9ee9253827ec4cfe79c6d38f325b1624507426364f4ab9ac9293d3af3a5d5961600df55613812be3ee82b1a095bdbfc6489b576a34fcccf574aca98dcddec8ff71bb83831dfcb0a4c186d94042bd4fc8ab6aef4ea176bbe275610f31d693ff5431664b0efbf849d9c82eb26e1e71cf765eae85c13a018e500e53351fd0398f9b88c6a2c0cab03278c1bfa08d2f1dab3fe6795d0f5ea3e5d3bfbadc9608984cb81d86d1cebce16d5c29147082914192bcb11f51427583a61b7f8ab15182931b7091793b3da4dfa803c561ebd1ccd6ee7e8fb559a61c7be2a04cb9944d3d035c5e0a3f0768e33703ff5f4e1977ae22468347c9e27b6ea152f7c9a93b014b47dd80d221e880a1688fa5412ac0feb7058a23c37333b3b7d16be24bb65e97f2688bf755c9d4c5e7ffe25081f519210914407d0edd847a75bf70a42f6c7d1a06757b49a39ed5171e9847575ba5e127739bd5ca23a27be51dbdeefb67704e0476def6a7778d3bc7635eef7f9a4de3b2253b222ed73e9c37414a8b110b390fd7b2752dc161e231c12a09ea46138d317a9191e90fee4a1c7b45f82298da1e1536a070dd652f5b97962f3b5e7a7e8611db85af856957f65212e9d17098dac12d2b3bf10ba128bfda768cb854bb35066bb85723a053dcccba7f5cd9836947ee8abf05c620577b0f2345fa7d94f6fbb367742f0ddbfa1a43e5ab6846e5328498daf01009e02383a373a2cdcbeb1f1815a0895a9ed1a98fe5a14bb20d817ab9c89f4b09c575ae877ae5e74c6dbc5743a23f937fb829cb60a600c45472a34c953589a5e76193cc4cfb708ba46ed43b20aec6d706f6f42a9de20457d17bc2748b49e266a88f4764b358daa3d15abc68c24b0f805f9cf3572badc37b022cfb82036dfd1e0f8e9c822cdc94afb86d2e69a3bce9a595623b765cc94c66cde70f6ee2cd0aff596a816acb61dd3a77f6acf42fa36e67f3f03978d00e9a391cdb1dc3db7dc7e86f7503b6df93054e1b23bb38c78d3f3bacfb675a5fae8114880b18530e7a163be1e6bf291a8f9d753f8f425518f87bb9dca0f606c0d81e81f9e05144a1c849700c6bc5e980fc12a29cc5930e56f52b6c31a2c6a132d4f5e93663e75aa9d977331c761f6322cb23461b5a0146dca5aa5c21f8440563e12102632f1df910d7ff7ca6cc1623fa781ef3fb6871f29aaebd37d82de4db962f76df3d0766add45ba0022ed487c64c7662a5b0612113af5c38996c32b31ae7e70c92854d3cf81f10e2f1e8eb944910f063ab7af48d8d772c8ef622500bab5fa1471a5f39114dd610c6e01b10bbef0521d05aff153e6b14d3e47e9b3f34b50d3756eae856f214647db7e536faa7b0f60bd60d87fc5ab811bf2fed239193daf56bca46989634b671c764e1b0cabcd94c817fab2e72513bd03ff4b7dddaf6ad7336fad37d52281c633e3f2c2aaa062562686e3dbd485acfdac393df2f81d51defd30efc741d6e7ddf7420576d3d43ef611d5b72a18b2f1c610581de66ccc9ec3fdd3a701faec359356764a022424fcf0497272b7ff81609ac784c1e7a72c63077d013774ae0ab069b659ecd41b851788f19d2449b18268ec384d50a90f08e17bbfdc224b331ebeaec4ea7426ee1e13a95ddde4900319470aa5eb452ba02a704ff21b4c81e1e4112c2f0c26657c61c58a6d02cfb79337431fc9cf7dde70f3b49c11979a1d6c199c9a4f73a9d0dd293f80de7eb384594cfb45f73fe17723a41d35eb986e83a838e6e261edd3f7bc023c0a78a1b82b3b70fd8735b6d0a53fc41099288e83d922dd143f8db3f4e225f35b20f406162da2a5647bfc1a6231c6422e6340c917b18db1c364d92bc03442348a4a0f5111a202f5625fb0ebfcd52c497939de221e38dc9de2d86774163b525f5e47bdd526a0f6203ec51b1213141285900971319110bc13cc7d1f5e8588a306c472c8a72b04cedeef20bb6d1d0700869845d750308b87262c0583ac7f170a053a0d2ef33dd7ec488b88086aac93aa2f7451bb6d031781e3aa55899cb5b2ed026a17d1e25b0309010dbc170289a944ca1b2881dbf59f2efe1588dac9f16a27ed587b033cf3a12f7d53915dd90a6cfb0fd7bdf0a7a6075729cdec53275d6f3168362d3c254f1dcb810f58aa5050f8f777b8361fea46abbd504d5f94a4b881b0fdb563b72e3e742d088f617dd59ca7d671442f9663b59c9cc3ebab567a6ed2dc41518e20a0a297763933df56d8fef94e80e4e107b4bb9b054e5c7fd5ff060980fadd4150d9d5055def5ae6d7b3f1f3ebbc3691b66a0dfcc277e771a80dd5beb574dbb690550d6695691078b75d517da5f4e4c1a3b86f6cdab5bbe762c1e3f0db3e7ca91a8f7a483d79ec3c5ea092ebe4a9c938e1d6f538c321dbe2ff526dd1b7a71fbec42d250299e27e72da4b845cdf500ae7190956090db96bc41604d6a52f5b520cc5a625a72197ea4ed52a73007208691757258727bfed2b187bd2fff98a0fb8359bd537a9219f3373d89952fd99a1b7284988a73102ddad3e65d1b6cc5abd012639eea2dae3006f162e11832974659ac6fb524baa8dc9a3dfd426a57ad115f123ad49e70ee99709e3eb37f29276f9773d278e234bcf5d1b94cc2acfbafc8a8b5c82bfe0f60b03d59235a5a446ce919406d0d4b3f7e3712ee89acc9616e746dd2b98cd97afa127f2e38c0b3f9b00e3d71c80a8069a1859cde9a3789193b2303ff413b45b72613d146cd25f96103955785bcc38c757e5205254b174dce44a42f0860d0876eb5802e7f6f513667f5648b191ef563de11665609ed15fd42862a3c3d38f440d24e8fdd92731330bd72bc7a02a5cf631adcd4d9d6dfa54427d06ac16970b95fd736f4b7633832865aa28ff6073a29eecb98dcbf5bd108d4c400003b8880ba48bb133109ac541ee7bfa9675e583012f8ed0d8f88849df207baa17cce09d03eef37a28e15b00b8df93a189a9d3e1ca53503f37b6845c0a48a624faac26b36376acefccdeb5c6e41c23c732b4c1aa46c96b9d4758636937ee26554383f54b340e49e00072d2acbe36736c872c76738e4d6a34738dd3495efadd1bdd5272f8bc23407dd34b3824c1a271e014961147a8ce4f60c0bebce96bd969170a1796c935a13e244640062908a268c7a180d3a7f01a0439633f738f04cad21cf432ff41e6fdbdd34b26de17fb22dd791d4765668cffb1e8d9a4e43ce91523e615a871bbbad73e6e27ba8afb0d8d402627cfe5f76d00cec1954b2d7586f0f91d5248bd25a1c7a1859b0b3ecf0894e92b910bebd29161ae996b9fd4b0c91894aa56e982ab2927d6b068c2465e745320eeb280e438c38a15b26853fad6d3b8d81db041de6eb702fd71df6a2a5cf55d4640c5b2d56f3c0ba8afcd791d1a989ae97d8433dafa99e8a34e9db66e927aba189bbadd4af09e7fb8d7a9a351a7d264b14582795023bc755b53cb7c70be81518c531554909987e06e10daefdf054f915c6e6a9ff3940789c55b649651f28e101f37a99f1d669de89921967529a1f59eb9500e7eab6c7488caa6605623009a4365d2ffcc4f7feaed98d52c1910828f8cb68faa5c3b781be7711325ee10b69c7f255d3b8e033ef4812e248e790f3b70ea728a681855f2ffe3ec26c37c422289ed6f506503d9ad7cdfa9b8ebfba90f2fdcbc4cce54de7b169f86969645c606e3d4efc072f714dea15ad4a4fe052f40b3b7d1279bc817efcec0fe85fdde877dff3862001c11b5800da3bb8a3dd4273aea429d46447e3ae014c8bcdbbf673f5f0913957ff369b7dc2a28b97c4726004eb2f6652f689b7b4dde91fae1b904a4098765053aee555b1a770db5930a50d87b06287587003b08f31033cf3aef90b5c42272588f232c4a3a5e72260cb3c80089e1b56563bb9eea5175e7c89a936921e8d7690b417d84f13ab9dfbc3d33339f82fa775f432571c40ba22a6b6c20653dd224016dca26bca4e4476b4832d2e2d77b9005973075d25738e032a6756595a217ded9b1130b3cbf460d031d4f66370c47ed5b0964836445c0aa39b2f5dec913a4320d56da9334ba6a7ac888603a7a81af1b07bb0568e4b3ceb5e0c9fc5f89013dcdf4ddf8f780c085f09c8194d12b540d6df855b448d9365648af2857967ca430cfd36d2e513050cc42c261277a931708789dbeec687514e10300d9213e8d8575a1d3e517b04cd43ed8f4436234b3db77c25f83b57cccc4121c747f94fd34adced84d683a39d6aa44feb8e29db40cab4d5f0bf0dcc2fd26e42302c1c3c3215a7b43f9502041058e88d12ebf723ee411f44c89ae8dbacda8aeb0153288b9a4f220d387cb7498b50a4beb113a465b006b8c63816fd76a1950ab6d0cc6acc823d4668bb03d40cf9239f5217a533dea8f3698b69729c091b7a834cfd7a97da58a37a68b522e0830d2e42fae420fdf0eef4ca231e89d0037cfadd651ebdbae4e4a311e2f4164f7936b23a750e40557756ec57128407f46104d73bf69dcc34411144edefadd49bbb82286b336f26713523f8cd30d8c203c8330ac676cc958f86c419afadd685e31e37c54b53cd8a5d7276ece392c72fb80e0c83ca2ffd77a4141bc30dab024609fc6324dd1b5d8ffbd69256f97107594adb974b7bf0dbb94a104f36cb561f48be3467ada510ddc7e08eac3700c71a829b9bbbd526d1acb0f7877e2ee985a52c49ce316e81fbc65a83dd9921ff948490ecbb0a0a91b7fbb4b29d710c58dfebc109303b453ae1d93197974c8acb61cf113f8debae4aedce914e7a60b780e02c2d8a74583f262138c15ddb0450c321eea96537af4de875a1aae30454bc170a49eb3c3bcdbb4f441991dae9026c6c224c671dac9eaa403daf6596bed1886a34bda538a82d09380c3862c297c1d5b3b390441cc1ffde331ede8e746dd65e4bee06466b4703e9a262ff4299272eef1b502986dc616964b099605d5046028ac9c2d0a6bf201a04d2c3f816b4c6c96ca9dd306d9a979fd899681de2f95390d563f6b7ea4e5de0941f9816ee30f351cfce4531fe0f3595a5bde52e6febd96703812e057c0d90590fb2b625d2e442c535ab0f7dd074069a72805943cfaa6718660f746b18447a25be5a8d362590036825d2499ef99d3912a9976b1df57dc9bcf44f0af6c1155fd6d43b5dc9c5c52ccb7ffc597b0509374ed32a2774614ce82a365e0bae95f2e098540ca9894600931b0d825f214761ddc0d8621010746e6d1658c52726107406c03dfc57e2e3343fb24b03d3a749ae4422b0463586d03d1b4b3c4e68e670c719f042d9173fcc8f535290816a77e649d831d14ec120ba378dda40d20f6668f0131393e9bed9b5d4a73259ad4dcac507b3f7460b70802c57d60ba74c57b1cc192cb00b0bf89e8f282d5c6e163cb8bba27168a70adc3d9665050cf16d94cb151c470ad1097b7f7be262c64a96584dbd7a1a14132fb02dc9e6f005c2e0bd5587dce73b779dedd93f963cce11e716dda5f3dbc591af26368045df4a237be1824d3df4d6b7ca6532fe8429f0bdcb599d826cd1250da5d81eb14d435bb4f5a175b4d33a95c0dee082083ed61a29cae2ac8b50fcfb2a0bf86e4be371af63dd7e202a77ad230bca4b51a81bbaf7e1ba843855ae5fa51b1bcaf9315da4f7333b2ff131ce068348d18ef6e4ab416c0e5e2d124bb87657d8b87ab222d0e41f79aacb55b4121783812558630b9339ea46631e7684159ecd53d199247064a62fac9e5af2f37d34cd3f5233d342c419bbbf5aec9bce9e18faf319da8702fcfe8b984c2c732402a65b1b09fa2ed6cd93f42851872ba77675bbcb7a69c8cfc1e4ed800d76ff0cdd842ef6d717c6e280b06cafa0111af01f6cbfc4dfbbd0d283371222089ef11c03d46fd539b6147773a79f0878adef9182c39a94ace8c52ec7eb2d81dbc0d5ab22b5d0e7b3cbbaf2f4127906c47371e9cb7dbd262a22a02c7f574c19ae260ae10576ab45a7422dfe5f4ba781ad7c67bd638a56ca76d830df61c8bf36fcb1555db58533e078e580be5e2914f38ca634fa790ce9ad7055f043dcd577ca19fcc3053c50ca647231c0c2c5ebe1a1d8dc12c781e2fff5a135dcd168b992bf6d892eea9ad5dcc9abb48c68a016f1337045a49147afe50364e904106e0f560a18416d62d88e6bd40a49a716664f9f0d02b402cd0c3487a9dc3ab45654a7d4c627c7f02bba8a09957a542fad67044e9addd84c06c0c4da2a6767442eb89c57a90751ed341cdf67bbbd7e4af8ffdfa5285ec15aa39d6c7b7aa1675c897c80990cad43c2fbd89da4a4001c54a7819e25c3ea298e4fc536d90097d19591f309d559b42a0b4ed106e55b13f35246593d7923307bcbfecccb185a7bedc263dd997f23633fb995a23a32112fb9c6b50962867a909a33b23eda82d9b887a6ddf1b9de1a94f26b08351eddb89df25e2f29e70f32acb6882402277ac66cd08da444654fcf1ff8f68a74b4eeba30f2edf89c50ab4d43a5eecd4a4ff0e89494e5da0da75a2c53717762a7caf8c6926bcdbf61ca1db4373a8d15d93067145ecc7c77fa85b949d8686814e48fc5ad024f3657904eee47d4ae4c05ba87edeb3eaec4844396a0ece5c0dbb94b8df42c5e4aba0848744bb29593207b5d17c27196447137f77b77e144d1e55d49e8778574d03e1a2d60a8fa93c8eb397194592f1dd8ec269c7f2e333ae9266bd3e43db0285ec426426fb9856adf1a1abb80cbc506e4d5e58d6b5f71c23197cfd32ca042009055460b7ca1f7d152c13c694cdeeef9f4d89e9026f4624b664566781fb246a5638aaae06ab0929e16ec3675f24507eb4e1edd867600ad68b7a79daabd7d22088acedcffebe6ed3b77a66a04db8f659261d25fb14b97a7fea8f394527e2069de15534403229ad6d2986bf07f8178691c82af9a84e99427b0fa3fb9769394d9561f8f3253ec278215fb2ff9f7d47566e2df20af0132fe4bd10388d6eb8741999fbb0774ab44ca21229a62135920916915625b18179e7e63f3f2f5f8f9b8fbdccb4d5ae77786888aa557aee191d18253b0293692c20226d0b293e4a5c38b29d3733d76532aeb09fc1b76efe720be1e95276c7d7cb2aa18b0e7481336fa234c893351ddc5c52293be431cd5253c5e9751b95d19d1d6a4794f3b945ea9ca1df0defb5eac6a3cc5fade8bc9b60a9d51104a284b058da4c5c464bc9955bd3d6b4d58fb3d84780aff99312924a66468b307e91fdaee9c666f0f5a2cf51d589446ecaf1f6926dbb237b62832326b326ed557d8f174f344fdd14d2fd94d90a10f5d4a065b7ab1d971942c40ee392e41e0f159f1b9d3c3c39793ab378b1c75a4bee69eb669c0c7bd0fbc8041e1bfd0d316dc7fd62e8595151c05611d92a9fd09ee51e723c4d311cce22542b59e8118cf3950dd4a9937b5456d30c060e31d6c8371578e94a2f670d6d1a04a0b7f0ea9af2da166687247c1c9e9cbc7ffcce7303b6524da7cdfd164c5f10e5cae4407c3604ebca4e2cdb489c5414d13e890387a2f1db3d40c21f77737328f9f1d1816cdc03e233d0eb7e77548d95b0925b7b22589fedb0148a8ec7157ed6e5b3f43d6b4114e0920544dc12311e36a716b62b0f4898108f508797520fa191856e0acee2186a57335e6a3f807c702a6a9f18e8798d342212bfd3c7c2fe3bfbe73db36c5741693545525447a48484f723184f885d6c8ff5e13628c78a0b3bf8e80e6bf31768a704e5c21283c10890897548eeae554234147465dfb81c99837a6ec33b60e9a7c9b66bb03b6747da6a6865cf3afde3a8f62ce3a235a287a192194c2e65c13176467f6be6173c3958209dffc1b0f07d595366f3af61389bc7d0ea3fcfa8a3f0a995c069dffdf3af98c547f7250914a00cd294a996020189bf15bc9c7b9303f1a0bf0a0079435688a3939695051b0fcbc814b67f6b03c3e3a9033e35714aca79956480d6028a5266933f1f61f3277570dae348a8253a61b96e8448728b47837e630d8285abe659346f79e92579274fb97fb94965221455052349cfd8525cb34823624626b544831f9d4b9842320749c82b171d0ad5062d8e24337e8b35ab99eea4f7bf747334d6b151722cee8addbdc8a1ad16ced6b9a4f17d2c0bebf96b14627c308a91037d2fec6c76974d6c57146afa9c9d56d067e784dff3ad2c74b3cce102b70cccfe3f71dfc11bcdcdc4df2d1b7d65b06ad28323b80953e8a11eddadfeafc71b645697bb89ec8727fc18f948748f8eb432a52c2e107eba1a72500d1aa193a2e068522a7e56e09322c2abad6acc29b637f34ba9ab63f6be98374df506aabea32a1d079080e08146c0be323fbdcd30e8b127a4ffa19ec6a325e94533a4ac75c6ad96d50082fe0d825686fb8ecf256f3e4bc348ca5dcda89773daf7fa942cbd61ed1a50a18ba993b8f96234cd7f0ce711135ab1440b989e73304b366f728bdd0caa234eb2185fad5bdb944161bae187b48710fc0b86e652e2f89af859c0d633f8e0743915392162a896ab03e1e5a2969e424965ca3f2d28675dd401d9af56d32fe1efab180b6b08d716c57bfc103970f89943f4c6ca7d1ab904dc39b7f795c3814a737d55452c4892c93090cd32ef33c33b80430eb4540d67f5eb3778e2ef3d45f9656e0d74097ae620e9ad4ef1c297c085829ef4b21fe8fae050286ddee113a9211e0a87e3038394bd59e73e735ffd2597da7f3f2b47b16c858f67d5306663f051912598af39640d9b4af35ad4b07f096f4499d68a4214c91fd219ff806fe57a3fc4069e5301603f2d78f606c65c4074e1591e148435acd1ed6aacff47157068e715e503aa9ed8bdd42473abe04d6e25b4cf5db06b86e4f5cd66dcc5e01eef0a3a32f6553ff5603b0871c14813408f7d5d03898e1b5c6a3180e908b72a0905ddc5f88ee8eadc79c1a990dc4ba1db6ef139b6f5d9a7309f86624c7015ebb531306c0c77cb781cef46a78eb9f6809843d950212c2147c258547ec39ca52faf20bd553efd72fb20cba4b461424ce3dc8cdb9ccacc569153fc2712949d7a2ff37aa38d84c20fd4733ab6c7a43055895b47c314f3a12e40ec576c36dc36953c22261889ed723ac918ced8689e88af4abff51823f7bd53a82df47e80ec570efb67525f71c26e172c6bd6368cca7f83ccaa251c6d8a6eb10149bff9767a6dfcb184006b91e8e99ef4067c6c901faa69cc78fe22908c1586a27142fda71a58175755131bbc8ad0e0af78093a7bc9f5abeb4f5c3acd83fc5422e88cd416ff6b5575d1a27d97aea41538ae156393b5b788c4121a1838763c99818950aa0cdf004ed67ee7181488680e38548b7a1ba4ae2bf77369b8406918fdb2cbfee7e1a0e87accb491234e89376542a96bef0081a58247c64d6207ba093da024872979b63af2a3b60b6dca47e2d8c29a2a13ed8d91aeb3a0eb13e6814a8c8dee2d3e92005c28ea4cdc91369149e65a887f219cc6a9698570e66299cdfb268fd680c4c3a0176b9f8804ee7d9205325d231414682e3a48d19228d8e10fb721371565b687b5385d65df53473a781251b585de7d525db9e05caea99746102815e5a57202fbf7f5dbd030694fb3b525c4bf067fdd489a742cc7d75f835f56605b23c342290c95c9761ad0c99bffd4214f568327b94c0d0632b2b54583d7b5c2294ae48002ce40b4fe9d347b022e1d7ae638594724ce808be09b44a49ce87239d4951c4a58e1f7698e49e67da4eb37bf57f212070759a2e9fcba5c31ef27d71852c1addbecd80839d08b4ca3135a95a3f41a1ae531ba5501dccd11a84524c0208a0861218d605ea37c63e4d058205e4dc3a87c35d4cd4cf7ddc12e252db362b391a9b3ddfde5396bd818a52d3ca0963ff7475b7a342606edfa472b63a0b94ae89786594b26a905a86a3c4b36b55ca31f8b9471cc2c5bb80ac1b9aca2683bdca6523d0df1145989f3f50383c73284b84bf12eb47edba084a7409ac5498d477109cdf2b384ffc99fa870931a36d145ce6d8dc6f9facff48b19952040ed37266d862399157d9d34ba09b8b6b221d76cc153b72fc751102279a981779b570b8f43a31c587a57ee3f2697e336af606126b953e84c9e57c622d7a255dea6204a27e88ce2407fe61e07c5f85ecd5cdac89dcbec5001d7106ea19090fde2a665db8a962f247d6ac4f211baa4d75bb52abdce8cce59de93dc3c310e899aefcd9d10c1385bff8ea7641675b6c7c491525174b6eac7f63a14a3dd7f8abbb39e660835f6aad4e01bcf84f4eb61f990b153992ee89c22aa31b16c38b43ab45c0a275e1d37a730ad79c1b05f2db8e0f50d963ed8f985c201dbbd2e8edb03f37865eae560ff80dfdac7ae79417cb8ef46c99eb4c7204da366f006c8ed2e04e87a02bbf217e1fcefa4a32bb081842ce97e74748727af38be3ba87793d0fbed9b6666604a68e794d6395ca2ca4d0818547ab2e1eb0ac0b4086323d7589f89b4525fba9632c0b8871477ab8fc8635beb4dbd25a8411f1f4838e2666739332b0ef7aa1412e0b17e60f5373582d9dfae558f2e325da993f9047d677ec48f92729d9b3f1c005112300760637629ecbd349b9dd3806c71884880904e1296afbe", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x5, {0xee9b, 0xffff9777, 0x0, {0x3, 0xffffffffffffff7f, 0x2, 0xd0d, 0x6, 0x70000000000, 0x9, 0x1, 0xe, 0x1000, 0xffff, r3, r4, 0xa, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0xfd}], 0x1}}], 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r8, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 2m20.782556926s ago: executing program 2 (id=1341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x80, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0xf, 0x80806, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x1277, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb35f41281a7904d9996000100000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (rerun: 64) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000000300)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'pim6reg0\x00', @random="0100eb00"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008000000000000000000000000440005007b0e14aa000000000000000000000000000080003c00000000000000ffffffff00000000000000000000000000000000000300"/176], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000680)) (rerun: 64) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x68) landlock_restrict_self(r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f00000000c0)='./file1\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r7, &(0x7f0000000000)='./file0\x00', 0x2) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) bind$tipc(r3, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r8, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xffffffffffffffff) 2m17.508235801s ago: executing program 2 (id=1358): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b0"], 0x0) r2 = eventfd(0x1) syz_usb_control_io$uac3(r1, &(0x7f0000000580)={0xc, &(0x7f00000003c0)={0x20, 0xd, 0xf0, {0xf0, 0x3, "64f4646f46a666b7dad70a3bf8b70c61a12f60d97772b9a4d2a0677328deadb80ad2953a503db1415afd4e28812a8e7ff664a9c819c1e578b17869ce6bb5078be6834a1e8de046a255cbc70d536d6c3761deab49d717efcbd78c310d01c846857b282d1e0ec079795a1f0a5839deaa66605e61f751225f4d30bff26ef5d8856b75cdfdc5f50172e500870ebcc099116de7c85ec29882e799e28d10ade6be5e1083072b49dccf8a9fc967330568add3dfd2fb6c93c73a93558cceceef727a661a8f57d2db58da1a3a8f4e7f6e90288de68499649a7149bbc364c05c75385f3d6c865547115a519c28c5e0c01498e9"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000800)={0x24, &(0x7f00000005c0)={0x40, 0x5, 0x73, "fd9d055fdaaae9813db449ac42161b338154709857cd513ee915c34619607d28c34d095b16fa6182c11b29ae26cb6908d39a3ec0aed5a7011620b00322b7b3767ffb9208e45e464c2e54dbcb719f699062621f8b2f178120aa3714ef149864136f06cb86c126cbf3bf5eb519d27a55b7ebc09a"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000006c0)={0x20, 0x81, 0x1, '/'}, &(0x7f0000000700)={0x20, 0x82, 0x2, "9933"}, &(0x7f0000000740)={0x20, 0x83, 0x2, "75c8"}, &(0x7f0000000780)={0x20, 0x84, 0x4, "b7e23f96"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "c7ddb3"}}) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x77, r0, &(0x7f0000000240)="35242e9748b5fbfc96d1302b606db2c241097a8521006e5f3a3d8be5188a079b6340f5ef9c364ca88e1d3ce650f70a0c47ccabe86725d76e6b19f755f46f78b73f02272c29893cfdc9edf503f4394703dd5c112508ec28f907e0e2426d5e35fba5b32611eb11087fa3b92737750abdbf7743b4bbec2781bdc9c3d0305f05d3f158c308102f6cedc736738a3d8c651e68dca85125be496c25491fd749e8ed923d003b213ebd5714ed07a0735bdc3e2613f8985ce76d4248c6766a6ac0977bfbd3bf17a0d1dbeba73399ea214b495e418be1b2da0b09a4c47d28ad2d", 0xdb, 0x5, 0x0, 0x1, r2}]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44000, 0x0) syz_io_uring_setup(0x398a, &(0x7f0000000180)={0x0, 0xeaed, 0x0, 0x3, 0x3a5}, &(0x7f0000000840)=0x0, &(0x7f0000000880), &(0x7f00000008c0)) r5 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000280)={0x2e, 0x5, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xeec}}}, 0x0) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000900)={0x0, 0x6, 0x4, 0x1, 0x1eb, 0x0, r3}, &(0x7f0000000980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85dc, 0x4, 0x1, 0x254}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2ea, 0x4000, 0x1, 0xc4}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79bc, 0x4, 0x3, 0x3d9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e76, 0x10000, 0x0, 0x3c1, 0x0, r3}}], 0x4, &(0x7f0000002b80)={0x2e, 0x4, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xab3}, 0x0, 0x0, '\x00', {0x2, 0x5de, 0x0, &(0x7f0000001b80)=@buf_1k="232129fa649948f27e16e0bd5c9a538ca81065fafb33cd2c8c5d1fd809dcc37c8eeeb5deede20544a05cd76e47ca7d4c29dd5a3ac9889437f87271d7587a0b5948447233e8ca9667124e15e17ad9382e5d2c4b453fb46c77df3bfbd7ae819fe75f8a88e970c269542b0330e02ee96af5efc7be3597091fb48083420622c707251733ac73070bcaed90163b02c844599a7cad8386f9fcdcf79b5e41ce0aa129f56cecf47b634ef3d0b284db0a290cac28d322196f629429fcec029d0017b97a9bdbafcd84ec068e48def38f0a62ffe1296cc19025e36dad8c9150bc509f671ce681a6570d438a1d3c38bc38f8a42183c4680f48aef71c96a72a0807bb6871e5ea74d09b164b91b570c3af3573bc7dec3d166b44546ca75fd85769c9f4c1f6707b30fbb44460c7503697b887f13f2408e5c29fef3e1c8e4b925bf78806a47643f85658fbd3ab424f4c13505496c0a726e84951d655d32bd2a15faea4a2c81690e39d809d9522779d58b172775092fd5db54f631eb9f5e231f70cead797ef45432e343dd527334c151ee2e4e1c15067d8a591da0b87cc277524ae7000038e98c149b3fcc9bac24e6548f13eb34d9357fbb200676be73bd921dc9508ceeea0a5091f0b85aa9583f4106380751b0733f2cb9e774ecca786725eab6e0b65779b620a95f0c6b1af139178ef0ffb19155a8f4746db48a94a285d977bf6882051cee726724489851c5492197561de51e7827a301f2015db7ab97603f8d00e9179dd15565a209e7fac4a5819c1efb4743108a8e7569d9865873092db6ac31ecb3b9b1eb4b6007660ca4dc814ffdbe0058b59179a741a9267902040edee3c1ec752b643c24a09734c3bef1c1d50b83f6c013c1ba238f3027a98c9efa429b6d04b812c5579eba305420c9bfb26d253e4591e626c916c0b8e789fb0c7840d9053bb393c5bc020e9040df352638f8873c4517adcc7c71e76fe42096f2fc64583ec1561ce323e5b3d8851dba9a52d4cdfc6e9fcd70a9af9e7c9ba419fa3a890e7c37c3dcf3a18e2d224c2d3b2515fefc2aa0e2ebbf4fd8643734dababef89144d50c924b68484b332d0c30c991c2d4affd193495e7b0ffa945df8e7b07e8e0578ffde69a1fd160bcfee99c88147bfe2ec5f18f378bf3fc21cb0c4631af8e4aa11ab041399258e69fdf4a5a8124ecf1427fc16705d1ee21dc6492457e7e36f3f07e39b6dfc3f010f45b5a9b221d6b1b09e729284d0a280d9b54dc8b8e24ef475ba81342ef7ac97d234a746db5f19253be23dc18ba5353b3c8b93435e9ae68d82c9dceafd95a665e8c4076224e10013975de5e97be063430a72bf59e11f2404ee37176619906daa649f139464800c8877b7fb3da85e2be78ebf5b4146bddb9c3a37b75ed8411a38ce36bcf1ed8eb4c18b74c985cda5a7dfaabcdeab8ffb28760e5fc2ad9dc67d3eb0"}}, &(0x7f0000002c00)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r12 = getpid() syz_ublk_add_dev(r3, r4, r7, r10, &(0x7f0000002c80)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002c40)=@new_dev={0x2, 0xeda, 0x0, 0x0, 0x1000, 0xffffffff, r12}}}, &(0x7f0000002d00)) 2m14.451843078s ago: executing program 2 (id=1374): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mprotect(&(0x7f000008f000/0x4000)=nil, 0x4000, 0x1000006) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x3ac}) 2m14.15620598s ago: executing program 2 (id=1376): socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)) (async) socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r3, &(0x7f0000000180)='10000', 0x5) (async) write(r3, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f836296610085f57586b34070f43edf000000"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) r7 = io_uring_setup(0x41b, &(0x7f0000002300)={0x0, 0x9714, 0x80, 0x1, 0x397}) r8 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000000)=r8, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x4, 0xb, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x4, 0x7c, 0x4}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000000c0), 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000000c0), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r10, &(0x7f0000000280)='0', 0x1) (async) write(r10, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) 2m13.374014691s ago: executing program 32 (id=1376): socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)) (async) socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r3, &(0x7f0000000180)='10000', 0x5) (async) write(r3, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f836296610085f57586b34070f43edf000000"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) r7 = io_uring_setup(0x41b, &(0x7f0000002300)={0x0, 0x9714, 0x80, 0x1, 0x397}) r8 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000000)=r8, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x4, 0xb, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x4, 0x7c, 0x4}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000000c0), 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000000c0), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r10, &(0x7f0000000280)='0', 0x1) (async) write(r10, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) 9.815481484s ago: executing program 0 (id=1927): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040641122060000000000010902270001010080fa0904000003ffffff0007050102000200070581020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x22, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x1, 0xbe, 0x0, 0x100, 0x8000000000000000, 0x8, 0xd2, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) flock(r2, 0x2) epoll_create1(0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) creat(&(0x7f0000000280)='./file0\x00', 0x124) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) 6.387772365s ago: executing program 5 (id=1939): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x301400, 0x4e) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7c, 0x2, 0x6, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x204, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0xe, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x3fe, 0x7d, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x0, 0x129432e6, 0xc5, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x804e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0xfffffffe, 0xffffffff, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x6, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4, 0x5, 0x3, 0x303c, 0x3ef, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800403, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x0, 0x3, 0x7ff, 0x12b, 0xb, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x802006, 0x80a2f0, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x101, 0xce7, 0x1fd, 0x9, 0x57, 0x4, 0x3, 0x2, 0x10000, 0x4, 0x5fff, 0x10002, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d613, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x10, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x80) fcntl$setstatus(r3, 0x4, 0x46400) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a310000000014c000048008000140000000040800024000000064080007006e61740040000000060a01040000000000000000010000000900010073797a30000000000900020073797a31000000001400048010000180090001006d61737100000000140000001100010000000000000000000100000a"], 0xd0}}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff004) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4004ae52, &(0x7f00000000c0)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0f02, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000400)=0xffffffff) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 5.437609443s ago: executing program 0 (id=1942): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x28, 0x1d, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x32}, [@NDA_LLADDR={0xa, 0x2, @random="1300"}]}, 0x28}}, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x0, 0x200000000002}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) r10 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc0f8565c, &(0x7f0000000040)={0xfffffffc, 0xd, 0x2, {0xb, @vbi={0x5, 0x0, 0x4, 0x41415270, [0x1d, 0xde], [0x1ff, 0x998], 0x1}}, 0x4}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 4.888676725s ago: executing program 4 (id=1944): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) (async) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) syz_io_uring_complete(r1, r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 4.399775862s ago: executing program 4 (id=1946): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x4006d3a, 0x80, 0x1, 0x279}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xb0d, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x103}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fe3, 0x1000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x86a9, 0x4000, 0x0, 0xfffffffb}}], 0x1, &(0x7f00000003c0)={0x2e, 0x10, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x0, 0xdb9, 0x0, 0x0}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000020c0)=""/4116, &(0x7f00000003c0)=0x1037) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r8, &(0x7f0000000140)=""/16, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r12 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) setsockopt$inet6_group_source_req(r12, 0x29, 0x2d, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioperm(0x0, 0x6e, 0xe) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.358350385s ago: executing program 3 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)={0x14, 0x6d, 0x1, 0x80000000, 0x25dfdbff, "", [@nested={0x4, 0x83}]}, 0x14}], 0x1, 0x0, 0x0, 0x800}, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f00000000c0)='?', 0x1}], 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) (async) syz_emit_vhci(0x0, 0x0) r3 = socket(0x2, 0x3, 0xff) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000fc0), 0x20000, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000001000)=0x5) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x840) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (async, rerun: 64) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000002074640000f00000003552bde5c064d6c05335126622299fa7993d5f951935ef", 0x25}], 0x1}, 0xf5ffffff}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)}}], 0x2, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 4.096840634s ago: executing program 5 (id=1948): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r1, &(0x7f0000000200)=""/226, 0xe2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000200", [0x8, 0xffffffff9673e35d]}}) 3.848796784s ago: executing program 5 (id=1949): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e0300040200010905000000000000000905feff"], 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000280), 0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8c5}, 0x20040050) 3.659697812s ago: executing program 0 (id=1950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x71}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 2.801413509s ago: executing program 1 (id=1954): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x1c) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000180)={r2}) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000001c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r4, 0xc0106440, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000240)}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000300)={'pim6reg1\x00', 0x6}) write$sequencer(r3, &(0x7f0000000340)=[@x={0x94, 0x0, "afe14dfc1344"}, @generic={0x8}, @s={0x5, @SEQ_MIDIPUTC=0xbf, 0x1a, 0x5}, @generic={0x80}, @e={0xff, 0x0, 0x6, 0xf5, @SEQ_CONTROLLER=0xfe, 0xff, 0x4, 0x1}, @s={0x5, @generic=0xaa, 0x1d, 0xfd}], 0x1a) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x2a, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x71a, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0xb5}}}, &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0x2, 0x67d8}}, './file0\x00'}) syz_ublk_setup_queues(r3, 0x0, &(0x7f00000007c0)={0x0, 0x46a0, 0x4, 0x2, 0x326, 0x0, r1}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x994a, 0x200, 0x1, 0x396}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f2a, 0x100, 0x0, 0x333, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6b3c, 0x10, 0x2, 0x87c7, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdfc0, 0x80000, 0x3, 0x381, 0x0, r1}}], 0x4, &(0x7f0000001ac0)={0x2e, 0x8, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x78}, 0x0, 0x0, '\x00', {0x2, 0x5cb, 0x0, &(0x7f0000000ac0)=@buf_1k="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"}}, &(0x7f0000001b40)) syz_ublk_setup_queues(r1, r5, &(0x7f0000000480)={0x0, 0xd1fd, 0x1, 0x1, 0x3d, 0x0, r3}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8ef, 0x8040, 0x0, 0x18a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ba5, 0x4000, 0x2, 0x31d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c9b, 0x0, 0x1, 0x2c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x296a, 0x40, 0x2, 0x391, 0x0, r6}}], 0x4, &(0x7f0000002b80)={0x2e, 0x46, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2bf}, 0x0, 0x0, '\x00', {0x4, 0xd6, 0x0, &(0x7f0000001b80)=@buf_max_buf="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"}}, &(0x7f0000002c00)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000002c40)={{0x1, 0x1, 0x18, r7, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioprio_set$uid(0x3, r10, 0x2000) sendmmsg$alg(r3, &(0x7f0000003400)=[{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002c80)="ebc8da6796d19f3865586453c8f66699e4b4ec3f6900bd830f6bf6f5aa4738c78d367421481d6ae3620c0429b6125d44ea4d4c8ab821bc545e016c040b4a33ca3e1d7261c5eed5f34d3903bce0b2f6f35c6c31f2752bfea7c0a511a15077b119c975319578e39184bdb49a60a6fac07b4297cb6251dc0ff809ba244491359d7847a4146bfa28fe65a2d148189b32a764ab26b3c511fe5f26fd5be8c3cff23c206c0dc7685c9eb27e65", 0xa9}, {&(0x7f0000002d40)="043cd2195b1fcdd06d670c0e4dd526160b2616abad738be3032742149f946e93ba2f720ef3b8abdf4fee9f682a651a8047c3dfb40d1d170983afbbdf88ed694a301f02", 0x43}, {&(0x7f0000002dc0)="80008e7855dd9f35d5fa65d3e13eeb2de38bc2362dbbaf731c7695f8ee7ff8606df875d5f30b24d6e13701949968cd718d20bc2fc9fa854631c83101e7afa8f9a0e1a0b553f6dd71b17d644f864ca09035243ad9954118b991f4b19807f7f72b93d9a8", 0x63}], 0x3, &(0x7f0000002e80)=[@op={0x10}, @op={0x10}, @iv={0x6c, 0x117, 0x2, 0x5b, "90c0b621014b28f5be560965362ed9a7c8f58c4422e9c32a61875482fa80cf698694264edc84ff922fbf7d1637dd4421d124241a2b05f0bb52b09e0405a497f89a0700dc8b59cb611b0614c783b8739f25fdc1d27fdd4bc6fa5f8c"}], 0x8c, 0x20000080}, {0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002f40)="5ff5ce8f411e48050a4d0e88812d71002ba690625ab71a77402531cf573b307935a520c681b664841c49a9de37999ae027471bffa852d6e8de472760", 0x3c}, {&(0x7f0000002f80)="b3bee268e4748f38c419db12ea23d9ab4c212dedbdf20cf894221f6435e14c0bc65c78eb5cd1bed8e6726ebadc877624b139554f122ed1b81db1f1d7d0624a2b7fdd004af53e4a0e368f7ad91679a74f9442f3bfd1932aab4744110a9f9eb62d99af235d2382", 0x66}, {&(0x7f0000003000)="13d02218f7f56f2e85e440da5776f612ac5899494c9fd687a5", 0x19}, {&(0x7f0000003040)="8439f026dbf228bae09049c6fafd9b8899a333f7c5725e1de7e5a3b1460c0b36f81ac3f742c8a5ee2da9421234cf89f918315630aaba756cdf83468675a1245f9921a8819ba79dfca1751fbbb5a69ae3fb3c46466bac1f56a11c5f1865d6cc43276cb6799d3e811a92262d6c9aa1b2e82fdd5517038102bd213bd66cf98366e8cf15bae3f72c1c4e77980e7c5f6b56f4c778b77ad9b870817edd091e5b14e5999c41fa97fd4c847eb52810eb7a69960266556d93c5fb5b2327b795263f60b9cf12bd490efa5026accbc81e0cbec92e", 0xcf}, {&(0x7f0000003140)="81", 0x1}, {&(0x7f0000003180)="edf68c0fa03d143b542dc908009e5369e7ecd79f4ac6017d94eb443f6bc214981653e028f657dd2edee0bbf72b4a088aca4ac6b0ee5cd34602d6f3bf128567", 0x3f}, {&(0x7f00000031c0)="af922951bef1292e6141afdea900bd4b5419fbe25a7d4fdd2d53aa84ae63c9f0162268981c9a06b7d2c0fa4cbdeedc5f3009e5cddaf79ca42f02a83da7ea8322fb34a4de39cbde78271c0e6b6b86d724475d6f10b66adb71db2006bd7979cadae5f342348162246b5bce0352d8d601e009e73635f98db937b442b958c6d089013895d56d722efb98120f7ec1c8e741f1aeefde34c4eb774051b7b93bbc2f1bdcbae6a245909b3017b9cada8adc6fd993bcc197bd6e5a5f6122", 0xb9}, {&(0x7f0000003280)="5522b1b394317cddef26ada3bcb8c69a16042a11d0375bc26a02f94639c29d22beb89fc839e265a7", 0x28}], 0x8, &(0x7f0000003300)=[@iv={0x2c, 0x117, 0x2, 0x1c, "25dd30ce759dca04d92fad2c400cb17415dd3be05a2c95f130cc5d1e"}, @iv={0x30, 0x117, 0x2, 0x20, "01f6a200410a2561fe276b447ec3bc590c89f4f0b49f5c0181b2aa05b8a0d219"}, @assoc={0x10, 0x117, 0x4, 0x2}, @op={0x10}, @iv={0x6c, 0x117, 0x2, 0x5c, "745e2dc9d2a6a4573729fe07918b407cc621de1f28842fd0a564b245fb9fdbd454781b5a13d3ddc9a4bf09ea0fb51cc1a0d38b9f1848851f67f784270676030a5b3d9db1ffad0c4e43e0644f6eabd71ded53595dc354ff64cd2a7657"}], 0xe8, 0x8000}], 0x2, 0x8000) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000003440)=0x1) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000003480)) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000003640)={0xc, &(0x7f0000003500)={0x0, 0x0, 0xbc, {0xbc, 0xe, "afead88bf19c545f2b198f66fb53c9fa82102e628d25f5b3feee968c4cbb43a13de8e2ed379634023b3ca798ab8dc559abdc5dd7a177fb4b48b4279aa3e51184e881566a255ce9dbdc2d1c5a3c30565914db306ea2fed9ed6465d14252bae0f1a59078db8a54f7db96b9900403b6b9cb39bdd39b14f8d805cc69326c9fce273523c6ac4f107e19ecc022110ac12efd97febc9be8ad74e9491d49a373c21d55029b6b3f8386c95f1b358956f2843813e2c4c16f460c84407e1ebe"}}, &(0x7f0000003600)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "b3c4aad043182fa2451cd49f0bafdf2ef860bab40dc035e105c8271efa0cf8713034936ddd73a9be"}}}, &(0x7f0000003c00)={0x10, &(0x7f0000003680)={0x0, 0xf, 0xf3, "793498cd0f1aa24d91ed4c416f16cb8a1ff13b938e5e7c42eca80a95a18c59b11eae5dec1d9973efc81e3c6f22d832df1521577191ee15432f0974093c53ec0dff08cd90c4a63ea0dfe44f637b6a95fca0da5961f387a101004c013761184fcb08ef61c30b8a595d67eda46b3650bb8b9b37ef0abac1830d8473bbd793a5d18200ec521e47db3854c15cc342bf2a7273f7167a8bb0d222d33eb8f494f378972810f50369db3d7f8568eff7d03ea213d311ac7b7bd55dc56a94a13c7e86ca3ce4e8380e5abb115eaa6aa09327b6a28b1305156f4f333b804ebb8daad7fb4ac9383a9d57a8bb20defa494c912da56c08f7ed2485"}, &(0x7f0000003780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000003bc0)={0x21, 0x0, 0x2, "25b8"}}) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x29, 0x7, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r11, &(0x7f0000004100)=[{&(0x7f0000003c40)=""/158, 0x9e}, {&(0x7f0000003d00)=""/126, 0x7e}, {&(0x7f0000003d80)=""/177, 0xb1}, {&(0x7f0000003e40)=""/99, 0x63}, {&(0x7f0000003ec0)=""/137, 0x89}, {&(0x7f0000003f80)=""/242, 0xf2}, {&(0x7f0000004080)=""/73, 0x49}], 0x7) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004180), r9) sendmsg$ETHTOOL_MSG_FEATURES_GET(r12, &(0x7f0000004700)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004580)={0x120, r13, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000081}, 0x24000014) 2.443100326s ago: executing program 3 (id=1955): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x75111, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)}, 0x80) 2.247650199s ago: executing program 5 (id=1956): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r4, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r3, 0x0, 0xfe00}]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x8040480) r5 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {r5, 0x1400}, {0xffffffffffffffff, 0xd8b46dc2b02f0c3}, {r5, 0x20}, {r5, 0xe4a2}, {0xffffffffffffffff, 0x8}, {r0, 0x8}], 0x7, 0x0, 0x0, 0x0) 2.157049945s ago: executing program 4 (id=1957): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000440)={0x2, @pix_mp={0x100, 0x2, 0x34424752, 0x6, 0x1, [{0x8, 0x4685}, {0x7fff, 0x9}, {0x2, 0x9}, {0x494, 0xffffffff}, {0x3, 0x10}, {0x2, 0x101}, {0x94, 0x10001}, {0x3, 0x7}], 0x2, 0x81, 0x0, 0x0, 0x7}}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffd}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8880}, 0x80) 2.058936811s ago: executing program 4 (id=1958): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r1, &(0x7f0000000200)=""/226, 0xe2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000700", [0x8, 0xffffffff9673e35d]}}) 1.848258998s ago: executing program 4 (id=1959): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 32) syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca23, 0x10000, 0x3, 0x212}, &(0x7f0000000100), &(0x7f0000ff4000), 0x0) (rerun: 32) read(r0, &(0x7f0000000140)=""/194, 0xc2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x4, 0x400000) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) 1.471434488s ago: executing program 3 (id=1960): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)=':{,&!(\x00', &(0x7f0000000080)='-\x00', 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x42, &(0x7f00000000c0), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x84) creat(&(0x7f0000000300)='./file2\x00', 0x133) unshare(0x8000680) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 1.369660409s ago: executing program 1 (id=1961): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161840, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r1, 0x0, 0x3f) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000001800)={0x1, @win={{0x2, 0x7fffffff, 0x42474752, 0x5}, 0x3, 0xf, 0x0, 0x4, 0x0, 0x8}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xb, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000780)={&(0x7f0000000280)=@llc={0x1a, 0xffff, 0x1, 0x3, 0x6, 0x6, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="2c14e5e1a7a1d8b00c73309c2b129817e3e8fd6f526695aa0b3333985c36563edd6528cafc251a682f40534a54fe8c6c9662ab5ce2b453b1ce97988c7a22f3b6b5945c7d837ebb03f21c4d7a41e5ebc0cff6becda04a37ca136631875ca8321db056b407b9ed7a66dcff1173c1f3bb3a536d124d6a534a37410d8e80c523d0444447d9aeebceabfb8891e435b5dd1467667eb297645ef8", 0x97}], 0x1, &(0x7f0000000680)=[{0x98, 0x186, 0xfffffffd, "6de6fc2a53a124525af425cacc1a20afc2df0ecc99a46d86ed7b02687eca32579630b72a4e1c20a68fc91b15e171ce9e6e2c043c73302b14aad792b038797dd4f17a1e679aa96768932d6643b4dc03902b987ad9bad9c985338b08414d1062a0f74b48c2fcb8149aaeb33939841deb9e5534175c39b5c302623557263cdc6c97fb4cec45c05a3b234893"}, {0x34, 0x110, 0x5, "6c9fa670d1a47f2c1233821ee2eb593cf2469206996ee6021ce80ed8dbdb1505da9bc896ac"}, {0x34, 0x6, 0x3, "48c2380d187ee5aa8ff3dd693f31e9c62758ffa143ac1a65de09b8d4880628afaf8c6928754213"}], 0x100}, 0x8000) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000007c0)={{0x2, 0x4e23, @loopback}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @multicast2}, 'ip6gretap0\x00'}) r13 = dup(r11) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r13, r10, &(0x7f0000000180)={0x0, 0x556b, 0x0, 0x0, 0x255}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0xfe78b36d55c77b99, 0x2100, 0x2d8, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x32e, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0xfffffffc, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r9, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) r14 = socket(0x2b, 0x80801, 0x1) connect$inet6(r14, &(0x7f0000000100)={0xa, 0x8002, 0x10003, @loopback, 0xfffffffe}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r14, 0x894b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 1.23604471s ago: executing program 3 (id=1962): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000300), 0x7797, 0x3) 1.088982407s ago: executing program 3 (id=1963): syz_emit_ethernet(0x26, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}], 0x38) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000002c0)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x1800002, {0x77359400}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}, 0x3}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r3, 0x0) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000001800)={0x1, @win={{0x2, 0x7fffffff, 0x52424752, 0x5}, 0x3, 0xf, 0x0, 0x4, 0x0, 0x8}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="b3afc04750fe930bff23fa12b415be7416cb3176943e3974920f5309ef9e1b32969f59b437108e14ed6f1860723774f1893b7f2ecd8d8717e68d2c57ba8af3e2a6cf2790e6291b07c1055ed9bd89fc8dc0c36d7dec0f4ec80c3633fa047195b4a57169243e8de79b2417ad69735563c39980d98ee6bd0280d7a45738d03f1107c66297096acd9d077ba8c2d04b611cca15cc3cbec814ec798d", 0x99, 0x7) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000d4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x28, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) 945.627431ms ago: executing program 4 (id=1964): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) r2 = syz_io_uring_setup(0xb34, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) (rerun: 32) io_uring_enter(r2, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) (async, rerun: 32) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x4001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0x7f, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x95}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0xe, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (rerun: 32) 767.093306ms ago: executing program 5 (id=1965): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x180840f, &(0x7f0000000d00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9eef"]) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xd08, @mcast1}, 0x1c, 0x0}}], 0x1, 0x4004885) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000400)={[&(0x7f0000000000)='/dlv/quse\x00', &(0x7f00000000c0)='fuse\x00', &(0x7f0000000200)='&)&\x00']}, 0xbc5c5f6944b9344d) r6 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x7, @sliced={0x1, [0xf, 0xa, 0x7, 0x0, 0xc000, 0x7f, 0x1, 0x0, 0x2, 0x829e, 0x8000, 0x3, 0xfff7, 0x7, 0x4, 0xe67e, 0x1, 0x40, 0x4, 0x5, 0x9, 0x93, 0x5, 0x43ae, 0x2, 0x7, 0xf5b4, 0x807, 0xe, 0x4, 0x9, 0x7, 0x2, 0xd, 0x0, 0xcbd, 0x6, 0x4, 0x800, 0x100, 0x1b0, 0x2, 0xa0e1, 0x0, 0xff, 0x7, 0x1, 0xc73], 0xa}}) write(r6, &(0x7f0000000180)="01010101", 0x4) close(r6) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000280), &(0x7f00000002c0), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r7], 0x448}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x0, 0x6}) 579.698348ms ago: executing program 5 (id=1966): read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af41900090549258884050801060c8b631b7507250102020700090505", @ANYRESOCT], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x400008}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect$midi(0x0, 0x6c, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x499, 0x103c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x4, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x0, [@ms_header={0x7, 0x24, 0x1, 0xe, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0x6, 0x1, 0x2, {0xa, 0x25, 0x1, 0x6, "fca173a45635"}}}, {{0x9, 0x5, 0x11, 0x10, 0x10, 0x8, 0xc5, 0x4, {0x5, 0x25, 0x1, 0x1, "d1"}}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x5, 0x5, 0x3, {0x9, 0x25, 0x1, 0x5, "b1893c7734"}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x6, 0x0, 0x0, 0x71e898637c892bea, 0x1}, 0x1b, &(0x7f0000000140)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0xa, 0x24, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x97, 0xc1, 0x3, 0x60}]}, 0x8, [{0x1c, &(0x7f0000000180)=@string={0x1c, 0x3, "710b2db31d339047d10f52a16248cbd41782ed3d3667fcdec3b3"}}, {0xfb, &(0x7f00000001c0)=ANY=[@ANYBLOB="fb03f443f64a87e7ca363f6c2c35a705db651a77351e2947d3e9d2d7c8bde30dcb42cb9f5e637507748d5ed4b961370352ca75cd6aafb138e093eaf494215f0721ba9d5d6a9176023fdebd526e21189f28a4d7f1526d762f9e6465d4835e59b2d62956380a8c0750e52603cdaaa758db97899d0f15c883c29cd665f7d995ca1702cee31d85225f72a6667802000000000000004fc05f8f336e7ca1f5fd8d5264c50d9c696866359d0eefd5a17884a897013d249058460fce4242575365690e5823e371528b84e776c7c27f0a580aa82c7fea3255fd8ad09014e9e9e8300000000000"]}, {0x24, &(0x7f00000002c0)=@string={0x24, 0x3, "186f49a6011de8357a4dadb4182cc716015109b7d01564b92c64984ba5cf65412c6e"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x422}}, {0xe8, &(0x7f0000000340)=@string={0xe8, 0x3, "b6a7ebe46f5af57202bfa7b788a0ff68c921262f2085497f4007643d5f97201fd1d8dd4a436460b446daa2c8a4f39d7d16c919a32f9c1808f9425d1bb3e60b19520776a3b9efc1565349cdad6e160fa64440b7a83d6d327f5fd67caad5370675d1a3664b2047a40fe47fc57c708818821a3f3ed070026adf117ffe72e6a5388a289de6d08212aeaf37bedaf58cc694d293e77f861b7a12a1ec8f93eaf8ec857f6d290de40f352e0bd99827cfb668552678a67f667b2e738e755004446928838d7131395945303319bce1bb8bc53caf84e67a579ea7a027f3e6cd47951855c9eb61a8b7524ea1"}}, {0x86, &(0x7f0000000440)=@string={0x86, 0x3, "ba50886553fdf894501dde0653ffac0ce1e6f4f60ec17e3eb9ee4a820ad81f59763605fff75b163d52e7e165232520f338fe5ab051092b6af204370836bd776f611b224aeb7e195ee83f865aab3c2da4d9071020d3351ca57fbea7d13731411546ed8bafc8fc5fd3b96e584e24cbbed9a2f8e71e8333a314710975708449d4a4e75a8670"}}, {0xe9, &(0x7f0000000500)=@string={0xe9, 0x3, "6d804fc5ca81dc2f0de68a5861d892acf289a19384e87151df5dd4d6ef8d71692fdbc485d88ef7e48294167af896b52a2d7455aa2a8a9fa9b37bae2255d2eb89e2c6b4f98952b3c6fdb85f2fbc42be81355e4bf9b0d5c2ababe2233643987a49229980f3794b142a076632ac1238de1cab640a90591b6a5585edf6426f0940b98f7231dd0a22fe24eab4a477dc26e65ca963edd4964204604750034f32a5f090457231f8d29a9f63ce40ae2c764648925071b1f6370e09db6804efe4f47844d93cab38261ef3f1bd0fcf3b77b2941baff2f656700ff559097152b6ef3877491448f8233b824d31"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x827}}]}) 518.945639ms ago: executing program 0 (id=1967): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8800, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 510.025665ms ago: executing program 1 (id=1968): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000440)={0x2, @pix_mp={0x100, 0x2, 0x34424752, 0x6, 0x1, [{0x8, 0x4685}, {0x7fff, 0x9}, {0x2, 0x9}, {0x494, 0xffffffff}, {0x3, 0x10}, {0x2, 0x101}, {0x94, 0x10001}, {0x3, 0x7}], 0x2, 0x81, 0x0, 0x0, 0x7}}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffd}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8880}, 0x80) 427.10373ms ago: executing program 0 (id=1969): r0 = open(&(0x7f0000000200)='./file0\x00', 0x101, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap$dontunmap(&(0x7f00007dd000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000df6000/0x4000)=nil) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000240)={0x2000, 0x19000, 0x1}) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x9, 0x0, 0x1, r6, 0x4}) sendto$inet6(r3, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2) write$uinput_user_dev(r7, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0xebc0, 0x9, 0x1000, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x7, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x2006, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x84d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x8, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0xff, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x8, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x4, 0xd, 0x402]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x4, 0x69) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="00fb4e05098ef1181b76fd0d3a92e3910d899780cf1148ae849bd2f03fa8b3df4c67b87d4a159fdeaad8ca238011f352af244a24d8195bc3a5fc459ccc7ee298341dbcd344f26e"], 0x4e, 0x2) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 425.663583ms ago: executing program 1 (id=1970): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r1, &(0x7f0000000200)=""/226, 0xe2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000800", [0x8, 0xffffffff9673e35d]}}) 267.726125ms ago: executing program 1 (id=1971): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x4, 0x1000, 0xfffffffa, 0x10000, 0x8002, 0x3}, 0x1c) 194.605808ms ago: executing program 1 (id=1972): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffab325f8d638100140800000000fffc00650000442b907f0008017f0000010000000000"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, @in={0x2, 0x4e21, @remote}], 0x2c) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280448c, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000Lus\x00r_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000000600,allow_other,\x00']) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3) syz_emit_ethernet(0x19, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x5, 0x1}}, {@x25={0x805, {0x1, 0x4}}}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x1800002, {0x77359400}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}, 0x3}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r7, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="b3afc04750fe930bff23fa12b415be7416cb3176943e3974920f5309ef9e1b32969f59b437108e14ed6f1860723774f1893b7f2ecd8d8717e68d2c57ba8af3e2a6cf2790e6291b07c1055ed9bd89fc8dc0c36d7dec0f4ec80c3633fa047195b4a57169243e8de79b2417ad69735563c39980d98ee6bd0280d7a45738d03f1107c66297096acd9d077ba8c2d04b611cca15cc3cbec814ec798d00ca", 0x9b, 0x7) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x4, 0x40000, 0x1000, &(0x7f00009df000/0x1000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x80000038, 0xfff, 0x3fffa, 0x180, 0x2, 0xfffffffffffffffe, 0xf1, 0x0, 0x3, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xeeee8000}) 171.520027ms ago: executing program 0 (id=1973): r0 = creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000002680)={0x0, 0x2, 0x0, 0x180000, 0x1}, &(0x7f00000026c0)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002700)={r3, @in={{0x2, 0x3, @local}}, 0x3, 0x7f, 0x0, 0x8001, 0xa3, 0x9, 0xc}, &(0x7f00000027c0)=0x9c) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x42) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x20004040) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x64159223755480d7, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe}, {0x1, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x205f) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000002800)={0x2, 0xffffffffffffffff, 0x1}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001070103ffb8040202400001028008090400000100000000090000022000000003"], 0x0) 0s ago: executing program 3 (id=1974): write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)={0xc, {0x94, "42b99fa8fced8f0db779744ec24602b9fea9467440c8effc35e95be1e068e524c0a042dc07f4e65ae223772058de5ef43c0c1021711900500a7dab0c47ece64eb89064d22e2225c9f4525a15d1098b498e13c353870b68209b327ba4186413030b2960d4cfd82ae10a6075bf900b87edf3251a17a23f76c1cce2b677f7c2a4b14acd1038ffea60b5ea9683bd2eee420469027bbe"}}, 0x9a) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) r0 = openat$uhid(0xffffff9c, &(0x7f0000001100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001140)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x14, 0x9, 0x6, 0x3, 0x9, 0x40, "863fc03d51ef81c74e699bc1c6967e301a16bd0a"}}, 0x12c) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9e5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001400)={@local, @multicast1, 0x0}, &(0x7f0000001440)=0xc) sendmsg$nl_route(r1, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)=@ipv6_deladdrlabel={0xac, 0x49, 0x400, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, r3, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x841) epoll_pwait(r1, &(0x7f00000015c0)=[{}], 0x1, 0x7, &(0x7f0000001600)={[0xb4, 0x80]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000001640)=0x1) r4 = syz_open_dev$sg(&(0x7f0000001680), 0x3ff, 0x4000) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000016c0)) mknod$loop(&(0x7f0000001700)='./file0\x00', 0x800, 0x1) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000001740)=0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@bridge_newneigh={0x24, 0x1c, 0x400, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x0, 0x51, 0x5}, [@NDA_NH_ID={0x8, 0xd, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000001880)={0x4, 0x1, 0xac4, 0x0, 0x1}) r5 = socket(0xf, 0x4, 0x4) r6 = openat$incfs(r1, &(0x7f0000001900)='.log\x00', 0x501000, 0x1a0) preadv(r6, &(0x7f0000001ac0)=[{&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/183, 0xb7}], 0x2, 0x10001, 0x200) file_setattr(0xffffffffffffffff, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x1800, 0xff, 0xffffffff, 0x8, 0x1ff}, 0x18, 0x400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x1f, 0x5, &(0x7f0000001b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x7, 0x69, &(0x7f0000001c00)=""/105, 0x40f00, 0x14, '\x00', r3, @fallback=0xa, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x6, 0x0, &(0x7f0000001c80)=[{0x1, 0x1, 0x4, 0x7}, {0x0, 0x2, 0x7, 0xa}, {0x3, 0x5, 0x6, 0x9}, {0x4, 0x4, 0x8}, {0x2, 0x5, 0x4, 0xa}, {0x5, 0x5, 0x0, 0x5}], 0x10, 0xffea}, 0x94) read$FUSE(r6, &(0x7f0000001dc0)={0x2020}, 0x2020) r8 = dup2(r7, r6) lseek(r8, 0x7, 0x3) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000003e00)={'filter\x00', 0x0, [0xd5b8, 0xfff, 0xfffffffb]}, &(0x7f0000003e80)=0x44) close(r1) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000003ec0)={{0x2, 0x4e22, @empty}, {0x306}, 0x8, {0x2, 0x4e23, @local}, 'veth0_virt_wifi\x00'}) mq_timedsend(r1, &(0x7f0000003f40)="10a1a797733fa948ec5bdec085db79747345c112fc183be0486bdc9e106b107ecd063f35982e1823c98fc8fad53b3f5f02d299a6bab75f", 0x37, 0xfff, 0x0) openat$tun(0xffffff9c, &(0x7f0000003f80), 0x1, 0x0) kernel console output (not intermixed with test programs): r -71 [ 449.881317][ T945] usbhid 2-1:0.0: can't add hid device: -71 [ 449.881490][ T945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 449.909003][ T945] usb 2-1: USB disconnect, device number 114 [ 450.017366][ T5619] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 450.035844][ T5687] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 450.147584][ T5619] usb 6-1: device descriptor read/64, error -71 [ 450.199846][ T5687] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 450.201069][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.210671][ T5687] usb 1-1: config 0 descriptor?? [ 450.224590][ T5687] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 450.258015][ T5619] usb usb6-port1: attempt power cycle [ 450.296266][T12340] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1640'. [ 450.444136][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.444769][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.598897][ T5619] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 450.619227][ T5619] usb 6-1: device descriptor read/8, error -71 [ 450.841636][ T25] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 450.857936][ T5619] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 450.883024][ T5619] usb 6-1: device descriptor read/8, error -71 [ 450.963930][T12353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.964336][T12353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.968462][ T5687] gspca_sunplus: reg_w_riv err -110 [ 450.968549][ T5687] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 450.989283][ T5619] usb usb6-port1: unable to enumerate USB device [ 451.006240][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.010813][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.010839][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 451.010881][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.013239][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.013263][ T25] usb 2-1: Product: syz [ 451.013276][ T25] usb 2-1: Manufacturer: syz [ 451.013289][ T25] usb 2-1: SerialNumber: syz [ 451.024764][ T25] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 451.024812][ T25] cdc_ncm 2-1:1.0: bind() failure [ 451.240822][T12349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.242876][T12349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.244109][ T5687] usb 2-1: USB disconnect, device number 115 [ 451.561676][T12363] create_pit_timer: 73 callbacks suppressed [ 451.561698][T12363] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 452.462173][T12384] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1648'. [ 452.506430][T12387] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 452.707698][ T25] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 452.735032][ T5624] usb 1-1: USB disconnect, device number 13 [ 452.777740][ T5680] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 452.858866][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 452.862152][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.862173][ T25] usb 2-1: Product: syz [ 452.862183][ T25] usb 2-1: Manufacturer: syz [ 452.862193][ T25] usb 2-1: SerialNumber: syz [ 452.864641][ T25] usb 2-1: config 0 descriptor?? [ 452.879224][ T25] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 452.887605][ T1234] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 452.928430][ T5680] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 452.929506][ T5680] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 452.929527][ T5680] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 452.929543][ T5680] usb 6-1: config 0 interface 0 has no altsetting 0 [ 452.932471][ T5680] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 452.932489][ T5680] usb 6-1: Product: syz [ 452.932498][ T5680] usb 6-1: Manufacturer: syz [ 452.932507][ T5680] usb 6-1: SerialNumber: syz [ 452.935251][ T5680] usb 6-1: config 0 descriptor?? [ 452.949713][ T5680] usb 6-1: selecting invalid altsetting 0 [ 453.074722][T12384] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 453.081490][ T1234] usb 5-1: Using ep0 maxpacket: 8 [ 453.092341][ T1234] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 453.106733][ T1234] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 453.106756][ T1234] usb 5-1: config 0 has no interface number 1 [ 453.106786][ T1234] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.106799][ T1234] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 453.106815][ T1234] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 453.106852][ T1234] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 453.106867][ T1234] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.106889][ T1234] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 453.106903][ T1234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 30768, setting to 1024 [ 453.106918][ T1234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 453.112400][ T1234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.112425][ T1234] usb 5-1: Product: syz [ 453.112464][ T1234] usb 5-1: Manufacturer: syz [ 453.112478][ T1234] usb 5-1: SerialNumber: syz [ 453.119181][ T1234] usb 5-1: config 0 descriptor?? [ 453.121040][T12390] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 453.126315][ T1234] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.127545][ T5624] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 453.133490][ T1234] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.288638][ T5624] usb 1-1: Using ep0 maxpacket: 8 [ 453.291110][ T5624] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 453.292785][ T5624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 453.292822][ T5624] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 453.292890][ T5624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.306546][ T5624] usb 1-1: config 0 descriptor?? [ 453.379045][ T945] usb 6-1: USB disconnect, device number 25 [ 453.394937][ T25] sonixb 2-1:0.0: Error reading register 00: -110 [ 453.490596][ T1234] usb 5-1: USB disconnect, device number 11 [ 453.654827][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 453.753280][ T5624] kone 0003:1E7D:2CED.0027: item fetching failed at offset 6/8 [ 453.756712][ T5624] kone 0003:1E7D:2CED.0027: parse failed [ 453.756794][ T5624] kone 0003:1E7D:2CED.0027: probe with driver kone failed with error -22 [ 453.935705][T12406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1654'. [ 453.939182][ T5624] usb 1-1: USB disconnect, device number 14 [ 454.038775][ T945] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 454.063421][T12410] input: syz0 as /devices/virtual/input/input57 [ 454.070092][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1656'. [ 454.188148][ T945] usb 6-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 454.189233][ T945] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.189264][ T945] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.189305][ T945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.339332][ T1234] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 454.487583][ T1234] usb 5-1: Using ep0 maxpacket: 32 [ 454.491255][ T1234] usb 5-1: unable to get BOS descriptor or descriptor too short [ 454.491310][ T1234] usb 5-1: New USB device found, idVendor=0572, idProduct=1349, bcdDevice=ac.54 [ 454.492311][ T1234] usb 5-1: config 0 has an invalid interface number: 170 but max is 0 [ 454.492336][ T1234] usb 5-1: config 0 has no interface number 0 [ 454.492366][ T1234] usb 5-1: config 0 interface 170 has no altsetting 0 [ 454.494356][ T1234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.494379][ T1234] usb 5-1: Product: syz [ 454.494394][ T1234] usb 5-1: Manufacturer: syz [ 454.494408][ T1234] usb 5-1: SerialNumber: syz [ 454.496809][ T1234] usb 5-1: config 0 descriptor?? [ 454.595888][T12398] raw-gadget.3 gadget.5: fail, usb_ep_set_halt returned -11 [ 454.605985][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.617112][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.635778][ T5624] usb 6-1: USB disconnect, device number 26 [ 454.766247][ T1234] usb 5-1: USB disconnect, device number 12 [ 454.931437][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.931732][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.932007][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.932381][T12416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.932967][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.933304][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.933630][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.933956][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.934199][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'. [ 454.934621][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'. [ 455.105352][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.115881][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.437100][ T945] usb 2-1: USB disconnect, device number 116 [ 455.510630][T12433] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 455.510849][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 455.511068][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 455.511144][ C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 455.619403][T12436] netlink: 'syz.0.1665': attribute type 5 has an invalid length. [ 455.725476][T12428] tipc: Resetting bearer [ 455.790841][T12428] tipc: Resetting bearer [ 455.977737][ T945] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 456.130540][ T945] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 456.132405][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 456.132430][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 456.134844][ T945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.134870][ T945] usb 2-1: Product: syz [ 456.134884][ T945] usb 2-1: Manufacturer: syz [ 456.134897][ T945] usb 2-1: SerialNumber: syz [ 456.176527][T12450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.177014][T12450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.186218][ T945] usb 2-1: config 0 descriptor?? [ 457.195699][T12455] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 457.361640][T12463] syzkaller0: entered promiscuous mode [ 457.361674][T12463] syzkaller0: entered allmulticast mode [ 457.464801][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.466871][ C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 457.466969][ C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 457.490603][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.845700][ T945] usb 2-1: USB disconnect, device number 117 [ 458.947105][ T7008] udevd[7008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.377567][ T1234] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 460.388732][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.390539][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.528259][ T1234] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 460.531519][ T1234] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 460.531549][ T1234] usb 1-1: Product: syz [ 460.531565][ T1234] usb 1-1: Manufacturer: syz [ 460.531579][ T1234] usb 1-1: SerialNumber: syz [ 460.543506][ T1234] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 460.980793][ T1234] vp7045: USB control message 'in' went wrong. [ 460.980817][ T1234] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 460.980860][ T1234] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 460.984496][ T1234] usb 1-1: USB disconnect, device number 15 [ 461.145994][T12522] loop5: detected capacity change from 0 to 7 [ 461.147133][T12522] Dev loop5: unable to read RDB block 7 [ 461.147177][T12522] loop5: unable to read partition table [ 461.166611][T12522] loop5: partition table beyond EOD, truncated [ 461.166635][T12522] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 461.517294][ T1234] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 461.668285][ T1234] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.669659][ T1234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.669690][ T1234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.669728][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.678891][ T1234] usb 6-1: config 0 descriptor?? [ 461.896956][ T1234] usbhid 6-1:0.0: can't add hid device: -71 [ 461.897082][ T1234] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 461.927775][ T1234] usb 6-1: USB disconnect, device number 27 [ 462.339663][T12559] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 462.407667][ T1234] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 462.510725][T12559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.552159][T12563] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 462.565217][ T1234] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 462.570595][ T1234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.570627][ T1234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.570664][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.612773][ T1234] usb 6-1: config 0 descriptor?? [ 462.624003][ T43] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 462.683385][T12564] bond3 (unregistering): (slave gretap2): Removing an active aggregator [ 462.684136][T12564] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 462.710063][T12564] bond3 (unregistering): Released all slaves [ 462.962223][T12581] loop4: detected capacity change from 0 to 7 [ 462.964554][T12581] Dev loop4: unable to read RDB block 7 [ 462.964616][T12581] loop4: unable to read partition table [ 462.964807][T12581] loop4: partition table beyond EOD, truncated [ 462.964838][T12581] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 463.193739][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.194083][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.219501][ T31] kauditd_printk_skb: 119 callbacks suppressed [ 463.219524][ T31] audit: type=1326 audit(1789989068.779:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.1694" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 463.220863][ T31] audit: type=1326 audit(1789989068.779:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.1694" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 463.315714][ T31] audit: type=1326 audit(1789989068.869:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.1694" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 463.440143][ T1234] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 463.455802][T12532] fuse: Bad value for 'group_id' [ 463.455816][T12532] fuse: Bad value for 'group_id' [ 463.473407][ T1234] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input59 [ 463.598124][ T1234] input: failed to attach handler kbd to device input59, error: -5 [ 463.660226][ T1234] usb 6-1: USB disconnect, device number 28 [ 463.900301][T12599] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 463.904935][T12599] __nla_validate_parse: 58 callbacks suppressed [ 463.904950][T12599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1699'. [ 464.259845][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.260118][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.487361][ T5619] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 464.527369][ T1234] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 464.617470][ T5619] usb 2-1: device descriptor read/64, error -71 [ 464.679254][ T1234] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 464.680394][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.696041][ T1234] pegasus 6-1:254.0: Missing or invalid endpoints [ 464.865579][ T5619] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 464.899954][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.906721][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.908863][ T25] usb 6-1: USB disconnect, device number 29 [ 464.997510][ T5619] usb 2-1: device descriptor read/64, error -71 [ 465.107915][ T5619] usb usb2-port1: attempt power cycle [ 465.388813][T12616] xt_policy: too many policy elements [ 465.467388][ T5619] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 465.500158][ T5619] usb 2-1: device descriptor read/8, error -71 [ 465.667726][T12621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.668197][T12621] bridge0: port 4(bond1) entered blocking state [ 465.668264][T12621] bridge0: port 4(bond1) entered disabled state [ 465.668368][T12621] bond1: entered allmulticast mode [ 465.671000][T12621] bond1: entered promiscuous mode [ 465.671530][T12621] bridge0: port 4(bond1) entered blocking state [ 465.671602][T12621] bridge0: port 4(bond1) entered forwarding state [ 465.787037][ T6673] bridge0: port 4(bond1) entered disabled state [ 465.795777][ T5619] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 465.811305][ T5619] usb 2-1: device descriptor read/8, error -71 [ 465.918196][ T5619] usb usb2-port1: unable to enumerate USB device [ 466.026417][T12629] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1705'. [ 466.046452][T12630] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1705'. [ 466.160556][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 466.307353][ T5619] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 466.387933][ T945] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 466.477490][T11383] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 466.478223][ T5619] usb 1-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 466.479457][ T5619] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.479490][ T5619] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.479518][ T5619] usb 1-1: config 0 interface 0 has no altsetting 0 [ 466.479553][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.481757][ T5619] usb 1-1: config 0 descriptor?? [ 466.567271][ T945] usb 5-1: Using ep0 maxpacket: 32 [ 466.568239][ T945] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 466.575046][ T945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.575074][ T945] usb 5-1: Product: syz [ 466.575088][ T945] usb 5-1: Manufacturer: syz [ 466.575103][ T945] usb 5-1: SerialNumber: syz [ 466.614268][T11383] usb 6-1: device descriptor read/64, error -71 [ 466.636272][ T945] empeg 5-1:1.0: empeg converter detected [ 466.839119][ T945] usb 5-1: empeg converter now attached to ttyUSB0 [ 466.854028][T11383] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 466.890925][T12648] netlink: 'syz.1.1712': attribute type 2 has an invalid length. [ 466.890952][T12648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1712'. [ 466.962645][T12650] netlink: 'syz.1.1712': attribute type 2 has an invalid length. [ 466.962673][T12650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1712'. [ 466.984278][T12648] : entered promiscuous mode [ 467.007428][T11383] usb 6-1: device descriptor read/64, error -71 [ 467.039227][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1707'. [ 467.044876][ T25] usb 5-1: USB disconnect, device number 13 [ 467.071584][ T25] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 467.079587][ T25] empeg 5-1:1.0: device disconnected [ 467.118991][T11383] usb usb6-port1: attempt power cycle [ 467.479360][T11383] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 467.498383][T11383] usb 6-1: device descriptor read/8, error -71 [ 467.658289][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 467.757409][T11383] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 467.778055][T11383] usb 6-1: device descriptor read/8, error -71 [ 467.818659][ T9] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 467.820280][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.820312][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.820383][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.827039][ T9] usb 2-1: config 0 descriptor?? [ 467.889000][T11383] usb usb6-port1: unable to enumerate USB device [ 468.298214][ T9] hid-led 0003:1D34:000A.0028: probe with driver hid-led failed with error -71 [ 468.337825][ T9] usb 2-1: USB disconnect, device number 122 [ 469.025080][T12681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1719'. [ 469.098894][T12683] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 469.158628][ T5619] usbhid 1-1:0.0: can't add hid device: -71 [ 469.158962][ T5619] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 469.187559][ T5619] usb 1-1: USB disconnect, device number 16 [ 469.497474][T11383] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 469.637776][T11383] usb 5-1: device descriptor read/64, error -71 [ 469.798927][ T5619] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 469.888050][T11383] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 469.947424][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 469.948653][ T5619] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 469.949900][ T5619] usb 1-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.949932][ T5619] usb 1-1: config 1 interface 0 has no altsetting 0 [ 469.953873][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.953900][ T5619] usb 1-1: Product: syz [ 469.953915][ T5619] usb 1-1: Manufacturer: syz [ 469.953929][ T5619] usb 1-1: SerialNumber: syz [ 470.019090][T11383] usb 5-1: device descriptor read/64, error -71 [ 470.062722][ T31] audit: type=1326 audit(1789989075.619:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.062935][ T31] audit: type=1326 audit(1789989075.619:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.069593][ T31] audit: type=1326 audit(1789989075.629:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.072403][ T31] audit: type=1326 audit(1789989075.629:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.074693][ T31] audit: type=1326 audit(1789989075.629:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.074739][ T31] audit: type=1326 audit(1789989075.629:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.074780][ T31] audit: type=1326 audit(1789989075.629:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.075421][ T31] audit: type=1326 audit(1789989075.629:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.079375][ T31] audit: type=1326 audit(1789989075.629:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.084338][ T31] audit: type=1326 audit(1789989075.639:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.3.1729" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 470.168748][T11383] usb usb5-port1: attempt power cycle [ 470.340722][ T5619] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input61 [ 470.345319][ T4969] bcm5974 1-1:1.0: could not read from device [ 470.347121][ T4969] bcm5974 1-1:1.0: could not read from device [ 470.379702][ T5619] usb 1-1: USB disconnect, device number 17 [ 470.427897][T12712] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 470.617338][T11383] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 470.638439][T11383] usb 5-1: device descriptor read/8, error -71 [ 470.887534][T11383] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 470.893917][T12718] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 470.921934][T11383] usb 5-1: device descriptor read/8, error -71 [ 470.994650][T12718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.005459][ T25] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 471.026196][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.029322][T11383] usb usb5-port1: unable to enumerate USB device [ 471.042671][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.070651][T12717] bond2: (slave gretap0): making interface the new active one [ 471.072129][T12717] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 471.167782][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 471.168698][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 471.170160][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 471.174832][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.174861][ T25] usb 2-1: Product: syz [ 471.174877][ T25] usb 2-1: Manufacturer: syz [ 471.174892][ T25] usb 2-1: SerialNumber: syz [ 471.225677][ T25] usb 2-1: config 0 descriptor?? [ 471.234512][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 471.234537][ T25] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 471.257497][ T5619] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 471.387720][ T5624] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 471.407305][ T5619] usb 6-1: Using ep0 maxpacket: 16 [ 471.408264][ T5619] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 471.409758][ T5619] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 471.409792][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 471.411907][ T5619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.411933][ T5619] usb 6-1: Product: syz [ 471.411949][ T5619] usb 6-1: Manufacturer: syz [ 471.411965][ T5619] usb 6-1: SerialNumber: syz [ 471.416129][ T5619] usb 6-1: config 0 descriptor?? [ 471.423697][ T5619] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 471.423728][ T5619] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 471.577410][ T5624] usb 1-1: Using ep0 maxpacket: 32 [ 471.579798][ T5624] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 471.581248][ T5624] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.581274][ T5624] usb 1-1: config 0 has no interface number 0 [ 471.581339][ T5624] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 471.581358][ T5624] usb 1-1: config 0 interface 1 has no altsetting 0 [ 471.584903][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.584927][ T5624] usb 1-1: Product: syz [ 471.584942][ T5624] usb 1-1: Manufacturer: syz [ 471.584985][ T5624] usb 1-1: SerialNumber: syz [ 471.665841][ T5624] usb 1-1: config 0 descriptor?? [ 471.730553][T12729] bond2: Unable to set down delay as MII monitoring is disabled [ 471.731190][T12732] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1735'. [ 471.734798][T12729] bond2 (unregistering): Released all slaves [ 471.852875][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 471.882389][ T5624] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 471.900455][ T5624] cx231xx 1-1:0.1: Failed to read PCB config [ 471.900566][ T5624] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 471.905139][ T5624] usb 1-1: USB disconnect, device number 18 [ 472.029936][ T5619] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 472.169375][ T5619] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 472.170895][ T5619] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 472.170918][ T5619] em28xx 6-1:0.0: No AC97 audio processor [ 472.280189][ T25] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 472.280246][ T25] em28xx 2-1:0.0: board has no eeprom [ 472.337331][ T25] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 472.337427][ T25] em28xx 2-1:0.0: dvb set to bulk mode. [ 472.338633][ T1234] em28xx 2-1:0.0: Binding DVB extension [ 472.369030][ T25] usb 2-1: USB disconnect, device number 123 [ 472.373567][ T25] em28xx 2-1:0.0: Disconnecting em28xx [ 472.427398][ T5624] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 472.474313][ T1234] em28xx 2-1:0.0: Registering input extension [ 472.484961][ T25] em28xx 2-1:0.0: Closing input extension [ 472.549859][ T25] em28xx: Freeing device [ 472.577377][ T5624] usb 1-1: Using ep0 maxpacket: 32 [ 472.578632][ T5624] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 472.584705][ T5624] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.584735][ T5624] usb 1-1: config 0 has no interface number 0 [ 472.584776][ T5624] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 472.584798][ T5624] usb 1-1: config 0 interface 1 has no altsetting 0 [ 472.639972][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.640003][ T5624] usb 1-1: Product: syz [ 472.640019][ T5624] usb 1-1: Manufacturer: syz [ 472.640034][ T5624] usb 1-1: SerialNumber: syz [ 472.643824][ T5624] usb 1-1: config 0 descriptor?? [ 472.849857][ T5619] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 472.935327][T12744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.938488][T12744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.013864][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.013921][ T5619] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 3.02 [ 473.013958][ T5619] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 473.018521][ T5619] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 473.018560][ T5619] usb 5-1: can't read configurations, error -61 [ 473.032093][T12728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.033777][T12728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.042040][T12728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.044694][T12728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.095387][ T5624] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 473.119110][ T5624] cx231xx 1-1:0.1: Failed to read PCB config [ 473.119185][ T5624] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 473.121572][ T5624] usb 1-1: USB disconnect, device number 19 [ 473.157965][ T5619] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 473.322008][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.322066][ T5619] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 3.02 [ 473.322096][ T5619] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 473.323902][ T5619] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 473.323937][ T5619] usb 5-1: can't read configurations, error -61 [ 473.324127][ T5619] usb usb5-port1: attempt power cycle [ 473.677746][ T5619] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 473.704569][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.704630][ T5619] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 3.02 [ 473.704812][ T5619] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 473.710910][ T5619] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 473.710947][ T5619] usb 5-1: can't read configurations, error -61 [ 473.837427][ T5619] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 473.861129][ T5619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.861195][ T5619] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 3.02 [ 473.861221][ T5619] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 473.863407][ T5619] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 473.863449][ T5619] usb 5-1: can't read configurations, error -61 [ 473.870911][ T5619] usb usb5-port1: unable to enumerate USB device [ 474.211268][ T5619] usb 6-1: USB disconnect, device number 34 [ 474.237613][ T5619] em28xx 6-1:0.0: Disconnecting em28xx [ 474.309373][ T5619] em28xx: Freeing device [ 474.351277][T12765] netlink: 984 bytes leftover after parsing attributes in process `syz.3.1741'. [ 475.069338][ T31] kauditd_printk_skb: 586 callbacks suppressed [ 475.069359][ T31] audit: type=1326 audit(1789989080.629:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 475.070865][ T31] audit: type=1326 audit(1789989080.629:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 475.072433][ T31] audit: type=1326 audit(1789989080.629:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 475.073831][ T31] audit: type=1326 audit(1789989080.629:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 475.075942][ T31] audit: type=1326 audit(1789989080.629:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 475.109864][T12785] loop4: detected capacity change from 0 to 7 [ 475.125634][T12785] Dev loop4: unable to read RDB block 7 [ 475.125680][T12785] loop4: unable to read partition table [ 475.125902][T12785] loop4: partition table beyond EOD, truncated [ 475.125920][T12785] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 475.280350][T12787] fuse: Bad value for 'fd' [ 475.284305][T12787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1748'. [ 475.288533][ T31] audit: type=1326 audit(1789989080.839:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 475.289798][ T31] audit: type=1326 audit(1789989080.849:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 475.291203][ T31] audit: type=1326 audit(1789989080.849:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 475.292508][ T31] audit: type=1326 audit(1789989080.849:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 475.293804][ T31] audit: type=1326 audit(1789989080.849:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 475.547017][T12790] binder: 12788:12790 ioctl c0306201 80000080 returned -14 [ 475.756352][T12801] FAULT_INJECTION: forcing a failure. [ 475.756352][T12801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.756485][T12801] CPU: 1 UID: 0 PID: 12801 Comm: syz.5.1752 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.756516][T12801] Tainted: [L]=SOFTLOCKUP [ 475.756524][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.756537][T12801] Call Trace: [ 475.756547][T12801] [ 475.756556][T12801] dump_stack_lvl+0xe8/0x150 [ 475.756594][T12801] should_fail_ex+0x410/0x560 [ 475.756625][T12801] _copy_from_user+0x2d/0xb0 [ 475.756654][T12801] input_event_from_user+0xfe/0x290 [ 475.756679][T12801] ? __pfx_input_event_from_user+0x10/0x10 [ 475.756712][T12801] evdev_write+0x2c7/0x4c0 [ 475.756732][T12801] ? __lock_acquire+0x747/0x2de0 [ 475.756760][T12801] ? __pfx_evdev_write+0x10/0x10 [ 475.756782][T12801] ? bpf_lsm_file_permission+0x9/0x20 [ 475.756809][T12801] ? security_file_permission+0x75/0x260 [ 475.756843][T12801] ? rw_verify_area+0x203/0x4c0 [ 475.756874][T12801] ? __pfx_evdev_write+0x10/0x10 [ 475.756895][T12801] vfs_write+0x296/0xba0 [ 475.756935][T12801] ? __pfx_vfs_write+0x10/0x10 [ 475.756968][T12801] ? __fget_files+0x2a/0x420 [ 475.757001][T12801] ? __fget_files+0x2a/0x420 [ 475.757026][T12801] ? __fget_files+0x3a2/0x420 [ 475.757052][T12801] ? __fget_files+0x2a/0x420 [ 475.757086][T12801] ksys_write+0x150/0x270 [ 475.757128][T12801] ? __pfx_ksys_write+0x10/0x10 [ 475.757169][T12801] __do_fast_syscall_32+0x27a/0x6a0 [ 475.757198][T12801] ? do_fast_syscall_32+0x33/0x70 [ 475.757219][T12801] ? asm_int80_emulation+0x1a/0x20 [ 475.757239][T12801] ? do_int80_emulation+0x299/0x500 [ 475.757260][T12801] ? trace_irq_disable+0x3b/0x140 [ 475.757285][T12801] do_fast_syscall_32+0x33/0x70 [ 475.757309][T12801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.757333][T12801] RIP: 0023:0xf7f040ec [ 475.757354][T12801] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 475.757373][T12801] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 475.757396][T12801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 475.757411][T12801] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.757424][T12801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.757436][T12801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.757449][T12801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.757481][T12801] [ 475.897810][ T25] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 476.078879][ T25] usb 1-1: New USB device found, idVendor=10cf, idProduct=1713, bcdDevice= 0.40 [ 476.083027][ T25] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 476.083065][ T25] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.083087][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 476.086746][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.086776][ T25] usb 1-1: Product: syz [ 476.086968][ T25] usb 1-1: Manufacturer: syz [ 476.086986][ T25] usb 1-1: SerialNumber: syz [ 476.372260][T12808] block device autoloading is deprecated and will be removed. [ 476.416055][ T25] usbhid 1-1:1.0: can't add hid device: -71 [ 476.416130][ T25] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 476.433244][ T25] usb 1-1: USB disconnect, device number 20 [ 476.467700][ T5619] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 476.487351][ T5759] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 476.630788][ T5619] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 476.632966][ T5619] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 476.632996][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 476.633012][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 476.633025][ T5619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 476.635401][ T5619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.635422][ T5619] usb 6-1: Product: syz [ 476.635431][ T5619] usb 6-1: Manufacturer: syz [ 476.635439][ T5619] usb 6-1: SerialNumber: syz [ 476.692200][ T5759] usb 5-1: unable to get BOS descriptor or descriptor too short [ 476.692239][ T5759] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 476.718656][ T5619] usb 6-1: config 0 descriptor?? [ 476.755309][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.755329][ T5759] usb 5-1: Product: syz [ 476.755338][ T5759] usb 5-1: Manufacturer: syz [ 476.755347][ T5759] usb 5-1: SerialNumber: syz [ 476.783136][ T5619] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 476.970343][ T25] usb 6-1: USB disconnect, device number 35 [ 477.071593][ T5759] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 477.076628][ T5759] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 477.106659][ T5759] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 477.123537][ T5759] usb 5-1: USB disconnect, device number 22 [ 477.220469][T12822] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 477.680523][T12833] loop4: detected capacity change from 0 to 7 [ 477.694159][T12833] Dev loop4: unable to read RDB block 7 [ 477.694211][T12833] loop4: unable to read partition table [ 477.694477][T12833] loop4: partition table beyond EOD, truncated [ 477.694511][T12833] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.222212][T12844] ALSA: mixer_oss: invalid OSS volume '' [ 478.389383][ T5619] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 478.477439][ T5624] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 478.557278][ T5619] usb 2-1: Using ep0 maxpacket: 8 [ 478.561831][ T5619] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.562996][ T5619] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 241, changing to 11 [ 478.563031][ T5619] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 478.563055][ T5619] usb 2-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 478.563084][ T5619] usb 2-1: config 1 interface 0 has no altsetting 0 [ 478.566337][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.566364][ T5619] usb 2-1: Product: à ‡ [ 478.566380][ T5619] usb 2-1: Manufacturer: ã‹å‚‡îžªè¨¬â°šà¿›ëˆ›â±ºçž¶é°¹í´á´›ã¢é¢·ï˜…ë”呒볠嬸ã’ꃕ奪⨺讽嫰ïŽâ‚¢í“·ë¶ç‘䫨쳅ꩩ朲⮗᳘罱샨몉ì¡á»Žëµ˜é³„뻸봉캧⨉㢓巄ãžà¤—䳷ఢ뮾Ȿ틠삡቉싷⢚ೃ뛦឴᰻練녭绂ङೄ丨劚늑Ꜷ榸↺瘧ê¨æ„“兟렓쩡뜔抱深쮟间陵費紸ݵ褾ꎴ [ 478.566410][ T5619] usb 2-1: SerialNumber: syz [ 478.648017][ T5624] usb 1-1: unable to get BOS descriptor or descriptor too short [ 478.649246][ T5624] usb 1-1: not running at top speed; connect to a high speed hub [ 478.649283][ T5624] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 478.659550][ T5624] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 478.659607][ T5624] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 478.659626][ T5624] usb 1-1: config 14 has an invalid descriptor of length 101, skipping remainder of the config [ 478.659644][ T5624] usb 1-1: config 14 has no interface number 0 [ 478.659659][ T5624] usb 1-1: config 14 has no interface number 1 [ 478.659722][ T5624] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 478.659744][ T5624] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 478.659767][ T5624] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 24457, setting to 64 [ 478.659792][ T5624] usb 1-1: config 14 interface 57 has no altsetting 0 [ 478.659808][ T5624] usb 1-1: config 14 interface 228 has no altsetting 0 [ 478.693066][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.693093][ T5624] usb 1-1: Product: syz [ 478.693107][ T5624] usb 1-1: Manufacturer: syz [ 478.693130][ T5624] usb 1-1: SerialNumber: syz [ 478.800380][T12839] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 478.800519][T12839] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 478.998832][T12850] FAULT_INJECTION: forcing a failure. [ 478.998832][T12850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.998871][T12850] CPU: 0 UID: 0 PID: 12850 Comm: syz.4.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.998899][T12850] Tainted: [L]=SOFTLOCKUP [ 478.998907][T12850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.998920][T12850] Call Trace: [ 478.998929][T12850] [ 478.998943][T12850] dump_stack_lvl+0xe8/0x150 [ 478.998979][T12850] should_fail_ex+0x410/0x560 [ 478.999014][T12850] _copy_from_user+0x2d/0xb0 [ 478.999041][T12850] input_event_from_user+0xfe/0x290 [ 478.999065][T12850] ? __pfx_input_event_from_user+0x10/0x10 [ 478.999099][T12850] evdev_write+0x2c7/0x4c0 [ 478.999117][T12850] ? __lock_acquire+0x747/0x2de0 [ 478.999145][T12850] ? __pfx_evdev_write+0x10/0x10 [ 478.999167][T12850] ? bpf_lsm_file_permission+0x9/0x20 [ 478.999195][T12850] ? security_file_permission+0x75/0x260 [ 478.999228][T12850] ? rw_verify_area+0x203/0x4c0 [ 478.999260][T12850] ? __pfx_evdev_write+0x10/0x10 [ 478.999279][T12850] vfs_write+0x296/0xba0 [ 478.999320][T12850] ? __pfx_vfs_write+0x10/0x10 [ 478.999351][T12850] ? __fget_files+0x2a/0x420 [ 478.999381][T12850] ? __fget_files+0x2a/0x420 [ 478.999407][T12850] ? __fget_files+0x3a2/0x420 [ 478.999434][T12850] ? __fget_files+0x2a/0x420 [ 478.999471][T12850] ksys_write+0x150/0x270 [ 478.999503][T12850] ? __pfx_ksys_write+0x10/0x10 [ 478.999543][T12850] __do_fast_syscall_32+0x27a/0x6a0 [ 478.999569][T12850] ? do_fast_syscall_32+0x33/0x70 [ 478.999591][T12850] ? asm_int80_emulation+0x1a/0x20 [ 478.999612][T12850] ? do_int80_emulation+0x299/0x500 [ 478.999640][T12850] do_fast_syscall_32+0x33/0x70 [ 478.999662][T12850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.999686][T12850] RIP: 0023:0xf700f0ec [ 478.999706][T12850] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 478.999723][T12850] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 478.999747][T12850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 478.999762][T12850] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.999775][T12850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.999786][T12850] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 478.999799][T12850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.999831][T12850] [ 479.143829][ T5624] legousbtower 1-1:14.57: interrupt endpoints not found [ 479.550597][ T5624] legousbtower 1-1:14.228: get version request failed: -71 [ 479.550800][ T5624] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 479.569832][ T5624] usb 1-1: USB disconnect, device number 21 [ 479.580274][ T1234] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 479.656912][T12858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.669981][T12858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.735748][ T5619] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 479.750831][ T1234] usb 5-1: Using ep0 maxpacket: 32 [ 479.751703][ T1234] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 479.756679][ T1234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.756707][ T1234] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 479.756752][ T1234] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 479.756790][ T1234] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 479.756832][ T1234] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 479.756855][ T1234] usb 5-1: config 1 interface 1 has no altsetting 0 [ 479.768214][ T5619] usb 2-1: USB disconnect, device number 124 [ 479.853624][ T1234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.853654][ T1234] usb 5-1: Product: syz [ 479.853670][ T1234] usb 5-1: Manufacturer: syz [ 479.853685][ T1234] usb 5-1: SerialNumber: syz [ 479.912486][T12862] netlink: 'syz.5.1771': attribute type 11 has an invalid length. [ 479.966490][T12864] loop4: detected capacity change from 0 to 7 [ 479.974585][T12864] Dev loop4: unable to read RDB block 7 [ 479.974662][T12864] loop4: unable to read partition table [ 479.974983][T12864] loop4: partition table beyond EOD, truncated [ 479.975003][T12864] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.112083][ T1234] usb 5-1: selecting invalid altsetting 0 [ 480.229297][T12871] netlink: 'syz.5.1775': attribute type 63 has an invalid length. [ 480.229343][T12871] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1775'. [ 480.311186][ T1234] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 480.380787][T12852] fuse: Bad value for 'user_id' [ 480.380811][T12852] fuse: Bad value for 'user_id' [ 480.392451][ T25] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 480.470674][ T1234] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 480.512878][T12880] vlan0: entered promiscuous mode [ 480.512903][T12880] bridge0: entered promiscuous mode [ 480.564056][ T1234] usb 5-1: USB disconnect, device number 23 [ 480.574417][ T25] usb 2-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00 [ 480.586794][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.586855][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 136 [ 480.586879][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 480.624410][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.624440][ T25] usb 2-1: Product: syz [ 480.624455][ T25] usb 2-1: Manufacturer: syz [ 480.624470][ T25] usb 2-1: SerialNumber: syz [ 480.663905][T12869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 480.667816][ T25] mos7840 2-1:1.0: missing endpoints [ 480.833238][T12882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 480.848239][ T7012] udevd[7012]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.181851][ C1] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 481.181923][ C1] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 481.531574][T12904] loop4: detected capacity change from 0 to 7 [ 481.534249][T12904] Dev loop4: unable to read RDB block 7 [ 481.534298][T12904] loop4: unable to read partition table [ 481.535828][T12904] loop4: partition table beyond EOD, truncated [ 481.535853][T12904] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 481.776881][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1787'. [ 481.920760][ T5619] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 482.078658][ T5619] usb 5-1: Using ep0 maxpacket: 32 [ 482.082831][ T5619] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 482.090367][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.090394][ T5619] usb 5-1: Product: syz [ 482.090409][ T5619] usb 5-1: Manufacturer: syz [ 482.090422][ T5619] usb 5-1: SerialNumber: syz [ 482.096410][ T5619] usb 5-1: config 0 descriptor?? [ 482.102133][ T5619] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 482.102238][ T5619] dvb-usb: bulk message failed: -22 (4/0) [ 482.102252][ T5619] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 482.102379][ T5619] dvb-usb: bulk message failed: -22 (5/0) [ 482.102391][ T5619] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 482.118620][ T5619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 482.120450][ T5619] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 482.120514][ T5619] usb 5-1: media controller created [ 482.158399][ T5619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.235894][ T5619] usb 5-1: selecting invalid altsetting 3 [ 482.235922][ T5619] ttusb2: set interface to alts=3 failed [ 482.346069][T12908] dvb-usb: bulk message failed: -22 (7/0) [ 482.346089][T12908] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 482.346118][T12908] ttusb2: i2c transfer failed. [ 482.393171][ T5619] DVB: Unable to find symbol tda10086_attach() [ 482.393190][ T5619] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 482.394061][ T5619] dvb-usb: bulk message failed: -22 (4/0) [ 482.394082][ T5619] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 482.394219][ T5619] dvb-usb: bulk message failed: -22 (5/0) [ 482.394234][ T5619] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 482.394308][ T5619] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 482.424595][ T5619] usb 5-1: USB disconnect, device number 24 [ 482.509966][T12923] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1791'. [ 482.582876][ T5619] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 482.613649][ T5759] logitech-hidpp-device 0005:046D:B012.0029: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 482.824928][T12929] fido_id[12929]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 482.885318][T12933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1793'. [ 482.904242][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1794'. [ 482.976216][T12931] netlink: 'syz.5.1792': attribute type 10 has an invalid length. [ 483.017712][T12931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.021656][T12931] team0: Port device netdevsim1 added [ 483.064253][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.064753][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.085705][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.086175][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.093964][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.094451][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.111133][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.126305][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.145617][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.146147][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.257049][ T25] usb 2-1: USB disconnect, device number 125 [ 483.463090][T12952] loop4: detected capacity change from 0 to 7 [ 483.463916][T12952] Dev loop4: unable to read RDB block 7 [ 483.463965][T12952] loop4: unable to read partition table [ 483.464215][T12952] loop4: partition table beyond EOD, truncated [ 483.464236][T12952] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.977366][ T5759] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 484.060513][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 484.127563][ T5759] usb 6-1: Using ep0 maxpacket: 8 [ 484.130290][ T5759] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 484.132421][ T5759] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.132461][ T5759] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 484.132488][ T5759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.164959][ T5759] mdc800 6-1:1.0: probe fails -> wrong Interface [ 484.363307][ T25] usb 6-1: USB disconnect, device number 36 [ 485.403229][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1806'. [ 485.690730][T12994] misc userio: No port type given on /dev/userio [ 485.695432][T12995] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1807'. [ 485.943578][T13003] loop4: detected capacity change from 0 to 7 [ 485.944711][T13003] Dev loop4: unable to read RDB block 7 [ 485.944755][T13003] loop4: unable to read partition table [ 485.944892][T13003] loop4: partition table beyond EOD, truncated [ 485.944904][T13003] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 486.167385][ T5619] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 486.333143][ T5619] usb 6-1: unable to get BOS descriptor or descriptor too short [ 486.333195][ T5619] usb 6-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 486.339211][ T5619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.339239][ T5619] usb 6-1: Product: syz [ 486.339253][ T5619] usb 6-1: Manufacturer: syz [ 486.339266][ T5619] usb 6-1: SerialNumber: syz [ 486.595709][ T5619] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 486.601089][ T5619] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 486.604495][ T5619] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 486.608484][ T5619] usb 6-1: USB disconnect, device number 37 [ 487.027299][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 487.187401][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 487.188195][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 487.192085][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 487.194805][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.194835][ T9] usb 5-1: Product: syz [ 487.194851][ T9] usb 5-1: Manufacturer: syz [ 487.194866][ T9] usb 5-1: SerialNumber: syz [ 487.482222][T13015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1813'. [ 487.557694][ T5619] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 487.610283][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 487.610660][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 487.610978][ T9] usb 5-1: unit 56 not found! [ 487.653953][ T9] usb 5-1: USB disconnect, device number 25 [ 487.709516][T12401] udevd[12401]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.728561][ T5619] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 487.730718][ T5619] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.735677][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.735696][ T5619] usb 1-1: Product: syz [ 487.735705][ T5619] usb 1-1: Manufacturer: syz [ 487.735714][ T5619] usb 1-1: SerialNumber: syz [ 487.982278][ T5619] snd-usb-6fire 1-1:1.0: unable to receive device firmware state. [ 487.982380][ T5619] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 487.994598][ T5619] usb 1-1: USB disconnect, device number 22 [ 488.359900][T13040] loop4: detected capacity change from 0 to 7 [ 488.362424][T13040] Dev loop4: unable to read RDB block 7 [ 488.362454][T13040] loop4: unable to read partition table [ 488.362594][T13040] loop4: partition table beyond EOD, truncated [ 488.362617][T13040] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 488.507926][T13042] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.508108][T13042] bridge0: port 2(bridge_slave_1) entered listening state [ 488.508415][T13042] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.508567][T13042] bridge0: port 1(bridge_slave_0) entered listening state [ 488.616155][T13042] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 488.646907][T13043] pimreg: entered allmulticast mode [ 488.736019][T13045] syzkaller0: entered promiscuous mode [ 488.736036][T13045] syzkaller0: entered allmulticast mode [ 488.892902][T13052] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 489.217849][ T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 489.378279][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 489.379126][ T25] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 489.381023][ T25] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 489.381050][ T25] usb 6-1: config 0 has no interface number 1 [ 489.381105][ T25] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.381127][ T25] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 489.381154][ T25] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 489.381182][ T25] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 489.381206][ T25] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.381246][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 489.381271][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 489.381292][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 489.520023][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.520053][ T25] usb 6-1: Product: syz [ 489.520069][ T25] usb 6-1: Manufacturer: syz [ 489.520085][ T25] usb 6-1: SerialNumber: syz [ 489.547670][ T25] usb 6-1: config 0 descriptor?? [ 489.548583][T13054] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 489.571529][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.616870][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.687019][ T25] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 489.842607][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.843126][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.864247][ T25] usb 6-1: USB disconnect, device number 38 [ 490.407557][ T1234] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 490.573236][ T1234] usb 5-1: not running at top speed; connect to a high speed hub [ 490.573278][ T1234] usb 5-1: New USB device found, idVendor=1a8d, idProduct=1010, bcdDevice=4b.ec [ 490.598502][ T1234] usb 5-1: config 127 has an invalid interface number: 29 but max is 0 [ 490.598536][ T1234] usb 5-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 490.598557][ T1234] usb 5-1: config 127 has no interface number 0 [ 490.598602][ T1234] usb 5-1: config 127 interface 29 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 490.598631][ T1234] usb 5-1: config 127 interface 29 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 490.598658][ T1234] usb 5-1: config 127 interface 29 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 490.598684][ T1234] usb 5-1: config 127 interface 29 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 490.598707][ T1234] usb 5-1: config 127 interface 29 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 490.598731][ T1234] usb 5-1: config 127 interface 29 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 490.598757][ T1234] usb 5-1: config 127 interface 29 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 490.598779][ T1234] usb 5-1: config 127 interface 29 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 490.598801][ T1234] usb 5-1: config 127 interface 29 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 490.598824][ T1234] usb 5-1: config 127 interface 29 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 490.598851][ T1234] usb 5-1: config 127 interface 29 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 490.598878][ T1234] usb 5-1: config 127 interface 29 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 490.598902][ T1234] usb 5-1: config 127 interface 29 has no altsetting 0 [ 490.606205][ T1234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.606237][ T1234] usb 5-1: Product: Ñ— [ 490.606253][ T1234] usb 5-1: Manufacturer: 㫠篇％窂栓뉭 [ 490.606269][ T1234] usb 5-1: SerialNumber: syz [ 490.804007][T13059] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 490.804236][T13059] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 490.804388][T13059] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 490.942904][T13067] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 491.011355][T13059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1827'. [ 491.014702][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.038689][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.066005][ T1234] option 5-1:127.29: GSM modem (1-port) converter detected [ 491.124975][ T1234] usb 5-1: USB disconnect, device number 26 [ 491.179528][ T1234] option 5-1:127.29: device disconnected [ 491.356798][T13072] CIFS: VFS: bad security option: krb5iý [ 491.449842][T13077] ip6gre1: entered promiscuous mode [ 491.449871][T13077] ip6gre1: entered allmulticast mode [ 491.452791][ T6749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.453061][ T6749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.454874][T13077] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.488240][ T1234] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.523545][T13080] loop4: detected capacity change from 0 to 7 [ 491.524808][T13080] Dev loop4: unable to read RDB block 7 [ 491.524838][T13080] loop4: unable to read partition table [ 491.524989][T13080] loop4: partition table beyond EOD, truncated [ 491.525002][T13080] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 491.670243][T13087] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 491.742652][T13092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1835'. [ 491.761624][T13087] bond5 (unregistering): Released all slaves [ 491.903236][T13087] sit0: entered promiscuous mode [ 491.914495][T13087] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 491.914521][T13087] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1835'. [ 491.919796][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.919972][ T1234] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 492.047463][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 492.100298][ T1234] usb 6-1: Using ep0 maxpacket: 32 [ 492.102100][ T1234] usb 6-1: New USB device found, idVendor=03f0, idProduct=4017, bcdDevice= 0.00 [ 492.102130][ T1234] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 492.105204][ T1234] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 492.105244][ T1234] usb 6-1: can't read configurations, error -61 [ 492.225285][T13107] ip6gretap2: entered allmulticast mode [ 492.227643][ T1234] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 492.233689][T13107] batman_adv: batadv0: Adding interface: ip6gretap2 [ 492.233706][T13107] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.233736][T13107] batman_adv: batadv0: Interface activated: ip6gretap2 [ 492.379959][ T1234] usb 6-1: Using ep0 maxpacket: 32 [ 492.381563][ T1234] usb 6-1: New USB device found, idVendor=03f0, idProduct=4017, bcdDevice= 0.00 [ 492.381608][ T1234] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 492.394187][ T1234] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 492.394225][ T1234] usb 6-1: can't read configurations, error -61 [ 492.398158][ T1234] usb usb6-port1: attempt power cycle [ 492.747988][ T1234] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 492.769300][ T1234] usb 6-1: Using ep0 maxpacket: 32 [ 492.770045][ T1234] usb 6-1: New USB device found, idVendor=03f0, idProduct=4017, bcdDevice= 0.00 [ 492.770087][ T1234] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 492.774829][ T1234] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 492.774871][ T1234] usb 6-1: can't read configurations, error -61 [ 492.900264][ T1234] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 492.921474][ T1234] usb 6-1: Using ep0 maxpacket: 32 [ 492.922018][ T1234] usb 6-1: New USB device found, idVendor=03f0, idProduct=4017, bcdDevice= 0.00 [ 492.922062][ T1234] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 492.925099][T13114] ALSA: mixer_oss: invalid OSS volume '' [ 492.926736][ T1234] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 492.926772][ T1234] usb 6-1: can't read configurations, error -61 [ 492.926998][ T1234] usb usb6-port1: unable to enumerate USB device [ 493.252804][T13122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.253410][T13122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.278251][ T1234] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 493.440792][ T1234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 493.441229][ T1234] usb 2-1: not running at top speed; connect to a high speed hub [ 493.441250][ T1234] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 493.442846][ T1234] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 493.442863][ T1234] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 493.442875][ T1234] usb 2-1: config 14 has an invalid descriptor of length 101, skipping remainder of the config [ 493.442886][ T1234] usb 2-1: config 14 has no interface number 0 [ 493.442896][ T1234] usb 2-1: config 14 has no interface number 1 [ 493.442933][ T1234] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 493.442948][ T1234] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 493.442963][ T1234] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 24457, setting to 64 [ 493.442987][ T1234] usb 2-1: config 14 interface 57 has no altsetting 0 [ 493.442997][ T1234] usb 2-1: config 14 interface 228 has no altsetting 0 [ 493.447007][ T1234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.447026][ T1234] usb 2-1: Product: syz [ 493.447036][ T1234] usb 2-1: Manufacturer: syz [ 493.447044][ T1234] usb 2-1: SerialNumber: syz [ 493.934368][ T1234] legousbtower 2-1:14.57: interrupt endpoints not found [ 494.150960][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 494.150978][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 494.348833][ T1234] legousbtower 2-1:14.228: get version request failed: -71 [ 494.349041][ T1234] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 494.400571][ T1234] usb 2-1: USB disconnect, device number 126 [ 494.645389][T13135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1845'. [ 494.660063][T13135] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1845'. [ 494.660086][T13135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1845'. [ 494.800643][T13142] loop4: detected capacity change from 0 to 7 [ 494.802921][T13142] Dev loop4: unable to read RDB block 7 [ 494.802969][T13142] loop4: unable to read partition table [ 494.803216][T13142] loop4: partition table beyond EOD, truncated [ 494.803238][T13142] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 494.981818][T13147] fuse: Unknown parameter 'group_id00000000000000000000' [ 495.005240][ T31] kauditd_printk_skb: 97 callbacks suppressed [ 495.005262][ T31] audit: type=1326 audit(1789989100.559:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.0.1848" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 495.147428][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 495.262107][T13156] netlink: Only one type of NAT may be specified [ 495.262145][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.262774][T13156] netlink: Only one type of NAT may be specified [ 495.262805][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.263242][T13156] netlink: Only one type of NAT may be specified [ 495.263289][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.264137][T13161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.264507][T13161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.274261][T13156] netlink: Only one type of NAT may be specified [ 495.274283][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.274546][T13156] netlink: Only one type of NAT may be specified [ 495.274563][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.122369][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1854'. [ 496.454847][T13177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1857'. [ 496.590117][T13184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.590598][T13184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.737582][ T25] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 496.897828][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 496.899716][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=10.40 [ 496.901827][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 496.903965][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.903989][ T25] usb 2-1: Product: syz [ 496.904004][ T25] usb 2-1: Manufacturer: syz [ 496.904020][ T25] usb 2-1: SerialNumber: syz [ 497.277458][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 497.291701][T13180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1855'. [ 497.407376][ T9] usb 1-1: device descriptor read/64, error -71 [ 497.428397][ T25] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 497.429907][ T25] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 497.431867][ T25] usb 2-1: unit 56 not found! [ 497.507428][ T5619] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 497.558138][ T25] usb 2-1: USB disconnect, device number 127 [ 497.637956][ T5619] usb 6-1: device descriptor read/64, error -71 [ 497.658396][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 497.684426][T12401] udevd[12401]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.784458][T13206] fuse: Bad value for 'fd' [ 497.794804][ T9] usb 1-1: device descriptor read/64, error -71 [ 497.877297][ T5619] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 497.905661][ T9] usb usb1-port1: attempt power cycle [ 498.007448][ T5619] usb 6-1: device descriptor read/64, error -71 [ 498.119042][ T5619] usb usb6-port1: attempt power cycle [ 498.237311][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 498.258153][ T9] usb 1-1: device descriptor read/8, error -71 [ 498.407390][ T5759] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 498.457966][ T5619] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 498.480435][ T5619] usb 6-1: device descriptor read/8, error -71 [ 498.497502][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 498.523321][ T9] usb 1-1: device descriptor read/8, error -71 [ 498.559752][ T5759] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.560956][ T5759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.560986][ T5759] usb 2-1: config 1 has no interface number 0 [ 498.561031][ T5759] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.561058][ T5759] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 498.561094][ T5759] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 498.561125][ T5759] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 498.563632][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.563662][ T5759] usb 2-1: Product: syz [ 498.563679][ T5759] usb 2-1: Manufacturer: syz [ 498.563694][ T5759] usb 2-1: SerialNumber: syz [ 498.596312][ T31] audit: type=1800 audit(1789989104.149:2912): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1867" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 498.627937][ T9] usb usb1-port1: unable to enumerate USB device [ 498.718599][ T5619] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 498.741539][ T5619] usb 6-1: device descriptor read/8, error -71 [ 498.757491][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 498.808391][T13216] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 498.847876][ T5619] usb usb6-port1: unable to enumerate USB device [ 498.887491][ T9] usb 1-1: device descriptor read/64, error -71 [ 498.917458][T11383] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 499.067948][T11383] usb 5-1: Using ep0 maxpacket: 16 [ 499.071009][T11383] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.072082][T11383] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.072102][T11383] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.074214][T11383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.074252][T11383] usb 5-1: Product: syz [ 499.074261][T11383] usb 5-1: Manufacturer: syz [ 499.074270][T11383] usb 5-1: SerialNumber: syz [ 499.111007][T11383] usb 5-1: 0:2 : does not exist [ 499.127531][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 499.257406][ T9] usb 1-1: device descriptor read/64, error -71 [ 499.294399][ T5759] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 499.294478][ T5759] cdc_ncm 2-1:1.1: bind() failure [ 499.305312][ T5759] usb 2-1: USB disconnect, device number 2 [ 499.367856][ T9] usb usb1-port1: attempt power cycle [ 499.369060][T11383] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 499.414082][T11383] usb 5-1: USB disconnect, device number 27 [ 499.451759][T12401] udevd[12401]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.709129][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 499.728074][ T9] usb 1-1: device descriptor read/8, error -71 [ 499.936067][T13224] syz_tun: entered allmulticast mode [ 499.967532][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 499.991222][ T9] usb 1-1: device descriptor read/8, error -71 [ 500.099076][ T9] usb usb1-port1: unable to enumerate USB device [ 500.188090][T11383] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 500.316097][T13239] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 500.358998][T11383] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.363036][T11383] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.363069][T11383] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 500.377111][T11383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 500.377159][T11383] usb 2-1: SerialNumber: syz [ 500.435440][T11383] usb 2-1: No union descriptors [ 500.633086][T11383] usb 2-1: USB disconnect, device number 3 [ 500.698178][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 500.851092][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 500.854123][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 500.855852][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 500.855872][ T9] usb 1-1: config 0 has no interface number 0 [ 500.855907][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 500.862384][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.862410][ T9] usb 1-1: Product: syz [ 500.862423][ T9] usb 1-1: Manufacturer: syz [ 500.862437][ T9] usb 1-1: SerialNumber: syz [ 500.920802][ T9] usb 1-1: config 0 descriptor?? [ 501.151697][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 501.151793][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 501.151806][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 501.151857][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 501.164319][ T9] usb 1-1: USB disconnect, device number 31 [ 501.630494][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.630563][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.694511][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1877'. [ 501.873644][T13270] loop9: detected capacity change from 0 to 7 [ 502.011312][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.011381][ C0] buffer_io_error: 6 callbacks suppressed [ 502.011390][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.043830][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.043940][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.070436][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.070561][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.072997][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.073049][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.073300][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.073354][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.120038][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.120120][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.120380][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.120453][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.120528][T13270] ldm_validate_partition_table(): Disk read failed. [ 502.120714][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.120775][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.120927][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.120998][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.121135][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.121193][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 502.121399][T13270] Dev loop9: unable to read RDB block 0 [ 502.126929][T13270] loop9: unable to read partition table [ 502.127156][T13270] loop9: partition table beyond EOD, truncated [ 502.127374][T13270] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 502.279486][T13278] lo: entered promiscuous mode [ 502.279505][T13278] lo: entered allmulticast mode [ 502.280249][T13278] tunl0: entered promiscuous mode [ 502.280261][T13278] tunl0: entered allmulticast mode [ 502.280623][T13278] gre0: entered promiscuous mode [ 502.280633][T13278] gre0: entered allmulticast mode [ 502.294924][T13278] gretap0: entered promiscuous mode [ 502.294946][T13278] gretap0: entered allmulticast mode [ 502.295709][T13278] erspan0: entered promiscuous mode [ 502.295724][T13278] erspan0: entered allmulticast mode [ 502.302467][T13278] ip_vti0: entered promiscuous mode [ 502.302489][T13278] ip_vti0: entered allmulticast mode [ 502.303062][T13278] ip6_vti0: entered promiscuous mode [ 502.303076][T13278] ip6_vti0: entered allmulticast mode [ 502.310037][T13278] sit0: entered promiscuous mode [ 502.310059][T13278] sit0: entered allmulticast mode [ 502.310631][T13278] ip6tnl0: entered promiscuous mode [ 502.310646][T13278] ip6tnl0: entered allmulticast mode [ 502.311252][T13278] ip6gre0: entered promiscuous mode [ 502.311266][T13278] ip6gre0: entered allmulticast mode [ 502.321041][T13278] syz_tun: entered promiscuous mode [ 502.321062][T13278] syz_tun: entered allmulticast mode [ 502.321790][T13278] ip6gretap0: entered promiscuous mode [ 502.321804][T13278] ip6gretap0: entered allmulticast mode [ 502.333139][T13278] bridge0: entered promiscuous mode [ 502.333164][T13278] bridge0: entered allmulticast mode [ 502.345776][T13278] vcan0: entered promiscuous mode [ 502.345801][T13278] vcan0: entered allmulticast mode [ 502.346599][T13278] bond0: entered promiscuous mode [ 502.346617][T13278] bond_slave_0: entered promiscuous mode [ 502.346938][T13278] bond_slave_1: entered promiscuous mode [ 502.347118][T13278] bond0: entered allmulticast mode [ 502.347130][T13278] bond_slave_0: entered allmulticast mode [ 502.347144][T13278] bond_slave_1: entered allmulticast mode [ 502.386917][T13278] team0: entered promiscuous mode [ 502.386940][T13278] team_slave_0: entered promiscuous mode [ 502.401486][T13278] team_slave_1: entered promiscuous mode [ 502.401703][T13278] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 502.401945][T13278] team0: entered allmulticast mode [ 502.401960][T13278] team_slave_0: entered allmulticast mode [ 502.401974][T13278] team_slave_1: entered allmulticast mode [ 502.401990][T13278] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 502.410819][T13278] dummy0: entered promiscuous mode [ 502.410840][T13278] dummy0: entered allmulticast mode [ 502.411485][T13278] nlmon0: entered promiscuous mode [ 502.411500][T13278] nlmon0: entered allmulticast mode [ 502.424176][T13278] batadv0: entered promiscuous mode [ 502.424215][T13278] batadv0: entered allmulticast mode [ 502.439723][T13278] veth0: entered promiscuous mode [ 502.439745][T13278] veth0: entered allmulticast mode [ 502.440681][T13278] veth1: entered promiscuous mode [ 502.440697][T13278] veth1: entered allmulticast mode [ 502.488678][T13278] wg0: entered promiscuous mode [ 502.488700][T13278] wg0: entered allmulticast mode [ 502.489511][T13278] wg1: entered promiscuous mode [ 502.489527][T13278] wg1: entered allmulticast mode [ 502.508925][T13278] wg2: entered promiscuous mode [ 502.508949][T13278] wg2: entered allmulticast mode [ 502.509585][T13278] veth0_to_bridge: entered promiscuous mode [ 502.509601][T13278] veth0_to_bridge: entered allmulticast mode [ 502.540474][T13278] veth1_to_bridge: entered promiscuous mode [ 502.540497][T13278] veth1_to_bridge: entered allmulticast mode [ 502.554942][T13278] veth0_to_bond: entered promiscuous mode [ 502.554966][T13278] veth0_to_bond: entered allmulticast mode [ 502.565442][T13278] veth1_to_bond: entered promiscuous mode [ 502.565464][T13278] veth1_to_bond: entered allmulticast mode [ 502.605493][T13278] veth0_to_team: entered promiscuous mode [ 502.605520][T13278] veth0_to_team: entered allmulticast mode [ 502.656081][T13278] veth1_to_team: entered promiscuous mode [ 502.656103][T13278] veth1_to_team: entered allmulticast mode [ 502.671837][T13278] veth0_to_batadv: entered promiscuous mode [ 502.671859][T13278] veth0_to_batadv: entered allmulticast mode [ 502.672927][T13278] batadv_slave_0: entered promiscuous mode [ 502.672944][T13278] batadv_slave_0: entered allmulticast mode [ 502.690352][T13278] veth1_to_batadv: entered promiscuous mode [ 502.690375][T13278] veth1_to_batadv: entered allmulticast mode [ 502.691118][T13278] batadv_slave_1: entered promiscuous mode [ 502.691133][T13278] batadv_slave_1: entered allmulticast mode [ 502.700397][T13278] xfrm0: entered promiscuous mode [ 502.700419][T13278] xfrm0: entered allmulticast mode [ 502.707971][T13278] veth0_to_hsr: entered promiscuous mode [ 502.707993][T13278] veth0_to_hsr: entered allmulticast mode [ 502.723825][T13278] hsr_slave_0: entered allmulticast mode [ 502.728672][T13278] veth1_to_hsr: entered promiscuous mode [ 502.728693][T13278] veth1_to_hsr: entered allmulticast mode [ 502.735586][T13278] hsr_slave_1: entered allmulticast mode [ 502.736059][T13278] hsr0: entered promiscuous mode [ 502.736071][T13278] hsr0: entered allmulticast mode [ 502.736573][T13278] veth1_virt_wifi: entered promiscuous mode [ 502.736585][T13278] veth1_virt_wifi: entered allmulticast mode [ 502.745124][T13278] veth0_virt_wifi: entered promiscuous mode [ 502.745141][T13278] veth0_virt_wifi: entered allmulticast mode [ 502.746179][T13278] virt_wifi0: entered promiscuous mode [ 502.746195][T13278] virt_wifi0: entered allmulticast mode [ 502.746208][T13278] net_ratelimit: 56 callbacks suppressed [ 502.746220][T13278] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 502.907387][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.131617][ T31] audit: type=1326 audit(1789989108.679:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.3.1882" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x0 [ 503.660811][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.661117][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.832043][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.832346][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.888945][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 503.890041][ T31] audit: type=1326 audit(1789989109.439:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 503.890717][ T31] audit: type=1326 audit(1789989109.449:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 503.895304][ T31] audit: type=1326 audit(1789989109.449:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 503.896648][ T31] audit: type=1326 audit(1789989109.449:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 503.905209][ T31] audit: type=1326 audit(1789989109.459:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 503.905261][ T31] audit: type=1326 audit(1789989109.459:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 503.911966][ T31] audit: type=1326 audit(1789989109.469:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 503.913942][ T31] audit: type=1326 audit(1789989109.469:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 503.913991][ T31] audit: type=1326 audit(1789989109.469:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.5.1888" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f040ec code=0x7ffc0000 [ 504.047490][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 504.060589][ T9] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 504.072777][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.072806][ T9] usb 2-1: Product: syz [ 504.072820][ T9] usb 2-1: Manufacturer: syz [ 504.072833][ T9] usb 2-1: SerialNumber: syz [ 504.084614][ T9] usb 2-1: config 0 descriptor?? [ 504.105707][ T9] usb 2-1: selecting invalid altsetting 1 [ 504.105730][ T9] technisat-usb2: could not set alternate setting to 0 [ 504.380157][ T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 504.413884][ T9] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 504.413905][ T9] usb 2-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 504.753041][T13322] FAULT_INJECTION: forcing a failure. [ 504.753041][T13322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.753068][T13322] CPU: 1 UID: 0 PID: 13322 Comm: syz.3.1891 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.753086][T13322] Tainted: [L]=SOFTLOCKUP [ 504.753091][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.753098][T13322] Call Trace: [ 504.753105][T13322] [ 504.753110][T13322] dump_stack_lvl+0xe8/0x150 [ 504.753133][T13322] should_fail_ex+0x410/0x560 [ 504.753151][T13322] _copy_from_user+0x2d/0xb0 [ 504.753168][T13322] input_event_from_user+0xfe/0x290 [ 504.753182][T13322] ? __pfx_input_event_from_user+0x10/0x10 [ 504.753202][T13322] evdev_write+0x2c7/0x4c0 [ 504.753213][T13322] ? __lock_acquire+0x747/0x2de0 [ 504.753229][T13322] ? __pfx_evdev_write+0x10/0x10 [ 504.753242][T13322] ? bpf_lsm_file_permission+0x9/0x20 [ 504.753259][T13322] ? security_file_permission+0x75/0x260 [ 504.753281][T13322] ? rw_verify_area+0x203/0x4c0 [ 504.753300][T13322] ? __pfx_evdev_write+0x10/0x10 [ 504.753312][T13322] vfs_write+0x296/0xba0 [ 504.753345][T13322] ? __pfx_vfs_write+0x10/0x10 [ 504.753375][T13322] ? __fget_files+0x2a/0x420 [ 504.753396][T13322] ? __fget_files+0x2a/0x420 [ 504.753411][T13322] ? __fget_files+0x3a2/0x420 [ 504.753426][T13322] ? __fget_files+0x2a/0x420 [ 504.753447][T13322] ksys_write+0x150/0x270 [ 504.753466][T13322] ? __pfx_ksys_write+0x10/0x10 [ 504.753489][T13322] __do_fast_syscall_32+0x27a/0x6a0 [ 504.753509][T13322] ? do_fast_syscall_32+0x33/0x70 [ 504.753522][T13322] ? asm_int80_emulation+0x1a/0x20 [ 504.753534][T13322] ? do_int80_emulation+0x299/0x500 [ 504.753546][T13322] ? trace_irq_disable+0x3b/0x140 [ 504.753563][T13322] do_fast_syscall_32+0x33/0x70 [ 504.753586][T13322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.753610][T13322] RIP: 0023:0xf70cf0ec [ 504.753628][T13322] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 504.753645][T13322] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 504.753668][T13322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 504.753682][T13322] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.753693][T13322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.753701][T13322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 504.753708][T13322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.753727][T13322] [ 505.497590][ T1234] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 505.649405][ T1234] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 505.651485][ T1234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.651511][ T1234] usb 5-1: config 0 has no interfaces? [ 505.651541][ T1234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.695255][ T1234] usb 5-1: config 0 descriptor?? [ 505.911155][ T1234] usb 5-1: USB disconnect, device number 28 [ 505.967361][ T945] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 506.049296][T13360] loop5: detected capacity change from 0 to 4807 [ 506.065257][T13360] loop5: detected capacity change from 4807 to 5151 [ 506.125802][ T945] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 506.145489][ T945] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.145527][ T945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.322140][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 506.322171][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 506.997331][T11383] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 507.150599][T11383] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 507.153195][T11383] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 507.153230][T11383] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 507.156956][T11383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.156976][T11383] usb 1-1: Product: syz [ 507.156985][T11383] usb 1-1: Manufacturer: syz [ 507.156994][T11383] usb 1-1: SerialNumber: syz [ 507.218966][T11383] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 507.232886][T11383] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 507.750375][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.750639][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.778544][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.778837][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.781148][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.781449][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.783067][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.783385][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.783652][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 507.784530][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1906'. [ 508.190215][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.190989][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.337412][ T5759] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 508.487317][ T5759] usb 5-1: Using ep0 maxpacket: 8 [ 508.488111][ T5759] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 508.489482][ T5759] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.489506][ T5759] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.489553][ T5759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 508.489612][ T5759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 508.489656][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.502531][ T5759] hub 5-1:1.0: bad descriptor, ignoring hub [ 508.502588][ T5759] hub 5-1:1.0: probe with driver hub failed with error -5 [ 508.505563][ T5759] cdc_wdm 5-1:1.0: skipping garbage [ 508.505581][ T5759] cdc_wdm 5-1:1.0: skipping garbage [ 508.511364][ T5759] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 508.511441][ T5759] cdc_wdm 5-1:1.0: Unknown control protocol [ 508.721202][ T945] usbhid 6-1:1.0: can't add hid device: -71 [ 508.721323][ T945] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 508.729832][ T945] usb 6-1: USB disconnect, device number 47 [ 508.809350][ T25] usb 5-1: USB disconnect, device number 29 [ 509.208820][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 509.227371][ T5759] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 509.359351][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 509.361054][ T25] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 509.363401][ T25] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 509.363427][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 509.363506][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.363553][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.377342][ T5759] usb 6-1: Using ep0 maxpacket: 16 [ 509.378215][ T5759] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 509.379492][ T5759] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 509.379521][ T5759] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 509.379542][ T5759] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 3 [ 509.379563][ T5759] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 224 [ 509.384961][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.384985][ T5759] usb 6-1: Product: syz [ 509.384999][ T5759] usb 6-1: Manufacturer: syz [ 509.385013][ T5759] usb 6-1: SerialNumber: syz [ 509.421564][ T5759] usb 6-1: config 0 descriptor?? [ 509.523506][ T25] hub 5-1:1.0: bad descriptor, ignoring hub [ 509.523539][ T25] hub 5-1:1.0: probe with driver hub failed with error -5 [ 509.524277][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 509.524295][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 509.524317][ T25] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 509.704096][ T5759] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 509.704222][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 509.704358][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 509.709993][ T945] usb 1-1: USB disconnect, device number 32 [ 509.749186][ T5759] usb 6-1: USB disconnect, device number 48 [ 509.802173][ T5759] mcba_usb 6-1:0.0 can0: device disconnected [ 509.803260][ T945] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 509.805700][ T945] kobil_sct 1-1:1.0: device disconnected [ 509.874820][ T31] kauditd_printk_skb: 123 callbacks suppressed [ 509.874841][ T31] audit: type=1326 audit(1789989115.429:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13412 comm="syz.0.1912" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 509.887634][T11383] usb 5-1: USB disconnect, device number 30 [ 510.223547][T13416] netlink: 'syz.5.1913': attribute type 3 has an invalid length. [ 510.247382][ T945] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 510.377823][ T945] usb 1-1: device descriptor read/64, error -71 [ 510.619783][ T945] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 510.747839][ T945] usb 1-1: device descriptor read/64, error -71 [ 510.857628][ T945] usb usb1-port1: attempt power cycle [ 511.019792][T13437] fuse: Bad value for 'fd' [ 511.197321][ T945] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 511.208575][ T31] audit: type=1326 audit(1789989116.769:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13441 comm="syz.4.1918" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x0 [ 511.219580][ T945] usb 1-1: device descriptor read/8, error -71 [ 511.458181][ T945] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 511.478079][ T945] usb 1-1: device descriptor read/8, error -71 [ 511.594135][ T945] usb usb1-port1: unable to enumerate USB device [ 512.137655][ T31] audit: type=1326 audit(1789989117.699:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.1922" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 512.139291][ T31] audit: type=1326 audit(1789989117.699:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.1922" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 512.142859][ T31] audit: type=1326 audit(1789989117.699:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.1922" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 512.143282][ T31] audit: type=1326 audit(1789989117.699:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.1922" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 512.143640][ T31] audit: type=1326 audit(1789989117.699:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.1922" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 512.144557][ T31] audit: type=1326 audit(1789989117.699:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.1922" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 512.144948][ T31] audit: type=1326 audit(1789989117.699:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.1922" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 512.145894][ T31] audit: type=1326 audit(1789989117.699:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.1922" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 512.676999][T13468] : entered promiscuous mode [ 512.723543][T13468] openvswitch: : Dropping previously announced user features [ 512.829761][T13473] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 512.833896][T13473] __nla_validate_parse: 44 callbacks suppressed [ 512.833917][T13473] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1925'. [ 513.317311][ T5759] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 513.447353][ T1234] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 513.470504][ T5759] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 513.471789][ T5759] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.471843][ T5759] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.471884][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.503328][ T5759] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 513.611837][ T1234] usb 6-1: unable to get BOS descriptor or descriptor too short [ 513.611894][ T1234] usb 6-1: New USB device found, idVendor=1235, idProduct=0103, bcdDevice=80.0d [ 513.611933][ T1234] usb 6-1: no configurations [ 513.611946][ T1234] usb 6-1: can't read configurations, error -22 [ 513.747472][ T1234] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 513.911243][ T1234] usb 6-1: unable to get BOS descriptor or descriptor too short [ 513.911302][ T1234] usb 6-1: New USB device found, idVendor=1235, idProduct=0103, bcdDevice=80.0d [ 513.911341][ T1234] usb 6-1: no configurations [ 513.911354][ T1234] usb 6-1: can't read configurations, error -22 [ 513.911626][ T1234] usb usb6-port1: attempt power cycle [ 514.135550][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 514.248419][ T1234] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 514.271982][ T1234] usb 6-1: unable to get BOS descriptor or descriptor too short [ 514.272041][ T1234] usb 6-1: New USB device found, idVendor=1235, idProduct=0103, bcdDevice=80.0d [ 514.272078][ T1234] usb 6-1: no configurations [ 514.272092][ T1234] usb 6-1: can't read configurations, error -22 [ 514.397624][ T1234] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 514.420269][ T1234] usb 6-1: unable to get BOS descriptor or descriptor too short [ 514.420330][ T1234] usb 6-1: New USB device found, idVendor=1235, idProduct=0103, bcdDevice=80.0d [ 514.420369][ T1234] usb 6-1: no configurations [ 514.420382][ T1234] usb 6-1: can't read configurations, error -22 [ 514.420701][ T1234] usb usb6-port1: unable to enumerate USB device [ 514.857407][ T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 515.018237][ T25] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 515.021430][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.021460][ T25] usb 5-1: config 0 has no interface number 0 [ 515.025956][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.025985][ T25] usb 5-1: Product: syz [ 515.026002][ T25] usb 5-1: Manufacturer: syz [ 515.026017][ T25] usb 5-1: SerialNumber: syz [ 515.091682][ T25] usb 5-1: config 0 descriptor?? [ 515.310962][ T25] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 515.350187][ T25] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.361998][ T25] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 515.362451][ T25] usb 5-1: media controller created [ 515.515666][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.583632][T13503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.583958][T13503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.316920][T13517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.328670][T13517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.544263][T13519] usb 1-1: USB disconnect, device number 37 [ 516.664196][ T2360] pvrusb2: control-write URB short, expected=6 got=0 [ 516.664220][ T2360] pvrusb2: Device being rendered inoperable [ 516.667063][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 516.667144][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 516.667153][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 516.737783][ T25] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 516.760324][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 516.760391][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 516.789005][T13523] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1939'. [ 516.789034][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1939'. [ 516.857818][T13523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1939'. [ 516.903366][ T2360] pvrusb2: Attached sub-driver cx25840 [ 516.939326][ T25] usb 5-1: USB disconnect, device number 32 [ 517.054888][ T2360] pvrusb2: Attempted to execute control transfer when device not ok [ 517.054917][ T2360] pvrusb2: Attempted to execute control transfer when device not ok [ 517.054927][ T2360] pvrusb2: Attempted to execute control transfer when device not ok [ 517.054937][ T2360] pvrusb2: Attempted to execute control transfer when device not ok [ 517.054944][ T2360] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 517.357451][ T2360] TUNER: Unable to find symbol tda829x_probe() [ 517.441913][T13531] binder: BINDER_SET_CONTEXT_MGR already set [ 517.441997][T13531] binder: 13528:13531 ioctl 4018620d 80000100 returned -16 [ 517.453302][T13536] binder: BINDER_SET_CONTEXT_MGR already set [ 517.453317][T13536] binder: 13528:13536 ioctl 4018620d 80004a80 returned -16 [ 517.531926][ T2360] DVB: Unable to find symbol tda9887_attach() [ 517.531945][ T2360] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 517.551588][ T2360] pvrusb2: Attached sub-driver tuner [ 517.551602][ T2360] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 517.551661][ T2360] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 517.960357][T13544] netlink: 'syz.4.1944': attribute type 30 has an invalid length. [ 518.080162][T13544] bond3: option arp_missed_max: invalid value (0) [ 518.080184][T13544] bond3: option arp_missed_max: allowed values 1 - 255 [ 518.086476][T13544] bond3 (unregistering): Released all slaves [ 518.267380][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.782841][T13562] loop4: detected capacity change from 0 to 7 [ 518.784402][T13562] Dev loop4: unable to read RDB block 7 [ 518.784450][T13562] loop4: unable to read partition table [ 518.784725][T13562] loop4: partition table beyond EOD, truncated [ 518.784746][T13562] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 518.909759][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 518.911071][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 519.327589][ T1234] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 519.348075][T13569] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 519.348105][T13569] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 519.348262][T13569] vhci_hcd vhci_hcd.0: Device attached [ 519.383605][ T31] kauditd_printk_skb: 92 callbacks suppressed [ 519.383627][ T31] audit: type=1326 audit(1789989124.939:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.3.1947" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x0 [ 519.510336][ T1234] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 519.511659][ T1234] usb 6-1: config 0 has an invalid interface number: 74 but max is 1 [ 519.511688][ T1234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.511706][ T1234] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 519.511726][ T1234] usb 6-1: config 0 has no interface number 0 [ 519.511761][ T1234] usb 6-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.511775][ T1234] usb 6-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 519.511790][ T1234] usb 6-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 519.511805][ T1234] usb 6-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 519.573637][ T1234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.573669][ T1234] usb 6-1: Product: syz [ 519.573685][ T1234] usb 6-1: Manufacturer: syz [ 519.573701][ T1234] usb 6-1: SerialNumber: syz [ 519.618923][ T945] usb 42-1: SetAddress Request (2) to port 0 [ 519.618988][ T945] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 519.653883][T13573] vhci_hcd: connection reset by peer [ 519.654286][ T6749] vhci_hcd vhci_hcd.4: stop threads [ 519.654305][ T6749] vhci_hcd vhci_hcd.4: release socket [ 519.654343][ T6749] vhci_hcd vhci_hcd.4: disconnect device [ 519.687087][ T1234] usb 6-1: config 0 descriptor?? [ 519.928143][ T1234] cypress_m8 6-1:0.74: HID->COM RS232 Adapter converter detected [ 519.935686][ T1234] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 519.991106][ T1234] usb 6-1: USB disconnect, device number 53 [ 520.071418][ T1234] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 520.090102][ T1234] cypress_m8 6-1:0.74: device disconnected [ 520.745542][T13597] loop4: detected capacity change from 0 to 7 [ 520.759494][T13597] Dev loop4: unable to read RDB block 7 [ 520.759543][T13597] loop4: unable to read partition table [ 520.760614][T13597] loop4: partition table beyond EOD, truncated [ 520.760650][T13597] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 521.740771][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.742743][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.069597][T13634] fuse: Bad value for 'group_id' [ 522.069612][T13634] fuse: Bad value for 'group_id' [ 522.072669][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1965'. [ 522.127323][ T25] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 522.259711][ T25] usb 5-1: device descriptor read/64, error -71 [ 522.365714][T13644] loop4: detected capacity change from 0 to 7 [ 522.366649][T13644] Dev loop4: unable to read RDB block 7 [ 522.366694][T13644] loop4: unable to read partition table [ 522.366945][T13644] loop4: partition table beyond EOD, truncated [ 522.366994][T13644] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 522.400405][T13642] input: syz1 as /devices/virtual/input/input64 [ 522.454380][ T1234] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 522.507603][ T25] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 522.609605][ T1234] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 522.612101][ T1234] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 522.612131][ T1234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.612151][ T1234] usb 6-1: config 0 has no interface number 0 [ 522.612194][ T1234] usb 6-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9 [ 522.612221][ T1234] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x9 has invalid maxpacket 33928, setting to 1024 [ 522.612249][ T1234] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x5 has invalid maxpacket 14129, setting to 64 [ 522.612274][ T1234] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 522.612317][ T1234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.646252][ T25] usb 5-1: device descriptor read/64, error -71 [ 522.712130][ T1234] usb 6-1: config 0 descriptor?? [ 522.747937][ T32] INFO: task kworker/0:4:5701 blocked for more than 143 seconds. [ 522.747967][ T32] Tainted: G L syzkaller #0 [ 522.747979][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.747989][ T32] task:kworker/0:4 state:D [ 522.748018][ T25] usb usb5-port1: attempt power cycle [ 522.748021][ T32] stack:19232 pid:5701 tgid:5701 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 522.748047][ T32] Workqueue ** replaying previous printk message ** [ 522.748047][ T32] Workqueue: usb_hub_wq hub_event [ 522.748182][ T32] Call Trace: [ 522.748190][ T32] [ 522.748205][ T32] __schedule+0x17db/0x58f0 [ 522.748289][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 522.748325][ T32] ? __pfx___schedule+0x10/0x10 [ 522.748368][ T32] ? schedule+0x90/0x2b0 [ 522.748403][ T32] schedule+0x164/0x2b0 [ 522.748435][ T32] schedule_preempt_disabled+0x13/0x30 [ 522.748456][ T32] __mutex_lock+0x7c1/0x1550 [ 522.748484][ T32] ? __mutex_lock+0x5d4/0x1550 [ 522.748511][ T32] ? hub_event+0x20c9/0x4d30 [ 522.748538][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 522.748584][ T32] hub_event+0x20c9/0x4d30 [ 522.748608][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 522.748651][ T32] ? register_lock_class+0x31/0x2e0 [ 522.748706][ T32] ? __pfx_hub_event+0x10/0x10 [ 522.748741][ T32] ? rcu_is_watching+0x16/0xb0 [ 522.748778][ T32] ? process_scheduled_works+0x97a/0x1630 [ 522.748826][ T32] process_scheduled_works+0xc3d/0x1630 [ 522.748887][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.748931][ T32] ? assign_work+0x3cf/0x5d0 [ 522.748963][ T32] worker_thread+0xa47/0xfb0 [ 522.749005][ T32] ? __kthread_parkme+0x71/0x1f0 [ 522.749045][ T32] kthread+0x38b/0x480 [ 522.749067][ T32] ? __pfx_worker_thread+0x10/0x10 [ 522.749119][ T32] ? __pfx_kthread+0x10/0x10 [ 522.749145][ T32] ret_from_fork+0x514/0xb70 [ 522.749183][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 522.749215][ T32] ? __switch_to+0xc89/0x1420 [ 522.749245][ T32] ? __pfx_kthread+0x10/0x10 [ 522.749268][ T32] ret_from_fork_asm+0x1a/0x30 [ 522.753563][ T1234] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 522.762205][ T32] [ 522.762271][ T32] [ 522.762271][ T32] Showing all locks held in the system: [ 522.762280][ T32] locks held by kworker/0:0/9: 6, on CPU#0: [ 522.762294][ T32] #0: ffff8880226a8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.762353][ T32] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.762402][ T32] #2: ffff888029f051d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 522.762449][ T32] #3: ffff8880661971d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 522.762616][ T32] #4: ffff88803dccf1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 522.762659][ T32] #5: ffffffff8ebf7d08 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 522.762708][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 522.762721][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 522.762767][ T32] #1: ffffffff9ad39098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 522.762865][ T32] locks held by kworker/1:0/25: 6, on CPU#1: [ 522.762878][ T32] #0: ffff8880226a8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.762934][ T32] #1: ffffc900001f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.762983][ T32] #2: ffff88802a0711d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 522.763027][ T32] #3: ffff88802a075568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 522.763074][ T32] #4: ffff888029fee760 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 522.763119][ T32] #5: ffffffff8fafb968 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 522.763184][ T32] locks held by kworker/1:1/30: 5, on CPU#1: [ 522.763197][ T32] #0: ffff8880226a8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.763246][ T32] #1: ffffc90000a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.763293][ T32] #2: ffff8880295d61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 522.763336][ T32] #3: ffff8880294d1568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 522.763381][ T32] #4: ffff88802b405660 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 522.763426][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 522.763439][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 522.763503][ T32] locks held by kworker/0:2/945: 5, on CPU#0: [ 522.763516][ T32] #0: ffff8880226a8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.763563][ T32] #1: ffffc900048bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.763612][ T32] #2: ffff88802b4eb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 522.773522][ T32] #3: ffff88802b4ef568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 522.773580][ T32] #4: ffff88802b422b60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 522.773645][ T32] locks held by kworker/1:2/1234: 5, last CPU#1: [ 522.773660][ T32] #0: ffff8880226a8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.773710][ T32] #1: ffffc900053d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.773759][ T32] #2: ffff88802a0af1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 522.773803][ T32] #3: ffff88802a0eb568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x618/0x4d30 [ 522.773847][ T32] #4: ffff88802a0ac090 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x52/0x840 [ 522.773974][ T32] locks held by klogd/4973: 1, last CPU#0: [ 522.773988][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 522.774097][ T32] locks held by getty/5375: 2, on CPU#1: [ 522.774111][ T32] #0: ffff8880361730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 522.774194][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 522.774245][ T32] locks held by syz-executor/5633: 4, last CPU#0: [ 522.774258][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 522.774313][ T32] #1: ffff88807abe36b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 522.774379][ T32] #2: ffff8880772729f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 522.774434][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 522.774490][ T32] locks held by kworker/0:4/5701: 5, on CPU#0: [ 522.774503][ T32] #0: ffff8880226a8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.774551][ T32] #1: ffffc900041afc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.774599][ T32] #2: ffff8880298061d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 522.774643][ T32] #3: ffff88802961a568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 522.774686][ T32] #4: ffff88802b405660 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 522.774734][ T32] locks held by kworker/u8:37/6746: 4, last CPU#0: [ 522.774747][ T32] #0: ffff888078c3f940 ((wq_completion)ath10k_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.774795][ T32] #1: ffffc90006707c40 ((work_completion)(&ar->register_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.774843][ T32] #2: ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb9/0x720 [ 522.774895][ T32] #3: ffffffff8eea5d20 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 522.774954][ T32] locks held by udevd/12401: 4, on CPU#0: [ 522.774967][ T32] #0: ffff88807cc0c3f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 522.786611][ T32] #1: ffff88802a803080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 522.786717][ T32] #2: ffff888056f722d8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 522.786769][ T32] #3: ffff8880661971d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 522.786869][ T32] locks held by syz.1.1972/13651: 4, last CPU#0: [ 522.786884][ T32] #0: ffff88802c7f0ba0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xbb8/0x2d00 [ 522.786985][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: sctp_v6_get_dst+0x4b0/0x1d10 [ 522.787071][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip6_route_output_flags+0x2e/0x5d0 [ 522.787548][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip6_pol_route+0x163/0x14d0 [ 522.787598][ T32] locks held by syz.1.1972/13653: 1, on CPU#0: [ 522.787611][ T32] #0: ffff88802c7f0ba0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_setsockopt+0x21c/0x12c0 [ 522.787657][ T32] [ 522.787663][ T32] ============================================= [ 522.787663][ T32] [ 522.787672][ T32] NMI backtrace for cpu 0 [ 522.787687][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 522.787711][ T32] Tainted: [L]=SOFTLOCKUP [ 522.787718][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.787730][ T32] Call Trace: [ 522.787737][ T32] [ 522.787745][ T32] dump_stack_lvl+0xe8/0x150 [ 522.787773][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 522.787830][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 522.787867][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 522.787895][ T32] sys_info+0x135/0x170 [ 522.787936][ T32] watchdog+0xfd7/0x1030 [ 522.787974][ T32] ? watchdog+0x1c7/0x1030 [ 522.787999][ T32] kthread+0x38b/0x480 [ 522.788018][ T32] ? __pfx_watchdog+0x10/0x10 [ 522.788045][ T32] ? __pfx_kthread+0x10/0x10 [ 522.788065][ T32] ret_from_fork+0x514/0xb70 [ 522.788086][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 522.788118][ T32] ? __switch_to+0xc89/0x1420 [ 522.788146][ T32] ? __pfx_kthread+0x10/0x10 [ 522.788165][ T32] ret_from_fork_asm+0x1a/0x30 [ 522.788205][ T32] [ 522.788231][ T32] Sending NMI from CPU 0 to CPUs 1: [ 522.788260][ C1] NMI backtrace for cpu 1 [ 522.788278][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.788303][ C1] Tainted: [L]=SOFTLOCKUP [ 522.788310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.788321][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 522.788377][ C1] Code: e8 1e 35 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 35 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 522.788393][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 522.788411][ C1] RAX: 1ffffffff35a7200 RBX: 00000000000003fd RCX: 0000000000000000 [ 522.788424][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 522.788436][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 522.788449][ C1] R10: dffffc0000000000 R11: ffffffff85729520 R12: dffffc0000000000 [ 522.788463][ C1] R13: 0000000000000000 R14: ffffffff9ad390c0 R15: 0000000000000000 [ 522.788476][ C1] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 522.788491][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.788505][ C1] CR2: 00000000f53a8edc CR3: 000000007437a000 CR4: 00000000003526f0 [ 522.788523][ C1] Call Trace: [ 522.788530][ C1] [ 522.788539][ C1] wait_for_lsr+0x184/0x2f0 [ 522.788561][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 522.788589][ C1] serial8250_console_write+0xaa1/0x1200 [ 522.788607][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 522.788631][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 522.788649][ C1] ? __schedule+0x17f1/0x58f0 [ 522.788682][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 522.788708][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 522.788730][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 522.788756][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 522.788806][ C1] nbcon_kthread_func+0x679/0x880 [ 522.788828][ C1] ? nbcon_kthread_func+0x163/0x880 [ 522.788846][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 522.788873][ C1] ? __kthread_parkme+0x71/0x1f0 [ 522.788898][ C1] ? __kthread_parkme+0x199/0x1f0 [ 522.788925][ C1] kthread+0x38b/0x480 [ 522.788942][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 522.788960][ C1] ? __pfx_kthread+0x10/0x10 [ 522.788985][ C1] ret_from_fork+0x514/0xb70 [ 522.789004][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 522.789030][ C1] ? __switch_to+0xc89/0x1420 [ 522.789055][ C1] ? __pfx_kthread+0x10/0x10 [ 522.789072][ C1] ret_from_fork_asm+0x1a/0x30 [ 522.789134][ C1] [ 522.806126][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 524.011574][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 524.022294][ T32] Tainted: [L]=SOFTLOCKUP [ 524.026623][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.036700][ T32] Call Trace: [ 524.039997][ T32] [ 524.042933][ T32] vpanic+0x56d/0xa60 [ 524.046944][ T32] ? __pfx___schedule+0x10/0x10 [ 524.051813][ T32] ? __pfx_vpanic+0x10/0x10 [ 524.056339][ T32] panic+0xc5/0xd0 [ 524.060077][ T32] ? __pfx_panic+0x10/0x10 [ 524.064513][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 524.070005][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 524.075514][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 524.081796][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 524.087978][ T32] watchdog+0x1030/0x1030 [ 524.092328][ T32] ? watchdog+0x1c7/0x1030 [ 524.096756][ T32] kthread+0x38b/0x480 [ 524.100836][ T32] ? __pfx_watchdog+0x10/0x10 [ 524.105517][ T32] ? __pfx_kthread+0x10/0x10 [ 524.110118][ T32] ret_from_fork+0x514/0xb70 [ 524.114719][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 524.119846][ T32] ? __switch_to+0xc89/0x1420 [ 524.124543][ T32] ? __pfx_kthread+0x10/0x10 [ 524.129143][ T32] ret_from_fork_asm+0x1a/0x30 [ 524.133937][ T32] [ 524.137228][ T32] Kernel Offset: disabled [ 524.141555][ T32] Rebooting in 86400 seconds..