last executing test programs: 7m35.934918376s ago: executing program 1 (id=4708): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0xb) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000340)=0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r4, 0x0, 0x3, 0x5, &(0x7f0000000400)="697ab143ae", 0x5}) syz_usb_connect(0x6, 0x4a, &(0x7f0000000540)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x2, 0x5002) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, &(0x7f0000000280)) 7m32.763799917s ago: executing program 1 (id=4714): open(0x0, 0x60840, 0xa2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000f43000/0x3000)=nil, 0x3000, 0x16) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$unix(0x1, 0x7, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000340)={'8255\x00', [0x8005, 0x5, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) ioctl$COMEDI_DEVINFO(0xffffffffffffffff, 0x80b06401, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x80000001}, 0x31) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) syz_clone(0x50104100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)={0x2, r5, 0x3, 0xf5f, 0xcb2b, 0x200000d0, 0x0, 0xc, 0x6}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m30.287549912s ago: executing program 1 (id=4717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000040000001000"], 0x48) 7m29.347113151s ago: executing program 1 (id=4720): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000000)='./file0\x00', 0x517002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x80010, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=0x4, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x1, 0x301000) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) 7m27.984126396s ago: executing program 1 (id=4723): r0 = socket$nl_route(0x10, 0x3, 0x0) inotify_init() prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x800, 0x182) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x400, @local}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000006a0001002abd7000fbdbdf25020000000000000008000100020000009002c165910d8b41bfb7e12c7842"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x6000, 0x0) 7m26.684489492s ago: executing program 1 (id=4725): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) 7m26.108801085s ago: executing program 32 (id=4725): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) 10.12311902s ago: executing program 0 (id=6199): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) timerfd_create(0x8, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ptrace$getenv(0x4201, r1, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000640)={0xc}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.784119176s ago: executing program 0 (id=6202): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x5452, 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcde5", 0x3) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 7.599274171s ago: executing program 4 (id=6204): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x5}}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102376, 0x18fe8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r2, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) 7.531963055s ago: executing program 3 (id=6205): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x32}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991311b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) 6.722870524s ago: executing program 3 (id=6206): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x38}}, 0x4008000) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x100) ioctl$CEC_G_MODE(r4, 0x80046108, &(0x7f0000000040)) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) 6.503227711s ago: executing program 3 (id=6209): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000300)=ANY=[], 0xfffffdd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x3214040, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\v/'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xac01, 0x4f, &(0x7f00000003c0)="2fa4aaca555c80e980979899f7a2d0a79e57e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5"}], 0x1}) 5.966120659s ago: executing program 4 (id=6212): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x2000007) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r4, 0x0, 0x2000fb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(r2, 0x2b1c, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x5, 0x0) recvmmsg(r5, &(0x7f00000007c0)=[{{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/38, 0x26}, {&(0x7f0000000700)=""/104, 0x68}], 0x2}, 0x8001}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x6) r6 = socket(0xa, 0x800, 0x80003a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x9f94) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) 4.954822899s ago: executing program 2 (id=6214): syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff1000000088a80c0081001c000800450000380000000000019078ac1e0001ac1414aa03049092030200004500000000000000ff2f00007f00000100"/78], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00007f0000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETGROUP(r5, 0x400454c8, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000600000000c002b8008000100", @ANYRES32, @ANYBLOB="ac32695add0077208af79726a589210000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 4.675752917s ago: executing program 5 (id=6216): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="02"], 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0xc1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x8814) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xc7}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) setpgid(r4, r4) tkill(r4, 0x7) tkill(r4, 0x37) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000fc000000080049f7001c0000000000029078ac1e0001e0000001177c9078ac141430"], 0x0) mmap(&(0x7f00005fe000/0x3000)=nil, 0x3000, 0x3000000, 0x6031, 0xffffffffffffffff, 0xb528c000) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) 4.493719263s ago: executing program 4 (id=6217): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a40, 0xcd) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x11, r0, 0xec778000) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 3.732658526s ago: executing program 0 (id=6218): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0) close(r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r10, 0x2, 0x1) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x66366bc67b3dea63}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x64}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004004}, 0x804) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x3ff, 0x8000, 0x0, 0x56, 0x9d34, 0x101]}, &(0x7f0000000100)=0x78) 3.655440589s ago: executing program 4 (id=6219): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = fsopen(&(0x7f00000000c0)='efs\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000f6dbdf2502001400fe01fd0900000000060015000500000014001680100008800c80028008000100ff070000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xaa, 0x8a, 0x1, 0x2, @private0, @loopback, 0x1, 0x20, 0x10000, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r5, @ANYBLOB="000229bd7000ffdbdf2515000000980001801400020067656e657665300000000000000000001400020070696d3672656731000000000000000008000100", @ANYRES32=r8, @ANYBLOB="141003006d6163767461703000000000000000001400020065727370616e3000000000000000000014000200626f6e645f076c0876655f300000000014000200776732000000000000000000000000001400020076657468315f6d6163767461700000003400018008000100c3a474809405fd776a1a7f6f2f54d58cb982b945a55b54b062b9fbed5df00413caf3468ec12a667634563c1c0eda76bda7f8fa249bf3", @ANYRES32=r9, @ANYBLOB="14000200766c616e300000000000000000000000140002007465616d5f736c6176655f3000000000"], 0xe0}}, 0x8000005) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'wg0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000040)={'veth1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000f14010028bd7000fcdbdf250a0045"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x41000) 3.654795559s ago: executing program 5 (id=6220): mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x200000}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x748, @remote, 0x0, 0x2}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050203"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x2, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/152, 0x1a0, 0x98, 0x0, 0x9}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xa) 3.531202004s ago: executing program 2 (id=6221): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002c40)={0x8, {"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", 0x1000}}, 0x1006) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9000000042000701feffffffffdbdf25037c"], 0x90}}, 0x2004c000) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000000)={0x1, 0x4}) 3.483448063s ago: executing program 0 (id=6222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3.311735539s ago: executing program 4 (id=6223): r0 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001740)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028040000100240001"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000440)) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0x12, 0x0, 0x8, 0x4, 0x6, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1018, 0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f00000000c0)={0x7, 0x4}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.16531001s ago: executing program 2 (id=6224): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e22, 0x0, @private1, 0x41f5}}}, 0x3a) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000f40)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000c, 0x11, r3, 0x2cb01000) r4 = syz_usb_connect(0x6, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040c60a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2600, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), &(0x7f0000000380)}, 0x55) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000780)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2031d0000000d00e28821af17d1b0fa94e52d15a32352c2dd0d5b5091cb2fb161f4f324bde75b3f9aa018a7e67650d6f3407dfaf1d13ae6dd9017eb3a2839c72bfa080d80ba6946ef8042d4d4fbe9b4ea85c19a700c5eb82f3fa15fc361e31b48cd6da55c861c941bc18dd61b016eda135150628996ec5f2ff23393243eb1780e9b8010957a2a5cce12f07b687b924276bb800bad0e6db2e778943b296e39419da39a10cc71f7f0c765d39218c650f8ea6b89aad4e7357c8e068e014531268b1b37d4097c2aeae2a9afc1b41b14971f69a404b70430f"], &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1b, 0x3, 0xb, "f8dfceee", "3181baf0"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0xae, 0x8, 0x4, 0x0, 0x9}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0x18, 0x49, "8c3acfe13e4644f02e82360122c38133a3cda8b415bee8c0791a27a7d1a335179e7fa6ce86d08b6da587b9d010bbb9660572a00800e66ca4b2c7d1c09a5ba5c98927987e498d6d779f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x60, 0x1}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000440)={0x40, 0xb, 0x2, "9cb2"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x19, 0x2, 'kx'}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x3}}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) 2.871481084s ago: executing program 4 (id=6225): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.535552156s ago: executing program 3 (id=6226): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x24048085) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@gettfilter={0x5c, 0x2e, 0x504, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xffff, 0xfff1}, {0xffff, 0x9}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xfffffff9}]}, 0x5c}}, 0x41) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5025bbc890600027842cf5230000000000000000288c9d307d1da6f018b1804b33d2623b1046995b779d6a831cb5c1a8de963069ce68528649643039128a55a950d5b9cbd8a062f42cc1831e0f07c82a2481c7736a62fa484f9603a48638b84e3bfa11beacfe15fb382a95f8f8b2b40fba140d23fbf1c71f8dbfe6077885ee264093f8fed016e81439f6afbe4d6189d5708f44da4db29ef5e613b6394e1f76b840f6997572a2e86a46bb67d51d675d1ce633b50b26d43b9fb2f62b6f8390ffbec085c1bf93f14f58a5b9e6e9d5a3bbcf0a200a8c55d9d73451afe9a45142673f208005ade2cb699fdb7a6b92de", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050029bd70000078771c8774c2", @ANYRES8=r4, @ANYRES32=r7], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[], 0x0) 1.81396089s ago: executing program 0 (id=6227): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@sndinfo={0x20, 0x84, 0x2, {0x24de, 0x201, 0x4, 0x6f, r7}}], 0x20, 0x20008001}], 0x1, 0x24010000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x3f) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve1\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'wlan1\x00'}, {0x14, 0x35, 'gretap0\x00'}]}]}, 0x98}}, 0x884) 1.632601177s ago: executing program 3 (id=6228): syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000f0000001c0007800c0004002e2d0000000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) 1.265438734s ago: executing program 5 (id=6229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0xffffffff, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xffffffffffffff1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x8, 0x0, 0x0}}, 0x10) 996.020368ms ago: executing program 5 (id=6230): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 891.714066ms ago: executing program 0 (id=6231): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) getsockopt(r4, 0x28, 0x21, 0xfffffffffffffffc, &(0x7f0000000100)) 891.177132ms ago: executing program 5 (id=6232): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r7, 0x101, 0x3, 0x0, 0x0, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89b1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r10, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200), 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x4e) r12 = syz_open_procfs$namespace(r2, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) 278.441116ms ago: executing program 3 (id=6233): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 210.911565ms ago: executing program 5 (id=6234): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x60, 0x0}}], 0x34000, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000f40)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000c, 0x11, r3, 0x2cb01000) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000780)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0xd0, {0xd0, 0xe, "28821af17d1b0fa94e52d15a32352c2dd0d5b5091cb2fb161f4f324bde75b3f9aa018a7e67650d6f3407dfaf1d13ae6dd9017eb3a2839c72bfa080d80ba6946ef8042d4d4fbe9b4ea85c19a700c5eb82f3fa15fc361e31b48cd6da4dc861c941bc18dd61b0160628996ec5f2ff23393243eb1780e9b8010957a2a5cce12f07b687b924276bb800bad0e6db2e718943b296e39419da39a10cc71f7f0c765d39218c650f8ea6b89aad4e7357c8e068e094531268b1b37d4097c2aeae2a9afc1b41b14971f69a404b70430f64e79342"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1b, 0x3, 0xb, "f8dfceee", "3181baf0"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0xae, 0x8, 0x4, 0x0, 0x9}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0x18, 0x49, "8c3acfe13e4644f02e82360122c38133a3cda8b415bee8c0791a27a7d1a335179e7fa6ce86d08b6da587b9d010bbb9660572a00800e66ca4b2c7d1c09a5ba5c98927987e498d6d779f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x60, 0x1}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000440)={0x40, 0xb, 0x2, "9cb2"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000500)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x19, 0x2, 'kx'}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x3}}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 107.491597ms ago: executing program 2 (id=6235): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x1405, 0x19, 0x70bd2b, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x4300, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x52e2c217abfdd35d}, 0x4065) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipmr_newroute={0x24, 0x18, 0x800, 0x70bd2d, 0x25dfdbfc, {0x80, 0x14, 0x0, 0x3, 0x0, 0x4, 0xc8, 0x1, 0x2b00}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x20001}, 0x801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x66}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000500)={0x0, 'pim6reg\x00', {0x1}, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x9, 0x5, {{0x1d, 0x4, 0x3, 0x38, 0x74, 0x64, 0x0, 0xe, 0x29, 0x0, @private=0xa010102, @empty, {[@rr={0x7, 0x17, 0x8a, [@loopback, @broadcast, @multicast1, @multicast1, @loopback]}, @cipso={0x86, 0x48, 0x3, [{0x7, 0x10, "9eb5ad339aba66a817e08cb6de16"}, {0x7, 0x11, "7375bd8eae41403054c23371dafd4a"}, {0x1, 0x2}, {0x7, 0xf, "fd2bf8aa3b0965a396ea67af2b"}, {0x7, 0xa, "9ac8aa3690f32163"}, {0x1, 0x6, "a89ea939"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x10, 0x7, {{0x13, 0x4, 0x2, 0x16, 0x4c, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@ssrr={0x89, 0xf, 0x93, [@dev={0xac, 0x14, 0x14, 0x19}, @remote, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x2c, 0x3, 0x4, [{@remote}]}, @rr={0x7, 0x7, 0x46, [@broadcast]}, @lsrr={0x83, 0x13, 0x94, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x12}, @empty, 0x700, 0x20, 0x3444, 0x3ff}}) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x11, 0xdb, 0xe, 0x14, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x59, 0x8091, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xe, 0x124, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x7800, 0xc9, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000b40)={'gretap0\x00', 0x0, 0x20, 0x80, 0x0, 0x4, {{0xe, 0x4, 0x3, 0x2, 0x38, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x23, 0xee, [@multicast2, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @rand_addr=0x64010100, @multicast2]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000001440)={&(0x7f0000001300), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 92.148193ms ago: executing program 2 (id=6236): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0x7}, 0x9}}}, 0x7) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x148) fcntl$setlease(r2, 0x400, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) close(r1) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d00)=@newtfilter={0x2a00, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x29d4, 0x2, [@TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan1\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x1920, 0x4, [@m_connmark={0x9c, 0x1a, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x37f, 0xffffffffffffffff, 0x5, 0x8}, 0xb4f}}]}, {0x4d, 0x6, "f3f2cbefe573e87e5c0c3dac0ba6942891cc738383d3d7f1d39154c7afb0dddbd12433ab5b434ad6711e861ab14ff21bfe321ca8557aa16223977c42dc8223c467eebf0603b37367ae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x16c8178eb2a24e08}}}}, @m_bpf={0x164, 0x12, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xfffc, 0x9, 0xfe, 0xfffffff7}, {0x3, 0x6, 0x0, 0x8}, {0xcaac, 0xf1, 0x80, 0x4}, {0x5, 0x1, 0x35, 0x3}, {0xf429, 0x1, 0x2}, {0x6, 0x8, 0x9, 0xfffffffa}, {0xf063, 0x9, 0x6, 0x4}]}]}, {0xfe, 0x6, "a1b057c1c3bfdd91df8e36d3385d43f8df4f1251bfe42cf471388a3be61d7870935b122dd4fc3c2bca411bbf1e8e38d9cb38f6e8b907ca707b7c571261e822e990952c9b5f402abc79188f74b79f348fd9f32892114676d9ac6196f5cd8bda0667dda605796718e87c0e36f1d5e514c0b5fe7377c4612062288a2f30e67e4073c9188ae3d6b3ef5068375be8c36d1c3b3d2fa9e69acbd79420ee78a8bc14466cbc672a364285e8ad937ac3c4f134cbb224b002576a05888a3f1a3516c1d9c777750444b78ee0fe9166e5c2747025f364faf34d1a615ce31d1acf7766ba6e55dab22bb343ac0dcdabd7f57503dca8c0bdbbf78c264e59da3ea861"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x114, 0x15, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8a}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0xffffffff, 0xffffffffffffffff, 0x4, 0xbc0}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x35cf, 0x5, 0x8, 0xe, 0x8}}]}, {0xa0, 0x6, "1400d86f37de23155f7391173f39802467ed8cbd51a6d09372eac125af5624cd1b349663f97a1b45befa5840cfa692fd2c6b5ef5b76ede9b63ccff9c0fa7b6797b468cf371e8c8609d5039c30b5583ad67d597ead2c12449e65f1ddfd7a895b4a52917973c25b15c4a8647bad9ff14ec3c9e1c83bee8a54faf3b96f6794a39f8d6a03d0f1ebf55d1a1fde424487d63e2b3ab1f615d41f181d8615f84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x220, 0x1c, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x80000000, 0x0, 0x3, 0x6}, @private=0xa010101, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xdb1, 0xd6}, @rand_addr=0x64010100, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3, 0x10000000, 0x7, 0x800}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0xffffffffffffffff, 0x498d, 0x8}, @broadcast, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x80000000, 0x4, 0x2, 0x7fff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xab, 0x4a58, 0x8, 0x40, 0x80000001}, @remote, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0xffffffffffffffff, 0xa}, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast}}]}, {0xe0, 0x6, "678e5bc3b977543476f66caf368a92cd0a96d7d14acda1032ffa204394b6a8dfdb917ca9dca235925e4784a1691eefe205f7ab9f1880de5560646d644bcddae1a02f637c4d7fde9076dff9ddb826329d38e868109b1db415e47b3a64b1b677d7d58b58e30a87594c41872b1c36ea8509f66f1e6a6a555e6e0278d3d3c088ad82d554d792fc92f241e8d353ebb8c43078542d8815b9384335c97f0c4db056a85653997c5ff5c8c4a0f014e1e4ba482e03fa64c87208ef68453518d528dbc91a56dfe94a14a6eb4dec92a7c57438d306c017d443b52e9788500f42da59"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xd0, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffe, 0x8, 0x5, 0x5, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd495}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf, 0x8, 0x5, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5c}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x42, 0x6, "7a1463365c33f8713596302fc3e0032d8e2dd43c3cf7a4d8c0aa47bb22fdbc493ad2cb795e702806024f9560f888902307802a8873b516dae244e92e1a8a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x108, 0x16, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x10}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_ZONE={0x6, 0x4, 0x4a2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x91, 0x6, "57a1fda381d4186b0ec1ca892e7e2e5557d32e97e8183fb6639846adaf232524e420843280ff5f1f8efe802a177070301478f2e4d840db81f4b129b139d093913e234d4b58fedd4aa8884e57d5b1756045088768de3625b47cb73b8958d5a3fa7cfc9ec1a35df1a921bc1b881bb7ba8800e2559af532a2e2669612860c813cb34616705f65ae5f63340fcd0257"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x138, 0x12, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0xe, 0x8, 0x5, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x3768d698fca62e45}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xd5, 0x6, "17d4c0c6fa71eda7faaf558ed602caf9e47254567c75ec274e5c54a21cdd2cd949fcc25c7935816699141d39a803e26356f0198fc0d907d53a0e47f5efa982bec5606161b4413c01aabedfa38c32b602cddacaa13eacba44291559d0cc3866ef4362f58be1c174ec2ee05f9e1ec775d21510c5ff3278d5175d958c9c95a8e817b0ff9ea5dc866b14a0e8f95a2baa58b393ddc1067a457bf98637f3163ef7f9a6f2de0d866622a8bf04cb83a0b75b7c31045251c2be99a9256ea8d1cfff28d9b8c0981c95524c8ccba0a47ff65ee0fedd68"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x78, 0xa, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x7, 0x8, 0x9}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xd8, 0x9, 0x10000000, 0x2b, 0x7}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x81}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9200}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x1060, 0x11, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x46}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x7f, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0xffffffff}, @TCA_FW_POLICE={0x410, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x0, 0x3fa, 0x3, 0x1, 0x3ec3, 0xc, 0x1, 0xa277, 0x4, 0xe, 0xe, 0x5, 0x9, 0x8001, 0x400, 0x2c7d, 0x9, 0xfffffffc, 0x0, 0x18e6, 0x8, 0x2, 0x9, 0x2, 0x5, 0x0, 0xa883, 0x80000001, 0x40, 0x4a3, 0xa, 0xc51, 0x3, 0xa00, 0x2, 0x3, 0x30e, 0x401, 0x8000, 0x1, 0x2, 0x9, 0x1, 0x1000, 0xa2, 0x2, 0xc, 0x6, 0xfffffffd, 0xc4, 0x4, 0x0, 0x7, 0x33, 0x8, 0xb99f, 0x4, 0xa2, 0x5, 0x9, 0x9, 0x8, 0x1, 0xf627, 0x2c00, 0x1, 0x0, 0x9, 0xe, 0x5, 0x1, 0x80000000, 0x8, 0x1, 0x0, 0x10, 0x10000, 0xe9, 0x400, 0x4, 0x8, 0x9, 0x92, 0x7, 0xfffffffd, 0x9, 0x1, 0x80000000, 0xd, 0x3f, 0x7, 0xd3, 0xe3, 0x8000, 0xc, 0x6, 0x1, 0xaa3b, 0x8, 0x8, 0x8000, 0x1, 0xdc000000, 0x4, 0x401, 0x7, 0x4, 0xf41, 0x6, 0x920, 0x101, 0x4, 0x4, 0x8, 0x0, 0x1, 0xb, 0x80000001, 0x8, 0x5, 0x5, 0x3, 0x3a, 0x8, 0x3, 0x7, 0x2, 0x1, 0x7bea, 0x9, 0x400, 0x5c4a, 0x0, 0x3, 0x10, 0x59, 0x5, 0x3ff, 0x9, 0x8, 0x1, 0xddf, 0x1000, 0x7fff, 0x3, 0x40b, 0xa, 0x7, 0x9, 0x5, 0xfffffffd, 0x0, 0x0, 0x9, 0x9, 0x0, 0xffff, 0x1, 0x3ff, 0x6, 0x9, 0x6, 0x9c04, 0x80, 0xdab, 0x3000, 0x7, 0x8001, 0x80000001, 0x1, 0xdb0, 0xff, 0x9017, 0x488, 0x8, 0x1673, 0x164003df, 0xffffff7b, 0x2, 0x7ff, 0x9, 0xdf, 0x1, 0xa, 0x7f, 0x5, 0x0, 0xcc9, 0x1, 0xffff, 0x5, 0x0, 0x3, 0x9, 0x3, 0x9, 0x3, 0x2, 0x9, 0x5, 0x7990, 0x7fff, 0x7, 0x841, 0x7, 0x8, 0x7, 0x6, 0x2, 0x608, 0x6, 0x9, 0x5, 0x4, 0x3ff, 0x80000000, 0x0, 0x0, 0x2, 0x1000, 0x10000, 0xd1b8, 0xfffffffb, 0x4, 0x80000, 0x7, 0x5, 0x7, 0x6, 0x7, 0x677, 0x2, 0xff, 0xfffff4e7, 0x3, 0xc7, 0x6, 0x7ff, 0x3, 0x401, 0x5, 0x4, 0x60000000, 0x8001, 0x8, 0xffffffff, 0x5, 0x2, 0x0, 0x6, 0x8, 0x200, 0x2, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}]}, @TCA_FW_ACT={0xc74, 0x4, [@m_simple={0x124, 0x9, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7c9e0146, 0x20000000, 0x6, 0x5f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x2000, 0x20000002, 0x7, 0x4}}, @TCA_DEF_DATA={0x8, 0x3, 'sfq\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6, 0x3, 0x9, 0xfffffff8}}]}, {0x91, 0x6, "d45a6ec9006eab9888d337435338e6b92a7531cb9d222931e6c072b04f0fab90fb0650f8cc26606ae6d7c0eea258113506beecb5a8018f17bf171fdb97f785e0ee51a39f7e078acbf2cd3f38143b4c31b68c93a0f77bb1c16c230fac096760ef6e3be380ef751070d0d28262af9d14e6d5b2f341ff620b75dbcc82619d1d48389131821decb95ede09dc6ac8b9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x158, 0x4, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffff9a, 0xb, 0x1, 0x89, 0xe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x6, 0x2, 0x9, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15c2, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f44, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1218}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x101d, 0x20000000}}]}, {0xcc, 0x6, "30d2f9656c53980fadc81dd12f2441a262e3e4f0473238a7e598710a430632308714243263ba99020fbb529e0cea58fef58918227fd16772d82ab7fd33d0399c29567a5557e524b83052077efef57a17777ebdcc0898d3b89c35c72fb5824db72222ec515a7d944ada5539cedaa832cf0824a445a2bea8540189b225c9ebef993cb141d893626e2db33eaebe10a974c224892fdf9c323fab2136e58293d3b2a39573b78981e2892687ca9604c3191d3aefeb89aee87db30b6c3d64e69f810d80018617e2c905c715"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xe8, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd6fa, 0xc, 0x6, 0x5, 0x7}, 0x25}}]}, {0x9f, 0x6, "92267b69bee8824f83d6786ac61e4f6ffda41d853c6ce575e85a0d06e8f7dc9f69f2be2a8eabffe27866edf8b0898849c80c059ab21831ebcc09f89e449c7df6554f3105513c45501841b5d6c7bfaa62b3e0938e8f91a47b28676506c903646414d651385c13b62045a781f45f1f8aab9b20950ff1765ad73c370eac9b8259c3ba8d4d11e0c445c49f62c6271769b0505cef6c9d09d96e087aff60"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_police={0x90c, 0x9, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x480}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf73b}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5ec7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x877f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8000, 0xffffff7f, 0x3, 0x3e61, 0x6, 0x7, 0x6, 0x1000, 0x24, 0x2, 0x5, 0x4, 0x10001, 0x4, 0x5, 0x8, 0x800, 0x7, 0x0, 0x3, 0x6, 0x1, 0x58ab, 0xfffffffc, 0xff, 0x8, 0x50, 0x1, 0xf, 0x3, 0x9, 0x0, 0x7, 0xd, 0x3ff, 0x9, 0x7, 0x96, 0x40000000, 0x1ff00000, 0x6, 0x6, 0x8001, 0x1c000000, 0x9, 0x7fff, 0x4, 0xb, 0x6, 0x9, 0xe52e, 0x0, 0x1, 0xffffffff, 0x0, 0xfffffff8, 0x100, 0x96a, 0x6, 0x80000001, 0x8, 0x7aa, 0x2, 0x4, 0xbf, 0x7fff, 0x3ff, 0x9, 0x800, 0xee0d, 0x7, 0x4, 0xb0, 0x5, 0x3ff, 0xcb, 0x1, 0x401, 0x51, 0x1, 0x40, 0x7fffffff, 0x0, 0x8001, 0x7c5, 0x7, 0x9, 0x7, 0x1, 0x4, 0x9, 0x1000, 0x1000, 0x2000, 0x5, 0x8000, 0x18e, 0x9, 0x1, 0x7f, 0x9, 0x8, 0x87, 0x60c, 0x80000001, 0xa6, 0x7f, 0x2, 0xc568, 0x8, 0x2, 0x10000, 0x5, 0xb4b8, 0xb, 0x3, 0x2, 0x0, 0x4, 0xb11, 0x7, 0x6, 0x4, 0x3, 0x2, 0xe, 0x6, 0x7, 0x3, 0x11ec, 0x2, 0x5, 0x10000, 0x7, 0x7ab8, 0x9, 0x8000, 0x1, 0x80, 0x800, 0xfffffff7, 0x1, 0x7, 0x8, 0xfffffffc, 0x6, 0x4, 0x7, 0x2, 0x1e40, 0x3ff, 0x200, 0x80, 0x7f, 0x80, 0x3, 0x19, 0xf5, 0x2, 0x3ff, 0x10000, 0x10001, 0x5, 0x9, 0xfffffff7, 0xffffff02, 0x7, 0x2, 0x5, 0x5, 0x3, 0x5, 0x2000, 0x1, 0x2, 0x6, 0x400, 0xfffffffa, 0x70, 0x7fff, 0x7, 0x7, 0xff, 0x1, 0x7, 0xb, 0x4, 0x1, 0x8000, 0x2, 0x9, 0x3, 0x272a, 0x3, 0x9, 0x2000000, 0xffffffff, 0x10001, 0x42, 0x34, 0x1, 0x6, 0x8, 0x3f, 0x2, 0x7f2, 0xed1, 0x80000000, 0x9, 0x3, 0x0, 0x0, 0x8, 0x8, 0xb79e3e9, 0x4, 0x1, 0x8, 0x4, 0x0, 0x0, 0xcca, 0x2, 0x6, 0x7, 0x9, 0x6, 0x7, 0x7f, 0x4, 0xfffffffa, 0x6, 0x7, 0x8, 0x0, 0x0, 0x4, 0x57fa, 0x3, 0xfffffff9, 0x8, 0x80000001, 0x7, 0xe, 0x7, 0xfffffff9, 0x5, 0x2, 0xf, 0x4, 0x4, 0x4, 0x10, 0x7, 0x3ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x3, 0x400, 0x9, 0x6, 0x4, 0x3, 0x9, 0x2, 0x4, 0x7fffffff, 0x2, 0x49, 0x9, 0x3, 0x0, 0x38d, 0x8, 0x2, 0x1, 0x1, 0x8, 0x5, 0x0, 0xfffffff9, 0x2, 0x5, 0x384f6ea7, 0x7, 0x51, 0x8, 0x2, 0x0, 0x5, 0x9, 0x6, 0x3, 0x6, 0x403, 0x101, 0x9, 0x8, 0x2, 0x6, 0xfffffffc, 0x6, 0x4, 0x44, 0xce000000, 0x4, 0xf, 0x1000, 0x0, 0x6, 0x7, 0x9, 0x1ff, 0x7, 0xffffffff, 0x1000, 0x81a0, 0x4e8d, 0x40, 0x6, 0xf8000000, 0x1, 0x0, 0x401, 0x9, 0x8001, 0x81, 0x73, 0x40, 0x10, 0x3ff, 0xb30d, 0x4, 0x8, 0x9, 0x6, 0x2, 0x5, 0x10001, 0x4, 0xd5f4, 0xfffffff7, 0x400, 0x0, 0x1569, 0x10, 0x3, 0x1, 0x7f, 0x1f, 0x27fefae, 0xffffffff, 0x7, 0x5, 0x6, 0x4, 0xc000000, 0x6, 0x7, 0x0, 0x5, 0x200, 0xc2, 0xff000000, 0x1, 0x7, 0x9, 0x1, 0x7, 0xc467, 0x2, 0x27f, 0xfffffc00, 0x4, 0x2, 0xf43, 0x5, 0xffff, 0xffffffff, 0x10001, 0xd84c, 0xfa00000, 0x5, 0x3ff, 0x80000001, 0x400000, 0x15d6, 0x2, 0xfffffffc, 0xf, 0x10, 0x8, 0x1, 0x3, 0x1, 0x3, 0x800, 0x0, 0x7f2d7140, 0xffffff88, 0x10000000, 0x6, 0x10, 0x10, 0x0, 0xccef, 0x9, 0x5, 0x80000001, 0x6, 0x6c, 0x1, 0x0, 0x9, 0x35, 0x7, 0x3, 0x2c3cd5f0, 0x0, 0x2, 0x62a, 0xfffff095, 0x5, 0x5, 0x4, 0x3, 0x8, 0xae5, 0x418, 0x1, 0xf, 0x7fff, 0x5, 0xc09, 0x8000, 0x7, 0x1270eeb2, 0xa, 0x8000, 0x4684, 0x180, 0x9, 0x10001, 0x5, 0x0, 0x5, 0x8001, 0x67c8e8a3, 0x3ff, 0x7fffffff, 0x6, 0x7fffffff, 0x8, 0x7ff, 0xb, 0x26, 0x10001, 0x654b, 0x6, 0x5, 0x3, 0xff, 0x800, 0x9, 0x5, 0x1, 0x6, 0x2, 0xfe5, 0xfffff2e8, 0x6, 0x1, 0x0, 0x1, 0x4, 0x8, 0x5, 0xdc74, 0x2, 0x5, 0xff, 0x7, 0x0, 0xb86, 0x9, 0x6, 0x7, 0x881, 0x92, 0x400, 0x7, 0x2, 0x1, 0x6, 0xffffffff, 0xfffffffc, 0x7, 0xc31, 0xfffffff8, 0x6, 0xff, 0x80, 0x0, 0x6, 0x80000000, 0x617, 0xfff, 0x80000001, 0x9, 0x6, 0x1]}]]}, {0x7d, 0x6, "aac33ab8fe0a0e21eba01dbb6ba05c885b73c4f49fdbb07478a49ffa39b5ba0dfc302e99a7f833b976c89db579f7eb5983a67d9a1fc9018c77066765dfb5a7488dafc767760a6d079ea3b6a916dc847d6b30e30685dc6960141d6059fdddb95d530ee7f22e4642f9fc294253ace3448d8b230eccf3a8101db5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}]}}]}, 0x2a00}}, 0x0) 0s ago: executing program 2 (id=6237): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1455.902764][ T30] audit: type=1400 audit(2000000634.820:1871): avc: denied { mounton } for pid=26535 comm="syz.3.5889" path="/bus" dev="ramfs" ino=93400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1455.924682][ T4977] loop5: partition table partially beyond EOD, truncated [ 1455.936015][T20341] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 1456.228858][T20341] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1456.426857][T20343] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1456.454452][T20341] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1456.455383][T26559] overlay: filesystem on ./bus is read-only [ 1456.463552][ T30] audit: type=1400 audit(2000000635.820:1872): avc: denied { mounton } for pid=26556 comm="syz.2.5895" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1456.463608][T20341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.504196][T20341] usb 6-1: Product: syz [ 1456.508430][T20341] usb 6-1: Manufacturer: syz [ 1456.514336][T20341] usb 6-1: SerialNumber: syz [ 1456.641817][T20343] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1456.652922][T20343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.661026][T20343] usb 4-1: Product: syz [ 1456.668404][T20343] usb 4-1: Manufacturer: syz [ 1456.674417][T20343] usb 4-1: SerialNumber: syz [ 1457.078407][T20341] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1457.455148][T20343] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1457.520035][T20343] usb 1-1: USB disconnect, device number 19 [ 1458.026597][T26571] netlink: 'syz.2.5897': attribute type 1 has an invalid length. [ 1458.304071][T20343] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1458.441688][T20343] usb 5-1: device descriptor read/64, error -71 [ 1458.681768][T20343] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1458.831619][T20343] usb 5-1: device descriptor read/64, error -71 [ 1459.011252][T20343] usb usb5-port1: attempt power cycle [ 1459.022765][ C1] usblp0: nonzero write bulk status received: -71 [ 1459.023125][ T9] usb 6-1: USB disconnect, device number 50 [ 1459.088030][T15569] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1459.520641][ T803] usb 4-1: USB disconnect, device number 51 [ 1459.536743][ T4977] Dev loop5: unable to read RDB block 7 [ 1459.551450][ T4977] loop5: AHDI p1 [ 1459.560495][ T4977] loop5: partition table partially beyond EOD, truncated [ 1459.600112][ T9] usblp0: removed [ 1459.623389][ T803] usblp1: removed [ 1459.674816][T15569] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1459.696569][T15569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.785469][T20343] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1459.797009][T15569] usb 3-1: Product: syz [ 1459.820982][T15569] usb 3-1: Manufacturer: syz [ 1459.834062][T20343] usb 5-1: device descriptor read/8, error -71 [ 1459.859789][T15569] usb 3-1: SerialNumber: syz [ 1459.939385][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5905'. [ 1459.963627][T26605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5905'. [ 1460.224865][T26608] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 1460.232254][T26608] geneve2: left promiscuous mode [ 1460.238712][T26608] bond3: left promiscuous mode [ 1460.243493][T26608] bridge13: left promiscuous mode [ 1460.509331][T20343] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1460.683700][T20343] usb 5-1: device descriptor read/8, error -71 [ 1460.801812][T20343] usb usb5-port1: unable to enumerate USB device [ 1461.090649][T15569] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1461.193688][T20343] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1461.326869][T20341] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1462.342412][T20343] usb 4-1: config index 0 descriptor too short (expected 5567, got 496) [ 1462.382691][T20343] usb 4-1: config 159 has too many interfaces: 138, using maximum allowed: 32 [ 1462.395125][ T8281] usb 3-1: USB disconnect, device number 17 [ 1462.422767][T20341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.571246][T20343] usb 4-1: config 159 contains an unexpected descriptor of type 0x1, skipping [ 1462.593364][ T8281] usblp0: removed [ 1462.616387][T20341] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1462.633235][T20343] usb 4-1: config 159 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.654437][T20341] usb 1-1: config 1 has no interface number 0 [ 1462.660591][T20343] usb 4-1: config 159 has 0 interfaces, different from the descriptor's value: 138 [ 1462.670131][T20341] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1462.695281][T20341] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1462.704712][T20343] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=c5.e2 [ 1462.714611][T20341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.723580][T20343] usb 4-1: New USB device strings: Mfr=67, Product=217, SerialNumber=205 [ 1462.735468][T20341] usb 1-1: Product: syz [ 1462.739687][T20343] usb 4-1: Product: syz [ 1462.745050][T20341] usb 1-1: Manufacturer: syz [ 1462.749699][T20343] usb 4-1: Manufacturer: syz [ 1462.755563][T20341] usb 1-1: SerialNumber: syz [ 1462.760207][T20343] usb 4-1: SerialNumber: syz [ 1462.807554][T20341] usb 1-1: selecting invalid altsetting 1 [ 1467.767776][ T30] audit: type=1800 audit(2000000647.130:1873): pid=26636 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5910" name="file1" dev="overlay" ino=2663 res=0 errno=0 [ 1467.907035][T20341] cdc_ncm 1-1:1.1: bind() failure [ 1467.931507][T20343] usb 4-1: USB disconnect, device number 52 [ 1467.961005][T20341] usb 1-1: USB disconnect, device number 20 [ 1468.026804][ T4977] Dev loop5: unable to read RDB block 7 [ 1468.037237][ T4977] loop5: AHDI p1 [ 1468.059191][ T4977] loop5: partition table partially beyond EOD, truncated [ 1468.351372][ T4977] Dev loop5: unable to read RDB block 7 [ 1468.358986][ T4977] loop5: AHDI p1 [ 1468.364013][ T4977] loop5: partition table partially beyond EOD, truncated [ 1468.391524][T20341] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1468.399190][T20343] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1468.973020][T20341] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1468.985263][T20343] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1469.001745][T20341] usb 1-1: config 0 has no interface number 0 [ 1469.016709][T20343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.033357][T20341] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.054160][T20343] usb 4-1: Product: syz [ 1469.067795][T20343] usb 4-1: Manufacturer: syz [ 1469.073825][T20341] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.091727][T20343] usb 4-1: SerialNumber: syz [ 1469.110116][T20341] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1469.203829][T20341] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1469.228591][ T4977] Dev loop5: unable to read RDB block 7 [ 1469.306897][ T4977] loop5: AHDI p1 [ 1469.312192][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5917'. [ 1469.329012][T26670] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5917'. [ 1469.343194][ T4977] loop5: partition table partially beyond EOD, truncated [ 1469.859523][T20343] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1470.106542][T20341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.151010][T20341] usb 1-1: config 0 descriptor?? [ 1470.159821][T26676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5918'. [ 1470.214098][T26678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5918'. [ 1470.242861][ T4977] Dev loop5: unable to read RDB block 7 [ 1470.260900][ T4977] loop5: AHDI p1 [ 1470.278057][ T4977] loop5: partition table partially beyond EOD, truncated [ 1470.688644][ T9497] Bluetooth: hci3: Frame reassembly failed (-84) [ 1471.161333][T20341] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.003E/input/input86 [ 1471.181857][T16016] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1471.358524][ T8281] usb 4-1: USB disconnect, device number 53 [ 1471.403491][T16016] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1471.481382][T16016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.510257][ T8281] usblp0: removed [ 1471.556228][T16016] usb 5-1: Product: syz [ 1471.588756][T16016] usb 5-1: Manufacturer: syz [ 1471.618513][T20341] uclogic 0003:28BD:0042.003E: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 1471.640268][T16016] usb 5-1: SerialNumber: syz [ 1471.894837][T20341] usb 1-1: USB disconnect, device number 21 [ 1472.495697][T16016] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1472.676778][T26691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5922'. [ 1472.691555][T22057] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1472.872400][T26688] fido_id[26688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1472.903094][ T4977] Dev loop5: unable to read RDB block 7 [ 1472.919638][ T4977] loop5: AHDI p1 [ 1472.936779][ T4977] loop5: partition table partially beyond EOD, truncated [ 1473.063432][T26704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.178547][T26704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.221846][T15569] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1473.371063][ T803] IPVS: starting estimator thread 0... [ 1473.427394][T15569] usb 6-1: config index 0 descriptor too short (expected 5567, got 496) [ 1473.468539][T15569] usb 6-1: config 159 has too many interfaces: 138, using maximum allowed: 32 [ 1473.500554][T26714] IPVS: using max 39 ests per chain, 93600 per kthread [ 1473.534117][T15569] usb 6-1: config 159 contains an unexpected descriptor of type 0x1, skipping [ 1473.582963][T15569] usb 6-1: config 159 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.635535][T15569] usb 6-1: config 159 has 0 interfaces, different from the descriptor's value: 138 [ 1473.688409][T15569] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=c5.e2 [ 1473.732607][T15569] usb 6-1: New USB device strings: Mfr=67, Product=217, SerialNumber=205 [ 1473.782498][T15569] usb 6-1: Product: syz [ 1473.801378][T15569] usb 6-1: Manufacturer: syz [ 1473.827252][T15569] usb 6-1: SerialNumber: syz [ 1473.935101][T26720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5929'. [ 1473.949594][T26720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5929'. [ 1475.668508][T16016] usb 5-1: USB disconnect, device number 35 [ 1475.691714][T16016] usblp0: removed [ 1475.860047][T26725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5931'. [ 1475.870024][T26725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5931'. [ 1476.083841][T26699] can0: slcan on ptm0. [ 1476.162181][T26699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.191163][T26726] dvmrp1: entered allmulticast mode [ 1476.198774][T26699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.412240][T15569] usb 6-1: USB disconnect, device number 51 [ 1476.453409][ T803] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1476.563021][T26697] can0 (unregistered): slcan off ptm0. [ 1476.843956][ T803] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1476.999570][ T30] audit: type=1400 audit(2000000656.300:1874): avc: denied { execute_no_trans } for pid=26737 comm="syz.3.5935" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC94C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=92689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1477.072995][ T803] usb 3-1: config 0 has no interface number 0 [ 1477.166748][ T803] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.183821][ T803] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.190543][T26753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5937'. [ 1477.194268][ T803] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1477.215934][ T803] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1477.225199][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.235677][ T803] usb 3-1: config 0 descriptor?? [ 1477.279189][ T4977] Dev loop5: unable to read RDB block 7 [ 1477.307522][ T4977] loop5: AHDI p1 [ 1477.323474][ T4977] loop5: partition table partially beyond EOD, truncated [ 1477.541507][ T8281] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1477.649945][T26765] bridge0: entered allmulticast mode [ 1477.696311][T26765] wireguard0: entered promiscuous mode [ 1477.715251][ T8281] usb 5-1: Using ep0 maxpacket: 8 [ 1477.752462][T26765] wireguard0: entered allmulticast mode [ 1477.766709][ T8281] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1477.867574][ T8281] usb 5-1: config 2 has no interface number 0 [ 1477.923229][T26769] CUSE: unknown device info "" [ 1477.968733][ T8281] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1478.021776][T26769] CUSE: unknown device info "" [ 1478.055792][ T8281] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1478.079145][ T803] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.003F/input/input87 [ 1478.106998][T26769] CUSE: unknown device info "" [ 1478.116840][ T8281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.123825][T26769] CUSE: unknown device info "" [ 1478.135664][T26769] CUSE: unknown device info "" [ 1478.145462][ T8281] usb 5-1: Product: syz [ 1478.151074][T26769] CUSE: unknown device info "" [ 1478.163162][ T8281] usb 5-1: Manufacturer: syz [ 1478.165299][T26769] CUSE: unknown device info "" [ 1478.180466][ T8281] usb 5-1: SerialNumber: syz [ 1478.184860][T26769] CUSE: unknown device info "" [ 1478.203877][ T803] uclogic 0003:28BD:0042.003F: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 1478.223039][T26769] CUSE: DEVNAME unspecified [ 1478.260631][ T803] usb 3-1: USB disconnect, device number 18 [ 1478.465167][T26776] fido_id[26776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1478.497036][ T4977] Dev loop5: unable to read RDB block 7 [ 1478.519070][ T4977] loop5: AHDI p1 [ 1478.540218][ T4977] loop5: partition table partially beyond EOD, truncated [ 1478.793457][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5941'. [ 1478.808104][T26786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5941'. [ 1479.009482][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.230613][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.625271][T26753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1479.682078][ T4977] Dev loop5: unable to read RDB block 7 [ 1479.700596][ T8281] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1479.721030][ T4977] loop5: AHDI p1 [ 1479.748517][ T4977] loop5: partition table partially beyond EOD, truncated [ 1479.792221][ T8281] usb 5-1: USB disconnect, device number 36 [ 1479.985546][T26803] syz.5.5943: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1480.001830][T26803] CPU: 0 UID: 0 PID: 26803 Comm: syz.5.5943 Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.001860][T26803] Tainted: [L]=SOFTLOCKUP [ 1480.001868][T26803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1480.001880][T26803] Call Trace: [ 1480.001887][T26803] [ 1480.001895][T26803] dump_stack_lvl+0x100/0x190 [ 1480.001926][T26803] warn_alloc.cold+0x95/0x1c1 [ 1480.001948][T26803] ? __pfx_warn_alloc+0x10/0x10 [ 1480.001978][T26803] ? stack_trace_save+0x8e/0xc0 [ 1480.002005][T26803] ? stack_depot_save_flags+0x27/0x9d0 [ 1480.002043][T26803] ? xskq_create+0xfb/0x1d0 [ 1480.002072][T26803] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1480.002106][T26803] ? xskq_create+0xfb/0x1d0 [ 1480.002142][T26803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1480.002176][T26803] ? xskq_create+0xfb/0x1d0 [ 1480.002204][T26803] vmalloc_user_noprof+0x9e/0xe0 [ 1480.002226][T26803] ? xskq_create+0xfb/0x1d0 [ 1480.002254][T26803] xskq_create+0xfb/0x1d0 [ 1480.002286][T26803] xsk_setsockopt+0x743/0xab0 [ 1480.002315][T26803] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1480.002348][T26803] ? selinux_socket_setsockopt+0x6a/0x80 [ 1480.002371][T26803] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1480.002399][T26803] do_sock_setsockopt+0xf3/0x1d0 [ 1480.002421][T26803] __sys_setsockopt+0x195/0x220 [ 1480.002452][T26803] __x64_sys_setsockopt+0xbd/0x160 [ 1480.002476][T26803] ? do_syscall_64+0x90/0xf80 [ 1480.002496][T26803] ? lockdep_hardirqs_on+0x78/0x100 [ 1480.002515][T26803] do_syscall_64+0x10b/0xf80 [ 1480.002534][T26803] ? clear_bhb_loop+0x40/0x90 [ 1480.002558][T26803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.002577][T26803] RIP: 0033:0x7ffa36b9cdd9 [ 1480.002595][T26803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.002614][T26803] RSP: 002b:00007ffa34df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1480.002633][T26803] RAX: ffffffffffffffda RBX: 00007ffa36e16180 RCX: 00007ffa36b9cdd9 [ 1480.002650][T26803] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1480.002662][T26803] RBP: 00007ffa36c32d69 R08: 0000000000000004 R09: 0000000000000000 [ 1480.002673][T26803] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.002684][T26803] R13: 00007ffa36e16218 R14: 00007ffa36e16180 R15: 00007ffc9a3a50d8 [ 1480.002710][T26803] [ 1480.002769][T26803] Mem-Info: [ 1480.260284][T26803] active_anon:34569 inactive_anon:0 isolated_anon:0 [ 1480.260284][T26803] active_file:22367 inactive_file:41564 isolated_file:0 [ 1480.260284][T26803] unevictable:768 dirty:298 writeback:0 [ 1480.260284][T26803] slab_reclaimable:8852 slab_unreclaimable:118399 [ 1480.260284][T26803] mapped:32019 shmem:23180 pagetables:1757 [ 1480.260284][T26803] sec_pagetables:0 bounce:0 [ 1480.260284][T26803] kernel_misc_reclaimable:0 [ 1480.260284][T26803] free:1235040 free_pcp:10391 free_cma:0 [ 1480.309809][T26803] Node 0 active_anon:138276kB inactive_anon:0kB active_file:89448kB inactive_file:166052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128056kB dirty:1192kB writeback:0kB shmem:91184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14904kB pagetables:6908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1480.345565][T26803] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1480.379211][T26803] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.409944][T26803] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1480.416021][T26803] Node 0 DMA32 free:971876kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:138256kB inactive_anon:0kB active_file:89448kB inactive_file:166052kB unevictable:1536kB writepending:1216kB zspages:0kB present:3129332kB managed:2537128kB mlocked:0kB bounce:0kB free_pcp:41284kB local_pcp:20540kB free_cma:0kB [ 1480.450359][T26803] lowmem_reserve[]: 0 0 1 1 1 [ 1480.455313][T26803] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1480.486409][T26803] lowmem_reserve[]: 0 0 0 0 0 [ 1480.491260][T26803] Node 1 Normal free:3952956kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:0kB free_cma:0kB [ 1480.525190][T26803] lowmem_reserve[]: 0 0 0 0 0 [ 1480.530284][T26803] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1480.543415][T26803] Node 0 DMA32: 7341*4kB (UM) 6156*8kB (UME) 4371*16kB (UME) 1064*32kB (UME) 599*64kB (UME) 274*128kB (UME) 288*256kB (UME) 238*512kB (UME) 122*1024kB (UME) 19*2048kB (UME) 87*4096kB (UM) = 971780kB [ 1480.564213][T26803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1480.576045][T26803] Node 1 Normal: 1*4kB (M) 3*8kB (M) 2*16kB (M) 10*32kB (UM) 7*64kB (U) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 963*4096kB (M) = 3952956kB [ 1480.593617][T26803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.603285][T26803] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1480.612667][T26803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.622981][T26803] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1480.632348][T26803] 87085 total pagecache pages [ 1480.637047][T26803] 0 pages in swap cache [ 1480.641207][T26803] Free swap = 124996kB [ 1480.645449][T26803] Total swap = 124996kB [ 1480.649610][T26803] 2097051 pages RAM [ 1480.654278][T26803] 0 pages HighMem/MovableOnly [ 1480.658978][T26803] 430881 pages reserved [ 1480.663195][T26803] 0 pages cma reserved [ 1481.611153][ T4977] Dev loop5: unable to read RDB block 7 [ 1481.619579][ T4977] loop5: AHDI p1 [ 1481.632227][ T4977] loop5: partition table partially beyond EOD, truncated [ 1482.565306][T16545] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1482.587037][ T4977] Dev loop5: unable to read RDB block 7 [ 1482.592842][ T4977] loop5: AHDI p1 [ 1482.596500][ T4977] loop5: partition table partially beyond EOD, truncated [ 1483.446001][T16545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.769757][T16545] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1483.779936][T26852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5955'. [ 1483.805402][T26852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5955'. [ 1483.830676][T16545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.960589][T16545] usb 3-1: config 0 descriptor?? [ 1484.707093][T16545] usb 3-1: can't set config #0, error -71 [ 1484.744454][ T30] audit: type=1400 audit(2000000664.110:1875): avc: denied { setopt } for pid=26853 comm="syz.4.5957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1484.769582][T16545] usb 3-1: USB disconnect, device number 19 [ 1485.198013][T20341] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1485.762306][T20341] usb 5-1: Using ep0 maxpacket: 32 [ 1485.772208][T20341] usb 5-1: too many configurations: 91, using maximum allowed: 8 [ 1485.781901][T20341] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1485.790845][T20341] usb 5-1: can't read configurations, error -61 [ 1485.892786][ T4977] Dev loop5: unable to read RDB block 7 [ 1485.908116][ T4977] loop5: AHDI p1 [ 1485.917385][ T4977] loop5: partition table partially beyond EOD, truncated [ 1485.931690][T20341] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1486.091478][T20341] usb 5-1: Using ep0 maxpacket: 32 [ 1486.947931][ T803] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1486.971374][T20341] usb 5-1: too many configurations: 91, using maximum allowed: 8 [ 1486.981505][T20341] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1486.989098][T20341] usb 5-1: can't read configurations, error -61 [ 1486.995701][T20341] usb usb5-port1: attempt power cycle [ 1487.141784][ T803] usb 6-1: Using ep0 maxpacket: 16 [ 1487.151847][ T803] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1487.176017][ T803] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1487.211016][T16545] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1487.224724][ T803] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1487.242187][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.264807][ T803] usb 6-1: Product: syz [ 1487.274972][ T803] usb 6-1: Manufacturer: syz [ 1487.281113][ T803] usb 6-1: SerialNumber: syz [ 1487.295131][ T803] usb 6-1: config 0 descriptor?? [ 1487.341978][T20341] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1487.361792][T16545] usb 1-1: device descriptor read/64, error -71 [ 1487.371515][T20343] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1487.382609][T20341] usb 5-1: Using ep0 maxpacket: 32 [ 1487.393611][T20341] usb 5-1: too many configurations: 91, using maximum allowed: 8 [ 1487.411827][T20341] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1487.419488][T20341] usb 5-1: can't read configurations, error -61 [ 1487.431536][ T8281] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1487.514102][ T803] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input88 [ 1487.523019][T20343] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.543005][T20343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1487.556319][T20341] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1487.566091][T20343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1487.578022][T20343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1487.591998][T20341] usb 5-1: Using ep0 maxpacket: 32 [ 1487.597636][T20343] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1487.607119][T20341] usb 5-1: too many configurations: 91, using maximum allowed: 8 [ 1487.611944][T16545] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1487.623737][T20343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.632450][ T8281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.642778][ T8281] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1487.653169][T20341] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1487.661505][T20341] usb 5-1: can't read configurations, error -61 [ 1487.669771][ T8281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.681222][T20343] usb 3-1: config 0 descriptor?? [ 1487.686386][T20341] usb usb5-port1: unable to enumerate USB device [ 1487.694325][T26896] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1487.705252][ T8281] usb 4-1: config 0 descriptor?? [ 1487.712661][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1487.716739][ T8281] pwc: Askey VC010 type 2 USB webcam detected. [ 1487.861541][T16545] usb 1-1: device descriptor read/64, error -71 [ 1487.947052][ T8281] pwc: send_video_command error -71 [ 1487.967541][ T8281] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1487.980178][ T8281] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1487.993412][T16545] usb usb1-port1: attempt power cycle [ 1487.994903][ T8281] usb 4-1: USB disconnect, device number 54 [ 1488.139264][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1488.144329][T20343] plantronics 0003:047F:FFFF.0040: reserved main item tag 0xd [ 1488.147612][ T803] imon:send_packet: packet tx failed (-71) [ 1488.191148][T20343] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1488.213841][ T803] imon 6-1:0.0: panel buttons/knobs setup failed [ 1488.331527][ T803] rc_core: IR keymap rc-imon-pad not found [ 1488.345812][T26896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.356321][ T803] Registered IR keymap rc-empty [ 1488.358640][T26896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.373044][T20343] usb 3-1: USB disconnect, device number 20 [ 1488.394590][ T803] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1488.430898][ T803] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1488.462280][ T803] imon:send_packet: packet tx failed (-71) [ 1488.471737][ T8281] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1488.481987][T26911] Bluetooth: MGMT ver 1.23 [ 1488.493664][T26911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5971'. [ 1488.511996][ T803] imon 6-1:0.0: remote input dev register failed [ 1488.524722][ T803] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1488.595805][ T803] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1488.613107][ T803] imon:imon_probe: failed to initialize context! [ 1488.628099][ T803] imon 6-1:0.0: unable to register, err -19 [ 1488.632927][ T8281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.647731][ T8281] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1488.677373][ T803] usb 6-1: USB disconnect, device number 52 [ 1488.683292][ T8281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.688478][ T8281] usb 4-1: config 0 descriptor?? [ 1488.725013][ T8281] pwc: Askey VC010 type 2 USB webcam detected. [ 1488.764427][ T4977] Dev loop5: unable to read RDB block 7 [ 1488.774567][ T4977] loop5: AHDI p1 [ 1488.779797][ T4977] loop5: partition table partially beyond EOD, truncated [ 1488.930563][T26914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5972'. [ 1488.949882][T26914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5972'. [ 1489.175347][ T8281] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1489.210539][ T8281] pwc: recv_control_msg error -32 req 02 val 2700 [ 1489.262777][ T8281] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1489.323057][ T8281] pwc: recv_control_msg error -32 req 04 val 1000 [ 1489.385227][ T8281] pwc: recv_control_msg error -32 req 04 val 1300 [ 1489.446127][ T8281] pwc: recv_control_msg error -32 req 04 val 1400 [ 1489.506419][ T8281] pwc: recv_control_msg error -32 req 02 val 2000 [ 1489.591291][ T8281] pwc: recv_control_msg error -32 req 02 val 2100 [ 1489.675109][ T8281] pwc: recv_control_msg error -32 req 04 val 1500 [ 1489.742691][ T8281] pwc: recv_control_msg error -32 req 02 val 2500 [ 1489.818228][ T8281] pwc: recv_control_msg error -32 req 02 val 2400 [ 1489.875378][ T8281] pwc: recv_control_msg error -32 req 02 val 2600 [ 1489.942587][ T8281] pwc: recv_control_msg error -32 req 02 val 2900 [ 1490.193602][ T8281] pwc: recv_control_msg error -71 req 04 val 1100 [ 1490.523354][ T8281] pwc: recv_control_msg error -71 req 04 val 1200 [ 1490.780883][ T8281] pwc: Registered as video103. [ 1490.804764][ T8281] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input91 [ 1490.882796][ T4977] Dev loop5: unable to read RDB block 7 [ 1490.907862][ T8281] usb 4-1: USB disconnect, device number 55 [ 1490.919201][ T4977] loop5: AHDI p1 [ 1490.931284][ T4977] loop5: partition table partially beyond EOD, truncated [ 1491.430588][T26916] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1491.483274][ T4977] Dev loop5: unable to read RDB block 7 [ 1491.498349][ T4977] loop5: AHDI p1 [ 1491.514479][ T4977] loop5: partition table partially beyond EOD, truncated [ 1492.514733][T26952] netlink: 'syz.5.5978': attribute type 1 has an invalid length. [ 1492.650538][T26937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1492.830166][T26960] binder: BC_ATTEMPT_ACQUIRE not supported [ 1492.836078][T16545] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1492.849257][T26960] binder: 26956:26960 ioctl c0306201 200000000180 returned -22 [ 1492.864697][T26961] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1492.904799][T26943] zonefs (nullb0) ERROR: Not a zoned block device [ 1492.994139][T16545] usb 1-1: Using ep0 maxpacket: 8 [ 1493.012870][T16545] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1493.034503][T16545] usb 1-1: config 0 has no interface number 0 [ 1493.054381][T16545] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1493.207129][T16545] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1493.373625][T16545] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1493.395947][T16545] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1493.434668][T16545] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1493.473146][T16545] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1493.490457][T16545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.505485][T16545] usb 1-1: Product: syz [ 1493.513052][T16545] usb 1-1: Manufacturer: syz [ 1493.523048][T16545] usb 1-1: SerialNumber: syz [ 1493.544360][T16545] usb 1-1: config 0 descriptor?? [ 1493.632258][T26975] netlink: 'syz.3.5987': attribute type 1 has an invalid length. [ 1494.030232][T16545] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1494.102029][ T30] audit: type=1400 audit(2000000673.460:1876): avc: denied { ioctl } for pid=26979 comm="syz.2.5989" path="socket:[94441]" dev="sockfs" ino=94441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1494.268732][T26954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5982'. [ 1494.275140][ T30] audit: type=1400 audit(2000000673.630:1877): avc: denied { remount } for pid=26984 comm="syz.2.5991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1494.299001][T26986] netlink: 'syz.3.5990': attribute type 39 has an invalid length. [ 1494.363893][T26985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5991'. [ 1494.373206][T26985] tipc: Invalid UDP bearer configuration [ 1494.373245][T26985] tipc: Enabling of bearer rejected, failed to enable media [ 1494.559139][ T4977] Dev loop5: unable to read RDB block 7 [ 1494.567515][ T30] audit: type=1400 audit(2000000673.930:1878): avc: denied { unmount } for pid=16294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1494.599415][ T4977] loop5: AHDI p1 [ 1494.609895][ T4977] loop5: partition table partially beyond EOD, truncated [ 1494.661064][ T30] audit: type=1400 audit(2000000673.990:1879): avc: denied { sys_admin } for pid=26953 comm="syz.0.5982" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1495.415636][T16545] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1495.532623][ T4977] Dev loop5: unable to read RDB block 7 [ 1495.549901][ T4977] loop5: AHDI p1 [ 1495.555666][ T4977] loop5: partition table partially beyond EOD, truncated [ 1496.211438][T27010] FAULT_INJECTION: forcing a failure. [ 1496.211438][T27010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.223363][T27009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1496.236819][T27010] CPU: 1 UID: 0 PID: 27010 Comm: syz.5.5995 Tainted: G L syzkaller #0 PREEMPT(full) [ 1496.236848][T27010] Tainted: [L]=SOFTLOCKUP [ 1496.236855][T27010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1496.236866][T27010] Call Trace: [ 1496.236872][T27010] [ 1496.236880][T27010] dump_stack_lvl+0x100/0x190 [ 1496.236910][T27010] should_fail_ex.cold+0x5/0xa [ 1496.236937][T27010] _copy_from_iter+0x1f4/0x1690 [ 1496.236967][T27010] ? _copy_from_iter+0x270/0x1690 [ 1496.236993][T27010] ? __pfx__copy_from_iter+0x10/0x10 [ 1496.237022][T27010] ? __pfx__copy_from_iter+0x10/0x10 [ 1496.237049][T27010] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1496.237081][T27010] copy_page_from_iter+0x238/0x300 [ 1496.237111][T27010] skb_copy_datagram_from_iter+0x399/0x720 [ 1496.237144][T27010] unix_stream_sendmsg+0x536/0x1310 [ 1496.237177][T27010] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1496.237201][T27010] ? __might_fault+0x90/0x140 [ 1496.237237][T27010] ____sys_sendmsg+0x9e1/0xb70 [ 1496.237256][T27010] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1496.237282][T27010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1496.237307][T27010] ? do_raw_spin_lock+0x128/0x260 [ 1496.237334][T27010] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1496.237364][T27010] ___sys_sendmsg+0x190/0x1e0 [ 1496.237387][T27010] ? __pfx____sys_sendmsg+0x10/0x10 [ 1496.237409][T27010] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1496.237467][T27010] __sys_sendmsg+0x170/0x220 [ 1496.237494][T27010] ? __pfx___sys_sendmsg+0x10/0x10 [ 1496.237528][T27010] ? rcu_is_watching+0x12/0xc0 [ 1496.237555][T27010] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1496.237579][T27010] ? rcu_is_watching+0x12/0xc0 [ 1496.237610][T27010] do_syscall_64+0x10b/0xf80 [ 1496.237630][T27010] ? clear_bhb_loop+0x40/0x90 [ 1496.237653][T27010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.237671][T27010] RIP: 0033:0x7ffa36b9cdd9 [ 1496.237687][T27010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.237709][T27010] RSP: 002b:00007ffa37973028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1496.237727][T27010] RAX: ffffffffffffffda RBX: 00007ffa36e16090 RCX: 00007ffa36b9cdd9 [ 1496.237738][T27010] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000009 [ 1496.237748][T27010] RBP: 00007ffa37973090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.237758][T27010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.237768][T27010] R13: 00007ffa36e16128 R14: 00007ffa36e16090 R15: 00007ffc9a3a50d8 [ 1496.237793][T27010] [ 1496.907028][T27017] netlink: 'syz.2.5998': attribute type 1 has an invalid length. [ 1497.372468][ T30] audit: type=1400 audit(2000000676.730:1880): avc: denied { setattr } for pid=27014 comm="syz.4.5997" name="/" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1497.554100][ T4977] Dev loop5: unable to read RDB block 7 [ 1497.573064][ T4977] loop5: AHDI p1 [ 1497.585145][ T4977] loop5: partition table partially beyond EOD, truncated [ 1497.708260][ T4977] Dev loop5: unable to read RDB block 7 [ 1497.726766][ T4977] loop5: AHDI p1 [ 1497.735101][ T4977] loop5: partition table partially beyond EOD, truncated [ 1497.797556][T27035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6005'. [ 1497.848747][T27035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6005'. [ 1497.891576][ T8281] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1497.918369][ T4977] Dev loop5: unable to read RDB block 7 [ 1497.936274][ T4977] loop5: AHDI p1 [ 1497.945227][ T4977] loop5: partition table partially beyond EOD, truncated [ 1498.043604][ T8281] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1498.061729][T16016] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1498.074198][ T8281] usb 3-1: config 0 has no interface number 0 [ 1498.100784][ T8281] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.129933][ T8281] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.149835][ T4977] Dev loop5: unable to read RDB block 7 [ 1498.149954][ T8281] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1498.171980][ T4977] loop5: AHDI p1 [ 1498.182923][ T4977] loop5: partition table partially beyond EOD, truncated [ 1498.183744][ T8281] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1498.205377][ T8281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.224584][T16016] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1498.244848][ T8281] usb 3-1: config 0 descriptor?? [ 1498.255019][T16016] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.292908][T16016] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1498.309822][T16016] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1498.319928][T16016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.328523][T16016] usb 5-1: Product: syz [ 1498.333593][T16016] usb 5-1: Manufacturer: syz [ 1498.361592][T16016] usb 5-1: SerialNumber: syz [ 1498.665910][T27069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.686411][T27069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.043833][T16016] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1499.072580][ T8281] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0041/input/input92 [ 1499.232488][ T4977] Dev loop5: unable to read RDB block 7 [ 1499.259549][ T4977] loop5: AHDI p1 [ 1499.275395][ T4977] loop5: partition table partially beyond EOD, truncated [ 1499.338811][ T8281] uclogic 0003:28BD:0042.0041: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 1499.353113][T20341] usb 1-1: USB disconnect, device number 25 [ 1499.377598][ T4977] Dev loop5: unable to read RDB block 7 [ 1499.405620][ T4977] loop5: AHDI p1 [ 1499.422240][ T8281] usb 3-1: USB disconnect, device number 21 [ 1499.429907][ T4977] loop5: partition table partially beyond EOD, truncated [ 1499.544263][T27109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6014'. [ 1499.713034][T27111] fido_id[27111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1500.155333][T27086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1501.113100][ T4977] Dev loop5: unable to read RDB block 7 [ 1501.149828][ T4977] loop5: AHDI p1 [ 1501.175241][T27150] cgroup: subsys name conflicts with all [ 1501.177136][ T4977] loop5: partition table partially beyond EOD, truncated [ 1501.254122][T16016] usb 5-1: USB disconnect, device number 41 [ 1501.506452][T24115] udevd[24115]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.544999][T27192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6024'. [ 1501.598459][T27196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6024'. [ 1501.651553][T20343] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1501.811588][T27193] nbd2: detected capacity change from 0 to 63 [ 1501.826438][T20343] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 1501.850846][T20343] usb 1-1: config 0 has no interface number 0 [ 1501.870403][T20343] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1501.893817][T20343] usb 1-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 1501.910468][T20343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.925962][T20343] usb 1-1: Product: syz [ 1501.937401][T20343] usb 1-1: Manufacturer: syz [ 1501.967493][T20343] usb 1-1: SerialNumber: syz [ 1501.982865][T20343] usb 1-1: config 0 descriptor?? [ 1502.100649][T27212] lo speed is unknown, defaulting to 1000 [ 1502.182013][ T5746] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1502.258450][ T4977] Dev loop5: unable to read RDB block 7 [ 1502.273766][ T4977] loop5: AHDI p1 [ 1502.283087][ T4977] loop5: partition table partially beyond EOD, truncated [ 1502.355168][T20343] usb 1-1: USB disconnect, device number 26 [ 1502.357148][ T5746] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1502.373803][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.382615][ T5746] usb 4-1: Product: syz [ 1502.387718][ T5746] usb 4-1: Manufacturer: syz [ 1502.393874][ T5746] usb 4-1: SerialNumber: syz [ 1502.422689][T16247] udevd[16247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1502.625254][ T4977] Dev loop5: unable to read RDB block 7 [ 1502.648630][ T4977] loop5: AHDI p1 [ 1502.659648][ T4977] loop5: partition table partially beyond EOD, truncated [ 1502.828085][T27212] binder: BC_ACQUIRE_RESULT not supported [ 1502.839336][T27212] binder: 27211:27212 ioctl c0306201 2000000001c0 returned -22 [ 1502.859535][ T5746] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1503.022983][T27282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6030'. [ 1503.039215][T27282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6030'. [ 1503.485236][T22057] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1503.952157][T26685] block nbd2: Receive control failed (result -104) [ 1504.039068][ T4977] Dev loop5: unable to read RDB block 7 [ 1504.055481][ T4977] loop5: AHDI p1 [ 1504.070668][ T4977] loop5: partition table partially beyond EOD, truncated [ 1504.176436][T27308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.194279][T27308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.342784][ T803] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1504.606142][ T803] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1504.652366][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.697258][ T803] usb 1-1: Product: syz [ 1504.730052][ T803] usb 1-1: Manufacturer: syz [ 1504.748609][ T803] usb 1-1: SerialNumber: syz [ 1505.280507][ C1] usblp0: nonzero write bulk status received: -71 [ 1505.282114][T15569] usb 4-1: USB disconnect, device number 56 [ 1505.533944][ T5746] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1505.656612][T27204] usblp0: removed [ 1505.728460][ T803] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1505.740038][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 1505.765845][ T5746] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1505.776231][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.805479][ T5746] usb 3-1: Product: syz [ 1505.827122][ T5746] usb 3-1: Manufacturer: syz [ 1505.849465][ T5746] usb 3-1: SerialNumber: syz [ 1505.864572][ T4977] Dev loop5: unable to read RDB block 7 [ 1505.884525][ T5746] usb 3-1: config 0 descriptor?? [ 1505.886248][ T4977] loop5: AHDI p1 [ 1505.919769][ T4977] loop5: partition table partially beyond EOD, truncated [ 1506.116691][ T5746] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 022 [ 1506.143077][ T803] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1506.275251][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1506.289969][T27368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1506.312634][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 1506.321186][ T803] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1506.334684][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.349949][ T803] usb 4-1: Product: syz [ 1506.358097][ T803] usb 4-1: Manufacturer: syz [ 1506.365984][ T803] usb 4-1: SerialNumber: syz [ 1506.381353][ T803] usb 4-1: config 0 descriptor?? [ 1506.395558][ T4977] Dev loop5: unable to read RDB block 7 [ 1506.401174][ T4977] loop5: AHDI p1 [ 1506.405723][ T4977] loop5: partition table partially beyond EOD, truncated [ 1506.490731][T27379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6039'. [ 1506.491526][T20343] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1506.523348][T27379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6039'. [ 1506.535732][T27380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.565364][T27380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.647674][ T803] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 057 [ 1506.668980][T27330] i2c i2c-1: failure reading data [ 1506.676039][T20343] usb 5-1: config 0 has no interfaces? [ 1506.688359][T20343] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1506.713880][T20343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.733326][ T4977] Dev loop5: unable to read RDB block 7 [ 1506.739915][ T4977] loop5: AHDI p1 [ 1506.745628][ T4977] loop5: partition table partially beyond EOD, truncated [ 1506.755418][T20343] usb 5-1: config 0 descriptor?? [ 1506.937040][ T4977] Dev loop5: unable to read RDB block 7 [ 1506.945168][ T4977] loop5: AHDI p1 [ 1506.951703][ T4977] loop5: partition table partially beyond EOD, truncated [ 1507.041511][T20343] usb 5-1: USB disconnect, device number 42 [ 1507.262152][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6041'. [ 1507.281135][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6041'. [ 1507.683801][ C1] usblp0: nonzero write bulk status received: -71 [ 1507.684158][ T803] usb 1-1: USB disconnect, device number 27 [ 1508.029440][ T803] usblp0: removed [ 1508.720214][T27351] i2c i2c-1: failure reading data [ 1508.720467][ T5746] usb 3-1: USB disconnect, device number 22 [ 1508.852412][T26267] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 7 seconds [ 1508.872386][T26267] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 7 seconds [ 1508.885647][T26267] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 7 seconds [ 1508.898062][T26267] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 7 seconds [ 1508.920515][ T4977] Dev loop5: unable to read RDB block 7 [ 1508.930550][ T4977] loop5: AHDI p1 [ 1508.934775][ T4977] loop5: partition table partially beyond EOD, truncated [ 1509.045427][ T30] audit: type=1400 audit(2000000688.410:1881): avc: denied { write } for pid=27435 comm="syz.5.6044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1509.095230][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6044'. [ 1509.158429][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6044'. [ 1509.362649][T27448] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27448 comm=syz.2.6047 [ 1509.765725][ T8281] usb 4-1: USB disconnect, device number 57 [ 1509.921043][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6049'. [ 1509.956421][T27472] netlink: 400 bytes leftover after parsing attributes in process `syz.3.6050'. [ 1510.321475][ T8281] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1510.503151][ T8281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.596494][ T8281] usb 4-1: config 0 has no interfaces? [ 1510.596959][ T4977] Dev loop5: unable to read RDB block 7 [ 1511.032423][ T4977] loop5: AHDI p1 [ 1511.036121][ T4977] loop5: partition table partially beyond EOD, truncated [ 1511.075037][ T8281] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1511.088698][ T8281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.105072][ T8281] usb 4-1: config 0 descriptor?? [ 1511.517285][T27532] __nla_validate_parse: 1 callbacks suppressed [ 1511.517305][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6054'. [ 1511.667327][T27537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6054'. [ 1512.315107][T27497] bond2 (unregistering): Released all slaves [ 1512.507859][ T8281] usb 4-1: USB disconnect, device number 58 [ 1512.693097][ T4977] Dev loop5: unable to read RDB block 7 [ 1512.710853][ T4977] loop5: AHDI p1 [ 1512.809542][ T4977] loop5: partition table partially beyond EOD, truncated [ 1514.081920][T20345] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1514.538988][T27639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6069'. [ 1514.559626][T27639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6069'. [ 1514.595894][T20345] usb 1-1: Using ep0 maxpacket: 16 [ 1514.647699][T27642] FAULT_INJECTION: forcing a failure. [ 1514.647699][T27642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.660880][T27642] CPU: 0 UID: 0 PID: 27642 Comm: syz.2.6070 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.660908][T27642] Tainted: [L]=SOFTLOCKUP [ 1514.660914][T27642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1514.660925][T27642] Call Trace: [ 1514.660932][T27642] [ 1514.660938][T27642] dump_stack_lvl+0x100/0x190 [ 1514.660965][T27642] should_fail_ex.cold+0x5/0xa [ 1514.660990][T27642] _copy_to_user+0x32/0xd0 [ 1514.661017][T27642] simple_read_from_buffer+0xcb/0x170 [ 1514.661041][T27642] proc_fail_nth_read+0x1af/0x230 [ 1514.661060][T27642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1514.661081][T27642] ? rw_verify_area+0xce/0x6d0 [ 1514.661107][T27642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1514.661126][T27642] vfs_read+0x1e4/0xb30 [ 1514.661149][T27642] ? __pfx_vfs_read+0x10/0x10 [ 1514.661167][T27642] ? __fget_files+0x215/0x3d0 [ 1514.661194][T27642] ? __fget_files+0x21f/0x3d0 [ 1514.661222][T27642] ksys_read+0x12a/0x250 [ 1514.661240][T27642] ? __pfx_ksys_read+0x10/0x10 [ 1514.661257][T27642] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1514.661286][T27642] ? syscall_user_dispatch+0x76/0x130 [ 1514.661315][T27642] do_syscall_64+0x10b/0xf80 [ 1514.661334][T27642] ? clear_bhb_loop+0x40/0x90 [ 1514.661355][T27642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.661373][T27642] RIP: 0033:0x7efebdd5d60e [ 1514.661387][T27642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1514.661407][T27642] RSP: 002b:00007efebebf7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1514.661425][T27642] RAX: ffffffffffffffda RBX: 00007efebebf86c0 RCX: 00007efebdd5d60e [ 1514.661436][T27642] RDX: 000000000000000f RSI: 00007efebebf80a0 RDI: 0000000000000003 [ 1514.661446][T27642] RBP: 00007efebebf8090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.661462][T27642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.661472][T27642] R13: 00007efebe016038 R14: 00007efebe015fa0 R15: 00007ffeb9a62ff8 [ 1514.661496][T27642] [ 1514.884159][T20345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.060562][ T4977] Dev loop5: unable to read RDB block 7 [ 1515.102695][ T4977] loop5: AHDI p1 [ 1515.106776][T20345] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1515.139469][ T4977] loop5: partition table partially beyond EOD, truncated [ 1515.230406][T20345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.375279][T20345] usb 1-1: config 0 descriptor?? [ 1515.398431][ T30] audit: type=1326 audit(2000000694.760:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1516.062615][ T25] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 14 seconds [ 1516.096387][ T25] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 14 seconds [ 1516.097701][ T30] audit: type=1326 audit(2000000694.760:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1516.114309][ T25] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 14 seconds [ 1516.147732][ T25] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 14 seconds [ 1516.686697][ T30] audit: type=1326 audit(2000000694.760:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1516.713604][ T30] audit: type=1326 audit(2000000694.760:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1516.740915][ T30] audit: type=1326 audit(2000000694.760:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1516.777985][ T30] audit: type=1326 audit(2000000694.760:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1516.805250][ T30] audit: type=1326 audit(2000000694.800:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1516.871325][ T30] audit: type=1326 audit(2000000694.800:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1516.956300][T20345] usbhid 1-1:0.0: can't add hid device: -71 [ 1516.970487][T20345] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1516.997071][T20345] usb 1-1: USB disconnect, device number 28 [ 1517.049290][T27679] binder: BINDER_SET_CONTEXT_MGR already set [ 1517.061251][ T30] audit: type=1326 audit(2000000694.800:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1517.099369][ T30] audit: type=1326 audit(2000000694.800:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27644 comm="syz.5.6071" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffa36b9cdd9 code=0x7ffc0000 [ 1517.145223][T27679] binder: 27668:27679 ioctl 4018620d 200000000100 returned -16 [ 1517.559198][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1517.573608][ T4977] Dev loop5: unable to read RDB block 7 [ 1517.588941][ T4977] loop5: AHDI p1 [ 1517.605410][ T4977] loop5: partition table partially beyond EOD, truncated [ 1517.691737][ T9] usb 3-1: device descriptor read/64, error -71 [ 1518.050956][T27709] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 1518.363471][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1518.371178][ T5746] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1518.521753][ T9] usb 3-1: device descriptor read/64, error -71 [ 1518.528121][ T5746] usb 5-1: device descriptor read/64, error -71 [ 1518.655263][ T9] usb usb3-port1: attempt power cycle [ 1518.791582][ T5746] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1518.834699][T22057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1518.858802][T22057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1518.866807][T22057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1518.880133][T22057] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1518.896053][T22057] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1518.973642][T27721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 1518.989280][T27721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6084'. [ 1519.275525][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1519.294885][ T5746] usb 5-1: device descriptor read/64, error -71 [ 1519.470985][T26685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1519.479756][T26685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1519.500372][T26685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1519.518668][T26685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1519.535725][T26685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1519.819512][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6085'. [ 1519.820060][ T4977] Dev loop5: unable to read RDB block 7 [ 1519.830182][T27762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6085'. [ 1519.846879][ T9] usb 3-1: device descriptor read/8, error -71 [ 1519.893818][ T4977] loop5: AHDI p1 [ 1519.912639][ T5746] usb usb5-port1: attempt power cycle [ 1519.916292][ T4977] loop5: partition table partially beyond EOD, truncated [ 1520.133941][ T4977] Dev loop5: unable to read RDB block 7 [ 1520.150526][ T4977] loop5: AHDI p1 [ 1520.168979][ T4977] loop5: partition table partially beyond EOD, truncated [ 1520.173841][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6089'. [ 1520.695608][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1520.703846][ T5746] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1520.709227][T27793] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1520.720671][T27793] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1520.793176][ T9] usb 3-1: no configurations [ 1520.812175][ T5746] usb 5-1: device descriptor read/8, error -71 [ 1520.826986][ T9] usb 3-1: can't read configurations, error -22 [ 1520.908953][ T9] usb usb3-port1: unable to enumerate USB device [ 1520.977792][T27803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6091'. [ 1521.019465][T27803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6091'. [ 1521.042895][T27714] lo speed is unknown, defaulting to 1000 [ 1521.278851][ T8281] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1521.377539][ T310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.432636][ T8281] usb 6-1: Using ep0 maxpacket: 8 [ 1521.443374][ T8281] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1521.453290][ T8281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.462166][ T8281] usb 6-1: Product: syz [ 1521.466815][ T8281] usb 6-1: Manufacturer: syz [ 1521.472119][ T8281] usb 6-1: SerialNumber: syz [ 1522.119842][T22057] Bluetooth: hci3: command tx timeout [ 1522.470276][ T8281] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1522.484227][ T8281] mxuport 6-1:254.0: probe with driver mxuport failed with error -5 [ 1522.502001][ T310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.531335][ T8281] usb 6-1: USB disconnect, device number 54 [ 1523.196009][ T25] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 21 seconds [ 1523.208016][ T25] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 21 seconds [ 1523.211776][T27888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1523.239325][ T25] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 21 seconds [ 1523.297103][ T25] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 21 seconds [ 1523.355553][T27899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1523.414554][T27904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6098'. [ 1523.426568][ T310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.911901][ T4977] Dev loop5: unable to read RDB block 7 [ 1523.951241][ T4977] loop5: AHDI p1 [ 1523.956204][ T310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.054167][ T4977] loop5: partition table partially beyond EOD, truncated [ 1524.123972][T27937] syz.4.6101(27937): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1524.355417][T22057] Bluetooth: hci3: command tx timeout [ 1524.595414][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1524.595428][ T30] audit: type=1400 audit(2000000702.683:1921): avc: denied { watch_mount } for pid=27929 comm="syz.5.6102" path="/274" dev="tmpfs" ino=1478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1524.760113][ T30] audit: type=1400 audit(2000000703.123:1922): avc: denied { ioctl } for pid=27967 comm="syz.2.6103" path="socket:[97286]" dev="sockfs" ino=97286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1524.958141][T27989] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 1525.039553][ T4977] Dev loop5: unable to read RDB block 7 [ 1525.049728][T27714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.074360][ T4977] loop5: AHDI p1 [ 1525.097933][ T4977] loop5: partition table partially beyond EOD, truncated [ 1525.112479][T27714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.161375][T27714] bridge_slave_0: entered allmulticast mode [ 1525.183273][T27714] bridge_slave_0: entered promiscuous mode [ 1525.211033][T27714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.234045][T27714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.260497][T27714] bridge_slave_1: entered allmulticast mode [ 1525.269585][T27714] bridge_slave_1: entered promiscuous mode [ 1525.294255][T28008] overlayfs: regular lower layers cannot follow data lower layers [ 1525.380194][T28008] netlink: 'syz.5.6104': attribute type 13 has an invalid length. [ 1525.413468][T27714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.493665][T28008] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1525.519662][T27714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.601678][T16016] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1525.628461][ T4977] Dev loop5: unable to read RDB block 7 [ 1525.639401][ T4977] loop5: AHDI p1 [ 1525.649419][ T4977] loop5: partition table partially beyond EOD, truncated [ 1525.673112][T27714] team0: Port device team_slave_0 added [ 1525.693519][T27714] team0: Port device team_slave_1 added [ 1525.706443][ T4977] Dev loop5: unable to read RDB block 7 [ 1525.717409][ T4977] loop5: AHDI p1 [ 1525.727374][ T4977] loop5: partition table partially beyond EOD, truncated [ 1525.761515][T16016] usb 3-1: Using ep0 maxpacket: 32 [ 1525.768758][T16016] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1525.797512][T16016] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1525.808000][ T8281] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1525.822050][T16016] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1525.844454][T16016] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1525.863312][T27714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.864852][T16016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.878491][T20345] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1525.889729][ T4977] Dev loop5: unable to read RDB block 7 [ 1525.890406][T16016] usb 3-1: config 0 descriptor?? [ 1525.899610][T27714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.921198][ T4977] loop5: AHDI p1 [ 1525.931041][T27714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.941938][ T4977] loop5: partition table partially beyond EOD, truncated [ 1525.949348][ T310] dummy0: left allmulticast mode [ 1525.958787][ T310] dummy0: left promiscuous mode [ 1525.969187][ T310] bridge0: port 3(dummy0) entered disabled state [ 1525.986719][ T8281] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1526.003074][ T310] bridge_slave_1: left allmulticast mode [ 1526.003453][ T8281] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1526.020012][ T310] bridge_slave_1: left promiscuous mode [ 1526.031479][T20345] usb 4-1: Using ep0 maxpacket: 16 [ 1526.040552][T20345] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.042744][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.053226][T20345] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1526.080401][ T310] bridge_slave_0: left allmulticast mode [ 1526.084207][ T8281] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 1526.093184][ T310] bridge_slave_0: left promiscuous mode [ 1526.101815][ T8281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.112411][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.126740][T20345] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1526.136680][ T8281] usb 5-1: Product: syz [ 1526.148502][ T8281] usb 5-1: Manufacturer: 魱㾝໨嫎ꦟ連⫲랫頾퍔ⵋЅ窔Đ툳䖿䄡ᆗ䤻藋窴ꪑ⹋絒浛䳝졬犛ń듃⽪پ뵭䙛뵣䊑畫闃枔̗䲼ǂ࡭⡶陓ῧꂉ꓍븧眊胢ꪽ袼x饇悗沃췷㿿漷呣ﮂ婐鹓阴㻾瀷檾适땘잎ϡ짐뚧䪁휄訓犟㫵쏂갡⍡뵓鲈凖돧溎쥁숨㗆썫朠♚艆뼵陹丽鴠唕糛굵坁 [ 1526.181873][T20345] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 1526.203056][T20345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.208027][ T310] dvmrp1: left allmulticast mode [ 1526.232638][T20345] usb 4-1: config 0 descriptor?? [ 1526.276111][ T8281] usb 5-1: SerialNumber: syz [ 1526.323332][T16016] corsair-cpro 0003:1B1C:0C10.0042: unknown main item tag 0x0 [ 1526.343057][T16016] corsair-cpro 0003:1B1C:0C10.0042: unknown main item tag 0x0 [ 1526.370857][T16016] corsair-cpro 0003:1B1C:0C10.0042: unknown main item tag 0x0 [ 1526.439231][T16016] corsair-cpro 0003:1B1C:0C10.0042: unknown main item tag 0x0 [ 1526.452087][T22057] Bluetooth: hci3: command tx timeout [ 1526.498048][ T310] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1526.515121][ T310] gretap1 (unregistering): left allmulticast mode [ 1526.521194][T28139] kvm: emulating exchange as write [ 1526.539146][T16016] corsair-cpro 0003:1B1C:0C10.0042: unknown main item tag 0x0 [ 1526.558273][ T8281] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 1526.573019][ T8281] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1526.586952][T16016] corsair-cpro 0003:1B1C:0C10.0042: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1526.605745][ T8281] usb 5-1: failed to enable PITCH for EP 0x1 [ 1526.612182][ T310] bond2 (unregistering): (slave geneve4): Releasing active interface [ 1526.618384][ T8281] usb 5-1: unit 2 not found! [ 1526.638488][ T8281] usb 5-1: unit 0 not found! [ 1526.667403][T16016] corsair-cpro 0003:1B1C:0C10.0042: probe with driver corsair-cpro failed with error -90 [ 1526.717665][T28030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6106'. [ 1526.849441][ T8281] usb 5-1: USB disconnect, device number 47 [ 1527.013623][T16248] udevd[16248]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.630323][T28182] usb usb9: usbfs: process 28182 (syz.4.6113) did not claim interface 0 before use [ 1527.852474][ T8281] usb 3-1: USB disconnect, device number 27 [ 1527.969485][ T310] bond3 (unregistering): (slave bridge13): Releasing backup interface [ 1527.988870][ T310] bridge13 (unregistering): left allmulticast mode [ 1528.143723][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.153448][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.164018][ T310] bond0 (unregistering): (slave team0): Releasing backup interface [ 1528.173430][ T310] bond0 (unregistering): Released all slaves [ 1528.288424][ T310] bond1 (unregistering): Released all slaves [ 1528.458115][ T310] bond2 (unregistering): Released all slaves [ 1528.568306][ T310] bond3 (unregistering): Released all slaves [ 1528.581498][T22057] Bluetooth: hci3: command tx timeout [ 1529.163086][T27714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.175883][T27714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.215752][T27714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.370559][T27714] hsr_slave_0: entered promiscuous mode [ 1529.390019][T27714] hsr_slave_1: entered promiscuous mode [ 1529.408369][T27714] debugfs: 'hsr0' already exists in 'hsr' [ 1529.418965][T27714] Cannot create hsr debugfs directory [ 1529.817862][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1529.916382][T28265] netlink: 'syz.4.6116': attribute type 1 has an invalid length. [ 1530.849230][ T310] tipc: Disabling bearer [ 1530.857926][ T25] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 28 seconds [ 1531.049017][ T25] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 28 seconds [ 1531.059998][ T25] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 28 seconds [ 1531.081735][ T25] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 28 seconds [ 1531.123589][ T310] tipc: Left network mode [ 1531.160623][T20345] usbhid 4-1:0.0: can't add hid device: -71 [ 1531.189715][T20345] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1531.216243][T20345] usb 4-1: USB disconnect, device number 59 [ 1531.263889][T28260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1531.652623][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1531.664435][ T4977] Dev loop5: unable to read RDB block 7 [ 1531.696532][ T4977] loop5: AHDI p1 [ 1531.707602][ T4977] loop5: partition table partially beyond EOD, truncated [ 1531.859310][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6118'. [ 1531.868409][T28330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6118'. [ 1532.071578][ T9] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1532.095743][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.138955][ T9] usb 5-1: Product: syz [ 1532.155862][ T9] usb 5-1: Manufacturer: syz [ 1532.190342][ T9] usb 5-1: SerialNumber: syz [ 1532.201182][ T4977] Dev loop5: unable to read RDB block 7 [ 1532.217979][ T4977] loop5: AHDI p1 [ 1532.268528][ T4977] loop5: partition table partially beyond EOD, truncated [ 1532.353735][ T4977] Dev loop5: unable to read RDB block 7 [ 1532.374756][ T4977] loop5: AHDI p1 [ 1532.386596][ T4977] loop5: partition table partially beyond EOD, truncated [ 1532.672002][T20345] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1532.694523][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1532.860187][T20345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.894046][T20345] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1532.894137][T20345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.898487][T20345] usb 6-1: config 0 descriptor?? [ 1533.269513][T20345] pwc: Askey VC010 type 2 USB webcam detected. [ 1533.483433][T20345] pwc: send_video_command error -71 [ 1533.513670][T20345] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1533.548943][T20345] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1533.596397][T20345] usb 6-1: USB disconnect, device number 55 [ 1533.717584][ T310] hsr_slave_0: left promiscuous mode [ 1533.737874][ T310] hsr_slave_1: left promiscuous mode [ 1533.766636][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1533.809710][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1534.021619][T20345] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1534.226724][T20345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.251706][T20345] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1534.265508][ T310] team0 (unregistering): Port device team_slave_1 removed [ 1534.276653][T20345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.308187][ T310] team0 (unregistering): Port device team_slave_0 removed [ 1534.311220][T20345] usb 6-1: config 0 descriptor?? [ 1534.339857][T20345] pwc: Askey VC010 type 2 USB webcam detected. [ 1534.531745][ C1] usblp0: nonzero write bulk status received: -71 [ 1534.535586][T15569] usb 5-1: USB disconnect, device number 48 [ 1534.580833][T28313] usblp0: removed [ 1534.746763][T20345] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1534.778850][T20345] pwc: recv_control_msg error -32 req 02 val 2700 [ 1534.813708][T20345] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1534.840945][T20345] pwc: recv_control_msg error -32 req 04 val 1000 [ 1534.853851][T20345] pwc: recv_control_msg error -32 req 04 val 1300 [ 1534.860939][T20345] pwc: recv_control_msg error -32 req 04 val 1400 [ 1534.887095][T20345] pwc: recv_control_msg error -32 req 02 val 2000 [ 1534.931708][T20345] pwc: recv_control_msg error -32 req 02 val 2100 [ 1534.959862][T20345] pwc: recv_control_msg error -32 req 04 val 1500 [ 1534.989993][T20345] pwc: recv_control_msg error -32 req 02 val 2500 [ 1535.022120][T20345] pwc: recv_control_msg error -32 req 02 val 2400 [ 1535.086527][T20345] pwc: recv_control_msg error -32 req 02 val 2600 [ 1535.095440][T27714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1535.137495][T20345] pwc: recv_control_msg error -32 req 02 val 2900 [ 1535.183502][T27714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1535.211317][T28481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1535.270841][T27714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1535.279821][T28485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1535.318254][T27714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1535.356503][T27714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1535.383764][ T30] audit: type=1400 audit(2000000713.753:1923): avc: denied { listen } for pid=28487 comm="syz.2.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1535.417576][T20345] pwc: recv_control_msg error -71 req 04 val 1100 [ 1535.448639][T20345] pwc: recv_control_msg error -71 req 04 val 1200 [ 1535.702081][T27714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1535.758980][T20345] pwc: Registered as video103. [ 1535.775063][ T310] IPVS: stop unused estimator thread 0... [ 1535.780850][T27714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1535.806083][T20345] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input93 [ 1535.808061][T27714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1535.967103][T20345] usb 6-1: USB disconnect, device number 56 [ 1536.009658][ T4977] Dev loop5: unable to read RDB block 7 [ 1536.040343][ T4977] loop5: AHDI p1 [ 1536.047940][ T4977] loop5: partition table partially beyond EOD, truncated [ 1536.667250][T16016] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1536.747386][T27714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.789113][T27714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.819322][T18772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.826413][T18772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.837095][T16016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.861511][T16016] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1536.880531][T16016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.881097][T18772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.895613][T18772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.985082][ T4977] Dev loop5: unable to read RDB block 7 [ 1536.996508][T16016] usb 4-1: config 0 descriptor?? [ 1537.012319][ T4977] loop5: AHDI p1 [ 1537.027115][T16016] pwc: Askey VC010 type 2 USB webcam detected. [ 1537.036569][ T4977] loop5: partition table partially beyond EOD, truncated [ 1537.257089][T16016] pwc: send_video_command error -71 [ 1537.270054][T16016] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1537.287467][T16016] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1538.307912][T16016] usb 4-1: USB disconnect, device number 60 [ 1538.443217][ T25] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 35 seconds [ 1538.454026][ T25] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 35 seconds [ 1538.464909][ T25] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 35 seconds [ 1538.475839][ T25] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 35 seconds [ 1538.495087][ T4977] Dev loop5: unable to read RDB block 7 [ 1538.510531][ T4977] loop5: AHDI p1 [ 1538.526481][ T4977] loop5: partition table partially beyond EOD, truncated [ 1538.735059][T16016] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1538.904090][T16016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.335756][T16016] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1539.351202][T16016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.368085][T16016] usb 4-1: config 0 descriptor?? [ 1539.389709][ T4977] Dev loop5: unable to read RDB block 7 [ 1539.396694][ T4977] loop5: AHDI p1 [ 1539.401319][ T4977] loop5: partition table partially beyond EOD, truncated [ 1539.434661][T16016] usb 4-1: can't set config #0, error -71 [ 1539.478941][T16016] usb 4-1: USB disconnect, device number 61 [ 1539.532969][T27714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1539.551333][T28597] FAULT_INJECTION: forcing a failure. [ 1539.551333][T28597] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.568505][T28597] CPU: 1 UID: 0 PID: 28597 Comm: syz.3.6142 Tainted: G L syzkaller #0 PREEMPT(full) [ 1539.568532][T28597] Tainted: [L]=SOFTLOCKUP [ 1539.568538][T28597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1539.568548][T28597] Call Trace: [ 1539.568554][T28597] [ 1539.568560][T28597] dump_stack_lvl+0x100/0x190 [ 1539.568585][T28597] should_fail_ex.cold+0x5/0xa [ 1539.568614][T28597] ? tomoyo_encode2+0xfb/0x3c0 [ 1539.568634][T28597] should_failslab+0xc2/0x120 [ 1539.568653][T28597] __kmalloc_noprof+0xe0/0x850 [ 1539.568682][T28597] tomoyo_encode2+0xfb/0x3c0 [ 1539.568707][T28597] tomoyo_encode+0x29/0x50 [ 1539.568729][T28597] tomoyo_realpath_from_path+0x18c/0x690 [ 1539.568757][T28597] tomoyo_path_number_perm+0x23c/0x580 [ 1539.568775][T28597] ? tomoyo_path_number_perm+0x22e/0x580 [ 1539.568796][T28597] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1539.568841][T28597] ? find_held_lock+0x2b/0x80 [ 1539.568858][T28597] ? __fget_files+0x215/0x3d0 [ 1539.568881][T28597] ? hook_file_ioctl_common+0x149/0x410 [ 1539.568905][T28597] ? __fget_files+0x215/0x3d0 [ 1539.568928][T28597] ? __fget_files+0x21f/0x3d0 [ 1539.568953][T28597] security_file_ioctl+0xd3/0x230 [ 1539.568976][T28597] __x64_sys_ioctl+0xb7/0x210 [ 1539.568995][T28597] do_syscall_64+0x10b/0xf80 [ 1539.569015][T28597] ? clear_bhb_loop+0x40/0x90 [ 1539.569037][T28597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.569055][T28597] RIP: 0033:0x7f747af9cdd9 [ 1539.569070][T28597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.569085][T28597] RSP: 002b:00007f747bd73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1539.569103][T28597] RAX: ffffffffffffffda RBX: 00007f747b215fa0 RCX: 00007f747af9cdd9 [ 1539.569114][T28597] RDX: 0000200000000480 RSI: 00000000000089e0 RDI: 0000000000000003 [ 1539.569123][T28597] RBP: 00007f747bd73090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.569132][T28597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1539.569141][T28597] R13: 00007f747b216038 R14: 00007f747b215fa0 R15: 00007fff92718da8 [ 1539.569165][T28597] [ 1539.569212][T28597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1539.812273][ T4977] Dev loop5: unable to read RDB block 7 [ 1539.827659][ T4977] loop5: AHDI p1 [ 1539.838869][ T4977] loop5: partition table partially beyond EOD, truncated [ 1539.928730][T27714] veth0_vlan: entered promiscuous mode [ 1539.966010][T27714] veth1_vlan: entered promiscuous mode [ 1540.921327][ T1309] aoe: packet could not be sent on ifb1. consider increasing tx_queue_len [ 1540.932142][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.944739][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1541.033377][T27714] veth0_macvtap: entered promiscuous mode [ 1541.047629][T27714] veth1_macvtap: entered promiscuous mode [ 1541.069810][T27714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1541.093138][T27714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.363247][T16545] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1541.559493][T23564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.575252][ T4977] Dev loop5: unable to read RDB block 7 [ 1541.584664][ T4977] loop5: AHDI p1 [ 1541.588328][ T4977] loop5: partition table partially beyond EOD, truncated [ 1541.610423][T23564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.668720][T23564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.722864][T16545] usb 3-1: Using ep0 maxpacket: 16 [ 1541.737437][T23564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.763578][T16545] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1541.803691][T16545] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1541.844590][T16545] usb 3-1: Product: syz [ 1541.856463][ T4977] Dev loop5: unable to read RDB block 7 [ 1541.879741][ T4977] loop5: AHDI p1 [ 1541.891813][T16545] usb 3-1: Manufacturer: syz [ 1541.907200][ T4977] loop5: partition table partially beyond EOD, truncated [ 1541.911723][T16545] usb 3-1: SerialNumber: syz [ 1541.923058][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.950893][T16545] usb 3-1: config 0 descriptor?? [ 1541.956270][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.126653][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.155000][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.244377][T16545] usb 3-1: USB disconnect, device number 28 [ 1542.464179][T28660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6083'. [ 1542.671974][T16016] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1542.832926][T16016] usb 5-1: Using ep0 maxpacket: 32 [ 1542.865302][T16016] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1542.893462][T16016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.918564][T16016] usb 5-1: Product: syz [ 1542.936241][T16016] usb 5-1: Manufacturer: syz [ 1542.953244][T16016] usb 5-1: SerialNumber: syz [ 1542.970003][T16016] usb 5-1: config 0 descriptor?? [ 1542.978297][ T4977] Dev loop5: unable to read RDB block 7 [ 1543.000711][ T4977] loop5: AHDI p1 [ 1543.017978][ T4977] loop5: partition table partially beyond EOD, truncated [ 1543.295936][T16016] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 049 [ 1543.353236][T20345] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1543.556215][T20345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.655116][T20345] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1543.687253][T20345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.703757][T20345] usb 6-1: config 0 descriptor?? [ 1543.713035][T20345] pwc: Askey VC010 type 2 USB webcam detected. [ 1543.885988][T28661] i2c i2c-1: failure reading data [ 1543.917084][T20345] pwc: send_video_command error -71 [ 1543.927412][T20345] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1543.976645][T20345] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1544.009258][T20345] usb 6-1: USB disconnect, device number 57 [ 1544.124292][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6154'. [ 1544.144560][T28721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6154'. [ 1545.192104][T20345] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1545.263069][T16016] usb 5-1: USB disconnect, device number 49 [ 1545.311451][T16545] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1545.386195][T20345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.403655][T20345] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1545.425369][T20345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.450081][T20345] usb 6-1: config 0 descriptor?? [ 1545.461654][ T25] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 42 seconds [ 1545.473129][ T25] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 42 seconds [ 1545.488056][T20345] pwc: Askey VC010 type 2 USB webcam detected. [ 1545.497855][ T25] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 42 seconds [ 1545.510638][ T25] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 42 seconds [ 1545.525271][T28768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28768 comm=syz.4.6162 [ 1545.541481][T20341] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 1545.549824][T16545] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.564609][T28768] netlink: 'syz.4.6162': attribute type 1 has an invalid length. [ 1545.580284][T16545] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1545.607607][T16545] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1545.630515][T16545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.650417][T16545] usb 1-1: Product: syz [ 1545.673353][T20341] usb 3-1: device descriptor read/64, error -71 [ 1545.708719][T16545] usb 1-1: Manufacturer: syz [ 1545.725338][T16545] usb 1-1: SerialNumber: syz [ 1545.743940][T16545] usb 1-1: config 0 descriptor?? [ 1545.868286][T20345] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1545.882056][T20345] pwc: recv_control_msg error -32 req 02 val 2700 [ 1545.931646][T20341] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 1545.991814][T28691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.003174][T20345] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1546.022189][T28691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.086119][T20345] pwc: recv_control_msg error -32 req 04 val 1000 [ 1546.113194][T20345] pwc: recv_control_msg error -32 req 04 val 1300 [ 1546.120327][T20345] pwc: recv_control_msg error -32 req 04 val 1400 [ 1546.155412][T20341] usb 3-1: device descriptor read/64, error -71 [ 1546.204785][T20345] pwc: recv_control_msg error -32 req 02 val 2000 [ 1546.254004][T20345] pwc: recv_control_msg error -32 req 02 val 2100 [ 1546.261985][T20345] pwc: recv_control_msg error -32 req 04 val 1500 [ 1546.271110][T20345] pwc: recv_control_msg error -32 req 02 val 2500 [ 1546.278070][T20345] pwc: recv_control_msg error -32 req 02 val 2400 [ 1546.296466][T20345] pwc: recv_control_msg error -32 req 02 val 2600 [ 1546.303629][T20345] pwc: recv_control_msg error -32 req 02 val 2900 [ 1546.310684][T20345] pwc: recv_control_msg error -32 req 02 val 2800 [ 1546.317464][T20341] usb usb3-port1: attempt power cycle [ 1546.330612][T20345] pwc: recv_control_msg error -32 req 04 val 1100 [ 1546.338344][T20345] pwc: recv_control_msg error -71 req 04 val 1200 [ 1546.349604][T20345] pwc: Registered as video103. [ 1546.368905][T20345] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input94 [ 1546.408471][T20345] usb 6-1: USB disconnect, device number 58 [ 1546.671517][T20341] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1546.823692][T28837] syz.4.6164: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 1546.823822][T20341] usb 3-1: device descriptor read/8, error -71 [ 1546.839620][T28837] /,mems_allowed=0-1 [ 1546.849617][T28837] CPU: 0 UID: 0 PID: 28837 Comm: syz.4.6164 Tainted: G L syzkaller #0 PREEMPT(full) [ 1546.849648][T28837] Tainted: [L]=SOFTLOCKUP [ 1546.849653][T28837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1546.849660][T28837] Call Trace: [ 1546.849665][T28837] [ 1546.849670][T28837] dump_stack_lvl+0x100/0x190 [ 1546.849688][T28837] warn_alloc.cold+0x95/0x1c1 [ 1546.849700][T28837] ? __pfx_warn_alloc+0x10/0x10 [ 1546.849721][T28837] ? stack_depot_save_flags+0x27/0x9d0 [ 1546.849745][T28837] ? xskq_create+0xfb/0x1d0 [ 1546.849766][T28837] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1546.849785][T28837] ? xskq_create+0xfb/0x1d0 [ 1546.849806][T28837] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1546.849828][T28837] ? xskq_create+0xfb/0x1d0 [ 1546.849845][T28837] vmalloc_user_noprof+0x9e/0xe0 [ 1546.849859][T28837] ? xskq_create+0xfb/0x1d0 [ 1546.849876][T28837] xskq_create+0xfb/0x1d0 [ 1546.849893][T28837] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 1546.849907][T28837] xsk_setsockopt+0x743/0xab0 [ 1546.849924][T28837] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1546.849940][T28837] ? find_held_lock+0x2b/0x80 [ 1546.849950][T28837] ? __fget_files+0x215/0x3d0 [ 1546.849966][T28837] ? selinux_socket_setsockopt+0x6a/0x80 [ 1546.849980][T28837] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1546.849997][T28837] do_sock_setsockopt+0xf3/0x1d0 [ 1546.850010][T28837] __sys_setsockopt+0x195/0x220 [ 1546.850029][T28837] __x64_sys_setsockopt+0xbd/0x160 [ 1546.850044][T28837] ? do_syscall_64+0x90/0xf80 [ 1546.850056][T28837] ? lockdep_hardirqs_on+0x78/0x100 [ 1546.850068][T28837] do_syscall_64+0x10b/0xf80 [ 1546.850079][T28837] ? clear_bhb_loop+0x40/0x90 [ 1546.850092][T28837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.850104][T28837] RIP: 0033:0x7fbb8499cdd9 [ 1546.850115][T28837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.850126][T28837] RSP: 002b:00007fbb8581f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1546.850136][T28837] RAX: ffffffffffffffda RBX: 00007fbb84c16090 RCX: 00007fbb8499cdd9 [ 1546.850143][T28837] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1546.850150][T28837] RBP: 00007fbb84a32d69 R08: 0000000000000004 R09: 0000000000000000 [ 1546.850156][T28837] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1546.850162][T28837] R13: 00007fbb84c16128 R14: 00007fbb84c16090 R15: 00007ffe00df1ab8 [ 1546.850176][T28837] [ 1546.850196][T28837] Mem-Info: [ 1547.107520][T28837] active_anon:32162 inactive_anon:0 isolated_anon:0 [ 1547.107520][T28837] active_file:22367 inactive_file:41591 isolated_file:0 [ 1547.107520][T28837] unevictable:768 dirty:173 writeback:0 [ 1547.107520][T28837] slab_reclaimable:8657 slab_unreclaimable:117162 [ 1547.107520][T28837] mapped:36900 shmem:21098 pagetables:1773 [ 1547.107520][T28837] sec_pagetables:0 bounce:0 [ 1547.107520][T28837] kernel_misc_reclaimable:0 [ 1547.107520][T28837] free:1235830 free_pcp:15180 free_cma:0 [ 1547.156705][T28837] Node 0 active_anon:128648kB inactive_anon:0kB active_file:89448kB inactive_file:166160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147580kB dirty:692kB writeback:0kB shmem:82856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14992kB pagetables:6976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1547.251851][T28837] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1547.305828][ T4977] Dev loop5: unable to read RDB block 7 [ 1547.317958][T28837] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1547.325972][ T4977] loop5: AHDI p1 [ 1547.496318][ T4977] loop5: partition table partially beyond EOD, truncated [ 1547.928774][T20341] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 1547.936363][T28837] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1547.952666][T20341] usb 3-1: device descriptor read/8, error -71 [ 1547.981264][T28837] Node 0 DMA32 free:972976kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:135168kB inactive_anon:0kB active_file:89448kB inactive_file:166168kB unevictable:1536kB writepending:788kB zspages:52kB present:3129332kB managed:2537128kB mlocked:0kB bounce:0kB free_pcp:53612kB local_pcp:42064kB free_cma:0kB [ 1548.017369][T28837] lowmem_reserve[]: 0 0 1 1 1 [ 1548.025069][T28837] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1548.083053][T20341] usb usb3-port1: unable to enumerate USB device [ 1548.111120][T20341] usb 1-1: USB disconnect, device number 29 [ 1548.124509][T28837] lowmem_reserve[]: 0 0 0 0 0 [ 1548.146860][T28837] Node 1 Normal free:3952916kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1548.186624][T28837] lowmem_reserve[]: 0 0 0 0 0 [ 1548.199937][T28837] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1548.260449][T28837] Node 0 DMA32: 7544*4kB (UME) 5862*8kB (UME) 3756*16kB (UME) 235*32kB (UME) 400*64kB (UME) 471*128kB (UME) 389*256kB (UME) 269*512kB (UME) 135*1024kB (UME) 27*2048kB (UME) 78*4096kB (UM) = 980912kB [ 1548.284797][ T4977] Dev loop5: unable to read RDB block 7 [ 1548.301819][T28837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1548.326287][T28837] Node 1 Normal: 0*4kB 2*8kB (U) 0*16kB 10*32kB (UM) 8*64kB (UM) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 963*4096kB (M) = 3952976kB [ 1548.327780][ T4977] loop5: AHDI p1 [ 1548.351578][T28837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.362010][T28837] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1548.371350][T28837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1548.539130][T28837] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1549.546874][ T4977] loop5: partition table partially beyond EOD, truncated [ 1549.807873][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1549.826545][T28884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1549.868210][T28837] 86057 total pagecache pages [ 1549.981962][T28837] 0 pages in swap cache [ 1550.011720][T28837] Free swap = 124996kB [ 1550.034985][T28837] Total swap = 124996kB [ 1550.120705][T28837] 2097051 pages RAM [ 1550.220161][T28837] 0 pages HighMem/MovableOnly [ 1550.317022][T28837] 430881 pages reserved [ 1550.356001][ T4977] Dev loop5: unable to read RDB block 7 [ 1550.384863][T28837] 0 pages cma reserved [ 1550.412594][ T4977] loop5: AHDI p1 [ 1550.456056][ T4977] loop5: partition table partially beyond EOD, truncated [ 1552.001743][ T4977] Dev loop5: unable to read RDB block 7 [ 1552.029692][ T4977] loop5: AHDI p1 [ 1552.040540][ T30] audit: type=1400 audit(2000000730.403:1924): avc: denied { getopt } for pid=28900 comm="syz.5.6172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1552.080500][ T4977] loop5: partition table partially beyond EOD, truncated [ 1552.241545][ T4977] Dev loop5: unable to read RDB block 7 [ 1552.255886][ T4977] loop5: AHDI p1 [ 1552.267741][ T4977] loop5: partition table partially beyond EOD, truncated [ 1552.491750][T16545] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1552.517281][T28931] loop6: detected capacity change from 0 to 2640 [ 1552.529632][ T25] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 49 seconds [ 1552.541225][ T25] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 49 seconds [ 1552.552214][ T25] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 49 seconds [ 1552.563420][ T25] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 49 seconds [ 1552.631031][T16247] buffer_io_error: 22 callbacks suppressed [ 1552.631043][T16247] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.677390][T16545] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.688551][T20332] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1552.738052][T16545] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1552.749201][T16247] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.766210][T16545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.785481][T28931] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.804817][T16545] usb 1-1: Product: syz [ 1552.807482][T28931] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.832548][T16545] usb 1-1: Manufacturer: syz [ 1552.848999][T16545] usb 1-1: SerialNumber: syz [ 1552.877892][T16247] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.888876][T16545] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1552.906501][T16247] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.919632][T20332] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.935618][T16247] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.957239][T20332] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1552.970195][T28931] Buffer I/O error on dev loop6, logical block 0, async page read [ 1552.991263][T20332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.015543][T20332] usb 4-1: Product: syz [ 1553.030658][T20332] usb 4-1: Manufacturer: syz [ 1553.046751][T20332] usb 4-1: SerialNumber: syz [ 1553.055885][T28931] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.084532][T20332] usb 4-1: config 0 descriptor?? [ 1553.101159][ T4977] Dev loop5: unable to read RDB block 7 [ 1553.126973][ T4977] loop5: AHDI p1 [ 1553.140439][ T4977] loop5: partition table partially beyond EOD, truncated [ 1553.159903][T20332] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1553.164597][T28931] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.233714][ T4977] Dev loop5: unable to read RDB block 7 [ 1553.255188][ T4977] loop5: AHDI p1 [ 1553.269080][ T4977] loop5: partition table partially beyond EOD, truncated [ 1553.286155][T16545] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1553.286936][T28913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.357590][T16545] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1553.382339][T28913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.390662][T28931] ldm_validate_partition_table(): Disk read failed. [ 1553.419502][T16545] usb 1-1: media controller created [ 1553.788590][T16545] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1553.795140][T28931] Dev loop6: unable to read RDB block 0 [ 1553.825311][T20341] usb 4-1: USB disconnect, device number 62 [ 1553.979065][T28931] loop6: unable to read partition table [ 1554.096488][T28931] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1554.109381][ T4977] Dev loop5: unable to read RDB block 7 [ 1554.130028][ T4977] loop5: AHDI p1 [ 1554.138679][ T4977] loop5: partition table partially beyond EOD, truncated [ 1554.179243][T28983] comedi comedi0: Minor 2147483647 is invalid! [ 1554.240766][ T30] audit: type=1400 audit(2000000732.603:1925): avc: denied { write } for pid=28981 comm="syz.5.6181" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1554.589612][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6183'. [ 1554.607214][T28993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6183'. [ 1555.428074][ T4977] Dev loop5: unable to read RDB block 7 [ 1555.442376][ T4977] loop5: AHDI p1 [ 1555.449328][ T4977] loop5: partition table partially beyond EOD, truncated [ 1556.080667][T20341] usb 1-1: USB disconnect, device number 30 [ 1556.120791][ T4977] Dev loop5: unable to read RDB block 7 [ 1556.151232][ T4977] loop5: AHDI p1 [ 1556.166576][ T4977] loop5: partition table partially beyond EOD, truncated [ 1556.257457][ T30] audit: type=1326 audit(2000000734.623:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29033 comm="syz.5.6191" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa36b9cdd9 code=0x0 [ 1556.814216][T20341] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1557.089078][ T4977] Dev loop5: unable to read RDB block 7 [ 1557.097234][T16016] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1557.131101][ T4977] loop5: AHDI p1 [ 1557.135335][ T4977] loop5: partition table partially beyond EOD, truncated [ 1557.193214][T20341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.213335][T20341] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1557.240971][T20341] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1557.260964][T20341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.281689][T16016] usb 4-1: Using ep0 maxpacket: 8 [ 1557.339260][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6197'. [ 1557.357093][T29077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6197'. [ 1557.390615][T20341] usb 5-1: Product: syz [ 1557.404052][T16016] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1557.434625][T20341] usb 5-1: Manufacturer: syz [ 1558.071985][T20341] usb 5-1: SerialNumber: syz [ 1558.087718][T16016] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1558.749873][T20341] usb 5-1: config 0 descriptor?? [ 1558.763405][T16016] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1558.806062][T16016] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1559.333694][ T4977] Dev loop5: unable to read RDB block 7 [ 1559.381513][ T4977] loop5: AHDI p1 [ 1559.385214][T16016] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1559.414475][ T4977] loop5: partition table partially beyond EOD, truncated [ 1559.529434][T16016] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1560.043381][T16016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.072457][T20341] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1560.348980][T20341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.390476][ T25] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 56 seconds [ 1560.405984][ T25] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 56 seconds [ 1560.417383][ T25] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 56 seconds [ 1560.428590][ T25] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 56 seconds [ 1560.456530][T20341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.474884][T20341] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1560.488009][T20341] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1560.497147][T20341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.508038][T20341] usb 3-1: config 0 descriptor?? [ 1560.525897][T20332] usb 5-1: USB disconnect, device number 50 [ 1560.591896][T16016] usb 4-1: can't set config #16, error -71 [ 1560.599995][T16016] usb 4-1: USB disconnect, device number 63 [ 1560.625568][ T4977] Dev loop5: unable to read RDB block 7 [ 1560.641435][ T4977] loop5: AHDI p1 [ 1560.651747][ T4977] loop5: partition table partially beyond EOD, truncated [ 1560.743374][T29131] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6204'. [ 1561.071748][T16545] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1561.469766][T29089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.488404][T29089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.488949][T16545] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1561.501008][T20341] usbhid 3-1:0.0: can't add hid device: -71 [ 1561.529918][T20341] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1561.539756][T16545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.546695][T20341] usb 3-1: USB disconnect, device number 33 [ 1561.575977][T16545] usb 1-1: Product: syz [ 1561.584337][T16545] usb 1-1: Manufacturer: syz [ 1561.589590][T29146] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1561.598749][T16545] usb 1-1: SerialNumber: syz [ 1561.609717][ T4977] Dev loop5: unable to read RDB block 7 [ 1561.628056][ T4977] loop5: AHDI p1 [ 1561.636807][ T4977] loop5: partition table partially beyond EOD, truncated [ 1561.663916][ T4977] Dev loop5: unable to read RDB block 7 [ 1561.669501][ T4977] loop5: AHDI p1 [ 1561.674099][ T4977] loop5: partition table partially beyond EOD, truncated [ 1561.822011][ T4977] Dev loop5: unable to read RDB block 7 [ 1561.827639][ T4977] loop5: AHDI p1 [ 1561.831493][ T4977] loop5: partition table partially beyond EOD, truncated [ 1562.152687][T15569] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1562.167406][T16545] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1562.342160][T15569] usb 4-1: Using ep0 maxpacket: 32 [ 1562.435072][T29184] usb usb9: usbfs: process 29184 (syz.2.6211) did not claim interface 0 before use [ 1562.628389][T15569] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1562.654465][T15569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.673778][T15569] usb 4-1: Product: syz [ 1562.685177][T15569] usb 4-1: Manufacturer: syz [ 1562.701984][T15569] usb 4-1: SerialNumber: syz [ 1562.729762][T15569] usb 4-1: config 0 descriptor?? [ 1562.789631][ T4977] Dev loop5: unable to read RDB block 7 [ 1562.812447][ T4977] loop5: AHDI p1 [ 1562.827478][ T4977] loop5: partition table partially beyond EOD, truncated [ 1563.045251][T15569] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 064 [ 1563.352914][T29203] netpci0: tun_chr_ioctl cmd 1074025672 [ 1563.358489][T29203] netpci0: ignored: set checksum enabled [ 1563.371099][T20341] libceph: connect (1)[c::]:6789 error -101 [ 1563.385760][T20341] libceph: mon0 (1)[c::]:6789 connect error [ 1563.416214][ T4977] Dev loop5: unable to read RDB block 7 [ 1563.422038][ T4977] loop5: AHDI p1 [ 1563.422060][ T4977] loop5: partition table partially beyond EOD, truncated [ 1563.477632][ T4977] Dev loop5: unable to read RDB block 7 [ 1563.477656][ T4977] loop5: AHDI p1 [ 1563.477676][ T4977] loop5: partition table partially beyond EOD, truncated [ 1563.515068][T29210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6214'. [ 1563.675134][T16016] libceph: connect (1)[c::]:6789 error -101 [ 1563.681984][T16016] libceph: mon0 (1)[c::]:6789 connect error [ 1563.968127][ C1] usblp0: nonzero write bulk status received: -71 [ 1564.063595][T20341] usb 1-1: USB disconnect, device number 31 [ 1564.410602][T20343] libceph: connect (1)[c::]:6789 error -101 [ 1564.430178][T29114] usblp0: removed [ 1564.438976][T20343] libceph: mon0 (1)[c::]:6789 connect error [ 1564.560837][ T4977] Dev loop5: unable to read RDB block 7 [ 1564.584053][ T4977] loop5: AHDI p1 [ 1564.585054][T29203] ceph: No mds server is up or the cluster is laggy [ 1564.587795][ T4977] loop5: partition table partially beyond EOD, truncated [ 1564.608509][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6218'. [ 1564.667255][T29245] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1564.735648][T29257] loop6: detected capacity change from 0 to 2640 [ 1564.770884][T29257] buffer_io_error: 11 callbacks suppressed [ 1564.770902][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.793218][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.817261][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.826095][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.834968][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.844920][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.853225][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.861775][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.871893][T29257] ldm_validate_partition_table(): Disk read failed. [ 1564.878598][T20345] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1564.891736][T29271] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6221'. [ 1564.900941][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.909312][T29257] Buffer I/O error on dev loop6, logical block 0, async page read [ 1564.923922][T29257] Dev loop6: unable to read RDB block 0 [ 1564.940344][T29257] loop6: unable to read partition table [ 1564.950654][T29257] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1565.042017][T20341] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1565.062096][T20345] usb 6-1: Using ep0 maxpacket: 32 [ 1565.069707][T20345] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1565.087080][T20345] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1565.098426][T20345] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1565.105974][T20345] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1565.115576][T20345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.130418][T20345] usb 6-1: config 0 descriptor?? [ 1565.205650][T20341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.220495][T20341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.232316][T20341] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1565.245391][T20341] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1565.254520][T20341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.265081][T20341] usb 1-1: config 0 descriptor?? [ 1565.291456][T20343] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1565.444688][T20343] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1565.454014][T20343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.462085][T20343] usb 3-1: Product: syz [ 1565.466272][T20343] usb 3-1: Manufacturer: syz [ 1565.470868][T20343] usb 3-1: SerialNumber: syz [ 1565.478192][T20343] usb 3-1: config 0 descriptor?? [ 1565.549572][T20345] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 1565.558909][T20345] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 1565.566476][T20345] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 1565.573005][T29220] i2c i2c-1: failure sending STOP [ 1565.574064][T20345] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 1565.587404][T20345] corsair-cpro 0003:1B1C:0C10.0043: unknown main item tag 0x0 [ 1565.597647][T15569] usb 4-1: USB disconnect, device number 64 [ 1565.604579][T20345] corsair-cpro 0003:1B1C:0C10.0043: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1565.619054][T16016] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1565.693326][T20345] corsair-cpro 0003:1B1C:0C10.0043: probe with driver corsair-cpro failed with error -90 [ 1565.694740][T29263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.804321][T20343] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1565.814580][T29263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.835027][T16016] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.846538][T16016] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1565.859073][T20341] usbhid 1-1:0.0: can't add hid device: -71 [ 1565.865831][T20341] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1565.875108][T16016] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1565.887750][T20341] usb 1-1: USB disconnect, device number 32 [ 1565.893809][T16016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.904524][T16016] usb 5-1: Product: syz [ 1565.910221][T16016] usb 5-1: Manufacturer: syz [ 1565.915630][T16016] usb 5-1: SerialNumber: syz [ 1565.922778][T16016] usb 5-1: config 0 descriptor?? [ 1566.009460][T29248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6220'. [ 1566.266016][T15569] usb 6-1: USB disconnect, device number 59 [ 1566.636475][T29348] macvlan2: entered promiscuous mode [ 1566.653039][T29348] macvlan2: entered allmulticast mode [ 1566.929325][ T4977] Dev loop5: unable to read RDB block 7 [ 1566.943250][ T4977] loop5: AHDI p1 [ 1566.955388][ T4977] loop5: partition table partially beyond EOD, truncated [ 1567.099037][T20343] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1567.118752][T20343] usb 3-1: USB disconnect, device number 34 [ 1567.213714][ T4977] Dev loop5: unable to read RDB block 7 [ 1567.224234][ T4977] loop5: AHDI p1 [ 1567.231522][ T4977] loop5: partition table partially beyond EOD, truncated [ 1567.412965][ T25] block nbd2: Possible stuck request ffff888028fc0000: control (read@0,1024B). Runtime 63 seconds [ 1567.427047][ T25] block nbd2: Possible stuck request ffff888028fc01c0: control (read@1024,1024B). Runtime 63 seconds [ 1567.456571][ T25] block nbd2: Possible stuck request ffff888028fc0380: control (read@2048,1024B). Runtime 63 seconds [ 1567.472804][ T25] block nbd2: Possible stuck request ffff888028fc0540: control (read@3072,1024B). Runtime 63 seconds [ 1567.476128][ T30] audit: type=1400 audit(2000000745.843:1927): avc: denied { append } for pid=29386 comm="syz.5.6232" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1567.997103][ T4977] Dev loop5: unable to read RDB block 7 [ 1568.013639][ T4977] loop5: AHDI p1 [ 1568.027481][ T4977] loop5: partition table partially beyond EOD, truncated [ 1568.133266][T29416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1568.147170][T29416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1568.161507][T16016] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1568.262567][T20332] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1568.293410][T15569] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1568.311471][T16016] usb 1-1: Using ep0 maxpacket: 32 [ 1568.323975][T16016] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1568.341437][T16016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.363615][T16016] usb 1-1: config 0 descriptor?? [ 1568.385062][ T9] usb 5-1: USB disconnect, device number 51 [ 1568.423959][T20332] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.427027][T16016] as10x_usb: device has been detected [ 1568.457903][T15569] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1568.467093][T16545] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1568.478859][T20332] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1568.492723][T16016] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1568.497925][T15569] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.523291][T20332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.544496][T15569] usb 6-1: Product: syz [ 1568.554638][T16016] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1568.563406][T20332] usb 4-1: config 0 descriptor?? [ 1568.564069][T15569] usb 6-1: Manufacturer: syz [ 1568.564086][T15569] usb 6-1: SerialNumber: syz [ 1568.574531][T15569] usb 6-1: config 0 descriptor?? [ 1568.574809][T20332] pwc: Askey VC010 type 2 USB webcam detected. [ 1568.626311][T29385] ------------[ cut here ]------------ [ 1568.632102][T29385] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1568.632116][T29385] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#1: syz.0.6231/29385 [ 1568.648370][T29385] Modules linked in: [ 1568.652308][T29385] CPU: 1 UID: 0 PID: 29385 Comm: syz.0.6231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.663282][T29385] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1568.667595][T29385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1568.672842][T16545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.677676][T29385] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 1568.694136][T29385] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d 16 4c 05 45 85 f6 75 13 48 8d 3d 71 34 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 1568.713966][T29385] RSP: 0018:ffffc9000e69fa50 EFLAGS: 00010246 [ 1568.720037][T29385] RAX: 0000000000000003 RBX: ffff888075108b30 RCX: 1ffffffff21af8dc [ 1568.728125][T29385] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90dae520 [ 1568.736278][T29385] RBP: ffffc9000e69fbc0 R08: 0000000000000001 R09: 0000000000000000 [ 1568.744311][T29385] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1568.752295][T29385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1568.755357][T16545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.760279][T29385] FS: 00007f55ff9446c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 1568.772420][ T30] audit: type=1400 audit(2000000747.083:1928): avc: denied { write } for pid=5593 comm="syz-executor" path="pipe:[4564]" dev="pipefs" ino=4564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1568.779004][T29385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1568.808681][T29385] CR2: 0000001b31307ff8 CR3: 0000000047c2d000 CR4: 00000000003526f0 [ 1568.816292][T15569] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1568.816684][T29385] Call Trace: [ 1568.816693][T29385] [ 1568.816702][T29385] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1568.816736][T29385] ? __mutex_lock+0x26d/0x1b10 [ 1568.816757][T29385] ? dmx_section_feed_start_filtering+0x56/0x660 [ 1568.816778][T29385] ? find_held_lock+0x2b/0x80 [ 1568.816798][T29385] ? __pfx___mutex_lock+0x10/0x10 [ 1568.816821][T29385] ? __pfx___mutex_lock+0x10/0x10 [ 1568.816843][T29385] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1568.834978][T20332] pwc: send_video_command error -71 [ 1568.837002][T29385] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1568.879206][T29385] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1568.884685][T20332] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1568.884761][T20332] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1568.892192][T29385] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1568.892220][T29385] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1568.892251][T29385] dvb_demux_do_ioctl+0xe64/0x1200 [ 1568.918243][T29385] dvb_usercopy+0x167/0x340 [ 1568.922984][T29385] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1568.928292][T16545] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1568.928547][T29385] ? __pfx_dvb_usercopy+0x10/0x10 [ 1568.946505][T29385] ? selinux_file_ioctl+0x13b/0x290 [ 1568.951737][T29385] ? selinux_file_ioctl+0xb6/0x290 [ 1568.956870][T29385] dvb_demux_ioctl+0x29/0x40 [ 1568.961515][T29385] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1568.966806][T29385] __x64_sys_ioctl+0x18e/0x210 [ 1568.971610][T29385] do_syscall_64+0x10b/0xf80 [ 1568.976214][T29385] ? clear_bhb_loop+0x40/0x90 [ 1568.980885][T29385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.985533][T16545] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1568.986819][T29385] RIP: 0033:0x7f55fe99cdd9 [ 1569.000245][T29385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.007912][T20332] usb 4-1: USB disconnect, device number 65 [ 1569.019971][T29385] RSP: 002b:00007f55ff944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.019993][T29385] RAX: ffffffffffffffda RBX: 00007f55fec15fa0 RCX: 00007f55fe99cdd9 [ 1569.020006][T29385] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 1569.020018][T29385] RBP: 00007f55fea32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1569.020029][T29385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.020040][T29385] R13: 00007f55fec16038 R14: 00007f55fec15fa0 R15: 00007fff18254878 [ 1569.020059][T29385] [ 1569.020069][T29385] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1569.020084][T29385] CPU: 1 UID: 0 PID: 29385 Comm: syz.0.6231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1569.020110][T29385] Tainted: [L]=SOFTLOCKUP [ 1569.020116][T29385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1569.020128][T29385] Call Trace: [ 1569.020134][T29385] [ 1569.020140][T29385] dump_stack_lvl+0x100/0x190 [ 1569.020163][T29385] vpanic+0x552/0x970 [ 1569.020180][T29385] ? __pfx_vpanic+0x10/0x10 [ 1569.020197][T29385] ? lock_release+0x245/0x310 [ 1569.020223][T29385] panic+0xd1/0xe0 [ 1569.020237][T29385] ? __pfx_panic+0x10/0x10 [ 1569.020256][T29385] check_panic_on_warn.cold+0x19/0x34 [ 1569.020272][T29385] ? __mutex_lock+0x94f/0x1b10 [ 1569.020292][T29385] __warn.cold+0x191/0x328 [ 1569.020310][T29385] __report_bug+0x296/0x3d0 [ 1569.020325][T29385] ? __mutex_lock+0x94f/0x1b10 [ 1569.020344][T29385] ? __pfx___report_bug+0x10/0x10 [ 1569.020362][T29385] ? register_lock_class+0x40/0x560 [ 1569.020383][T29385] report_bug_entry+0xe1/0x290 [ 1569.020399][T29385] ? __mutex_lock+0x956/0x1b10 [ 1569.020416][T29385] handle_bug+0x1cd/0x2a0 [ 1569.020435][T29385] exc_invalid_op+0x17/0x50 [ 1569.020455][T29385] asm_exc_invalid_op+0x1a/0x20 [ 1569.020470][T29385] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 1569.020495][T29385] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d 16 4c 05 45 85 f6 75 13 48 8d 3d 71 34 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 1569.020510][T29385] RSP: 0018:ffffc9000e69fa50 EFLAGS: 00010246 [ 1569.020523][T29385] RAX: 0000000000000003 RBX: ffff888075108b30 RCX: 1ffffffff21af8dc [ 1569.020533][T29385] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90dae520 [ 1569.020543][T29385] RBP: ffffc9000e69fbc0 R08: 0000000000000001 R09: 0000000000000000 [ 1569.020553][T29385] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1569.020563][T29385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1569.020578][T29385] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1569.020604][T29385] ? __mutex_lock+0x26d/0x1b10 [ 1569.020621][T29385] ? dmx_section_feed_start_filtering+0x56/0x660 [ 1569.020639][T29385] ? find_held_lock+0x2b/0x80 [ 1569.020655][T29385] ? __pfx___mutex_lock+0x10/0x10 [ 1569.020673][T29385] ? __pfx___mutex_lock+0x10/0x10 [ 1569.020691][T29385] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1569.020713][T29385] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1569.020736][T29385] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 1569.020760][T29385] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1569.020780][T29385] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1569.020807][T29385] dvb_demux_do_ioctl+0xe64/0x1200 [ 1569.020833][T29385] dvb_usercopy+0x167/0x340 [ 1569.020853][T29385] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1569.020878][T29385] ? __pfx_dvb_usercopy+0x10/0x10 [ 1569.020903][T29385] ? selinux_file_ioctl+0x13b/0x290 [ 1569.020924][T29385] ? selinux_file_ioctl+0xb6/0x290 [ 1569.020945][T29385] dvb_demux_ioctl+0x29/0x40 [ 1569.020966][T29385] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1569.020988][T29385] __x64_sys_ioctl+0x18e/0x210 [ 1569.021005][T29385] do_syscall_64+0x10b/0xf80 [ 1569.021021][T29385] ? clear_bhb_loop+0x40/0x90 [ 1569.021040][T29385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.021055][T29385] RIP: 0033:0x7f55fe99cdd9 [ 1569.021068][T29385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.021083][T29385] RSP: 002b:00007f55ff944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.021097][T29385] RAX: ffffffffffffffda RBX: 00007f55fec15fa0 RCX: 00007f55fe99cdd9 [ 1569.021108][T29385] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 1569.021118][T29385] RBP: 00007f55fea32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1569.021128][T29385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.021138][T29385] R13: 00007f55fec16038 R14: 00007f55fec15fa0 R15: 00007fff18254878 [ 1569.021153][T29385] [ 1569.026417][T29385] Kernel Offset: disabled