last executing test programs: 2m59.972007211s ago: executing program 1 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000008000000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x4) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfWsz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xa8\x8c\x9e\xed\a\n0xffffffffffffffff}) r1 = syz_io_uring_setup(0x490, &(0x7f00000000c0)={0x0, 0x3238, 0x0, 0xffffffff, 0x284}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0x438}, 0x0, 0x12f4c4729764ea1b, 0x1}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r4, &(0x7f00000002c0)=@other={'decodes', ' ', 'io'}, 0xb) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000300)=ANY=[@ANYBLOB="aa00aaaaaaaaffffffffffff86dd9098713fa42a00000008000c4a6c2c860efedd6abc939d344cca950000000000000000000000000000000000000000000000000000000000000000e8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b002f3d890780000fe06e2d4c3d900080a0000ffb00000000904020512000000090000000c00000005000000031312ee60fd29eee2d03b098afc604c77aea31e0c130201000000fc00000005120000000200000009000000d400000006000000"], 0x0) 2m58.573046305s ago: executing program 1 (id=344): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '.', [{0x20, ':!'}], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000000000000000200080ca925f71fcca768a3799bc574e8cbab6290e38d3da0ed6"}, 0x3e) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac0000000000001000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 2m58.340526265s ago: executing program 1 (id=345): pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0xff, 0x6, 0x3, '\x00', 0xf}, {0x7, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0xff, 0x6, 0x3, '\x00', 0xf}, {0x7, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c9ee7e8dc11e7fd32cd78ff55d7c930c33c09b9fc010ed0e2ce71a84a13bf73a41b42c640a545351014803d6b72a8e4b3a183f9d1a3059c0d5bf08bf70f9173f9aeb60201e2ed21b5bf9c8b460b0de1b092235c922c0699f51866b7741d645aa494e08439322cddbd5d6393d286d5f72b3e0ac691d7f796b929c05be4633beac8bbd0d697417cfd3312b2504eccc9334482fb484a3146819b71ef9627c1738b34bcc6629dad8c62f65bf7e19574263e4738ab75f34d28e8e937"]) 2m55.588388721s ago: executing program 1 (id=355): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '.', [{0x20, ':!'}], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000000000000000200080ca925f71fcca768a3799bc574e8cbab6290e38d3da0ed6"}, 0x3e) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac0000000000002000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 2m55.346228207s ago: executing program 1 (id=358): socket$netlink(0x10, 0x3, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000674000/0x3000)=nil) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x2fe, 0x4f424752, 0x3, 0x0, [{0xc3, 0x3}, {0x1, 0x7fffffff}, {0xa, 0x8}, {0x5, 0x2000008}, {0x802}, {0x4, 0x3}, {0x6, 0x40b}, {0x10001, 0x800004}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'batadv_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x2}}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='\x00', &(0x7f00000001c0)='batadv_slave_0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r7) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) sendfile(r9, r9, 0x0, 0xffffffff) 2m54.903635361s ago: executing program 32 (id=358): socket$netlink(0x10, 0x3, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000674000/0x3000)=nil) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x2fe, 0x4f424752, 0x3, 0x0, [{0xc3, 0x3}, {0x1, 0x7fffffff}, {0xa, 0x8}, {0x5, 0x2000008}, {0x802}, {0x4, 0x3}, {0x6, 0x40b}, {0x10001, 0x800004}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'batadv_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x2}}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='\x00', &(0x7f00000001c0)='batadv_slave_0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r7) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) sendfile(r9, r9, 0x0, 0xffffffff) 7.965241282s ago: executing program 4 (id=1012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffe0}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x1ff, 0x4, 0x5}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xd6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x0, 0x5, [0x5f6, 0x3000, 0x2, 0x99b3, 0x4]}, &(0x7f0000000440)=0x12) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000480)={r6, @in6={{0xa, 0x4e22, 0x4, @empty, 0xfffff800}}, 0x789b, 0x2}, 0x90) r7 = socket(0x28, 0x5, 0x0) r8 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000800000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc740000000c0a010100000000000000000a0001060900020073797a31000000000900010073797a31000000004800038044000080080003400000000238000b80340001800a00010071756f7461000000240002800c00014000000000000000d50c00044000000002"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) 7.515554594s ago: executing program 4 (id=1015): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) r2 = gettid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x2, 0xfe, 0x10000, 0x6, 0x7, 0xc, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$packet(0x11, 0x3, 0x300) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod(0x0, 0x8001420, 0xffffffff) r5 = syz_open_dev$sndctrl(0x0, 0x1, 0x103000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4}, 0x3, 0x800}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 5.62071256s ago: executing program 2 (id=1019): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x42474752, 0x0, @stepwise={0x0, 0x400, 0x0, 0x0, 0x0, 0x40000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x80000000, 0x6, 0xfff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xd}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffd}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40048e0}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="5eeced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x103) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f00000000c0)={@any, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r10, 0x7a9, &(0x7f0000000380)={{@any, 0xffffffff}, 0xffffffff, 0x8, 0x1ff, 0x0, 0x7, 0x10001, 0x8, 0x9}) inotify_init1(0x80800) 4.944034309s ago: executing program 2 (id=1020): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x1, 0xfffffe0000000001, 0xfa13, 0xffffffff}, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x2, 0x7, 0x6, 0x0, 0xb, "fcf43a4942a8ba81a17f16f6ba8a8aaf09cf04", 0x1000000, 0xffff}) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x105}], 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e50000000000000071100a0000000000e50000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200), r6, 0x0, 0x0, 0x1}}, 0x20) 4.410243545s ago: executing program 4 (id=1022): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d58078d8c26741e}, 0x44000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x45, 0x4, 0x4e}) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.828382651s ago: executing program 0 (id=1024): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0xa}, &(0x7f0000000400), &(0x7f0000000280)) (async) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0xa}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) (async) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fcntl$getflags(r1, 0x401) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r10, 0x8, 0x463df650, 0x1}, &(0x7f00000001c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r10, 0x8, 0x463df650, 0x1}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000300)={0x3, 0x8001, 0x322, 0x4, r11}, &(0x7f0000000200)=0x10) 3.662298663s ago: executing program 5 (id=1025): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x5697fb8c14c50798, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x208, 0x700001b, 0x148, 0x0, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x1ea, 0x70, 0xd8, 0x0, {0x390, 0x8f00}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x0, 0x2, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) msync(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) listen(r2, 0x1ff) r4 = socket(0x840000000002, 0x3, 0xff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000e00)={{}, r6, 0x2, @unused=[0x7, 0xfffffffffffffa9e, 0x2, 0x5], @name="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"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000680)={0x0, 0xfffffffffffffffb, 0x0, [0x0, 0x0, 0x2, 0x40, 0x3], [0x364a, 0x400, 0x8f24, 0x9, 0x4, 0xebd, 0x4, 0x3, 0xffffffffffff073e, 0x1, 0x7, 0x10000, 0x2, 0x1000, 0x5, 0x1ff, 0x539, 0x0, 0x4, 0x80000001, 0x4, 0x4, 0x7fff, 0x9, 0x0, 0xf, 0x222bf561, 0x9516, 0x9, 0x7, 0x3, 0x6, 0x3, 0x0, 0x3, 0x4, 0xd, 0x5, 0x8001, 0x8b0, 0x6, 0x5, 0x52c6, 0x1, 0x9, 0x100000000, 0xffffffff, 0x1, 0x1, 0xff3, 0x7fff, 0x1, 0x4, 0x7, 0xd4, 0x2, 0x2d86f77c, 0x95, 0x5494, 0x7, 0x1, 0xb5aa, 0x5, 0x4, 0x2, 0x7f, 0xaf, 0x1, 0xa, 0x246d, 0x19c, 0x2, 0x9, 0x1ff, 0x9, 0x1000, 0x4, 0x8, 0x2, 0x6, 0xfc0000000000000, 0x3, 0x6, 0x7fffffff, 0x2a5ba398, 0x9, 0x1, 0xac9, 0x6, 0x7bc, 0x7, 0xaa6, 0x7, 0x5, 0x7fffffffffffffff, 0x9, 0x3, 0x6, 0x5, 0x2, 0x400, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0x4, 0x2ef7, 0x0, 0x5, 0x6, 0x8, 0x9, 0x8, 0x101, 0x3, 0x7, 0x5f880088, 0x0, 0x2]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000ac0)={0x0, 0x9, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000ec0)={0x1, 0x0, {0x10c, @usage=0x2, r7, 0x4, 0xffff, 0x9854, 0x7e, 0x4, 0x0, @struct={0x7d, 0x200}, 0xf, 0x94b6, [0x100000001, 0x7fff, 0x1, 0x4, 0x80, 0x3]}, {0x8000000000000000, @struct={0x0, 0xdd7}, r8, 0x8000000000000001, 0xd000000, 0xfffffffffffffffe, 0x0, 0x4c499879, 0xd4, @struct={0x5, 0xffff}, 0xc5, 0x4, [0x4, 0x0, 0xdd, 0x0, 0x2, 0x3]}, {0x9, @usage=0x2, r9, 0xbac6af9, 0x10, 0x2, 0xffffffffffffff60, 0x3, 0x40, @usage=0x8, 0x400, 0x0, [0x3, 0xf1, 0x2, 0x8001, 0x5, 0xffff]}, {0x8, 0xb8, 0x8}}) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4c23, @local}}, 0x0, 0x0, 0x3f, 0x0, "bd131a850810fcd18c0448734d20d5ac652dafacd33061762ee6ff7de1231ab45358cb73940a8ee9605f4291416850b05b3ffe4b328614a6a02e70351ef496146a4cf56e441481cf96f801d8c68fe3d9"}, 0xd8) close(0x3) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 3.467894648s ago: executing program 4 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x4, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000800)=""/4099, 0x1003}], 0x3}}], 0x1, 0x0, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x20800000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a0102000000000000000001a7ea6ce90491dc393e4466f4ca3f00d79faca6f3bdc6cbfc00000900020073797a3200000000180003801400008004000180080003400000000184000b800900010073797a30000000001400000010000100000000"], 0xd0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x4, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000800)=""/4099, 0x1003}], 0x3}}], 0x1, 0x0, 0x0) (async) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x20800000, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a0102000000000000000001a7ea6ce90491dc393e4466f4ca3f00d79faca6f3bdc6cbfc00000900020073797a3200000000180003801400008004000180080003400000000184000b800900010073797a30000000001400000010000100000000"], 0xd0}}, 0x0) (async) 3.438544728s ago: executing program 5 (id=1028): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) (async) sendfile(r0, r1, 0x0, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 3.267750358s ago: executing program 5 (id=1030): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f42000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x4a, 0x0}, 0x6}], 0x31680, 0x40000020, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x4, r4, 0x0, &(0x7f00000a0000)='LLL', 0x3}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSLCKTRMIOS(r5, 0x80047437, &(0x7f00000010c0)) 3.209569107s ago: executing program 3 (id=1031): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x11, 0x5}, 0x18, 0x1) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000040)=[0x0, 0x9]) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x18000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f00000000c0)={0xc7, 0x5}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x8}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000002c0)={{r1, &(0x7f0000000140)='\x00', 0x94043, &(0x7f0000000180)={@align=0x7, {0x4, 0x9, 0x77, 0x6}}, 0xfffffffc, &(0x7f00000001c0), &(0x7f0000000200)=0x6}, {[0x7, 0x4, 0x8]}, 0x0, 0x48, &(0x7f0000000240)=""/72}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, 0x8}) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000000400)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x6}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0xffffff81, 0x6, 0x2a, r5, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x7}, 0x50) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5, {0x3, 0x2}}, '\x00'}) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x31, 0x1, @thr={&(0x7f00000005c0)="95b3bfeb515716ed3050d3481d605c649d25be673710d0ae5bc5d63316d5f8db540e15e6e6c630e555cfaa831f551362e9112525c58e918b2ab4dfa300aada2b403664ff80e24da1cd41260f8dc3563dbf5cd3599176c2131405e89b1a9730f307bb83c42bdf373fa9a327bd3ea3ac27ec465c14991a9f1e0986a663ca1ecec8b89a3339bd507491ab593bef82514eb4248035c315f8ec174c05955ac7f5618844e17e71126d9e61daace0b53f92d35b82a5cd8d04e37262093bc6a7171efb12349b5cd19517c0f3c046", &(0x7f00000006c0)="84b574dacacdfcd10c8a7a5932223e6da7ddfe2c7f863c91f9e7dce23b02ab69ec40f39807c8652b5a3b8d167cf876249622c68d1c96d58c03d7cc39a3256706e4dab5a33cbf8e473f1fb2138b1fd50a4d46d6bd41b80e54af6f572c2386693f456b40f63fbd6767090fef6de874dfc7ef55673441f34d44d877ff41aaede9ac73b0a85f621e0033da5e065e2bd5715e7d4225cfec117abca1064849687db3762d98e2fe7d315af68fe2aced9ca7056fc3759b181647cb064704cbefae7e84827033e5692dbb1b0c037eef2b3c08c7"}}, &(0x7f0000000800)=0x0) timer_settime(r8, 0x1, &(0x7f0000000840)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000880)) writev(r7, &(0x7f0000000a40)=[{&(0x7f00000008c0)="ae5695c4a03563aec5647b9d2b0cffa22a2f4a", 0x13}, {&(0x7f0000000900)="1df0e3c235363d2049648f0b2952d7dfdb3a7669b85193539f197c512e2128d45bc6caeb00246ae368ea9b1e69af04b6a25cbf9eb8405889b05aad423855e8d6ef478526ae3b04ee475e396dc42bc4eb", 0x50}, {&(0x7f0000000980)="396ead3093a1038ea2e25e53fcef1d3f779223", 0x13}, {&(0x7f00000009c0)="3bfde9b10ca22a29cd4fe9b46b14b619d95bec9b2e5a7a7fb078bf28bbc0c325e14cd07486070acad6ff7b3d12210a528af14c37aeff1e8fbfdaa7c2f5aa79b2cd71b5a30e3eb0ca4b2674360d931741bdc0c702bc462b25", 0x58}], 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000a80)) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000b00)) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000f00)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002180)={&(0x7f0000000f40)="5e73065aec50c2f93fa61a424938d043ca1b3cbfab7ad06a76dd99d821b7838ec6622c882b8d388657689705949d34b7839c51285230e2a3dbf6d589fdf81690baf5352f1a215d0ee58e93cd0f4c741b90ed0d42985a4a98d6835f1e2d2d0aaa936f4076ee033baa019f2b7ee8d4049dc1a3cc1b6bf7185f5fa54017e025b3b80b166ac0e7f17dd040105566726994a47e11a27606dbbe904dc7fcad86739aee0deea58ba2b8fca1694a723c04d757840a6cd59597e97b04ff2822249ed829787df5368c1cb3f474fa2151ac2daf769c0e1b7a2c0c197977804508941a3ae28c3b9435d5aac145a1c495fb", &(0x7f0000001040)=""/75, &(0x7f00000010c0)="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", &(0x7f00000020c0)="6731a777c1c37b86d37c79d6fad07c4bb4a03fba5f20d80c91b612a68214dab3e0aa312b292521798e9486e2cc11fda35490c8ebd9a44e38a5e8e8c533e01ed1287b6f26fa19b80ed65d472c8ccbb9698d07a56930932b065c72d9a1d1e17ac1e5ed7c5e14b4e2426c397e4b593849d6825ef0d86961e286dc1df4fb55e3b8b9d309f5e10f106dffce98ce826d15a7a1adff72311d98ce8d841206f70dc77a73c9596ceeb19dd950743bdc27421cbc", 0x3, r6, 0x4}, 0x38) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r9, 0xc028ae92, &(0x7f00000021c0)={0x8}) clock_gettime(0x0, &(0x7f0000002200)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000002240)={{r10, r11+10000000}}, &(0x7f0000002280)) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f00000032c0)={&(0x7f00000022c0)=[0x3e, 0x4, 0xe23, 0xb344, 0x7, 0xfffffff7, 0x2, 0x8001, 0x7ff, 0xff6, 0xd3, 0x0, 0x4, 0x0, 0x173, 0x6, 0x2, 0x9, 0x7, 0x7ff, 0x8, 0x5a, 0xe0000, 0x1ff, 0x5, 0x3, 0x2, 0x0, 0x800, 0x3, 0x1, 0xe075, 0xf9, 0x1, 0xe, 0x4, 0x7, 0x6, 0xed, 0xb, 0x3, 0x3, 0x6, 0x8001, 0x400, 0x8, 0x9, 0x8, 0x66ed, 0x4, 0xffffff3a, 0xd30, 0x9, 0x5, 0x6, 0x7, 0x652, 0x40162bb, 0x1, 0x1, 0x101, 0x6, 0x6, 0x39f8, 0x7, 0x8001, 0x6, 0x3, 0x0, 0xa, 0x7, 0xaf1a464, 0x6, 0xd0, 0x6, 0x1ff, 0x1, 0x7ff, 0xfffffff4, 0x80000001, 0x3, 0x4, 0x4, 0x5b383b9d, 0x7, 0x5, 0x3, 0x970, 0x2, 0xfffffff8, 0x7a, 0x7, 0x6, 0x80, 0x61897c67, 0x4, 0x7, 0xe66, 0x9, 0xe96, 0x0, 0x10001, 0x1, 0x3, 0xb6e0, 0x1, 0x592, 0xb, 0x968, 0x6, 0xb7, 0x100, 0x1, 0xb, 0x0, 0x6, 0x3ff, 0x3, 0x5, 0x2, 0xd31, 0xd, 0x7, 0xd0a5, 0x8a3, 0x62, 0xfff, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x3ff, 0xff, 0x4, 0x7ff, 0x3, 0x4, 0x10, 0x6, 0x7, 0x1, 0x5b2e, 0x0, 0x3, 0x4, 0x24ed99a3, 0xfffeffff, 0xffffffff, 0x5, 0x2, 0x7, 0xfffffffd, 0xa, 0xa19e, 0x3e, 0x2, 0x40, 0x7ff, 0xfff, 0x6, 0x5, 0x7, 0x4, 0x800, 0xffffffff, 0x96, 0x9, 0x6, 0x0, 0xd, 0x400, 0x7ff, 0x3, 0x7d38, 0x7f02, 0x7, 0x0, 0x0, 0x1, 0x10000, 0x3bfb, 0xe0, 0x0, 0x71, 0x4, 0xf, 0x5, 0x1ff, 0x3, 0x3, 0x3, 0x1, 0x5, 0x3e, 0x5, 0xf3, 0x8, 0x9, 0x400, 0x7ff, 0x9, 0x7, 0x0, 0xff, 0x0, 0xfffffe1e, 0x8, 0x7fff, 0xfffffff8, 0x40, 0x2, 0x7, 0x8, 0xb251, 0x1, 0x40, 0x0, 0x10000, 0x5, 0x1, 0x0, 0x800080, 0xe, 0x5, 0xffff, 0x1, 0x401, 0x200, 0x0, 0x80000001, 0x8, 0x7, 0x9, 0x7, 0x5, 0x0, 0x6, 0x4, 0xe, 0x4, 0x10, 0xfffffff8, 0x2e8f8432, 0x5, 0x1, 0xffffffff, 0x401, 0x7ff, 0x8, 0x9, 0x55bd, 0x8001, 0x7, 0x7, 0xa2e, 0x5, 0x2cce9d2b, 0x8001, 0x6, 0x9, 0x4, 0x7, 0x200, 0x0, 0x737f, 0x800, 0x1983, 0x4, 0x176, 0x5, 0x4b, 0x7, 0x401, 0x5, 0x6, 0x5, 0x6, 0x7, 0x2, 0x5, 0x0, 0x7, 0x4, 0xeb1, 0x10, 0x6, 0x7f, 0x414c, 0x7ff, 0x2, 0x9, 0x9, 0xf, 0x3, 0x7fff, 0x3, 0x401, 0x3, 0xc4, 0x5, 0xe, 0x2, 0x6, 0x10, 0x7, 0xfdc, 0x4, 0xf, 0x7ff, 0x7, 0x7, 0x3, 0x4, 0x7f, 0x5, 0x8, 0x40, 0xa5, 0x48000, 0x5, 0xa, 0xffff, 0x81, 0x3, 0x8, 0xc777, 0xe, 0x3, 0x2, 0x10001, 0x1, 0x4, 0x7, 0x7ff, 0x1, 0x2, 0x1, 0x9, 0x3, 0x1000, 0x1, 0x6, 0xfff, 0x8, 0x9, 0x7, 0xd2, 0x6, 0x2, 0x8, 0x200, 0x2, 0x5, 0x2, 0x6, 0x4, 0x6, 0x199a7649, 0xd17a, 0xb, 0x10000, 0xfff, 0x5, 0x10000, 0x1ff, 0x6356, 0x94c, 0x1, 0x8, 0x5, 0x6, 0x7, 0x1, 0x80, 0x3, 0xfffff801, 0x9, 0xa, 0x1, 0x2000, 0x3, 0xffff7fd7, 0x8000, 0x470, 0x80000001, 0x400, 0x1, 0x7, 0x9d, 0x10, 0x2, 0x57c, 0x80000000, 0x4, 0x8, 0x4, 0x6, 0xb8, 0xbd, 0x7, 0x10001, 0x3, 0x6, 0x6, 0x9, 0x3, 0x1, 0x3, 0x9, 0x1, 0x10001, 0x3, 0xbc90, 0x4, 0x3, 0x401, 0x6, 0x7, 0x9, 0x4, 0x10001, 0x0, 0x101, 0x741, 0xd490, 0xc, 0x8, 0x8, 0x1, 0x1ff, 0x1ff, 0x0, 0x99, 0x1, 0xfffffffa, 0x0, 0x8000, 0xa, 0x3b4, 0xff, 0x3, 0x9, 0x800, 0x682b5eb1, 0x8, 0x98c, 0x7, 0x2, 0x7ff, 0x7450, 0xff, 0x7fff, 0x80000000, 0xfffffff9, 0x6, 0xfffffffe, 0x100, 0x8, 0xb1, 0x8000, 0x5f, 0x7a, 0x9, 0x4, 0x6, 0x4, 0x11d, 0x184, 0xb, 0x46f2, 0x4, 0x5, 0x1ff, 0x80000001, 0x4, 0x4, 0xc623, 0x5, 0x2, 0x7, 0x13, 0x6, 0x1, 0x7, 0x5a000, 0x4, 0x3, 0x100, 0x2, 0x10b5ed72, 0x8, 0x7, 0x0, 0x80000000, 0x2, 0x0, 0x9, 0x1, 0x5, 0x7f, 0xfffffffc, 0xffff, 0x0, 0x7f, 0x8, 0x5, 0x1, 0x401, 0x4, 0x1, 0xfffffff0, 0x7, 0xaaf, 0xf19, 0x8, 0xff, 0x7fffffff, 0x0, 0x2, 0x4, 0xe, 0x7e8, 0x8, 0x2, 0x6, 0x8, 0x8, 0xb, 0x6, 0x81, 0x5, 0x7, 0x3, 0x2, 0x0, 0xdfb, 0x1, 0x3, 0x52, 0x7ff, 0x7, 0xf, 0x1ff, 0xfffffffa, 0x401, 0x1, 0xffff3feb, 0x4, 0x1, 0x101, 0x7, 0xe74, 0x8, 0x6, 0x1, 0xc, 0x200, 0x18c0, 0xb9, 0x0, 0xea, 0x1, 0x6b70a9e0, 0x5, 0x0, 0xe0, 0x6, 0x9, 0x6, 0xffff, 0xfffffffb, 0x4, 0x1000, 0x1, 0x3, 0x100, 0x2, 0x0, 0x8, 0x6, 0x7, 0xffffffff, 0xb, 0x1, 0x80000000, 0x2, 0x0, 0x10, 0x1, 0x5, 0x7fffffff, 0x5, 0x9, 0x1, 0x9, 0x9, 0x5, 0x10, 0xe0, 0x2a, 0x3, 0x2, 0x40, 0x2, 0x5, 0x5, 0x6, 0x100000, 0x6, 0x82ec, 0xf1b, 0x1, 0x1f, 0x6, 0x4, 0x80, 0x6, 0x8, 0x6, 0x10, 0x6, 0x6, 0x6, 0x6, 0x5547, 0x10000, 0xd, 0xffffffff, 0x0, 0x1, 0x1f, 0x3a6c0000, 0x28000, 0x10001, 0x9, 0x4, 0xd652, 0x5, 0x8001, 0xfffffff7, 0x9, 0x0, 0x80000000, 0x1987, 0x903, 0x3, 0x1, 0x9b, 0x5, 0x23a, 0x8c0, 0x453, 0x3, 0x6, 0x3, 0x8, 0x1, 0x4, 0xf8f, 0x339513ed, 0x9, 0xfff, 0xd71, 0x40, 0x9, 0x1, 0xd, 0x3, 0x10, 0xff800000, 0x5, 0x2, 0xffffffff, 0xe555, 0x1, 0x7f, 0xd, 0x7ff, 0x0, 0x4, 0x5, 0x4, 0x4, 0x2, 0x7, 0x3, 0x5, 0x5f69, 0x4, 0x80000001, 0x9, 0x9, 0xffff, 0x6, 0x80000001, 0x8, 0x101, 0x4, 0x1000, 0x4d, 0x800, 0xa, 0x6, 0x7, 0x1000, 0x800, 0x99, 0x2, 0x8, 0x1000, 0xc32, 0x4, 0x7, 0x6, 0xe, 0x8001, 0x1000, 0xffff769c, 0x0, 0x5b, 0x36a7, 0xfffffffa, 0x5043af3c, 0x1, 0xffffff21, 0x9, 0xffffffff, 0x9, 0x2, 0x401, 0x3, 0xb37f, 0x0, 0x856, 0x2, 0x3, 0x0, 0x6, 0x9, 0x0, 0x3, 0x5, 0x7, 0x9, 0x3, 0xffff, 0x200, 0x7, 0x7, 0xc1, 0x1, 0xfffffff9, 0x1ff, 0x4, 0xbf, 0xffff94f2, 0x291, 0x1, 0x1, 0x7, 0xbe, 0x1, 0x6, 0x7fffffff, 0x9, 0x0, 0x7, 0x401, 0x6, 0xb, 0x8, 0x6, 0x8, 0x0, 0x9, 0x80, 0x10000, 0xef7, 0x83, 0x40, 0xaf7, 0x7fffffff, 0x3ff, 0x4d3, 0x2, 0x10000, 0x8, 0x5, 0x10000, 0x9, 0x9fd5, 0x200, 0x101, 0xffffff57, 0x10, 0x0, 0x2, 0x8, 0x8, 0xd17, 0x1000, 0xffffffc0, 0x4, 0x8, 0x40, 0x2, 0xc1, 0x7ff, 0x2, 0x9, 0x4, 0x432, 0x0, 0x8, 0x9, 0x9, 0x80, 0x7, 0x3, 0x3, 0x6, 0x40, 0x10d, 0x2, 0xb, 0x9, 0x9, 0x0, 0x81, 0xffff, 0x8, 0x9, 0x7, 0x6, 0x7fff, 0x9, 0x7fffffff, 0x9, 0x8, 0x9, 0x100, 0xfffffffd, 0x7, 0x767, 0x7d, 0x3, 0x7, 0x80000000, 0xc, 0xe, 0x80000000, 0x8, 0xfffffc00, 0x1ff, 0x0, 0x3, 0x1, 0x574, 0x0, 0x6, 0x7, 0xff, 0x1, 0x6, 0x2, 0x0, 0x888, 0x0, 0x6, 0xbec, 0x2c1, 0x5c, 0x86a, 0xb9a, 0x3cf, 0x1, 0x10, 0x3, 0x3, 0x8, 0x7, 0x3, 0x9, 0x8, 0xe, 0x0, 0xc9f, 0xb, 0x5, 0x2, 0x8001, 0x1, 0x6, 0x5, 0x3, 0x5, 0x1ff, 0x9aa, 0x4c430cfd, 0x1000, 0x1, 0x2, 0x1, 0x8, 0x3, 0x1, 0x0, 0xfffffffb, 0x4, 0x7, 0x4, 0x8, 0xffff, 0x3, 0x20000, 0x9, 0xc3b, 0xfffff9c0, 0x0, 0x7, 0xffffae63, 0x4, 0x7fff, 0x7, 0x5, 0x8, 0x6, 0xffff, 0x0, 0xfffffffd, 0x5, 0xf14, 0x10, 0x8, 0x7a, 0xc0, 0x90000000, 0x3, 0x6, 0x1, 0x4, 0x5, 0xfffffff6, 0x4, 0x5, 0xfffffe01, 0x3, 0x9, 0x52ed, 0x0, 0xc4c, 0x9, 0x789e, 0x4, 0x4, 0x2, 0x1, 0x3, 0x441fcccb, 0x28f69430, 0x8, 0x8001, 0xffff1593, 0x0, 0x4, 0x6, 0x8, 0x7f, 0x5, 0x7, 0x5, 0x1000, 0x4, 0xa, 0x2c8, 0x56, 0x56, 0x3, 0x1000, 0x80, 0x0, 0x219a, 0x9, 0x3, 0x7cb, 0x40, 0x9, 0x0, 0x1909, 0x9, 0x8, 0x6d, 0x400, 0x10001, 0x401, 0x3, 0x2, 0xa000000, 0x6, 0x62f0394e, 0x86, 0x2, 0x7, 0x4, 0x3, 0x10001, 0x1, 0x7, 0x1fc, 0x7, 0xfffffffa, 0x0, 0xfffffffb, 0x1ff, 0x3, 0x69e, 0x0, 0x3, 0xff, 0x800, 0x8, 0x9c, 0x8001], 0x2, 0x400, 0x2}) openat$uinput(0xffffffffffffff9c, &(0x7f0000003300), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000003340)={0x0, 0x3}, &(0x7f0000003380)=0x8) ioctl$TUNSETLINK(r5, 0x400454cd, 0x323) 3.09021981s ago: executing program 3 (id=1032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104fcffffff8200000000000000", @ANYRES32=0x0, @ANYBLOB="031500000000000028001280090001007665746800000000180018801400010000000000", @ANYRES32=0x0, @ANYBLOB="64800300006002"], 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x63) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x8000000000000000, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0xbe3, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x800, 0x0) 2.948111369s ago: executing program 2 (id=1033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r3, 0x4000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0x9}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20004090) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) write$snddsp(r3, &(0x7f0000000200)="09455772239641b563938176e29b89e8e1f6bb822fda8854", 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x0, 0x4dbc}, {0x6, 0x94f1}, 0xac4}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket(0x15, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, 0x0, 0x0) 2.484088049s ago: executing program 2 (id=1034): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x10bc84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) 2.473401269s ago: executing program 4 (id=1035): syz_usb_connect(0x3, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103"], 0x0) 2.047305564s ago: executing program 2 (id=1036): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000280)=[{0xe4, 0x219, 0x0, 0x0}, {0x101, 0x6201, 0x0, 0x0}, {0x0, 0x200, 0x2d, &(0x7f0000002280)="92884156ab718064462b061023e37501dcecd684672ac5617a8e56e84f255a14214f3a68edf3e0745cb66e13ff"}], 0x3}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) (async) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000}) close_range(r2, 0xffffffffffffffff, 0x0) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x89e0, 0x0) (async) lseek(r1, 0x8020100001, 0x0) recvmmsg(r8, &(0x7f0000003d00)=[{{&(0x7f0000002400)=@xdp, 0x80, &(0x7f0000002600)=[{&(0x7f00000022c0)=""/46, 0x2e}, {&(0x7f0000002480)=""/75, 0x4b}, {&(0x7f0000002500)=""/231, 0xe7}], 0x3, &(0x7f0000002640)=""/233, 0xe9}, 0x582d}, {{&(0x7f0000002740)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c00)=[{&(0x7f00000027c0)=""/213, 0xd5}, {&(0x7f00000028c0)=""/163, 0xa3}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/62, 0x3e}, {&(0x7f00000039c0)=""/36, 0x24}, {&(0x7f0000003a00)=""/80, 0x50}, {&(0x7f0000003a80)=""/252, 0xfc}, {&(0x7f0000003b80)=""/51, 0x33}, {&(0x7f0000003bc0)=""/6, 0x6}], 0x9, &(0x7f0000003cc0)=""/34, 0x22}, 0xfff}], 0x2, 0x140, &(0x7f0000003d80)={0x0, 0x989680}) (async) syz_emit_ethernet(0x5a, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff}) 1.685821647s ago: executing program 0 (id=1037): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000001200001c001280090001005fc10000000000000c00028008001a000a01"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x9, 0x6282) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r6, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7ff, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r8}, 0x38) r9 = fsmount(r7, 0x0, 0x0) fchdir(r9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x14) r12 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r12) sendmsg$BATADV_CMD_GET_GATEWAYS(r13, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r14, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) write(r12, &(0x7f0000004200)='t', 0x1) 1.655237507s ago: executing program 5 (id=1038): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000040)={{}, 0x5}) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x38}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x8}, 0x8) (async, rerun: 64) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000580)={{&(0x7f0000000500)={'Accelerator\x00', {&(0x7f0000000240)=@adf_hex={@format={'Cy', '0', 'RingAsymTx\x00'}, {0xfff}}}, {&(0x7f0000000480)={'KERNEL\x00', {&(0x7f00000003c0)=@adf_hex={@bank={'Bank', '5', 'InterruptCoalescingNumResponses\x00'}, {0x8000000000000001}, {&(0x7f0000000300)=@adf_hex={@normal='NumberCyInstances\x00', {0xfad}}}}}}}}}, 0x2}) (rerun: 64) r2 = dup3(r0, r0, 0x0) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000600), r0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000640)={@empty, 0x0}, &(0x7f0000000680)=0x14) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000006c0)={@empty, @dev, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x0, 0x200, {{0xf, 0x4, 0x0, 0x2f, 0x3c, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0x24, 0x9b, 0x0, 0x3, [0x5, 0x7, 0x9, 0x40, 0x4, 0x5, 0xb5, 0xa]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x3, 0xca3, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x1, 0x8, 0x40}}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000008c0)={@multicast2, @remote, 0x0}, &(0x7f0000000900)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x200, 0x2c, {{0x3a, 0x4, 0x1, 0x9, 0xe8, 0x67, 0x0, 0x5, 0x29, 0x0, @private=0xa010102, @local, {[@noop, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x0, [0x2]}, @cipso={0x86, 0x57, 0x2, [{0x2, 0x9, "f1afaa3a9dad3a"}, {0x6, 0x8, "efcf7457e8c0"}, {0x1, 0x7, "87311e389a"}, {0x1, 0x9, "2f896479551029"}, {0x1, 0x4, "fdd8"}, {0x5, 0x3, '%'}, {0x1, 0x7, "517e97dbf3"}, {0x6, 0x4, "db88"}, {0x6, 0xd, "b29fcbb65c52fcfa770529"}, {0x6, 0x11, "02d4eeee0f108271e663dd9213a05b"}]}, @lsrr={0x83, 0x13, 0x20, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x22}]}, @lsrr={0x83, 0xf, 0x58, [@private=0x7, @broadcast, @multicast1]}, @noop, @cipso={0x86, 0x39, 0x1, [{0x0, 0x2}, {0x7, 0x11, "4b41996128beb952ad518f0c97e4ab"}, {0x6, 0xf, "28b92237872b06830e1a73cc18"}, {0x2, 0x11, "7df3593b376a52c3b702e66144ef60"}]}, @timestamp={0x44, 0x8, 0xc3, 0x0, 0x7, [0x8a9]}, @generic={0x83, 0xd, "87bfac4e2c9e88a47532d5"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x100, 0x6, {{0x11, 0x4, 0x1, 0x3d, 0x44, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @remote, {[@generic={0x44, 0x7, "8f33d2fb8f"}, @lsrr={0x83, 0xf, 0x22, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @end, @ssrr={0x89, 0xf, 0xf0, [@multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @empty]}, @rr={0x7, 0x7, 0x32, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xd4, 0x1000, 0x3d, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf038, 0x7, 0x2, 0x1}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000cc0)={'ip_vti0\x00', 0x0, 0x8000, 0x90, 0x8, 0xfb2b, {{0xb, 0x4, 0x2, 0x3, 0x2c, 0x66, 0x0, 0xfc, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xd6, [@local]}, @rr={0x7, 0xf, 0x5f, [@multicast1, @private=0xa010101, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ec0)={'erspan0\x00', &(0x7f0000000dc0)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x4, 0x5, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x68, 0x0, 0x5, 0x1087214467efae22, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, {[@ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x38, 0x0, [{0x1, 0x6, "f0523d34"}, {0x0, 0xe, "ce99849c32e45f521cb530e9"}, {0x2, 0xd, "2af3915957fbf328d5dbf0"}, {0x5, 0x4, 'cQ'}, {0x1, 0xd, "6d14eadcd213594ebf7e15"}]}, @ssrr={0x89, 0x1f, 0x74, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1, @empty, @remote, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x4c, 0x5c, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffa}, {@loopback, 0x2}, {@remote, 0xa2c000}, {@remote, 0x5}, {@rand_addr=0xffffff1e, 0x10000}, {@multicast2, 0xf0}, {@rand_addr=0x64010100, 0x7}]}, @lsrr={0x83, 0x1f, 0x72, [@broadcast, @local, @broadcast, @local, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0xd}]}, @end]}}}}}) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f80)={r0, 0x58, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000017c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000000fc0)={0x78c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r6}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xae}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r15}, {0x234, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x6, 0x3f, 0x6}, {0x0, 0x8, 0x4, 0x6}, {0x6, 0x29, 0x7, 0x1}, {0x3666, 0x5, 0xb4, 0x4a09}, {0x0, 0xa, 0x5, 0xb133}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x69}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd89d}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x8, 0x9, 0x5}, {0x6, 0x0, 0x7, 0x7fffffff}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async) ppoll(&(0x7f0000001800)=[{r2, 0x4020}], 0x1, &(0x7f0000001840)={0x0, 0x3938700}, &(0x7f0000001880)={[0xfffffffffffffffd]}, 0x8) r18 = openat(r2, &(0x7f00000018c0)='./file0\x00', 0x420100, 0x96) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001900)={0x0, 0x4}, 0x4) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r18, 0xc0385868, &(0x7f0000001a40)={r2, &(0x7f0000001940)='@\'J*..\\\\\'j\x00', 0x488000, &(0x7f0000001980)={@align=0x3, {0xfff, 0x1, 0xe, 0x23d73e0b}}, 0x2, &(0x7f00000019c0), &(0x7f0000001a00)=0x1}) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0) ioctl$sock_SIOCGIFINDEX_80211(r18, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r19, &(0x7f0000001c00)={&(0x7f0000001a80), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x4c, r20, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r21}, @val={0xc, 0x99, {0x5, 0x51}}}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5}]}, 0x4c}}, 0x40080) 1.404545085s ago: executing program 3 (id=1039): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100200012800800010073697490a6040004008000000008000300"/48], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbf) 1.279921916s ago: executing program 5 (id=1040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x7, 0x0, &(0x7f00000019c0)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030300000000000000002a0000000e0002006e657464657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 1.053183608s ago: executing program 5 (id=1041): socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x50, 0xfb, 0x0, 0x80000001}, {0x6, 0x60, 0x6, 0x804804}]}) syz_emit_ethernet(0xfdef, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x18, &(0x7f0000000400)=[{0x11, '\x00', @data=0x1, 0x3}]}) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWALK(r2, &(0x7f0000000740)={0x57, 0x6f, 0x1, {0x6, [{0x13, 0x2, 0x1}, {0x4c, 0x3, 0x8}, {0x1, 0x2, 0x5}, {0x40, 0x1, 0x5}, {0xa0, 0x4, 0x1}, {0x4, 0x0, 0x3}]}}, 0x57) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6582}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffd) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) 984.502871ms ago: executing program 3 (id=1042): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) (async, rerun: 32) syz_open_dev$video(&(0x7f0000000040), 0x801, 0x410c00) (async, rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) (async, rerun: 64) r2 = fanotify_init(0x200, 0x0) (rerun: 64) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) (async) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (rerun: 64) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f00000000c0)={{0xfffffffffffffffe, 0x3}, {0x0, 0x7}, 0x6, 0x6}) (async) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000640)=@get={0x1, 0x0, 0x401}) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000d3130be2f1ec82bab135da6bfbb1420813d01dd7a96c3f6d6fca99f39fa6148f103dcbb6e66fbe5baf1cbe5c51a2d5b0fb71ad6766860172a9333d10aa42a8f9242e3978a8af99c94a441bb4a08e1d58d79b32cc63eabb8f268b24a873bf95436c23abc06e58fa807edf7fb95546651cfbc38d574e42de2108b65a9aa9bc06de12386c5bbd59a9da8205e252808f0a2ed0a6e1e4d6c50a8f80f603c53f8dba6139ad437282c2f77e440e88aeabfc808bc312d30000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="08001f0007000000"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2000c010) 935.747865ms ago: executing program 2 (id=1043): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000020b404000000000000000509022400010000200009040000050300010009210600060122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$midi(0x4, 0x82, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x2, 0xb0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0xa, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x1, 0x1, [{0x90, 0x6}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}], [{{0x9, 0x5, 0xd, 0x0, 0x68, 0xa, 0x1, 0x2, {0x10, 0x25, 0x1, 0xc, "83ec8837d31defb9aaa6fccc"}}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x6, 0x2, 0x2, {0x4}}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xfe, 0x9, 0xfe, {0x5, 0x25, 0x1, 0x1, 'a'}}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0xc, 0x0, 0x7, {0xa, 0x25, 0x1, 0x6, "e3203022b9c1"}}}]}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x6f, 0x5c, 0x9, 0x8, 0x5}, 0x1ee, &(0x7f0000000200)={0x5, 0xf, 0x1ee, 0x5, [@generic={0xf8, 0x10, 0x2, "0a0810415fe6eee39ea0072d89fe43ce74ea1cb866c95b536a3c1e3067e75fdd2dc91651a388025bf4639d4600397751a8927d9eb37ee6ca980f3aae8e606364a7082a0d06129f553474c4da5e8905c7fe1cf29583acc56d97a3d556a28b0d260c47763f8f21bdab2c807096a18cc854f3410d3bf346d85c11b9b74f0bfc2f7c7156c466acbe79341a849e855df3eb19604605e69146c58e1091595ee0b40e37884157e9637e6a7327c05369aedff289689e213d0ee0b630c68de81e600975950118dc1e299d010b657a7797a47ec0d55959c387ff8048bf71600d34f84aa56a038397bc1fa14d2edc62e78d81757a85b0c3a1b747"}, @generic={0xcf, 0x10, 0x4, "edd8b360eaf0f16dd43b9cb15d7ae7f49af52c31b4f7f4edb1e81fe31a61264c9c419aa1c47435c6405934d0904a49f2f6c537cef4fa73dff9912731681f6b7ef8cb1607d703f3aa32f7a5e268928f72ad1ee614e24f992f370a4b42fafb2e0e5024364a1f11895e782b1cb3e1717035b59139381f4466b38be3dd1cf7109a9d28561e3978b5ffa77394e69eafd562a08d6ca71d568cf05f8e092077c0c837f6f4586ec755fef1f5499ef55e8409f7619fad7caecf59fa2d870a08f7c6a80cb1797072a30f6717c1fb69ed03"}, @ss_container_id={0x14, 0x10, 0x4, 0x18, "696a6c811b96290e5b96c82d86240a01"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x6, 0xeb80, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0xed, &(0x7f0000000400)=@string={0xed, 0x3, "058a4977ea0cad9f6004d72fe44cee6817795b1b1ea5bb5102f32283724a5e8dc74dc73a9149065efe9307cb564c9378b96a360cad47fee9c02aa784e1c6d985429388de12b89fb71265e21487101d41a0db1034e0f5c5aa28ee2423af7f1e1ba8ec4a28842d521f992167d77752b9cb9558d112d9589492bf034f71e8eeb5e7d840ba3d11d3157afeb0b716697e8d3d2df5d95d64c204f213b048639203fee43d943c9a26c1fcbc568ab9eb829ebab6369934daab826ec6b9c4250fe81cea333689675c499879cd63b4b04a5b5d99577aa7ba33889ef8847897bde52128e4a09ba035af6c4f82e18ecd29"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0a}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x20, 0x24, 0x5f, {0x5f, 0xa, "5fc7937368d8f48143a179e1f658814eface91f0f2c09d6691aa5cb7aa82f3921dff275afb33dcee7061812ac3eaf89ac1541b52c38d22c2839984cb5fcc6bf0026d1de7f6a9ff905218fd55d4815b4cbaf2fd56f8287aeaf1dcdde618"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3019}}}, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0xa, 0x35, "60b3fec251e280dd18406026bb099f2b81d6b4aac09c753320958768d011e0ea06f6ffe293ca0d4a2738759c434dfacad769180aa5"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x81, 0x3, '\x00\x00\x00'}, &(0x7f0000000840)={0x20, 0x82, 0x2, "6ab0"}, &(0x7f0000000880)={0x20, 0x83, 0x1, "f5"}, &(0x7f00000008c0)={0x20, 0x84, 0x1, "16"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "24ad44"}}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="6da81f453e996311ac19be790d8328f4cb7995dfb8c1602bc3c5d315f20f9e1daa014f7f304dd5b2071bd12a2a1bcd28877147de7647b15c7d580ef8694dec480fe0755d83f572169facf97d0e716a7b90da6436f552c539226f952850d9b7baa952"], 0x0}, 0x0) 716.195652ms ago: executing program 4 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x16c, 0x4, 0x0, 0x1, [{0x168, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x154, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x134, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1c0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000003c0)={0x1, 0x6a, 0x0, &(0x7f0000000400)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc}) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b40011", 0x29}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x6, 0xd00}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000003b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x54, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0xc, "bd19e459749a73ca5b"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x158, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "f772fd7b397b4d7e1e14790a236282a9776a21e9fe64bbd92c1e244d3f40843f99dbed425072cc6582bfb215d9ed0d0d67a8d39e9ac3535f0875e8161201146e5c1450fec952fe3cdc8b33b8e289720b1950c593"}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "1e42ccf58f311837fb3fbab3052baeb907b65958ddd2d5e33e89200b66a898e0f1797fa3945fe54cc114"}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "50ed890d5502148443e176e8eee9925a59d1558f60e403615d41a6ce30b72abd6558fe5188aa39f5b8871dc553d26b357e195546760336f1a7448936c0c944d5cc67cf64bc8e26c289e360016771af19b91565182cf830b75078b2d3dbb2da56fea474db3356d518727bb94dd7d853f68e6d2bccbbec657f4cb175f007ca2d291cd3882179dd127bffcbe214c7bc01099e58fc1684f334075b1537d41a855cd4fc15"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2d8}, 0x1, 0x0, 0x0, 0x8880}, 0x800) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x2, 0x0) 702.057571ms ago: executing program 0 (id=1045): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0xf, 0x84) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)) sendmmsg$inet6(r2, &(0x7f00000015c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @mcast2, 0xfffffff8}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@rthdr={{0x18, 0x29, 0x39, {0x67, 0x0, 0x0, 0x4}}}], 0x18}}], 0x2, 0x84) (async) sendmmsg$inet6(r2, &(0x7f00000015c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @mcast2, 0xfffffff8}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@rthdr={{0x18, 0x29, 0x39, {0x67, 0x0, 0x0, 0x4}}}], 0x18}}], 0x2, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r4 = signalfd(r0, &(0x7f0000000040)={[0x43e]}, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x12c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x8, 0x17, [0x5]}, @CTA_TUPLE_REPLY={0xd8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x80000001, 0xa]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x44890}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 596.020076ms ago: executing program 3 (id=1046): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '.', [{0x20, ':!'}], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000000000000000200080ca925f71fcca768a3799bc574e8cbab6290e38d3da0ed6"}, 0x3e) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac0000000000000f00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 467.722934ms ago: executing program 0 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000008000000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x4) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfWsz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xa8\x8c\x9e\xed\a\n0xffffffffffffffff}) setsockopt(r0, 0x8, 0xc, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000104355470000000000000109022400010000a00009040000010300000009210500080122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x0, 0x0, 0xb}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x44010}, 0x44000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 247.991244ms ago: executing program 0 (id=1049): prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x38, r1, 0x21, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20004800) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000005, 0x4010, 0xffffffffffffffff, 0x4000) 0s ago: executing program 0 (id=1050): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x9, 0x24, 0x6, 0x0, 0x0, "30e5cb7b"}, {0x5, 0x24, 0x0, 0x349}, {0xd, 0x24, 0xf, 0x1, 0x9e0, 0x0, 0x9, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0xfc, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x5, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x15, 0x9}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x0, 0x8, 0x6, 0x10, 0x96}, 0x116, &(0x7f0000000180)={0x5, 0xf, 0x116, 0x4, [@generic={0xef, 0x10, 0x4, "4bb147c499fb8a66a88c0c307c0a6c2e3d7772370b8e771cc066230e8ddd5beb14488ff80f4816d956cce7700d7d55facb1d872db6f397db6b9143580dce3a2c3f041a18fd3d1dd8c3e9b725606d81334ec22a64887197e6f97b6291396d9d32794cdbdb2860a33dc4e91b1a2f9fe42c3bd860a71acd6d5651f16dd255e0f43a0364a203c32e77d6be6c55904ec36ee914a7e1aff482a05cced8e3bc76a93d49c7388850a5bef42d9b6ab2357b7519ec7c0950f7741753ad859d19c3eea3c75f3e47bf11969d84115e4c0921af0ffff8cc9d0f3f02c275dd52dffac339a7943c779da7d004a4c52d1979f32c"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x5, 0x59}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x9, 0x7ff}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "7ad57f279c8b53cd89659fe4e7a7f7db"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 326 audit(1773175866.272:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.5.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b59c799 code=0x7ffc0000 [ 233.429054][ T29] audit: type=1326 audit(1773175866.312:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.5.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f587b59c799 code=0x7ffc0000 [ 234.992072][ T8280] netlink: 56 bytes leftover after parsing attributes in process `syz.0.629'. [ 235.179950][ T8297] loop8: detected capacity change from 0 to 8 [ 235.191384][ T8297] Dev loop8: unable to read RDB block 8 [ 235.197826][ T8297] loop8: unable to read partition table [ 235.205976][ T8298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.220563][ T8300] netlink: 'syz.2.635': attribute type 322 has an invalid length. [ 235.222342][ T8297] loop8: partition table beyond EOD, truncated [ 235.246998][ T8297] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 235.507472][ T8313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.674749][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 236.299501][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.345038][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.378188][ T8327] fuse: Unknown parameter 'Wroo0000 [ 236.378188][ T8327] 00000010000er_i' [ 236.425108][ T8327] @: renamed from bond_slave_0 (while UP) [ 237.124635][ T8344] loop8: detected capacity change from 0 to 8 [ 237.138902][ T5874] Dev loop8: unable to read RDB block 8 [ 237.181665][ T5874] loop8: unable to read partition table [ 237.206307][ T5874] loop8: partition table beyond EOD, truncated [ 237.229165][ T8344] Dev loop8: unable to read RDB block 8 [ 237.236330][ T8344] loop8: unable to read partition table [ 237.245388][ T8344] loop8: partition table beyond EOD, truncated [ 237.260596][ T8344] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 238.722861][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 238.731351][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 238.892006][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 239.071593][ T5932] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 239.228359][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 239.236038][ T5932] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 239.249360][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.258256][ T5932] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 239.268299][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.284840][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 239.294361][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 239.310409][ T5932] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 239.320777][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.329349][ T5932] usb 1-1: Product: syz [ 239.334051][ T5932] usb 1-1: Manufacturer: syz [ 239.338733][ T5932] usb 1-1: SerialNumber: syz [ 239.357442][ T5932] usb 1-1: config 0 descriptor?? [ 239.379201][ T5932] hub 1-1:0.0: bad descriptor, ignoring hub [ 239.394734][ T5932] hub 1-1:0.0: probe with driver hub failed with error -5 [ 239.628822][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.660555][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.805973][ T5932] usb 1-1: USB disconnect, device number 47 [ 240.413504][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.424679][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.438263][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 240.571861][ T1166] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 240.737192][ T1166] usb 1-1: Using ep0 maxpacket: 32 [ 240.744322][ T1166] usb 1-1: no configurations [ 240.749035][ T1166] usb 1-1: can't read configurations, error -22 [ 240.916444][ T1166] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 241.101857][ T1166] usb 1-1: Using ep0 maxpacket: 32 [ 241.125722][ T1166] usb 1-1: no configurations [ 241.135278][ T1166] usb 1-1: can't read configurations, error -22 [ 241.166617][ T1166] usb usb1-port1: attempt power cycle [ 241.326862][ T8416] binder_alloc: 8414: binder_alloc_buf, no vma [ 241.532623][ T1166] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 241.586596][ T1166] usb 1-1: Using ep0 maxpacket: 32 [ 241.592827][ T1166] usb 1-1: no configurations [ 241.602576][ T1166] usb 1-1: can't read configurations, error -22 [ 241.739314][ T8422] loop8: detected capacity change from 0 to 8 [ 241.749765][ T5874] Dev loop8: unable to read RDB block 8 [ 241.756705][ T5874] loop8: unable to read partition table [ 241.772078][ T5874] loop8: partition table beyond EOD, truncated [ 241.778544][ T1166] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 241.802652][ T8422] Dev loop8: unable to read RDB block 8 [ 241.812271][ T1166] usb 1-1: Using ep0 maxpacket: 32 [ 241.820759][ T1166] usb 1-1: no configurations [ 241.825995][ T1166] usb 1-1: can't read configurations, error -22 [ 241.834223][ T8422] loop8: unable to read partition table [ 241.851915][ T8422] loop8: partition table beyond EOD, truncated [ 241.886151][ T8422] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 241.898444][ T8425] qrtr: Invalid version 0 [ 241.916832][ T8425] usb usb9: usbfs: process 8425 (syz.5.668) did not claim interface 0 before use [ 242.071784][ T1166] usb usb1-port1: unable to enumerate USB device [ 242.267411][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.278157][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.421580][ T1166] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 242.591603][ T1166] usb 5-1: Using ep0 maxpacket: 32 [ 242.603129][ T1166] usb 5-1: config 0 has no interfaces? [ 242.609011][ T1166] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 242.629441][ T1166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.662087][ T1166] usb 5-1: config 0 descriptor?? [ 242.894891][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.385012][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.416480][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.428846][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.642348][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 243.952809][ T5917] usb 5-1: USB disconnect, device number 38 [ 245.842039][ T5917] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 245.981911][ T5917] usb 1-1: device descriptor read/64, error -71 [ 246.102085][ T8468] loop8: detected capacity change from 0 to 8 [ 246.114094][ T5874] Dev loop8: unable to read RDB block 8 [ 246.119931][ T5874] loop8: unable to read partition table [ 246.126554][ T5874] loop8: partition table beyond EOD, truncated [ 246.135036][ T8468] Dev loop8: unable to read RDB block 8 [ 246.140865][ T8468] loop8: unable to read partition table [ 246.149749][ T8468] loop8: partition table beyond EOD, truncated [ 246.163281][ T8468] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 246.232276][ T5917] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 246.341560][ T5903] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 246.371691][ T5917] usb 1-1: device descriptor read/64, error -71 [ 246.482179][ T5917] usb usb1-port1: attempt power cycle [ 246.493444][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 246.505192][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 246.516068][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 246.526566][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 246.546325][ T5903] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 246.564495][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.585635][ T5903] usb 5-1: Product: syz [ 246.593136][ T5903] usb 5-1: Manufacturer: syz [ 246.598464][ T5903] usb 5-1: SerialNumber: syz [ 246.610455][ T5903] usb 5-1: config 0 descriptor?? [ 246.625047][ T5903] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 246.826412][ T5903] scsi host1: usb-storage 5-1:0.0 [ 246.841554][ T5917] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 246.872697][ T5917] usb 1-1: device descriptor read/8, error -71 [ 247.037828][ T5903] usb 5-1: USB disconnect, device number 39 [ 247.111803][ T5917] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 247.147286][ T8483] loop5: detected capacity change from 0 to 7 [ 247.166247][ T5917] usb 1-1: device descriptor read/8, error -71 [ 247.173950][ T7164] Dev loop5: unable to read RDB block 7 [ 247.179815][ T7164] loop5: AHDI p1 p2 p3 [ 247.191584][ T7164] loop5: partition table partially beyond EOD, truncated [ 247.199597][ T7164] loop5: p1 start 1601398130 is beyond EOD, truncated [ 247.213161][ T7164] loop5: p2 start 1702059890 is beyond EOD, truncated [ 247.222533][ T8483] Dev loop5: unable to read RDB block 7 [ 247.228281][ T8483] loop5: AHDI p1 p2 p3 [ 247.233534][ T8483] loop5: partition table partially beyond EOD, truncated [ 247.240871][ T8483] loop5: p1 start 1601398130 is beyond EOD, truncated [ 247.248441][ T8483] loop5: p2 start 1702059890 is beyond EOD, truncated [ 247.290422][ T5917] usb usb1-port1: unable to enumerate USB device [ 247.443502][ T8492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.473838][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.685'. [ 247.483076][ T8492] netem: invalid attributes len -7 [ 247.488368][ T8492] netem: change failed [ 247.660865][ T5917] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 247.797233][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.892429][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 247.960206][ T5917] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 247.971783][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.985984][ T5917] usb 3-1: config 0 has no interface number 0 [ 248.004042][ T5917] usb 3-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 248.046341][ T5917] usb 3-1: config 0 interface 89 has no altsetting 0 [ 248.078464][ T5917] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 248.112334][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.140246][ T5917] usb 3-1: Product: syz [ 248.149672][ T5917] usb 3-1: Manufacturer: syz [ 248.161304][ T5917] usb 3-1: SerialNumber: syz [ 248.179778][ T5917] usb 3-1: config 0 descriptor?? [ 248.723061][ T8508] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.691'. [ 248.863137][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.873727][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.886343][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.910105][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.920022][ T8511] loop8: detected capacity change from 0 to 8 [ 248.933305][ T8511] Dev loop8: unable to read RDB block 8 [ 248.939348][ T8511] loop8: unable to read partition table [ 248.945586][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 248.956553][ T8511] loop8: partition table beyond EOD, truncated [ 248.964162][ T8511] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 249.101560][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 249.119080][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 249.130609][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.694'. [ 249.157880][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.171378][ T24] usb 1-1: Product: syz [ 249.175890][ T24] usb 1-1: Manufacturer: syz [ 249.185022][ T24] usb 1-1: SerialNumber: syz [ 249.216722][ T24] r8152-cfgselector 1-1: Unknown version 0x0000 [ 249.224485][ T24] r8152-cfgselector 1-1: config 0 descriptor?? [ 249.649755][ T5917] r8152-cfgselector 1-1: USB disconnect, device number 56 [ 249.741550][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 249.907753][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.918755][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.929847][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.949949][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.959657][ T24] usb 5-1: SerialNumber: syz [ 250.250511][ T8539] FAULT_INJECTION: forcing a failure. [ 250.250511][ T8539] name failslab, interval 1, probability 0, space 0, times 0 [ 250.276111][ T8539] CPU: 1 UID: 0 PID: 8539 Comm: syz.0.699 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.276146][ T8539] Tainted: [L]=SOFTLOCKUP [ 250.276154][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 250.276167][ T8539] Call Trace: [ 250.276175][ T8539] [ 250.276188][ T8539] dump_stack_lvl+0xe8/0x150 [ 250.276222][ T8539] should_fail_ex+0x412/0x560 [ 250.276255][ T8539] should_failslab+0xa8/0x100 [ 250.276283][ T8539] ? fsnotify_add_mark_locked+0x5f4/0x1220 [ 250.276307][ T8539] kmem_cache_alloc_noprof+0x87/0x650 [ 250.276337][ T8539] fsnotify_add_mark_locked+0x5f4/0x1220 [ 250.276376][ T8539] __se_sys_inotify_add_watch+0xa29/0xf20 [ 250.276412][ T8539] ? ksys_write+0x242/0x270 [ 250.276438][ T8539] ? __pfx___se_sys_inotify_add_watch+0x10/0x10 [ 250.276480][ T8539] do_syscall_64+0x14d/0xf80 [ 250.276501][ T8539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.276523][ T8539] ? clear_bhb_loop+0x40/0x90 [ 250.276550][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.276571][ T8539] RIP: 0033:0x7f5ca439c799 [ 250.276591][ T8539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.276610][ T8539] RSP: 002b:00007f5ca25f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 250.276632][ T8539] RAX: ffffffffffffffda RBX: 00007f5ca4615fa0 RCX: 00007f5ca439c799 [ 250.276648][ T8539] RDX: 0000000052000775 RSI: 0000200000000200 RDI: 0000000000000003 [ 250.276662][ T8539] RBP: 00007f5ca25f6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.276675][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.276687][ T8539] R13: 00007f5ca4616038 R14: 00007f5ca4615fa0 R15: 00007f5ca473fa48 [ 250.276722][ T8539] [ 250.548689][ T5917] usb 3-1: USB disconnect, device number 44 [ 250.873902][ T5903] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 250.913592][ T5917] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 251.021683][ T5903] usb 1-1: device descriptor read/64, error -71 [ 251.104609][ T5917] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.117304][ T5917] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 251.128360][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.138154][ T5917] usb 3-1: Product: syz [ 251.142783][ T5917] usb 3-1: Manufacturer: syz [ 251.147815][ T5917] usb 3-1: SerialNumber: syz [ 251.211549][ T1166] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 251.282687][ T5903] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 251.377785][ T1166] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 251.389629][ T1166] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.399799][ T1166] usb 6-1: Product: syz [ 251.404557][ T1166] usb 6-1: Manufacturer: syz [ 251.409394][ T1166] usb 6-1: SerialNumber: syz [ 251.421592][ T5903] usb 1-1: device descriptor read/64, error -71 [ 251.428760][ T1166] usb 6-1: config 0 descriptor?? [ 251.440696][ T1166] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 251.552108][ T5903] usb usb1-port1: attempt power cycle [ 251.911795][ T5903] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 251.932239][ T5903] usb 1-1: device descriptor read/8, error -71 [ 252.171898][ T5903] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 252.202472][ T5903] usb 1-1: device descriptor read/8, error -71 [ 252.264785][ T797] usb 6-1: USB disconnect, device number 17 [ 252.333869][ T5903] usb usb1-port1: unable to enumerate USB device [ 252.395092][ T5917] usb 3-1: current rate 14697891 is different from the runtime rate 48000 [ 252.519250][ T24] usb 5-1: 0:2 : does not exist [ 252.527407][ T24] usb 5-1: unit 5: unexpected type 0x0e [ 252.649584][ T5917] usb 3-1: USB disconnect, device number 45 [ 252.665691][ T24] usb 5-1: USB disconnect, device number 40 [ 252.773238][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 253.067943][ T5903] hid-generic 0008:0091:0009.000E: reserved main item tag 0xd [ 253.088149][ T5903] hid-generic 0008:0091:0009.000E: item fetching failed at offset 28/32 [ 253.099138][ T5903] hid-generic 0008:0091:0009.000E: probe with driver hid-generic failed with error -22 [ 253.306450][ T8585] FAULT_INJECTION: forcing a failure. [ 253.306450][ T8585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.330556][ T8585] CPU: 0 UID: 0 PID: 8585 Comm: syz.2.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.330591][ T8585] Tainted: [L]=SOFTLOCKUP [ 253.330599][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 253.330612][ T8585] Call Trace: [ 253.330620][ T8585] [ 253.330630][ T8585] dump_stack_lvl+0xe8/0x150 [ 253.330665][ T8585] should_fail_ex+0x412/0x560 [ 253.330698][ T8585] _copy_to_user+0x31/0xb0 [ 253.330733][ T8585] simple_read_from_buffer+0xe1/0x170 [ 253.330769][ T8585] proc_fail_nth_read+0x1bb/0x230 [ 253.330812][ T8585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.330846][ T8585] ? rw_verify_area+0x2a6/0x4d0 [ 253.330868][ T8585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.330901][ T8585] vfs_read+0x20c/0xa70 [ 253.330921][ T8585] ? fdget_pos+0x246/0x320 [ 253.330958][ T8585] ? __pfx___mutex_lock+0x10/0x10 [ 253.330980][ T8585] ? __pfx_vfs_read+0x10/0x10 [ 253.331004][ T8585] ? __fget_files+0x2a/0x420 [ 253.331039][ T8585] ? __fget_files+0x3a0/0x420 [ 253.331069][ T8585] ? __fget_files+0x2a/0x420 [ 253.331109][ T8585] ksys_read+0x150/0x270 [ 253.331134][ T8585] ? __pfx_ksys_read+0x10/0x10 [ 253.331168][ T8585] do_syscall_64+0x14d/0xf80 [ 253.331188][ T8585] ? trace_irq_disable+0x3b/0x150 [ 253.331218][ T8585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.331240][ T8585] ? clear_bhb_loop+0x40/0x90 [ 253.331267][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.331288][ T8585] RIP: 0033:0x7f941a55cfce [ 253.331309][ T8585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.331328][ T8585] RSP: 002b:00007f941b48ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.331350][ T8585] RAX: ffffffffffffffda RBX: 00007f941b4906c0 RCX: 00007f941a55cfce [ 253.331366][ T8585] RDX: 000000000000000f RSI: 00007f941b4900a0 RDI: 0000000000000004 [ 253.331379][ T8585] RBP: 00007f941b490090 R08: 0000000000000000 R09: 0000000000000000 [ 253.331393][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.331409][ T8585] R13: 00007f941a816038 R14: 00007f941a815fa0 R15: 00007f941a93fa48 [ 253.331441][ T8585] [ 253.724126][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 253.819007][ T8593] CIFS: iocharset name too long [ 253.963577][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 253.999107][ T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 254.007607][ T24] usb 5-1: config 0 has no interface number 0 [ 254.014447][ T24] usb 5-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 254.026506][ T24] usb 5-1: config 0 interface 89 has no altsetting 0 [ 254.036695][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 254.081606][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.089101][ C1] bridge0: topology change detected, propagating [ 254.096179][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.103557][ C1] bridge0: topology change detected, propagating [ 254.127695][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.136626][ T24] usb 5-1: Product: syz [ 254.141063][ T24] usb 5-1: Manufacturer: syz [ 254.147161][ T24] usb 5-1: SerialNumber: syz [ 254.162663][ T24] usb 5-1: config 0 descriptor?? [ 254.222504][ T8611] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 254.287802][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 254.397317][ T8611] bond1: entered promiscuous mode [ 254.440403][ T8611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.518902][ T8615] bond1: (slave bridge1): making interface the new active one [ 254.617919][ T8615] bridge1: entered promiscuous mode [ 254.667119][ T8615] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 254.731717][ T8616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.758776][ T8616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.796852][ T8616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.820557][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.832902][ T8616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.843276][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.052947][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.059786][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.492901][ T9] usb 5-1: USB disconnect, device number 41 [ 256.843493][ T8634] netlink: 'syz.4.720': attribute type 21 has an invalid length. [ 256.915057][ T8634] netlink: 'syz.4.720': attribute type 6 has an invalid length. [ 256.955391][ T8634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.720'. [ 257.027594][ T8638] ip6t_srh: unknown srh invflags 4000 [ 257.731502][ T29] audit: type=1326 audit(1773175890.782:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 257.852517][ T29] audit: type=1326 audit(1773175890.782:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 257.887814][ T29] audit: type=1326 audit(1773175890.782:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 257.916512][ T29] audit: type=1326 audit(1773175890.782:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 258.073698][ T8650] netlink: 164 bytes leftover after parsing attributes in process `syz.2.725'. [ 258.084999][ T8650] netlink: 12296 bytes leftover after parsing attributes in process `syz.2.725'. [ 258.095427][ T8650] netlink: 164 bytes leftover after parsing attributes in process `syz.2.725'. [ 258.176518][ T29] audit: type=1326 audit(1773175890.782:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 258.251954][ T29] audit: type=1326 audit(1773175890.782:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 258.325361][ T29] audit: type=1326 audit(1773175890.782:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 258.864322][ T29] audit: type=1326 audit(1773175890.782:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 259.092449][ T29] audit: type=1326 audit(1773175890.782:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 259.321635][ T29] audit: type=1326 audit(1773175890.782:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94979c799 code=0x7ffc0000 [ 259.522366][ T797] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 259.693681][ T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.711913][ T797] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.736147][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.775194][ T797] usb 6-1: config 0 descriptor?? [ 259.805610][ T797] pwc: Askey VC010 type 2 USB webcam detected. [ 259.942387][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 260.124470][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.145976][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.166427][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.181585][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.348765][ T8669] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 260.388210][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.590625][ T797] pwc: recv_control_msg error -32 req 02 val 2700 [ 260.611193][ T8669] netdevsim netdevsim4: Direct firmware load for / [ 260.611193][ T8669] failed with error -2 [ 260.651030][ T8669] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 260.651030][ T8669] [ 260.692865][ T797] pwc: recv_control_msg error -32 req 02 val 2c00 [ 261.042079][ T8660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.063535][ T8660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.094262][ T797] pwc: recv_control_msg error -71 req 04 val 1300 [ 261.113011][ T797] pwc: recv_control_msg error -71 req 04 val 1400 [ 261.134404][ T797] pwc: recv_control_msg error -71 req 02 val 2000 [ 261.158096][ T8671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.167755][ T797] pwc: recv_control_msg error -71 req 02 val 2100 [ 261.176811][ T797] pwc: recv_control_msg error -71 req 04 val 1500 [ 261.246279][ T8671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.294634][ T797] pwc: recv_control_msg error -71 req 02 val 2500 [ 261.320578][ T797] pwc: recv_control_msg error -71 req 02 val 2400 [ 261.332718][ T797] pwc: recv_control_msg error -71 req 02 val 2600 [ 261.341161][ T797] pwc: recv_control_msg error -71 req 02 val 2900 [ 261.361941][ T797] pwc: recv_control_msg error -71 req 02 val 2800 [ 261.371006][ T797] pwc: recv_control_msg error -71 req 04 val 1100 [ 261.383707][ T797] pwc: recv_control_msg error -71 req 04 val 1200 [ 261.415297][ T797] pwc: Registered as video103. [ 261.453568][ T797] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 261.505418][ T797] usb 6-1: USB disconnect, device number 18 [ 262.121731][ T797] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 262.336972][ T797] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.361983][ T797] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 262.612219][ T797] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.657686][ T797] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.667676][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.701550][ T797] usb 6-1: Product: syz [ 262.714444][ T797] usb 6-1: Manufacturer: syz [ 262.719457][ T797] usb 6-1: SerialNumber: syz [ 262.782293][ T797] hub 6-1:1.0: bad descriptor, ignoring hub [ 262.805245][ T797] hub 6-1:1.0: probe with driver hub failed with error -5 [ 262.891011][ T8687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.942272][ T8687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.991768][ T797] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 263.266924][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.314022][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.376308][ T8682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.733'. [ 263.417594][ T797] usb 5-1: USB disconnect, device number 42 [ 263.492567][ T5917] usb 6-1: USB disconnect, device number 19 [ 263.514056][ T5917] usblp0: removed [ 263.619379][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 263.629846][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 263.680694][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 263.744240][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 264.055712][ T8701] netlink: 'syz.4.740': attribute type 39 has an invalid length. [ 264.100969][ T8703] FAULT_INJECTION: forcing a failure. [ 264.100969][ T8703] name failslab, interval 1, probability 0, space 0, times 0 [ 264.188342][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.3.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.188378][ T8703] Tainted: [L]=SOFTLOCKUP [ 264.188386][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 264.188404][ T8703] Call Trace: [ 264.188411][ T8703] [ 264.188419][ T8703] dump_stack_lvl+0xe8/0x150 [ 264.188445][ T8703] should_fail_ex+0x412/0x560 [ 264.188469][ T8703] should_failslab+0xa8/0x100 [ 264.188489][ T8703] ? ep_insert+0x52e/0x1a40 [ 264.188512][ T8703] kmem_cache_alloc_noprof+0x87/0x650 [ 264.188527][ T8703] ? ep_insert+0x283/0x1a40 [ 264.188548][ T8703] ? ep_insert+0x3cc/0x1a40 [ 264.188573][ T8703] ep_insert+0x52e/0x1a40 [ 264.188606][ T8703] ? __pfx_ep_insert+0x10/0x10 [ 264.188627][ T8703] ? __pfx___mutex_lock+0x10/0x10 [ 264.188643][ T8703] ? __fget_files+0x2a/0x420 [ 264.188667][ T8703] ? __fget_files+0x2a/0x420 [ 264.188693][ T8703] ? __fget_files+0x3a0/0x420 [ 264.188715][ T8703] ? __fget_files+0x2a/0x420 [ 264.188743][ T8703] do_epoll_ctl+0x7f4/0xe80 [ 264.188772][ T8703] __x64_sys_epoll_ctl+0x165/0x1b0 [ 264.188798][ T8703] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 264.188831][ T8703] do_syscall_64+0x14d/0xf80 [ 264.188845][ T8703] ? trace_irq_disable+0x3b/0x150 [ 264.188867][ T8703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.188883][ T8703] ? clear_bhb_loop+0x40/0x90 [ 264.188901][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.188916][ T8703] RIP: 0033:0x7f6b4759c799 [ 264.188930][ T8703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.188944][ T8703] RSP: 002b:00007f6b484be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 264.188960][ T8703] RAX: ffffffffffffffda RBX: 00007f6b47815fa0 RCX: 00007f6b4759c799 [ 264.188971][ T8703] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 264.188980][ T8703] RBP: 00007f6b484be090 R08: 0000000000000000 R09: 0000000000000000 [ 264.188989][ T8703] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 264.188999][ T8703] R13: 00007f6b47816038 R14: 00007f6b47815fa0 R15: 00007f6b4793fa48 [ 264.189022][ T8703] [ 265.718945][ T1166] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 265.883454][ T1166] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.901097][ T1166] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 265.938471][ T1166] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.007269][ T1166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.055562][ T8722] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 266.172707][ T1166] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.302451][ T8722] netdevsim netdevsim2: Direct firmware load for / [ 266.302451][ T8722] failed with error -2 [ 266.313758][ T8722] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 266.313758][ T8722] [ 266.533297][ T8725] syzkaller0: entered promiscuous mode [ 266.562529][ T8725] syzkaller0: entered allmulticast mode [ 267.276981][ T8626] Set syz1 is full, maxelem 65536 reached [ 267.711660][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 267.711678][ T29] audit: type=1326 audit(1773175900.812:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.5.748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f587b59c799 code=0x0 [ 267.793574][ T29] audit: type=1326 audit(1773175900.802:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.5.748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f587b59c799 code=0x0 [ 268.459519][ T8744] FAULT_INJECTION: forcing a failure. [ 268.459519][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 268.536826][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.5.753 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.536872][ T8744] Tainted: [L]=SOFTLOCKUP [ 268.536881][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 268.536895][ T8744] Call Trace: [ 268.536905][ T8744] [ 268.536915][ T8744] dump_stack_lvl+0xe8/0x150 [ 268.536956][ T8744] should_fail_ex+0x412/0x560 [ 268.536995][ T8744] should_failslab+0xa8/0x100 [ 268.537025][ T8744] ? ep_ptable_queue_proc+0x5c/0x200 [ 268.537052][ T8744] kmem_cache_alloc_noprof+0x87/0x650 [ 268.537088][ T8744] ep_ptable_queue_proc+0x5c/0x200 [ 268.537115][ T8744] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 268.537141][ T8744] kernfs_generic_poll+0xfe/0x230 [ 268.537172][ T8744] kernfs_fop_poll+0x1ab/0x200 [ 268.537199][ T8744] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 268.537226][ T8744] ep_insert+0x11a9/0x1a40 [ 268.537280][ T8744] ? __pfx_ep_insert+0x10/0x10 [ 268.537325][ T8744] ? __pfx___mutex_lock+0x10/0x10 [ 268.537351][ T8744] ? __fget_files+0x2a/0x420 [ 268.537390][ T8744] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 268.537416][ T8744] ? __fget_files+0x3a0/0x420 [ 268.537450][ T8744] ? __fget_files+0x2a/0x420 [ 268.537496][ T8744] do_epoll_ctl+0x7f4/0xe80 [ 268.537543][ T8744] __x64_sys_epoll_ctl+0x165/0x1b0 [ 268.537595][ T8744] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 268.537690][ T8744] do_syscall_64+0x14d/0xf80 [ 268.537714][ T8744] ? trace_irq_disable+0x3b/0x150 [ 268.537749][ T8744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.537774][ T8744] ? clear_bhb_loop+0x40/0x90 [ 268.537804][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.537829][ T8744] RIP: 0033:0x7f587b59c799 [ 268.537851][ T8744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.537872][ T8744] RSP: 002b:00007f58797ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 268.537898][ T8744] RAX: ffffffffffffffda RBX: 00007f587b815fa0 RCX: 00007f587b59c799 [ 268.537916][ T8744] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 268.537930][ T8744] RBP: 00007f58797ee090 R08: 0000000000000000 R09: 0000000000000000 [ 268.537945][ T8744] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 268.537961][ T8744] R13: 00007f587b816038 R14: 00007f587b815fa0 R15: 00007f587b93fa48 [ 268.537999][ T8744] [ 268.585867][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.822453][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.869161][ T1166] usb 3-1: USB disconnect, device number 46 [ 268.956694][ T29] audit: type=1326 audit(1773175902.052:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 269.031790][ T29] audit: type=1326 audit(1773175902.082:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 269.098088][ T29] audit: type=1326 audit(1773175902.082:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 269.162541][ T29] audit: type=1326 audit(1773175902.082:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 269.199594][ T8742] program syz.0.752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.237181][ T29] audit: type=1326 audit(1773175902.082:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 269.680224][ T8773] program syz.0.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.831623][ T5917] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 270.018729][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 270.029893][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.057216][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 270.237165][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.252907][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.306683][ T5917] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 270.317537][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.338520][ T5917] usb 6-1: Product: syz [ 270.348262][ T5917] usb 6-1: Manufacturer: syz [ 270.381600][ T5917] usb 6-1: SerialNumber: syz [ 270.397189][ T5917] usb 6-1: config 0 descriptor?? [ 270.435021][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 270.457348][ T5917] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27 [ 270.735952][ T5917] rc_core: IR keymap rc-imon-pad not found [ 270.742966][ T5917] Registered IR keymap rc-empty [ 270.748228][ T5917] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 270.767644][ T5917] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 270.853476][ T5917] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 270.878344][ T5917] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 270.926048][ T5917] imon 6-1:0.0: iMON device (15c2:003b, intf0) on usb<6:20> initialized [ 271.516400][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.540778][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.632640][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.653800][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.805286][ T8786] syzkaller1: entered promiscuous mode [ 271.810845][ T8786] syzkaller1: entered allmulticast mode [ 271.955664][ T8795] FAULT_INJECTION: forcing a failure. [ 271.955664][ T8795] name failslab, interval 1, probability 0, space 0, times 0 [ 271.978492][ T8795] CPU: 0 UID: 0 PID: 8795 Comm: syz.4.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.978527][ T8795] Tainted: [L]=SOFTLOCKUP [ 271.978534][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 271.978547][ T8795] Call Trace: [ 271.978555][ T8795] [ 271.978564][ T8795] dump_stack_lvl+0xe8/0x150 [ 271.978598][ T8795] should_fail_ex+0x412/0x560 [ 271.978631][ T8795] should_failslab+0xa8/0x100 [ 271.978658][ T8795] ? ep_ptable_queue_proc+0x5c/0x200 [ 271.978682][ T8795] kmem_cache_alloc_noprof+0x87/0x650 [ 271.978712][ T8795] ep_ptable_queue_proc+0x5c/0x200 [ 271.978735][ T8795] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 271.978758][ T8795] kernfs_generic_poll+0xfe/0x230 [ 271.978784][ T8795] kernfs_fop_poll+0x1ab/0x200 [ 271.978808][ T8795] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 271.978831][ T8795] ep_insert+0x11a9/0x1a40 [ 271.978880][ T8795] ? __pfx_ep_insert+0x10/0x10 [ 271.978910][ T8795] ? __pfx___mutex_lock+0x10/0x10 [ 271.978932][ T8795] ? __fget_files+0x2a/0x420 [ 271.978964][ T8795] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 271.978986][ T8795] ? __fget_files+0x3a0/0x420 [ 271.979017][ T8795] ? __fget_files+0x2a/0x420 [ 271.979057][ T8795] do_epoll_ctl+0x7f4/0xe80 [ 271.979098][ T8795] __x64_sys_epoll_ctl+0x165/0x1b0 [ 271.979133][ T8795] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 271.979176][ T8795] do_syscall_64+0x14d/0xf80 [ 271.979194][ T8795] ? trace_irq_disable+0x3b/0x150 [ 271.979224][ T8795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.979244][ T8795] ? clear_bhb_loop+0x40/0x90 [ 271.979269][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.979290][ T8795] RIP: 0033:0x7fc94979c799 [ 271.979310][ T8795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.979328][ T8795] RSP: 002b:00007fc94a5c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 271.979351][ T8795] RAX: ffffffffffffffda RBX: 00007fc949a15fa0 RCX: 00007fc94979c799 [ 271.979366][ T8795] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 271.979378][ T8795] RBP: 00007fc94a5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 271.979392][ T8795] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 271.979405][ T8795] R13: 00007fc949a16038 R14: 00007fc949a15fa0 R15: 00007fc949b3fa48 [ 271.979448][ T8795] [ 272.351572][ T5917] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 272.510634][ T8812] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 272.522578][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 272.537224][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.554401][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.601866][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.612759][ T5917] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.623439][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.638218][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.647711][ T5917] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.656261][ T5917] usb 3-1: Manufacturer: syz [ 272.666266][ T5917] usb 3-1: config 0 descriptor?? [ 272.672005][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 272.813654][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 272.901672][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 272.913250][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.942739][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.953654][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 272.963385][ T1166] usb 6-1: USB disconnect, device number 20 [ 273.013963][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.113397][ T24] usb 1-1: config 0 descriptor?? [ 273.751848][ T24] usb 1-1: USB disconnect, device number 61 [ 273.778547][ T5917] rc_core: IR keymap rc-hauppauge not found [ 273.803495][ T5917] Registered IR keymap rc-empty [ 273.808607][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.831642][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.889337][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 273.977115][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 274.034445][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.771'. [ 274.045926][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.084974][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.114742][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.114751][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.152166][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.184146][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.192336][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.213164][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.225071][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.262005][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.276888][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.302256][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.344493][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.434485][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.484139][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.521686][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.583476][ T5917] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 274.607733][ T5917] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 274.993624][ T5917] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 275.183556][ T5917] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 275.228747][ T5917] usb 6-1: config 0 has no interface number 0 [ 275.248323][ T5917] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 275.263848][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.273564][ T5917] usb 6-1: Product: syz [ 275.287090][ T5917] usb 6-1: Manufacturer: syz [ 275.293404][ T5917] usb 6-1: SerialNumber: syz [ 275.309355][ T5917] usb 6-1: config 0 descriptor?? [ 275.321154][ T8849] FAULT_INJECTION: forcing a failure. [ 275.321154][ T8849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.370385][ T8849] CPU: 0 UID: 0 PID: 8849 Comm: syz.4.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.370423][ T8849] Tainted: [L]=SOFTLOCKUP [ 275.370431][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 275.370443][ T8849] Call Trace: [ 275.370454][ T8849] [ 275.370463][ T8849] dump_stack_lvl+0xe8/0x150 [ 275.370499][ T8849] should_fail_ex+0x412/0x560 [ 275.370530][ T8849] _copy_to_user+0x31/0xb0 [ 275.370566][ T8849] simple_read_from_buffer+0xe1/0x170 [ 275.370602][ T8849] proc_fail_nth_read+0x1bb/0x230 [ 275.370633][ T8849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.370665][ T8849] ? rw_verify_area+0x2a6/0x4d0 [ 275.370687][ T8849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.370720][ T8849] vfs_read+0x20c/0xa70 [ 275.370741][ T8849] ? fdget_pos+0x246/0x320 [ 275.370770][ T8849] ? __pfx___mutex_lock+0x10/0x10 [ 275.370795][ T8849] ? __pfx___mutex_lock+0x10/0x10 [ 275.370816][ T8849] ? __pfx_vfs_read+0x10/0x10 [ 275.370841][ T8849] ? __fget_files+0x2a/0x420 [ 275.370877][ T8849] ? __fget_files+0x3a0/0x420 [ 275.370907][ T8849] ? __fget_files+0x2a/0x420 [ 275.370946][ T8849] ksys_read+0x150/0x270 [ 275.370971][ T8849] ? __pfx_ksys_read+0x10/0x10 [ 275.371007][ T8849] do_syscall_64+0x14d/0xf80 [ 275.371026][ T8849] ? trace_irq_disable+0x3b/0x150 [ 275.371055][ T8849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.371084][ T8849] ? clear_bhb_loop+0x40/0x90 [ 275.371103][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.371145][ T8849] RIP: 0033:0x7fc94975cfce [ 275.371166][ T8849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.371192][ T8849] RSP: 002b:00007fc94a5c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.371214][ T8849] RAX: ffffffffffffffda RBX: 00007fc94a5c56c0 RCX: 00007fc94975cfce [ 275.371229][ T8849] RDX: 000000000000000f RSI: 00007fc94a5c50a0 RDI: 0000000000000005 [ 275.371245][ T8849] RBP: 00007fc94a5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 275.371254][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.371263][ T8849] R13: 00007fc949a16038 R14: 00007fc949a15fa0 R15: 00007fc949b3fa48 [ 275.371307][ T8849] [ 275.709784][ T5917] uvcvideo 6-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 275.727241][ T5823] usb 3-1: USB disconnect, device number 47 [ 275.745229][ T5917] uvcvideo 6-1:0.64: Failed to create links for entity 32768 [ 275.792571][ T5917] uvcvideo 6-1:0.64: Failed to register entities (-22). [ 275.813559][ T1166] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 275.826336][ T8853] kAFS: unable to lookup cell '(,cL' [ 275.866671][ T5917] usb 6-1: USB disconnect, device number 21 [ 275.879864][ T8853] kAFS: unable to lookup cell '.,' [ 275.972657][ T1166] usb 1-1: Using ep0 maxpacket: 8 [ 275.993998][ T1166] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 276.036871][ T1166] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.067037][ T1166] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 276.076729][ T1166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.085636][ T1166] usb 1-1: Product: syz [ 276.100860][ T1166] usb 1-1: Manufacturer: syz [ 276.111764][ T1166] usb 1-1: SerialNumber: syz [ 276.281662][ T5932] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 276.298620][ T8869] netlink: 484 bytes leftover after parsing attributes in process `syz.4.781'. [ 276.365359][ T1166] usb 1-1: unit 0 not found! [ 276.392673][ T1166] usb 1-1: unit 2 not found! [ 276.461384][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 276.613415][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50701, setting to 1024 [ 276.624977][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.638827][ T5932] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.664037][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.699864][ T5932] usb 3-1: config 0 descriptor?? [ 276.706519][ T8861] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 276.848428][ T1166] usb 1-1: USB disconnect, device number 62 [ 277.098179][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.109362][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.144773][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.327471][ T5932] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 277.372077][ T5932] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 277.386083][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'. [ 277.541586][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 277.560845][ T8883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.786'. [ 277.702587][ T5932] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 277.710810][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 277.719283][ T24] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 277.729321][ T24] usb 6-1: config 0 has no interface number 0 [ 277.737239][ T24] usb 6-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 277.749176][ T24] usb 6-1: config 0 interface 89 has no altsetting 0 [ 277.760602][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 277.770553][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.779818][ T24] usb 6-1: Product: syz [ 277.784624][ T24] usb 6-1: Manufacturer: syz [ 277.789525][ T24] usb 6-1: SerialNumber: syz [ 277.795373][ T8886] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 277.810320][ T24] usb 6-1: config 0 descriptor?? [ 277.871563][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 277.879389][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.891917][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.904287][ T5932] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 277.912421][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.926895][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.946262][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.971360][ T5932] usb 1-1: config 0 descriptor?? [ 278.403313][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.418524][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.432442][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.448081][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.585222][ T5932] usb 1-1: USB disconnect, device number 63 [ 278.844277][ T24] usb 3-1: reset high-speed USB device number 48 using dummy_hcd [ 279.351781][ T8907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.792'. [ 279.584169][ T797] usb 3-1: USB disconnect, device number 48 [ 279.781697][ T797] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 279.921715][ T797] usb 3-1: device descriptor read/64, error -71 [ 280.111609][ T1166] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 280.181716][ T797] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 280.265090][ T1166] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.285965][ T1166] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.304616][ T1166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.319834][ T5903] usb 6-1: USB disconnect, device number 22 [ 280.332380][ T797] usb 3-1: device descriptor read/64, error -71 [ 280.358500][ T1166] usb 5-1: config 0 descriptor?? [ 280.381315][ T1166] pwc: Askey VC010 type 2 USB webcam detected. [ 280.419817][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.796'. [ 280.452043][ T797] usb usb3-port1: attempt power cycle [ 280.855687][ T797] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 280.883355][ T797] usb 3-1: device descriptor read/8, error -71 [ 280.893422][ T1166] pwc: recv_control_msg error -32 req 02 val 2b00 [ 280.914709][ T1166] pwc: recv_control_msg error -32 req 02 val 2700 [ 280.984040][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.993803][ T1166] pwc: recv_control_msg error -32 req 02 val 2c00 [ 281.002227][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.011848][ T1166] pwc: recv_control_msg error -32 req 04 val 1000 [ 281.151568][ T797] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 281.214465][ T797] usb 3-1: device descriptor read/8, error -71 [ 281.227912][ T1166] pwc: recv_control_msg error -32 req 04 val 1400 [ 281.240744][ T1166] pwc: recv_control_msg error -71 req 02 val 2000 [ 281.250290][ T1166] pwc: recv_control_msg error -71 req 02 val 2100 [ 281.258664][ T1166] pwc: recv_control_msg error -71 req 04 val 1500 [ 281.266840][ T1166] pwc: recv_control_msg error -71 req 02 val 2500 [ 281.277455][ T1166] pwc: recv_control_msg error -71 req 02 val 2400 [ 281.286176][ T1166] pwc: recv_control_msg error -71 req 02 val 2600 [ 281.331826][ T797] usb usb3-port1: unable to enumerate USB device [ 281.338600][ T1166] pwc: recv_control_msg error -71 req 02 val 2900 [ 281.346307][ T1166] pwc: recv_control_msg error -71 req 02 val 2800 [ 281.355601][ T1166] pwc: recv_control_msg error -71 req 04 val 1100 [ 281.426699][ T1166] pwc: recv_control_msg error -71 req 04 val 1200 [ 281.450274][ T1166] pwc: Registered as video103. [ 281.478755][ T1166] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 281.514565][ T1166] usb 5-1: USB disconnect, device number 43 [ 281.737738][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.777800][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.111520][ T1166] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 282.271599][ T1166] usb 5-1: Using ep0 maxpacket: 16 [ 282.278779][ T1166] usb 5-1: config 1 has an invalid interface number: 152 but max is 0 [ 282.287956][ T1166] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.300988][ T1166] usb 5-1: config 1 has no interface number 0 [ 282.315852][ T1166] usb 5-1: config 1 interface 152 altsetting 239 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 282.336872][ T1166] usb 5-1: config 1 interface 152 altsetting 239 endpoint 0xF has invalid wMaxPacketSize 0 [ 282.347467][ T5903] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 282.355274][ T1166] usb 5-1: config 1 interface 152 has no altsetting 0 [ 282.365701][ T1166] usb 5-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=7e.a8 [ 282.377837][ T1166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.389113][ T1166] usb 5-1: Product: syz [ 282.397841][ T1166] usb 5-1: Manufacturer: syz [ 282.408269][ T1166] usb 5-1: SerialNumber: syz [ 282.511525][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 282.520653][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.532608][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.628732][ T8946] ip6t_srh: unknown srh invflags 4000 [ 282.756309][ T5903] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 282.775347][ T1166] safe_serial 5-1:1.152: safe_serial converter detected [ 282.785721][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.813705][ T1166] safe_serial 5-1:1.152: probe with driver safe_serial failed with error -22 [ 282.826923][ T5903] usb 6-1: config 0 descriptor?? [ 282.861855][ T1166] usb 5-1: USB disconnect, device number 44 [ 283.202741][ T8953] bond2: ARP target 9.0.0.0 is already present [ 283.209977][ T8953] bond2: option arp_ip_target: invalid value (9) [ 283.226643][ T8953] bond2 (unregistering): Released all slaves [ 283.662081][ T797] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 283.695541][ T8960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.809'. [ 283.821591][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 283.829830][ T797] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 283.834029][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 283.848890][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 283.856195][ T797] usb 5-1: config 0 has no interface number 0 [ 283.867354][ T797] usb 5-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 283.879433][ T797] usb 5-1: config 0 interface 89 has no altsetting 0 [ 283.888390][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 283.893002][ T797] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 283.898891][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.919645][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.932061][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.938868][ T797] usb 5-1: Product: syz [ 283.950508][ T797] usb 5-1: Manufacturer: syz [ 283.961240][ T797] usb 5-1: SerialNumber: syz [ 283.971800][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 283.979241][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.993026][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.006836][ T797] usb 5-1: config 0 descriptor?? [ 284.037544][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 284.057070][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 284.078087][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 284.291681][ T5903] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 284.421760][ T5903] usb 1-1: device descriptor read/64, error -71 [ 284.585422][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.602951][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.671520][ T5903] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 284.715080][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.747914][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.801738][ T5903] usb 1-1: device descriptor read/64, error -71 [ 284.911749][ T5903] usb usb1-port1: attempt power cycle [ 285.027162][ T5889] usb 6-1: USB disconnect, device number 23 [ 285.150881][ T8988] Context (ID=0x4dd) not attached to queue pair (handle=0x2:0x2) [ 285.251568][ T5903] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 285.283346][ T5903] usb 1-1: device descriptor read/8, error -71 [ 285.527926][ T5903] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 285.576211][ T5903] usb 1-1: device descriptor read/8, error -71 [ 285.702961][ T5903] usb usb1-port1: unable to enumerate USB device [ 285.849539][ T29] audit: type=1326 audit(1773175918.942:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.3.822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b4759c799 code=0x0 [ 285.953881][ T9012] ip6t_srh: unknown srh invflags 4000 [ 286.458925][ T1166] usb 5-1: USB disconnect, device number 45 [ 286.493639][ T5903] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 286.700328][ T5903] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 286.731599][ T5903] usb 6-1: can't read configurations, error -71 [ 286.899268][ T9021] trusted_key: encrypted_key: insufficient parameters specified [ 287.173248][ T1166] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 287.384909][ T1166] usb 5-1: device descriptor read/64, error -71 [ 287.416393][ T5903] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 287.461615][ T5911] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 287.581515][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 287.589662][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short [ 287.599706][ T5903] usb 6-1: config 0 has no interfaces? [ 287.610131][ T5903] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 287.620764][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 287.628534][ T5903] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 287.637981][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.650184][ T1166] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 287.658020][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.668031][ T5903] usb 6-1: Manufacturer: syz [ 287.674355][ T5903] usb 6-1: SerialNumber: syz [ 287.679614][ T5911] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 287.692997][ T5903] usb 6-1: config 0 descriptor?? [ 287.706207][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.730497][ T5911] usb 3-1: config 0 descriptor?? [ 287.801551][ T1166] usb 5-1: device descriptor read/64, error -71 [ 287.915622][ T5889] usb 6-1: USB disconnect, device number 25 [ 287.920810][ T1166] usb usb5-port1: attempt power cycle [ 288.313735][ T9038] syzkaller0: entered promiscuous mode [ 288.319336][ T9038] syzkaller0: entered allmulticast mode [ 288.329427][ T9038] tipc: Started in network mode [ 288.335031][ T9038] tipc: Node identity dea39a69375b, cluster identity 4711 [ 288.342738][ T1166] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 288.352006][ T9038] tipc: Enabled bearer , priority 0 [ 288.356664][ T5889] usb 3-1: USB disconnect, device number 53 [ 288.369771][ T9037] tipc: Resetting bearer [ 288.373335][ T1166] usb 5-1: device descriptor read/8, error -71 [ 288.406746][ T9037] tipc: Disabling bearer [ 288.622467][ T1166] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 288.652269][ T1166] usb 5-1: device descriptor read/8, error -71 [ 288.772719][ T1166] usb usb5-port1: unable to enumerate USB device [ 288.804129][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 288.971603][ T1166] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 289.121702][ T1166] usb 6-1: Using ep0 maxpacket: 32 [ 289.130658][ T1166] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 289.139727][ T1166] usb 6-1: config 0 has no interface number 0 [ 289.150599][ T1166] usb 6-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 289.331814][ T1166] usb 6-1: config 0 interface 89 has no altsetting 0 [ 289.376480][ T1166] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 289.390969][ T1166] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.399864][ T1166] usb 6-1: Product: syz [ 289.404358][ T1166] usb 6-1: Manufacturer: syz [ 289.415007][ T1166] usb 6-1: SerialNumber: syz [ 289.425358][ T1166] usb 6-1: config 0 descriptor?? [ 289.998030][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.009936][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.027718][ T29] audit: type=1326 audit(1773175923.092:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.038542][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.067607][ T797] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 290.077848][ T29] audit: type=1326 audit(1773175923.092:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.085454][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.167784][ T29] audit: type=1326 audit(1773175923.092:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.203637][ T797] usb 1-1: device descriptor read/64, error -71 [ 290.238581][ T29] audit: type=1326 audit(1773175923.092:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.317250][ T29] audit: type=1326 audit(1773175923.092:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.346630][ T29] audit: type=1326 audit(1773175923.092:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.373115][ T29] audit: type=1326 audit(1773175923.092:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.397579][ T29] audit: type=1326 audit(1773175923.092:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.424060][ T29] audit: type=1326 audit(1773175923.092:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.2.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f941a59c799 code=0x7ffc0000 [ 290.453031][ T797] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 290.591568][ T797] usb 1-1: device descriptor read/64, error -71 [ 290.621605][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 290.637107][ T9075] syzkaller0: entered promiscuous mode [ 290.643396][ T9075] syzkaller0: entered allmulticast mode [ 290.702654][ T797] usb usb1-port1: attempt power cycle [ 290.771489][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 290.779112][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 290.802260][ T24] usb 5-1: config 0 has no interface number 0 [ 290.809172][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.828862][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 290.842338][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 290.852648][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 290.864334][ T24] usb 5-1: Product: syz [ 290.868632][ T24] usb 5-1: SerialNumber: syz [ 290.879248][ T9078] blktrace: Concurrent blktraces are not allowed on nullb0 [ 290.883956][ T24] usb 5-1: config 0 descriptor?? [ 290.905202][ T24] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 290.926060][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input32 [ 291.055562][ T797] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 291.092525][ T797] usb 1-1: device descriptor read/8, error -71 [ 291.110237][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.119915][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.127672][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.134949][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.142941][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.150488][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.157804][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.165158][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.172684][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.180057][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 291.192253][ T24] usb 5-1: USB disconnect, device number 50 [ 291.198443][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 291.228362][ T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 291.351505][ T797] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 291.382215][ T797] usb 1-1: device descriptor read/8, error -71 [ 291.501850][ T797] usb usb1-port1: unable to enumerate USB device [ 291.962892][ T1166] usb 6-1: USB disconnect, device number 26 [ 292.322216][ T5903] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 292.501608][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 292.512954][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.526725][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.537893][ T5903] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 292.548091][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.590376][ T5903] usb 5-1: config 0 descriptor?? [ 293.051619][ T24] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 293.231816][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 293.241847][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.252611][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.263963][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 293.274788][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 293.285169][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.314459][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 293.325112][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 293.333777][ T24] usb 1-1: Manufacturer: syz [ 293.342777][ T24] usb 1-1: config 0 descriptor?? [ 293.499454][ T9119] ip6t_srh: unknown srh invflags 4000 [ 293.701587][ T24] rc_core: IR keymap rc-hauppauge not found [ 293.708007][ T24] Registered IR keymap rc-empty [ 293.719689][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.812254][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.835025][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.844861][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 293.860255][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.872295][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 293.898942][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.931713][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.951690][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.971569][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.992043][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.021602][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.071571][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.111578][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.131709][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.169095][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.215547][ T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 294.233928][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 294.261156][ T24] usb 1-1: USB disconnect, device number 72 [ 294.802323][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 294.863460][ T9136] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 294.958418][ T5917] usb 5-1: USB disconnect, device number 51 [ 294.967487][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 294.995505][ T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 295.004813][ T24] usb 3-1: config 0 has no interface number 0 [ 295.011886][ T24] usb 3-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 295.038035][ T24] usb 3-1: config 0 interface 89 has no altsetting 0 [ 295.049261][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 295.064154][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.073570][ T24] usb 3-1: Product: syz [ 295.078648][ T24] usb 3-1: Manufacturer: syz [ 295.089766][ T24] usb 3-1: SerialNumber: syz [ 295.115422][ T24] usb 3-1: config 0 descriptor?? [ 295.471708][ T5917] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 295.645949][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 295.653428][ T5917] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.677063][ T5917] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.696933][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.697847][ T5917] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 295.706395][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.737586][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.747970][ T5917] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 295.753509][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.759065][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.782039][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.810263][ T5917] usb 5-1: config 0 descriptor?? [ 296.006344][ T9149] syzkaller0: entered promiscuous mode [ 296.012347][ T9149] syzkaller0: entered allmulticast mode [ 296.052790][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.063721][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.133610][ T5917] usbhid 5-1:0.0: can't add hid device: -71 [ 296.142144][ T5917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 296.156432][ T5917] usb 5-1: USB disconnect, device number 52 [ 296.581640][ T5903] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 296.690152][ T9162] netlink: 'syz.4.865': attribute type 11 has an invalid length. [ 296.698957][ T9162] __nla_validate_parse: 1 callbacks suppressed [ 296.698976][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 296.717097][ T9162] netlink: 'syz.4.865': attribute type 11 has an invalid length. [ 296.727995][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 296.740042][ T5903] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 296.754376][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.766231][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.776820][ T5903] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 296.790652][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 296.797799][ T5903] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 296.807895][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.825662][ T5903] usb 6-1: config 0 descriptor?? [ 297.421685][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.431316][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.448194][ T5903] ryos 0003:1E7D:3138.0015: ignoring exceeding usage max [ 297.466097][ T5903] ryos 0003:1E7D:3138.0015: unbalanced delimiter at end of report description [ 297.492287][ T5903] ryos 0003:1E7D:3138.0015: parse failed [ 297.507250][ T5903] ryos 0003:1E7D:3138.0015: probe with driver ryos failed with error -22 [ 297.649588][ T797] usb 6-1: USB disconnect, device number 27 [ 297.838883][ T24] usb 3-1: USB disconnect, device number 54 [ 297.941867][ T9179] input: syz0 as /devices/virtual/input/input34 [ 298.341541][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 298.521548][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 298.528924][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.540873][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.553178][ T9192] blktrace: Concurrent blktraces are not allowed on loop4 [ 298.581543][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 298.596502][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.615101][ T24] usb 3-1: config 0 descriptor?? [ 299.574379][ T9198] netlink: 236 bytes leftover after parsing attributes in process `syz.3.873'. [ 299.651832][ T9198] netlink: 236 bytes leftover after parsing attributes in process `syz.3.873'. [ 299.909647][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 299.934119][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 300.016987][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 300.051859][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 300.072444][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 300.097403][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 300.258801][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.300365][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.956702][ T797] usb 3-1: USB disconnect, device number 55 [ 301.136985][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.208180][ T9223] netlink: 'syz.5.882': attribute type 6 has an invalid length. [ 301.221929][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.261161][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.271156][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.284011][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.300377][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.718364][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.789952][ T797] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 301.850663][ T5917] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 302.259322][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.319613][ T9244] __nla_validate_parse: 3 callbacks suppressed [ 302.319636][ T9244] netlink: 32 bytes leftover after parsing attributes in process `syz.5.889'. [ 302.319723][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.5.889'. [ 302.411691][ T797] usb 1-1: device descriptor read/64, error -71 [ 302.418347][ T5889] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 302.430397][ T9247] loop2: detected capacity change from 0 to 7 [ 302.440926][ T9247] Dev loop2: unable to read RDB block 7 [ 302.456769][ T5917] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 302.467509][ T9247] loop2: unable to read partition table [ 302.471666][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.496312][ T9247] loop2: partition table beyond EOD, truncated [ 302.508893][ T5917] usb 5-1: Product: syz [ 302.511285][ T9247] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 302.531715][ T5917] usb 5-1: Manufacturer: syz [ 302.536485][ T5917] usb 5-1: SerialNumber: syz [ 302.551869][ T5889] usb 6-1: device descriptor read/64, error -71 [ 302.584781][ T5917] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 302.651120][ T5932] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 302.671531][ T797] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 302.801643][ T5889] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 302.841791][ T797] usb 1-1: device descriptor read/64, error -71 [ 302.953121][ T5889] usb 6-1: device descriptor read/64, error -71 [ 302.972463][ T797] usb usb1-port1: attempt power cycle [ 303.071068][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.083051][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.092811][ T5889] usb usb6-port1: attempt power cycle [ 303.118823][ T5917] usb 5-1: USB disconnect, device number 53 [ 303.223248][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.254642][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.341548][ T797] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 303.372153][ T797] usb 1-1: device descriptor read/8, error -71 [ 303.457199][ T5889] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 303.477693][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.487010][ T5889] usb 6-1: device descriptor read/8, error -71 [ 303.488545][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.574293][ T9263] fuse: Bad value for 'fd' [ 303.621723][ T797] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 303.643882][ T797] usb 1-1: device descriptor read/8, error -71 [ 303.751524][ T5889] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 303.759670][ T797] usb usb1-port1: unable to enumerate USB device [ 303.771558][ T5932] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 303.784764][ T5932] ath9k_htc: Failed to initialize the device [ 303.795262][ T5889] usb 6-1: device descriptor read/8, error -71 [ 303.814959][ T5917] usb 5-1: ath9k_htc: USB layer deinitialized [ 303.922708][ T5889] usb usb6-port1: unable to enumerate USB device [ 304.044165][ T9279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.900'. [ 304.061132][ T9280] input: syz0 as /devices/virtual/input/input35 [ 304.123955][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.901'. [ 304.298010][ T5917] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 304.465363][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 304.500275][ T5917] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 304.533814][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.546025][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 304.562187][ T5917] usb 5-1: SerialNumber: syz [ 304.570404][ T5917] usb 5-1: config 0 descriptor?? [ 304.576861][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.594664][ T5917] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 304.605851][ T5917] usb 5-1: Detected FT232A [ 304.613671][ T5917] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 304.648431][ T9298] netlink: 'syz.2.904': attribute type 6 has an invalid length. [ 304.657827][ T9298] netlink: 'syz.2.904': attribute type 7 has an invalid length. [ 304.666210][ T9298] netlink: 'syz.2.904': attribute type 8 has an invalid length. [ 304.676726][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 304.686846][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 304.805689][ T5917] usb 5-1: USB disconnect, device number 54 [ 304.845321][ T5889] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 304.865329][ T5917] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 304.912948][ T5917] ftdi_sio 5-1:0.0: device disconnected [ 305.011520][ T5903] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 305.011519][ T5889] usb 1-1: device descriptor read/64, error -71 [ 305.177163][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.242647][ T5903] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.265189][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.289687][ T5889] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 305.391667][ T5903] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 305.431586][ T5889] usb 1-1: device descriptor read/64, error -71 [ 305.482325][ T5903] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 305.505009][ T5903] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 305.537422][ T5903] usb 3-1: Product: syz [ 305.552903][ T5903] usb 3-1: Manufacturer: syz [ 305.621357][ T5889] usb usb1-port1: attempt power cycle [ 305.822319][ T9313] netlink: 48 bytes leftover after parsing attributes in process `syz.4.907'. [ 305.831616][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 305.901038][ T9313] bond3: option xmit_hash_policy: invalid value (12) [ 305.911551][ T5903] usb 3-1: SerialNumber: syz [ 305.936618][ T9313] bond3 (unregistering): Released all slaves [ 306.418476][ T5889] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 306.450832][ T5903] usb 3-1: config 0 descriptor?? [ 306.457396][ T5889] usb 1-1: device descriptor read/8, error -71 [ 306.497263][ T5903] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 306.516461][ T5903] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 306.555271][ T5903] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 306.688704][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.908'. [ 306.691829][ T5889] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 306.744402][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.908'. [ 306.757816][ T5889] usb 1-1: device descriptor read/8, error -71 [ 306.873997][ T5889] usb usb1-port1: unable to enumerate USB device [ 307.063311][ T5889] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 307.203589][ T5889] usb 5-1: device descriptor read/64, error -71 [ 307.442024][ T5889] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 307.604636][ T5889] usb 5-1: device descriptor read/64, error -71 [ 307.723862][ T5889] usb usb5-port1: attempt power cycle [ 307.751804][ T797] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 307.783145][ T9338] netlink: 84 bytes leftover after parsing attributes in process `syz.0.910'. [ 307.829049][ T9342] netlink: 'syz.3.911': attribute type 3 has an invalid length. [ 307.838946][ T9338] loop2: detected capacity change from 0 to 7 [ 307.858937][ T9338] Dev loop2: unable to read RDB block 7 [ 307.868211][ T9338] loop2: unable to read partition table [ 307.877831][ T9338] loop2: partition table beyond EOD, truncated [ 307.887694][ T9338] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 307.912134][ T797] usb 6-1: Using ep0 maxpacket: 16 [ 307.936271][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.971477][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.002588][ T5932] usb 3-1: USB disconnect, device number 56 [ 308.034689][ T797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 308.089030][ T797] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 308.126915][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.137602][ T5889] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 308.168184][ T9350] netlink: 68 bytes leftover after parsing attributes in process `syz.3.913'. [ 308.176337][ T797] usb 6-1: config 0 descriptor?? [ 308.203927][ T5889] usb 5-1: device descriptor read/8, error -71 [ 308.423006][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.435262][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.541801][ T5932] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 308.583296][ T5889] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 308.614411][ T5889] usb 5-1: device descriptor read/8, error -71 [ 308.665853][ T797] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 308.685726][ T797] microsoft 0003:045E:07DA.0017: no inputs found [ 308.708054][ T797] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 308.727698][ T5932] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.738615][ T5889] usb usb5-port1: unable to enumerate USB device [ 308.747939][ T5932] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 308.775255][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.856696][ T5932] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 308.868629][ T1166] usb 6-1: USB disconnect, device number 32 [ 308.923430][ T9369] fido_id[9369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 309.073070][ T5903] usb 1-1: USB disconnect, device number 81 [ 309.474619][ T9381] net veth1_virt_wifi ,: renamed from virt_wifi0 [ 309.529407][ T5827] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 309.553017][ T9383] netlink: 830 bytes leftover after parsing attributes in process `syz.3.916'. [ 309.648231][ T9381] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.916'. [ 309.827487][ T9381] bridge_slave_1: default FDB implementation only supports local addresses [ 310.002095][ T9381] ip6gre1: entered allmulticast mode [ 310.261703][ T1166] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 310.431713][ T1166] usb 6-1: Using ep0 maxpacket: 8 [ 310.452519][ T1166] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 310.461590][ T1166] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.576993][ T1166] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.594160][ T1166] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.606213][ T1166] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.620983][ T1166] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 310.641231][ T1166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.966955][ T1166] usb 6-1: usb_control_msg returned -32 [ 310.988154][ T1166] usbtmc 6-1:16.0: can't read capabilities [ 311.327361][ T9435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.925'. [ 311.337156][ T9435] netlink: 64 bytes leftover after parsing attributes in process `syz.0.925'. [ 311.403476][ T9393] usbtmc 6-1:16.0: control status returned 0 [ 311.457704][ T9439] Cannot find del_set index 4 as target [ 311.998187][ T9445] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.928'. [ 312.009359][ T9445] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.928'. [ 312.056685][ T9448] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 312.869212][ T9455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.909694][ T9455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.071591][ T5932] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 313.286714][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 313.321555][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 313.341177][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.406073][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.441834][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 313.474069][ T5932] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 313.505903][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.566151][ T5932] usb 3-1: Product: syz [ 313.566942][ T9462] syzkaller0: entered promiscuous mode [ 313.571038][ T5932] usb 3-1: Manufacturer: syz [ 313.612664][ T5932] usb 3-1: SerialNumber: syz [ 313.615565][ T5903] usb 6-1: USB disconnect, device number 33 [ 313.632871][ T5932] usb 3-1: config 0 descriptor?? [ 313.638144][ T9462] syzkaller0: entered allmulticast mode [ 313.654521][ T5932] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 313.691248][ T9468] binder: BINDER_SET_CONTEXT_MGR already set [ 313.718139][ T9468] binder: 9467:9468 ioctl 4018620d 200000004a80 returned -16 [ 313.833306][ T9472] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 313.853923][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.893936][ T9474] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 313.923651][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.952781][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.981248][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.041810][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.051126][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.151845][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.160906][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.286691][ T9453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.331943][ T9453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.450326][ T9487] pim6reg: entered allmulticast mode [ 314.467565][ T9487] pim6reg: left allmulticast mode [ 314.741604][ T5932] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 314.929899][ T5932] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 315.080703][ T5932] usb 1-1: New USB device found, idVendor=0582, idProduct=001d, bcdDevice= 0.40 [ 315.090467][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.100018][ T5932] usb 1-1: Product: 洳ቹ鱇ꊩ粸꿍퇦ἑ䶟俴烾㾌㑬ሦ⵶鷩ሒᐮ䍤綀컟奜벖庡檶洟흯趮⩁笱ꚰ໱ꔌᮽ岦Ṋ法뒩㫶䴃닇ট缕㚥缂胄鳦桁跷㉥㠈討罟蜙 [ 315.231481][ T5932] usb 1-1: Manufacturer: Г [ 315.266316][ T5932] usb 1-1: SerialNumber: 譯쮠皡쯲낭‴쁾ߘ鳄ꗼ㦲㯅쑮췆줜ꀦ℻眖⃝﮿闡䑻딙㺃ή䝙捭띑鲂ᗘ뚋ퟕ왇閭䵍朌췹恚缼緷ᜫ㒜ے㓹텤ྊⳮ㷉멮䷢矎㯤允둿팩闂멅㻫衭妯싌뽤揫Ვ᷼깴馝瑝罕鸾ﶏ嚉莠釹ⱝ㫪熘ኬ댅ﾈ㍶곛菇꥙鞆텥쥇⃁ˑ [ 315.653671][ T5932] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.692659][ T5932] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 315.783892][ T5932] usb 1-1: USB disconnect, device number 82 [ 315.851525][ T797] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 315.906789][ T5889] usb 3-1: USB disconnect, device number 57 [ 315.996059][ T797] usb 5-1: device descriptor read/64, error -71 [ 316.311884][ T797] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 316.324817][ T9526] loop8: detected capacity change from 0 to 8 [ 316.348432][ T9526] Dev loop8: unable to read RDB block 8 [ 316.374672][ T9526] loop8: unable to read partition table [ 316.398954][ T9526] loop8: partition table beyond EOD, truncated [ 316.428917][ T9526] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 316.472424][ T797] usb 5-1: device descriptor read/64, error -71 [ 316.483987][ T9532] syzkaller0: entered promiscuous mode [ 316.489560][ T9532] syzkaller0: entered allmulticast mode [ 316.585954][ T797] usb usb5-port1: attempt power cycle [ 316.958521][ T797] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 317.022681][ T797] usb 5-1: device descriptor read/8, error -71 [ 317.547227][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.554265][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.831565][ T797] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 317.863299][ T797] usb 5-1: device descriptor read/8, error -71 [ 318.055807][ T797] usb usb5-port1: unable to enumerate USB device [ 318.391194][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 318.391216][ T29] audit: type=1326 audit(1773175951.482:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9571 comm="syz.3.953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b4759c799 code=0x0 [ 318.437021][ T9573] fuse: Unknown parameter 'rtm\0ҁb1)Dpode' [ 319.707274][ T9618] syzkaller0: entered promiscuous mode [ 319.725399][ T9618] syzkaller0: entered allmulticast mode [ 319.951732][ T797] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 320.110147][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 320.125180][ T797] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 320.141756][ T797] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 320.167244][ T797] usb 3-1: config 162 has no interface number 0 [ 320.173953][ T797] usb 3-1: config 162 has no interface number 1 [ 320.180412][ T797] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 320.194470][ T797] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 320.221706][ T797] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 320.234570][ T797] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 320.279626][ T797] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 320.292354][ T797] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 320.306858][ T797] usb 3-1: config 162 interface 84 has no altsetting 0 [ 320.314697][ T797] usb 3-1: config 162 interface 2 has no altsetting 0 [ 320.323542][ T797] usb 3-1: config 162 interface 3 has no altsetting 0 [ 320.333674][ T797] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 320.353697][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.372507][ T797] usb 3-1: Product: syz [ 320.376938][ T797] usb 3-1: Manufacturer: syz [ 320.382117][ T797] usb 3-1: SerialNumber: syz [ 320.727500][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 320.747931][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 320.837371][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 320.883360][ T797] usb 3-1: USB disconnect, device number 58 [ 323.016410][ T9649] neZdevsim0: renamed from gre0 (while UP) [ 323.025467][ T9649] neZdevsim0: entered allmulticast mode [ 323.032158][ T9649] A link change request failed with some changes committed already. Interface neZdevsim0 may have been left with an inconsistent configuration, please check. [ 323.059984][ T9650] A link change request failed with some changes committed already. Interface neZdevsim0 may have been left with an inconsistent configuration, please check. [ 323.129034][ T9658] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 323.210721][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 323.356094][ T9670] fuse: Bad value for 'fd' [ 323.534451][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.628914][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.951562][ T1166] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 324.121547][ T1166] usb 1-1: Invalid ep0 maxpacket: 64 [ 324.253895][ T1166] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 324.399656][ T9684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.441796][ T1166] usb 1-1: Invalid ep0 maxpacket: 64 [ 324.468050][ T1166] usb usb1-port1: attempt power cycle [ 324.824539][ T1166] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 324.852139][ T9703] macsec1: entered promiscuous mode [ 324.857632][ T9703] bridge0: entered promiscuous mode [ 324.874409][ T9703] macsec1: entered allmulticast mode [ 324.879858][ T9703] bridge0: entered allmulticast mode [ 324.908545][ T9703] bridge0: port 3(macsec1) entered blocking state [ 324.916882][ T1166] usb 1-1: Invalid ep0 maxpacket: 64 [ 324.959088][ T9703] bridge0: port 3(macsec1) entered disabled state [ 325.067034][ T1166] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 325.110332][ T9703] bridge0: left allmulticast mode [ 325.125857][ T1166] usb 1-1: Invalid ep0 maxpacket: 64 [ 325.132580][ T1166] usb usb1-port1: unable to enumerate USB device [ 325.142379][ T9703] bridge0: left promiscuous mode [ 325.391767][ T1166] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 325.591616][ T1166] usb 5-1: device descriptor read/64, error -71 [ 325.864112][ T1166] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 326.023588][ T1166] usb 5-1: device descriptor read/64, error -71 [ 326.162371][ T1166] usb usb5-port1: attempt power cycle [ 326.219528][ T9732] ip6t_srh: unknown srh invflags 4000 [ 326.226573][ T797] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 326.408837][ T9735] syz_tun: entered allmulticast mode [ 326.456442][ T797] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 326.466376][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.479824][ T797] usb 6-1: Product: syz [ 326.487311][ T797] usb 6-1: Manufacturer: syz [ 326.498097][ T797] usb 6-1: SerialNumber: syz [ 326.527440][ T1166] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 326.535968][ T797] usb 6-1: config 0 descriptor?? [ 326.553217][ T1166] usb 5-1: device descriptor read/8, error -71 [ 326.651663][ T5903] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 326.791795][ T1166] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 326.806578][ T797] usb 6-1: USB disconnect, device number 34 [ 326.817042][ T5903] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 326.834096][ T1166] usb 5-1: device descriptor read/8, error -71 [ 326.856517][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.889300][ T5903] usb 3-1: config 0 has no interface number 0 [ 326.943335][ T5903] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 326.972287][ T1166] usb usb5-port1: unable to enumerate USB device [ 326.991744][ T5903] usb 3-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.027052][ T5903] usb 3-1: config 0 interface 2 has no altsetting 0 [ 327.046724][ T5903] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 327.066430][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.095690][ T5903] usb 3-1: Product: syz [ 327.107840][ T5903] usb 3-1: Manufacturer: syz [ 327.120185][ T5903] usb 3-1: SerialNumber: syz [ 327.136507][ T5903] usb 3-1: config 0 descriptor?? [ 327.152443][ T9735] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 327.371825][ T9735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.988'. [ 327.383450][ T9734] syz_tun: left allmulticast mode [ 327.384384][ T5903] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.399301][ T5903] usb 3-1: invalid MIDI in EP 0 [ 327.484660][ T5903] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 327.503072][ T5903] usb 3-1: USB disconnect, device number 59 [ 327.549100][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.663376][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 328.150700][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 328.775955][ T9781] ip6t_srh: unknown srh invflags 4000 [ 329.257249][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 329.269491][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 329.325671][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 329.336205][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 329.355532][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 329.374772][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 329.401646][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 330.261704][ T5889] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 330.427658][ T5889] usb 3-1: device descriptor read/64, error -71 [ 330.541227][ T9804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.702109][ T5889] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 330.748137][ T9810] binder: 9805:9810 ioctl c0306201 0 returned -14 [ 330.911514][ T5889] usb 3-1: device descriptor read/64, error -71 [ 331.031960][ T5889] usb usb3-port1: attempt power cycle [ 331.380452][ T9810] syz.0.1009 (9810): drop_caches: 2 [ 331.431689][ T5889] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 331.523063][ T5889] usb 3-1: device descriptor read/8, error -71 [ 331.621052][ T9829] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 331.841568][ T5889] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 332.261539][ T5889] usb 3-1: device descriptor read/8, error -71 [ 332.292308][ T9834] erspan1: entered allmulticast mode [ 332.372550][ T5889] usb usb3-port1: unable to enumerate USB device [ 332.451519][ T5932] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 332.641555][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 332.669630][ T5932] usb 6-1: config 0 has no interfaces? [ 332.738703][ T5932] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 332.759628][ T5932] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 332.774468][ T9830] erspan1: entered allmulticast mode [ 332.782985][ T5932] usb 6-1: Manufacturer: syz [ 332.789771][ T5932] usb 6-1: config 0 descriptor?? [ 332.871170][ T9829] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 333.152068][ T9826] __nla_validate_parse: 3 callbacks suppressed [ 333.152091][ T9826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1014'. [ 333.221534][ T5932] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 333.459036][ T9844] syzkaller0: entered promiscuous mode [ 333.487284][ T9844] syzkaller0: entered allmulticast mode [ 333.508238][ T29] audit: type=1326 audit(1773175966.602:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4759c799 code=0x7ffc0000 [ 333.558171][ T29] audit: type=1326 audit(1773175966.602:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4759c799 code=0x7ffc0000 [ 333.595587][ T29] audit: type=1326 audit(1773175966.602:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4759c799 code=0x7ffc0000 [ 333.634249][ T5932] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 333.644317][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.660061][ T5932] usb 1-1: Product: syz [ 333.672429][ T29] audit: type=1326 audit(1773175966.602:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b4759c799 code=0x7ffc0000 [ 333.710946][ T5932] usb 1-1: Manufacturer: syz [ 333.742233][ T5932] usb 1-1: SerialNumber: syz [ 333.772250][ T5932] usb 1-1: config 0 descriptor?? [ 333.793942][ T29] audit: type=1326 audit(1773175966.602:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4759c799 code=0x7ffc0000 [ 334.041566][ T5932] peak_usb 1-1:0.0: PEAK-System PCAN-USB FD v19 fw v105.191.11 (1 channels) [ 334.050824][ T29] audit: type=1326 audit(1773175966.632:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.3.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b4759c799 code=0x7ffc0000 [ 334.146021][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.169383][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.203251][ T9855] [U] V3Fپ"S/4:XTZWTLW= [ 334.229673][ T5932] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 334.238280][ T5932] peak_usb 1-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 334.514547][ T5932] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 334.584577][ T5932] usb 1-1: USB disconnect, device number 87 [ 334.832755][ T9862] bond3 (unregistering): Released all slaves [ 335.059787][ T9850] [U] J"E:" [ 335.188466][ T1166] usb 6-1: USB disconnect, device number 35 [ 335.381625][ T5911] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 335.501701][ T9879] openvswitch: netlink: Key 4 has unexpected len 2 expected 12 [ 335.551632][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 335.567847][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.617311][ T5911] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 335.639884][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.675745][ T5911] usb 1-1: config 0 descriptor?? [ 335.702970][ T5911] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 335.958820][ T9889] sg_write: data in/out 155612/57 bytes for SCSI command 0x0-- guessing data in; [ 335.958820][ T9889] program syz.3.1032 not setting count and/or reply_len properly [ 336.561080][ T5911] gspca_vc032x: reg_r err -71 [ 336.567392][ T5911] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 336.604210][ T5911] usb 1-1: USB disconnect, device number 88 [ 336.742197][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 336.852791][ T1166] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 337.042148][ T1166] usb 5-1: Using ep0 maxpacket: 16 [ 337.056405][ T1166] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.067991][ T1166] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.084377][ T1166] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 337.111619][ T5911] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 337.170327][ T1166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.211762][ T1166] usb 5-1: Product: syz [ 337.216363][ T1166] usb 5-1: Manufacturer: syz [ 337.221107][ T1166] usb 5-1: SerialNumber: syz [ 337.266525][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 337.282498][ T1166] usb 5-1: config 0 descriptor?? [ 337.309477][ T1166] appledisplay 5-1:0.0: Could not find int-in endpoint [ 337.317639][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 337.333312][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 337.344310][ T1166] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 337.393700][ T29] audit: type=1804 audit(1773175970.482:495): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1037" name="bus" dev="ramfs" ino=32309 res=1 errno=0 [ 337.422574][ T5911] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 337.448650][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.461480][ T5911] usb 3-1: Product: syz [ 337.482261][ T5911] usb 3-1: Manufacturer: syz [ 337.499243][ T5911] usb 3-1: SerialNumber: syz [ 337.520289][ T5932] usb 5-1: USB disconnect, device number 67 [ 337.548085][ T5911] usb 3-1: config 0 descriptor?? [ 337.571191][ T5911] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 337.598204][ T5911] dvb-usb: bulk message failed: -22 (4/0) [ 337.611563][ T5911] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 337.626880][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 337.638402][ T5911] dvb-usb: bulk message failed: -22 (5/0) [ 337.654694][ T9915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1039'. [ 337.665691][ T5911] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 337.707368][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.737045][ T5911] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 337.748663][ T5911] usb 3-1: media controller created [ 337.770137][ T9905] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 337.784465][ T9905] dvb-usb: bulk message failed: -22 (7/0) [ 337.800064][ T9905] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 337.815722][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.826204][ T9905] ttusb2: i2c transfer failed. [ 337.848823][ T5911] usb 3-1: selecting invalid altsetting 3 [ 337.859231][ T5911] ttusb2: set interface to alts=3 failed [ 337.914942][ T9925] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 337.971598][ T5911] DVB: Unable to find symbol tda10086_attach() [ 337.996544][ T5911] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 338.020229][ T5911] dvb-usb: bulk message failed: -22 (4/0) [ 338.040298][ T5911] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 338.042553][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1042'. [ 338.069504][ T5911] dvb-usb: bulk message failed: -22 (5/0) [ 338.083758][ T5911] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 338.111756][ T5911] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 338.141934][ T5911] usb 3-1: USB disconnect, device number 64 [ 338.212880][ T43] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 338.243758][ T5911] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 338.325679][ T9936] bridge2: entered promiscuous mode [ 338.357494][ T9940] loop8: detected capacity change from 0 to 8 [ 338.366435][ T9940] Dev loop8: unable to read RDB block 8 [ 338.373017][ T9940] loop8: unable to read partition table [ 338.379397][ T9940] loop8: partition table beyond EOD, truncated [ 338.386617][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 338.394257][ T9940] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 338.425716][ T43] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 338.435345][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.451995][ T43] usb 6-1: Product: syz [ 338.456339][ T43] usb 6-1: Manufacturer: syz [ 338.461016][ T43] usb 6-1: SerialNumber: syz [ 338.472264][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1047'. [ 338.496671][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1047'. [ 338.496713][ T43] usb 6-1: config 0 descriptor?? [ 338.524158][ T43] gspca_main: se401-2.14.0 probing 047d:5003 [ 338.531559][ T5932] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 338.550177][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 338.560438][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 338.570466][ T5911] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 338.625347][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.636602][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.673464][ T9944] netlink: 'syz.3.1048': attribute type 11 has an invalid length. [ 338.692052][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 338.703203][ T5932] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 338.717314][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.728724][ T5932] usb 5-1: Product: syz [ 338.735636][ T5932] usb 5-1: Manufacturer: syz [ 338.738816][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.743324][ T5932] usb 5-1: SerialNumber: syz [ 338.764932][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.796296][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 338.838238][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.874937][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.897251][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 338.938446][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.955743][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.970514][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.982338][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.005606][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.020596][ T43] gspca_se401: Too many frame sizes [ 339.028019][ T5932] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 339.038086][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.052932][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.063420][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.088319][ T5932] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 339.094878][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.124522][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.137741][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.138735][ T5932] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 339.155091][ T5911] usb 3-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 339.170552][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.179768][ T5932] usb 5-1: media controller created [ 339.185485][ T5889] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 339.196451][ T9938] ------------[ cut here ]------------ [ 339.196451][ T5911] usb 3-1: config 0 descriptor?? [ 339.207662][ T9938] usb 5-1: BOGUS control dir, pipe 80004480 doesn't match bRequestType c0 [ 339.216522][ T9938] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.4.1044/9938 [ 339.227647][ T9938] Modules linked in: [ 339.232015][ T9938] CPU: 1 UID: 0 PID: 9938 Comm: syz.4.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.243072][ T9938] Tainted: [L]=SOFTLOCKUP [ 339.247580][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 339.258044][ T9938] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 339.264148][ T9938] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 339.284292][ T9938] RSP: 0018:ffffc900031a7608 EFLAGS: 00010246 [ 339.290529][ T9938] RAX: 0000000000000000 RBX: ffff88802b798400 RCX: 0000000080004480 [ 339.298796][ T9938] RDX: ffff888031193000 RSI: ffffffff8c7f03a0 RDI: ffffffff901ec440 [ 339.307002][ T9938] RBP: 1ffff11004259198 R08: 00000000000000c0 R09: 0000000000000000 [ 339.315299][ T9938] R10: ffffc900031a7700 R11: fffff52000634eec R12: ffff88806d9ab100 [ 339.323670][ T9938] R13: ffff8880212c8cc0 R14: 0000000080004480 R15: ffff888031193000 [ 339.331844][ T9938] FS: 00007fc94a5a46c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 339.341224][ T9938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.348818][ T9938] CR2: 000020000000c2c0 CR3: 000000004e5b8000 CR4: 00000000003526f0 [ 339.357988][ T9938] Call Trace: [ 339.361383][ T9938] [ 339.364725][ T9938] ? __init_swait_queue_head+0xa9/0x150 [ 339.371633][ T9938] usb_start_wait_urb+0x12b/0x510 [ 339.377140][ T9938] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 339.383735][ T9938] usb_control_msg+0x232/0x3e0 [ 339.388889][ T9938] gl861_ctrl_msg+0x207/0x420 [ 339.393800][ T9938] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 339.399333][ T9938] ? dql_completed+0x9f0/0xbf0 [ 339.404290][ T9938] ? format_decode+0xd0/0xe10 [ 339.409081][ T9938] ? kasan_save_track+0x4f/0x80 [ 339.414083][ T9938] ? kasan_save_track+0x3e/0x80 [ 339.419031][ T9938] gl861_i2c_master_xfer+0x439/0x6a0 [ 339.424460][ T9938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.430621][ T9938] __i2c_transfer+0x79a/0x2020 [ 339.435555][ T9938] __i2c_smbus_xfer+0xfca/0x1f70 [ 339.440833][ T9938] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 339.446728][ T9938] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.452414][ T9938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.458623][ T9938] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 339.464964][ T9938] i2c_smbus_xfer+0x1f4/0x310 [ 339.469980][ T9938] i2cdev_ioctl_smbus+0x1e7/0x730 [ 339.475975][ T9938] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 339.482013][ T9938] i2cdev_ioctl+0x615/0x880 [ 339.486786][ T9938] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 339.492156][ T9938] ? __fget_files+0x2a/0x420 [ 339.496894][ T9938] ? __fget_files+0x3a0/0x420 [ 339.501754][ T9938] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.506767][ T9938] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 339.512130][ T9938] __se_sys_ioctl+0xfc/0x170 [ 339.517043][ T9938] do_syscall_64+0x14d/0xf80 [ 339.522423][ T9938] ? trace_irq_disable+0x3b/0x150 [ 339.527559][ T9938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.533800][ T9938] ? clear_bhb_loop+0x40/0x90 [ 339.538629][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.544797][ T9938] RIP: 0033:0x7fc94979c799 [ 339.549287][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.569958][ T9938] RSP: 002b:00007fc94a5a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.579170][ T9938] RAX: ffffffffffffffda RBX: 00007fc949a16090 RCX: 00007fc94979c799 [ 339.587788][ T9938] RDX: 00002000000003c0 RSI: 0000000000000720 RDI: 0000000000000009 [ 339.596031][ T9938] RBP: 00007fc949832c99 R08: 0000000000000000 R09: 0000000000000000 [ 339.604239][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.612508][ T9938] R13: 00007fc949a16128 R14: 00007fc949a16090 R15: 00007fc949b3fa48 [ 339.621187][ T9938] [ 339.624400][ T9938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 339.631910][ T9938] CPU: 1 UID: 0 PID: 9938 Comm: syz.4.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.642810][ T9938] Tainted: [L]=SOFTLOCKUP [ 339.647251][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 339.657525][ T9938] Call Trace: [ 339.660989][ T9938] [ 339.664134][ T9938] vpanic+0x56c/0xa60 [ 339.668596][ T9938] ? __pfx__printk+0x10/0x10 [ 339.673418][ T9938] ? __pfx_vpanic+0x10/0x10 [ 339.678059][ T9938] ? is_bpf_text_address+0x292/0x2b0 [ 339.683608][ T9938] ? is_bpf_text_address+0x26/0x2b0 [ 339.689375][ T9938] panic+0xc5/0xd0 [ 339.693241][ T9938] ? __pfx_panic+0x10/0x10 [ 339.697900][ T9938] __warn+0x315/0x4f0 [ 339.702383][ T9938] ? usb_submit_urb+0x1052/0x18b0 [ 339.707552][ T9938] ? usb_submit_urb+0x1052/0x18b0 [ 339.712986][ T9938] __report_bug+0x29a/0x540 [ 339.717814][ T9938] ? usb_submit_urb+0x1052/0x18b0 [ 339.723168][ T9938] ? __pfx___report_bug+0x10/0x10 [ 339.728748][ T9938] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.734199][ T9938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.740513][ T9938] report_bug_entry+0x19a/0x290 [ 339.745438][ T9938] ? usb_submit_urb+0x1114/0x18b0 [ 339.750508][ T9938] ? usb_submit_urb+0x1119/0x18b0 [ 339.755572][ T9938] handle_bug+0xce/0x200 [ 339.760285][ T9938] exc_invalid_op+0x1a/0x50 [ 339.764818][ T9938] asm_exc_invalid_op+0x1a/0x20 [ 339.769798][ T9938] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 339.775477][ T9938] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 339.796343][ T9938] RSP: 0018:ffffc900031a7608 EFLAGS: 00010246 [ 339.802623][ T9938] RAX: 0000000000000000 RBX: ffff88802b798400 RCX: 0000000080004480 [ 339.811165][ T9938] RDX: ffff888031193000 RSI: ffffffff8c7f03a0 RDI: ffffffff901ec440 [ 339.819187][ T9938] RBP: 1ffff11004259198 R08: 00000000000000c0 R09: 0000000000000000 [ 339.827634][ T9938] R10: ffffc900031a7700 R11: fffff52000634eec R12: ffff88806d9ab100 [ 339.835912][ T9938] R13: ffff8880212c8cc0 R14: 0000000080004480 R15: ffff888031193000 [ 339.844046][ T9938] ? usb_submit_urb+0x10a3/0x18b0 [ 339.849124][ T9938] ? __init_swait_queue_head+0xa9/0x150 [ 339.854892][ T9938] usb_start_wait_urb+0x12b/0x510 [ 339.860077][ T9938] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 339.865687][ T9938] usb_control_msg+0x232/0x3e0 [ 339.870509][ T9938] gl861_ctrl_msg+0x207/0x420 [ 339.875406][ T9938] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 339.880678][ T9938] ? dql_completed+0x9f0/0xbf0 [ 339.885738][ T9938] ? format_decode+0xd0/0xe10 [ 339.890562][ T9938] ? kasan_save_track+0x4f/0x80 [ 339.895710][ T9938] ? kasan_save_track+0x3e/0x80 [ 339.900776][ T9938] gl861_i2c_master_xfer+0x439/0x6a0 [ 339.906356][ T9938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.912854][ T9938] __i2c_transfer+0x79a/0x2020 [ 339.917889][ T9938] __i2c_smbus_xfer+0xfca/0x1f70 [ 339.923123][ T9938] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 339.929602][ T9938] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.935314][ T9938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.941267][ T9938] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 339.947328][ T9938] i2c_smbus_xfer+0x1f4/0x310 [ 339.952240][ T9938] i2cdev_ioctl_smbus+0x1e7/0x730 [ 339.957698][ T9938] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 339.963492][ T9938] i2cdev_ioctl+0x615/0x880 [ 339.968301][ T9938] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 339.973474][ T9938] ? __fget_files+0x2a/0x420 [ 339.978133][ T9938] ? __fget_files+0x3a0/0x420 [ 339.983058][ T9938] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.988211][ T9938] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 339.993715][ T9938] __se_sys_ioctl+0xfc/0x170 [ 339.998495][ T9938] do_syscall_64+0x14d/0xf80 [ 340.003498][ T9938] ? trace_irq_disable+0x3b/0x150 [ 340.008739][ T9938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.015027][ T9938] ? clear_bhb_loop+0x40/0x90 [ 340.020100][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.026143][ T9938] RIP: 0033:0x7fc94979c799 [ 340.030791][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.051037][ T9938] RSP: 002b:00007fc94a5a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.059679][ T9938] RAX: ffffffffffffffda RBX: 00007fc949a16090 RCX: 00007fc94979c799 [ 340.067941][ T9938] RDX: 00002000000003c0 RSI: 0000000000000720 RDI: 0000000000000009 [ 340.076414][ T9938] RBP: 00007fc949832c99 R08: 0000000000000000 R09: 0000000000000000 [ 340.084542][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.093941][ T9938] R13: 00007fc949a16128 R14: 00007fc949a16090 R15: 00007fc949b3fa48 [ 340.102513][ T9938] [ 340.106553][ T9938] Kernel Offset: disabled [ 340.111308][ T9938] Rebooting in 86400 seconds..