last executing test programs: 11.482152848s ago: executing program 0 (id=1226): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) futex(0x0, 0x204, 0x2, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = syz_usbip_server_init(0x2) syz_usb_connect(0x1, 0x43, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f000000010902"], 0x0) (async) write$usbip_server(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x210) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="360fc3330f2172f2f775c9f00fb3050fc7b50000b8de000f00d80f48e5660f3a4154520064660ff63ef2b2660fea4e03", 0x30}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={'caif0\x00', @remote}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x7, 0x4, 0xc8, 0x5, 0x1a, "a4db78d7e051788b"}) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="c80000cba4139903000000000000000007000010ac000a80440002802c0001801400030000000000000000000000ffff6403010114000400ff01000000000000000000000000000106000340000400000c00028005000100210000000800014000000000380002800c00028005000100210000001400018008000100ac1e000108000200ac1414bb14000180080001007f00000108000200e00000011c0002800c000280050001003a0000000c000280050001002100000008000140005edcf2e900060000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) 5.630283634s ago: executing program 3 (id=1245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc02000000000000000000fdff000000ff010000000000000000000000000001ff020000000000000000000000000001fff1ffff0000000000000000000000006c010000000000000afd0afd2c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.491337884s ago: executing program 3 (id=1246): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002080)={'\x00', 0x0, 0x5, 0xc, 0x1, 0x8, 0x0}) write$FUSE_LK(r0, &(0x7f0000002100)={0x28, 0xffffffffffffffda, r1, {{0x5, 0x9, 0x0, r5}}}, 0x28) (async) syz_usb_connect$uac2(0x1, 0x106, &(0x7f0000002140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x403, 0xb8d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0xdd, 0x60, 0x6d, {0x8, 0xb, 0x2, 0x0, 0x1, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x5, 0x46, 0xc}, [@input_terminal={0x10, 0x24, 0x2, 0x6, 0x200, 0x2, 0x1, 0x0, 0xffffffc0, 0x81, 0x0, 0x8}, @source_unit={0x8, 0x24, 0xa, 0x93, 0x4, 0x9, 0x1, 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, [0x8, 0x3, 0x9]}, @selector_unit={0x6, 0x24, 0xb, 0xed, 0x1, "c2"}, @selector_unit={0xc, 0x24, 0xb, 0x4, 0x7, "a8d73ff00fecac"}, @source_unit={0x8, 0x24, 0xa, 0x81, 0x0, 0xfd, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0xb, 0xff, 0x6}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x9, 0x1, '<\a'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x3, 0x6, "a63aa52e2d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0xfd, 0x5, "", "87ef"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x4, 0x9, {0x8, 0x25, 0x1, 0x2, 0x173e844108f26ed1, 0x6, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x834, 0x9, 0xff, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0xfffd, 0x4, 0x5}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0x8b, 0xe, '7'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x7, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x3, 0x9, {0x8, 0x25, 0x1, 0x1, 0x0, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002280)={0xa, 0x6, 0x250, 0x81, 0xff, 0x7, 0x40, 0x1}, 0x12a, &(0x7f00000022c0)={0x5, 0xf, 0x12a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0xf, 0x851}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "29db70f49e84dede9cf72abadb8937c5"}, @ssp_cap={0x24, 0x10, 0xa, 0xf, 0x6, 0x8, 0x0, 0x4, [0x14000, 0xdceac55c39ea1668, 0xff3fcf, 0x30, 0xffff00, 0x3f0f]}, @generic={0xd3, 0x10, 0x3, "af7a3edc3e66af186b440806fe7310a2d5ba716b2762f2b213914bd6f099875c7e1bee9fc20f32892c49832961850b25c5eb0c5b48c0c108bdbc59599c33cbcb83b5c260f0ade9c452349e9a2ff754addf96cd5814d0ce5ca72f2cc6268019448dfa75fa846156e7347e1515cd7c9dae0d79d919aae7242661860505f00f50f0afc894006651d0b8dd2d3cf752e3e8e0e2416c5b11249a8f039d7ef626675a312b2d7938d9bb347b7f734cd4ddb41c8d59f4508f7b4442b5c91776bdbc06ab9d1030ab639a8ad388f117aabc596ff3de"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x9958, 0x0, 0x603, [0x30]}, @ptm_cap={0x3}]}, 0x1, [{0xf, &(0x7f0000002400)=@string={0xf, 0x3, "094be077286d6f86805c658e00"}}]}) (async) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000002480)={0x28, 0x2, 0x0, {0x6, 0x1, 0x5}}, 0x28) (async) r6 = geteuid() syz_fuse_handle_req(r0, &(0x7f00000024c0)="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", 0x2000, &(0x7f0000004ec0)={&(0x7f00000044c0)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x4, 0x400, 0x8001, 0x8, 0x9, 0x200, 0x0, 0x0, 0x2, 0x80000000}}, &(0x7f0000004540)={0x18, 0x0, 0xffffffffffffffff}, &(0x7f0000004580)={0x18, 0x0, 0x8000, {0x40}}, &(0x7f00000045c0)={0x18, 0x0, 0x36, {0x9}}, &(0x7f0000004600)={0x18, 0xfffffffffffffffe, 0x7, {0x2}}, &(0x7f0000004640)={0x28, 0x0, 0x2, {{0x6, 0x7fffffff, 0x2, r4}}}, &(0x7f0000004680)={0x60, 0x0, 0x7, {{0xfffffffffffffffe, 0x800, 0x6, 0x8b, 0x8000000000000000, 0x4, 0x7f, 0x9}}}, &(0x7f0000004700)={0x18, 0x0, 0x8b1c, {0x2}}, &(0x7f0000004740)={0x16, 0x0, 0x7, {'*-C\x9b^\x00'}}, &(0x7f0000004780)={0x20, 0x2f, 0xe, {0x0, 0x7}}, &(0x7f00000047c0)={0x78, 0x0, 0x1f47, {0x2, 0xfff, 0x0, {0x1, 0xba6f, 0x1ff, 0x7, 0x4, 0x9, 0x10000, 0xfffffffa, 0x8, 0x8000, 0x9df4, r2, r3, 0xc, 0x200}}}, &(0x7f0000004840)={0x90, 0xfffffffffffffffe, 0x4, {0x5, 0x1, 0x1, 0x8ff, 0x3, 0x0, {0x3, 0x4, 0x5, 0x1, 0x10000, 0x0, 0x5, 0x8, 0x9, 0x8000, 0x8, r2, r3, 0x4, 0x3}}}, &(0x7f0000004900)={0xa0, 0x0, 0x1, [{0x1, 0x5, 0xa, 0x3d, '/dev/fuse\x00'}, {0x1, 0x1ff, 0xa, 0x8, '/dev/fuse\x00'}, {0x6, 0x5, 0xa, 0x71, '*/M*![,\'\'#'}, {0x6, 0x8, 0x0, 0x3ff}]}, &(0x7f00000049c0)={0x298, 0x0, 0xffffffffffffff80, [{{0x6, 0x2, 0x11017079, 0x8, 0x378, 0x1, {0x0, 0x7, 0x101, 0x1000, 0x6772fd09, 0x2, 0x4, 0x8, 0x101, 0x4000, 0x800, r2, 0x0, 0x3}}, {0x2, 0x399, 0xb, 0x8, '[(\'$$[]-i\'&'}}, {{0x4, 0x0, 0xa, 0x8, 0xf, 0xfffffffa, {0x6, 0x800, 0x4, 0x9, 0x7, 0x7, 0x3, 0x3, 0x3, 0x6000, 0xfffffff8, r2, r3, 0x6028, 0x3}}, {0x0, 0x21c8, 0x5, 0x1, '%&)@,'}}, {{0x4, 0x2, 0xc, 0x3ff, 0x8000, 0xe, {0x1, 0xc, 0x0, 0xfffffffffffffffc, 0x10000, 0x9, 0x6, 0x8, 0x10, 0x2000, 0xf35, r2, r3, 0x2, 0x499}}, {0x3, 0x5, 0xa, 0x1, '/dev/fuse\x00'}}, {{0x0, 0x3, 0x7, 0x401, 0xfffffff9, 0xe2, {0x3, 0xff, 0x1, 0x5, 0x2e55, 0xfffffffffffffffc, 0x7f, 0x4, 0x6, 0x1000, 0x7, r2, r3, 0x1, 0x4}}, {0x4, 0x1}}]}, &(0x7f0000004c80)={0xa0, 0x0, 0x100000000, {{0x3, 0x3, 0x8000000000000001, 0x4, 0x78b, 0xc7af, {0x1, 0x4, 0x6, 0xfffffffffffffff9, 0x1, 0x8, 0x1, 0x67c5, 0x8, 0x6000, 0x3, r6, r3, 0x9, 0x3}}, {0x0, 0x10}}}, &(0x7f0000004d40)={0x20, 0xffffffffffffffda, 0x2, {0x7d, 0x0, 0x5, 0x3}}, &(0x7f0000004d80)={0x130, 0x0, 0x4e0e, {0x6f1a, 0x80000000, 0x0, '\x00', {0x1, 0x7f, 0x5, 0x80000000, r2, r3, 0xa000, '\x00', 0xfffffffffffffffb, 0x7fff, 0x4, 0x800, {0x7f35e629, 0x7}, {0x800}, {0x7, 0x100}, {0x400, 0x8}, 0x5, 0x2f7c, 0xd, 0x5}}}}) (async) r7 = getuid() (async) read$FUSE(r0, &(0x7f0000005000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r9 = getegid() statx(0xffffffffffffff9c, &(0x7f0000007040)='./file0\x00', 0x100, 0x400, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000004f80)='./file0\x00', &(0x7f0000004fc0)='system.posix_acl_access\x00', &(0x7f0000007180)={{}, {}, [{0x2, 0x4, r7}], {0x4, 0x4}, [{0x8, 0x2, r8}, {0x8, 0x2, r3}, {0x8, 0x6, r3}, {0x8, 0x3, r9}, {0x8, 0x2, r3}, {0x8, 0x7, r10}, {0x8, 0x1, r3}, {0x8, 0x2, r3}, {0x8, 0x1, r3}], {}, {0x20, 0x4}}, 0x74, 0x3) r11 = fanotify_init(0x2, 0x80000) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000007200)=0x200000) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000007240)=0x9) (async) r12 = signalfd(r11, &(0x7f0000007280)={[0x7]}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000007300)={'pim6reg\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000073c0)={&(0x7f00000072c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000007380)={&(0x7f0000007340)=@gettclass={0x24, 0x2a, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xa, 0xa}, {0xfff2, 0xfff1}, {0x6, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c810}, 0x20008800) (async) ioctl$UFFDIO_UNREGISTER(r12, 0x8010aa01, &(0x7f0000007400)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r12, 0xc4c85513, &(0x7f0000007440)={{0xa, 0x6, 0x3, 0x8, '\x00', 0x4}, 0x1, [0xff, 0x8001, 0x4, 0x5, 0x6, 0x8, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xcc, 0x9, 0x101, 0x8, 0x4, 0x10, 0x5, 0x0, 0x5, 0x82d, 0x0, 0x2, 0x37d, 0x8001, 0xfffffffffffffffb, 0x1, 0x1, 0x2, 0x4000000000000000, 0x6, 0x9, 0xdc, 0xffffffff, 0x1, 0x9, 0x5, 0x1b, 0x2, 0x9, 0x0, 0x9, 0x4, 0x4, 0xfffffffffffffdce, 0x5, 0x3, 0x1, 0x200, 0x1ff, 0x4, 0x5, 0x7, 0x1000000, 0x48, 0x100, 0xd, 0xc, 0x7ff, 0x4, 0x3, 0x81, 0x7ff, 0xffffffffffffffff, 0xffffffff80000000, 0x9, 0x9, 0x100000000, 0x2, 0xcb, 0x800, 0x80000001, 0x43f6, 0x7, 0x4, 0x5, 0x80000001, 0x100, 0x800, 0xa565, 0x6, 0x1ff, 0xee3, 0xe0b, 0x1, 0x3, 0x4, 0x1, 0x400, 0xab, 0x9, 0x6, 0x9, 0x8, 0x9, 0x7, 0x3a, 0x10000, 0xd, 0x10, 0x1, 0x7, 0x7, 0x6, 0x4, 0x4, 0x0, 0x3, 0x3, 0xffffffffffffffd4, 0x7d9, 0x5, 0x3, 0x4800000000000000, 0x5, 0x9, 0x9, 0x3bfc, 0x0, 0x3, 0x7ff, 0x3ff, 0x10, 0x2, 0x4, 0x8, 0x3]}) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet6(r0, &(0x7f0000007940)={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000007980)={0x0, 0x3, 0x18}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f00000079c0)={r12, r14}, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r12, 0x28, 0x1, &(0x7f0000007a00)=0x2, 0x8) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000007a40), 0x200, 0x0) (async) read$FUSE(r12, &(0x7f0000007a80)={0x2020, 0x0, 0x0}, 0x2020) (async) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000009ac0)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000009bc0)=0xe8) write$FUSE_ATTR(r0, &(0x7f0000009c00)={0x78, 0x0, r15, {0x2, 0x0, 0x0, {0x6, 0x9, 0x5, 0x2, 0x2, 0xfff, 0x2, 0x2990, 0xffffff01, 0x8000, 0xdf4, r16, r3, 0x4, 0x7}}}, 0x78) 5.109832816s ago: executing program 4 (id=1250): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) fsopen(&(0x7f0000000740)='autofs\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0xf2, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @empty, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x9, 0xb, "d7d8b17286d6f978c91283f86c9a2fd0bf5cdafa659944339b6cb3fe8ffb9c1628928c8ed6b133a8e6f9f74b193b5b0f2a312c24d1834552ebd3ed9f8bc6fd4c654c8f53b5a241481916bc3d6f0ca6518e96f8383dc8fb750d227f20da8d851b87a25d7eb3bad8efb28fb591d570cbc6e427e21514e84b2cbe30c80d2f642aa72b4ae9e3cc77fb7996b98e5aad06a7c56e063ac1d8018ab355d213f4b73b37316ab5c89be66654336ab608e0f08dea7f77e6fcaa87b4a66ebd2f9a5ce85a40fe58e0285525caf7fb570108bf7bc99de56fa17b833ff409106b"}}}}, &(0x7f00000005c0)={0x1, 0x4, [0x94f, 0xa95, 0xbad, 0x444]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 5.089623024s ago: executing program 1 (id=1251): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x149e03) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x6, 0x4, 0x3008, 0x0, 0xc, 0x2, 0x2, 0x6}}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, 0xee01, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x7, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') r5 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010"], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="050006"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount_setattr(r4, &(0x7f0000000180)='./file0\x00', 0x1000, &(0x7f0000000240)={0x83, 0x48, 0x1c0000, {r5}}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "7f"}]}], {0x14}}, 0x70}}, 0x4004004) 5.012207141s ago: executing program 0 (id=1252): mq_open(&(0x7f00000004c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x40, 0x10a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xf}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0x8}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r7 = socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x9200000000000000) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000340)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="0503222ed3fc1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x14, 0x0) mq_notify(r9, &(0x7f0000000240)={0x0, 0x3, 0x2, @thr={0x0, 0x0}}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) bind$inet6(r10, 0x0, 0x0) 4.926087397s ago: executing program 1 (id=1253): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001500010328bd7000fbd3dbdf250c0000000c00040000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="040025bdb323b9ad4067ec17af53acd72f90", @ANYRES32=r3, @ANYBLOB="0800ef00090000000800ef000e0000000500ee00040000000500ee0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0xb, 0x8000000000000000, 0x8, 0x3, 0x1000, 0x2, 0x1002, 0xc, 0x87fffffffffffffd, 0x9, 0xfffffffffffffffe, 0x2371, 0x400008bd8, 0x7, 0x3fb, 0x208], 0x25000, 0x384557}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0xb, 0x8000000000000000, 0x8, 0x3, 0x1000, 0x2, 0x1002, 0xc, 0x87fffffffffffffd, 0x9, 0xfffffffffffffffe, 0x2371, 0x400008bd8, 0x7, 0x3fb, 0x208], 0x25000, 0x384557}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.851435835s ago: executing program 0 (id=1254): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x77, 0x7, 0xffffffff, 0x3, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x64, 0x0, 0x10, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}}}}}) ioctl$TIOCGSID(r4, 0x5429, 0x0) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000500)={0xe, {0x8, 0x0, 0x7, 0x8b, "6c0dd4f9b95729c45fbc529a009e7aa087d785f242090b2970f0305e21752c7a5400423c68f3d8abafb9fc193036a4ddef5a95ec907b6eca3740fb668076cb4eec1728887648f4c77dd16ef2ea5a209f5cd88ace5e2bf4c60908fece64ad55f1501e7a660938cfb8129f9b47a4e36a49dfa62e5f82650b631b5419afe98497061bceb43a98398de1f92699"}}, 0x97) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000a00)={0x400, r3}, 0x0) r5 = syz_genetlink_get_family_id$devlink(0x0, r3) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080027bd7000ffdbdf2505000000080001007063690011000200303030303a30303a31306e30000000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000009a405b9aab546daa6c42ddf5cbf3d53bb47c66dd41000000", @ANYRES16=r5, @ANYBLOB="04002cbd7000f9dbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000010000006001600ff0f00000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000300)=""/156) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9c6d8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x28, r7, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params]}, 0x28}}, 0x1) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) 4.492538825s ago: executing program 1 (id=1255): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r1}, &(0x7f00000000c0)=""/202, 0xca, &(0x7f0000000280)={&(0x7f00000001c0)={'ghash-clmulni\x00'}, &(0x7f0000000200)="700c263103e5db1cd822c05d26a4b5cce1b9e6ec88d9d63b592d3a90f787cef3be60e2de7952cdcb00845ee4362eef808baf092289424cb5a7ddc3edd0850ea9a8356905b29cafcc5eb628a4830a47b0e7fc65f789a5358a1c8c63f0300efbd948930ed0039e78", 0x67}) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000f80)='G', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x47) 4.347362912s ago: executing program 1 (id=1256): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x8, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x20000) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x0, 0x1, 0x5, &(0x7f0000000040)={0x19, "03060000000000002494752fff648dba00000010800b00"}}) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c", @ANYRES8=0x0, @ANYRES64=r3], 0x270}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x10e, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x3, 0x1, 0x1, 0x10, 0x2, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xd, 0x47}, [@selector_unit={0x5, 0x24, 0xb, 0xff}, @processing_unit={0xb, 0x24, 0x8, 0x3, 0x4, [0x1, 0x0, 0x2]}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x404, 0x4, 0xa, 0x1, 0x3, 0x0, 0xc, 0xd2}, @sample_rate={0xd, 0x24, 0xd, 0x5, 0x0, 0x6, [0x2, 0x3, 0x3]}, @sample_rate={0x11, 0x24, 0xd, 0x2, 0x0, 0x2, [0x0, 0x3, 0x1, 0x1, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x10, 0xab, 0x0, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x81, 0x1, 0xcd, "f4d955b6"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1e, 0x1, 0xf, 0x9, 0xb7}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0xfffc, 0xe, "20ce4992"}, @as_header={0x10, 0x24, 0x1, 0x2, 0x4, 0x1, 0x3, 0x8, 0x7, 0x7a}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x7, 0x5, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7f, 0x9, 0x7f, {0x8, 0x25, 0x1, 0x82, 0x3c, 0xa, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfd, 0x3, 0x72, 0x2, "", "a363"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf9, 0x1, 0x48, {0x8, 0x25, 0x1, 0x83, 0xc, 0x4, 0xff80}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x3, 0x1, 0x52, 0xff, 0x4}, 0xe8, &(0x7f0000000480)={0x5, 0xf, 0xe8, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0xe, 0x4}, @generic={0xab, 0x10, 0x4, "5c5bc27fc9322812529ae7374f8bff07950ca151f03b804350c2ab0823414fee90814281c0959fb79f38e334e6c67dc4663dbbe246a7557cc339a20ee087bf38358d90985b191823f18cad087b40def0741de16990b0a7e59ab3caf1bf45a01e0aed88e623ea5445de85bd5db433feaf4efada6fc316c70d15a312b096ccc25d0a8316db54fad20cc6fbfd469610a4352823a5891bbc87a581e908414862381139cf7f170d6274ab"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x25, 0x4a, 0x4, 0x7, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x2c, 0x4, 0x7, 0xf00, 0x9, [0xc000, 0x3f00, 0xff0030, 0xf0]}]}, 0xa, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4001}}, {0x7a, &(0x7f0000000280)=@string={0x7a, 0x3, "5d44c74abb349bfab518d0053070babdb570cbecf0fe6db838346ae7de48e62b6770800609ecee891540d93cc16e119763a188ca99a92f3b775e968cfd90a8aad80446f62127e8d2f10c521be95285c9a83ff9f8154fe31790f9eef38b40bfe5e832e54e99af2d0f56de150d1087f0b3a043040520102305"}}, {0xca, &(0x7f0000000640)=ANY=[@ANYBLOB="ca03e6963be5bdb735551a76b29fa849c864e2cc73e35c3d9673843e6d1cb34eecb9fcba6f2a88161af6a3e9d24963077c87ff05599bf6a2a377a504e7bf87a6a10896e574d20b4a057c54e81ef3f180c1d5e10f222fe19b86e16f1ce438ba334f737c4415e8afba343daf0bdde6f77663687e978114a3c11fe2434853e573514e740a081ebf13ac82aec12c0234557a7d71bcf2df938187e688ceec8339248a710f7d94a3fc7e2eeaae390a5ddcce89472f5a97518d95958f2d66a87a0f58b90b673e5978ed91aa4c7a"]}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x437}}, {0x64, &(0x7f0000000880)=@string={0x64, 0x3, "ee6696584a0dfe30fada466c789b07f5d6a24fc6867e8be759d809d9be935715f00b00cbfcf776a13798983af6cff6df56c4245660e2fd0dd1eb80c3437593094e7561eda3243728f99381f8004f47095001ca263765c70df68d5629027acd9516fd"}}, {0x1b, &(0x7f00000005c0)=@string={0x1b, 0x3, "44746bf09209efc71d206bd094cc9d8b745d4bc16e347a8144"}}, {0xbe, &(0x7f0000000940)=@string={0xbe, 0x3, "aa49df48ace445198494614b939f5c00f183ac48f4d446777e48b530bc1f54551a758c228a10bc2cb9361ca08c10ce4dd8abca22063e10b0549f7f5a9b4e2377bd6deebb4db1c2427e9b172a8680188191b6dab7e1091a4f1f4f3afa665d341704309b60b69e00919f56776eb6453174a92f19ad6c527b0fc08db1e24164ffc5ed6f44f39642bc11b5326b1d72b0cae810704d6a7e4afca3c4df58a3838c29c3f95ec502a37e675d7a7eb8edaf4b1259699974ae0fd6baad65c77112"}}, {0xd0, &(0x7f0000000a00)=@string={0xd0, 0x3, "80459f054cd907be6688399a3a20059078261ace23bae25d72a6b8aaefc7b9659d7bdc3f82b4088c76bcf2a2d37af1169e2a21e0fab819c2a587f3dfbf3c789c2afaa46ddce72cd6cff17460b2690db0ba6de4941f3e5c036b2b9d30515691550cfa5ee79d1d0edc61142813185cebc99eb4f93e3d5fa8e5b6f16603948d554cde046619a9e1875559873ee141f02c0ea3e1c0c797b73f9767b90a1b0641ee63a1d909997d90fbbe3b3472b499aca7934846841070d23e41ab345d662ca899f241b12d512e725d5309e1965693b2"}}, {0xbd, &(0x7f0000000b00)=@string={0xbd, 0x3, "0642c46ad2e2359f73ec2e3ba4034fe0ec05308472b06392c70dfd38408d01c281d269159685db95bc399241b401ea0144a466e7130d42814f7a54f11e22f83330b0995496700f1a144e9e54d84d63a644d50392f01b98ee1a222cf0e46d8be17297cdc206bc7197390f4c16f80b75cc71a78137a5a9fe60fcb97ecfcfb21a06a438d8dea27807890d9ba939048f113108eb80205a113d161ef395cc245f5a70bfd5404146055ba8aa0c19ac32d3eeb5c36574c470f3ac7fbd2c97"}}]}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000040)='\'$$^\x00', 0x80940, &(0x7f0000000080)={@align=0x7, {0x3, 0x4, 0x1f66, 0x7ff}}, 0xb4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x8}, {[0xd7c, 0x1, 0x3, 0xffffffff]}, 0x0, 0x15, &(0x7f0000000180)=""/21}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="ae735fac70e1c5c38f6cc4c9acb3eeafaa28fc9f1d8b9d7ffd3bdd164adeb24bacf24625ae76406981f2e1db922a888cbd08434e5b19e3d0bdc9476455af1006c97efe8f37cfce9ff606f18ac2fe5f33b1d027e9abc2c1926311c39b8f8bdc3ec1fbb9f8332112f6a697243c37364f968a72d16c2336972bdfb6e58d1a9c15fbc20329ae93788ef9421516b64500f0c44bbdc16abd38373bcf21d879dff5b3a912ef68c321a6df08a1656cfee4131f7127dc28b956eba8e1088e9b9d134247c1f41712abe5a0bd4a4c1820528c42ad373412511290c1ca965e80e3593f4649f148f74396969b9288466d6101b3ea4e67d9eb5cbab06b4b173e1b87e3", 0x1052, 0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.039085498s ago: executing program 4 (id=1257): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80002000}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 3.881785937s ago: executing program 0 (id=1258): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000005c0)={0x0, 0x9, 0x3, 0x0}) 3.822981999s ago: executing program 4 (id=1259): fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0xfffffffa, 0x0, r0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030009ac0f00"], 0x58}}, 0x4004010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x2, 0x2, 0x3, 0x9, 0x800, 0x1, 0x0, 0x86c}}}}]}, 0x58}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.59372274s ago: executing program 4 (id=1260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x4ab}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)="01000000") ioctl(r4, 0x4048aecb, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r5, 0x97bca000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe97, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) brk(0x800000000002) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0xc4eb, 0x1b1000) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f00000010c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000180)='./file0\x00', r10, 0x4000, r7}, 0x18) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x2000850) r11 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x89fd, &(0x7f0000000100)={'bond0\x00', @ifru_names='ipvlan0\x00'}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r12, 0x8140aecc, &(0x7f0000000240)) 3.408181113s ago: executing program 4 (id=1261): r0 = landlock_create_ruleset(&(0x7f00000005c0)={0xc0d8, 0xa, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0xf) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2231, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x10006, 0x2, 0x80}]}) (async, rerun: 32) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x2, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8b45, 0x0, 0x6, 0x6, 0x0, 0x200000], 0xeeee0000, 0x28340}) (rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011023, 0x0, 0x7000000}]}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc40102030109021200010000000009"], 0x0) (async, rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) r8 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r8}) (async) sendmmsg$unix(r2, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xa1}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) 3.202117891s ago: executing program 2 (id=1262): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000a00000000fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001fff1ffff0000000000000000000000006c01"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.067557647s ago: executing program 2 (id=1263): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xa, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x20002710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x1, 0x1000, 0xc3, &(0x7f0000000380)="c6c3d07f411abbca44849bd351acb885936b38910e989d6316de7d89d720dfbbcdca530118191cbd396d1dbd46b3ac01cb7b2448e4d1e9777cccb8ea0206a341a0bfd61e5e0451f60e3fafd377c3b0702ded7db3987390bfcdc82400a65c55cc15cb290f6eca853dc225abdeb31b1d5d5f0a702ccbb02702ca3e144521b1a46c57b31af701024e28b7f25409842ef979ed4be83960270340d79ad14c999209a60ea8bb8d100bb3b141adfa5d7fb2280e5ad85cb371f2453485a7afdab573301d8c01a7", 0x0, 0x0, &(0x7f00000004c0)}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x1d3, 0x4}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) 2.276946778s ago: executing program 3 (id=1264): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000340)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x200000, 0x1e2c}}, @set_irq_handler={0xc8, 0x20, {0xd3, 0x1}}, @nested_amd_vmsave={0x183, 0x18}, @code={0xa, 0x75, {"4c0fae830058000036f345adc401d1748b56c60000c7442400ea000000c7442402f1330000ff1c240f01c566baf80cb833c3c089ef66bafc0cec66ba420066b82b0066eff30fc7b52b090000b91c090000b80a000000ba000000000f30b95a0600000f32"}}, @nested_load_code={0x12e, 0x61, {0x0, "b805000000b9080000000f01d9400f01ca410fc75fd9b805000000b9000000000f01c1c4e2fd23ea430f01c3440f20c03507000000440f22c0c403d9426fd60a0f224466b845008ee8"}}, @in_dx={0x69, 0x20, {0x5de3, 0x2}}, @wr_crn={0x67, 0x20, {0x2, 0x98}}, @nested_load_syzos={0x136, 0x40, {0x1, 0x5, [@in_dx={0x69, 0x20, {0xf2fb, 0x6}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x1f, 0xa7, 0x37a, 0x75c}}, @wrmsr={0x65, 0x20, {0x8ba, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x96}}], 0x256}) r1 = socket$inet6(0x2d, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}, 0x6a}], 0x1, 0x100, 0x0) r2 = syz_pidfd_open(0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) r4 = syz_io_uring_complete(0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000640)={0x2, 0x23d6, 0x7, 0x0, 0x0, [{{r1}, 0x64a}, {{r2}, 0x9}, {{r3}, 0xb862}, {{r4}, 0x7}, {}, {{}, 0x5}, {{r5}, 0x3}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x3}}}}]}]}, 0x70}}, 0x20040000) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.049813755s ago: executing program 2 (id=1265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000140)='nv\x00', 0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000000b0204000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000540), 0x20040, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=0x0}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.820257522s ago: executing program 1 (id=1266): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) times(0x0) r0 = socket$inet6(0xa, 0x800, 0xf8d5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x508, 0xffffffff, 0x2d8, 0x0, 0x208, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0xfff, 0x2], 0x100, 0x4, 0x4, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @dev={0xfe, 0x80, '\x00', 0x28}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2, @mcast1, @mcast2, @remote, @local, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @remote], 0xc}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0x3ed}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x3, 0x3, 0x6, 0x5, 0x850, 0x40a}}, @common=@hl={{0x28}, {0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], 0x4e21, 0x4e21, 0x4e20, 0x4e20, 0x8000, 0x800, 0x1, 0xa0e3ec4, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c38b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x63}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x20040050) 1.731356466s ago: executing program 3 (id=1267): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r0, 0x3e496000) (async) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r0, 0x3e496000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00') (async) syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xff, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1709000000000000000001000000050007000000000008000900feffffff140020000000000000000000f3f1ffffac1414bb08000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b, 0x0, 0x8000000}, 0x40000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1709000000000000000001000000050007000000000008000900feffffff140020000000000000000000f3f1ffffac1414bb08000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b, 0x0, 0x8000000}, 0x40000) preadv(r3, &(0x7f00000002c0), 0x0, 0x1, 0x8) (async) preadv(r3, &(0x7f00000002c0), 0x0, 0x1, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x33, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000080)=[{0x2000000000, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.624666567s ago: executing program 1 (id=1268): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x40, 0xf, 0x6c, {0x6c, 0x6, "7d77c89622a0f02ed26f82316a5dbee75adb62618d6647ee4d92e562908e83b2e7521e0a30c10e5c89392525aea46b1f7ecb331e4a43ce5241473809cbd3bdb727c92c187ab816759afc289515a492b1c05f28b2d8737494e2dea17c9bfe3b04008bc9d755def7a5e7d1"}}, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x80, 0x9, 0x7, "7b9848da", "0fa3cb4d"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x21, 0x3, 0xd6, 0x81, 0x5}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="4008ba0000009b254b5b5a59820c2d6f57c06a28dd3f84ef3f8686179b893948714b6891ef9ed23e5ac467d2249c492d467e9999be1f1517ac89eb598263d6a51864587a93a70af15904a3d6ed3b66319cb88a0053bc17dcf89b917c4ac2f7983c51defbcf15d1542c0054699ee67997615a40219a177d97cf7d1ec5bd8da6c0548d7a910f469e44184642b5f0f01579b51f13da30442d315dcbb74d27853ccbc80f10b61c59122c16698dc5c21cfea1d99d6b440500000000000000cead04a4"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000440)={0x20, 0x0, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x800, 0x1}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000580)={0x40, 0xb, 0x2, "8c63"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "9d7b"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xe}}) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x1, 0x2, 0xfffffffd, 0x7ffffffe, 0xb, 0x96}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r3 = getegid() fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fstat(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000a40)={{}, {0x1, 0x6}, [], {0x4, 0x2}, [{0x8, 0x7, r2}, {0x8, 0x4, r3}, {0x8, 0x0, r4}, {0x8, 0x0, r5}, {0x8, 0x3, r6}], {}, {0x20, 0x8}}, 0x4c, 0x2) 1.569405011s ago: executing program 2 (id=1269): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x80002000}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1.519036364s ago: executing program 3 (id=1270): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4d0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4bc, 0x1, [@m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x7, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0xfffffffd, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x401, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x401, 0x5, 0x7, 0x2, 0x5, 0x5a3, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0xa, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x8, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0xffffff6a, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x9, 0x8, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x2, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3fc, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0x4, 0x7, 0x25ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4d0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) 1.41635694s ago: executing program 2 (id=1271): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4f3524740000000000dd9623b6ef6dd6258014000300313233343536373839303132333435364c00040067636d2861657329000000000000000000000000000000000000000000000000240000003d11224aa8946e6b978bfa2120529600526037bbc852ee08000000040000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x8088}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYBLOB="8ff8b6030082d213730a9d70b2603028ade98baad3c1b6e5d649fa2d49c7d9a70ff4ddf994f193d6832e8e3211e7e4d7d01b50e6d530412fcae54779a0885c0f8dc3fc903b68c4c422cd2500000000019214d2680a3016e8a61378dd357796d353073f5195321cef32cf2a83d8d7df12", @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001"], 0x84}}, 0x200088c2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000100)="9f1c4490", 0x4) 1.336265248s ago: executing program 3 (id=1272): socket$inet6(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="fc", 0x7}]) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) write(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) prctl$PR_GET_NO_NEW_PRIVS(0x27) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) 999.380322ms ago: executing program 4 (id=1273): syz_open_dev$vim2m(&(0x7f0000000040), 0x800400000, 0x2) syslog(0x3, &(0x7f0000000240)=""/4096, 0x1000) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b", @ANYRESHEX], 0x0) r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000700)="aa00080c0000000100070009") r1 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_connect(0x5, 0xda, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x7824, 0xc000, 0x2, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$char_usb(r2, &(0x7f0000001300)='7', 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x40045b0a, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) write$char_usb(r4, &(0x7f0000000840), 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x141102) r5 = creat(0x0, 0x68) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x449) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x69) close(r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b396", 0x564}], 0x1}, 0xff00) 558.912986ms ago: executing program 0 (id=1274): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x18) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0/file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x8000, 0x9}, 0x30, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000040000000a00000080000000", @ANYRES32=0x0, @ANYBLOB="00062316004abbbbba04eea18f2d8353ebd8a71d854fb90e144ca3b92138c79f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000020000000000000000f9ffffffffffb5dc"], 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r4, 0x4) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = userfaultfd(0x1) (rerun: 64) ioctl$UFFDIO_API(r5, 0xc018aa01, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa02, &(0x7f0000000200)={{&(0x7f0000800000/0x1000)=nil, 0x1000}, 0x1}) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000400)="00000001", &(0x7f0000800000)=@buf='\x00\x00\x00\x00'}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, &(0x7f0000000740), &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x100, 0xfffffffc) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x4}, 0x30, 0x6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0xb57cf664541a7b9, 0x10e) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000002c0)={0x20, r7}, 0x0) landlock_restrict_self(r6, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x8000, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 214.637838ms ago: executing program 0 (id=1275): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008848", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYRES64], 0xe1c}, 0x1, 0x0, 0x0, 0x2400c004}, 0x24000800) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00}, 0x94) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x90}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000000b0108000000000000001d803627da83abd400070000010e0001005d2de07d2a28273a2b000000"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20004844) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) 0s ago: executing program 2 (id=1276): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f00000001c0)=[{0x7f, 0x4a02, 0x87, &(0x7f00000000c0)="d863f6728c1b9504e03ce3b6c70b9ad0deb2007f0ff50c0d7d6dbf3dccdd5a754a56a0720109be5e3a08356fd783984cb0695cfadba58928e4011560b3a86ef0d395aae5619ea08e8bce963447576f60688d8e989ab182a9c67c9d93aee26881d2c3eb8d68b5d0eb9c9764320ecbe3ae4639b34f23eb1549f075a36509a6d1b062a269953b6d09"}, {0x4040, 0xc000, 0x0, 0x0}, {0x2, 0x0, 0x0, &(0x7f00000003c0)}], 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6c0000001000050400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="81400000000000004c0012800b00010067726574617000003c00028006000200a34e7d3e08000700ac1414"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): ][ T5725] usb 2-1: USB disconnect, device number 76 [ 305.896151][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 305.905163][ T988] usb 5-1: not running at top speed; connect to a high speed hub [ 305.905228][ T988] usb 5-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=4f.5a [ 305.930261][ T988] usb 5-1: config 9 has an invalid interface number: 108 but max is 0 [ 305.930310][ T988] usb 5-1: config 9 has no interface number 0 [ 305.949028][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.957300][ T988] usb 5-1: Product: syz [ 305.957324][ T988] usb 5-1: Manufacturer: syz [ 305.957341][ T988] usb 5-1: SerialNumber: syz [ 306.042892][ T10] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 306.189643][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.206430][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.229443][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 306.229500][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 306.261013][ T988] gspca_main: finepix-2.14.0 probing 04cb:010b [ 306.272472][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.291229][ T10] usb 3-1: Product: syz [ 306.291286][ T10] usb 3-1: Manufacturer: syz [ 306.291308][ T10] usb 3-1: SerialNumber: syz [ 306.337799][ T10] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 306.353297][ T988] usb 5-1: USB disconnect, device number 65 [ 306.376348][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 306.425133][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 306.457229][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 306.474588][ T10] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 306.556113][ C0] usb 3-1: malformed indat packet [ 306.768631][ T988] usb 3-1: USB disconnect, device number 66 [ 306.819452][ T988] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 306.839570][ T988] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 306.857872][ T988] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 306.881863][ T988] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 306.921025][ T988] keyspan 3-1:1.0: device disconnected [ 307.038652][ T9223] loop5: detected capacity change from 0 to 7 [ 307.049435][ T9223] loop5: [ 307.052516][ T9223] loop5: partition table partially beyond EOD, truncated [ 307.122897][ T5697] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 307.276760][ T5697] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 307.278734][ T5697] usb 2-1: config 0 has no interfaces? [ 307.295373][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.295441][ T5697] usb 2-1: Product: syz [ 307.295476][ T5697] usb 2-1: Manufacturer: syz [ 307.295545][ T5697] usb 2-1: SerialNumber: syz [ 307.322272][ T5697] usb 2-1: config 0 descriptor?? [ 307.549113][ T9239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.553344][ T49] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 307.567447][ T9239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.577788][ T10] usb 2-1: USB disconnect, device number 77 [ 307.702843][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 307.705010][ T49] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 307.708843][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.708916][ T49] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.717856][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.717885][ T49] usb 4-1: Product: syz [ 307.717900][ T49] usb 4-1: Manufacturer: syz [ 307.717916][ T49] usb 4-1: SerialNumber: syz [ 307.743441][ T49] usb 4-1: config 0 descriptor?? [ 307.973935][ T10] usb 4-1: USB disconnect, device number 83 [ 308.042981][ T49] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 308.192853][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 308.194801][ T49] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.197541][ T49] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 308.197612][ T49] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.197666][ T49] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.203765][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.203850][ T49] usb 3-1: Product: syz [ 308.203891][ T49] usb 3-1: Manufacturer: syz [ 308.203934][ T49] usb 3-1: SerialNumber: syz [ 308.288536][ T49] usb 3-1: 0:2 : does not exist [ 308.643130][ T5697] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 308.773351][ T5697] usb 5-1: device descriptor read/64, error -71 [ 308.909753][ T49] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 308.981260][ T49] usb 3-1: USB disconnect, device number 67 [ 309.013529][ T5697] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 309.057522][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.143515][ T5697] usb 5-1: device descriptor read/64, error -71 [ 309.257228][ T5697] usb usb5-port1: attempt power cycle [ 309.463026][ T49] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 309.592863][ T5697] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 309.593079][ T49] usb 4-1: device descriptor read/64, error -71 [ 309.614229][ T5697] usb 5-1: device descriptor read/8, error -71 [ 309.699586][ T9273] syzkaller0: entered promiscuous mode [ 309.699637][ T9273] syzkaller0: entered allmulticast mode [ 309.832877][ T49] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 309.853853][ T5697] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 309.874257][ T5697] usb 5-1: device descriptor read/8, error -71 [ 309.930581][ T9277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.948723][ T9277] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 309.965548][ T49] usb 4-1: device descriptor read/64, error -71 [ 309.983321][ T5697] usb usb5-port1: unable to enumerate USB device [ 310.073273][ T49] usb usb4-port1: attempt power cycle [ 310.180389][ T9281] bridge9: entered promiscuous mode [ 310.297307][ T9283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.941'. [ 310.353618][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 310.423495][ T49] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 310.444353][ T49] usb 4-1: device descriptor read/8, error -71 [ 310.514894][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 310.530928][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.531034][ T10] usb 3-1: Product: syz [ 310.531114][ T10] usb 3-1: Manufacturer: syz [ 310.531165][ T10] usb 3-1: SerialNumber: syz [ 310.568615][ T10] usb 3-1: config 0 descriptor?? [ 310.683032][ T49] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 310.716106][ T49] usb 4-1: device descriptor read/8, error -71 [ 310.823356][ T49] usb usb4-port1: unable to enumerate USB device [ 310.829471][ T10] usb 3-1: USB disconnect, device number 68 [ 311.408035][ T9296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.090447][ T9307] syzkaller0: entered promiscuous mode [ 312.090498][ T9307] syzkaller0: entered allmulticast mode [ 312.451927][ T9318] bridge6: entered promiscuous mode [ 312.617657][ T9324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.953'. [ 313.133728][ T49] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 313.176546][ T9342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.233496][ T9339] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 313.283885][ T49] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 313.295466][ T49] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 313.295544][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.317372][ T49] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 313.317423][ T49] usb 2-1: Manufacturer: syz [ 313.337405][ T49] usb 2-1: config 0 descriptor?? [ 313.435437][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 313.584138][ T49] rc_core: IR keymap rc-hauppauge not found [ 313.584178][ T49] Registered IR keymap rc-empty [ 313.593837][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 313.613826][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.613902][ T10] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=11.08 [ 313.629596][ T10] usb 3-1: config 16 has an invalid interface number: 203 but max is 0 [ 313.629680][ T10] usb 3-1: config 16 has no interface number 0 [ 313.629749][ T10] usb 3-1: config 16 interface 203 has no altsetting 0 [ 313.656875][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.656931][ T10] usb 3-1: Product: syz [ 313.656985][ T10] usb 3-1: Manufacturer: syz [ 313.657049][ T10] usb 3-1: SerialNumber: syz [ 313.679684][ T49] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 313.725370][ T49] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 313.752200][ T49] usb 2-1: USB disconnect, device number 78 [ 313.976011][ T10] gspca_main: etoms-2.14.0 probing 102c:6151 [ 314.087694][ T10] usb 3-1: USB disconnect, device number 69 [ 314.096198][ T5725] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 314.243649][ T5725] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.247246][ T5725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.247320][ T5725] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.268099][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.268183][ T5725] usb 4-1: Product: syz [ 314.268225][ T5725] usb 4-1: Manufacturer: syz [ 314.268275][ T5725] usb 4-1: SerialNumber: syz [ 314.321641][ T5725] usb 4-1: 0:2 : does not exist [ 314.392452][ T9360] netlink: 'syz.4.964': attribute type 58 has an invalid length. [ 314.392509][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.964'. [ 314.511170][ T5725] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 314.695536][ T5725] usb 4-1: USB disconnect, device number 88 [ 314.809201][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.840195][ T9368] syzkaller0: entered promiscuous mode [ 314.840242][ T9368] syzkaller0: entered allmulticast mode [ 315.464668][ T49] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 315.534979][ T5725] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 315.564178][ T9390] syz.4.970 (9390): /proc/9389/oom_adj is deprecated, please use /proc/9389/oom_score_adj instead. [ 315.602099][ T9393] netlink: 596 bytes leftover after parsing attributes in process `syz.0.971'. [ 315.611746][ T49] usb 3-1: device descriptor read/64, error -71 [ 315.633566][ T9395] bridge10: entered promiscuous mode [ 315.676263][ T9393] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 315.685545][ T5725] usb 4-1: device descriptor read/64, error -71 [ 315.707885][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.970'. [ 315.842818][ T49] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 315.856745][ T9401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.972'. [ 315.923861][ T5725] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 315.993220][ T49] usb 3-1: device descriptor read/64, error -71 [ 316.014606][ T988] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 316.055392][ T5725] usb 4-1: device descriptor read/64, error -71 [ 316.113179][ T49] usb usb3-port1: attempt power cycle [ 316.164084][ T5725] usb usb4-port1: attempt power cycle [ 316.169282][ T988] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 316.186942][ T988] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.186991][ T988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.187314][ T988] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 316.187351][ T988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 316.187401][ T988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.248775][ T9390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.266636][ T988] hub 5-1:1.0: bad descriptor, ignoring hub [ 316.268602][ T988] hub 5-1:1.0: probe with driver hub failed with error -5 [ 316.281655][ T988] cdc_wdm 5-1:1.0: skipping garbage [ 316.281717][ T988] cdc_wdm 5-1:1.0: skipping garbage [ 316.286473][ T988] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 316.453630][ T49] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 316.473763][ T49] usb 3-1: device descriptor read/8, error -71 [ 316.527702][ T5725] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 316.545663][ T5725] usb 4-1: device descriptor read/8, error -71 [ 316.596677][ T988] usb 5-1: USB disconnect, device number 70 [ 316.723728][ T49] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 316.743421][ T49] usb 3-1: device descriptor read/8, error -71 [ 316.783321][ T5725] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 316.811589][ T5725] usb 4-1: device descriptor read/8, error -71 [ 316.854923][ T49] usb usb3-port1: unable to enumerate USB device [ 316.913443][ T5725] usb usb4-port1: unable to enumerate USB device [ 317.042947][ T5711] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 317.175707][ T9427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.977'. [ 317.193789][ T5711] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 317.208188][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.216825][ T5711] usb 2-1: Product: syz [ 317.221147][ T5711] usb 2-1: Manufacturer: syz [ 317.221171][ T5711] usb 2-1: SerialNumber: syz [ 317.235123][ T5711] usb 2-1: config 0 descriptor?? [ 317.407002][ T9430] syzkaller0: entered promiscuous mode [ 317.407048][ T9430] syzkaller0: entered allmulticast mode [ 317.458823][ T5711] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 317.588992][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.600224][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.679236][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 317.679292][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 317.957904][ T9447] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 318.156005][ T9447] netlink: 'syz.4.980': attribute type 10 has an invalid length. [ 318.227004][ T9447] team0 (unregistering): Port device team_slave_0 removed [ 318.262812][ T9447] team0 (unregistering): Port device team_slave_1 removed [ 318.814915][ T49] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 318.825794][ T9457] CUSE: unknown device info "n|zQC*" [ 318.825828][ T9457] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 318.825873][ T9457] CUSE: unknown device info "" [ 318.825889][ T9457] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨gIPYV" [ 318.825903][ T9457] CUSE: DEVNAME unspecified [ 318.923072][ T5711] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 318.936213][ T5711] usb 2-1: USB disconnect, device number 79 [ 318.952900][ T49] usb 4-1: device descriptor read/64, error -71 [ 319.192857][ T49] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 319.322965][ T49] usb 4-1: device descriptor read/64, error -71 [ 319.402225][ T9460] bridge5: entered promiscuous mode [ 319.439817][ T49] usb usb4-port1: attempt power cycle [ 319.538709][ T9465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.983'. [ 319.582885][ T5711] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 319.733945][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 319.740201][ T5711] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 319.756657][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 319.756701][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 319.786448][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.794620][ T49] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 319.802762][ T5711] usb 3-1: Product: syz [ 319.807350][ T5711] usb 3-1: Manufacturer: syz [ 319.815968][ T5711] usb 3-1: SerialNumber: syz [ 319.821228][ T49] usb 4-1: device descriptor read/8, error -71 [ 319.839562][ T5711] usb 3-1: config 0 descriptor?? [ 319.855599][ T5711] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 319.866556][ T5711] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 319.905755][ T988] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 320.062912][ T988] usb 2-1: Using ep0 maxpacket: 16 [ 320.068217][ T49] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 320.070138][ T988] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 320.092581][ T988] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 320.092657][ T988] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 320.093547][ T988] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.093648][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.124265][ T49] usb 4-1: device descriptor read/8, error -71 [ 320.155531][ T988] usb 2-1: config 0 descriptor?? [ 320.234824][ T49] usb usb4-port1: unable to enumerate USB device [ 320.475613][ T5711] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 320.486208][ T5711] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 320.635493][ T988] usbhid 2-1:0.0: can't add hid device: -71 [ 320.635752][ T988] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 320.670365][ T988] usb 2-1: USB disconnect, device number 80 [ 320.717225][ T5711] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 320.725333][ T5711] em28xx 3-1:0.0: No AC97 audio processor [ 320.754097][ T5711] usb 3-1: USB disconnect, device number 74 [ 320.763830][ T5711] em28xx 3-1:0.0: Disconnecting em28xx [ 320.798925][ T5711] em28xx: Freeing device [ 321.491150][ T9483] syzkaller0: entered promiscuous mode [ 321.491212][ T9483] syzkaller0: entered allmulticast mode [ 321.655141][ T5711] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 321.783221][ T5711] usb 5-1: device descriptor read/64, error -71 [ 321.883437][ T49] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 321.886600][ T5712] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 322.023073][ T988] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 322.032914][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 322.034507][ T49] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 322.035836][ T5711] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 322.044788][ T5712] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 322.048038][ T49] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.048136][ T49] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 322.048217][ T49] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.048301][ T49] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.048403][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.051307][ T5712] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 80, changing to 4 [ 322.065663][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.065692][ T5712] usb 2-1: Product: syz [ 322.065712][ T5712] usb 2-1: Manufacturer: syz [ 322.065727][ T5712] usb 2-1: SerialNumber: syz [ 322.091260][ T49] usb 4-1: config 0 descriptor?? [ 322.100053][ T9487] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 322.173953][ T5711] usb 5-1: device descriptor read/64, error -71 [ 322.223507][ T988] usb 3-1: device descriptor read/64, error -71 [ 322.283572][ T5711] usb usb5-port1: attempt power cycle [ 322.362684][ T5712] usb 2-1: found format II with max.bitrate = 2988, frame size=43966 [ 322.364975][ T5712] usb 2-1: found format II with max.bitrate = 2988, frame size=43966 [ 322.376716][ T5712] usb 2-1: 1:1: cannot set freq 16396043 to ep 0x1 [ 322.377957][ T5712] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 322.456735][ T5712] usb 2-1: USB disconnect, device number 81 [ 322.463279][ T988] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 322.538167][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.593308][ T988] usb 3-1: device descriptor read/64, error -71 [ 322.623492][ T5711] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 322.643646][ T5711] usb 5-1: device descriptor read/8, error -71 [ 322.706357][ T988] usb usb3-port1: attempt power cycle [ 322.883016][ T5711] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 322.913568][ T5711] usb 5-1: device descriptor read/8, error -71 [ 322.942006][ T9504] bridge11: entered promiscuous mode [ 323.024460][ T5711] usb usb5-port1: unable to enumerate USB device [ 323.042860][ T988] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 323.062476][ T9506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.996'. [ 323.074668][ T988] usb 3-1: device descriptor read/8, error -71 [ 323.169159][ T49] usbhid 4-1:0.0: can't add hid device: -71 [ 323.169265][ T49] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 323.196972][ T49] usb 4-1: USB disconnect, device number 97 [ 323.323402][ T988] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 323.346739][ T988] usb 3-1: device descriptor read/8, error -71 [ 323.453684][ T988] usb usb3-port1: unable to enumerate USB device [ 323.524819][ T9511] netlink: 'syz.0.998': attribute type 4 has an invalid length. [ 323.582097][ T9512] netlink: 'syz.0.998': attribute type 4 has an invalid length. [ 324.053201][ T49] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 324.203803][ T49] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 324.213570][ T5711] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 324.222248][ T49] usb 4-1: config 0 has no interfaces? [ 324.230349][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.230409][ T49] usb 4-1: Product: syz [ 324.230426][ T49] usb 4-1: Manufacturer: syz [ 324.230442][ T49] usb 4-1: SerialNumber: syz [ 324.246534][ T49] usb 4-1: config 0 descriptor?? [ 324.387689][ T5711] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 324.403933][ T9522] use of bytesused == 0 is deprecated and will be removed in the future, [ 324.412123][ T5711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.412275][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.431443][ T5711] usb 2-1: config 0 descriptor?? [ 324.442788][ T9522] use the actual size instead. [ 324.460539][ T9522] netlink: 'syz.4.1002': attribute type 6 has an invalid length. [ 324.475516][ T5711] gspca_main: kinect-2.14.0 probing 045e:02bf [ 324.521466][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 324.558283][ T49] usb 4-1: USB disconnect, device number 98 [ 324.965340][ T9528] syzkaller0: entered promiscuous mode [ 324.965404][ T9528] syzkaller0: entered allmulticast mode [ 325.217436][ T9537] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 325.243795][ T49] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 325.299668][ T9539] FAULT_INJECTION: forcing a failure. [ 325.299668][ T9539] name failslab, interval 1, probability 0, space 0, times 0 [ 325.313039][ T9539] CPU: 0 UID: 0 PID: 9539 Comm: syz.4.1007 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.313075][ T9539] Tainted: [L]=SOFTLOCKUP [ 325.313083][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.313103][ T9539] Call Trace: [ 325.313112][ T9539] [ 325.313121][ T9539] dump_stack_lvl+0xe8/0x150 [ 325.313167][ T9539] should_fail_ex+0x410/0x560 [ 325.313206][ T9539] should_failslab+0xa8/0x100 [ 325.313233][ T9539] __kmalloc_cache_noprof+0xa3/0x600 [ 325.313270][ T9539] ? keyctl_watch_key+0x22e/0x460 [ 325.313301][ T9539] ? keyctl_watch_key+0x22e/0x460 [ 325.313339][ T9539] keyctl_watch_key+0x22e/0x460 [ 325.313375][ T9539] __se_sys_keyctl+0x12f/0x9d0 [ 325.313410][ T9539] ? __pfx___se_sys_keyctl+0x10/0x10 [ 325.313439][ T9539] ? __mutex_unlock_slowpath+0x731/0x900 [ 325.313476][ T9539] ? __fget_files+0x2a/0x420 [ 325.313507][ T9539] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.313542][ T9539] ? __fget_files+0x3a2/0x420 [ 325.313576][ T9539] ? fput+0xa0/0xd0 [ 325.313603][ T9539] ? ksys_write+0x242/0x270 [ 325.313636][ T9539] ? __pfx_ksys_write+0x10/0x10 [ 325.313674][ T9539] ? __x64_sys_keyctl+0x20/0xc0 [ 325.313718][ T9539] do_syscall_64+0x166/0x520 [ 325.313750][ T9539] ? trace_irq_disable+0x3b/0x140 [ 325.313773][ T9539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.313810][ T9539] ? clear_bhb_loop+0x70/0xc0 [ 325.313838][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.313860][ T9539] RIP: 0033:0x7fde9b79e159 [ 325.313881][ T9539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.313902][ T9539] RSP: 002b:00007fde999f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 325.313925][ T9539] RAX: ffffffffffffffda RBX: 00007fde9ba25fa0 RCX: 00007fde9b79e159 [ 325.313942][ T9539] RDX: 0000000000000004 RSI: 0000000006db0744 RDI: 0000000000000020 [ 325.313956][ T9539] RBP: 00007fde999f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.313970][ T9539] R10: 0000000000000047 R11: 0000000000000246 R12: 0000000000000001 [ 325.313984][ T9539] R13: 00007fde9ba26038 R14: 00007fde9ba25fa0 R15: 00007fde9bb4fa48 [ 325.314019][ T9539] [ 325.403107][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 325.405566][ T49] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 325.605212][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.605273][ T49] usb 3-1: Product: syz [ 325.605291][ T49] usb 3-1: Manufacturer: syz [ 325.605307][ T49] usb 3-1: SerialNumber: syz [ 325.633395][ T5712] usb 2-1: USB disconnect, device number 82 [ 325.659332][ T49] usb 3-1: config 0 descriptor?? [ 325.688806][ T49] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 325.785317][ T9541] netlink: 'syz.1.1009': attribute type 2 has an invalid length. [ 325.887491][ T9545] bridge6: entered promiscuous mode [ 325.909373][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 326.073232][ T9549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1010'. [ 326.113016][ T5712] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 326.263309][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 326.267546][ T5712] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 326.281830][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.297348][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.297406][ T5712] usb 4-1: Product: syz [ 326.297423][ T5712] usb 4-1: Manufacturer: syz [ 326.297439][ T5712] usb 4-1: SerialNumber: syz [ 326.332493][ T5712] usb 4-1: config 0 descriptor?? [ 326.345609][ T5712] usb 4-1: expecting 3 got 0 endpoints! Bailing out. [ 326.604362][ T49] gspca_ov534_9: reg_w failed -110 [ 326.748945][ T25] usb 4-1: USB disconnect, device number 99 [ 326.895163][ T49] gspca_ov534_9: Unknown sensor 0000 [ 326.895940][ T49] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 327.253287][ T988] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 327.348398][ T9568] loop5: detected capacity change from 0 to 7 [ 327.360026][ T9568] loop5: [ 327.360116][ T9568] loop5: partition table partially beyond EOD, truncated [ 327.403633][ T988] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 327.415535][ T988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 327.426873][ T988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 327.426935][ T988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.660498][ T9572] syzkaller0: entered promiscuous mode [ 327.660553][ T9572] syzkaller0: entered allmulticast mode [ 327.842842][ T5712] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 327.995156][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 327.996505][ T5712] usb 2-1: not running at top speed; connect to a high speed hub [ 327.996601][ T5712] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 327.999657][ T5712] usb 2-1: config 1 has an invalid interface number: 93 but max is 0 [ 327.999747][ T5712] usb 2-1: config 1 has no interface number 0 [ 327.999889][ T5712] usb 2-1: config 1 interface 93 has no altsetting 0 [ 328.025084][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.025178][ T5712] usb 2-1: Product: syz [ 328.025220][ T5712] usb 2-1: Manufacturer: syz [ 328.025258][ T5712] usb 2-1: SerialNumber: syz [ 328.133032][ T25] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 328.284203][ T5712] usb 2-1: USB disconnect, device number 83 [ 328.294167][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.308544][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.308613][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.308670][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.308845][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.357675][ T25] usb 4-1: config 0 descriptor?? [ 328.460833][ T49] usb 3-1: USB disconnect, device number 79 [ 328.501641][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.518442][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.536430][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.538531][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.762606][ T988] pegasus 5-1:1.0: can't reset MAC [ 328.763699][ T988] pegasus 5-1:1.0: probe with driver pegasus failed with error -5 [ 328.791315][ T988] usb 5-1: USB disconnect, device number 75 [ 328.865988][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.934415][ T9574] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 328.953575][ T49] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 328.972420][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 328.974224][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 328.991219][ T25] usb 4-1: USB disconnect, device number 100 [ 329.108715][ T49] usb 3-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.40 [ 329.120764][ T49] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 162, changing to 11 [ 329.120842][ T49] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.120874][ T49] usb 3-1: config 1 interface 0 has no altsetting 0 [ 329.158357][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.158415][ T49] usb 3-1: Product: ᇗ沩酾쎹䧁優Ḽ偬䍘蓑꛶巈䯲쏓꠆ﻛ⠌⁉왼匡䳏䞿⯶敽奿੏遲Ҙᐒ輸ꪧ캡扪茮㬂㤘顲揔ᅚ씑靹肜 [ 329.158441][ T49] usb 3-1: Manufacturer: ࠾ [ 329.158458][ T49] usb 3-1: SerialNumber: ﳿ [ 329.522885][ T988] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 329.613842][ T49] usbhid 3-1:1.0: can't add hid device: -71 [ 329.613978][ T49] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 329.634269][ T49] usb 3-1: USB disconnect, device number 80 [ 329.643373][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 329.683674][ T988] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.698360][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.707612][ T988] usb 2-1: Product: syz [ 329.707636][ T988] usb 2-1: Manufacturer: syz [ 329.707652][ T988] usb 2-1: SerialNumber: syz [ 329.729219][ T988] usb 2-1: config 0 descriptor?? [ 329.804640][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 329.811082][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.823624][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 329.823709][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 329.845494][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.845547][ T10] usb 5-1: Product: о [ 329.845685][ T10] usb 5-1: Manufacturer: 疲襁⿅뫖ࣁ닕㥑玨綖됞豂輭㟍忄燒䫲훍匠脦嚈 [ 329.845734][ T10] usb 5-1: SerialNumber: syz [ 329.966191][ T988] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 330.246150][ T9597] loop5: detected capacity change from 0 to 7 [ 330.256780][ T9597] loop5: [ 330.256902][ T9597] loop5: partition table partially beyond EOD, truncated [ 330.294713][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.298434][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.312351][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.323990][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.357410][ T9584] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 330.358223][ T9584] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 330.501833][ T9599] syzkaller0: entered promiscuous mode [ 330.501896][ T9599] syzkaller0: entered allmulticast mode [ 330.596853][ T10] cdc_ncm 5-1:1.0: bind() failure [ 330.615111][ T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 330.635003][ T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 330.646510][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 330.674326][ T10] usb 5-1: USB disconnect, device number 76 [ 331.304902][ T5712] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 331.427505][ T988] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 331.473397][ T5712] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 331.483355][ T5712] usb 4-1: config 0 has no interfaces? [ 331.494074][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.494122][ T5712] usb 4-1: Product: syz [ 331.494165][ T5712] usb 4-1: Manufacturer: syz [ 331.494185][ T5712] usb 4-1: SerialNumber: syz [ 331.525056][ T5712] usb 4-1: config 0 descriptor?? [ 331.859448][ T9615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.924670][ T9630] loop5: detected capacity change from 0 to 7 [ 331.931885][ T9630] loop5: [ 331.935163][ T9630] loop5: partition table partially beyond EOD, truncated [ 332.140591][ T9632] netlink: 'syz.2.1040': attribute type 4 has an invalid length. [ 332.161877][ T988] usb 2-1: USB disconnect, device number 84 [ 332.819556][ T9639] bridge7: entered promiscuous mode [ 332.984230][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1042'. [ 333.193346][ T9644] syzkaller0: entered promiscuous mode [ 333.200176][ T9644] syzkaller0: entered allmulticast mode [ 333.854762][ T9657] FAULT_INJECTION: forcing a failure. [ 333.854762][ T9657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.854863][ T9657] CPU: 0 UID: 0 PID: 9657 Comm: syz.1.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.854894][ T9657] Tainted: [L]=SOFTLOCKUP [ 333.854901][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.854970][ T9657] Call Trace: [ 333.855004][ T9657] [ 333.855043][ T9657] dump_stack_lvl+0xe8/0x150 [ 333.855132][ T9657] should_fail_ex+0x410/0x560 [ 333.855258][ T9657] _copy_from_user+0x2d/0xb0 [ 333.855345][ T9657] ___sys_sendmsg+0x1c6/0x360 [ 333.855411][ T9657] ? __lock_acquire+0x6df/0x2e50 [ 333.855486][ T9657] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.855633][ T9657] ? __fget_files+0x2a/0x420 [ 333.855694][ T9657] ? __fget_files+0x3a2/0x420 [ 333.855796][ T9657] __x64_sys_sendmsg+0x1b1/0x290 [ 333.855861][ T9657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.855980][ T9657] do_syscall_64+0x166/0x520 [ 333.856065][ T9657] ? trace_irq_disable+0x3b/0x140 [ 333.856136][ T9657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.856208][ T9657] ? clear_bhb_loop+0x70/0xc0 [ 333.856280][ T9657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.856335][ T9657] RIP: 0033:0x7f4e3fd9e159 [ 333.856388][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.856439][ T9657] RSP: 002b:00007f4e40cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.856510][ T9657] RAX: ffffffffffffffda RBX: 00007f4e40025fa0 RCX: 00007f4e3fd9e159 [ 333.856559][ T9657] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 333.856601][ T9657] RBP: 00007f4e40cca090 R08: 0000000000000000 R09: 0000000000000000 [ 333.856649][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.856686][ T9657] R13: 00007f4e40026038 R14: 00007f4e40025fa0 R15: 00007f4e4014fa48 [ 333.856773][ T9657] [ 333.937808][ T9658] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1048'. [ 334.111432][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 334.230025][ T5725] usb 4-1: USB disconnect, device number 101 [ 334.539125][ T9666] macvlan0: entered promiscuous mode [ 334.547579][ T9666] netlink: 'syz.0.1050': attribute type 1 has an invalid length. [ 334.547606][ T9666] netlink: 'syz.0.1050': attribute type 2 has an invalid length. [ 334.843914][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.856844][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.949606][ T9681] syzkaller0: entered promiscuous mode [ 334.955990][ T9681] syzkaller0: entered allmulticast mode [ 335.082887][ T5712] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 335.233605][ T5712] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 335.247091][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 335.247173][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.247224][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.287480][ T5712] usb 2-1: config 0 descriptor?? [ 335.498766][ T5712] ath6kl: Failed to submit usb control message: -71 [ 335.498839][ T5712] ath6kl: unable to send the bmi data to the device: -71 [ 335.498873][ T5712] ath6kl: Unable to send get target info: -71 [ 335.525062][ T5712] ath6kl: Failed to init ath6kl core: -71 [ 335.556962][ T5712] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 335.584047][ T9706] binder: BINDER_SET_CONTEXT_MGR already set [ 335.584108][ T9706] binder: 9704:9706 ioctl 4018620d 200000000040 returned -16 [ 335.602111][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.614563][ T5712] usb 2-1: USB disconnect, device number 85 [ 335.629191][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.372918][ T49] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 336.525348][ T49] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 336.536899][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.554785][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.554848][ T49] usb 2-1: Product: syz [ 336.554902][ T49] usb 2-1: Manufacturer: syz [ 336.554982][ T49] usb 2-1: SerialNumber: syz [ 336.584750][ T49] usb 2-1: config 0 descriptor?? [ 336.601697][ T49] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 336.706721][ T9733] syzkaller0: entered promiscuous mode [ 336.706768][ T9733] syzkaller0: entered allmulticast mode [ 337.114662][ T49] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 337.114861][ T49] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 337.186043][ T31] audit: type=1326 audit(1788457932.215:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.212624][ T31] audit: type=1326 audit(1788457932.245:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.254348][ T31] audit: type=1326 audit(1788457932.285:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.256740][ T31] audit: type=1326 audit(1788457932.285:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.257346][ T31] audit: type=1326 audit(1788457932.285:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.261313][ T31] audit: type=1326 audit(1788457932.285:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.263819][ T31] audit: type=1326 audit(1788457932.285:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.265083][ T31] audit: type=1326 audit(1788457932.285:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.265213][ T31] audit: type=1326 audit(1788457932.285:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.265848][ T31] audit: type=1326 audit(1788457932.285:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1067" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4e3fd9e159 code=0x7ffc0000 [ 337.724070][ T9740] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1072'. [ 337.744502][ T9740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.304018][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 338.411402][ T9749] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1075'. [ 338.628248][ T9752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.635651][ T9752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.804195][ T9763] capability: warning: `syz.3.1079' uses 32-bit capabilities (legacy support in use) [ 338.942952][ T5712] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 338.992269][ T9765] fuse: Bad value for 'fd' [ 339.103489][ T5712] usb 3-1: Using ep0 maxpacket: 16 [ 339.105102][ T5712] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 339.111425][ T5712] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.111556][ T5712] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.111622][ T5712] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 339.111707][ T5712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 339.111810][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.162103][ T5712] usb 3-1: config 0 descriptor?? [ 339.285201][ T30] usb 2-1: USB disconnect, device number 86 [ 339.314636][ T25] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 339.506655][ T25] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 339.517800][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.517959][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.518128][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.518202][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.518359][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.628790][ T5712] hid (null): unknown global tag 0xe [ 339.628835][ T5712] hid (null): global environment stack underflow [ 339.628871][ T5712] hid (null): unknown global tag 0x66 [ 339.629010][ T5712] hid (null): unknown global tag 0xe [ 339.656865][ T5712] hid (null): report_id 0 is invalid [ 339.756255][ T9771] syzkaller0: entered promiscuous mode [ 339.756301][ T9771] syzkaller0: entered allmulticast mode [ 339.823856][ T5712] usb 3-1: USB disconnect, device number 81 [ 340.075826][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'. [ 340.413193][ T49] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 340.600715][ T49] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 340.629170][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.629228][ T49] usb 2-1: Product: syz [ 340.629266][ T49] usb 2-1: Manufacturer: syz [ 340.629359][ T49] usb 2-1: SerialNumber: syz [ 340.704777][ T5712] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 340.727993][ T25] [drm] Initialized gud 1.0.0 for 4-1:1.0 on minor 1 [ 340.866470][ T5712] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.881377][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.881493][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 340.881689][ T5712] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.881878][ T5712] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 340.919079][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.919111][ T5712] usb 3-1: Product: syz [ 340.919126][ T5712] usb 3-1: Manufacturer: syz [ 340.919174][ T5712] usb 3-1: SerialNumber: syz [ 340.961410][ T9796] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 341.172222][ T9796] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 341.396675][ T9807] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1092'. [ 341.438575][ T9809] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1093'. [ 341.594833][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 341.702319][ T9816] bridge6: entered promiscuous mode [ 341.759135][ T9817] syzkaller0: entered promiscuous mode [ 341.765701][ T9817] syzkaller0: entered allmulticast mode [ 341.891433][ T49] rtl8150 2-1:1.0: couldn't reset the device [ 341.901651][ T9819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1096'. [ 341.914389][ T49] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 342.231362][ T9823] loop5: detected capacity change from 0 to 7 [ 342.241323][ T9823] loop5: [ 342.241368][ T9823] loop5: partition table partially beyond EOD, truncated [ 342.403633][ T5712] cdc_ncm 3-1:1.0: bind() failure [ 342.457515][ T5712] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 342.457594][ T5712] cdc_ncm 3-1:1.1: bind() failure [ 342.524989][ T5712] usb 3-1: USB disconnect, device number 82 [ 342.843120][ T49] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 342.878690][ T9827] fuse: Bad value for 'fd' [ 342.971499][ T9830] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 343.009490][ T49] usb 5-1: unable to get BOS descriptor or descriptor too short [ 343.012284][ T49] usb 5-1: not running at top speed; connect to a high speed hub [ 343.012442][ T49] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0116, bcdDevice=63.56 [ 343.026784][ T49] usb 5-1: config 1 has an invalid interface number: 37 but max is 0 [ 343.026932][ T49] usb 5-1: config 1 has no interface number 0 [ 343.027009][ T49] usb 5-1: config 1 interface 37 has no altsetting 0 [ 343.068412][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.068482][ T49] usb 5-1: Product: syz [ 343.068574][ T49] usb 5-1: Manufacturer: syz [ 343.068592][ T49] usb 5-1: SerialNumber: syz [ 343.124655][ T9832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1100'. [ 343.175610][ T9830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.228497][ T5712] usb 2-1: USB disconnect, device number 87 [ 343.291162][ T9830] bond1: (slave veth0_to_bond): making interface the new active one [ 343.328371][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'. [ 343.338374][ T9830] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 343.396895][ T9830] macvlan3: entered promiscuous mode [ 343.396947][ T9830] macvlan3: entered allmulticast mode [ 343.405978][ T9830] bond1: entered promiscuous mode [ 343.406114][ T9830] veth0_to_bond: entered promiscuous mode [ 343.425009][ T9830] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 343.428819][ T9830] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 343.439171][ T9830] bond1: left promiscuous mode [ 343.439295][ T9830] veth0_to_bond: left promiscuous mode [ 343.451946][ T5697] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 343.615428][ T5697] usb 3-1: device descriptor read/64, error -71 [ 343.801303][ T9841] [U]  [ 343.801323][ T9841] [U] K{ [ 343.801334][ T9841] [U] t 1ŠFfˊ`GJgo/mC [ 343.801362][ T9841] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 343.801386][ T9841] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 343.801424][ T9841] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 343.801491][ T9841] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 343.801522][ T9841] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 343.801542][ T9841] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 343.801572][ T9841] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 343.963088][ T9841] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 343.963108][ T9841] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 343.963125][ T9841] [U] 22Ʃx?0;3u [ 343.963150][ T9841] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 343.963179][ T9841] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 343.963195][ T9841] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 343.963217][ T9841] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 343.963234][ T9841] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 343.963249][ T9841] [U] ec [ 343.963263][ T9841] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 344.045372][ T5697] usb 3-1: device descriptor read/64, error -71 [ 344.143663][ T5697] usb usb3-port1: attempt power cycle [ 344.173928][ T49] kvaser_usb 5-1:1.37: error -ENODEV: Cannot get usb endpoint(s) [ 344.217581][ T49] usb 5-1: USB disconnect, device number 78 [ 344.421906][ T9849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1106'. [ 344.493743][ T5697] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 344.514665][ T5697] usb 3-1: device descriptor read/8, error -71 [ 344.557974][ T9853] loop5: detected capacity change from 0 to 7 [ 344.566763][ T9853] loop5: [ 344.566823][ T9853] loop5: partition table partially beyond EOD, truncated [ 344.627977][ T9840] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 344.700861][ T9851] syzkaller0: entered promiscuous mode [ 344.700923][ T9851] syzkaller0: entered allmulticast mode [ 344.746397][ T9855] FAULT_INJECTION: forcing a failure. [ 344.746397][ T9855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.746461][ T9855] CPU: 0 UID: 0 PID: 9855 Comm: syz.1.1110 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.746499][ T9855] Tainted: [L]=SOFTLOCKUP [ 344.746507][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.746520][ T9855] Call Trace: [ 344.746608][ T9855] [ 344.746673][ T9855] dump_stack_lvl+0xe8/0x150 [ 344.746813][ T9855] should_fail_ex+0x410/0x560 [ 344.746933][ T9855] _copy_from_user+0x2d/0xb0 [ 344.746995][ T9855] ___sys_sendmsg+0x1c6/0x360 [ 344.747090][ T9855] ? __lock_acquire+0x6df/0x2e50 [ 344.747174][ T9855] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.747325][ T9855] ? __fget_files+0x2a/0x420 [ 344.747479][ T9855] ? __fget_files+0x3a2/0x420 [ 344.747579][ T9855] __x64_sys_sendmsg+0x1b1/0x290 [ 344.747654][ T9855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.747770][ T9855] do_syscall_64+0x166/0x520 [ 344.747945][ T9855] ? trace_irq_disable+0x3b/0x140 [ 344.748029][ T9855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.748129][ T9855] ? clear_bhb_loop+0x70/0xc0 [ 344.748204][ T9855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.748260][ T9855] RIP: 0033:0x7f4e3fd9e159 [ 344.748347][ T9855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.748400][ T9855] RSP: 002b:00007f4e40cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.748504][ T9855] RAX: ffffffffffffffda RBX: 00007f4e40025fa0 RCX: 00007f4e3fd9e159 [ 344.748548][ T9855] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 344.748589][ T9855] RBP: 00007f4e40cca090 R08: 0000000000000000 R09: 0000000000000000 [ 344.748622][ T9855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.748655][ T9855] R13: 00007f4e40026038 R14: 00007f4e40025fa0 R15: 00007f4e4014fa48 [ 344.748759][ T9855] [ 344.760730][ T5697] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 344.800307][ T5697] usb 3-1: device descriptor read/8, error -71 [ 344.915883][ T5697] usb usb3-port1: unable to enumerate USB device [ 345.006643][ T9858] input: syz1 as /devices/virtual/input/input36 [ 345.136661][ T9862] netlink: 'syz.1.1111': attribute type 4 has an invalid length. [ 345.154416][ T9861] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1109'. [ 345.201347][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'. [ 345.598581][ T31] kauditd_printk_skb: 669 callbacks suppressed [ 345.598660][ T31] audit: type=1800 audit(1788457940.625:1416): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1112" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 345.659638][ T9875] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5633] was attempted by "  "[9875] [ 345.790959][ T9875] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1113'. [ 346.411340][ T9883] FAULT_INJECTION: forcing a failure. [ 346.411340][ T9883] name failslab, interval 1, probability 0, space 0, times 0 [ 346.411403][ T9883] CPU: 1 UID: 0 PID: 9883 Comm: syz.2.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.411435][ T9883] Tainted: [L]=SOFTLOCKUP [ 346.411443][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.411457][ T9883] Call Trace: [ 346.411466][ T9883] [ 346.411475][ T9883] dump_stack_lvl+0xe8/0x150 [ 346.411515][ T9883] should_fail_ex+0x410/0x560 [ 346.411554][ T9883] ? __alloc_skb+0x1db/0x7a0 [ 346.411673][ T9883] should_failslab+0xa8/0x100 [ 346.411712][ T9883] ? __alloc_skb+0x1db/0x7a0 [ 346.411743][ T9883] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 346.411797][ T9883] ? __alloc_skb+0x18d/0x7a0 [ 346.411831][ T9883] ? __alloc_skb+0x1db/0x7a0 [ 346.411870][ T9883] __alloc_skb+0x1db/0x7a0 [ 346.411908][ T9883] netlink_ack+0x136/0xb30 [ 346.412003][ T9883] netlink_rcv_skb+0x2a4/0x4a0 [ 346.412030][ T9883] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 346.412085][ T9883] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.412123][ T9883] ? bpf_lsm_capable+0x9/0x20 [ 346.412191][ T9883] ? security_capable+0x7e/0x2c0 [ 346.412276][ T9883] nfnetlink_rcv+0x2b9/0x28c0 [ 346.412305][ T9883] ? __dev_queue_xmit+0x29b/0x3820 [ 346.412359][ T9883] ? __local_bh_enable_ip+0xd6/0x140 [ 346.412400][ T9883] ? lockdep_hardirqs_on+0x7b/0x110 [ 346.412461][ T9883] ? __dev_queue_xmit+0x29b/0x3820 [ 346.412486][ T9883] ? __local_bh_enable_ip+0xd6/0x140 [ 346.412514][ T9883] ? __dev_queue_xmit+0x29b/0x3820 [ 346.412540][ T9883] ? __dev_queue_xmit+0x1edc/0x3820 [ 346.412564][ T9883] ? do_syscall_64+0x166/0x520 [ 346.412595][ T9883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.412631][ T9883] ? __dev_queue_xmit+0x29b/0x3820 [ 346.412658][ T9883] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 346.412688][ T9883] ? __pfx___dev_queue_xmit+0x10/0x10 [ 346.412720][ T9883] ? ref_tracker_free+0x689/0x830 [ 346.412777][ T9883] ? __pfx_ref_tracker_free+0x10/0x10 [ 346.412806][ T9883] ? __asan_memcpy+0x40/0x70 [ 346.412839][ T9883] ? __skb_clone+0x5c/0x6c0 [ 346.412895][ T9883] ? __skb_clone+0x449/0x6c0 [ 346.412926][ T9883] ? skb_clone+0x246/0x3a0 [ 346.412954][ T9883] ? __netlink_deliver_tap+0x811/0x860 [ 346.412981][ T9883] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.413015][ T9883] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.413042][ T9883] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.413075][ T9883] netlink_unicast+0x7bd/0x940 [ 346.413111][ T9883] netlink_sendmsg+0x813/0xb40 [ 346.413171][ T9883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.413208][ T9883] ? apparmor_socket_sendmsg+0x18b/0x360 [ 346.413290][ T9883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.413317][ T9883] sock_sendmsg_nosec+0x13a/0x180 [ 346.413352][ T9883] ____sys_sendmsg+0x54e/0x850 [ 346.413382][ T9883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.413416][ T9883] ? import_iovec+0x73/0xa0 [ 346.413469][ T9883] ___sys_sendmsg+0x2a5/0x360 [ 346.413493][ T9883] ? __lock_acquire+0x6df/0x2e50 [ 346.413519][ T9883] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.413580][ T9883] ? __fget_files+0x2a/0x420 [ 346.413608][ T9883] ? __fget_files+0x3a2/0x420 [ 346.413647][ T9883] __x64_sys_sendmsg+0x1b1/0x290 [ 346.413674][ T9883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.413717][ T9883] do_syscall_64+0x166/0x520 [ 346.413749][ T9883] ? trace_irq_disable+0x3b/0x140 [ 346.413771][ T9883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.413802][ T9883] ? clear_bhb_loop+0x70/0xc0 [ 346.413830][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.413854][ T9883] RIP: 0033:0x7f09f659e159 [ 346.413876][ T9883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.413896][ T9883] RSP: 002b:00007f09f7438028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.413921][ T9883] RAX: ffffffffffffffda RBX: 00007f09f6825fa0 RCX: 00007f09f659e159 [ 346.413938][ T9883] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 346.413954][ T9883] RBP: 00007f09f7438090 R08: 0000000000000000 R09: 0000000000000000 [ 346.413968][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.413980][ T9883] R13: 00007f09f6826038 R14: 00007f09f6825fa0 R15: 00007f09f694fa48 [ 346.414029][ T9883] [ 346.466606][ T5697] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 346.763699][ T5697] usb 5-1: Using ep0 maxpacket: 16 [ 346.775708][ T5697] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 346.854512][ T5697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.854567][ T5697] usb 5-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 346.854598][ T5697] usb 5-1: config 0 interface 0 has no altsetting 0 [ 346.854634][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.943993][ T5697] usb 5-1: config 0 descriptor?? [ 346.966311][ T5697] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 347.087283][ T25] Console: switching to colour frame buffer device 128x48 [ 347.112910][ T25] gud 4-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 347.138279][ T25] usb 4-1: USB disconnect, device number 102 [ 347.228213][ T25] Console: switching to colour VGA+ 80x25 [ 347.368322][ T9886] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1119'. [ 347.455241][ T9889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1120'. [ 347.694347][ T9892] syzkaller0: entered promiscuous mode [ 347.705507][ T9892] syzkaller0: entered allmulticast mode [ 347.785090][ T25] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 347.956359][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 347.970045][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.981585][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.021752][ T9899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1124'. [ 348.420752][ T25] wacom 0003:056A:033B.0016: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 348.442267][ T25] wacom 0003:056A:033B.0016: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 348.470732][ T25] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0016/input/input37 [ 348.512966][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 348.646472][ T10] usb 3-1: device descriptor read/64, error -71 [ 348.883260][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 349.023375][ T10] usb 3-1: device descriptor read/64, error -71 [ 349.133151][ T10] usb usb3-port1: attempt power cycle [ 349.204736][ T5725] usb 5-1: USB disconnect, device number 79 [ 349.315235][ T9923] FAULT_INJECTION: forcing a failure. [ 349.315235][ T9923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.343271][ T9923] CPU: 1 UID: 0 PID: 9923 Comm: syz.4.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.343310][ T9923] Tainted: [L]=SOFTLOCKUP [ 349.343320][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.343333][ T9923] Call Trace: [ 349.343343][ T9923] [ 349.343353][ T9923] dump_stack_lvl+0xe8/0x150 [ 349.343394][ T9923] should_fail_ex+0x410/0x560 [ 349.343435][ T9923] _copy_to_user+0x31/0xb0 [ 349.343464][ T9923] simple_read_from_buffer+0xe1/0x170 [ 349.343501][ T9923] proc_fail_nth_read+0x1bb/0x230 [ 349.343567][ T9923] ? common_file_perm+0x20e/0x2b0 [ 349.343610][ T9923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.343654][ T9923] ? rw_verify_area+0x24a/0x4c0 [ 349.343699][ T9923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.343733][ T9923] vfs_read+0x213/0xa80 [ 349.343768][ T9923] ? __pfx___mutex_lock+0x10/0x10 [ 349.343881][ T9923] ? __pfx_vfs_read+0x10/0x10 [ 349.343915][ T9923] ? __fget_files+0x2a/0x420 [ 349.343947][ T9923] ? __fget_files+0x3a2/0x420 [ 349.343996][ T9923] ? __fget_files+0x2a/0x420 [ 349.344033][ T9923] ksys_read+0x150/0x270 [ 349.344078][ T9923] ? __pfx_ksys_read+0x10/0x10 [ 349.344110][ T9923] do_syscall_64+0x166/0x520 [ 349.344157][ T9923] ? trace_irq_disable+0x3b/0x140 [ 349.344180][ T9923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.344203][ T9923] ? clear_bhb_loop+0x70/0xc0 [ 349.344233][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.344250][ T9923] RIP: 0033:0x7fde9b75e98e [ 349.344266][ T9923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.344296][ T9923] RSP: 002b:00007fde999f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.344322][ T9923] RAX: ffffffffffffffda RBX: 00007fde999f66c0 RCX: 00007fde9b75e98e [ 349.344339][ T9923] RDX: 000000000000000f RSI: 00007fde999f60a0 RDI: 0000000000000004 [ 349.344353][ T9923] RBP: 00007fde999f6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.344366][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.344386][ T9923] R13: 00007fde9ba26038 R14: 00007fde9ba25fa0 R15: 00007fde9bb4fa48 [ 349.344411][ T9923] [ 349.531694][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 349.584608][ T10] usb 3-1: device descriptor read/8, error -71 [ 349.828634][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 349.855452][ T10] usb 3-1: device descriptor read/8, error -71 [ 349.932404][ T9927] bridge8: entered promiscuous mode [ 349.963215][ T10] usb usb3-port1: unable to enumerate USB device [ 350.060964][ T9929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1131'. [ 350.537009][ T10] usb 4-1: USB disconnect, device number 103 [ 351.116374][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 351.194582][ T9954] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5634] was attempted by "  "[9954] [ 351.249514][ T9954] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1135'. [ 351.259164][ T10] usb 4-1: device descriptor read/64, error -71 [ 351.493362][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 351.597086][ T9956] syzkaller0: entered promiscuous mode [ 351.597141][ T9956] syzkaller0: entered allmulticast mode [ 351.624305][ T10] usb 4-1: device descriptor read/64, error -71 [ 351.733326][ T10] usb usb4-port1: attempt power cycle [ 351.904122][ T49] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 351.983064][ T5697] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 352.045512][ T9972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1142'. [ 352.064931][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 352.070768][ T49] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 352.078091][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.078227][ T49] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.078308][ T49] usb 3-1: config 0 interface 0 has no altsetting 0 [ 352.078408][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.080108][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 352.106648][ T49] usb 3-1: config 0 descriptor?? [ 352.109194][ T10] usb 4-1: device descriptor read/8, error -71 [ 352.141094][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 352.153158][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 352.160402][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 352.160595][ T5697] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 352.179599][ T5697] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 352.207915][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.207978][ T5697] usb 2-1: Product: syz [ 352.208013][ T5697] usb 2-1: Manufacturer: syz [ 352.208079][ T5697] usb 2-1: SerialNumber: syz [ 352.342891][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 352.348236][ T9974] bridge7: entered promiscuous mode [ 352.379056][ T10] usb 4-1: device descriptor read/8, error -71 [ 352.461667][ T9965] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5633] was attempted by " 0 \x0a$\x0a \x07 \x09 0 \x090 \x09\x09  \x0a%%\x0c\x09 0 \x090 $ \x07  J\x09 \x09\x09  \x0a%%   [ 352.474627][ T5697] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 352.475905][ T5697] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 352.585573][ T10] usb usb4-port1: unable to enumerate USB device [ 352.606186][ T9976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1143'. [ 352.670131][ T5697] usb 2-1: 2:1 : can't get High Capability descriptor [ 352.887254][ T5697] usb 2-1: USB disconnect, device number 88 [ 352.939454][ T9980] netlink: 'syz.4.1144': attribute type 21 has an invalid length. [ 353.004852][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.826783][T10005] syzkaller0: entered promiscuous mode [ 353.835401][T10005] syzkaller0: entered allmulticast mode [ 354.170647][T10019] bridge7: entered promiscuous mode [ 354.225998][T10021] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5633] was attempted by "  "[10021] [ 354.311995][T10021] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1154'. [ 354.360232][T10023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1155'. [ 354.686967][ T5697] usb 3-1: USB disconnect, device number 91 [ 355.192924][ T5697] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 355.344888][ T5697] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 355.355982][ T5697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.356058][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 355.356106][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 355.356139][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 355.356168][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 355.370156][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 355.370243][ T5697] usb 3-1: Product: syz [ 355.370288][ T5697] usb 3-1: Manufacturer: syz [ 355.370342][ T5697] usb 3-1: SerialNumber: syz [ 355.390749][ T5697] usb 3-1: config 0 descriptor?? [ 355.582850][ T49] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 355.610194][ T5697] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 355.610256][ T5697] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 355.667512][T10037] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 355.744360][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 355.747433][ T49] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 355.762403][ T49] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7 [ 355.776125][T10037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.785393][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.785503][ T49] usb 4-1: Product: syz [ 355.785521][ T49] usb 4-1: Manufacturer: syz [ 355.785537][ T49] usb 4-1: SerialNumber: syz [ 355.812588][ T5697] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 355.812645][ T5697] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 355.812991][ T5697] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 355.873258][T10041] bond2: (slave gretap1): making interface the new active one [ 355.886404][T10041] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 355.962948][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 356.013153][ T5697] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 356.058588][T10034] netlink: 'syz.3.1159': attribute type 4 has an invalid length. [ 356.087986][T10034] netlink: 'syz.3.1159': attribute type 4 has an invalid length. [ 356.116071][T10034] fuse: Bad value for 'fd' [ 356.123596][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.129416][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.129513][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.129566][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.129682][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.129754][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.131450][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.135433][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.148458][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.148561][ T10] usb 5-1: Product: syz [ 356.148635][ T10] usb 5-1: Manufacturer: syz [ 356.229751][ T49] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 356.237434][ T49] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 356.247222][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 356.247270][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 356.271425][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 356.271485][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 356.351957][ T49] usb 4-1: USB disconnect, device number 108 [ 356.430971][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.469431][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.470724][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.512171][T10040] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 356.520339][ T5725] usb 5-1: USB disconnect, device number 80 [ 356.555261][T10041] syz.1.1160 (10041) used greatest stack depth: 19304 bytes left [ 356.973878][T10052] syzkaller0: entered promiscuous mode [ 356.973951][T10052] syzkaller0: entered allmulticast mode [ 357.405682][T10073] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5636] was attempted by "  "[10073] [ 357.469931][T10073] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1170'. [ 357.669617][ T5697] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 357.710635][ T5697] usb 3-1: USB disconnect, device number 92 [ 357.809574][T10077] netlink: 'syz.1.1173': attribute type 2 has an invalid length. [ 357.809662][T10077] netlink: 'syz.1.1173': attribute type 2 has an invalid length. [ 357.874890][T10077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'. [ 358.353607][T10090] netlink: 'syz.2.1175': attribute type 4 has an invalid length. [ 358.633201][ T988] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 358.762829][ T988] usb 3-1: device descriptor read/64, error -71 [ 358.852868][ T10] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 358.971167][T10105] syzkaller0: entered promiscuous mode [ 358.971226][T10105] syzkaller0: entered allmulticast mode [ 359.007699][ T988] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 359.018139][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.020280][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.039706][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.049506][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.050924][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.069853][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.079249][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.089539][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.101036][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.111416][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.138979][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 359.140700][ T10] usb 2-1: New USB device found, idVendor=1410, idProduct=7042, bcdDevice=9d.75 [ 359.142526][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 359.142621][ T10] usb 2-1: can't read configurations, error -71 [ 359.146267][ T988] usb 3-1: device descriptor read/64, error -71 [ 359.253682][ T988] usb usb3-port1: attempt power cycle [ 359.336550][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 359.337543][T10111] 8021q: VLANs not supported on vxcan1 [ 359.373640][ T5725] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 359.524469][ T5725] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 359.527460][ T5725] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 359.527575][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 359.527662][ T5725] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 359.538068][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.538158][ T5725] usb 4-1: Product: syz [ 359.538240][ T5725] usb 4-1: Manufacturer: syz [ 359.538285][ T5725] usb 4-1: SerialNumber: syz [ 359.556657][ T5725] usb 4-1: config 0 descriptor?? [ 359.558952][T10109] raw-gadget.8 gadget.3: fail, usb_ep_enable returned -22 [ 359.559743][T10109] raw-gadget.8 gadget.3: fail, usb_ep_enable returned -22 [ 359.568078][ T5725] usb 4-1: ucan: probing device on interface #0 [ 359.595643][ T988] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 359.622468][ T988] usb 3-1: device descriptor read/8, error -71 [ 359.732980][ T5690] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 359.831665][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 359.857483][ T988] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 359.870329][T10119] program syz.1.1187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.877110][ T988] usb 3-1: device descriptor read/8, error -71 [ 359.886313][ T5690] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 359.887964][ T5690] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.888185][ T5690] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.888370][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.983655][ T988] usb usb3-port1: unable to enumerate USB device [ 360.169220][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.179420][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.196603][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.209189][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.248656][ T5690] dvb_ttusb_budget: ttusb_init_controller: error [ 360.248769][ T5690] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 360.546505][ T5725] ucan 4-1:0.0 can0: registered device [ 360.563410][ T5725] ucan 4-1:0.0 can0: firmware string: VZXzڇ?DˏIE3/!`,[~YA ЅpȽSnh3SJ{R)>^8)2(BJ,idiDžbJwX*=$f [ 360.599497][ T5690] DVB: Unable to find symbol stv0299_attach() [ 360.747719][ T5690] DVB: Unable to find symbol tda8083_attach() [ 360.747780][ T5690] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 360.771534][ T5690] usb 5-1: USB disconnect, device number 81 [ 360.800199][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.812191][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.821394][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.848067][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.313064][ T5697] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 361.366193][ T5690] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 361.474450][ T5697] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.487601][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.487681][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.487711][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.487768][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.518855][ T5690] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 361.550295][ T5690] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.550380][ T5690] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 361.550536][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.591774][ T5697] usb 2-1: config 0 descriptor?? [ 361.828205][ T5690] dvbdev: DVB: registering new adapter (DEC2000-t) [ 361.882572][ T5690] usb 5-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 361.913352][ T5725] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 361.939813][ T5279] ucan 4-1:0.0 can0: bit-timing not yet defined [ 362.017847][ T5690] ttusb_dec_send_command: command bulk message failed: error -71 [ 362.038270][ T5690] usb 5-1: USB disconnect, device number 82 [ 362.071777][ T5725] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 362.076971][ T5725] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 362.077102][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.077174][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.077238][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 362.081705][ T5725] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 362.081735][ T5725] usb 3-1: Manufacturer: syz [ 362.157229][ T5725] usb 3-1: config 0 descriptor?? [ 362.165827][ T5697] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 362.216206][ T25] usb 4-1: USB disconnect, device number 109 [ 362.415645][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.426102][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.665109][ T5725] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 362.699959][ T5725] appleir 0003:05AC:8243.0018: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 362.772825][ T25] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 362.867987][T10168] IPVS: ip_vs_add_dest(): server weight less than zero [ 362.937020][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 362.945273][ T25] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 362.955724][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.966250][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.966287][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.966313][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 362.966360][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.012455][ T5725] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 363.023204][ T25] usb 4-1: config 0 descriptor?? [ 363.183116][ T5725] usb 5-1: Using ep0 maxpacket: 16 [ 363.187997][ T5725] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 363.201528][ T5725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.201627][ T5725] usb 5-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.201666][ T5725] usb 5-1: config 0 interface 0 has no altsetting 0 [ 363.201720][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.250924][ T5725] usb 5-1: config 0 descriptor?? [ 363.287265][ T5725] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 363.301412][T10180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.360801][T10168] usb 2-1: string descriptor 0 read error: -71 [ 363.383281][ T49] usb 3-1: USB disconnect, device number 97 [ 363.483012][ T5683] usb 2-1: reset high-speed USB device number 91 using dummy_hcd [ 363.635672][ T5683] usb 2-1: device descriptor read/64, error -32 [ 363.884066][ T5683] usb 2-1: reset high-speed USB device number 91 using dummy_hcd [ 364.007203][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 364.013768][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 364.028273][ T25] usb 4-1: USB disconnect, device number 110 [ 364.053280][ T5683] usb 2-1: device descriptor read/64, error -32 [ 364.492808][ T25] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 364.649029][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 364.649101][ T25] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.40 [ 364.670458][ T25] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 364.670516][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 364.696006][ T25] usb 3-1: string descriptor 0 read error: -22 [ 364.702647][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.954541][ T5697] usb 2-1: USB disconnect, device number 91 [ 365.064821][ T5712] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 365.185734][ T25] usbhid 3-1:1.0: can't add hid device: -32 [ 365.194123][ T25] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 365.212064][ T25] usb 3-1: USB disconnect, device number 98 [ 365.225484][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 365.232269][ T5712] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 365.247691][ T5712] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 365.247740][ T5712] usb 4-1: config 0 has no interface number 0 [ 365.247807][ T5712] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 365.283353][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.283407][ T5712] usb 4-1: Product: syz [ 365.283499][ T5712] usb 4-1: Manufacturer: syz [ 365.283572][ T5712] usb 4-1: SerialNumber: syz [ 365.320212][ T5712] usb 4-1: config 0 descriptor?? [ 365.328653][T10225] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 365.548879][T10226] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 365.810270][ T5725] usb 5-1: USB disconnect, device number 83 [ 365.939590][T10252] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 365.962431][T10252] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 366.002558][T10251] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1210'. [ 366.002615][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1210'. [ 366.022421][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1210'. [ 366.533450][ T25] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 366.608571][T10261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1213'. [ 366.695270][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 366.701342][ T25] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 366.715139][ T25] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.726442][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.726491][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.754500][ T25] usb 5-1: config 0 descriptor?? [ 367.178961][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 367.189111][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 367.202030][ T25] usb 5-1: USB disconnect, device number 84 [ 367.383052][ T5697] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 367.560280][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.560440][ T5697] usb 2-1: New USB device found, idVendor=0baf, idProduct=00f1, bcdDevice=d4.68 [ 367.584073][ T5697] usb 2-1: config 9 has an invalid interface number: 97 but max is 0 [ 367.584136][ T5697] usb 2-1: config 9 has no interface number 0 [ 367.603571][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.603645][ T5697] usb 2-1: Product: syz [ 367.603679][ T5697] usb 2-1: Manufacturer: syz [ 367.603700][ T5697] usb 2-1: SerialNumber: syz [ 367.792800][ T5725] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 367.885395][ T5697] usb 2-1: USB disconnect, device number 92 [ 367.943578][ T5725] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 367.955085][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 367.955150][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 367.955182][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 219, changing to 7 [ 367.955215][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9103, setting to 1024 [ 367.955263][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.013989][ T5725] usb 3-1: config 0 descriptor?? [ 368.025403][ T5725] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 368.034368][ T5725] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 368.081953][ T5712] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 368.082600][ T5712] asix 4-1:0.188: probe with driver asix failed with error -71 [ 368.117486][ T5712] usb 4-1: USB disconnect, device number 111 [ 368.153704][ T25] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 368.257879][T10276] tipc: Started in network mode [ 368.263069][T10276] tipc: Node identity bea1349fa31, cluster identity 4711 [ 368.270759][T10276] tipc: Enabled bearer , priority 0 [ 368.278859][T10276] syzkaller0: entered promiscuous mode [ 368.287259][ T5725] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 368.293675][T10276] syzkaller0: entered allmulticast mode [ 368.300478][ T5725] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 368.309807][ T5725] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 368.309851][ T5725] em28xx 3-1:0.0: No AC97 audio processor [ 368.329575][T10276] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 368.363973][ T25] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 368.375176][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.375248][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 368.375307][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.397751][ T5725] usb 3-1: USB disconnect, device number 99 [ 368.432494][ T5725] em28xx 3-1:0.0: Disconnecting em28xx [ 368.466290][ T5725] em28xx: Freeing device [ 368.491673][T10276] tipc: Resetting bearer [ 368.505030][T10275] tipc: Resetting bearer [ 368.531912][T10275] tipc: Disabling bearer [ 368.563869][ T5712] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 368.665425][T10283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1221'. [ 368.665873][T10283] FAULT_INJECTION: forcing a failure. [ 368.665873][T10283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.665961][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.0.1221 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.666044][T10283] Tainted: [L]=SOFTLOCKUP [ 368.666066][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.666104][T10283] Call Trace: [ 368.666127][T10283] [ 368.666149][T10283] dump_stack_lvl+0xe8/0x150 [ 368.666253][T10283] should_fail_ex+0x410/0x560 [ 368.666361][T10283] _copy_to_user+0x31/0xb0 [ 368.666436][T10283] simple_read_from_buffer+0xe1/0x170 [ 368.666531][T10283] proc_fail_nth_read+0x1bb/0x230 [ 368.666625][T10283] ? common_file_perm+0x20e/0x2b0 [ 368.666690][T10283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.666784][T10283] ? rw_verify_area+0x24a/0x4c0 [ 368.666870][T10283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.666955][T10283] vfs_read+0x213/0xa80 [ 368.667064][T10283] ? __pfx___mutex_lock+0x10/0x10 [ 368.667154][T10283] ? __pfx_vfs_read+0x10/0x10 [ 368.667248][T10283] ? __fget_files+0x2a/0x420 [ 368.667333][T10283] ? __fget_files+0x3a2/0x420 [ 368.667399][T10283] ? __fget_files+0x2a/0x420 [ 368.667495][T10283] ksys_read+0x150/0x270 [ 368.667582][T10283] ? __pfx_ksys_read+0x10/0x10 [ 368.667695][T10283] do_syscall_64+0x166/0x520 [ 368.667775][T10283] ? trace_irq_disable+0x3b/0x140 [ 368.667829][T10283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.667893][T10283] ? clear_bhb_loop+0x70/0xc0 [ 368.667959][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.668016][T10283] RIP: 0033:0x7fac6775e98e [ 368.668069][T10283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.668140][T10283] RSP: 002b:00007fac685b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.668204][T10283] RAX: ffffffffffffffda RBX: 00007fac685b76c0 RCX: 00007fac6775e98e [ 368.668246][T10283] RDX: 000000000000000f RSI: 00007fac685b70a0 RDI: 0000000000000004 [ 368.668280][T10283] RBP: 00007fac685b7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.668320][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.668353][T10283] R13: 00007fac67a26038 R14: 00007fac67a25fa0 R15: 00007fac67b4fa48 [ 368.668445][T10283] [ 368.761210][ T5712] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 368.800095][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 368.800160][ T5712] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 368.887494][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.887558][ T5712] usb 4-1: Product: syz [ 368.887576][ T5712] usb 4-1: Manufacturer: syz [ 368.887592][ T5712] usb 4-1: SerialNumber: syz [ 368.985430][ T5712] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 369.002832][ T49] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 369.011528][ T5712] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 369.011528][ T5712] Please send a copy of this message to and [ 369.060979][T10289] loop5: detected capacity change from 0 to 7 [ 369.067269][T10289] loop5: [ 369.067297][T10289] loop5: partition table partially beyond EOD, truncated [ 369.111465][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.112267][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.129149][T10291] bridge0: entered allmulticast mode [ 369.157430][T10291] bridge_slave_1: left allmulticast mode [ 369.157535][T10291] bridge_slave_1: left promiscuous mode [ 369.183629][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.222833][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 369.228794][ T49] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 369.243746][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.254160][ T49] usb 2-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.267924][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 369.274790][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.287053][T10291] bridge_slave_0: left allmulticast mode [ 369.298911][T10291] bridge_slave_0: left promiscuous mode [ 369.312763][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.316205][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 369.316968][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 369.341361][ T49] usb 2-1: config 0 descriptor?? [ 369.348401][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 369.361292][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 369.377765][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 369.406447][ T5712] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 369.409650][ T49] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 369.514000][T10297] bridge8: entered promiscuous mode [ 369.533765][ T5690] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 369.663405][ T25] ttusb_dec_send_command: result bulk message failed: error -110 [ 369.676248][ T25] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -110 [ 369.685316][ T5690] usb 3-1: Using ep0 maxpacket: 32 [ 369.687631][ T5690] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 369.711795][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.711852][ T5690] usb 3-1: Product: syz [ 369.711888][ T5690] usb 3-1: Manufacturer: syz [ 369.711963][ T5690] usb 3-1: SerialNumber: syz [ 369.998436][ T5690] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 370.019804][ T5690] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 370.168998][ T5690] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 370.206893][ T5690] usb 3-1: USB disconnect, device number 100 [ 370.271546][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.652289][T10306] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 370.652322][T10306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 370.670996][T10306] vhci_hcd vhci_hcd.0: Device attached [ 370.680150][T10307] usbip_core: unknown command [ 370.684669][T10307] vhci_hcd: unknown pdu 515 [ 370.684715][T10307] usbip_core: unknown command [ 370.698518][ T8495] vhci_hcd vhci_hcd.0: stop threads [ 370.698556][ T8495] vhci_hcd vhci_hcd.0: release socket [ 370.698670][ T8495] vhci_hcd vhci_hcd.0: disconnect device [ 370.978455][ T25] usb 5-1: USB disconnect, device number 85 [ 371.105198][T10316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.358077][ T25] usb 4-1: USB disconnect, device number 112 [ 371.702190][ T25] usb 2-1: USB disconnect, device number 93 [ 371.890034][T10338] Cannot find add_set index 0 as target [ 371.974690][T10341] loop5: detected capacity change from 0 to 7 [ 371.989480][T10341] loop5: [ 371.989541][T10341] loop5: partition table partially beyond EOD, truncated [ 372.183065][ T25] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 372.216217][ T5616] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 372.248956][ T31] audit: type=1326 audit(1788457967.275:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.274026][ T31] audit: type=1326 audit(1788457967.275:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.299234][ T31] audit: type=1326 audit(1788457967.275:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.306285][ T31] audit: type=1326 audit(1788457967.275:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.306468][ T31] audit: type=1326 audit(1788457967.275:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.306584][ T31] audit: type=1326 audit(1788457967.285:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.306702][ T31] audit: type=1326 audit(1788457967.285:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.306846][ T31] audit: type=1326 audit(1788457967.295:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.306969][ T31] audit: type=1326 audit(1788457967.295:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.307077][ T31] audit: type=1326 audit(1788457967.295:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.2.1236" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f659e159 code=0x7ffc0000 [ 372.474499][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 372.510916][ T25] usb 2-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 372.511012][ T25] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.541435][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.541482][ T25] usb 2-1: Product: syz [ 372.541517][ T25] usb 2-1: Manufacturer: syz [ 372.541537][ T25] usb 2-1: SerialNumber: syz [ 372.573078][ T25] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 372.787588][ T25] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 372.787872][ T25] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 372.814599][ T5683] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 372.847156][ T25] usb 2-1: USB disconnect, device number 94 [ 372.982781][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 372.988968][ T5683] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 373.000493][ T5683] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 373.009140][ T5683] usb 3-1: config 0 has no interface number 0 [ 373.009223][ T5683] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 373.009255][ T5683] usb 3-1: config 0 interface 196 has no altsetting 0 [ 373.039159][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.039222][ T5683] usb 3-1: Product: syz [ 373.039268][ T5683] usb 3-1: Manufacturer: syz [ 373.039289][ T5683] usb 3-1: SerialNumber: syz [ 373.064758][ T5683] usb 3-1: config 0 descriptor?? [ 373.073267][T10346] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 373.437843][T10360] __nla_validate_parse: 30 callbacks suppressed [ 373.438560][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 373.488375][T10362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.514158][ T5683] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 373.525181][ T5683] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 373.693301][ T25] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 373.844324][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 373.846272][T10371] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 373.863758][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.877140][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.887269][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.909344][ T988] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 373.917682][ T25] usb 4-1: config 0 descriptor?? [ 374.020796][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 374.063153][ T988] usb 5-1: Using ep0 maxpacket: 16 [ 374.064786][ T988] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 374.067767][ T988] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.067898][ T988] usb 5-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.067969][ T988] usb 5-1: config 0 interface 0 has no altsetting 0 [ 374.068055][ T988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.074528][ T5690] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 374.088576][ T988] usb 5-1: config 0 descriptor?? [ 374.129502][ T988] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 374.203084][ T5690] usb 2-1: device descriptor read/64, error -71 [ 374.356335][ T25] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 374.364371][ T25] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 374.364409][ T25] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 374.364437][ T25] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 374.364465][ T25] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 374.405640][ T25] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 374.445800][ T5690] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 374.572817][ T5690] usb 2-1: device descriptor read/64, error -71 [ 374.683314][ T5690] usb usb2-port1: attempt power cycle [ 375.022943][ T5690] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 375.045444][ T5690] usb 2-1: device descriptor read/8, error -71 [ 375.282916][ T5690] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 375.303900][ T5690] usb 2-1: device descriptor read/8, error -71 [ 375.414223][ T5690] usb usb2-port1: unable to enumerate USB device [ 375.669276][ T5712] usb 3-1: USB disconnect, device number 101 [ 376.124865][ T5712] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 376.263569][ T5712] usb 3-1: device descriptor read/64, error -71 [ 376.409531][ T25] playstation 0003:054C:0DF2.0019: Failed to retrieve feature with reportID 5: -71 [ 376.409730][ T25] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense calibration info: -71 [ 376.409910][ T25] playstation 0003:054C:0DF2.0019: Failed to get calibration data from DualSense [ 376.409963][ T25] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 376.478855][ T25] playstation 0003:054C:0DF2.0019: probe with driver playstation failed with error -71 [ 376.513425][ T5712] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 376.645581][ T5712] usb 3-1: device descriptor read/64, error -71 [ 376.702041][ T5697] usb 5-1: USB disconnect, device number 86 [ 376.766366][ T5712] usb usb3-port1: attempt power cycle [ 376.917401][T10404] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1249'. [ 376.972549][ T25] usb 4-1: USB disconnect, device number 113 [ 377.049943][T10408] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 377.060328][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 377.134953][ T5712] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 377.156199][ T25] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 377.163693][ T5712] usb 3-1: device descriptor read/8, error -71 [ 377.209162][T10412] usb usb7: usbfs: process 10412 (syz.4.1250) did not claim interface 0 before use [ 377.322962][ T25] usb 4-1: Invalid ep0 maxpacket: 64 [ 377.403495][ T5712] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 377.424657][ T5712] usb 3-1: device descriptor read/8, error -71 [ 377.466517][ T25] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 377.533320][ T5712] usb usb3-port1: unable to enumerate USB device [ 377.624230][ T25] usb 4-1: Invalid ep0 maxpacket: 64 [ 377.625177][ T25] usb usb4-port1: attempt power cycle [ 377.973171][ T25] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 378.003429][ T25] usb 4-1: Invalid ep0 maxpacket: 64 [ 378.034747][ T5712] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 378.112292][T10427] loop5: detected capacity change from 0 to 7 [ 378.120340][T10427] loop5: [ 378.120374][T10427] loop5: partition table partially beyond EOD, truncated [ 378.135298][ T25] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 378.163943][ T25] usb 4-1: Invalid ep0 maxpacket: 64 [ 378.164249][ T25] usb usb4-port1: unable to enumerate USB device [ 378.184152][ T5712] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 378.190628][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.212106][ T5712] usb 2-1: config 0 descriptor?? [ 378.245695][ T5712] pwc: Samsung MPC-C10 USB webcam detected. [ 378.293901][T10429] syzkaller0: entered promiscuous mode [ 378.299764][T10429] syzkaller0: entered allmulticast mode [ 378.336393][T10429] tipc: Started in network mode [ 378.336449][T10429] tipc: Node identity fabf528d1c04, cluster identity 2508 [ 378.362407][T10429] tipc: Enabled bearer , priority 0 [ 378.380366][T10428] tipc: Resetting bearer [ 378.412338][T10428] tipc: Disabling bearer [ 378.424864][ T5712] pwc: send_video_command error -71 [ 378.424920][ T5712] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 378.426657][ T5712] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 378.445250][ T5712] usb 2-1: USB disconnect, device number 99 [ 378.567298][T10433] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 378.883039][ T5712] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 378.948681][T10449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1262'. [ 379.025199][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.025295][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.057104][ T5712] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 379.068238][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.090381][ T5712] usb 2-1: config 0 descriptor?? [ 379.109961][ T5712] pwc: Samsung MPC-C10 USB webcam detected. [ 379.510854][ T5712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 379.528990][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.552109][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.561208][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 379.567071][ T5712] pwc: recv_control_msg error -32 req 04 val 1700 [ 379.570841][ T5712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 379.589311][ T5712] pwc: recv_control_msg error -32 req 04 val 1000 [ 379.596659][ T5712] pwc: recv_control_msg error -32 req 04 val 1300 [ 379.611912][ T5712] pwc: recv_control_msg error -32 req 04 val 1400 [ 379.619343][ T5712] pwc: recv_control_msg error -32 req 02 val 2000 [ 379.647821][ T5712] pwc: recv_control_msg error -71 req 02 val 2100 [ 379.651451][ T5712] pwc: recv_control_msg error -71 req 02 val 2200 [ 379.662496][ T5712] pwc: recv_control_msg error -71 req 06 val 0600 [ 379.664856][ T5712] pwc: recv_control_msg error -71 req 04 val 1500 [ 379.669439][ T5712] pwc: recv_control_msg error -71 req 02 val 2500 [ 379.683244][ T5712] pwc: recv_control_msg error -71 req 02 val 2400 [ 379.684241][ T5712] pwc: recv_control_msg error -71 req 02 val 2600 [ 379.692639][ T5712] pwc: recv_control_msg error -71 req 02 val 2900 [ 379.701426][ T5712] pwc: recv_control_msg error -71 req 02 val 2800 [ 379.712779][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 379.714072][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 379.750342][ T5712] pwc: Registered as video103. [ 379.759237][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 379.828646][ T5712] usb 2-1: USB disconnect, device number 100 [ 379.837291][T10436] cgroup: fork rejected by pids controller in /syz4 [ 380.039345][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1264'. [ 380.039417][T10475] netlink: 'syz.3.1264': attribute type 7 has an invalid length. [ 380.039434][T10475] netlink: 'syz.3.1264': attribute type 8 has an invalid length. [ 380.039447][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 380.115851][T10475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.168447][T10475] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 380.590228][T10498] loop5: detected capacity change from 0 to 7 [ 380.598293][T10498] loop5: [ 380.598338][T10498] loop5: partition table partially beyond EOD, truncated [ 380.611434][T10496] TC_ACT_REPEAT abuse ? [ 380.716784][T10500] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1271'. [ 380.752846][ T988] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 380.904345][ T988] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.914060][ T988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.914094][ T988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.914117][ T988] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.914160][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.925578][ T988] usb 2-1: config 0 descriptor?? [ 380.969796][ T5725] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 381.134496][ T5725] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 381.141719][ T5725] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 381.141919][ T5725] usb 3-1: config 0 has no interface number 0 [ 381.142098][ T5725] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.168385][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.168472][ T5725] usb 3-1: Product: syz [ 381.168568][ T5725] usb 3-1: Manufacturer: syz [ 381.168611][ T5725] usb 3-1: SerialNumber: syz [ 381.202310][ T5725] usb 3-1: config 0 descriptor?? [ 381.267100][ T5725] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 381.400905][ T988] plantronics 0003:047F:FFFF.001A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 381.469771][ T988] usb 3-1: USB disconnect, device number 106 [ 381.473471][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 381.500608][ T988] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 381.624074][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 381.626677][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.639641][ T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 381.639729][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 381.639842][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 381.639936][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 381.640010][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.640128][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.717523][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 381.793113][ T5690] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 381.908071][T10518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.919785][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.920389][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.943372][T10519] xt_hashlimit: size too large, truncated to 1048576 [ 381.943686][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.944415][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.968340][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 381.981078][ T5690] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 381.989367][ T5690] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.989479][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.013473][ T5690] usb 4-1: config 0 descriptor?? [ 382.027920][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1275'. [ 382.048385][ T5690] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 382.111011][ T5690] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 382.117550][ T5690] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 382.117701][ T5690] usb 4-1: media controller created [ 382.149821][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.161450][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.188163][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.222076][ T5712] usb 5-1: USB disconnect, device number 87 [ 382.249058][T10518] xt_hashlimit: size too large, truncated to 1048576 [ 382.256114][T10524] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 382.268142][T10524] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 382.276636][T10524] CPU: 0 UID: 0 PID: 10524 Comm: syz.2.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.287630][T10524] Tainted: [L]=SOFTLOCKUP [ 382.291995][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.302094][T10524] RIP: 0010:__mutex_lock+0x149/0x1550 [ 382.307718][T10524] Code: c0 40 a5 9d 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 3f 12 00 00 83 3d 85 46 b8 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 bc 25 52 f6 4d 39 64 24 58 0f 85 52 11 00 00 [ 382.327378][T10524] RSP: 0018:ffffc9001038f460 EFLAGS: 00010206 [ 382.333503][T10524] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a9da503 [ 382.341615][T10524] RDX: 0000000000000000 RSI: ffffffff8e6fc468 RDI: 00000000000000c0 [ 382.349639][T10524] RBP: ffffc9001038f5f8 R08: ffffc9001038f567 R09: 0000000000000000 [ 382.357657][T10524] R10: ffffc9001038f540 R11: fffff52002071ead R12: 0000000000000068 [ 382.365674][T10524] R13: 0000000000000000 R14: 1ffff92002071ea0 R15: 0000000000000000 [ 382.373666][T10524] FS: 00007f09f74386c0(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 382.382622][T10524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.389240][T10524] CR2: 00007f09f73f5ff8 CR3: 000000002b9b6000 CR4: 00000000003526f0 [ 382.397251][T10524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 382.405222][T10526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1276'. [ 382.405241][T10524] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 382.422168][T10524] Call Trace: [ 382.425475][T10524] [ 382.428432][T10524] ? __mutex_lock+0x30b/0x1550 [ 382.433220][T10524] ? dvb_usbv2_generic_write+0x26/0x60 [ 382.438827][T10524] ? __mutex_trylock_common+0x15f/0x270 [ 382.444391][T10524] ? __pfx___mutex_lock+0x10/0x10 [ 382.449434][T10524] ? __pfx___mutex_lock+0x10/0x10 [ 382.454477][T10524] ? __mutex_lock+0x321/0x1550 [ 382.459291][T10524] dvb_usbv2_generic_write+0x26/0x60 [ 382.464592][T10524] mxl111sf_ctrl_msg+0x160/0x2f0 [ 382.469634][T10524] mxl111sf_write_reg+0xa9/0x1b0 [ 382.474588][T10524] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 382.480161][T10524] mxl111sf_i2c_xfer+0x463/0x5060 [ 382.485276][T10524] ? lock_acquire+0x115/0x350 [ 382.489967][T10524] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 382.495474][T10524] ? kernel_text_address+0xa5/0xe0 [ 382.500615][T10524] ? __kernel_text_address+0xd/0x30 [ 382.505823][T10524] ? do_raw_spin_lock+0x12b/0x2f0 [ 382.510864][T10524] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.516754][T10524] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.522579][T10524] ? stack_depot_save_flags+0x404/0x7f0 [ 382.528145][T10524] ? kasan_save_track+0x4f/0x80 [ 382.533007][T10524] ? kasan_save_track+0x3e/0x80 [ 382.537866][T10524] ? __kasan_kmalloc+0x93/0xb0 [ 382.542638][T10524] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 382.549305][T10524] ? memdup_user+0x2b/0xd0 [ 382.553768][T10524] ? look_up_lock_class+0x57/0x110 [ 382.558903][T10524] ? register_lock_class+0x31/0x2e0 [ 382.564115][T10524] ? __lock_acquire+0x6df/0x2e50 [ 382.569073][T10524] ? do_raw_spin_lock+0x12b/0x2f0 [ 382.574117][T10524] __i2c_transfer+0x7bf/0x1fe0 [ 382.579003][T10524] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.584822][T10524] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.590643][T10524] ? rt_mutex_lock_nested+0x156/0x1c0 [ 382.596025][T10524] ? i2c_transfer+0xc7/0x2d0 [ 382.600633][T10524] i2c_transfer+0x1cb/0x2d0 [ 382.605168][T10524] i2cdev_ioctl_rdwr+0x460/0x740 [ 382.610189][T10524] i2cdev_ioctl+0x6a5/0x880 [ 382.614717][T10524] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 382.619756][T10524] ? __fget_files+0x3a2/0x420 [ 382.624446][T10524] ? __fget_files+0x2a/0x420 [ 382.629051][T10524] ? bpf_lsm_file_ioctl+0x9/0x20 [ 382.634002][T10524] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 382.639059][T10524] __se_sys_ioctl+0xfc/0x170 [ 382.643678][T10524] do_syscall_64+0x166/0x520 [ 382.648286][T10524] ? trace_irq_disable+0x3b/0x140 [ 382.653315][T10524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.659414][T10524] ? clear_bhb_loop+0x70/0xc0 [ 382.664106][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.670011][T10524] RIP: 0033:0x7f09f659e159 [ 382.674521][T10524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.694143][T10524] RSP: 002b:00007f09f7438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.702573][T10524] RAX: ffffffffffffffda RBX: 00007f09f6825fa0 RCX: 00007f09f659e159 [ 382.710562][T10524] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000004 [ 382.718569][T10524] RBP: 00007f09f6635024 R08: 0000000000000000 R09: 0000000000000000 [ 382.726559][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.734548][T10524] R13: 00007f09f6826038 R14: 00007f09f6825fa0 R15: 00007f09f694fa48 [ 382.742543][T10524] [ 382.745569][T10524] Modules linked in: [ 382.750955][T10524] ---[ end trace 0000000000000000 ]--- [ 382.781012][T10524] RIP: 0010:__mutex_lock+0x149/0x1550 [ 382.787586][T10524] Code: c0 40 a5 9d 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 3f 12 00 00 83 3d 85 46 b8 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 bc 25 52 f6 4d 39 64 24 58 0f 85 52 11 00 00 [ 382.811773][T10524] RSP: 0018:ffffc9001038f460 EFLAGS: 00010206 [ 382.818552][T10524] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a9da503 [ 382.827233][T10524] RDX: 0000000000000000 RSI: ffffffff8e6fc468 RDI: 00000000000000c0 [ 382.836069][T10524] RBP: ffffc9001038f5f8 R08: ffffc9001038f567 R09: 0000000000000000 [ 382.873754][T10524] R10: ffffc9001038f540 R11: fffff52002071ead R12: 0000000000000068 [ 382.873813][T10524] R13: 0000000000000000 R14: 1ffff92002071ea0 R15: 0000000000000000 [ 382.873834][T10524] FS: 00007f09f74386c0(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 382.873857][T10524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.873877][T10524] CR2: 00007fe49ac74e9c CR3: 000000002b9b6000 CR4: 00000000003526f0 [ 382.873902][T10524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 382.873917][T10524] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 382.874025][T10524] Kernel panic - not syncing: Fatal exception [ 382.936494][T10524] Kernel Offset: disabled [ 382.940864][T10524] Rebooting in 86400 seconds..