last executing test programs: 37.202788721s ago: executing program 0 (id=1438): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000007806699280080000000000d0f75a0fad923efc588e4ddd432db495a1117175ea45fcc545a8fd639a85b0cd5c63046fc66d9c6fa0923715724f3f85faab17", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYRES16, @ANYRES8=r1, @ANYRESOCT=r7, @ANYRESDEC=r1, @ANYRES8=r3, @ANYRESDEC=r4], 0x70}, 0x1, 0x7}, 0x0) 37.195252591s ago: executing program 0 (id=1442): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) truncate(&(0x7f0000000000)='./file0\x00', 0x4ee) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000f5100)={0x0, 0x0, "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", "f481f9f6f12fd30afe8438750b52c9e12de0e086cd092c4224c212e4e8a14de435c352c916cfc7244ec5d727738a1f13718b6624e5cc93f6d27a2f48611f9914bc7760d07d563849c8c582af9a468cd09058a977f4288cb8be865578e65aff23b388614eee1405997b247eea9265645696bb7b86ad68bf6cd5c8c05f4df00495b0ae0d76fdd8ae17c4762802893756f6bc82e5c0bfce79974e77664860d16032707365a305db92600406792218da56236b62070e8d8d30df154616cf598169996caf2f2b612ba25c06cfd858b725e0e08680fe55288614318de038b7d989510e1a3c33268b393dba5461777f852b14b4ea1643b082e06c58f340f613d2baf2462466a47fbb432de8d4a4570c6cb65c9c4368899290cbf658745828b352173a0bc19ead97d8e8797f289d6b5c046ef9829533a050e16104febcbb5d2eee1b114fc39df8bcdfdc9f895a956b23eff39bbbc4686c072cf86a99329e7bf94f5c5e31f0a5622920ec9d733ed33c5695a5e12f3b295a5ff21136e6640de7d97712155d33400ce5171957adfed32d7a8066c5c56beae9fe4fe8c458753c6b29009f9bb6561c704b47f4434359400432e7094361de83d13e61d7487225f5ce87fece7c437d75de3cab1d519a5d59a903d677823e4a116de39b9e98a83dd43a42816d0fd8e943eed0ed94cc6ac298905bcc40f06d1b79375bb9bfb27facd04bf8c040ba8d3be49fdbc12ad55b8ff0f84f27ba037e7a532b6b38856df926e273c3983ed1fd049f129ce7501a6530723578721e9d1cb78c9b73eb6451c492a45f03a50b0d3b9384151b49e45f6bc77089475b5d1316192188193f56af4034474edee2c0b48f3cbe5f5e37ff02681d6a14874b193d8b11d02b2f324d2fc13551b824f7e38a17f38ef3702eb93685ab3b345b63962687e99964f1b2ab0f2a272e1b8e991a7b813dccbb665588318d1df8ec06708c702b0fff936573d4ad01c9afb8eb8ce72cf6ea40d2bf536771c397a4df61ed632513fff9fb8ba46a8926631db8f6f3da0c32ed57876abc4ab55c1f66d7c47ad864cc5ace03ad9f662b1be129e0f12d2c7361e1811d3c374c1fb78626f264d2166426f043f32c68f209eaa1a5c051d19153702da97f8c97dbe273c8fe3a2be9781f587e03f43b23fc82a74668290e01c32cb758eab326ad281fa5260924e52eb9bff851d73498fbb53d53acbd835c014ea3377cbda1445c6d3f83e58b53ba953f5df7f7c651ef2a2e5876c0461e679f8525ff29be680418accd585ea1adbc92f1651f4a93ded4d233b8f2400969227674e6ea25e15644cd51356ac092520a8235d540eaaad4e85ebf21632b99f13c62cfbd61d17128b4521047ebd506054d906d16681f449fc4d0894dd5d07e7d577403c059530bdf13a5fc1788f99098395db9a0781dd656d75281a22a988b90d764158ebae9cb194aa2e2aa855be65bc8fa708e51e4b2bf7e147fbf45ac54adf1324f5ae19bce809e4aba8d67434aa896c953cf9d819a8c1a2a2f8320480341bb98f950089b6cd3e1cff067453fd7c4f64ff23147318f466de65fa8cb757101e426e946fbdcf1b2f6c2d010cc44a40cab1605cd1d8ba829d9c9c9666565584fecf9663c61960a623940459488e8f6be90853ca1dc8bc5325468697060fcbea552c7a02cf9a360ae28b9319f7f62c950c57f898b000badfa959a7d9269b20f7135ca37c412fe4a090be761283fce40213c55a05acf32fda15b0181d27d3d8d2afd301a8509f612b5ce7e060ef91105dae1ee9a8aa9f3b8fc91bfb5273fb6151f3253d93bde44d93dab5f830ec02284910064d4419eba7c308c1e4fe3733514d1e8af27667891b77212e5854256ea8cb69b54586359db965a2509d4e0f085fc419b71d586bdf509054965e08ba2861fc8bc94fdc5abd79e1a7248fb0b486e20c8f122c25313c94ecc7eb906162ef167d5d4fb8a0f363fcf1e1be8cbbab27104f6de3c6a75fac70a34c0b5ac3d2f64a083386419bfbb648a468635c2ecdbf11205bf54b1f4fac73febdf7d880f966921a4d30c87987ed0d8f8a9ddf6844b3ce625521423c107bdadf15702d90177f505c90674282ebcd84f39333940d7e885eca7c0c27a9f848d9b01b907cfd9311fea49bdee9639cf9cd4e7870236f94e027b285056d584af8b49fdcae2f41fe7d10820a1672919268818c19c6b81e73a5a14c0f3cf2235130fe231839d663bb8793a616156c58f85bd317b429b335b13d567e32a9e15b2b765baaaff22205cda801d359e55124da4944be057ca080b232e17f72cd122b7af76f0e9bc54f281672fcae8c261b11338c688cde1fd794cc3839f580823566caa05c06e69d57532fefd199bbf310c08f79554255fef38cd8633a65c1c32b5225a27386c16769d082cb2b50854b186f9258a0eacd23e255384086b06cabd5383757082ceba7aeec2c8f049913c58e2404cb0e687bb21693f66d044f1c36db189c5c73b897a78cec8c0df447d2cfd63572b49bfef6a23782fd6efc43d115e1b8fdd2f4afda1b8a2b55c185341a8dae1d5905c86df9748755ed1f6423dead92c3b18709124a9fd93c0b57a7c5016932af26710b03e32046fe47845a438927cdbcf86987200f949aa2c6d19af49d2c428bfa570614c69b44a5f13f09f4f897890f0927dd1f73fdbd8c92da8bf175c0113c0712ca77d080c3766b67b00b397eac82aa4ef389bb36640d0364f3a3aad6187b0484160e6773db665b7fb3eb50d94b7c9fe009a9d8a407bdb54a6fb62f019f860f9f941aab41181e6764d7aa72b16059ac374568c66d8555444ecdd400155cc8ac2458f9eb68635a133cde627cea7cedd0856e5a73c685f98a407547d56dd2c6cee500ec1bf3c65a9b9d2e404d2def15d1e6a359f6cf2320f99f793984a99f7995fb528f4da973dedf2433ea656cb9ce9923d4edde27149ec53d7c049b21307e81468aac55ee9d57c46a2213d129033af7f02126a4502dea003638f622728b6ab6b5b80fa023043f82fe941009fa749d84aee6d2c2f5ed431311c1041b6b291b679aa3e6d62c0c212234269b2e77f3726d0545d2a1b6f48f0dff1dd620a5d794ee7d66b7b37e6c253a59e3364d8c2133e1502eb5f08979990e6d531dd0a20e25b5d49e0f267924b9f096b9d283413d1a7d7eae3fefea693e91541353d09dd293d604b423789df2519d8e445e66458c1768f83b3f8732cb9339e4d69a559daafc5725c7b44967535e5cc4b6371af0b00879326bc24375c44925b6fdb38b659d817e72d1607de9246b71704fd5e569d1c6c0ae284e26ec95906dd3bd57afe380ce99979c40afe4bb1b0bd97c984b7639dcdb04ff1243e2cb2955b8a204e3a76e75ff83ff27d8ebe31b590c8a1a1c042b794dbb65821b2a4e6a011822ae9db807cd935d0ce0574a4bca628745afb1be2eea9270acfe86bf681788da0927f4611719f378193902f8a53c135842a70dfe52c00e65ad665c5e113306c55e706290182b8ae774f551452f7ac818625bb559b1074d92f4120cd3f5b7847c882fa2a48d343d37e68eb0b360c4a6516f4cd27d107ce2d99e7f59ec9af5b68121ef247eb080ab8ef692a352991712fdd03773a11a4adc50dfa06841150898bc7ad538aa76cf980d5d17136b942bbe0d617074fbbf39b8c3eb97ce033e68ba4f544ffb32227dfb199803a69a36b8dd4c463a321cd15143f7e2000725ee455b711151f61e3cf8b1dbe11b061a4d56c68408ef22c2cd406ca2edf5e6fc0cdcaad2461eb3ab7dc174903aa33b9f092d8e34f2881b5776a0f1683aeb076bd910f7de9bd0c0e22cb0212d1d02dd24072c71aafdda50f7ac0f1a14aebd9920e2b5625c5e651989591985b6754d89508da4219ae5687ad72dacca71ba37eb3e88429c991c8db6de752891f189ca4e18f527fbbb07b6a79616ea49830a9835a5326ec3c4279fe2ba11fefa498141edc611d55f99c76f7b55a291d0da34f72c2cfba784660ba0e971d6d01f7a6006198d0b05af429f0e2665c4e44e464d4d017c9a258fc151420e479f854e7ce76435c054dbf6fe9dba8577599b6626492f46722d709db3d6abc7dd1928871bbc3b775a743b0a11a82c42b616b63b2dae2480ca53631db4379444b0443bb33e036bdf0b578e5ceab82b7885624e6facee518fd12f67014b8c927b9c1600388da8dadfc286e4ea7476d746fabf07c5203f50e5984d5ce523afd181cf7d9b93194c77997c3c3bc1ec766a79350296c4eb489077d7ba8ebc4439731072a4b0f9d752118226f8fad9d238ce3be5c917994ee00089a6208e01f4d2fc27beb00a6252bc0d90ead155c7166b258e458a206497bfdd900ef918aaae1a39ff93712d8945cf963c4b97c3bfe6b1b0fa9a792463039c6cda1f349f82377241a2a3a9f22c34d4fdf062414076ef1e33cf2eb4826edcec4150d0b61b6d28edc22945f8051a6cb8fc71ef99306e7deb4a4cd217e58966bc148c9c630cf784f6e0d6c985bec38834b19014f611607f24ac8003fa0d0faed5d17f1d7401cda13aa36d9af35d57f7b094ebb68a0ca34775bebf4ced6a082a9dbff0be07e255fbc66cf583f360d3b63b356b32ff03d0ee02d2a44f0fda3e810f2363a658d71e080b2a05f6f68736ff9e742f710538c3bedc44da9723961924c2597d6b37f0c975b2f9a068a5fa34a641bd2480d2a228ffdf33f3d3cdca2f0100452e73a043a2158b74bee75f1fe6d9e5393e2db31aa3800685011d304b9f438daad4c49e245cdc64789f7fb31b15ecddda85df47204a89fe19e7b99de38526cd0aa332d11504ae8f00fdd11dbecbe01eda1762b605b524985917dbd7d8df5f53d5197d971da67a1ec4cc13a2376fe96cd5a187a2025f96831d569bbdc40500c5363e2a4a75e2c1c132f41f993879f7031ba1c3e97b006b6bc02ac7266973a126f707192727b089e33d9bc8757475c466150a74f901f3fe2819231c4a2e9e81eacc0fce960cc818725792f88ac31841ecde3ecb34a5c1c63373bf6835662415511e555ee80674405157e0f0a76c23c20f921bf4402275305d09f45f607b1a63f7375561edc7c5d8d150f3616f50d36b78a9c15abf6230187ff4b9c17e13fb2f7a6d10e8bc7f6eed032707a5de2a22f1550fd1cdbf7806859a906e68875c5a05fd5780a65d49252d8615d897b3f03641346de58488a82b6fd40d46780182568bcdbed9008b50b3cf5e87fc9909511e9ee59020b13156f4683b195f3538053afc5646e4e6172449d1d835b0f09dd9f8da0ec5a88f6ac15501058051b891f805563863ec57ef4693ee2d950622cc30d63c9d98e6904995959bd4301fb3bdfedb31e8e2a17d81e096eaeefed2a8cb0db6d3437ad0f5d0068bfcc5026b8cf58a61fe235bfbb2dcf2570c79a11eb2c58d6dd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000f6100)={{0x0, 0xff, 0x8, 0xfe, 0xece0, 0x4, 0x94, 0x3, 0x0, 0x4, 0xfffffff9, 0xb, 0xfffffffffffff801, 0x4, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000f7300)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {r7}], 0xb3, "72db0cf04e34a6"}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) r9 = socket(0x2a, 0x3, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r10, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}, 0x40004) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000340)={0x70, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000880}, 0x24000000) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r13, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x7}, "766a00142ca33ed5", "876747f095b6afdb4b0571a263398180e1ca2fec4e902dcf72b8e79616b12b2e", "1bacd9c4", "3d555317a77d2da0"}, 0x38) sendmmsg$inet6(r12, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 37.0252266s ago: executing program 0 (id=1447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000044010500ff020000000000000000000000000001000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000feffffff00000000000000000000000000000000fe8000000000000000000000000000bb0000000033"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 36.669540151s ago: executing program 0 (id=1450): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a300000000008"], 0x1e4}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getroute={0x2c, 0x1a, 0x421, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xa, 0xfc, 0x4, 0xfe, 0x6, 0xa80}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') rt_sigqueueinfo(0x0, 0x24, &(0x7f0000000000)={0x27, 0x8, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x2, 0xec, 0x1, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x6, 0x7, 0x800080000001, 0x8, 0x2, 0x2, 0x9, 0x5, 0x100000000035, 0x8, 0xc], 0x0, 0x2a80}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 36.542686985s ago: executing program 0 (id=1451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x9, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x1, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 36.094445328s ago: executing program 0 (id=1453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d103200", 0x27}], 0x3}], 0x1, 0x20040885) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x2}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x2}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}, 0x40000022) syz_open_dev$ndb(0x0, 0x0, 0x680) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, 0xffffffffffffffff, 0x40000) (async) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, 0xffffffffffffffff, 0x40000) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x80, 0xfffff034}, {0x20, 0x0, 0x0, 0xc069}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x80, 0xfffff034}, {0x20, 0x0, 0x0, 0xc069}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x1b, 0x28, 0x67, 0x0, 0x4, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x8, 0x0, 0xf}}}}}}, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfd, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 35.40575343s ago: executing program 32 (id=1453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d103200", 0x27}], 0x3}], 0x1, 0x20040885) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x2}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x2}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}, 0x40000022) syz_open_dev$ndb(0x0, 0x0, 0x680) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, 0xffffffffffffffff, 0x40000) (async) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, 0xffffffffffffffff, 0x40000) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x80, 0xfffff034}, {0x20, 0x0, 0x0, 0xc069}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x80, 0xfffff034}, {0x20, 0x0, 0x0, 0xc069}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x1b, 0x28, 0x67, 0x0, 0x4, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x8, 0x0, 0xf}}}}}}, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfd, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 11.749455187s ago: executing program 3 (id=1536): syz_usb_connect(0x2, 0x1bb, &(0x7f0000001480)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) 10.030010626s ago: executing program 3 (id=1544): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x50}, 0x1, 0x7}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='\\-)\\[\\!\x00', 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f00000000c0)=0xffff) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f0000000140)={0x4000000, 0xb3e, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f0000001100)={0x4000000, 0x4, 0x4}) close(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r10}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x40, 0x3, 0xa4, "864aa237a06e31860792dbab91c6da62fb70326544f18cee0bf5cb654d1df7c70f91dd4b922e47c9d7f17f02ddf1d67fdf0da3c7b6e6f58616bada5f53edf32f58652dc015ba7784af470442d4790b1db96a9b42cfec48be096ed67ed1193201a35caee5699592402bc48abba6d5a31d7bf490b0733b2db190a9d65394492ae3893623a01da143fe24fdeaf7127c480d612e53ab838ab46b7634a426e253acdd0dc4d525"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000180)={0x40, 0x23, 0x12, {0x12, 0xe, "b6cc2d6c16a53d6b89e48efeec11594a"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x0, 0x14, 0x22, "e9e67d76dea930a7026863e4de6b9bf6585a6cc46409ac155c8b3f7788be8724e5a6"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x3a, 0x8001, 0xfffffff9, 0x2, 0x0, 0x7, 0x9, 0x1, 0x8001, 0x2, 0x12d, 0x2}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000680)={0x20, 0x89, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) iopl(0x3) 9.069132026s ago: executing program 2 (id=1547): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000d00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x1, r3, 0x1a, r0}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(r6, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) 8.418790065s ago: executing program 2 (id=1550): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000780)=0x9a0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x86eb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r1, 0x9}, 0x8) 8.041868651s ago: executing program 2 (id=1553): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r0, @ANYBLOB="18002bbd7000ffdbdf25830000000c0099f7a0000000010000001800118014000580100000800a000100ffffffffffff00000800100197"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x48c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x800) 7.653882021s ago: executing program 2 (id=1554): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000050000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff00000000000000000200"], 0xd8}}, 0x0) 7.142537084s ago: executing program 2 (id=1556): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000900)}], 0x3) r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x88, {0x0, 0x1}, {0x75, 0x2}, @const={0x2, {0x2, 0x3400}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r4, 0x80404518, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) socket(0x80000000000000a, 0x80000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000020000801000000180000000200b900861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 6.0831921s ago: executing program 3 (id=1557): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r6, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) fgetxattr(r6, 0x0, 0x0, 0x0) wait4(r5, &(0x7f0000000180), 0x20000000, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r7, 0x29, 0x6, &(0x7f0000000080)=0x45, 0x4) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 5.118340722s ago: executing program 4 (id=1560): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x0, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0x4, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x8, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x6b6f, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0x8, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000080ff0000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140d000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000004d63200000000000000e00000020000000000000008000000000000000000000000000000000000000000008000e0000002000000000000000000000000000000003c00000002000000ac1414bb000000000000000000000000006a6c0001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002"], 0x23c}}, 0x0) 4.949977994s ago: executing program 1 (id=1561): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22403, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x83f, 0x0, 0x2}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) sendmsg$kcm(r7, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 4.794096941s ago: executing program 4 (id=1562): recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)=""/62, 0x3e}], 0x4}, 0x70001}], 0x1, 0x102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000006, 0x7, 0x2000000002, 0x4, 0x81, 0x2, 0x5, 0x1006, 0xc, 0x6, 0x8000, 0x1], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000280)={0x0, 0x2}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) unshare(0x26020480) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) 3.468249207s ago: executing program 4 (id=1566): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000090000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff00000000000000000200"], 0xd8}}, 0x0) 3.313793764s ago: executing program 1 (id=1567): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 2.893326223s ago: executing program 4 (id=1568): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=r1], 0x18, 0x4000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18, 0x20000050}}], 0x1, 0x40) ustat(0x7, &(0x7f00000001c0)) recvmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 2.855137927s ago: executing program 1 (id=1569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000050000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x428}}, 0x0) 2.41748205s ago: executing program 2 (id=1570): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) getuid() ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x24, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@any, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x200000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000200)=0x14) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 2.367511079s ago: executing program 1 (id=1571): socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r4, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f900"], 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='\x133gq\xb8Q\x02gcd\x15Z\xadp\xd59l\xc8\xe7\ny\x14\x1c', &(0x7f0000000100)='\\\x00', 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0xfffd, 0xa) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f00000003c0)) r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r9, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r9, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1802020, &(0x7f0000000340)=ANY=[]) 2.140610045s ago: executing program 5 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e7f3c8df0818fecba700", @ANYRES16=r2, @ANYBLOB="000228bd7000fcdbdf25210000000c00990000000000770000000400ff000400ff0044002d800d000000ff4408888dd50a3dbd0000000a0000000101010101010000170000007ba7990b02f5cf42e95e5895d7fe02ec529900000a0000000101010101010000080077008000000048002d800a00000001010101010100000a00000002020202020200002000000006438e9feb1afd485d33b4cb2ce5be64820b125fb2fb196e37a825c30a00000002020202020200002c002c800800000002000000080000000c0000000800000006000000080000000600000008000000070000000a00f5000802110000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x860}, 0x20000000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x18, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048080}, 0x8094) 1.726147667s ago: executing program 4 (id=1573): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) unshare(0x26020480) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0x1, 0x2}]) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "369f1eae", "bb10000000000001"}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0x101}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="508000000206030000000000000000000000000705000100070000000900020073797a3100000000130000000000050005000200000005000405000000000ce4020068617a683a697000"], 0x50}, 0x1, 0x0, 0x0, 0x44800}, 0x20004000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) unshare(0x22020600) write$UHID_DESTROY(r6, &(0x7f0000000180), 0x4) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x6}, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14850) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) 1.640752155s ago: executing program 5 (id=1574): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x0, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0x4, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x8, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x6b6f, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0x8, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000080ff0000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140d000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000004d63200000000000000e00000020000000000000008000000000000000000000000000000000000000000008000e0000002000000000000000000000000000000003c00000002000000ac1414bb000000000000000000000000006a6c0001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000002001000000000000000000000000000000000000010000000000000003000000000000007f000001000000000000000000000000000000003300000002"], 0x23c}}, 0x0) 1.607063852s ago: executing program 3 (id=1575): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r0, @ANYBLOB="18002bbd7000ffdbdf25830000000c0099f7a0000000010000001800118014000580100000800a000100ffffffffffff00000800100197"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x48c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32], 0x2c}}, 0x800) 1.277015357s ago: executing program 5 (id=1576): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6040600) setsockopt(r2, 0xecf, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/68, 0x44}], 0x2, &(0x7f0000000380)=""/198, 0xc6}, 0xc0010000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = io_uring_setup(0x3185, &(0x7f0000001500)={0x0, 0xd3d0, 0x1000, 0xfffffffe, 0x345}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$FE_SET_VOLTAGE(0xffffffffffffffff, 0x6f43, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r9, 0x1, 0xe, &(0x7f0000000180)=""/172, &(0x7f0000000240)=0xac) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205647, &(0x7f00000001c0)={0xf0200e7, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f027, 0x0, '\x00', @p_u8=0x0}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000456000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x26020480) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0) 1.250533452s ago: executing program 3 (id=1577): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x8}) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x100005}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.101632725s ago: executing program 1 (id=1578): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) socketpair(0x15, 0x800, 0x0, &(0x7f0000000200)) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0x2b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) syz_usb_connect$midi(0x4, 0x68, &(0x7f0000000240)=ANY=[@ANYRES8=r0], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x7}}, {0xfd92, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1030}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x83e}}, {0x52, &(0x7f0000000140)=@string={0x52, 0x3, "979c36618faac34232f9732a3bbf41f07f756b09eff9abfcb70cdfe73921b7c3670e303388e8b100171dbd031aa198fbd175eff6b1b8e732665198531ced66cb290ebb47132fd59b2201262a4b8556eb"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x745c162559616822}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "320e52c08230c1d906d4092b163b231326023eba53d42cfa3bf23919f753b09a31d61e99792b9a631b1cec85f846497910cb102acbeb8a690258b77c7ce1a638ee8f1deed5cdcaa2403efe5598a9119d430eee3309bc84a85662f94e53dfe9feb6e48064e0b88d935e7aff5ff3a389b1d7b6ec92bc981b"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44f}}, {0x72, &(0x7f0000000380)=@string={0x72, 0x3, "31527d76830a9fa7b71ba12503738aad8ed1ff69810030995a472133bc0d375ee5d36b22353ed50972a58ac26dea4d1db955657c7ac782077e70dafaa40a29ccc4800ec5db9998eee828a41d9019c40b80542fe169b274cbf50057b09128536680ed7a856342735eb034316f4e24bee0"}}]}) 856.959245ms ago: executing program 5 (id=1579): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000200000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff00000000000000000200"], 0xd8}}, 0x0) 586.234453ms ago: executing program 4 (id=1580): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000000c0)={0x40, 0x8, 0x4, "faeada27"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 558.256886ms ago: executing program 5 (id=1581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000060000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x428}}, 0x0) 245.234502ms ago: executing program 5 (id=1582): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000200000008d90455a000000000000109022400010000f005090400050c0300010009210b00800122290009058103"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x18, 0xd, "bc59b1c7bccb060b615e628184"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 115.750142ms ago: executing program 3 (id=1583): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x84d9000) listen(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) 0s ago: executing program 1 (id=1584): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000400)=[{r1, 0xd}], 0x1, 0xff) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): eturned -16 [ 284.792772][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.818795][ T9444] openvswitch: netlink: Duplicate key (type 21). [ 284.838120][ T9472] loop2: detected capacity change from 0 to 7 [ 284.874847][ T9472] Dev loop2: unable to read RDB block 7 [ 284.899267][ T9472] loop2: AHDI p1 p3 [ 284.915476][ T9472] loop2: partition table partially beyond EOD, truncated [ 284.943312][ T5991] usb 2-1: USB disconnect, device number 47 [ 284.953705][ T9472] loop2: p1 start 2349049979 is beyond EOD, truncated [ 285.276193][ T5923] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 285.446174][ T5991] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 285.455049][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 285.478044][ T5923] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 285.487709][ T5923] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.502759][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.520737][ T5923] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.536348][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.545445][ T5923] usb 1-1: Product: syz [ 285.552461][ T5923] usb 1-1: Manufacturer: syz [ 285.561215][ T9486] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1049'. [ 285.570634][ T5923] usb 1-1: SerialNumber: syz [ 285.592742][ T5923] usb 1-1: 0:2 : does not exist [ 285.638373][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.663310][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.683790][ T5991] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.708858][ T5991] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.719151][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.749640][ T5991] usb 4-1: config 0 descriptor?? [ 285.836255][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 285.925401][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.941011][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.026241][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 286.034825][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.051573][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.072603][ T10] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 286.095354][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.121451][ T10] usb 2-1: config 0 descriptor?? [ 286.184019][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.225509][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.257500][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.275412][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.279734][ T9496] fuse: Bad value for 'fd' [ 286.313253][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.327971][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.353253][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.380001][ T9497] vlan3: entered promiscuous mode [ 286.387858][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.408521][ T5991] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 286.410230][ T9497] bridge0: entered promiscuous mode [ 286.439212][ T5923] usb 1-1: USB disconnect, device number 26 [ 286.553231][ T9500] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1053'. [ 286.572162][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: Permission denied [ 286.632057][ T5991] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 286.679081][ T9498] bond3: option ad_user_port_key: invalid value (14471) [ 286.688276][ T9498] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 286.714379][ T9498] bond3 (unregistering): Released all slaves [ 286.724843][ T5991] usb 4-1: USB disconnect, device number 59 [ 286.744187][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 286.765509][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 286.826323][ T10] usb 2-1: USB disconnect, device number 48 [ 286.892481][ T9502] fido_id[9502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 287.147075][ T9510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.177998][ T9510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.215402][ T9512] loop2: detected capacity change from 0 to 7 [ 287.267429][ T9512] Dev loop2: unable to read RDB block 7 [ 287.288456][ T9512] loop2: AHDI p1 p3 [ 287.296497][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 287.312443][ T9512] loop2: partition table partially beyond EOD, truncated [ 287.335556][ T9512] loop2: p1 start 2349049979 is beyond EOD, truncated [ 287.348455][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.092714][ T9543] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1064'. [ 288.733228][ T9555] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.1068'. [ 289.695696][ T9573] fuse: Bad value for 'fd' [ 290.860805][ T9595] loop3: detected capacity change from 0 to 7 [ 290.902793][ T9595] Dev loop3: unable to read RDB block 7 [ 290.916674][ T9595] loop3: unable to read partition table [ 290.949217][ T9595] loop3: partition table beyond EOD, truncated [ 290.985104][ T9595] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 291.164282][ T9603] netlink: 484 bytes leftover after parsing attributes in process `syz.0.1086'. [ 292.646409][ T5923] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 292.827883][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.861351][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.898430][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.939566][ T5923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.970394][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.018463][ T5923] usb 4-1: config 0 descriptor?? [ 293.167103][ T9636] loop2: detected capacity change from 0 to 7 [ 293.192508][ T9636] Dev loop2: unable to read RDB block 7 [ 293.218351][ T9636] loop2: AHDI p1 p3 [ 293.228643][ T9636] loop2: partition table partially beyond EOD, truncated [ 293.258023][ T9636] loop2: p1 start 2349049979 is beyond EOD, truncated [ 293.465213][ T5923] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 293.502463][ T5923] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 293.515632][ T9638] loop3: detected capacity change from 0 to 7 [ 293.540927][ T5923] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 293.543473][ T9638] Dev loop3: unable to read RDB block 7 [ 293.570829][ T5923] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 293.591562][ T5923] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 293.603999][ T9638] loop3: unable to read partition table [ 293.617884][ T5923] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 293.632519][ T9638] loop3: partition table beyond EOD, truncated [ 293.645503][ T5923] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 293.671031][ T9638] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 293.763942][ T5923] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 293.851380][ T5923] usb 4-1: USB disconnect, device number 60 [ 294.072272][ T9639] fido_id[9639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 295.412427][ T9660] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1103'. [ 295.466081][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 295.646049][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 295.663877][ T24] usb 2-1: config 182 has an invalid interface number: 81 but max is 0 [ 295.691567][ T24] usb 2-1: config 182 has no interface number 0 [ 295.722333][ T24] usb 2-1: config 182 interface 81 has no altsetting 0 [ 295.754119][ T24] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 295.786013][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.822291][ T24] usb 2-1: Product: syz [ 295.849458][ T24] usb 2-1: Manufacturer: syz [ 295.873209][ T24] usb 2-1: SerialNumber: syz [ 296.189879][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 297.846627][ T24] usb 2-1: USB disconnect, device number 49 [ 298.596193][ T5991] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 298.780136][ T9720] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1124'. [ 298.796179][ T5991] usb 1-1: Using ep0 maxpacket: 16 [ 298.806077][ T5991] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.823743][ T5991] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.842713][ T5991] usb 1-1: config 0 interface 0 has no altsetting 0 [ 298.860346][ T5991] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 298.883078][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.915255][ T5991] usb 1-1: config 0 descriptor?? [ 298.976724][ T5923] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 299.159270][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.184856][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.215060][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.243771][ T5923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.262661][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.307675][ T5923] usb 4-1: config 0 descriptor?? [ 299.345413][ T5991] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 299.369284][ T5991] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 299.386690][ T5991] nzxt-smart2 0003:1E71:2009.000F: item fetching failed at offset 2/5 [ 299.404636][ T5991] nzxt-smart2 0003:1E71:2009.000F: probe with driver nzxt-smart2 failed with error -22 [ 299.749210][ T5923] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 299.763278][ T5923] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 299.796343][ T5923] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 299.813602][ T5923] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 299.842859][ T5923] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 299.866942][ T5923] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 299.882088][ T5923] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 299.964091][ T5923] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 300.023727][ T5923] usb 4-1: USB disconnect, device number 61 [ 300.183248][ T9736] fido_id[9736]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 301.037262][ T9751] input: syz0 as /devices/virtual/input/input20 [ 301.074862][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1130'. [ 301.122109][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.138293][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.246025][ T5923] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 301.406252][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 301.419085][ T5923] usb 2-1: config 0 has no interfaces? [ 301.431026][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.444249][ T5923] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.456496][ T5923] usb 2-1: Manufacturer: syz [ 301.470515][ T5923] usb 2-1: config 0 descriptor?? [ 301.795556][ T5991] usb 1-1: USB disconnect, device number 27 [ 301.992885][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880317c5800: rx timeout, send abort [ 302.006062][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880317c5800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.195914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 302.381884][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.424406][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.516195][ T1223] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 302.610463][ T24] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 302.715233][ T1223] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.781271][ T1223] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.786728][ T9780] trusted_key: encrypted_key: insufficient parameters specified [ 302.823750][ T9780] loop5: detected capacity change from 0 to 7 [ 302.842234][ T1223] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.857695][ T9780] Dev loop5: unable to read RDB block 7 [ 302.897944][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.903086][ T9784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1138'. [ 302.945260][ T9780] loop5: unable to read partition table [ 302.972681][ T9786] input: syz1 as /devices/virtual/input/input21 [ 302.993499][ T9780] loop5: partition table beyond EOD, truncated [ 303.085047][ T9780] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 303.140191][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 303.157898][ T1223] usb 4-1: usb_control_msg returned -32 [ 303.159755][ T9791] loop3: detected capacity change from 0 to 7 [ 303.173677][ T1223] usbtmc 4-1:16.0: can't read capabilities [ 303.229297][ T9791] Dev loop3: unable to read RDB block 7 [ 303.264699][ T9791] loop3: unable to read partition table [ 303.309367][ T9791] loop3: partition table beyond EOD, truncated [ 303.346459][ T9791] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 303.366523][ T5922] usb 4-1: USB disconnect, device number 62 [ 303.684044][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.740376][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.802479][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.833632][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.094509][ T5923] usb 2-1: USB disconnect, device number 50 [ 304.503250][ T9809] netlink: 'syz.3.1147': attribute type 21 has an invalid length. [ 304.526542][ T9809] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1147'. [ 304.711294][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1149'. [ 304.826384][ T5923] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 304.987050][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 305.009450][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.044774][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 305.088365][ T5923] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 305.160992][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.211020][ T5923] usb 4-1: config 0 descriptor?? [ 305.648211][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.669002][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.691289][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.713232][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.731944][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.755232][ T9832] bond0: (slave bond_slave_1): Releasing backup interface [ 305.762845][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.775949][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.795108][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.808461][ T9832] bond_slave_1: left promiscuous mode [ 305.816881][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.848148][ T5923] pantherlord 0003:0810:0002.0011: unknown main item tag 0x0 [ 305.884854][ T5923] pantherlord 0003:0810:0002.0011: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.3-1/input0 [ 305.933356][ T5923] pantherlord 0003:0810:0002.0011: no output reports found [ 305.991194][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.047807][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.122824][ T9809] sg_write: data in/out 406494/562 bytes for SCSI command 0x0-- guessing data in; [ 306.122824][ T9809] program syz.3.1147 not setting count and/or reply_len properly [ 306.205845][ T9808] ALSA: mixer_oss: invalid OSS volume '' [ 306.280586][ T5923] usb 4-1: USB disconnect, device number 63 [ 306.620053][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.627682][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.058924][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.112156][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.222829][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 307.694017][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.706799][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.733338][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.767729][ T6095] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.788486][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.829767][ T6095] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.874541][ T6095] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.907657][ T9871] netlink: 'syz.3.1165': attribute type 16 has an invalid length. [ 307.919654][ T6095] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.307815][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 308.376215][ T1223] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 308.420852][ T9886] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 308.486133][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.558268][ T1223] usb 4-1: Using ep0 maxpacket: 16 [ 308.572000][ T1223] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 308.592766][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 308.613770][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 308.629528][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 308.655061][ T1223] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 308.668618][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.675994][ T5901] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 308.684535][ T1223] usb 4-1: Product: syz [ 308.692503][ T1223] usb 4-1: Manufacturer: syz [ 308.705587][ T1223] usb 4-1: SerialNumber: syz [ 308.731978][ T1223] usb 4-1: config 0 descriptor?? [ 308.857962][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.901602][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 308.935083][ T9892] netlink: 484 bytes leftover after parsing attributes in process `syz.4.1172'. [ 308.944796][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 308.959280][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.962303][ T1223] appledisplay 4-1:0.0: Error while getting initial brightness: -32 [ 308.988428][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.998682][ T5901] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.018166][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.039042][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.054600][ T1223] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -32 [ 309.107297][ T5901] usb 2-1: config 0 descriptor?? [ 309.129819][ T9887] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 309.286388][ T9903] loop3: detected capacity change from 0 to 7 [ 309.298806][ T9903] Dev loop3: unable to read RDB block 7 [ 309.316693][ T9903] loop3: unable to read partition table [ 309.323277][ T9903] loop3: partition table beyond EOD, truncated [ 309.330401][ T9903] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 309.712748][ T1223] usb 4-1: USB disconnect, device number 64 [ 309.716129][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 309.906617][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 309.927496][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.949601][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.975218][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 310.001711][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.033146][ T24] usb 1-1: Product: syz [ 310.046613][ T24] usb 1-1: Manufacturer: syz [ 310.066940][ T24] usb 1-1: SerialNumber: syz [ 310.091479][ T24] usb 1-1: config 0 descriptor?? [ 310.123823][ T24] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 310.206033][ T9917] netlink: 'syz.4.1180': attribute type 19 has an invalid length. [ 310.331162][ T24] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 310.359484][ T24] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 310.393021][ T24] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 310.522167][ T1223] usb 1-1: USB disconnect, device number 29 [ 310.689600][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.713121][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.845359][ T5901] usbhid 2-1:0.0: can't add hid device: -71 [ 310.852796][ T9927] loop2: detected capacity change from 0 to 7 [ 310.865662][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 310.876726][ T9927] Dev loop2: unable to read RDB block 7 [ 310.883467][ T9927] loop2: AHDI p1 p3 [ 310.892582][ T9927] loop2: partition table partially beyond EOD, [ 310.896349][ T5901] usb 2-1: USB disconnect, device number 51 [ 310.909218][ T9927] truncated [ 310.912607][ T9927] loop2: p1 start 2349049979 is beyond EOD, truncated [ 311.154425][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 311.334297][ T9940] loop3: detected capacity change from 0 to 7 [ 311.423036][ T9940] Dev loop3: unable to read RDB block 7 [ 311.444316][ T9940] loop3: unable to read partition table [ 311.469273][ T9940] loop3: partition table beyond EOD, truncated [ 311.490325][ T9940] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 311.756714][ T1223] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 311.911876][ T9948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.929606][ T1223] usb 1-1: Using ep0 maxpacket: 16 [ 311.944081][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.962067][ T9948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.978445][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.001911][ T1223] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 312.035813][ T1223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.084196][ T1223] usb 1-1: config 0 descriptor?? [ 312.519752][ T1223] razer 0003:1532:011B.0012: unbalanced collection at end of report description [ 312.546882][ T1223] razer 0003:1532:011B.0012: probe with driver razer failed with error -22 [ 312.667676][ T9966] kAFS: unable to lookup cell '' [ 312.704069][ T9969] kAFS: unable to lookup cell '(,c' [ 312.759149][ T9937] futex_wake_op: syz.0.1186 tries to shift op by 32; fix this program [ 312.781351][ T5901] usb 1-1: USB disconnect, device number 30 [ 312.880036][ T9972] geneve2: entered promiscuous mode [ 312.899231][ T9972] geneve2: entered allmulticast mode [ 313.043680][ T9975] loop2: detected capacity change from 0 to 7 [ 313.071407][ T9975] Dev loop2: unable to read RDB block 7 [ 313.089615][ T9975] loop2: AHDI p1 p3 [ 313.099951][ T9975] loop2: partition table partially beyond EOD, truncated [ 313.121739][ T9975] loop2: p1 start 2349049979 is beyond EOD, truncated [ 313.501643][ T9979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1196'. [ 313.536066][ T5901] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 313.663507][ T9987] loop3: detected capacity change from 0 to 7 [ 313.685311][ T9987] Dev loop3: unable to read RDB block 7 [ 313.699191][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 313.706093][ T9987] loop3: unable to read partition table [ 313.724136][ T5901] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 313.742190][ T9987] loop3: partition table beyond EOD, truncated [ 313.743643][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.762570][ T9987] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 313.794091][ T5901] usb 4-1: config 0 descriptor?? [ 313.820894][ T9977] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 314.094732][T10005] loop2: detected capacity change from 0 to 7 [ 314.103954][T10005] Dev loop2: unable to read RDB block 7 [ 314.111976][T10005] loop2: AHDI p1 p3 [ 314.116845][T10005] loop2: partition table partially beyond EOD, truncated [ 314.124766][T10005] loop2: p1 start 2349049979 is beyond EOD, truncated [ 314.236221][ C1] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:70:00:00:00 [ 314.257839][T10010] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1206'. [ 314.320753][ T5901] hid (null): bogus close delimiter [ 314.352765][ T5901] hid_parser_main: 28 callbacks suppressed [ 314.352790][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.383719][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.403978][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.420526][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.432521][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.452047][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.470063][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.496055][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.511539][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.535290][ T5901] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0 [ 314.546222][ T1223] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 314.571977][ T5901] asus 0003:0B05:1ABE.0013: reserved main item tag 0xd [ 314.600743][ T5901] asus 0003:0B05:1ABE.0013: bogus close delimiter [ 314.632837][ T5901] asus 0003:0B05:1ABE.0013: item 0 1 2 10 parsing failed [ 314.658201][ T5901] asus 0003:0B05:1ABE.0013: Asus hid parse failed: -22 [ 314.673935][ T5901] asus 0003:0B05:1ABE.0013: probe with driver asus failed with error -22 [ 314.736074][ T1223] usb 2-1: Using ep0 maxpacket: 32 [ 314.751858][ T5901] usb 4-1: USB disconnect, device number 65 [ 314.768144][ T1223] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 314.788834][ T1223] usb 2-1: config 0 has no interface number 0 [ 314.809153][ T1223] usb 2-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 314.847597][ T1223] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 314.863255][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.903996][ T1223] usb 2-1: Product: syz [ 314.913080][ T1223] usb 2-1: Manufacturer: syz [ 314.924082][ T1223] usb 2-1: SerialNumber: syz [ 314.939890][ T1223] usb 2-1: config 0 descriptor?? [ 314.959327][ T1223] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 314.988977][ T1223] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 315.107507][ T5921] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 315.195418][T10024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1210'. [ 315.276172][ T5921] usb 1-1: device descriptor read/64, error -71 [ 315.530198][ T1223] usb 2-1: USB disconnect, device number 52 [ 315.556068][ T5921] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 315.716571][ T5921] usb 1-1: device descriptor read/64, error -71 [ 315.848242][ T5921] usb usb1-port1: attempt power cycle [ 316.043339][T10048] loop2: detected capacity change from 0 to 7 [ 316.059232][T10048] Dev loop2: unable to read RDB block 7 [ 316.065271][T10048] loop2: AHDI p1 p3 [ 316.070305][T10048] loop2: partition table partially beyond EOD, truncated [ 316.081144][T10048] loop2: p1 start 2349049979 is beyond EOD, truncated [ 316.216332][ T5921] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 316.271986][ T5921] usb 1-1: device descriptor read/8, error -71 [ 316.353860][T10055] netlink: 'syz.4.1220': attribute type 3 has an invalid length. [ 316.363799][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'. [ 316.401082][T10055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.526620][ T5921] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 316.558743][ T1223] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 316.597434][ T5921] usb 1-1: device descriptor read/8, error -71 [ 316.717002][ T5921] usb usb1-port1: unable to enumerate USB device [ 316.764283][ T1223] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 316.778107][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.786699][ T1223] usb 4-1: Product: syz [ 316.791051][ T1223] usb 4-1: Manufacturer: syz [ 316.795724][ T1223] usb 4-1: SerialNumber: syz [ 316.806560][ T1223] usb 4-1: config 0 descriptor?? [ 316.819834][ T1223] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 317.441205][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.451474][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.927467][T10085] loop3: detected capacity change from 0 to 7 [ 317.959098][T10085] Dev loop3: unable to read RDB block 7 [ 317.983291][T10085] loop3: unable to read partition table [ 318.006916][T10085] loop3: partition table beyond EOD, truncated [ 318.030195][T10085] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 318.120811][T10088] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 318.203976][T10094] loop2: detected capacity change from 0 to 7 [ 318.223330][T10094] Dev loop2: unable to read RDB block 7 [ 318.243939][T10094] loop2: AHDI p1 p3 [ 318.258170][T10094] loop2: partition table partially beyond EOD, truncated [ 318.279935][T10094] loop2: p1 start 2349049979 is beyond EOD, truncated [ 318.346562][ T1223] gspca_stk1135: reg_w 0xd err -110 [ 318.373665][ T1223] gspca_stk1135: serial bus timeout: status=0x00 [ 318.414381][ T1223] gspca_stk1135: Sensor write failed [ 318.445024][ T1223] gspca_stk1135: serial bus timeout: status=0x00 [ 318.481413][ T1223] gspca_stk1135: Sensor write failed [ 318.509627][ T1223] gspca_stk1135: serial bus timeout: status=0x00 [ 318.535719][ T1223] gspca_stk1135: Sensor read failed [ 318.549881][ T1223] gspca_stk1135: serial bus timeout: status=0x00 [ 318.563840][ T1223] gspca_stk1135: Sensor read failed [ 318.602681][ T1223] gspca_stk1135: Detected sensor type unknown (0x0) [ 318.622794][ T1223] gspca_stk1135: serial bus timeout: status=0x00 [ 318.645290][ T1223] gspca_stk1135: Sensor read failed [ 318.661928][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 318.689871][ T1223] gspca_stk1135: serial bus timeout: status=0x00 [ 318.722885][ T1223] gspca_stk1135: Sensor read failed [ 318.764608][ T1223] gspca_stk1135: serial bus timeout: status=0x00 [ 318.778245][ T1223] gspca_stk1135: Sensor write failed [ 318.792511][ T1223] gspca_stk1135: serial bus timeout: status=0x00 [ 318.808310][ T1223] gspca_stk1135: Sensor write failed [ 318.821061][ T1223] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 319.170930][T10116] tipc: Started in network mode [ 319.196777][T10116] tipc: Node identity e0000002, cluster identity 4711 [ 319.234722][T10116] tipc: New replicast peer: 100.1.1.4 [ 319.262103][T10116] tipc: Enabled bearer , priority 10 [ 319.995483][ T24] usb 4-1: USB disconnect, device number 66 [ 320.174611][T10130] loop3: detected capacity change from 0 to 7 [ 320.217502][T10130] Dev loop3: unable to read RDB block 7 [ 320.239740][T10130] loop3: unable to read partition table [ 320.261709][ T5921] tipc: Node number set to 3758096386 [ 320.276329][T10130] loop3: partition table beyond EOD, truncated [ 320.287095][T10130] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 320.889601][ T29] audit: type=1326 audit(1777062545.782:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.3.1246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d9c79cdd9 code=0x77ff0000 [ 321.172330][T10149] bridge0: port 3(vlan4) entered blocking state [ 321.212983][T10149] bridge0: port 3(vlan4) entered disabled state [ 321.280097][T10152] netlink: 484 bytes leftover after parsing attributes in process `syz.1.1249'. [ 321.304265][T10149] vlan4: entered allmulticast mode [ 321.367744][T10149] geneve0: entered allmulticast mode [ 321.429765][T10149] vlan4: entered promiscuous mode [ 321.485020][T10149] geneve0: entered promiscuous mode [ 321.791503][T10162] ip6tnl0: Caught tx_queue_len zero misconfig [ 322.035209][T10164] loop3: detected capacity change from 0 to 7 [ 322.070434][T10164] Dev loop3: unable to read RDB block 7 [ 322.097441][T10164] loop3: unable to read partition table [ 322.131155][T10164] loop3: partition table beyond EOD, truncated [ 322.169424][T10164] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 323.295429][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.344400][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.392804][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.406720][ T29] audit: type=1326 audit(1777062548.302:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 323.432289][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.475222][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.476030][ T29] audit: type=1326 audit(1777062548.302:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 323.508033][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.568532][ T29] audit: type=1326 audit(1777062548.352:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 323.625839][ T29] audit: type=1326 audit(1777062548.352:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 323.677433][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.681174][T10190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1262'. [ 323.696288][ T29] audit: type=1326 audit(1777062548.352:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 323.701953][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.719175][ T29] audit: type=1326 audit(1777062548.352:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 323.751609][ T29] audit: type=1326 audit(1777062548.352:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 323.805150][ T29] audit: type=1326 audit(1777062548.352:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 323.829630][ T29] audit: type=1326 audit(1777062548.362:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.0.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14a19cdd9 code=0x7ffc0000 [ 324.695061][T10214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1271'. [ 324.784712][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1271'. [ 324.825196][T10214] team0 (unregistering): Port device team_slave_0 removed [ 324.844323][T10217] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1271'. [ 324.944026][T10222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.977622][T10214] team0 (unregistering): Port device team_slave_1 removed [ 324.979282][T10222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.079801][T10224] openvswitch: netlink: Key type 341 is out of range max 32 [ 325.090640][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 325.563517][T10214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.584298][T10214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.594583][T10234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1274'. [ 325.812683][T10240] fuse: Unknown parameter 'grou00000000000000000000' [ 325.884481][T10244] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1277'. [ 326.286085][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 326.469706][ T24] usb 2-1: config 7 has an invalid interface number: 225 but max is 3 [ 326.493572][ T24] usb 2-1: config 7 has an invalid interface number: 110 but max is 3 [ 326.523305][ T24] usb 2-1: config 7 has an invalid interface number: 223 but max is 3 [ 326.552619][ T24] usb 2-1: config 7 has an invalid interface number: 223 but max is 3 [ 326.588370][ T24] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 326.618991][ T24] usb 2-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 326.655599][ T24] usb 2-1: config 7 has no interface number 0 [ 326.678160][ T24] usb 2-1: config 7 has no interface number 1 [ 326.700499][ T24] usb 2-1: config 7 has no interface number 2 [ 326.737916][ T24] usb 2-1: config 7 interface 225 altsetting 2 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 326.758272][ T24] usb 2-1: config 7 interface 225 altsetting 2 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 326.774659][ T24] usb 2-1: config 7 interface 225 altsetting 2 endpoint 0x8F has invalid maxpacket 1024, setting to 64 [ 326.834501][ T24] usb 2-1: config 7 interface 110 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 326.871606][ T24] usb 2-1: config 7 interface 110 altsetting 7 endpoint 0x3 has an invalid bInterval 255, changing to 7 [ 326.906916][ T24] usb 2-1: config 7 interface 110 altsetting 7 has an endpoint descriptor with address 0x68, changing to 0x8 [ 326.950921][ T24] usb 2-1: config 7 interface 110 altsetting 7 endpoint 0x8 has invalid maxpacket 15051, setting to 1024 [ 326.964623][ T24] usb 2-1: config 7 interface 110 altsetting 7 bulk endpoint 0x8 has invalid maxpacket 1024 [ 326.980190][ T24] usb 2-1: config 7 interface 110 altsetting 7 endpoint 0xC has invalid maxpacket 38604, setting to 64 [ 326.994590][ T24] usb 2-1: config 7 interface 110 altsetting 7 endpoint 0xA has an invalid bInterval 68, changing to 10 [ 327.010128][ T24] usb 2-1: config 7 interface 110 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 327.023718][ T24] usb 2-1: config 7 interface 110 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 327.040978][ T24] usb 2-1: config 7 interface 223 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 327.054156][ T24] usb 2-1: config 7 interface 223 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 327.093877][ T24] usb 2-1: config 7 interface 223 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.134327][ T24] usb 2-1: config 7 interface 223 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 327.167863][ T24] usb 2-1: Duplicate descriptor for config 7 interface 223 altsetting 0, skipping [ 327.198879][ T24] usb 2-1: config 7 interface 225 has no altsetting 0 [ 327.231945][ T24] usb 2-1: config 7 interface 110 has no altsetting 0 [ 327.240843][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.262135][ T24] usb 2-1: Dual-Role OTG device on HNP port [ 327.263373][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.290082][ T24] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice= 0.a1 [ 327.322297][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.324306][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.370365][ T24] usb 2-1: Manufacturer: П [ 327.375542][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.403929][ T24] usb 2-1: SerialNumber: Р [ 327.414245][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.442805][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.725073][ T24] i2c-tiny-usb 2-1:7.225: version 0.a1 found at bus 002 address 053 [ 327.765081][ T24] (null): failure setting delay to 10us [ 327.788220][ T24] i2c-tiny-usb 2-1:7.225: probe with driver i2c-tiny-usb failed with error -5 [ 327.836678][ T24] i2c-tiny-usb 2-1:7.223: version 0.a1 found at bus 002 address 053 [ 327.856825][ T24] (null): failure setting delay to 10us [ 327.868832][ T24] i2c-tiny-usb 2-1:7.223: probe with driver i2c-tiny-usb failed with error -5 [ 327.900214][ T24] usb 2-1: USB disconnect, device number 53 [ 327.959134][T10273] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 328.008192][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 328.021446][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 328.125240][T10273] bond3: entered promiscuous mode [ 328.148726][T10273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.164616][T10281] fuse: Unknown parameter 'grou00000000000000000000' [ 328.231390][T10277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.258006][T10277] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 328.284630][T10277] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 328.335788][T10277] bond3: (slave gre1): making interface the new active one [ 328.389440][T10277] gre1: entered promiscuous mode [ 328.429820][T10277] bond3: (slave gre1): Enslaving as an active interface with an up link [ 328.593701][T10293] netlink: 484 bytes leftover after parsing attributes in process `syz.4.1294'. [ 329.013960][T10304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1299'. [ 329.026074][ T5901] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 329.053721][T10304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1299'. [ 329.186040][ T5901] usb 2-1: device descriptor read/64, error -71 [ 329.439778][ T5901] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 329.598184][ T5901] usb 2-1: device descriptor read/64, error -71 [ 329.743095][ T5901] usb usb2-port1: attempt power cycle [ 330.082421][T10318] netlink: 484 bytes leftover after parsing attributes in process `syz.3.1306'. [ 330.137429][ T5901] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 330.196099][ T5901] usb 2-1: device descriptor read/8, error -71 [ 330.380450][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 330.390879][T10336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.405596][T10336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.456052][ T5901] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 330.486700][ T5901] usb 2-1: device descriptor read/8, error -71 [ 330.576059][ T5922] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 330.580942][T10345] trusted_key: encrypted_key: insufficient parameters specified [ 330.596439][ T5901] usb usb2-port1: unable to enumerate USB device [ 330.603390][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1315'. [ 330.706036][ T5922] usb 4-1: device descriptor read/64, error -71 [ 330.733996][T10350] FAULT_INJECTION: forcing a failure. [ 330.733996][T10350] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 330.748613][T10350] CPU: 1 UID: 0 PID: 10350 Comm: syz.2.1316 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.748648][T10350] Tainted: [L]=SOFTLOCKUP [ 330.748654][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.748665][T10350] Call Trace: [ 330.748673][T10350] [ 330.748681][T10350] dump_stack_lvl+0xe8/0x150 [ 330.748721][T10350] should_fail_ex+0x412/0x560 [ 330.748758][T10350] _copy_from_user+0x2d/0xb0 [ 330.748783][T10350] rds_setsockopt+0xa50/0xe00 [ 330.748811][T10350] ? __pfx_rds_setsockopt+0x10/0x10 [ 330.748833][T10350] ? fd_install+0x94/0x3d0 [ 330.748869][T10350] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 330.748892][T10350] ? __pfx_rds_setsockopt+0x10/0x10 [ 330.748914][T10350] do_sock_setsockopt+0x17c/0x1b0 [ 330.748951][T10350] __x64_sys_setsockopt+0x13d/0x1b0 [ 330.748974][T10350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.748997][T10350] do_syscall_64+0x15f/0xf80 [ 330.749024][T10350] ? trace_irq_disable+0x3b/0x140 [ 330.749056][T10350] ? clear_bhb_loop+0x40/0x90 [ 330.749081][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.749102][T10350] RIP: 0033:0x7f08c2d9cdd9 [ 330.749120][T10350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.749137][T10350] RSP: 002b:00007f08c3cc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 330.749159][T10350] RAX: ffffffffffffffda RBX: 00007f08c3015fa0 RCX: 00007f08c2d9cdd9 [ 330.749174][T10350] RDX: 0000000000000001 RSI: 0000000000000114 RDI: 0000000000000003 [ 330.749186][T10350] RBP: 00007f08c3cc9090 R08: 0000000000000010 R09: 0000000000000000 [ 330.749199][T10350] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 330.749211][T10350] R13: 00007f08c3016038 R14: 00007f08c3015fa0 R15: 00007f08c313fa48 [ 330.749244][T10350] [ 331.086068][ T5922] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 331.098482][T10355] lo: Caught tx_queue_len zero misconfig [ 331.142935][T10356] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 331.167361][T10356] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1317'. [ 331.204044][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 331.219537][ T5922] usb 4-1: device descriptor read/64, error -71 [ 331.336370][ T5922] usb usb4-port1: attempt power cycle [ 331.678230][ T5922] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 331.707291][ T5922] usb 4-1: device descriptor read/8, error -71 [ 331.946523][ T5922] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 331.986850][ T5922] usb 4-1: device descriptor read/8, error -71 [ 332.039200][T10375] sctp: [Deprecated]: syz.0.1324 (pid 10375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.039200][T10375] Use struct sctp_sack_info instead [ 332.096734][ T5922] usb usb4-port1: unable to enumerate USB device [ 332.203895][T10379] trusted_key: encrypted_key: insufficient parameters specified [ 332.214599][T10379] loop5: detected capacity change from 0 to 7 [ 332.228095][T10381] FAULT_INJECTION: forcing a failure. [ 332.228095][T10381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.231051][T10379] Dev loop5: unable to read RDB block 7 [ 332.251201][T10379] loop5: unable to read partition table [ 332.258515][T10379] loop5: partition table beyond EOD, truncated [ 332.267438][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1326'. [ 332.271791][T10381] CPU: 1 UID: 0 PID: 10381 Comm: syz.1.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.271821][T10381] Tainted: [L]=SOFTLOCKUP [ 332.271828][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.271839][T10381] Call Trace: [ 332.271846][T10381] [ 332.271854][T10381] dump_stack_lvl+0xe8/0x150 [ 332.271888][T10381] should_fail_ex+0x412/0x560 [ 332.271922][T10381] _copy_to_user+0x31/0xb0 [ 332.271945][T10381] simple_read_from_buffer+0xe1/0x170 [ 332.271969][T10381] proc_fail_nth_read+0x1bb/0x230 [ 332.271993][T10381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.272015][T10381] ? rw_verify_area+0x2a6/0x4d0 [ 332.272037][T10381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.272058][T10381] vfs_read+0x20c/0xa70 [ 332.272083][T10381] ? rds_setsockopt+0xc41/0xe00 [ 332.272104][T10381] ? __pfx_vfs_read+0x10/0x10 [ 332.272125][T10381] ? __pfx_rds_setsockopt+0x10/0x10 [ 332.272144][T10381] ? fd_install+0x94/0x3d0 [ 332.272175][T10381] ksys_read+0x150/0x270 [ 332.272199][T10381] ? __pfx_ksys_read+0x10/0x10 [ 332.272228][T10381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.272248][T10381] do_syscall_64+0x15f/0xf80 [ 332.272271][T10381] ? trace_irq_disable+0x3b/0x140 [ 332.272295][T10381] ? clear_bhb_loop+0x40/0x90 [ 332.272317][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.272335][T10381] RIP: 0033:0x7ff77e75d60e [ 332.272353][T10381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.272369][T10381] RSP: 002b:00007ff77f734fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.272389][T10381] RAX: ffffffffffffffda RBX: 00007ff77f7356c0 RCX: 00007ff77e75d60e [ 332.272402][T10381] RDX: 000000000000000f RSI: 00007ff77f7350a0 RDI: 0000000000000004 [ 332.272414][T10381] RBP: 00007ff77f735090 R08: 0000000000000000 R09: 0000000000000000 [ 332.272425][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.272435][T10381] R13: 00007ff77ea16038 R14: 00007ff77ea15fa0 R15: 00007ff77eb3fa48 [ 332.272464][T10381] [ 332.426132][T10379] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 332.560452][T10379] input: syz1 as /devices/virtual/input/input23 [ 332.746020][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 332.818737][T10392] syzkaller0: entered promiscuous mode [ 332.850684][T10392] syzkaller0: entered allmulticast mode [ 332.908167][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.927816][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.966041][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 332.992391][T10395] SET target dimension over the limit! [ 333.010628][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.048154][ T24] usb 1-1: config 0 descriptor?? [ 333.555405][ T24] hid_parser_main: 164 callbacks suppressed [ 333.555433][ T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 333.612154][ T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 333.630595][ T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 333.647371][ T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 333.662315][ T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 333.678784][ T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 333.700361][ T24] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 333.740798][ T24] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 333.836642][ T5922] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 333.873824][ T24] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 333.998803][ T5922] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 334.013941][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.038007][ T5922] usb 4-1: config 0 has no interface number 0 [ 334.052183][ T5922] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 334.077550][ T5922] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 334.107477][ T5922] usb 4-1: config 0 interface 255 has no altsetting 0 [ 334.123693][ T5922] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 334.144249][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.169900][ T5922] usb 4-1: config 0 descriptor?? [ 334.208028][ T24] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 334.226107][ T5921] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 334.241521][ T24] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -32 [ 334.354792][T10426] trusted_key: encrypted_key: insufficient parameters specified [ 334.372035][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1343'. [ 334.399559][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.422452][ T24] usb 4-1: USB disconnect, device number 71 [ 334.426211][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.457946][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.489812][ T5921] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.520534][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.549476][ T5921] usb 2-1: config 0 descriptor?? [ 334.613355][T10432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1344'. [ 334.992617][ T5921] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 335.002524][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.027827][ T5921] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 335.040322][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.056876][ T5921] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 335.110820][ T5921] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 335.317995][ T5921] usb 2-1: USB disconnect, device number 58 [ 335.700940][ T24] usb 1-1: USB disconnect, device number 35 [ 336.071456][T10466] trusted_key: encrypted_key: insufficient parameters specified [ 336.123615][T10466] loop5: detected capacity change from 0 to 7 [ 336.137703][T10466] Dev loop5: unable to read RDB block 7 [ 336.143415][T10466] loop5: unable to read partition table [ 336.149763][T10466] loop5: partition table beyond EOD, truncated [ 336.161729][T10466] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 336.186061][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 336.209316][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1355'. [ 336.331296][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1360'. [ 336.346207][ T5921] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 336.366254][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 336.375637][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 336.399086][ T24] usb 1-1: config 0 has no interface number 0 [ 336.412552][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 336.451095][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 336.464952][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.476650][ T24] usb 1-1: Product: syz [ 336.481058][ T24] usb 1-1: Manufacturer: syz [ 336.485778][ T24] usb 1-1: SerialNumber: syz [ 336.520033][ T5921] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 336.521447][ T24] usb 1-1: config 0 descriptor?? [ 336.563355][ T5921] usb 2-1: config 0 has no interface number 0 [ 336.598173][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 336.620275][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.646485][ T5921] usb 2-1: Product: syz [ 336.653796][ T5921] usb 2-1: Manufacturer: syz [ 336.663633][ T5921] usb 2-1: SerialNumber: syz [ 336.694247][ T5921] usb 2-1: config 0 descriptor?? [ 336.833177][T10479] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1361'. [ 336.929194][ T5921] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 336.938914][ T5921] uvcvideo 2-1:0.64: Failed to create links for entity 32768 [ 336.947066][ T5921] uvcvideo 2-1:0.64: Failed to register entities (-22). [ 336.994025][ T5921] usb 2-1: USB disconnect, device number 59 [ 337.005793][ T1223] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 337.092251][T10488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.188622][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.208609][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.223792][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 337.238834][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.252064][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 337.268081][ T1223] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.284336][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.301807][ T1223] usb 4-1: config 0 descriptor?? [ 337.454541][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 337.494146][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 337.523889][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 337.549189][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 337.755216][ T1223] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 337.995426][ T1223] usb 4-1: USB disconnect, device number 72 [ 338.022816][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 338.388057][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1371'. [ 338.752260][T10518] loop3: detected capacity change from 0 to 7 [ 338.789560][T10518] Dev loop3: unable to read RDB block 7 [ 338.810140][T10518] loop3: unable to read partition table [ 338.825442][T10518] loop3: partition table beyond EOD, truncated [ 338.842579][T10518] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 339.211303][T10528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.237508][T10528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.357300][T10528] sctp: [Deprecated]: syz.4.1381 (pid 10528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.357300][T10528] Use struct sctp_sack_info instead [ 339.614403][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1384'. [ 339.629429][ T1223] usb 1-1: USB disconnect, device number 36 [ 339.986309][T10546] FAULT_INJECTION: forcing a failure. [ 339.986309][T10546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.078041][T10546] CPU: 0 UID: 0 PID: 10546 Comm: syz.0.1386 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.078076][T10546] Tainted: [L]=SOFTLOCKUP [ 340.078083][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.078096][T10546] Call Trace: [ 340.078104][T10546] [ 340.078112][T10546] dump_stack_lvl+0xe8/0x150 [ 340.078149][T10546] should_fail_ex+0x412/0x560 [ 340.078186][T10546] _copy_from_user+0x2d/0xb0 [ 340.078210][T10546] ___sys_sendmsg+0x1c6/0x360 [ 340.078232][T10546] ? __lock_acquire+0x6b5/0x2cf0 [ 340.078268][T10546] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.078324][T10546] ? __fget_files+0x2a/0x420 [ 340.078344][T10546] ? __fget_files+0x3a0/0x420 [ 340.078373][T10546] __x64_sys_sendmsg+0x1bd/0x2a0 [ 340.078399][T10546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.078428][T10546] ? __pfx_ksys_write+0x10/0x10 [ 340.078461][T10546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.078482][T10546] do_syscall_64+0x15f/0xf80 [ 340.078509][T10546] ? trace_irq_disable+0x3b/0x140 [ 340.078535][T10546] ? clear_bhb_loop+0x40/0x90 [ 340.078560][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.078579][T10546] RIP: 0033:0x7fa14a19cdd9 [ 340.078597][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.078623][T10546] RSP: 002b:00007fa14b012028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.078646][T10546] RAX: ffffffffffffffda RBX: 00007fa14a415fa0 RCX: 00007fa14a19cdd9 [ 340.078661][T10546] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 340.078674][T10546] RBP: 00007fa14b012090 R08: 0000000000000000 R09: 0000000000000000 [ 340.078687][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.078700][T10546] R13: 00007fa14a416038 R14: 00007fa14a415fa0 R15: 00007fa14a53fa48 [ 340.078733][T10546] [ 340.496869][T10554] loop3: detected capacity change from 0 to 7 [ 340.569150][T10554] Dev loop3: unable to read RDB block 7 [ 340.606170][T10554] loop3: unable to read partition table [ 340.635725][T10554] loop3: partition table beyond EOD, truncated [ 340.679459][T10554] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 340.681539][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 340.740789][T10558] netlink: 'syz.1.1390': attribute type 30 has an invalid length. [ 340.797444][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 340.830591][T10562] netlink: 'syz.1.1390': attribute type 30 has an invalid length. [ 340.929723][ T6097] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.951722][ T6097] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.005016][ T6097] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.017875][ T6097] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.181577][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.206029][ T5922] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 341.252039][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.347484][ T5922] usb 2-1: device descriptor read/64, error -71 [ 341.583807][T10572] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.1393'. [ 341.596391][ T5922] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 341.649910][T10574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1395'. [ 341.736465][ T5922] usb 2-1: device descriptor read/64, error -71 [ 341.745145][T10578] loop2: detected capacity change from 0 to 7 [ 341.760831][T10578] Dev loop2: unable to read RDB block 7 [ 341.770154][T10578] loop2: AHDI p1 p3 [ 341.774247][T10578] loop2: partition table partially beyond EOD, truncated [ 341.789015][T10578] loop2: p1 start 2349049979 is beyond EOD, truncated [ 341.846320][ T5922] usb usb2-port1: attempt power cycle [ 342.094748][T10585] fuse: Bad value for 'fd' [ 342.196858][ T5922] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 342.238788][ T5922] usb 2-1: device descriptor read/8, error -71 [ 342.286179][ T5837] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 342.470697][ T5837] usb 1-1: config index 0 descriptor too short (expected 38752, got 96) [ 342.489177][ T5837] usb 1-1: config 232 has an invalid descriptor of length 187, skipping remainder of the config [ 342.504448][ T5922] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 342.538813][ T5837] usb 1-1: config 232 has 0 interfaces, different from the descriptor's value: 24 [ 342.554976][ T5922] usb 2-1: device descriptor read/8, error -71 [ 342.572519][ T5837] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.587615][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 342.606497][ T5837] usb 1-1: Product: syz [ 342.616802][ T5837] usb 1-1: Manufacturer: syz [ 342.676545][ T5922] usb usb2-port1: unable to enumerate USB device [ 342.874966][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1398'. [ 342.910957][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.932645][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.826256][ T5837] usb 1-1: USB disconnect, device number 37 [ 344.127248][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 344.806188][ T1223] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 344.977018][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.002396][ T1223] usb 2-1: Using ep0 maxpacket: 32 [ 345.011446][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.032284][ T1223] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.053966][ T1223] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 345.087893][ T1223] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 345.106849][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.139205][ T1223] usb 2-1: Product: syz [ 345.149707][ T1223] usb 2-1: Manufacturer: syz [ 345.158577][ T1223] usb 2-1: SerialNumber: syz [ 345.177807][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 345.177827][ T29] audit: type=1326 audit(1777062570.072:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.3.1412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d9c79cdd9 code=0x7ffe0000 [ 345.261952][ T1223] snd-ua101 2-1:1.1: sample format descriptor not found [ 345.272231][ T1223] snd-ua101 2-1:1.0: invalid num_altsetting [ 345.441506][ T1223] usb 2-1: USB disconnect, device number 65 [ 345.724460][T10628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.745151][T10628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.804075][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 345.830969][T10628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.853616][T10628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.619786][T10635] loop4: detected capacity change from 0 to 7 [ 346.655776][T10635] Dev loop4: unable to read RDB block 7 [ 346.685683][T10635] loop4: AHDI p1 p2 [ 346.706407][T10635] loop4: partition table partially beyond EOD, truncated [ 346.733312][T10635] loop4: p1 start 1835360114 is beyond EOD, truncated [ 347.180330][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.237813][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.288276][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.306507][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.714036][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 347.960296][T10655] trusted_key: encrypted_key: insufficient parameters specified [ 347.971600][T10655] loop5: detected capacity change from 0 to 7 [ 347.984624][T10655] Dev loop5: unable to read RDB block 7 [ 347.996107][T10655] loop5: unable to read partition table [ 348.016774][T10655] loop5: partition table beyond EOD, truncated [ 348.023344][T10655] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 348.023717][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1422'. [ 348.376531][ T5921] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 348.516476][ T5921] usb 2-1: device descriptor read/64, error -71 [ 348.731083][T10671] tipc: Enabling of bearer rejected, failed to enable media [ 348.757766][ T5921] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 348.906927][ T5921] usb 2-1: device descriptor read/64, error -71 [ 349.026651][ T5921] usb usb2-port1: attempt power cycle [ 349.092152][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1429'. [ 349.189502][T10667] Scaler: ================= START STATUS ================= [ 349.199328][T10667] Scaler: ================== END STATUS ================== [ 349.386243][ T5921] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 349.427205][ T5921] usb 2-1: device descriptor read/8, error -71 [ 349.706165][ T5921] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 349.737562][ T5921] usb 2-1: device descriptor read/8, error -71 [ 349.876494][ T5921] usb usb2-port1: unable to enumerate USB device [ 349.909034][T10699] cgroup: fork rejected by pids controller in /syz2 [ 349.940379][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.962609][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.778565][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.812415][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.925368][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.938651][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.022102][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.032555][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.204385][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.214948][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.752125][ T76] bond3 (unregistering): (slave gre1): Releasing backup interface [ 351.764408][ T76] gre1 (unregistering): left promiscuous mode [ 351.887373][ T76] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 352.019852][ T76] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 352.028813][ T76] batadv0: left promiscuous mode [ 352.037750][ T76] bond0 (unregistering): Released all slaves [ 352.052661][ T76] bond1 (unregistering): Released all slaves [ 352.067758][ T76] bond2 (unregistering): Released all slaves [ 352.083275][ T76] bond3 (unregistering): Released all slaves [ 352.102009][ T5504] 8021q: adding VLAN 0 to HW filter on device eth1 [ 352.209203][ T76] tipc: Disabling bearer [ 352.221724][ T76] tipc: Left network mode [ 352.854446][ T5504] 8021q: adding VLAN 0 to HW filter on device eth2 [ 353.011424][ T76] hsr_slave_0: left promiscuous mode [ 353.020905][ T76] hsr_slave_1: left promiscuous mode [ 353.034595][ T76] batman_adv: batadv0: Interface deactivated: dummy0 [ 353.049339][ T76] batman_adv: batadv0: Removing interface: dummy0 [ 353.064937][ T76] veth1_macvtap: left promiscuous mode [ 353.072495][ T76] veth0_macvtap: left promiscuous mode [ 353.079023][ T76] veth1_vlan: left promiscuous mode [ 353.084481][ T76] veth0_vlan: left promiscuous mode [ 353.655666][ T5504] 8021q: adding VLAN 0 to HW filter on device eth3 [ 354.205048][ T5504] 8021q: adding VLAN 0 to HW filter on device eth4 [ 368.636225][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.888978][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.895412][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.081121][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.092518][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.109100][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.120005][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.132112][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.596101][ T5837] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 400.689496][T10962] chnl_net:caif_netlink_parms(): no params data found [ 400.850940][ T5837] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.032923][ T5837] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 401.073069][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.090819][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.128298][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.176229][ T5837] usb 2-1: Product: syz [ 401.186839][T10962] bridge_slave_0: entered allmulticast mode [ 401.193033][ T5837] usb 2-1: Manufacturer: syz [ 401.204889][ T5837] usb 2-1: SerialNumber: syz [ 401.218653][T10962] bridge_slave_0: entered promiscuous mode [ 401.261741][ T5837] usb 2-1: config 0 descriptor?? [ 401.549225][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.568678][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.614441][T10962] bridge_slave_1: entered allmulticast mode [ 401.636749][T10962] bridge_slave_1: entered promiscuous mode [ 401.766046][ T5837] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 401.797510][ T5837] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22) [ 401.929770][T10962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.980783][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.003014][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.018434][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.032577][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.042146][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.083014][T10962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.098879][ T5837] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 402.236201][ T50] Bluetooth: hci4: command tx timeout [ 402.303960][T10962] team0: Port device team_slave_0 added [ 402.332429][T10962] team0: Port device team_slave_1 added [ 402.557340][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1456'. [ 402.608570][T10962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.634382][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.692277][T10962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.799233][T10994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.854589][T10995] bond3: option ad_select: unable to set because the bond device is up [ 402.868086][T10962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.889732][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.998164][T10962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.089825][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.126854][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.336269][T10962] hsr_slave_0: entered promiscuous mode [ 403.361075][T10962] hsr_slave_1: entered promiscuous mode [ 403.379756][T10962] debugfs: 'hsr0' already exists in 'hsr' [ 403.391226][T10962] Cannot create hsr debugfs directory [ 403.465998][ T5837] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 403.468598][ T5921] usb 2-1: USB disconnect, device number 70 [ 403.626634][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 403.643570][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.662273][T11008] loop2: detected capacity change from 0 to 7 [ 403.682073][T11008] Dev loop2: unable to read RDB block 7 [ 403.687475][ T5837] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 403.693112][T11008] loop2: AHDI p1 p3 [ 403.701288][T11008] loop2: partition table partially beyond EOD, truncated [ 403.712057][T11008] loop2: p1 start 2349049979 is beyond EOD, truncated [ 403.715280][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.758041][ T5837] usb 4-1: config 0 descriptor?? [ 404.155371][T10956] vlan4: left allmulticast mode [ 404.160683][ T50] Bluetooth: hci2: command tx timeout [ 404.170885][T10956] geneve0: left allmulticast mode [ 404.177784][T10956] vlan4: left promiscuous mode [ 404.183080][T10956] geneve0: left promiscuous mode [ 404.192248][T10956] bridge0: port 3(vlan4) entered disabled state [ 404.197298][ T5837] hid_parser_main: 7 callbacks suppressed [ 404.197325][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.225275][T10956] bridge_slave_1: left allmulticast mode [ 404.226016][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.240143][T10956] bridge_slave_1: left promiscuous mode [ 404.246437][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.251953][T10956] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.256922][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.272177][T10956] bridge_slave_0: left allmulticast mode [ 404.277597][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.279673][T10956] bridge_slave_0: left promiscuous mode [ 404.299418][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.314862][T10956] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.324316][ T50] Bluetooth: hci4: command tx timeout [ 404.342142][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.377242][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.405762][T11004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.431201][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.449105][ T5837] sony 0003:054C:024B.0017: unknown main item tag 0x0 [ 404.501957][T11004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.533692][ T5837] sony 0003:054C:024B.0017: hiddev0,hidraw0: USB HID v0.08 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 404.556847][ T5837] sony 0003:054C:024B.0017: failed to claim input [ 404.621941][T11004] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.161078][T10956] bond0 (unregistering): (slave 70): Releasing backup interface [ 405.187126][T10956] : left promiscuous mode [ 405.201075][T10956] bond0 (unregistering): Released all slaves [ 405.241209][T10956] bond1 (unregistering): Released all slaves [ 405.869675][ T5921] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 406.073496][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.124046][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.134890][ T5921] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 406.165334][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 406.195227][ T5921] usb 2-1: SerialNumber: syz [ 406.240369][ T50] Bluetooth: hci2: command tx timeout [ 406.406117][ T50] Bluetooth: hci4: command tx timeout [ 406.449272][T10990] chnl_net:caif_netlink_parms(): no params data found [ 406.684405][ T5837] usb 4-1: USB disconnect, device number 73 [ 406.962752][ T5921] usb 2-1: 0:2 : does not exist [ 407.050132][ T5921] usb 2-1: USB disconnect, device number 71 [ 407.120560][ T5504] 8021q: adding VLAN 0 to HW filter on device eth5 [ 407.126308][ T5837] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 407.169103][T10960] udevd[10960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.292534][ T5837] usb 4-1: device descriptor read/64, error -71 [ 407.490907][T10990] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.503368][T10990] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.513103][T10990] bridge_slave_0: entered allmulticast mode [ 407.523065][T10990] bridge_slave_0: entered promiscuous mode [ 407.546464][ T5837] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 407.631416][T10990] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.682212][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.696541][ T5837] usb 4-1: device descriptor read/64, error -71 [ 407.705505][T10990] bridge_slave_1: entered allmulticast mode [ 407.739204][T10990] bridge_slave_1: entered promiscuous mode [ 407.831088][ T5837] usb usb4-port1: attempt power cycle [ 408.031859][T10990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.120266][T11075] loop3: detected capacity change from 0 to 7 [ 408.129261][T11075] Dev loop3: unable to read RDB block 7 [ 408.134986][T11075] loop3: unable to read partition table [ 408.142451][T11075] loop3: partition table beyond EOD, truncated [ 408.151124][T11075] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 408.163335][T10990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.196203][ T5837] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 408.247696][ T5837] usb 4-1: device descriptor read/8, error -71 [ 408.316576][ T50] Bluetooth: hci2: command tx timeout [ 408.396625][T10990] team0: Port device team_slave_0 added [ 408.413692][T10990] team0: Port device team_slave_1 added [ 408.492253][ T50] Bluetooth: hci4: command tx timeout [ 408.511059][ T5837] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 408.563113][T10956] hsr_slave_0: left promiscuous mode [ 408.576726][T10956] hsr_slave_1: left promiscuous mode [ 408.582213][ T5837] usb 4-1: device descriptor read/8, error -71 [ 408.591229][T10956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.608536][T10956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.707424][ T5837] usb usb4-port1: unable to enumerate USB device [ 408.737864][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.762575][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.052051][T10956] team0 (unregistering): Port device team_slave_1 removed [ 409.091550][T10956] team0 (unregistering): Port device team_slave_0 removed [ 409.388588][T10962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.402954][T10962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.413152][T10962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.434459][T10962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.451715][ T5504] 8021q: adding VLAN 0 to HW filter on device eth6 [ 409.479583][T10990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.487660][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.549616][T10990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.579294][T10962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.611771][T10962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.621669][T10962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.646887][T10962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.663444][T10990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.675283][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.717333][T10990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.880168][T10990] hsr_slave_0: entered promiscuous mode [ 409.887636][T10990] hsr_slave_1: entered promiscuous mode [ 409.894607][T10990] debugfs: 'hsr0' already exists in 'hsr' [ 409.901195][T10990] Cannot create hsr debugfs directory [ 410.386234][ T5921] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 410.399616][ T50] Bluetooth: hci2: command tx timeout [ 410.581981][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 410.613403][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 410.642273][ T5921] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 410.699221][ T5921] usb 4-1: config 1 interface 0 has no altsetting 1 [ 410.727233][ T5921] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 410.756081][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.772555][ T5921] usb 4-1: Product: syz [ 410.785229][ T5921] usb 4-1: Manufacturer: syz [ 410.790312][ T5921] usb 4-1: SerialNumber: syz [ 410.830951][ T5921] smsusb:smsusb_probe: board id=8, interface number 0 [ 411.013519][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.030147][ T5921] smsusb:smsusb_probe: Device initialized with return code -19 [ 411.157911][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.307034][ T5991] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 411.390964][T11121] loop3: detected capacity change from 0 to 7 [ 411.406697][T11121] Dev loop3: unable to read RDB block 7 [ 411.416315][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.423658][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.434818][T11121] loop3: unable to read partition table [ 411.442531][T11121] loop3: partition table beyond EOD, truncated [ 411.456714][T11121] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 411.470670][ T5991] usb 2-1: Using ep0 maxpacket: 8 [ 411.493354][ T5991] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 411.518686][ T5991] usb 2-1: config 0 has no interface number 0 [ 411.544212][ T5991] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.564342][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.571622][T10958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.587367][ T5991] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 411.600780][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 411.617409][ T5923] usb 4-1: USB disconnect, device number 78 [ 411.640471][ T5991] usb 2-1: Product: syz [ 411.653806][ T5991] usb 2-1: config 0 descriptor?? [ 411.660411][T11124] loop2: detected capacity change from 0 to 7 [ 411.672638][ T5991] iowarrior 2-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 411.697612][ T5504] 8021q: adding VLAN 0 to HW filter on device eth7 [ 411.727455][T11124] Dev loop2: unable to read RDB block 7 [ 411.733182][T11124] loop2: AHDI p1 p3 [ 411.744027][T10990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.752171][T11124] loop2: partition table partially beyond EOD, truncated [ 411.766850][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.775751][T11124] loop2: p1 start 2349049979 is beyond EOD, truncated [ 411.794628][T10990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.814430][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.839399][T10990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 411.854456][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.874609][T10990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 411.939222][T10990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.939911][ T5923] usb 2-1: USB disconnect, device number 72 [ 412.088968][T11139] program syz.1.1482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.111712][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.460963][T10962] veth0_vlan: entered promiscuous mode [ 412.531725][T10962] veth1_vlan: entered promiscuous mode [ 412.550224][ T5923] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 412.634702][T10990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.719038][T10990] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.732033][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.760240][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.795732][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.835578][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.843122][T10958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.853235][ T5923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.862567][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.881643][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.888879][T10958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.909025][ T5923] usb 4-1: config 0 descriptor?? [ 412.952467][T10962] veth0_macvtap: entered promiscuous mode [ 412.995349][T10962] veth1_macvtap: entered promiscuous mode [ 413.193394][T11159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.200061][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.285611][T11161] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=7956 (63648 ns) > initial count (1968 ns). Using initial count to start timer. [ 413.294650][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.352618][ T5923] hid_parser_main: 28 callbacks suppressed [ 413.352638][ T5923] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 413.389962][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.410488][ T5923] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 413.422473][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.434622][ T5923] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 413.472560][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.484382][ T5923] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 413.505389][ T5923] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 413.521875][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.574332][ T5923] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 413.598123][T10990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.890399][ T5504] 8021q: adding VLAN 0 to HW filter on device eth8 [ 414.024793][T10990] veth0_vlan: entered promiscuous mode [ 414.036761][T10956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.052536][T10956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.099056][T10990] veth1_vlan: entered promiscuous mode [ 414.165213][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.181487][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.205662][ T6093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.229316][ T6093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.282255][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.321402][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.346139][ T5922] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 414.362815][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.384702][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.402267][ T5901] usb 4-1: USB disconnect, device number 79 [ 414.412298][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.431860][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.517690][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 414.525537][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.550569][ T5922] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.569277][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 414.579679][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.603525][ T5922] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 64800, setting to 1024 [ 414.623244][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 414.645692][ T5922] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.665709][ T5922] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 414.711853][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.722592][T11182] netlink: 'syz.4.1485': attribute type 4 has an invalid length. [ 414.746000][ T5921] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 414.830125][T10990] veth0_macvtap: entered promiscuous mode [ 414.877729][T10990] veth1_macvtap: entered promiscuous mode [ 414.929269][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 414.949570][ T5921] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 414.963499][ T5922] usb 2-1: usb_control_msg returned -71 [ 414.973309][T10990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.980951][ T5921] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 415.001176][ T5922] usbtmc 2-1:16.0: can't read capabilities [ 415.020363][ T5921] usb 3-1: config 0 has no interface number 0 [ 415.058639][T10990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.067045][ T5921] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x17, changing to 0x7 [ 415.102240][ T5922] usb 2-1: USB disconnect, device number 73 [ 415.158031][ T5921] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 415.212107][ T5921] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 415.215689][T10956] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.269934][ T5921] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 415.270890][T10956] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.303628][ T5921] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 415.361271][ T5921] usb 3-1: Product: syz [ 415.385723][ T5921] usb 3-1: Manufacturer: syz [ 415.429649][ T5921] usb 3-1: config 0 descriptor?? [ 415.450283][T10956] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.475353][T10956] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.744995][ T5921] usb 3-1: USB disconnect, device number 22 [ 416.336100][ T5921] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 416.520569][T11224] fuse: Unknown parameter '0x0000000000000005' [ 416.525972][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 416.559204][ T5921] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 416.576943][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.625762][ T5921] usb 4-1: config 0 has no interface number 0 [ 416.645971][ T5921] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.664023][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 416.676777][ T5921] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 416.695700][T10958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.708826][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.731145][T10958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.745366][ T5921] usb 4-1: Product: syz [ 416.760589][ T5921] usb 4-1: Manufacturer: syz [ 416.774339][ T5921] usb 4-1: SerialNumber: syz [ 416.836371][ T5921] usb 4-1: config 0 descriptor?? [ 416.867370][ T10] usb 2-1: config 0 has no interfaces? [ 416.875551][ T5921] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 416.886219][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 416.905387][ T5921] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 416.920251][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.003395][ T10] usb 2-1: config 0 descriptor?? [ 417.022532][T10961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.053118][T10961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.075006][ T5921] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 417.348945][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.422666][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.566771][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 417.662107][ T5921] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 417.759908][ T24] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 417.787123][ T5921] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 417.789986][ T24] usb 3-1: config 0 has no interface number 0 [ 417.838847][ T24] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 417.856216][ T5921] usb 4-1: USB disconnect, device number 80 [ 417.914547][ T24] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 417.941479][ T5921] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 418.004345][ T24] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 418.067388][ T24] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 418.120717][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 418.154517][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 418.201568][ T24] usb 3-1: Product: syz [ 418.221725][ T24] usb 3-1: Manufacturer: syz [ 418.264354][ T24] usb 3-1: SerialNumber: syz [ 418.392568][ T24] usb 3-1: config 0 descriptor?? [ 418.411982][ T24] xpad 3-1:0.237: probe with driver xpad failed with error -5 [ 418.631448][ T5837] usb 3-1: USB disconnect, device number 23 [ 418.716544][ T5921] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 418.752958][T11266] batman_adv: batadv0: Adding interface: dummy0 [ 418.779388][T11266] batman_adv: batadv0: Interface activated: dummy0 [ 418.811824][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.873697][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.908410][ T5921] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 418.927063][ T5921] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 418.937535][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.949599][ T5921] usb 4-1: config 0 has no interface number 0 [ 418.959072][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.975045][ T5921] usb 4-1: config 0 interface 222 has no altsetting 0 [ 419.006918][ T5921] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 419.034866][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.079664][ T5921] usb 4-1: config 0 descriptor?? [ 419.219271][T11266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.261762][T11266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.420115][T11273] loop3: detected capacity change from 0 to 7 [ 419.490539][T11273] Dev loop3: unable to read RDB block 7 [ 419.514122][T11273] loop3: unable to read partition table [ 419.549254][T11273] loop3: partition table beyond EOD, truncated [ 419.566672][T11273] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 419.600966][ T5921] usb 4-1: string descriptor 0 read error: -71 [ 419.634567][ T5921] ftdi_sio 4-1:0.222: FTDI USB Serial Device converter detected [ 419.669093][ T5921] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 419.712110][ T5921] usb 4-1: USB disconnect, device number 81 [ 419.850901][ T5921] ftdi_sio 4-1:0.222: device disconnected [ 419.922561][T11281] x_tables: unsorted entry at hook 3 [ 419.961802][T11282] fuse: Unknown parameter '0x0000000000000005' [ 419.983274][T11281] __nla_validate_parse: 39 callbacks suppressed [ 419.983295][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1501'. [ 420.021136][ T10] usb 2-1: USB disconnect, device number 74 [ 420.064296][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1501'. [ 420.144193][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'. [ 420.202248][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'. [ 420.265074][T11287] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 420.290135][T11290] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 420.616939][T11314] netlink: 484 bytes leftover after parsing attributes in process `syz.3.1510'. [ 420.640126][T11310] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 420.892558][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 421.034179][T11330] tipc: Started in network mode [ 421.051575][T11330] tipc: Node identity ac1e0004, cluster identity 4711 [ 421.066301][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 421.066766][T11330] tipc: Enabling of bearer rejected, failed to enable media [ 421.165376][ T5837] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 421.182001][T11333] loop2: detected capacity change from 0 to 7 [ 421.189447][T11333] Dev loop2: unable to read RDB block 7 [ 421.195312][T11333] loop2: AHDI p1 p3 [ 421.208460][T11333] loop2: partition table partially beyond EOD, truncated [ 421.217098][T11333] loop2: p1 start 2349049979 is beyond EOD, truncated [ 421.257260][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 421.265446][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 421.302200][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 421.318447][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 421.331314][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 421.349746][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short [ 421.369762][ T5837] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 421.381116][ T5837] usb 2-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 421.398789][ T5837] usb 2-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 421.431874][ T24] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 421.455424][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.485081][T11341] netlink: 'syz.3.1519': attribute type 1 has an invalid length. [ 421.497570][ T5837] usb 2-1: config 66 interface 0 has no altsetting 0 [ 421.504400][ T24] usb 3-1: Product: syz [ 421.511834][ T24] usb 3-1: Manufacturer: syz [ 421.522166][ T5837] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 421.544713][ T24] usb 3-1: SerialNumber: syz [ 421.554073][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.562865][ T5837] usb 2-1: Product: syz [ 421.568868][ T5837] usb 2-1: Manufacturer: syz [ 421.581614][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1518'. [ 421.582961][ T24] usb 3-1: config 0 descriptor?? [ 421.597835][ T5837] usb 2-1: SerialNumber: syz [ 421.623593][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1518'. [ 421.657033][T11348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1519'. [ 421.753103][T11341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.808982][T11345] vlan2: entered promiscuous mode [ 421.814127][T11345] bond1: entered promiscuous mode [ 421.820902][T11345] vlan2: entered allmulticast mode [ 421.828866][T11345] bond1: entered allmulticast mode [ 421.910218][T11327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.969590][T11327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.022896][T11341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.042661][T11327] netlink: 'syz.1.1515': attribute type 5 has an invalid length. [ 422.101310][T11327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.146014][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.147282][T11327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.198684][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.213606][T11367] netlink: 484 bytes leftover after parsing attributes in process `syz.5.1523'. [ 422.292277][ T5837] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 422.350792][ T5837] usb 2-1: USB disconnect, device number 75 [ 422.735981][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 422.756406][ T5837] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 422.896323][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 422.919339][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.935959][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 422.942254][ T10] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 422.943408][ T5837] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 422.962046][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.964252][ T5837] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.982748][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.988775][ T10] usb 6-1: Product: syz [ 422.991850][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.995630][ T10] usb 6-1: Manufacturer: syz [ 423.007293][ T5837] usb 2-1: config 0 has no interface number 0 [ 423.024081][ T5837] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 423.027214][ T10] usb 6-1: SerialNumber: syz [ 423.065796][ T10] usb 6-1: config 0 descriptor?? [ 423.068857][ T5837] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 423.078684][ T10] cdc_ether 6-1:0.0: missing cdc header descriptor [ 423.089569][ T10] usb 6-1: unsupported MDLM descriptors [ 423.114492][ T5837] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 423.181349][ T5837] usb 2-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 423.221772][ T5837] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 423.249919][ T5837] usb 2-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 423.302597][ T5837] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 423.319824][ T5922] usb 6-1: USB disconnect, device number 2 [ 423.326034][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.341942][ T5837] usb 2-1: Product: syz [ 423.346560][ T5837] usb 2-1: Manufacturer: syz [ 423.352749][ T5837] usb 2-1: SerialNumber: syz [ 423.365918][ T5837] usb 2-1: config 0 descriptor?? [ 423.373906][T11372] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 423.385369][T11372] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 423.419373][T11398] team0 (unregistering): Port device team_slave_0 removed [ 423.432734][T11398] team0 (unregistering): Port device team_slave_1 removed [ 423.602595][ T5837] usb 2-1: NFC: intf ffff88803531d000 id ffffffff8f3e2020 [ 423.684192][ T5837] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 423.686319][ T5921] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 423.704482][ T5837] usb 2-1: USB disconnect, device number 76 [ 423.745011][ T5837] usb 2-1: NFC: intf ffff88803531d000 [ 423.779674][ T5901] usb 3-1: USB disconnect, device number 24 [ 423.883074][ T5921] usb 4-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 423.923104][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.958785][ T5921] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.968880][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.014430][ T5921] usb 4-1: SerialNumber: syz [ 424.304237][T11421] xt_hashlimit: size too large, truncated to 1048576 [ 424.425342][T11428] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 424.534491][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.569530][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.626705][ T5921] usb 4-1: 0:2 : does not exist [ 424.641988][ T5921] usb 4-1: unit 5: unexpected type 0x0d [ 424.731925][ T5921] usb 4-1: USB disconnect, device number 82 [ 424.884245][T10960] udevd[10960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.155440][T11438] kvm: pic: level sensitive irq not supported [ 425.161447][T11438] kvm: pic: non byte read [ 425.189964][T11438] kvm: pic: level sensitive irq not supported [ 425.190040][T11438] kvm: pic: non byte read [ 425.216546][T11438] kvm: pic: level sensitive irq not supported [ 425.216611][T11438] kvm: pic: non byte read [ 425.274706][T11438] kvm: pic: level sensitive irq not supported [ 425.274801][T11438] kvm: pic: non byte read [ 425.333260][T11438] kvm: pic: level sensitive irq not supported [ 425.333360][T11438] kvm: pic: non byte read [ 425.362513][T11438] kvm: pic: level sensitive irq not supported [ 425.362600][T11438] kvm: pic: non byte read [ 425.615140][T11438] kvm: pic: level sensitive irq not supported [ 425.615236][T11438] kvm: pic: non byte read [ 425.686269][T11438] kvm: pic: level sensitive irq not supported [ 425.686357][T11438] kvm: pic: non byte read [ 425.709850][T11438] kvm: pic: level sensitive irq not supported [ 425.709949][T11438] kvm: pic: non byte read [ 425.721085][ T5921] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 425.875192][T11438] kvm: pic: level sensitive irq not supported [ 425.875280][T11438] kvm: pic: non byte read [ 425.910971][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.929625][ T5921] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 425.948523][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.993058][ T5921] usb 4-1: config 0 descriptor?? [ 426.037389][ T5921] dvb-usb: found a 'TeVii S662' in warm state. [ 426.073158][ T5921] dw2102: su3000_power_ctrl: 1, initialized 0 [ 426.140801][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 426.235128][ T5921] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 426.269923][ T5923] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 426.397649][ T5921] dvb-usb: TeVii S662 error while loading driver (-19) [ 426.439994][ T5921] usb 4-1: USB disconnect, device number 83 [ 426.466309][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 426.500171][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 426.529528][ T5923] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.558899][T11477] netlink: 'syz.4.1541': attribute type 1 has an invalid length. [ 426.569570][ T5923] usb 3-1: string descriptor 0 read error: -22 [ 426.577331][ T5923] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.589939][T11477] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 426.605595][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.687782][ T5923] usb 3-1: 1:1 : invalid channels 0 [ 427.231941][ T5923] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 427.416002][ T5837] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 427.494791][ T5923] usb 3-1: USB disconnect, device number 25 [ 427.611328][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 427.659271][ T5837] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 427.699401][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.766686][ T5837] usb 4-1: config 0 descriptor?? [ 427.794563][T11491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 428.176820][T11508] openvswitch: netlink: IP tunnel TTL not specified. [ 428.375047][T11512] FAULT_INJECTION: forcing a failure. [ 428.375047][T11512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.403336][T11467] syz.5.1538 (11467): drop_caches: 2 [ 428.410852][T11512] CPU: 1 UID: 0 PID: 11512 Comm: syz.1.1548 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.410887][T11512] Tainted: [L]=SOFTLOCKUP [ 428.410894][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.410905][T11512] Call Trace: [ 428.410913][T11512] [ 428.410922][T11512] dump_stack_lvl+0xe8/0x150 [ 428.410964][T11512] should_fail_ex+0x412/0x560 [ 428.411010][T11512] _copy_from_user+0x2d/0xb0 [ 428.411037][T11512] ___sys_recvmsg+0x175/0x590 [ 428.411067][T11512] ? __pfx____sys_recvmsg+0x10/0x10 [ 428.411094][T11512] ? __fget_files+0x2a/0x420 [ 428.411146][T11512] do_recvmmsg+0x334/0x800 [ 428.411179][T11512] ? __pfx_do_recvmmsg+0x10/0x10 [ 428.411215][T11512] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.411262][T11512] __x64_sys_recvmmsg+0x198/0x250 [ 428.411289][T11512] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 428.411322][T11512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.411344][T11512] do_syscall_64+0x15f/0xf80 [ 428.411371][T11512] ? clear_bhb_loop+0x40/0x90 [ 428.411395][T11512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.411414][T11512] RIP: 0033:0x7ff77e79cdd9 [ 428.411432][T11512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.411449][T11512] RSP: 002b:00007ff77f735028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 428.411472][T11512] RAX: ffffffffffffffda RBX: 00007ff77ea15fa0 RCX: 00007ff77e79cdd9 [ 428.411486][T11512] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 428.411500][T11512] RBP: 00007ff77f735090 R08: 0000000000000000 R09: 0000000000000000 [ 428.411512][T11512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.411523][T11512] R13: 00007ff77ea16038 R14: 00007ff77ea15fa0 R15: 00007ff77eb3fa48 [ 428.411554][T11512] [ 428.772183][ T5837] hid (null): report_id 41546 is invalid [ 428.778000][ T5837] hid (null): unknown global tag 0xc [ 428.783371][ T5837] hid (null): unknown global tag 0x7c [ 428.804855][ T5837] uclogic 0003:28BD:0071.0019: interface is invalid, ignoring [ 429.276665][ T5923] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 429.516692][ T5923] usb 2-1: config 64 has an invalid interface number: 6 but max is 2 [ 429.548648][ T5923] usb 2-1: config 64 has an invalid interface number: 110 but max is 2 [ 429.667739][ T5923] usb 2-1: config 64 has an invalid interface number: 231 but max is 2 [ 429.706707][ T5923] usb 2-1: config 64 has no interface number 0 [ 429.750630][ T5923] usb 2-1: config 64 has no interface number 1 [ 429.804627][ T5923] usb 2-1: config 64 has no interface number 2 [ 429.848659][ T5923] usb 2-1: config 64 interface 6 altsetting 12 endpoint 0xA has invalid maxpacket 512, setting to 8 [ 429.889325][ T5923] usb 2-1: config 64 interface 6 altsetting 12 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 429.950175][ T5923] usb 2-1: config 64 interface 110 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 430.019942][ T5923] usb 2-1: config 64 interface 110 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 8 [ 430.073188][ T5923] usb 2-1: config 64 interface 110 altsetting 7 endpoint 0x3 has invalid maxpacket 64, setting to 8 [ 430.091480][ T5991] usb 4-1: USB disconnect, device number 84 [ 430.149304][ T5923] usb 2-1: config 64 interface 110 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 430.203818][ T5923] usb 2-1: config 64 interface 110 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 430.249962][ T5923] usb 2-1: config 64 interface 110 altsetting 7 endpoint 0x5 has invalid maxpacket 1040, setting to 8 [ 430.314292][ T5923] usb 2-1: config 64 interface 110 altsetting 7 endpoint 0x8 is Bulk; changing to Interrupt [ 430.345950][ T5921] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 430.362844][ T5923] usb 2-1: config 64 interface 110 altsetting 7 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 430.419301][ T5923] usb 2-1: config 64 interface 110 altsetting 7 endpoint 0x88 has invalid maxpacket 19905, setting to 8 [ 430.497634][ T5923] usb 2-1: config 64 interface 110 altsetting 7 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 430.525940][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 430.660232][ T5923] usb 2-1: config 64 interface 110 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 430.678877][ T5921] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 430.690985][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.704746][ T5923] usb 2-1: config 64 interface 110 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 430.718464][ T5921] usb 3-1: Product: syz [ 430.722855][ T5923] usb 2-1: config 64 interface 110 altsetting 7 has an endpoint descriptor with address 0x92, changing to 0x82 [ 430.735976][ T5921] usb 3-1: Manufacturer: syz [ 430.740730][ T5921] usb 3-1: SerialNumber: syz [ 430.753836][ T5923] usb 2-1: config 64 interface 110 altsetting 7 endpoint 0x82 has an invalid bInterval 171, changing to 4 [ 430.770537][ T5921] r8152-cfgselector 3-1: Unknown version 0x0000 [ 430.781738][ T5921] r8152-cfgselector 3-1: config 0 descriptor?? [ 430.789592][ T5923] usb 2-1: config 64 interface 110 altsetting 7 endpoint 0x82 has invalid maxpacket 54560, setting to 0 [ 430.803244][ T5923] usb 2-1: config 64 interface 110 altsetting 7 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 430.823817][ T5923] usb 2-1: config 64 interface 6 has no altsetting 0 [ 430.832612][ T5923] usb 2-1: config 64 interface 110 has no altsetting 0 [ 430.841703][ T5923] usb 2-1: config 64 interface 231 has no altsetting 0 [ 430.868467][ T5923] usb 2-1: Dual-Role OTG device on HNP port [ 430.885576][ T5923] usb 2-1: New USB device found, idVendor=05c6, idProduct=9034, bcdDevice=ff.f8 [ 430.899523][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.925007][ T5923] usb 2-1: Product:  躻癀臿⦽慧ᵥ톼숒絆磇憧끐먔퍊킟툞准槳䮱蛮䒘鮽ᄮவ䠙冇奭ౖ뗳䧢씆⃏萻ꁸ偣妜ﱚ䦰릜Փ휒ᒱ䝳芈濰蜌촮褿鰚穒ባ䩤쨛៌綜嗠뀷䁋ョﺆᲸ꘺榷㼌䚎㟖□珨㹇봍 [ 431.012211][ T5923] usb 2-1: Manufacturer: 譈 [ 431.048518][ T5923] usb 2-1: SerialNumber: ⠊ [ 431.512272][ T5923] usb 2-1: USB disconnect, device number 77 [ 431.636481][T11574] __nla_validate_parse: 5 callbacks suppressed [ 431.636505][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1557'. [ 432.724789][T11596] kvm: pic: non byte write [ 432.843166][T11596] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 433.988039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 434.489173][T11623] netlink: 484 bytes leftover after parsing attributes in process `syz.1.1569'. [ 434.597553][ T5921] r8152-cfgselector 3-1: Unknown version 0x0000 [ 434.622736][ T5921] r8152-cfgselector 3-1: No union descriptors [ 434.681091][ T5921] r8152-cfgselector 3-1: USB disconnect, device number 26 [ 435.126860][ T5921] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 435.317194][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 435.337997][ T5921] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.414826][ T5921] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 435.473559][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.482148][T11641] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 435.500187][ T5921] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 435.533288][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.573529][ T5921] usb 3-1: config 0 descriptor?? [ 435.715708][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1575'. [ 436.629986][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.670052][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.685012][T11668] netlink: 484 bytes leftover after parsing attributes in process `syz.5.1581'. [ 437.075688][T11676] [ 437.078178][T11676] ============================================ [ 437.084352][T11676] WARNING: possible recursive locking detected [ 437.090535][T11676] syzkaller #0 Tainted: G L [ 437.096539][T11676] -------------------------------------------- [ 437.102801][T11676] syz.2.1570/11676 is trying to acquire lock: [ 437.108897][T11676] ffffffff8f3cfc70 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 437.119118][T11676] [ 437.119118][T11676] but task is already holding lock: [ 437.126517][T11676] ffffffff8f3cfc70 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 437.136815][T11676] [ 437.136815][T11676] other info that might help us debug this: [ 437.144883][T11676] Possible unsafe locking scenario: [ 437.144883][T11676] [ 437.152474][T11676] CPU0 [ 437.155753][T11676] ---- [ 437.159034][T11676] lock(qp_broker_list.mutex); [ 437.163904][T11676] lock(qp_broker_list.mutex); [ 437.169022][T11676] [ 437.169022][T11676] *** DEADLOCK *** [ 437.169022][T11676] [ 437.177170][T11676] May be due to missing lock nesting notation [ 437.177170][T11676] [ 437.185488][T11676] 1 lock held by syz.2.1570/11676: [ 437.190606][T11676] #0: ffffffff8f3cfc70 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 437.201511][T11676] [ 437.201511][T11676] stack backtrace: [ 437.207404][T11676] CPU: 1 UID: 0 PID: 11676 Comm: syz.2.1570 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.207431][T11676] Tainted: [L]=SOFTLOCKUP [ 437.207437][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.207447][T11676] Call Trace: [ 437.207455][T11676] [ 437.207462][T11676] dump_stack_lvl+0xe8/0x150 [ 437.207489][T11676] print_deadlock_bug+0x279/0x290 [ 437.207509][T11676] __lock_acquire+0x253f/0x2cf0 [ 437.207535][T11676] ? is_bpf_text_address+0x292/0x2b0 [ 437.207562][T11676] ? is_bpf_text_address+0x26/0x2b0 [ 437.207585][T11676] ? kernel_text_address+0xa5/0xe0 [ 437.207605][T11676] ? __kernel_text_address+0xd/0x30 [ 437.207626][T11676] ? vmci_qp_broker_detach+0x117/0xf20 [ 437.207645][T11676] lock_acquire+0x106/0x350 [ 437.207666][T11676] ? vmci_qp_broker_detach+0x117/0xf20 [ 437.207701][T11676] __mutex_lock+0x1a3/0x1550 [ 437.207723][T11676] ? vmci_qp_broker_detach+0x117/0xf20 [ 437.207744][T11676] ? kasan_save_track+0x4f/0x80 [ 437.207762][T11676] ? kasan_save_track+0x3e/0x80 [ 437.207780][T11676] ? kasan_save_free_info+0x46/0x50 [ 437.207794][T11676] ? __kasan_slab_free+0x5c/0x80 [ 437.207811][T11676] ? kfree+0x1c5/0x640 [ 437.207828][T11676] ? vmci_ctx_put+0x5ef/0xc40 [ 437.207844][T11676] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 437.207860][T11676] ? vmci_datagram_dispatch+0x450/0xc60 [ 437.207877][T11676] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 437.207896][T11676] ? vmci_host_close+0x98/0x160 [ 437.207915][T11676] ? vmci_qp_broker_detach+0x117/0xf20 [ 437.207936][T11676] ? exit_to_user_mode_loop+0xed/0x480 [ 437.207957][T11676] ? __pfx___mutex_lock+0x10/0x10 [ 437.207989][T11676] vmci_qp_broker_detach+0x117/0xf20 [ 437.208014][T11676] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 437.208034][T11676] ? kasan_quarantine_put+0xbb/0x1f0 [ 437.208051][T11676] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.208072][T11676] ? kfree+0x1c5/0x640 [ 437.208086][T11676] ? vmci_ctx_put+0x5ef/0xc40 [ 437.208100][T11676] ? vmci_ctx_put+0x141/0xc40 [ 437.208118][T11676] vmci_ctx_put+0x64e/0xc40 [ 437.208133][T11676] ? __pfx___schedule+0x10/0x10 [ 437.208151][T11676] ? vmci_ctx_put+0x141/0xc40 [ 437.208166][T11676] ? __pfx_vmci_ctx_put+0x10/0x10 [ 437.208181][T11676] ? preempt_schedule_thunk+0x16/0x30 [ 437.208200][T11676] ? preempt_schedule_common+0x82/0xd0 [ 437.208223][T11676] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 437.208242][T11676] vmci_datagram_dispatch+0x450/0xc60 [ 437.208263][T11676] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 437.208283][T11676] vmci_qp_broker_detach+0x8dd/0xf20 [ 437.208307][T11676] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 437.208327][T11676] ? kasan_quarantine_put+0xbb/0x1f0 [ 437.208346][T11676] ? kfree+0x1c5/0x640 [ 437.208360][T11676] ? vmci_ctx_put+0x5ef/0xc40 [ 437.208373][T11676] ? vmci_ctx_put+0x141/0xc40 [ 437.208390][T11676] vmci_ctx_put+0x64e/0xc40 [ 437.208406][T11676] ? vmci_ctx_put+0x141/0xc40 [ 437.208421][T11676] ? __pfx_vmci_ctx_put+0x10/0x10 [ 437.208441][T11676] vmci_host_close+0x98/0x160 [ 437.208460][T11676] ? __pfx_vmci_host_close+0x10/0x10 [ 437.208479][T11676] __fput+0x44f/0xa60 [ 437.208498][T11676] task_work_run+0x1d9/0x270 [ 437.208518][T11676] ? __pfx_task_work_run+0x10/0x10 [ 437.208541][T11676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.208557][T11676] exit_to_user_mode_loop+0xed/0x480 [ 437.208578][T11676] ? rcu_is_watching+0x15/0xb0 [ 437.208594][T11676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.208609][T11676] do_syscall_64+0x33e/0xf80 [ 437.208630][T11676] ? trace_irq_disable+0x3b/0x140 [ 437.208649][T11676] ? clear_bhb_loop+0x40/0x90 [ 437.208668][T11676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.208693][T11676] RIP: 0033:0x7f07aa79cdd9 [ 437.208709][T11676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.208723][T11676] RSP: 002b:00007f07ab58f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 437.208741][T11676] RAX: 0000000000000000 RBX: 00007f07aaa16360 RCX: 00007f07aa79cdd9 [ 437.208752][T11676] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 437.208762][T11676] RBP: 00007f07aa832d69 R08: 0000000000000000 R09: 0000000000000000 [ 437.208772][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.208781][T11676] R13: 00007f07aaa163f8 R14: 00007f07aaa16360 R15: 00007f07aab3fa48 [ 437.208797][T11676] [ 437.786020][ T5901] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 437.938193][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 437.945971][ T5901] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.957593][ T5901] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.967522][ T5901] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 437.980547][ T5901] usb 6-1: config 0 interface 0 has no altsetting 0 [ 437.987495][ T5901] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 437.996705][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.008727][ T5901] usb 6-1: config 0 descriptor?? [ 438.423837][ T5901] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 438.431592][ T5901] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 438.439567][ T5901] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 438.447275][ T5901] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 438.454904][ T5901] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 438.462812][ T5901] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 438.470270][ T5901] holtek_kbd 0003:04D9:A055.001A: report_id 0 is invalid [ 438.478522][ T5901] holtek_kbd 0003:04D9:A055.001A: item 0 0 1 8 parsing failed [ 438.495115][ T5901] holtek_kbd 0003:04D9:A055.001A: probe with driver holtek_kbd failed with error -22 [ 438.626048][T11674] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.1582'. [ 438.637648][ T10] usb 6-1: USB disconnect, device number 3 [ 440.327847][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.334537][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.647375][ T5921] usbhid 3-1:0.0: can't add hid device: -32 [ 440.653689][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -32