last executing test programs: 9m23.821212711s ago: executing program 2 (id=430): openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000fff000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 9m23.65070983s ago: executing program 2 (id=432): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000000000ffff", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 9m23.483601425s ago: executing program 2 (id=433): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [], [0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv4=@multicast2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0xfe, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 9m23.248839506s ago: executing program 2 (id=435): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000040)=ANY=[@ANYBLOB="666430572d0000000000003594f36a3eb7463d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x409, 0x0}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 9m23.180605636s ago: executing program 2 (id=437): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400895504002c001280110001006262696467655f73a8b2c183ee8ea4f314000580080028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r7, &(0x7f00000007c0)={0x2020}, 0x2020) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af24, &(0x7f0000000000)={0x1}) remap_file_pages(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 9m22.901102117s ago: executing program 2 (id=439): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9m22.647564105s ago: executing program 32 (id=439): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m22.095700316s ago: executing program 3 (id=2430): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r2, &(0x7f0000000100)=""/171, 0xab) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto(r5, 0x0, 0x0, 0x8000, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x3, @mcast2, 0x8bc, 0x2}, 0x80) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom(r3, 0x0, 0x0, 0x32, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x64004081}, 0x0) mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x100000000) 2m21.032520409s ago: executing program 3 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r7, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)={r8, 0x3}, &(0x7f0000000300)=0x8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) 2m18.681431593s ago: executing program 3 (id=2459): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0x1}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x3ff, 0xffffffff, 0x9, 0x3, 0x3, 0x2, 0x3, 0xfffffffd, 0x7, 0x3, 0x9, 0xeeb, 0x9, 0x1, 0x5, 0x6, 0xffffffff, 0x6, 0x5, 0x7, 0x5, 0x80000001, 0x7, 0x3, 0x100, 0x92a, 0x10000, 0x7, 0x6732, 0x39, 0x6, 0x3, 0x50, 0x7, 0x22c7188, 0x4, 0x800, 0xfffffffa, 0x34, 0x1, 0xff, 0x8, 0xd, 0x7e9, 0x5, 0x3, 0x9, 0x2, 0x100, 0x5, 0x8001, 0xa003, 0x43c48, 0x2, 0x72, 0x9, 0x8c2f, 0x2, 0xfff, 0xcef8, 0x6, 0x80000000, 0x6, 0x4, 0x90000000, 0x2, 0x8, 0x9, 0x3ff, 0x9, 0x8, 0x40, 0x1, 0x1, 0x2, 0x7, 0x9, 0xb, 0xcc, 0x6, 0x8, 0x389, 0x80, 0x7, 0x3, 0xed0, 0x7, 0xf, 0x5, 0xff, 0xa, 0x10000, 0x38fc, 0x8, 0x3, 0x8, 0x10001, 0x1000, 0x1, 0x8000, 0x3ff, 0x101, 0x9, 0x0, 0xe0000000, 0xffff, 0x8, 0x8, 0x4, 0x1000, 0x2, 0x6, 0x5f5, 0x3, 0x8000, 0x0, 0x5, 0x2, 0xf613, 0xfffffffb, 0x1, 0x9, 0x3, 0x8, 0xb092, 0x47fd6378, 0x2, 0xffffffff, 0xbf18, 0x1ff, 0x3, 0x1, 0x5, 0x7, 0x8, 0xa4d, 0x7f9e, 0x1, 0xc2, 0x5, 0x5, 0xffff936d, 0x7, 0x3, 0xfffffffa, 0x7, 0x6, 0x3, 0x4, 0x2, 0x80000000, 0x81, 0xcda7, 0x1, 0x5, 0x6, 0x101, 0x6, 0x80ae, 0x9, 0xf6, 0x7, 0x99, 0x7, 0x4, 0x2, 0x1, 0x4, 0x4, 0x8, 0x8, 0x5, 0x10, 0x10d, 0x3, 0xbe66, 0x2, 0x200, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x2d8e, 0xf4a, 0xc, 0x7, 0x5, 0x3, 0x5, 0x4, 0x7f, 0x7f, 0x9, 0x1, 0x3, 0x4, 0x37c, 0x5, 0x0, 0xfffffffc, 0x5, 0xfffffffa, 0x8, 0x97a, 0x5, 0x1, 0xb79, 0xffff, 0xb, 0xda, 0x10000, 0x5, 0x70a, 0x9, 0x97, 0x7f, 0x1, 0x1, 0x6, 0x3, 0xffffffff, 0x1, 0x9, 0x3, 0x7, 0xc, 0xffff, 0x4, 0x7, 0x9, 0x1, 0x9, 0x3, 0x311c, 0x6, 0x3, 0x8, 0xfffffff8, 0x1ff, 0x81, 0x9, 0x9, 0x9, 0x5, 0x1, 0x7fffffff, 0x7f, 0x4, 0x7, 0x5, 0x0, 0x6, 0xffffffff]}]}}]}, 0x45c}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) syz_usb_connect$uac1(0x3, 0x9c, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002000000401e04203040000102030109028a000301091d080904000000010100000a240106000a00020102090401000001020000090401010101020000072401080901100b24020140010901b04f4209050109000405060d0725010c0940000904020000010200000904020101010200000a24020132230f0991340724010214000007240153d0352e3561ffc60302100905820908000509082020a0cf1cd227bf123899a1c6851eded38991f0a8df4e6f22aad59a1e439755a77ac8b965b143b8030a6a2a76fceddfe0036086fd5da026b9b258c5b447e0676fb27f75ed9e"], 0x0) 2m15.463892254s ago: executing program 3 (id=2470): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000400703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a00fe000000001f04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 2m14.20845579s ago: executing program 3 (id=2473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x0, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m14.115751832s ago: executing program 3 (id=2475): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mincore(&(0x7f00000ee000/0x4000)=nil, 0x4000, &(0x7f0000000300)=""/211) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 1m58.636673785s ago: executing program 33 (id=2475): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mincore(&(0x7f00000ee000/0x4000)=nil, 0x4000, &(0x7f0000000300)=""/211) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 13.427744796s ago: executing program 6 (id=3092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0), 0x0, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) faccessat2(r5, &(0x7f0000000100)='./file0\x00', 0x9, 0x1100) read$FUSE(0xffffffffffffffff, &(0x7f0000004300)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x50) unshare(0x62040200) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0x0, 0x3}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x4, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2d8, 0x0, 0x470, 0xa7, 0x8, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x2, 0x0, 0xfffffffa, 0x3, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0xf5, 0x0, 0x4, 0x0, 0xd318, 0x2000000000, 0x0, 0x4, 0x0, 0x1000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x6, 0x800000, 0x0, 0x101, 0x272f, 0xd721, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x4, 0x5, 0x1, 0x4000000, 0x100000000000005, 0x0, 0xdc5d, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100]}) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) 11.159043368s ago: executing program 6 (id=3099): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) r5 = syz_open_dev$audion(0x0, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000029004319473ee5db6c5d95520701"], 0x1c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000001700)={{r7}, 0x0, 0x8, @unused=[0xc, 0xde, 0xffffffffffff7fff, 0x32], @name="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"}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000001600)=[{0x15, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x1, @uvalue=0x2}, {0x2, @uvalue=0x2}, {0x3, @uvalue=0x9}]}, 0x3}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100) 6.727766951s ago: executing program 6 (id=3120): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=':\x12$#\xba*\x00') sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="18747636f657526f776c8a31d3cf9ca6035301270b3ca760a1b8621299", 0x1d}, {&(0x7f0000000700)="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", 0x126}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40808d4) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create1(0x80000) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) 5.523184445s ago: executing program 1 (id=3126): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}], 0x4}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8000d3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xef23fe83}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x9, 0x2030, 0x0) 5.410277687s ago: executing program 1 (id=3127): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2d52c0], [0x0, 0x0, 0x2, 0xb, 0x0, 0xffffffcb, 0x0, 0x0, 0xffffcfbf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0xf, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x5, 0x0, 0x7, 0x0, 0x0, 0x430d, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20008, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x2, 0x0, 0xad66, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80, 0x0, 0x5]}, 0x45c) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000000)=0xa, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd700005000000000000000f00a8007365636f6e646e616d6500000800030001000000080001007063690011000200303030303a30303a31302e3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4500}, 0x240001d0) write(r2, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r5, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x0, 0x10001, @loopback, 0x4}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffefd}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$I2C(&(0x7f0000000140), 0x7fffffffffffffff, 0x4100) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x284e83, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') dup3(r9, r8, 0x0) setsockopt(r6, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) 5.226036999s ago: executing program 6 (id=3129): syz_open_dev$sndpcmp(&(0x7f0000000200), 0xb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2756, &(0x7f0000000100)={0x0, 0x85cb, 0x400, 0x0, 0x3b3}) r1 = io_uring_setup(0x800007, &(0x7f0000000040)={0x0, 0xc8a1, 0x10, 0x8, 0xc1, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xb, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x2756, &(0x7f0000000100)={0x0, 0x85cb, 0x400, 0x0, 0x3b3}) (async) io_uring_setup(0x800007, &(0x7f0000000040)={0x0, 0xc8a1, 0x10, 0x8, 0xc1, 0x0, r0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) 4.966723859s ago: executing program 6 (id=3132): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x1c, 0x23, 0x100, 0x70bdaa, 0x25dfdbfd, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 4.852568916s ago: executing program 4 (id=3134): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x7}) (async) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 4.84389862s ago: executing program 4 (id=3135): r0 = syz_io_uring_setup(0x5472, &(0x7f0000000200)={0x0, 0xc244, 0x400, 0x0, 0x166, 0x0, 0x0}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r10, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, r12, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48098) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000300)='\x002wf', 0x4) 4.723123609s ago: executing program 6 (id=3136): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x404c841}, 0x240408d1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10135, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000300)={0x7, 0x40}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00005b4000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000b07000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlink(&(0x7f0000000100)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.000367246s ago: executing program 1 (id=3138): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005004c55de000904"], 0x0) 3.999993398s ago: executing program 4 (id=3139): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=':\x12$#\xba*\x00') sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="18747636f657526f776c8a31d3cf9ca6035301270b3ca760a1b8621299", 0x1d}, {&(0x7f0000000700)="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", 0x126}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40808d4) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create1(0x80000) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) 3.454401186s ago: executing program 5 (id=3141): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 3.294275814s ago: executing program 5 (id=3142): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000001600)=""/239, 0xef}], 0x1, 0x87, 0x101, 0x1) 3.292011262s ago: executing program 0 (id=3143): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000001010101000006000000000000000008080008400000000e0800034000000002"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0xab944209d2eab656) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xa) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000002180)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303132303030302c757365725f81643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="3f42cc00a5e71af3d8df6f548f7a0cd28db1682065ce090cd8a891eb3319d282bbc9f46412db21af681715aa4b69c6d3aa15ddae244f4b35ad5c1595c3c7cb696e023196d1897f36ad818107e7073b82c6a888182a5e1c473a238a85cecd4ece8f26e328f014cfbfd245c86860fd1bcc076b6c6615cf61a61a9f2a0eb9cfa9b63d4db614870cf1ce700abe6c15758ea186ea030af66de0a4cedd48c175f3d09e27c42b602edf32ceb87c83d7a09ff23a9b8542e27f379f27ce7935a9d4b27613fedc715606f100216cb607581309fbd46b67b5ed3a41d2744e9cc74b61dc7455cfe7791dacd2b828eae6ce1aa0dd6288163814185f7af1f88bfe9d83c975521e65033615283bb3f8a45c02f9f08f85648119e434938e02b8e5c0c34f1c3cb26954279e3f681de6a6d319a9b6a28f312457da8f93cee94f189c7d2eb2f166e23a088deb064ad6bf4df8e0cb1a5e29be78a1c614edeba3fbcaad1f939221f3deef609dfb878f7d49ccc709191d07a3b2bc50428b0bd7d06d91ce3efc15ceb5e6e8d147f0412f605eff3b91959339181769b1a2098b06e261cb2c485207af77544ceed3af5800b4f5346745d4cb8db53052badbf70fbed4676d37edea1f26b29de8c97d191c55f8326409836d7d50a2e84650b7f65fe155cfec3d17d6038711e8b37cbd042375ad9ce682767075f20687ee3fc026471e110fca2cc2e487806cb8281eaba67eb5c8660b2a48afa7cd34936143270e01b26cc1c0ac8d25963e6e697425b914d7962048518bfa1838c1642af3fb3bfa8b9faa3cb6c5d5dd1fa4b347ff69dc8691721f6c45d6b90d7fabd59b188093ba12246593617a5bfc4c5f5286feba6dc7bad50597d4aa1d73230d2ec66ca0c9be61559989217559f54d37d9256e8645a79ee6f980d5a9e3e9477f948991fdaef515907b950b5c5126595a0482866be339db1585180e4cad4f3a0feafa1bf576ecd9b61cfc3057f2caa399db83c0789e04e8248e933ab2ff554b1c427ea55336e42fecb69e4c043492264dfa58269307cb7e6cd2243ff6fc83eb7916b26e9d7fc8fa9055526bc4ca38e668c2a5aeb36b20552750e0c746b099842772a754ae618e26b555f034855ff1845a4447913eb57e14f3b28d2e76b3e538a03943d4dbdba64e18699597ed53467a1435baf9da7559a65e58d2269d94f07efc063c5d377ef4e50b6318f743743cd6f5fef3001cb7a9e24ed75e37be7c55ecdce4b607189ea25b49d7be7c946e6c9060bf971a943f09277e3c3f5d3b1e1097dc68fe7d4815d8768836111c53d895daae61cf911ee8b540eb50c98dec276b8582197d244d80d0257e1050c52ee040712eedda5bb8f0fe7c57ffe9c339710fd2464b98d30204a9dbb9911f6178af152300032a4fec4477148f4ab6dade99c7cb3f65630ac89d92d260cd9d508849043363cd63a1424dd7c8af8689b9b09996c59b9914608aaa7bdf298fbd17b431cfc036c45a71d1c87ee41fe8b9f9b8f2dc4226428a984835145f6ac39ecb464db76d4a89ecbf92e0fe1cfcb550170d5ec838819b24f9ba01bd77b76e23fee8811b70ebb52f5b09defcaaae716e4240f31b0a0a886037272ab95b4e10970ac4e313935a4558dbc02c76397b91284977ada62ef48ab293568ecba9d1baf30532183eb44a23686759cea64a95f47be8d5605741b0497a4f25d9fbd9a67eb243e9e874cad708183892143aa52b16e5fbe2a1044d9ff4597a2477525415e0205e1d2ebe46ac6cb91e19a9a38fd43967c94461f694b88a9528fee259088f2555122c04f222d0c1ebcfed0279a75778dceafed783131e5ee858182e278ee5abb6e1ac7a3c2fa11e598dff8e939f6dbcc970170a7ceb03b569aea7b5f76a9abd34be2d4a192a3c7e681e9f14b380318e0295c7c9393084fcf88a3f5ada8f714e2014e2454431fb264ad764db56e5c897356aae820542e39309ddbc9704b1ff9ea6f3a13277764e52199eeca53fac0ddc3e0ebeaa1cb4cd9e1a33b7677a8ea21028169dbe27bb64ae848d09af342901a3e0909923973bbb86819fe64eb4b1aeadecbf5c12374d40a34a9606cebb49b105b670bf3ed550ae8d0f30d7346f837de99279694f32640d370eedba2d9ed091553e5b7d2ec59bafaae90234f11f2bc6e556bba1da3ca4f6871bb310b322445958b3423a978a753c4de5384fbe27f8b8a83e0acb3e49b100f8b9a14916ab7e8dcf6fef52bb4d837a39f25c92a86a4c318d1d421f2d2e7def2e0555f21fc987b551981257f515588fa08831bc32e6134dcfde8bdecbfd9dfee79e3ad817228a15fb08d1ad780ae0cb1087d582dfbb807486afea9b7e433c063e04dba63b7c239ab9985ee67e749eb8d9eb62d30005a970aca7845c7618663dba5dac14b6847643f227367466f6a85789a83f8ec627ec9724a2c911b59482f0eae18a7de2f863231cef2cb2781c42d5a0db72c0c0290a5949107b54d3d230960769d05d4d6eeb15a6320a26107e26efc0ca647c86d66f8b845a7174bbe20fbe171243d1da3cb51f41cd2b1cf91becee70d6418c0b8cc9c30b9c9d2aae62617d5485774d8964520e9da321acd08ce9a55a72de189b6bc05fae2e8d1d1002f9ef34580b0635383f85985762a316c1e607845603374c2759ac0b63c4174a17e51a7a6f763335da3e8b29badc6262de1bfbe73fb669ffa50836ccdcb44ce9a7acfe259e8663167f293c3ef6c7f5186a46f270edab909da616e1cf77c6a9ffa8b11c21f78a778780373872416f4e95a69c6336449d06ee46f5c464060a7cb997f2cfa2600d1ae5abef83cd8e514b17f77715fac89e228294f802ca10905e2aee6a95ef3ec717006c37e79858cf2571879fceb13a2138d7dc10fb3ebcd0c84ecce2d5734dd314b0afd8136b14f4940cf69e963fb7f891868ceb620c002a3e53465b903806dd0f48543ecf7a7c5cdc00ff11ef8d855cacbd0ce13ba0170d70de349920b4482d0bb76cfc159d0aabbbe3abb1a3d9378cfd2561ff24dc53f83ddfbbb76d233766b65a9181b2604d9d5ca2c0533300b3bf345b2d93e7ca33861bac13df13b48989cd157e33d7a6bb2e6f996d22e5f081302fce63b0b65a8016f423955974f7c6e0cb5a255b677ae2cfbbbe583751a553b3bd5d9ace0616fe203a4b32a58301711db429795bf1cc35b482879963025677e3edd565207533b82acf8e54feb61ad56fda9ea52eb19a28f60fd3c8a743805112c81daadce38e1db4453ed8c5592c5d4ed7bc4e1f0323743136bff6236b7db3dc9a3b9c47fcb53526a9288ee78977c934da89e9b0075138b3a25a961cfc6baac79d3852ae87e0f5d12fae309618595ee2a91aa822876eaa3e1eef04235aeb19c5b3e227f781700e7f679ef36ac9b51c08673ada8040f2076ff258cca9284464c4724324548d4efd784cbe043da8b878014898ad3b318aebe056a795b93a8692a12538d5dde10533d93f72925c563dfc8766680de9490dbd242db5099cddcafbfd2cf3b4d166cb3ff919d3a473b2c11b86e8979c26f8c1f3608219662e8cc3b8da1c5931b028cd81819e29339888a0dddbfa6cfea25e6cfaae4239d5466fa3c5650d80b587fd2861d2f5b784e5c83b0bc99a4854e24f24fd6b49ecda3cfb9ec9643d1eb213840a2df0ebceb1c6c6cc8bcdc2452b20158b07813ea1a0a4e15116ecb66e82eb7a18e297dd91c52b0b3b33c2c80a6f3946e0af1a43b74dff47537a96ba852ba360443e738cead2da97a7bf2d7563ba3a639564a38b5e3c89aa80aeae8ef4253d8d411d46c339b45ce22e22730cc781f4ce0aaad9784bd0f3cb2d1525be5579e9dc48985cbe8b41b66d83b39e599135eb7aecb1efbceb2436358ecaf9adc76732c59d06fa04e86d77c01531b258bd746632b3699b9cda27d773668050e1162a83f02c480e0d95f879e3164c85f09a8d0956e3fcf01a0b4c18880ad10da95d1db5fcdf82eed1d793493e358391c032dc1c01dff81d904eefd68b1beec82634175bf94d4438b77c925e3d6cbb7d8db77aa3e0b9beb0788531b41d3db078a32766a154ceb5d60f92a056beb6c1f08a5c9d3386a30ef16ba63809ab5d4dfbdf72e753c86394f5591b7ca72ba5a2525308a52fc7d4767432830e3d584b84596912abb7f098bc0dcb1a46c50174b5883878a42d8fc6f4c0a05955b0c88cf6bfac5f7509d4c3dbda87a8e1e84c290fbe40667701578687b64bc3af9ba1864867818088b65b896b198eaf55edec529631338848a825cc0cf953d09296bb24daa3f57d1201b52f2bb55aa018cf90ec67c9e88f515b0edb0c9eb6a24e33ff76b771bdc5786e0e8abd3c62ad67a25685923776b74666c3ba03b0a4db7471143a33af84750442e841d912f035c1a298a7a2d75fc25b0f1cecaec6511eaa1f22f547d8d7bf67a271613b5cd9ab1dba54fb19aae4a2cac50d4f7cf810e5d90ff9841cce713fe39b5ce87504a9f08c0144b626e84433553777c6cfdee233577846f409df70051b2a39f5c56142e34ad40ae318469f9533c142f719faaf6cbe271717606cf7ba631f45725ed251668461ebfb4fbeca1c99bce984de1f91d5a8283bc7c0c9446c0ad74696fa13a11d9d474261b4beca3bbaec4cbf2df678cb39006e9a00252659c5d5e94213d033082c74c4dd97e66b7771e10b5f08a4002a94e3fda511251f62782da4a637ca29f758bbb6b3141103f3b0f25ac07a7a2787e39d30217e3fffdee90b04cab408981253358646ec8b6cf8db36f651dc75ec180d350818f784ed8a464c3b65fbbb5c4a988d356e7a377364c8be856e52566825c4a6c42608c2070258c7a4903e4ed0a32f18457c15dd004d5ce57a5405065398c7171d337f4d1c5b8f4e85bcff865b749295e502729797eaa9fce3f8a53de774986712bb5bbc6e0636888ff8ce298d4fc27cded808eac895edeac25464c979896f30be39f62e31b16f621f7e7a383a0e7dd3cddd1913d2ea9bd1acbd0b2c97af5bf692c7ba1dd175f3ab8408cdf910be903a742323389dca86559bde02b32989b8f501bb9d4446e08146a5e73a904de213e10d0d64528c9664d0b42b5d838dd892fa42fe1a95918ca90c7cc6d9082a7d74d0f0c753b2c848860ed811c408d82aa80f5961eae2097efa91652207371604e89e2170e2e0133fe654284703b15eab7d9803ede038fdebd3d74943aab503d0c81a2b565e7f794d691c81a840e32a44144352782c9952049045265466f53c143a5fbfbf0bde0f786bac3b348350a50593b48b2dda4a57ff8c1a5d1f557fe9042eec622b65405e38cb43d70cf0de0e665fbc01fba7792aac304ad238580db9058ab4e6e4213b6286e9e728ee5c5c6c9287c3c8d7bd8a19ee14d4c6721e4d10e18466d9aa0d5ab2053635a29e037c65cfe6a851d5901bf301eacbc7f9b05319aeeaa4f0517a6760df9d6aca8406cb66f50b4ea8cdd7a8be966eaa66ae3ffea02b1fd55bf6bde5d14c78f5cba9bd51d3637ee36af1ec790b8e1e7050ebe1f710059f6dedf14755597a6005f16ec60862aae7e543339601428b6c8afa5f122ca9b667334c18fee42baede2e97c3bdd23ce76df93caa965d5d63586de736b1d8f57d799b893f0498912e3a869603ca520e49494378b643f96955c4a61137efe09a3e93c92306654eaf1fbd1289af75bda4adaaf3126bed6d43b7ff70d3155ac0823d7ea43816d8a7c68792ab9ed83eaba6801da8e765313e97f2d56ea42775b7d1fe276cc63b6f5474c2eaf8cd6caf06c2a848962135677c60e88dc62e71c890cc274cc4815abf58", @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="19d041bce945bcc005ed2bff13ea41d9e3c8d82cc2e1a99259681b6771dbd6acfb21b19c16138e5ac4f7fdfe99a2ce0f649df2078e2a8a4491e3ba4e529f0b81c9faa1298a"], 0x44}, 0x1, 0x0, 0x0, 0xd888}, 0x48080) 3.1627751s ago: executing program 5 (id=3144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x80012043, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="d4", 0x1, 0x20000800, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x20000000000002e5, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) r6 = memfd_create(0x0, 0x2) fcntl$addseals(r6, 0x409, 0xe) ftruncate(r6, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2827bd7040f9dbdf250000232b0000"], 0x14}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x7ffffffffffffffe, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000200)='A', 0xffffff4a, 0x80000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0) 2.5801206s ago: executing program 4 (id=3145): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000000056ab", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 2.419098269s ago: executing program 0 (id=3146): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000640)=@ethtool_stats}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r2, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@void, @val={0xc, 0x99, {0xb, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) setxattr$incfs_size(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=0x1, 0x8, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000240)={&(0x7f0000000200)=[{0x7, 0x2, 0x0, {0x7, 0xfffff801, 0x2}}], 0x1, 0x20, 0xfff8, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r7, &(0x7f0000000cc0)="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", 0x5ad, 0x0, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_CHAIN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x27257bc0e49d71e7) 2.283916645s ago: executing program 4 (id=3147): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a4000000000090002007379"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000c9ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 2.239370946s ago: executing program 4 (id=3148): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) listen(r1, 0x0) creat(0x0, 0x122) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffb, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x9, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000680)={0x2c, &(0x7f0000000380)={0x0, 0xa, 0x29, {0x29, 0xe, "62dcd6291176b167ab2243e9ec5ed38c6e2b4fee4ea74328c31d71cdbded4126c7726c79b4dca2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x5, 0x6, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 2.213581466s ago: executing program 1 (id=3149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlinkprop={0x4c, 0x6c, 0x805, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x16090, 0x2a02}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x15, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg0\x00'}]}]}, 0x4c}}, 0x20040004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x20000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff00", 0x44}], 0x1) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) (async) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="05df25016f00000800010000000000000000", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r10, 0x410, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0xfffe}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r10, 0xa9525000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, r11, 0x25, 0x1d, @val=@target_btf_id=r12}, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {0x10, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x8010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008840) 2.091782053s ago: executing program 0 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}], 0x4}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8000d3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xef23fe83}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x9, 0x2030, 0x0) 2.091455529s ago: executing program 5 (id=3151): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100), &(0x7f0000000040), 0x0, r1}) 2.042178209s ago: executing program 0 (id=3152): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000100)={0x11, 0x4, 0x8}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x503, 0xfffffffc, 0x1, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1893}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x306f) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x600) fanotify_mark(r3, 0x2d, 0x1001, r0, 0x0) setpriority(0x85e9621c373d618c, 0x0, 0x6) fanotify_mark(r3, 0x20, 0x48001025, r0, 0x0) 1.958466724s ago: executing program 5 (id=3153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r7, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)={r8, 0x3}, &(0x7f0000000300)=0x8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) 1.880131317s ago: executing program 1 (id=3154): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x7f, 0x3, 0x300f, 0x0, 0x0, 0x3, 0x2, 0x7}}) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400e10"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.670344895s ago: executing program 0 (id=3155): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="18747636f657526f776c8a31d3cf9ca6035301270b3ca760a1b8621299", 0x1d}, {&(0x7f0000000700)="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", 0x126}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40808d4) readv(r4, &(0x7f0000003a00)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create1(0x80000) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) 374.999697ms ago: executing program 5 (id=3156): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0x80000001, @local, 0x3}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8080, 0x0, 0x0) write(r1, 0x0, 0x0) close(0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) 163.35128ms ago: executing program 0 (id=3157): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$addseals(r2, 0x409, 0x8) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x23) fcntl$notify(r6, 0x402, 0x8000001c) fcntl$notify(r6, 0x402, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x6, @mcast2}}, 0x0, 0x0, 0x6, 0x0, "7af10ea6e687e81b451f3a9447299b391c011aab3e822a7897544ed59628144fbe0858559f1b06fc586941f7f4876a1d990977cde4194e686b11c4e537573d49b289414a503ad40e91ec9fdfbfdd72b0"}, 0xd8) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xaba4}}}}}}, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000002c0)={0x5, 0x7f90, 0xfffffffffffffff8, 0x2, 0x8}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$PPPIOCGUNIT(r8, 0x80047456, &(0x7f0000000240)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x2, 0x0, 0xfffffffd, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) write$binfmt_script(r3, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI\x18\x9d\a\xae{\xd7e\r[\x04\xa2\xebi\xcd+\f\xbc\x92\xccfnG;\x94YX\x10W\xa4e\x95\x11\x06\x19\xc1\xdb\xae\x81\xf0d\x8ab\xf5\x89\xf3\xd0s\xf2\xc9l\x10\x80\x9fzf\xc9l\x1eq\a\xb8'}]}, 0xc1) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 1 (id=3158): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a4000000000090002007379"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) kernel console output (not intermixed with test programs): (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 641.218378][ T5908] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 641.243470][ T5908] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 641.263122][ T5908] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 641.307702][ T5908] usb 7-1: USB disconnect, device number 2 [ 641.351759][ T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 641.515193][ T9] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 641.545812][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 641.585091][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 641.627995][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.675023][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 641.707975][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.773841][T14614] Bluetooth: hci1: command tx timeout [ 641.917730][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2589'. [ 641.963767][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 641.980975][ T9] usbtmc 5-1:16.0: can't read capabilities [ 642.102822][T15486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2588'. [ 642.178484][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 642.192810][T15476] usbtmc 5-1:16.0: Unable to send data, error -71 [ 642.235884][ T5908] usb 5-1: USB disconnect, device number 29 [ 642.274910][T15490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 642.546200][T15502] loop5: detected capacity change from 0 to 7 [ 642.556579][T15502] Dev loop5: unable to read RDB block 7 [ 642.565232][T15502] loop5: unable to read partition table [ 642.576580][T15502] loop5: partition table beyond EOD, truncated [ 642.583737][T15502] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 642.648854][T15507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 642.937134][T15519] can: request_module (can-proto-0) failed. [ 643.031805][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2596'. [ 643.115881][ T31] audit: type=1326 audit(1775835991.414:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521f9c819 code=0x7ffc0000 [ 643.146184][ T31] audit: type=1326 audit(1775835991.444:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3521f9c819 code=0x7ffc0000 [ 643.346980][T15530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 643.377324][ T31] audit: type=1326 audit(1775835991.674:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521f9c819 code=0x7ffc0000 [ 643.429723][ T31] audit: type=1326 audit(1775835991.724:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15512 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521f9c819 code=0x7ffc0000 [ 643.865677][T14614] Bluetooth: hci1: command tx timeout [ 644.238801][T15545] input: syz0 as /devices/virtual/input/input69 [ 644.472412][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 644.510798][T15552] loop5: detected capacity change from 0 to 7 [ 644.543411][T15552] Dev loop5: unable to read RDB block 7 [ 644.575405][T15552] loop5: unable to read partition table [ 644.617451][T15552] loop5: partition table beyond EOD, truncated [ 644.663596][T15552] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 644.991687][T15556] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2609'. [ 645.494206][T15568] loop5: detected capacity change from 0 to 7 [ 645.525137][T15568] Dev loop5: unable to read RDB block 7 [ 645.549734][T15568] loop5: unable to read partition table [ 645.579530][T15568] loop5: partition table beyond EOD, truncated [ 645.626331][T15568] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 645.837720][T15571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.055217][T15573] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 646.304024][T15583] netlink: 'syz.4.2616': attribute type 10 has an invalid length. [ 646.480564][T15583] team0 (unregistering): Port device team_slave_0 removed [ 646.557670][T15583] team0 (unregistering): Port device team_slave_1 removed [ 646.656092][T15583] team0 (unregistering): Port device batadv1 removed [ 646.760129][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2618'. [ 646.808463][T15595] No such timeout policy "syz1" [ 647.316984][T15586] delete_channel: no stack [ 647.348226][T15606] FAULT_INJECTION: forcing a failure. [ 647.348226][T15606] name failslab, interval 1, probability 0, space 0, times 0 [ 647.444354][T15606] CPU: 1 UID: 0 PID: 15606 Comm: syz.6.2622 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.444375][T15606] Tainted: [L]=SOFTLOCKUP [ 647.444380][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.444387][T15606] Call Trace: [ 647.444393][T15606] [ 647.444399][T15606] dump_stack_lvl+0xe8/0x150 [ 647.444418][T15606] should_fail_ex+0x412/0x560 [ 647.444437][T15606] should_failslab+0xa8/0x100 [ 647.444453][T15606] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 647.444477][T15606] ? __alloc_skb+0x186/0x7d0 [ 647.444488][T15606] ? __alloc_skb+0x1d0/0x7d0 [ 647.444499][T15606] ? __local_bh_enable_ip+0xd0/0x130 [ 647.444515][T15606] __alloc_skb+0x1d0/0x7d0 [ 647.444529][T15606] netlink_sendmsg+0x5d4/0xb40 [ 647.444546][T15606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.444559][T15606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 647.444575][T15606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.444590][T15606] ____sys_sendmsg+0x972/0x9f0 [ 647.444608][T15606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.444626][T15606] ? import_iovec+0x73/0xa0 [ 647.444640][T15606] ___sys_sendmsg+0x2a5/0x360 [ 647.444656][T15606] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.444685][T15606] ? __fget_files+0x2a/0x420 [ 647.444695][T15606] ? __fget_files+0x3a0/0x420 [ 647.444709][T15606] __x64_sys_sendmsg+0x1bd/0x2a0 [ 647.444723][T15606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.444741][T15606] ? __pfx_ksys_write+0x10/0x10 [ 647.444765][T15606] do_syscall_64+0x14d/0xf80 [ 647.444780][T15606] ? trace_irq_disable+0x3b/0x150 [ 647.444793][T15606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.444803][T15606] ? clear_bhb_loop+0x40/0x90 [ 647.444816][T15606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.444828][T15606] RIP: 0033:0x7f759df9c819 [ 647.444840][T15606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.444850][T15606] RSP: 002b:00007f759ee6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.444866][T15606] RAX: ffffffffffffffda RBX: 00007f759e215fa0 RCX: 00007f759df9c819 [ 647.444874][T15606] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 647.444881][T15606] RBP: 00007f759ee6a090 R08: 0000000000000000 R09: 0000000000000000 [ 647.444887][T15606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.444894][T15606] R13: 00007f759e216038 R14: 00007f759e215fa0 R15: 00007f759e33fa48 [ 647.444909][T15606] [ 648.085886][T15608] loop5: detected capacity change from 0 to 7 [ 648.103946][T15610] Dev loop5: unable to read RDB block 7 [ 648.109820][T15610] loop5: unable to read partition table [ 648.182986][T15610] loop5: partition table beyond EOD, truncated [ 648.218928][T15608] Dev loop5: unable to read RDB block 7 [ 648.254074][T15608] loop5: unable to read partition table [ 648.276668][T15608] loop5: partition table beyond EOD, truncated [ 648.311212][T15608] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 648.532216][T15619] loop5: detected capacity change from 0 to 7 [ 648.550197][ T6852] Dev loop5: unable to read RDB block 7 [ 648.591466][ T6852] loop5: unable to read partition table [ 648.631036][ T6852] loop5: partition table beyond EOD, truncated [ 648.657928][T15619] Dev loop5: unable to read RDB block 7 [ 648.709108][T15619] loop5: unable to read partition table [ 648.755992][T15619] loop5: partition table beyond EOD, truncated [ 648.799408][T15619] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 649.480245][T15637] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 649.568024][T15643] batman_adv: batadv0: Interface deactivated: dummy0 [ 649.584736][T15643] dummy0: entered allmulticast mode [ 649.696052][T15648] loop5: detected capacity change from 0 to 7 [ 649.722571][T15648] Dev loop5: unable to read RDB block 7 [ 649.758478][T15648] loop5: unable to read partition table [ 649.796319][T15648] loop5: partition table beyond EOD, truncated [ 649.836139][T15648] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 650.464962][T15660] loop5: detected capacity change from 0 to 7 [ 650.482771][T15660] Dev loop5: unable to read RDB block 7 [ 650.494171][T15660] loop5: unable to read partition table [ 650.521001][T15660] loop5: partition table beyond EOD, truncated [ 650.541554][T15660] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 650.607487][ T5943] dvb-usb: did not find the firmware file 'dvb-usb-digivox-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 650.649939][ T5943] usb 1-1: USB disconnect, device number 2 [ 651.013554][ T5943] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 651.171383][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 651.183502][ T5943] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.198666][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 651.223881][ T5943] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 651.249926][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.281383][ T5943] usb 1-1: config 0 descriptor?? [ 651.381194][ T31] audit: type=1326 audit(1775835999.674:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.471005][ T31] audit: type=1326 audit(1775835999.674:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.517209][ T31] audit: type=1326 audit(1775835999.674:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.583039][ T31] audit: type=1326 audit(1775835999.674:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.663453][T15678] usb usb8: usbfs: process 15678 (syz.1.2645) did not claim interface 0 before use [ 651.674620][ T31] audit: type=1326 audit(1775835999.674:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.758617][ T31] audit: type=1326 audit(1775835999.674:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.834370][ T31] audit: type=1326 audit(1775835999.674:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.899063][ T31] audit: type=1326 audit(1775835999.674:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.939305][ T31] audit: type=1326 audit(1775835999.674:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 651.981415][ T31] audit: type=1326 audit(1775835999.674:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15675 comm="syz.1.2645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9d59c819 code=0x7ffc0000 [ 652.267345][T15685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.280012][T15685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.331090][ T5835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 652.495407][ T5835] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 652.506958][ T5835] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.518857][ T5835] usb 7-1: config 0 has no interface number 0 [ 652.526329][ T5835] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 652.536993][ T5835] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.558071][ T5835] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 652.569929][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.578939][ T5835] usb 7-1: Product: syz [ 652.583957][ T5835] usb 7-1: Manufacturer: syz [ 652.589624][ T5835] usb 7-1: SerialNumber: syz [ 652.604395][ T5835] usb 7-1: config 0 descriptor?? [ 652.634054][T15677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.646379][T15677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.817706][T15682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.829296][T15682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.926392][T15695] openvswitch: netlink: Key type 200 is out of range max 32 [ 652.948012][ T5908] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 652.965042][ T5908] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 652.983488][ T5835] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 653.022047][ T5908] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 653.047958][ T5835] usb 7-1: USB disconnect, device number 3 [ 653.217519][T15700] fido_id[15700]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 653.249146][T15705] loop5: detected capacity change from 0 to 7 [ 653.268189][T15705] Dev loop5: unable to read RDB block 7 [ 653.288096][T15705] loop5: unable to read partition table [ 653.293587][ T5943] usbhid 1-1:0.0: can't add hid device: -71 [ 653.307157][T15705] loop5: partition table beyond EOD, truncated [ 653.312745][ T5943] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 653.354934][T15705] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 653.368194][ T5943] usb 1-1: USB disconnect, device number 3 [ 654.786212][ T5835] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 655.024126][ T5835] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 655.072480][ T5835] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 655.118744][ T5835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 655.156832][ T5835] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 655.194428][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 655.232937][ T5835] usb 7-1: Product: syz [ 655.253220][ T5835] usb 7-1: Manufacturer: syz [ 655.271822][ T5835] usb 7-1: SerialNumber: syz [ 655.289351][ T5835] usb 7-1: config 0 descriptor?? [ 655.310254][ T5835] hub 7-1:0.0: bad descriptor, ignoring hub [ 655.329635][ T5835] hub 7-1:0.0: probe with driver hub failed with error -5 [ 655.367758][ T5835] usb 7-1: selecting invalid altsetting 0 [ 655.401790][ T5943] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 655.598884][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 655.619208][ T5943] usb 1-1: config 0 has no interfaces? [ 655.645752][ T5943] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 655.682239][ T5943] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 655.708200][ T5943] usb 1-1: Manufacturer: syz [ 655.724176][ T5943] usb 1-1: config 0 descriptor?? [ 655.795450][T15733] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 656.115883][T15754] loop5: detected capacity change from 0 to 7 [ 656.153674][ T5828] Dev loop5: unable to read RDB block 7 [ 656.167277][ T5828] loop5: unable to read partition table [ 656.182061][ T5828] loop5: partition table beyond EOD, truncated [ 656.198985][T15754] Dev loop5: unable to read RDB block 7 [ 656.225403][T15754] loop5: unable to read partition table [ 656.247148][T15754] loop5: partition table beyond EOD, truncated [ 656.274316][T15754] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 656.461769][T15758] IPVS: length: 4096 != 24 [ 656.653732][T15764] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2671'. [ 657.952959][ T5833] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 658.133773][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.149420][ T5833] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 658.180708][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.282440][ T5833] usb 5-1: config 0 descriptor?? [ 658.665789][ T5943] usb 1-1: USB disconnect, device number 4 [ 658.820472][ T5833] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 658.856748][ T5833] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002B/input/input71 [ 658.950113][T15789] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 659.254293][T15793] loop5: detected capacity change from 0 to 7 [ 659.262621][ T5833] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 659.285588][T15793] Dev loop5: unable to read RDB block 7 [ 659.293014][T15793] loop5: unable to read partition table [ 659.300435][T15793] loop5: partition table beyond EOD, truncated [ 659.309150][T15793] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 659.357019][ T5833] usb 5-1: USB disconnect, device number 30 [ 659.477228][T15794] fido_id[15794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 659.760927][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 659.760950][ T31] audit: type=1326 audit(1775836008.054:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15803 comm="syz.5.2682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3521f9c819 code=0x0 [ 660.141009][T15812] loop5: detected capacity change from 0 to 7 [ 660.150060][ T5828] Dev loop5: unable to read RDB block 7 [ 660.163000][ T5828] loop5: unable to read partition table [ 660.174171][ T5828] loop5: partition table beyond EOD, truncated [ 660.203262][T15812] Dev loop5: unable to read RDB block 7 [ 660.211190][T15812] loop5: unable to read partition table [ 660.263462][T15812] loop5: partition table beyond EOD, truncated [ 660.306294][T15812] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 660.441028][T15815] 8021q: VLANs not supported on vcan0 [ 660.451780][T15816] 8021q: VLANs not supported on vcan0 [ 660.909045][T15829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.936588][T15829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.961489][T15733] usb 7-1: device descriptor read/64, error -110 [ 661.221420][T15733] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 661.361361][T15733] usb 7-1: device descriptor read/64, error -32 [ 661.621431][T15733] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 661.691822][T15733] usb 7-1: device descriptor read/8, error -32 [ 661.870377][T15837] loop5: detected capacity change from 0 to 7 [ 661.881551][T15733] raw-gadget.1 gadget.6: failed to queue resume event [ 661.890729][T15837] loop5: [ 661.900744][T15837] loop5: partition table partially beyond EOD, truncated [ 661.951432][T15733] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 662.018827][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 662.027142][T15733] usb 7-1: device descriptor read/8, error -32 [ 662.151537][T15733] raw-gadget.1 gadget.6: failed to queue suspend event [ 662.207654][ T5908] usb 7-1: USB disconnect, device number 4 [ 662.267991][T15850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.315684][T15850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.329164][T15733] raw-gadget.1 gadget.6: failed to queue disconnect event [ 662.429667][T15854] loop5: detected capacity change from 0 to 7 [ 662.444441][ T5828] Dev loop5: unable to read RDB block 7 [ 662.450703][ T5828] loop5: unable to read partition table [ 662.459971][ T5828] loop5: partition table beyond EOD, truncated [ 662.477372][T15854] Dev loop5: unable to read RDB block 7 [ 662.491917][T15854] loop5: unable to read partition table [ 662.528424][T15854] loop5: partition table beyond EOD, truncated [ 662.576768][T15854] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 663.181556][ T5908] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 663.256783][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.272369][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.364597][ T5908] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.375541][ T5908] usb 7-1: config 0 has no interface number 0 [ 663.384483][ T5908] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.410291][ T5908] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.450044][ T5908] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.485865][ T5908] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 663.508645][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.535406][ T5908] usb 7-1: config 0 descriptor?? [ 663.971812][ T5908] usbhid 7-1:0.1: can't add hid device: -71 [ 664.003535][ T5908] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 664.038726][ T5908] usb 7-1: USB disconnect, device number 5 [ 664.139657][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2709'. [ 664.172428][T15899] loop5: detected capacity change from 0 to 7 [ 664.193957][T15899] Dev loop5: unable to read RDB block 7 [ 664.200587][T15899] loop5: unable to read partition table [ 664.209417][T15899] loop5: partition table beyond EOD, truncated [ 664.231511][T15899] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 664.601012][T15920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2713'. [ 664.690729][T15923] misc userio: No port type given on /dev/userio [ 664.749928][T15928] loop5: detected capacity change from 0 to 7 [ 664.762874][ T5828] Dev loop5: unable to read RDB block 7 [ 664.772474][ T5828] loop5: unable to read partition table [ 664.780475][ T5828] loop5: partition table beyond EOD, truncated [ 664.793439][T15928] Dev loop5: unable to read RDB block 7 [ 664.810527][T15928] loop5: unable to read partition table [ 664.832854][T15928] loop5: partition table beyond EOD, truncated [ 664.841015][T15928] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 664.893906][T15901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2711'. [ 665.151393][ T5908] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 665.376240][ T5908] usb 5-1: device descriptor read/64, error -71 [ 665.523205][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2722'. [ 665.526329][T15942] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 665.554267][T15942] bond6 (unregistering): Released all slaves [ 665.566256][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2722'. [ 665.641371][ T5908] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 665.661374][T15946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2722'. [ 665.818833][T15950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2723'. [ 665.851457][ T5908] usb 5-1: device descriptor read/64, error -71 [ 665.955447][T15952] loop5: detected capacity change from 0 to 7 [ 665.987853][ T5908] usb usb5-port1: attempt power cycle [ 665.993708][T15952] Dev loop5: unable to read RDB block 7 [ 666.029343][T15952] loop5: unable to read partition table [ 666.048700][T15952] loop5: partition table beyond EOD, truncated [ 666.070948][T15954] binder: 15953:15954 ioctl c0306201 200000000040 returned -14 [ 666.083780][T15952] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 666.267107][T15960] netlink: 'syz.5.2726': attribute type 9 has an invalid length. [ 666.294029][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2726'. [ 666.342806][T15960] macvlan2: entered promiscuous mode [ 666.356428][T15960] erspan0: entered promiscuous mode [ 666.373040][T15960] macvlan2: entered allmulticast mode [ 666.381472][ T5908] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 666.397282][T15960] erspan0: entered allmulticast mode [ 666.405419][T15967] loop5: detected capacity change from 0 to 7 [ 666.415327][ T5828] Dev loop5: unable to read RDB block 7 [ 666.431849][ T5828] loop5: unable to read partition table [ 666.438228][ T5908] usb 5-1: device descriptor read/8, error -71 [ 666.439500][ T5828] loop5: partition table beyond EOD, truncated [ 666.465678][T15967] Dev loop5: unable to read RDB block 7 [ 666.473246][T15967] loop5: unable to read partition table [ 666.484104][T15967] loop5: partition table beyond EOD, truncated [ 666.500139][T15967] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 666.541674][ T5890] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 666.705307][ T5908] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 666.731674][ T5890] usb 7-1: Using ep0 maxpacket: 32 [ 666.739308][ T5890] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.762845][ T5908] usb 5-1: device descriptor read/8, error -71 [ 666.788038][ T5890] usb 7-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 666.831136][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.843512][ T5890] usb 7-1: Product: syz [ 666.848500][ T5890] usb 7-1: Manufacturer: syz [ 666.854758][ T5890] usb 7-1: SerialNumber: syz [ 666.882672][ T5908] usb usb5-port1: unable to enumerate USB device [ 667.070478][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.087718][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.110458][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.138552][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.160623][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.183770][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.207883][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.246623][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.270670][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.298685][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.376065][ T5890] empeg 7-1:1.0: empeg converter detected [ 667.410101][ T5890] empeg 7-1:1.0: probe with driver empeg failed with error -71 [ 667.428615][ T5890] usb 7-1: USB disconnect, device number 6 [ 667.502263][T15980] loop5: detected capacity change from 0 to 7 [ 667.522185][T15980] Dev loop5: unable to read RDB block 7 [ 667.528021][T15980] loop5: unable to read partition table [ 667.534940][T15980] loop5: partition table beyond EOD, truncated [ 667.542972][T15980] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 667.759914][T15991] loop5: detected capacity change from 0 to 7 [ 667.777431][T15994] syzkaller1: entered promiscuous mode [ 667.778007][T15991] Dev loop5: unable to read RDB block 7 [ 667.794917][T15991] loop5: unable to read partition table [ 667.797296][T15994] syzkaller1: entered allmulticast mode [ 667.802427][T15991] loop5: partition table beyond EOD, truncated [ 667.860099][T15991] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 668.039203][T16007] loop5: detected capacity change from 0 to 7 [ 668.057194][T16007] Dev loop5: unable to read RDB block 7 [ 668.071552][T16007] loop5: unable to read partition table [ 668.084561][T16007] loop5: partition table beyond EOD, truncated [ 668.099098][T16007] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 668.644632][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 668.931672][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 669.142766][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.176976][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 669.241228][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.271153][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 669.307773][ T5890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 669.325432][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.343138][ T5890] usb 1-1: config 0 descriptor?? [ 669.390573][T16033] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 669.422769][T16039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.438648][T16039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.594298][T16041] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2750'. [ 669.706271][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2750'. [ 669.840206][ T5890] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 669.876769][T16042] syzkaller0: entered promiscuous mode [ 669.891051][ T5890] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 669.910343][T16042] syzkaller0: entered allmulticast mode [ 669.916343][ T5890] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 669.940985][ T5890] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 669.965581][ T5890] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 670.023918][ T5890] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 670.126056][T16046] loop5: detected capacity change from 0 to 7 [ 670.151474][T16046] Dev loop5: unable to read RDB block 7 [ 670.173673][T16046] loop5: unable to read partition table [ 670.198042][T16046] loop5: partition table beyond EOD, truncated [ 670.228720][T16046] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 670.306850][T16048] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2747'. [ 670.359417][T16048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.468295][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.508657][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.510494][T16050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.572657][T16050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.291415][ T5890] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 671.361079][T16065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.378338][T16065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.441420][ T5890] usb 1-1: device descriptor read/64, error -32 [ 672.362783][ T5908] usb 1-1: USB disconnect, device number 5 [ 674.740957][T16080] syz_tun: left promiscuous mode [ 674.796847][T16080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.837332][T16080] bridge0: port 3(vlan2) entered blocking state [ 674.845769][T16080] bridge0: port 3(vlan2) entered forwarding state [ 674.904495][T16080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 674.988167][T16099] netlink: 'syz.4.2763': attribute type 6 has an invalid length. [ 675.004917][T16099] netlink: 'syz.4.2763': attribute type 7 has an invalid length. [ 675.028070][T16099] netlink: 'syz.4.2763': attribute type 8 has an invalid length. [ 675.106924][T16101] xt_hashlimit: size too large, truncated to 1048576 [ 675.161101][T16103] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 675.358867][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2764'. [ 676.821883][ T5943] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 676.851986][T16135] loop5: detected capacity change from 0 to 7 [ 676.860704][T16135] Dev loop5: unable to read RDB block 7 [ 676.870688][T16135] loop5: unable to read partition table [ 676.878164][T16135] loop5: partition table beyond EOD, truncated [ 676.886711][T16135] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 676.993006][ T5943] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 677.030805][ T5943] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 677.057112][ T5943] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 677.072908][ T5833] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 677.089848][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.109529][ T5943] usb 7-1: Product: syz [ 677.121607][ T5943] usb 7-1: Manufacturer: syz [ 677.130546][ T5943] usb 7-1: SerialNumber: syz [ 677.167707][T16147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.191945][T16147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.251574][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 677.264408][ T5833] usb 1-1: config 0 has an invalid interface number: 202 but max is 1 [ 677.273984][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.298717][ T5833] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 677.318833][ T5833] usb 1-1: config 0 has no interface number 0 [ 677.337907][ T5833] usb 1-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 677.378782][ T5833] usb 1-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 677.385126][T16120] dummy0: entered promiscuous mode [ 677.443228][T16120] vlan2: entered promiscuous mode [ 677.460884][ T5833] usb 1-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 677.519119][ T5833] usb 1-1: config 0 interface 202 has no altsetting 0 [ 677.544814][ T5833] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 677.570095][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.610389][ T5833] usb 1-1: Product: syz [ 677.631776][ T5833] usb 1-1: Manufacturer: syz [ 677.656967][ T5833] usb 1-1: SerialNumber: syz [ 677.672655][ T5943] usb 7-1: USB disconnect, device number 7 [ 677.718455][ T5833] usb 1-1: config 0 descriptor?? [ 677.773269][ T5833] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 677.873591][T16160] netlink: 'syz.5.2782': attribute type 303 has an invalid length. [ 678.152713][T16169] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2784'. [ 678.261624][T16173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2784'. [ 678.262885][T16169] Can't find ip_set type [ 678.324870][T16173] Can't find ip_set type [ 678.699677][T16182] loop5: detected capacity change from 0 to 7 [ 678.736129][T16182] Dev loop5: unable to read RDB block 7 [ 678.753434][T16184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2788'. [ 678.764121][T16182] loop5: unable to read partition table [ 678.783891][T16182] loop5: partition table beyond EOD, truncated [ 678.810948][T16182] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 678.834766][T12955] usb 1-1: Failed to submit usb control message: -110 [ 678.854286][T12955] usb 1-1: unable to send the bmi data to the device: -110 [ 678.882969][T12955] usb 1-1: unable to get target info from device [ 678.904845][T12955] usb 1-1: could not get target info (-110) [ 678.920454][T12955] usb 1-1: could not probe fw (-110) [ 679.064834][T16187] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 679.102951][T16191] support for cryptoloop has been removed. Use dm-crypt instead. [ 679.131221][T16192] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2790'. [ 679.305525][ T5890] usb 1-1: USB disconnect, device number 6 [ 679.318849][T16198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.334580][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.346239][T16198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.358086][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.407870][ T31] audit: type=1326 audit(1775836027.694:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521f9c819 code=0x7fc00000 [ 679.508013][T16201] loop5: detected capacity change from 0 to 7 [ 679.516774][T16201] Dev loop5: unable to read RDB block 7 [ 679.525832][T16201] loop5: unable to read partition table [ 679.533029][T16201] loop5: partition table beyond EOD, truncated [ 679.541549][T16201] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 679.861392][ T5943] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 680.021585][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 680.029797][ T5943] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 680.039429][ T5943] usb 7-1: config 0 has no interface number 0 [ 680.047068][ T5943] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 680.066748][ T5943] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 680.077092][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.086336][ T5943] usb 7-1: Product: syz [ 680.093468][ T5943] usb 7-1: Manufacturer: syz [ 680.105669][ T5943] usb 7-1: SerialNumber: syz [ 680.117989][ T5943] usb 7-1: config 0 descriptor?? [ 680.133582][ T5943] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 680.144949][ T5943] em28xx 7-1:0.132: Video interface 132 found: [ 680.192711][T16217] loop5: detected capacity change from 0 to 7 [ 680.210290][T16217] Dev loop5: unable to read RDB block 7 [ 680.226227][T16217] loop5: unable to read partition table [ 680.250382][T16217] loop5: partition table beyond EOD, truncated [ 680.274492][T16217] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 680.499128][T16221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 680.566222][ T5943] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 680.701013][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.725090][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.781740][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 680.941437][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 680.955418][ T10] usb 5-1: config 0 has no interfaces? [ 680.971823][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 680.985298][ T5943] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 681.002535][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.011914][ T5943] em28xx 7-1:0.132: board has no eeprom [ 681.022574][ T10] usb 5-1: config 0 descriptor?? [ 681.101397][ T5943] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 681.110046][ T5943] em28xx 7-1:0.132: analog set to bulk mode. [ 681.117743][ T5833] em28xx 7-1:0.132: Registering V4L2 extension [ 681.229054][ T5833] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 681.229567][ T5890] usb 7-1: USB disconnect, device number 8 [ 681.241486][ T5833] em28xx 7-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 681.274055][T16219] kvm: kvm [16218]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 681.285462][ T5890] em28xx 7-1:0.132: Disconnecting em28xx [ 681.297338][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 681.306407][T16219] kvm: kvm [16218]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 681.376908][ T5908] usb 5-1: USB disconnect, device number 35 [ 681.445074][T16237] loop5: detected capacity change from 0 to 7 [ 681.466040][T16237] Dev loop5: unable to read RDB block 7 [ 681.484334][T16237] loop5: unable to read partition table [ 681.499870][ T5833] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 681.505453][T16237] loop5: partition table beyond EOD, truncated [ 681.510291][ T5833] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 681.521690][T16237] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 681.524835][ T5833] em28xx 7-1:0.132: No AC97 audio processor [ 681.572503][ T5833] usb 7-1: Decoder not found [ 681.587631][ T5833] em28xx 7-1:0.132: failed to create media graph [ 681.600961][ T5833] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 681.623208][ T5833] em28xx 7-1:0.132: Remote control support is not available for this card. [ 681.637196][ T5890] em28xx 7-1:0.132: Closing input extension [ 681.665204][ T5890] em28xx 7-1:0.132: Freeing device [ 681.983477][T16253] syzkaller1: entered promiscuous mode [ 681.989988][T16253] syzkaller1: entered allmulticast mode [ 682.106043][T16256] trusted_key: encrypted_key: master key parameter '' is invalid [ 682.180017][T16258] loop5: detected capacity change from 0 to 7 [ 682.187419][T16258] loop5: [ 682.190679][T16258] loop5: partition table partially beyond EOD, truncated [ 682.264975][ T31] audit: type=1326 audit(1775836030.564:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16194 comm="syz.5.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3521f9c819 code=0x7fc00000 [ 682.338601][T16260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 682.366378][ T5890] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 682.406785][T16263] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2815'. [ 682.526731][ T5890] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 682.545812][ T5890] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 682.591653][ T5890] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 682.623253][ T5890] usb 5-1: config 220 has no interface number 2 [ 682.632085][ T5908] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 682.662286][ T5890] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 682.702647][ T5890] usb 5-1: config 220 interface 0 has no altsetting 0 [ 682.721961][ T5890] usb 5-1: config 220 interface 76 has no altsetting 0 [ 682.742420][ T5890] usb 5-1: config 220 interface 1 has no altsetting 0 [ 682.772405][ T5890] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 682.813215][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.840616][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 682.874297][ T5890] usb 5-1: Product: syz [ 682.903087][ T5908] usb 7-1: not running at top speed; connect to a high speed hub [ 682.922256][ T5890] usb 5-1: Manufacturer: syz [ 682.989869][ T5890] usb 5-1: SerialNumber: syz [ 683.005622][ T5908] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.080783][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.105814][ T5908] usb 7-1: Product: syz [ 683.112489][ T5908] usb 7-1: Manufacturer: syz [ 683.120204][ T5908] usb 7-1: SerialNumber: syz [ 683.290016][ T5890] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 683.307499][ T5890] uvcvideo 5-1:220.0: No valid video chain found. [ 683.343797][ T5890] usb 5-1: selecting invalid altsetting 0 [ 683.398735][ T5890] usb 5-1: selecting invalid altsetting 0 [ 683.448623][ T5890] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 683.462417][ T5908] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 683.488574][ T5908] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 683.517641][ T5890] usb 5-1: USB disconnect, device number 36 [ 683.556140][ T5908] usb 7-1: 6:0: failed to get current value for ch 1 (-22) [ 683.620910][ T5908] usb 7-1: 6:0: failed to get current value for ch 0 (-22) [ 683.702812][T16286] netlink: 'syz.1.2819': attribute type 4 has an invalid length. [ 683.797976][ T5908] usb 7-1: USB disconnect, device number 9 [ 683.815975][T16286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.871637][T16286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.963415][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.075162][T16289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2820'. [ 684.286366][T16298] loop5: detected capacity change from 0 to 7 [ 684.303873][T16298] loop5: [ 684.314149][T16298] loop5: partition table partially beyond EOD, truncated [ 684.463374][ T5908] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 684.509007][T16301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.543095][T16301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.589087][T16301] Cannot find add_set index 0 as target [ 684.604154][T16306] netlink: 'syz.4.2825': attribute type 10 has an invalid length. [ 684.659239][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2826'. [ 684.681389][ T5943] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 684.693393][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.751535][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.778346][T16306] dummy0: left allmulticast mode [ 684.788309][T16306] batman_adv: batadv0: Removing interface: dummy0 [ 684.796456][ T5908] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 684.828015][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.844760][ T5908] usb 7-1: config 0 descriptor?? [ 685.273842][ T5908] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 685.294754][ T5908] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 685.320267][ T5908] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 685.347774][ T5908] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 685.356868][ T5908] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 685.376097][ T5908] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 685.414423][ T5908] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 685.489375][T16319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.507978][ T5908] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 685.614305][ T5908] cp2112 0003:10C4:EA90.002D: Part Number: 0x82 Device Version: 0xFE [ 685.928408][T16328] binder: 16327:16328 ioctl c018937d 200000000300 returned -22 [ 686.004861][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.030501][ T5908] cp2112 0003:10C4:EA90.002D: error setting SMBus config [ 686.059501][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.086296][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.096186][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.130575][ T5908] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -71 [ 686.179340][T16334] 8021q: adding VLAN 0 to HW filter on device bond4 [ 686.191062][ T5908] usb 7-1: USB disconnect, device number 10 [ 686.227777][T16334] bond0: (slave bond4): Enslaving as an active interface with an up link [ 686.384849][T16339] syzkaller0: entered promiscuous mode [ 686.398676][T16339] syzkaller0: entered allmulticast mode [ 686.414632][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.421539][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.665311][T16342] loop5: detected capacity change from 0 to 7 [ 686.673631][T16342] loop5: [ 686.677151][T16342] loop5: partition table partially beyond EOD, truncated [ 686.742895][T16344] program syz.6.2836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.141839][T16360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.152022][T16360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.481595][ T5890] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 687.509901][T16358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.528464][T16358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.641494][ T5890] usb 7-1: device descriptor read/64, error -71 [ 687.911352][ T5890] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 688.057200][T16383] sg_write: data in/out 16777180/566 bytes for SCSI command 0x82-- guessing data in; [ 688.057200][T16383] program syz.5.2845 not setting count and/or reply_len properly [ 688.077129][ T5890] usb 7-1: device descriptor read/64, error -71 [ 688.212843][ T5890] usb usb7-port1: attempt power cycle [ 688.280767][T16385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.315434][T16385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.571510][ T5890] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 688.625626][ T5890] usb 7-1: device descriptor read/8, error -71 [ 688.667432][ T31] audit: type=1326 audit(1775836036.964:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 688.741640][ T31] audit: type=1326 audit(1775836036.964:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 688.792759][ T31] audit: type=1326 audit(1775836036.994:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 688.864554][T16394] loop5: detected capacity change from 0 to 7 [ 688.882696][ T31] audit: type=1326 audit(1775836036.994:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 688.933563][T16394] loop5: [ 688.941795][ T5890] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 688.955908][T16394] loop5: partition table partially beyond EOD, truncated [ 688.974343][ T31] audit: type=1326 audit(1775836036.994:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 689.050854][ T5890] usb 7-1: device descriptor read/8, error -71 [ 689.136704][ T31] audit: type=1326 audit(1775836036.994:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 689.171913][ T5890] usb usb7-port1: unable to enumerate USB device [ 689.193768][ T31] audit: type=1326 audit(1775836036.994:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 689.261004][ T31] audit: type=1326 audit(1775836036.994:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 689.287210][ T31] audit: type=1326 audit(1775836036.994:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 689.313976][ T31] audit: type=1326 audit(1775836036.994:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa041f9c819 code=0x7ffc0000 [ 689.572464][T16397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.615828][T16397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.311382][ T5835] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 690.492059][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 690.505330][ T5835] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 690.516667][ T5835] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 690.535144][ T5835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 690.555513][ T5835] usb 5-1: config 1 has no interface number 0 [ 690.574990][ T5835] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 690.604374][ T5835] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 690.641097][ T5835] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 690.664905][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.705099][ T5835] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 690.731546][ T5890] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 690.899519][ T5835] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 690.931354][ T5890] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.951510][ T5890] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.976095][ T5890] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 690.987400][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 690.998163][ T5890] usb 7-1: SerialNumber: syz [ 691.230420][ T5890] usb 7-1: invalid UAC_HEADER (v1) [ 691.409665][ T5890] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 691.447423][ T5890] usb 7-1: USB disconnect, device number 15 [ 691.490736][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 691.534501][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.551699][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.565040][ T5833] usb 5-1: USB disconnect, device number 37 [ 691.580749][ T5833] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 691.934764][T16432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.948645][T16432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.129342][T16442] netlink: 'syz.4.2865': attribute type 64 has an invalid length. [ 692.139033][ T5890] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 692.296162][ T5890] usb 1-1: device descriptor read/64, error -71 [ 692.349873][T16450] binder: BINDER_SET_CONTEXT_MGR already set [ 692.363639][T16450] binder: 16449:16450 ioctl 4018620d 200000000040 returned -16 [ 692.410878][T16456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.432641][T16456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.561971][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 692.597166][T16461] loop5: detected capacity change from 0 to 7 [ 692.607623][ T6852] Dev loop5: unable to read RDB block 7 [ 692.615671][ T6852] loop5: unable to read partition table [ 692.630545][ T6852] loop5: partition table beyond EOD, truncated [ 692.649875][T16461] Dev loop5: unable to read RDB block 7 [ 692.657441][T16461] loop5: unable to read partition table [ 692.665741][T16461] loop5: partition table beyond EOD, truncated [ 692.677587][T16461] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 692.711372][ T5890] usb 1-1: device descriptor read/64, error -71 [ 692.862961][ T5890] usb usb1-port1: attempt power cycle [ 693.231385][ T5890] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 693.253324][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.264631][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.326329][ T5890] usb 1-1: device descriptor read/8, error -71 [ 693.591370][ T5890] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 693.634530][ T5890] usb 1-1: device descriptor read/8, error -71 [ 693.783865][ T5890] usb usb1-port1: unable to enumerate USB device [ 693.974083][T16491] kvm: pic: non byte read [ 693.979352][T16491] kvm: pic: non byte read [ 693.985538][T16491] kvm: pic: non byte read [ 694.082156][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.097243][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.837530][T16504] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2883'. [ 694.979447][T16511] loop5: detected capacity change from 0 to 7 [ 694.997459][T16511] Dev loop5: unable to read RDB block 7 [ 695.006988][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 695.016900][T16511] loop5: unable to read partition table [ 695.027154][T16511] loop5: partition table beyond EOD, truncated [ 695.040744][T16511] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 695.164098][T16515] netlink: 'syz.6.2887': attribute type 1 has an invalid length. [ 695.173936][T16516] netlink: 'syz.6.2887': attribute type 1 has an invalid length. [ 695.241733][T16516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 695.801815][T16533] : renamed from lo [ 696.874843][T16556] loop5: detected capacity change from 0 to 7 [ 696.887575][T16556] Dev loop5: unable to read RDB block 7 [ 696.896944][T16556] loop5: unable to read partition table [ 696.908480][T16556] loop5: partition table beyond EOD, truncated [ 696.916824][T16556] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 697.233031][T16572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2901'. [ 697.274653][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2901'. [ 697.717818][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2905'. [ 697.750792][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2905'. [ 698.311077][T16591] loop5: detected capacity change from 0 to 7 [ 698.342787][T16591] Dev loop5: unable to read RDB block 7 [ 698.348597][T16591] loop5: unable to read partition table [ 698.371138][T16591] loop5: partition table beyond EOD, truncated [ 698.378996][T16591] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 698.469915][T16594] netlink: 'syz.5.2911': attribute type 9 has an invalid length. [ 698.483517][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2911'. [ 698.484188][T16597] loop5: detected capacity change from 0 to 7 [ 698.525365][ T5828] loop5: [ 698.528954][ T5828] loop5: partition table partially beyond EOD, truncated [ 698.555093][T16597] loop5: [ 698.561399][T16597] loop5: partition table partially beyond EOD, truncated [ 699.223639][T16618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2916'. [ 699.314324][T16608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.345098][T16618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.532598][T16629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.548661][T16623] tipc: Started in network mode [ 699.549063][T16629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.638269][T16623] tipc: Node identity ac14140f, cluster identity 4711 [ 699.673972][T16623] tipc: New replicast peer: 255.255.255.255 [ 699.694299][T16623] tipc: Enabled bearer , priority 10 [ 699.780210][T16629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.790858][T16629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.714298][ T5835] tipc: Node number set to 2886997007 [ 701.158638][T16648] netlink: 'syz.5.2923': attribute type 1 has an invalid length. [ 701.322316][T16653] loop5: detected capacity change from 0 to 7 [ 701.348805][T16648] bond2: entered promiscuous mode [ 701.377455][T16653] Dev loop5: unable to read RDB block 7 [ 701.401934][T16648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 701.427863][T16653] loop5: unable to read partition table [ 701.476482][T16653] loop5: partition table beyond EOD, truncated [ 701.520544][T16653] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 701.847626][T16657] loop5: detected capacity change from 0 to 7 [ 701.901526][T16657] loop5: [ 701.912360][T16657] loop5: partition table partially beyond EOD, truncated [ 702.203276][T16659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.013420][T16654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 703.032604][T16654] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 703.068354][T16654] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 703.122363][T16654] bond2: (slave gre1): making interface the new active one [ 703.130458][T16654] gre1: entered promiscuous mode [ 703.148896][T16654] bond2: (slave gre1): Enslaving as an active interface with an up link [ 703.769802][T16677] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 704.022866][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.045679][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.050983][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.071565][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.082517][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.877833][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 704.877852][ T31] audit: type=1326 audit(1775836053.164:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 704.968274][ T31] audit: type=1326 audit(1775836053.174:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.088110][ T31] audit: type=1326 audit(1775836053.264:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.156287][ T31] audit: type=1326 audit(1775836053.264:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.211562][ T31] audit: type=1326 audit(1775836053.264:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.281339][ T31] audit: type=1326 audit(1775836053.264:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.316406][ T31] audit: type=1326 audit(1775836053.264:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.343466][ T31] audit: type=1326 audit(1775836053.264:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.377225][ T31] audit: type=1326 audit(1775836053.264:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.418206][ T31] audit: type=1326 audit(1775836053.264:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.4.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248799c819 code=0x7ffc0000 [ 705.593723][T16680] chnl_net:caif_netlink_parms(): no params data found [ 705.674373][T16680] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.684401][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.692587][T16680] bridge_slave_0: entered allmulticast mode [ 705.704056][T16680] bridge_slave_0: entered promiscuous mode [ 705.724540][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.732753][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.741216][T16680] bridge_slave_1: entered allmulticast mode [ 705.749681][T16680] bridge_slave_1: entered promiscuous mode [ 705.871115][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.919900][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.080869][T16703] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 706.125326][T16709] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2938'. [ 706.171468][ T5826] Bluetooth: hci5: command tx timeout [ 706.356916][T16680] team0: Port device team_slave_0 added [ 706.386001][T16680] team0: Port device team_slave_1 added [ 706.417756][ T9] usb 2-1: USB disconnect, device number 110 [ 706.469464][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.493096][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.581421][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.614037][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.674937][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.734797][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.828242][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.118066][T16733] netlink: 'syz.0.2943': attribute type 4 has an invalid length. [ 707.169644][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.208553][T16744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.224022][T16744] netlink: 'syz.5.2945': attribute type 10 has an invalid length. [ 707.240711][T16745] netlink: 'syz.0.2943': attribute type 4 has an invalid length. [ 707.258628][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.442950][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.460629][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.499534][T16750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 707.526093][T16754] binder: 16751:16754 ioctl c0306201 200000000180 returned -14 [ 707.542864][T16755] binder_alloc: 16751: binder_alloc_buf, no vma [ 707.594761][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.941379][ T5943] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 708.081680][T16763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 708.105998][T16744] bond0: (slave wlan1): Opening slave failed [ 708.131878][ T5943] usb 1-1: Invalid ep0 maxpacket: 32 [ 708.175542][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.211585][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.261416][ T5943] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 708.261543][ T5826] Bluetooth: hci5: command tx timeout [ 708.441765][ T5943] usb 1-1: Invalid ep0 maxpacket: 32 [ 708.454484][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.471921][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.495476][ T5943] usb usb1-port1: attempt power cycle [ 708.533369][T16680] hsr_slave_0: entered promiscuous mode [ 708.550655][T16680] hsr_slave_1: entered promiscuous mode [ 708.564725][T16770] input: syz1 as /devices/virtual/input/input73 [ 708.574106][T16680] debugfs: 'hsr0' already exists in 'hsr' [ 708.580792][T16680] Cannot create hsr debugfs directory [ 708.614939][ T65] bridge0: port 3(netdevsim0) entered disabled state [ 708.651340][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 708.687004][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 708.723624][ T65] bridge0: port 3(netdevsim0) entered disabled state [ 708.765513][T16772] FAULT_INJECTION: forcing a failure. [ 708.765513][T16772] name failslab, interval 1, probability 0, space 0, times 0 [ 708.821183][T16772] CPU: 1 UID: 0 PID: 16772 Comm: syz.5.2954 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.821215][T16772] Tainted: [L]=SOFTLOCKUP [ 708.821222][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.821235][T16772] Call Trace: [ 708.821242][T16772] [ 708.821250][T16772] dump_stack_lvl+0xe8/0x150 [ 708.821279][T16772] should_fail_ex+0x412/0x560 [ 708.821309][T16772] should_failslab+0xa8/0x100 [ 708.821332][T16772] __kmalloc_noprof+0xe8/0x760 [ 708.821353][T16772] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 708.821377][T16772] tomoyo_realpath_from_path+0xe3/0x5d0 [ 708.821410][T16772] ? tomoyo_path_number_perm+0x219/0x630 [ 708.821436][T16772] tomoyo_path_number_perm+0x246/0x630 [ 708.821463][T16772] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 708.821490][T16772] ? __lock_acquire+0x6b5/0x2cf0 [ 708.821522][T16772] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 708.821566][T16772] ? __fget_files+0x2a/0x420 [ 708.821587][T16772] ? __fget_files+0x2a/0x420 [ 708.821602][T16772] ? __fget_files+0x3a0/0x420 [ 708.821616][T16772] ? __fget_files+0x2a/0x420 [ 708.821636][T16772] security_file_ioctl+0xc3/0x2a0 [ 708.821662][T16772] __se_sys_ioctl+0x47/0x170 [ 708.821686][T16772] do_syscall_64+0x14d/0xf80 [ 708.821708][T16772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.821728][T16772] ? clear_bhb_loop+0x40/0x90 [ 708.821748][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.821766][T16772] RIP: 0033:0x7f3521f9c819 [ 708.821785][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.821802][T16772] RSP: 002b:00007f3522d93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.821823][T16772] RAX: ffffffffffffffda RBX: 00007f3522215fa0 RCX: 00007f3521f9c819 [ 708.821834][T16772] RDX: 0000200000000080 RSI: 00000000c0045543 RDI: 0000000000000003 [ 708.821846][T16772] RBP: 00007f3522d93090 R08: 0000000000000000 R09: 0000000000000000 [ 708.821857][T16772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.821867][T16772] R13: 00007f3522216038 R14: 00007f3522215fa0 R15: 00007f352233fa48 [ 708.821892][T16772] [ 709.069668][ T5943] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 709.144671][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.155826][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.171492][T16772] ERROR: Out of memory at tomoyo_realpath_from_path. [ 709.365064][ T5943] usb 1-1: Invalid ep0 maxpacket: 32 [ 709.521955][ T5943] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 709.553246][ T5943] usb 1-1: Invalid ep0 maxpacket: 32 [ 709.578168][ T5943] usb usb1-port1: unable to enumerate USB device [ 709.596412][T16791] fuse: Bad value for 'fd' [ 710.332691][ T5826] Bluetooth: hci5: command tx timeout [ 710.965870][T16811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2964'. [ 711.021647][ T65] bond0 (unregistering): Released all slaves [ 711.063892][ T65] bond1 (unregistering): Released all slaves [ 711.125583][ T65] bond2 (unregistering): Released all slaves [ 711.189570][ T65] bond3 (unregistering): Released all slaves [ 711.235244][ T65] bond4 (unregistering): Released all slaves [ 711.282383][ T65] bond5 (unregistering): Released all slaves [ 711.576155][ T65] m1Ie5n: left promiscuous mode [ 711.650059][T16816] loop5: detected capacity change from 0 to 7 [ 711.685152][T16816] Dev loop5: unable to read RDB block 7 [ 711.710807][T16816] loop5: unable to read partition table [ 711.728616][T16816] loop5: partition table beyond EOD, truncated [ 711.786594][T16816] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 711.831739][ T65] tipc: Disabling bearer [ 711.871581][ T65] tipc: Left network mode [ 712.204250][T16838] fuse: Bad value for 'rootmode' [ 712.412250][ T5826] Bluetooth: hci5: command tx timeout [ 712.887483][ T65] hsr_slave_0: left promiscuous mode [ 712.918221][ T65] hsr_slave_1: left promiscuous mode [ 712.956862][T16866] loop5: detected capacity change from 0 to 7 [ 712.980605][ T65] veth1_macvtap: left promiscuous mode [ 712.995927][ T65] veth0_macvtap: left promiscuous mode [ 713.007724][T16866] Dev loop5: unable to read RDB block 7 [ 713.026364][T16866] loop5: unable to read partition table [ 713.047552][T16866] loop5: partition table beyond EOD, truncated [ 713.070269][T16866] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 713.270724][ T65] pim6reg (unregistering): left allmulticast mode [ 713.519292][T16874] netlink: 'syz.5.2980': attribute type 2 has an invalid length. [ 713.539083][ T5943] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 713.681355][ T5943] usb 5-1: device descriptor read/64, error -71 [ 713.981406][ T5943] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 714.142244][ T5943] usb 5-1: device descriptor read/64, error -71 [ 714.222575][T16874] !: entered promiscuous mode [ 714.293237][ T5943] usb usb5-port1: attempt power cycle [ 714.614898][T16680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 714.696445][T16680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 714.705060][ T5943] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 714.754456][ T5943] usb 5-1: device descriptor read/8, error -71 [ 714.799280][T16680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 714.890787][T16680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 714.956074][T16896] loop5: detected capacity change from 0 to 7 [ 714.987215][T16896] Dev loop5: unable to read RDB block 7 [ 715.007457][T16896] loop5: unable to read partition table [ 715.041964][ T5943] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 715.075352][T16896] loop5: partition table beyond EOD, truncated [ 715.086484][T16896] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 715.103103][ T5943] usb 5-1: device descriptor read/8, error -71 [ 715.153427][ T65] IPVS: stop unused estimator thread 0... [ 715.212021][ T5943] usb usb5-port1: unable to enumerate USB device [ 715.590317][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.748124][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.826310][ T249] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.835477][ T249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.847589][T16924] loop5: detected capacity change from 0 to 7 [ 715.865070][T16924] Dev loop5: unable to read RDB block 7 [ 715.872868][T16924] loop5: unable to read partition table [ 715.880510][T16924] loop5: partition table beyond EOD, truncated [ 715.898608][T16924] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 715.917832][T12952] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.927568][T12952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.070997][T16680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 716.146517][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.239208][T16680] veth0_vlan: entered promiscuous mode [ 716.260148][T16680] veth1_vlan: entered promiscuous mode [ 716.353063][T16937] loop5: detected capacity change from 0 to 7 [ 716.364138][T16680] veth0_macvtap: entered promiscuous mode [ 716.384194][ T5828] Dev loop5: unable to read RDB block 7 [ 716.400721][ T5828] loop5: unable to read partition table [ 716.416068][ T5828] loop5: partition table beyond EOD, truncated [ 716.439240][T16937] Dev loop5: unable to read RDB block 7 [ 716.444045][T16680] veth1_macvtap: entered promiscuous mode [ 716.465044][T16937] loop5: unable to read partition table [ 716.478958][T16937] loop5: partition table beyond EOD, truncated [ 716.502016][T16937] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 716.552714][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.584273][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.618929][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.663929][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.675021][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.716305][T16941] loop5: detected capacity change from 0 to 7 [ 716.726477][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.770981][T16941] Dev loop5: unable to read RDB block 7 [ 716.813505][T16941] loop5: unable to read partition table [ 716.841212][T16941] loop5: partition table beyond EOD, truncated [ 716.866616][T16941] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 716.884053][ T249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.920596][ T249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.982945][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.016145][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.182934][T16950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2930'. [ 717.540573][T16964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3000'. [ 717.557261][T16964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.663059][T16967] netlink: 'syz.6.3001': attribute type 3 has an invalid length. [ 717.680589][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3001'. [ 717.798364][T16973] loop5: detected capacity change from 0 to 7 [ 717.810114][T16973] Dev loop5: unable to read RDB block 7 [ 717.818367][T16973] loop5: unable to read partition table [ 717.825846][T16973] loop5: partition table beyond EOD, truncated [ 717.833031][T16973] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 717.930591][T16976] loop5: detected capacity change from 0 to 7 [ 717.950430][T16976] Dev loop5: unable to read RDB block 7 [ 717.964440][T16976] loop5: unable to read partition table [ 717.975940][T16976] loop5: partition table beyond EOD, truncated [ 717.983438][T16976] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 718.206251][T16983] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3006'. [ 718.217243][T16983] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3006'. [ 718.335119][T16986] FAULT_INJECTION: forcing a failure. [ 718.335119][T16986] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 718.371409][T16986] CPU: 0 UID: 0 PID: 16986 Comm: syz.1.3007 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.371459][T16986] Tainted: [L]=SOFTLOCKUP [ 718.371466][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 718.371478][T16986] Call Trace: [ 718.371486][T16986] [ 718.371494][T16986] dump_stack_lvl+0xe8/0x150 [ 718.371521][T16986] should_fail_ex+0x412/0x560 [ 718.371552][T16986] _copy_to_iter+0x404/0x17d0 [ 718.371594][T16986] ? __up_read+0x291/0x6b0 [ 718.371616][T16986] ? __pfx__copy_to_iter+0x10/0x10 [ 718.371635][T16986] ? __up_read+0x291/0x6b0 [ 718.371656][T16986] ? __pfx___up_read+0x10/0x10 [ 718.371673][T16986] ? page_copy_sane+0x4e/0x270 [ 718.371693][T16986] copy_page_to_iter+0x10c/0x1c0 [ 718.371723][T16986] process_vm_rw+0x863/0xba0 [ 718.371752][T16986] ? __pfx_process_vm_rw+0x10/0x10 [ 718.371816][T16986] ? ksys_write+0x242/0x270 [ 718.371839][T16986] ? __pfx_ksys_write+0x10/0x10 [ 718.371863][T16986] __x64_sys_process_vm_readv+0xe0/0x100 [ 718.371884][T16986] do_syscall_64+0x14d/0xf80 [ 718.371908][T16986] ? trace_irq_disable+0x3b/0x150 [ 718.371925][T16986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.371944][T16986] ? clear_bhb_loop+0x40/0x90 [ 718.371974][T16986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.371993][T16986] RIP: 0033:0x7f48d479c819 [ 718.372010][T16986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.372025][T16986] RSP: 002b:00007f48d55fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 718.372045][T16986] RAX: ffffffffffffffda RBX: 00007f48d4a15fa0 RCX: 00007f48d479c819 [ 718.372059][T16986] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000000b [ 718.372071][T16986] RBP: 00007f48d55fa090 R08: 0000000000000286 R09: 0000000000000000 [ 718.372080][T16986] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 718.372090][T16986] R13: 00007f48d4a16038 R14: 00007f48d4a15fa0 R15: 00007f48d4b3fa48 [ 718.372115][T16986] [ 718.531761][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 718.531783][ T31] audit: type=1800 audit(1775836066.794:2706): pid=16974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3002" name="/" dev="fuse" ino=2 res=0 errno=0 [ 718.860432][T17000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 718.886160][T17000] syzkaller1: entered promiscuous mode [ 718.896731][T17000] syzkaller1: entered allmulticast mode [ 718.973766][ T29] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 719.123480][ T29] usb 2-1: device descriptor read/64, error -71 [ 719.360451][T14614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 719.386371][T14614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 719.391412][ T29] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 719.396073][T14614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 719.413486][T14614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 719.427844][T14614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 719.462083][ T5890] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 719.551512][ T29] usb 2-1: device descriptor read/64, error -71 [ 719.642701][ T5890] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 719.669228][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.681524][ T29] usb usb2-port1: attempt power cycle [ 719.715283][ T5890] usb 1-1: config 0 has no interfaces? [ 719.733888][ T5890] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 719.769792][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.800262][ T5890] usb 1-1: config 0 descriptor?? [ 720.032788][T17009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.052481][ T29] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 720.063028][T17009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.102106][ T29] usb 2-1: device descriptor read/8, error -71 [ 720.330437][T17028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.345084][T17028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.361734][ T29] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 720.420770][T12955] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.436061][ T29] usb 2-1: device descriptor read/8, error -71 [ 720.479334][T17016] chnl_net:caif_netlink_parms(): no params data found [ 720.548639][T12955] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.561751][ T29] usb usb2-port1: unable to enumerate USB device [ 720.652829][T12955] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.838283][T17016] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.867927][T17016] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.898451][T17016] bridge_slave_0: entered allmulticast mode [ 720.923977][T17016] bridge_slave_0: entered promiscuous mode [ 720.944447][T17016] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.972908][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.994525][T17016] bridge_slave_1: entered allmulticast mode [ 721.010707][T17016] bridge_slave_1: entered promiscuous mode [ 721.135507][T17016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.167253][T17016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.250983][T17046] loop5: detected capacity change from 0 to 7 [ 721.263456][T17046] Dev loop5: unable to read RDB block 7 [ 721.281764][T17046] loop5: unable to read partition table [ 721.298040][T17046] loop5: partition table beyond EOD, truncated [ 721.318812][T17046] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 721.340330][T17016] team0: Port device team_slave_0 added [ 721.376244][T17016] team0: Port device team_slave_1 added [ 721.453271][T14614] Bluetooth: hci2: command tx timeout [ 721.555212][T17016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.564587][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.597731][T17016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.619252][T17016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.627243][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.668797][T17016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.686924][T12955] bridge_slave_1: left allmulticast mode [ 721.722258][T12955] bridge_slave_1: left promiscuous mode [ 721.729421][T12955] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.746844][T12955] bridge_slave_0: left allmulticast mode [ 721.782885][T12955] bridge_slave_0: left promiscuous mode [ 721.794354][T12955] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.803549][ T5890] usb 1-1: USB disconnect, device number 17 [ 721.816556][T17036] delete_channel: no stack [ 722.874423][T12955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.923146][T12955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.958453][T12955] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 723.000318][T12955] bond0 (unregistering): (slave bond4): Releasing backup interface [ 723.022668][T12955] bond0 (unregistering): Released all slaves [ 723.045441][T12955] bond1 (unregistering): Released all slaves [ 723.071571][ T5890] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 723.092298][T12955] bond2 (unregistering): Released all slaves [ 723.142426][T12955] bond3 (unregistering): Released all slaves [ 723.168297][T12955] bond4 (unregistering): Released all slaves [ 723.244138][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 723.285281][ T5890] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 723.320053][T17016] hsr_slave_0: entered promiscuous mode [ 723.340609][T17016] hsr_slave_1: entered promiscuous mode [ 723.358273][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.401415][ T5890] usb 2-1: Product: syz [ 723.402476][T17016] debugfs: 'hsr0' already exists in 'hsr' [ 723.405675][ T5890] usb 2-1: Manufacturer: syz [ 723.448506][T17016] Cannot create hsr debugfs directory [ 723.448695][ T5890] usb 2-1: SerialNumber: syz [ 723.486324][T12955] m>e5n: left promiscuous mode [ 723.524336][ T5890] usb 2-1: selecting invalid altsetting 1 [ 723.532790][T14614] Bluetooth: hci2: command tx timeout [ 723.552129][ T5890] usb 2-1: unit 6 not found! [ 723.708749][T12955] tipc: Left network mode [ 723.723127][ T5890] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 723.760411][ T5890] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 723.841831][ T5890] usb 2-1: selecting invalid altsetting 1 [ 723.858957][ T5890] usb 2-1: unit 6 not found! [ 723.914251][T17089] loop5: detected capacity change from 0 to 7 [ 723.949426][ T6076] Dev loop5: unable to read RDB block 7 [ 723.960596][ T5890] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 723.967298][ T6076] loop5: unable to read partition table [ 723.976298][ T5890] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 723.983960][ T6076] loop5: partition table beyond EOD, truncated [ 724.013045][ T5890] usb 2-1: selecting invalid altsetting 1 [ 724.034229][ T5890] usb 2-1: unit 6 not found! [ 724.034571][T17089] Dev loop5: unable to read RDB block 7 [ 724.049876][T17089] loop5: unable to read partition table [ 724.061439][ T5890] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 724.066255][T17089] loop5: partition table beyond EOD, truncated [ 724.120573][T17089] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 724.171704][ T5833] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 724.210458][ T5890] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 724.285872][ T31] audit: type=1326 audit(1775836072.584:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17096 comm="syz.5.3031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3521f9c819 code=0x0 [ 724.343555][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short [ 724.438609][ T5890] usb 2-1: USB disconnect, device number 115 [ 724.466787][ T5833] usb 1-1: not running at top speed; connect to a high speed hub [ 724.575942][ T5833] usb 1-1: config 255 has an invalid interface number: 180 but max is 0 [ 724.602291][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.636213][ T5833] usb 1-1: config 255 has no interface number 0 [ 724.785556][ T5833] usb 1-1: config 255 interface 180 has no altsetting 0 [ 724.834291][ T5833] usb 1-1: New USB device found, idVendor=0762, idProduct=0009, bcdDevice= 0.00 [ 724.986017][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.019387][ T5833] usb 1-1: Product: syz [ 725.033151][ T5833] usb 1-1: Manufacturer: syz [ 725.086379][ T5833] usb 1-1: SerialNumber: syz [ 725.372237][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.395233][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.585229][ T5833] usb 1-1: USB disconnect, device number 18 [ 725.611551][ T5943] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 725.620138][T14614] Bluetooth: hci2: command tx timeout [ 725.636827][ T5828] udevd[5828]: setting owner of /dev/bus/usb/001/018 to uid=0, gid=0 failed: No such file or directory [ 725.763439][T12955] hsr_slave_0: left promiscuous mode [ 725.785701][T12955] hsr_slave_1: left promiscuous mode [ 725.805919][T12955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.821434][ T5943] usb 2-1: device descriptor read/64, error -71 [ 725.846065][T12955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.895984][T12955] veth1_macvtap: left promiscuous mode [ 725.929035][T12955] veth0_macvtap: left promiscuous mode [ 725.941447][T12955] veth1_vlan: left promiscuous mode [ 725.947670][T12955] veth0_vlan: left promiscuous mode [ 726.100996][ T5943] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 726.252278][ T5943] usb 2-1: device descriptor read/64, error -71 [ 726.374637][ T5943] usb usb2-port1: attempt power cycle [ 726.391336][ T5908] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 726.561376][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 726.576357][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 726.606797][ T5908] usb 7-1: config 1 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.642342][ T5908] usb 7-1: config 1 interface 0 has no altsetting 0 [ 726.665160][ T5908] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 726.687947][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.719639][ T5908] usb 7-1: Product: syz [ 726.742962][ T5943] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 726.774960][ T5908] usb 7-1: Manufacturer: syz [ 726.779986][ T5908] usb 7-1: SerialNumber: syz [ 726.794456][ T5943] usb 2-1: device descriptor read/8, error -71 [ 726.939493][T17016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 726.980244][T17016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 726.997332][T17016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.044439][T17016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.071464][ T5943] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 727.169528][ T5943] usb 2-1: device descriptor read/8, error -71 [ 727.310148][T17016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.312042][ T5943] usb usb2-port1: unable to enumerate USB device [ 727.355275][T17143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.376078][T12955] IPVS: stop unused estimator thread 0... [ 727.396321][T17016] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.433970][T17143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.447342][ T4771] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.455265][ T4771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.502231][ T4771] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.510483][ T4771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.691564][T14614] Bluetooth: hci2: command tx timeout [ 727.705074][T17016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.760873][T17016] veth0_vlan: entered promiscuous mode [ 727.829606][T17016] veth1_vlan: entered promiscuous mode [ 727.944217][T17016] veth0_macvtap: entered promiscuous mode [ 727.977396][T17016] veth1_macvtap: entered promiscuous mode [ 728.059386][T17016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.107571][T17016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.139810][ T249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.173506][ T249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.195988][ T249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.237385][ T249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.359800][T12955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.384479][T12955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.432364][ T31] audit: type=1800 audit(1775836076.734:2708): pid=17152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3039" name="memory.events" dev="tmpfs" ino=69 res=0 errno=0 [ 728.464418][T12955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.504298][T12955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.515660][ T31] audit: type=1804 audit(1775836076.754:2709): pid=17152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3039" name="memory.events" dev="tmpfs" ino=69 res=1 errno=0 [ 729.049693][T17162] netlink: 'syz.4.3041': attribute type 1 has an invalid length. [ 729.410174][T17166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.428060][ T5908] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input74 [ 729.433607][T17166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.478662][ T5177] bcm5974 7-1:1.0: could not read from device [ 729.490599][ T5177] bcm5974 7-1:1.0: could not read from device [ 729.533922][ T5177] bcm5974 7-1:1.0: could not read from device [ 729.542934][ T5908] usb 7-1: USB disconnect, device number 16 [ 729.553333][ T5177] bcm5974 7-1:1.0: could not read from device [ 729.561421][T17153] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 729.751746][T17153] usb 5-1: Using ep0 maxpacket: 8 [ 729.766864][T17153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.812920][T17172] SET target dimension over the limit! [ 729.822663][T17153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 729.910115][T17153] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 729.963145][T17153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.053109][T17153] usb 5-1: config 0 descriptor?? [ 730.098322][T17178] program syz.1.3046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 730.431759][ T5883] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 730.511299][T17184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.543119][T17184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.651500][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 730.657383][T17189] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3049'. [ 730.791472][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 730.825695][T17193] : renamed from vlan0 (while UP) [ 730.938590][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 731.045019][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 731.223222][ T5883] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 731.345713][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.497778][ T5883] usb 2-1: Product: syz [ 731.599639][ T5883] usb 2-1: Manufacturer: syz [ 731.630125][ T5883] usb 2-1: SerialNumber: syz [ 731.666918][ T5883] usb 2-1: config 0 descriptor?? [ 731.897222][ T5883] usb 2-1: USB disconnect, device number 120 [ 732.625219][T17210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.655091][T17210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.063034][T17216] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1617207373 (3234414746 ns) > initial count (443187862 ns). Using initial count to start timer. [ 733.105058][T17153] usbhid 5-1:0.0: can't add hid device: -71 [ 733.114425][T17153] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 733.164028][T17153] usb 5-1: USB disconnect, device number 42 [ 733.945602][T17235] delete_channel: no stack [ 734.352152][T17245] netlink: 488 bytes leftover after parsing attributes in process `syz.0.3067'. [ 734.371383][T17245] netlink: 488 bytes leftover after parsing attributes in process `syz.0.3067'. [ 734.619859][T17253] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 17253 comm: syz.6.3065) [ 734.688462][ T31] audit: type=1800 audit(1775836082.964:2710): pid=17253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3065" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=85843 res=0 errno=0 [ 735.154077][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 735.176424][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 735.191944][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 735.202709][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 735.215017][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 735.825726][T10851] bond0: (slave syz_tun): Releasing backup interface [ 736.139178][T17260] chnl_net:caif_netlink_parms(): no params data found [ 736.485365][T17260] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.493291][T17260] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.501739][T17260] bridge_slave_0: entered allmulticast mode [ 736.509499][T17260] bridge_slave_0: entered promiscuous mode [ 736.518640][T17260] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.541397][T17260] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.560097][T17260] bridge_slave_1: entered allmulticast mode [ 736.601438][T17260] bridge_slave_1: entered promiscuous mode [ 736.724106][T17260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.773970][T17260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.848583][T17275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.871072][T17275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.894235][T17260] team0: Port device team_slave_0 added [ 736.914291][T17260] team0: Port device team_slave_1 added [ 736.941399][ T5835] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 737.001453][T17260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.009658][T17260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.071292][T17260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.106095][T17260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.121293][T17260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.149887][T17260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.171314][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 737.179156][ T5835] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 737.193076][ T5835] usb 2-1: config 179 has no interface number 0 [ 737.207194][ T5835] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 737.236786][ T5835] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 737.263213][T17260] hsr_slave_0: entered promiscuous mode [ 737.263319][ T5835] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 737.283069][T17260] hsr_slave_1: entered promiscuous mode [ 737.290283][T17260] debugfs: 'hsr0' already exists in 'hsr' [ 737.297100][T14614] Bluetooth: hci4: command tx timeout [ 737.306167][T17260] Cannot create hsr debugfs directory [ 737.314041][ T5835] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 737.334303][ T5835] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 737.355010][ T5835] usb 2-1: config 179 interface 65 has no altsetting 0 [ 737.363032][ T5835] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 737.373661][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.462493][ T5835] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input75 [ 737.612528][T17285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.655153][T17285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.678767][ T5946] usb 2-1: USB disconnect, device number 121 [ 737.678795][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 737.845409][T17260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.912848][ T5883] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 737.972398][T17260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.110149][ T5883] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 738.118792][T17260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.139936][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.157378][ T5883] usb 5-1: Product: syz [ 738.164101][ T5883] usb 5-1: Manufacturer: syz [ 738.170396][ T5883] usb 5-1: SerialNumber: syz [ 738.203111][ T5883] usb 5-1: config 0 descriptor?? [ 738.340463][T17313] loop5: detected capacity change from 0 to 7 [ 738.379394][T17313] Dev loop5: unable to read RDB block 7 [ 738.386844][T17313] loop5: unable to read partition table [ 738.394784][T17313] loop5: partition table beyond EOD, truncated [ 738.417045][T17260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.432172][ T5883] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 738.453482][T17313] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 738.974775][T17260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 739.027390][T17260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 739.106714][T17260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 739.141817][T17260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 739.171612][T17327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.187456][T17327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.203441][T17327] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3085'. [ 739.347219][ T5883] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 739.371420][T14614] Bluetooth: hci4: command tx timeout [ 739.383314][ T5883] usb 5-1: USB disconnect, device number 43 [ 739.506303][T17341] libceph: secret too big 289 [ 739.557880][T17260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.618484][T17260] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.684558][T17153] IPVS: starting estimator thread 0... [ 739.719592][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.727319][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.785731][T12955] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.793464][T12955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.922745][T17347] IPVS: using max 38 ests per chain, 91200 per kthread [ 739.997245][T17260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.075491][T17260] veth0_vlan: entered promiscuous mode [ 740.082288][T17153] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 740.103895][T17260] veth1_vlan: entered promiscuous mode [ 740.132190][T17260] veth0_macvtap: entered promiscuous mode [ 740.145179][T17260] veth1_macvtap: entered promiscuous mode [ 740.162843][T17260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.185710][T17260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.261337][T17153] usb 5-1: Using ep0 maxpacket: 32 [ 740.301785][T17153] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 740.378667][ T249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.412061][T17153] usb 5-1: config 4 has no interface number 0 [ 740.424893][ T249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.454109][T17153] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 740.482366][T17153] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 740.499299][T17153] usb 5-1: config 4 interface 8 has no altsetting 0 [ 740.513355][T17153] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 740.538278][T17153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.583977][T17153] usb 5-1: Product: syz [ 740.607833][ T249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.617622][T17153] usb 5-1: Manufacturer: syz [ 740.617647][T17153] usb 5-1: SerialNumber: syz [ 740.793091][ T249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.819187][T17369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.846560][T17369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.452001][T14614] Bluetooth: hci4: command tx timeout [ 741.505152][ T8142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.533726][ T8142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.662868][T12952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.676567][T12952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.345373][T17384] binder: 17383:17384 ioctl c0306201 2000000000c0 returned -14 [ 742.617958][T17153] opticon 5-1:4.8: opticon converter detected [ 742.657367][T17384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.658838][T17153] usb 5-1: opticon converter now attached to ttyUSB0 [ 742.710747][T17384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.718970][T17153] usb 5-1: USB disconnect, device number 44 [ 742.765444][T17153] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 742.799308][T17384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.814362][T17153] opticon 5-1:4.8: device disconnected [ 742.838980][T17384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.356138][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3099'. [ 743.383284][T17400] openvswitch: netlink: Flow key attr not present in new flow. [ 743.417725][T17386] random: crng reseeded on system resumption [ 743.541406][T14614] Bluetooth: hci4: command tx timeout [ 743.989402][T17412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3106'. [ 744.246048][T17418] loop5: detected capacity change from 0 to 7 [ 744.265159][T17418] Dev loop5: unable to read RDB block 7 [ 744.272078][T17418] loop5: unable to read partition table [ 744.287999][T17418] loop5: partition table beyond EOD, truncated [ 744.325656][T17418] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 744.685011][T17424] IPVS: set_ctl: invalid protocol: 33 172.30.1.5:20004 [ 744.701558][ T5946] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 744.832805][T17427] netlink: 'syz.4.3110': attribute type 10 has an invalid length. [ 744.891770][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 744.915971][T17427] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 744.937799][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.977432][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.002715][ T5946] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 745.024595][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.075212][ T5946] usb 1-1: config 0 descriptor?? [ 745.109684][ T5946] hub 1-1:0.0: USB hub found [ 745.390605][ T5946] hub 1-1:0.0: 1 port detected [ 745.690701][ T5946] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 745.777230][ T5946] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 745.837079][ T5946] usbhid 1-1:0.0: can't add hid device: -71 [ 745.870999][ T5946] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 746.076032][ T5946] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 746.429810][T17463] loop5: detected capacity change from 0 to 7 [ 746.449293][T17463] Dev loop5: unable to read RDB block 7 [ 746.466271][T17463] loop5: unable to read partition table [ 746.480404][T17463] loop5: partition table beyond EOD, truncated [ 746.496998][T17463] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 746.671734][T17465] loop5: detected capacity change from 0 to 7 [ 746.693183][T17465] Dev loop5: unable to read RDB block 7 [ 746.731681][T17465] loop5: unable to read partition table [ 746.791644][T17465] loop5: partition table beyond EOD, truncated [ 746.828828][T17465] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 747.261402][ T5883] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 747.326180][T17478] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 747.442166][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 747.459060][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 747.478322][ T5883] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 747.506975][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.543874][ T5883] usb 5-1: Product: syz [ 747.566879][ T5883] usb 5-1: Manufacturer: syz [ 747.577942][ T5883] usb 5-1: SerialNumber: syz [ 747.788832][ T5946] usb 1-1: USB disconnect, device number 19 [ 747.803049][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.832046][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.857381][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.864906][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.889403][ T5883] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 747.912091][ T5883] usb 5-1: 2:1 : bogus bTerminalLink 23 [ 748.089030][ T5883] usb 5-1: USB disconnect, device number 45 [ 748.182307][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.321886][T17491] netlink: 'syz.1.3127': attribute type 16 has an invalid length. [ 748.330614][T17491] netlink: 'syz.1.3127': attribute type 2 has an invalid length. [ 748.361519][T17491] netlink: 64102 bytes leftover after parsing attributes in process `syz.1.3127'. [ 748.383114][T17496] input: syz1 as /devices/virtual/input/input76 [ 748.483067][T17502] loop5: detected capacity change from 0 to 7 [ 748.493573][T17502] Dev loop5: unable to read RDB block 7 [ 748.503122][T17502] loop5: unable to read partition table [ 748.511576][T17502] loop5: partition table beyond EOD, truncated [ 748.518935][T17502] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 748.563545][T17504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3130'. [ 748.668988][T17507] loop5: detected capacity change from 0 to 7 [ 748.690503][T17507] Dev loop5: unable to read RDB block 7 [ 748.709838][T17507] loop5: unable to read partition table [ 748.724549][T17507] loop5: partition table beyond EOD, truncated [ 748.745118][T17507] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 748.837233][T17519] netlink: 'syz.0.3133': attribute type 1 has an invalid length. [ 749.822432][T17509] delete_channel: no stack [ 750.134935][ T5946] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 750.284130][T17550] fuse: Unknown parameter 'user_d' [ 750.300682][T17550] binder_alloc: 17548: binder_alloc_buf, no vma [ 750.323939][T17550] macsec1: entered promiscuous mode [ 750.344143][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 750.357100][ T5946] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 750.368314][ T5946] usb 2-1: config 0 interface 0 has no altsetting 1 [ 750.407556][ T5946] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 750.451369][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 750.474648][ T5946] usb 2-1: SerialNumber: syz [ 750.496137][ T5946] usb 2-1: config 0 descriptor?? [ 750.524584][ T5946] usb-storage 2-1:0.0: USB Mass Storage device detected [ 750.589766][ T5946] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 751.008041][T17559] loop5: detected capacity change from 0 to 7 [ 751.026429][ T6852] Dev loop5: unable to read RDB block 7 [ 751.032684][ T6852] loop5: unable to read partition table [ 751.046168][ T6852] loop5: partition table beyond EOD, truncated [ 751.080755][ T5946] usb 2-1: USB disconnect, device number 122 [ 751.103838][T17559] Dev loop5: unable to read RDB block 7 [ 751.117347][T17559] loop5: unable to read partition table [ 751.129564][T17559] loop5: partition table beyond EOD, truncated [ 751.138970][T17559] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 751.218066][T17564] loop5: detected capacity change from 0 to 7 [ 751.227964][T17564] Dev loop5: unable to read RDB block 7 [ 751.236550][T17564] loop5: unable to read partition table [ 751.243337][T17564] loop5: partition table beyond EOD, truncated [ 751.251820][T17564] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 751.491661][T17577] netlink: 'syz.4.3148': attribute type 1 has an invalid length. [ 751.625480][T17581] netlink: 'syz.0.3152': attribute type 10 has an invalid length. [ 751.659800][T17581] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3152'. [ 751.680319][T17581] bond0: entered promiscuous mode [ 751.696187][T17581] bond_slave_0: entered promiscuous mode [ 751.717285][T17581] bond_slave_1: entered promiscuous mode [ 751.725431][T17581] bridge0: port 3(bond0) entered blocking state [ 751.732551][T17581] bridge0: port 3(bond0) entered disabled state [ 751.739943][T17581] bond0: entered allmulticast mode [ 751.747033][T17581] bond_slave_0: entered allmulticast mode [ 751.754116][T17581] bond_slave_1: entered allmulticast mode [ 751.767068][T17581] bridge0: port 3(bond0) entered blocking state [ 751.773933][T17581] bridge0: port 3(bond0) entered forwarding state [ 751.812435][ T5946] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 751.911336][ T5833] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 751.977913][ T5946] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 752.015898][ T5946] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.053041][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 752.075202][ T5946] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 752.100140][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.117142][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.142092][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.158384][ T5946] usb 5-1: config 0 descriptor?? [ 752.191992][ T5833] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 752.230260][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.270561][ T5833] usb 2-1: config 0 descriptor?? [ 752.630726][ T5946] thrustmaster 0003:044F:B323.002E: unknown main item tag 0x6 [ 752.659904][ T5946] thrustmaster 0003:044F:B323.002E: invalid report_size 26545 [ 752.677981][ T5946] thrustmaster 0003:044F:B323.002E: item 0 2 1 7 parsing failed [ 752.711013][ T5833] holtek_kbd 0003:04D9:A055.002F: unknown main item tag 0x0 [ 752.728257][ T5946] thrustmaster 0003:044F:B323.002E: parse failed [ 752.750524][ T5833] holtek_kbd 0003:04D9:A055.002F: unknown main item tag 0x0 [ 752.763794][ T5946] thrustmaster 0003:044F:B323.002E: probe with driver thrustmaster failed with error -22 [ 752.782303][ T5833] holtek_kbd 0003:04D9:A055.002F: unknown main item tag 0x0 [ 752.807311][ T5833] holtek_kbd 0003:04D9:A055.002F: unknown main item tag 0x0 [ 752.836729][ T5833] holtek_kbd 0003:04D9:A055.002F: unknown main item tag 0x0 [ 752.864772][ T5833] holtek_kbd 0003:04D9:A055.002F: unknown main item tag 0x0 [ 752.893095][ T5833] holtek_kbd 0003:04D9:A055.002F: unknown main item tag 0x0 [ 752.993285][ T5833] holtek_kbd 0003:04D9:A055.002F: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 753.028591][T17577] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 753.101401][ T5833] usb 2-1: USB disconnect, device number 123 [ 753.140395][T17577] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 753.203171][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.214822][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.230189][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.257560][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.273169][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.293080][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.446601][T17598] bond2: (slave gretap1): making interface the new active one [ 753.459809][T17598] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 753.555815][T17605] loop5: detected capacity change from 0 to 7 [ 753.567249][T17605] Dev loop5: unable to read RDB block 7 [ 753.575633][T17605] loop5: unable to read partition table [ 753.584289][T17605] loop5: partition table beyond EOD, truncated [ 753.591636][T17605] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 753.614500][ T32] INFO: task kworker/1:6:5904 blocked for more than 143 seconds. [ 753.633956][ T32] Tainted: G L syzkaller #0 [ 753.656812][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.709957][ T32] task:kworker/1:6 state:D stack:21536 pid:5904 tgid:5904 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 753.735727][ T32] Workqueue: usb_hub_wq hub_event [ 753.742226][ T32] Call Trace: [ 753.746854][ T32] [ 753.750171][ T32] __schedule+0x15dd/0x52d0 [ 753.756407][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 753.763505][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 753.784070][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 753.789687][ T32] ? __pfx___schedule+0x10/0x10 [ 753.816496][ T32] ? schedule+0x90/0x360 [ 753.822954][ T32] schedule+0x164/0x360 [ 753.827620][ T32] schedule_timeout+0xc3/0x2c0 [ 753.843688][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 753.849066][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 753.854983][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 753.861927][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 753.867727][ T32] ? wait_for_completion+0x274/0x5e0 [ 753.873534][ T32] wait_for_completion+0x2cc/0x5e0 [ 753.879358][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 753.885759][ T32] i2c_del_adapter+0x5c0/0x790 [ 753.891087][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 753.897844][ T32] ? rcu_is_watching+0x15/0xb0 [ 753.903401][ T32] ? devres_log+0x10e/0x360 [ 753.908295][ T32] ? devres_release_group+0x305/0x350 [ 753.914198][ T32] devres_release_group+0x2fd/0x350 [ 753.920127][ T32] ? __pfx_devres_release_group+0x10/0x10 [ 753.927990][ T32] ? lockdep_hardirqs_on+0x7a/0x110 [ 753.933578][ T32] ? enable_work+0x1fd/0x230 [ 753.939409][ T32] ? __pfx_mcp2221_remove+0x10/0x10 [ 753.945085][ T32] hid_device_remove+0x250/0x370 [ 753.950151][ T32] ? __pfx_hid_device_remove+0x10/0x10 [ 753.956049][ T32] device_release_driver_internal+0x46f/0x870 [ 753.962496][ T32] bus_remove_device+0x455/0x570 [ 753.967864][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 753.973784][ T32] device_del+0x527/0x8f0 [ 753.979258][ T32] ? lockdep_hardirqs_on+0x7a/0x110 [ 753.984858][ T32] ? __pfx_device_del+0x10/0x10 [ 753.989917][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 753.995954][ T32] hid_destroy_device+0x6b/0x1b0 [ 754.001670][ T32] usbhid_disconnect+0x9f/0xc0 [ 754.006530][ T32] usb_unbind_interface+0x26e/0x910 [ 754.012564][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 754.018983][ T32] device_release_driver_internal+0x4d9/0x870 [ 754.026699][ T32] bus_remove_device+0x455/0x570 [ 754.031994][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 754.038622][ T32] device_del+0x527/0x8f0 [ 754.043489][ T32] ? __pfx_device_del+0x10/0x10 [ 754.048927][ T32] ? kobject_put+0x51d/0x560 [ 754.054195][ T32] usb_disable_device+0x3d4/0x8d0 [ 754.059976][ T32] usb_disconnect+0x32f/0x990 [ 754.064875][ T32] hub_event+0x1cc9/0x4f30 [ 754.069952][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 754.075465][ T32] ? __pfx_hub_event+0x10/0x10 [ 754.080984][ T32] ? process_scheduled_works+0xa8d/0x18c0 [ 754.087478][ T32] ? process_scheduled_works+0xa8d/0x18c0 [ 754.094381][ T32] process_scheduled_works+0xb6e/0x18c0 [ 754.100351][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 754.106852][ T32] ? assign_work+0x3d5/0x5e0 [ 754.111915][ T32] worker_thread+0xa53/0xfc0 [ 754.116821][ T32] kthread+0x388/0x470 [ 754.121590][ T32] ? __pfx_worker_thread+0x10/0x10 [ 754.127451][ T32] ? __pfx_kthread+0x10/0x10 [ 754.133316][ T32] ret_from_fork+0x51e/0xb90 [ 754.138241][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 754.144637][ T32] ? __switch_to+0xc7d/0x1450 [ 754.149742][ T32] ? __pfx_kthread+0x10/0x10 [ 754.154835][ T32] ret_from_fork_asm+0x1a/0x30 [ 754.160983][ T32] [ 754.164367][ T32] [ 754.164367][ T32] Showing all locks held in the system: [ 754.173006][ T32] 1 lock held by khungtaskd/32: [ 754.178074][ T32] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 754.189112][ T32] 2 locks held by getty/5584: [ 754.194618][ T32] #0: ffff888032a5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 754.205958][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 754.217042][ T32] 6 locks held by kworker/1:6/5904: [ 754.222905][ T32] #0: ffff88823be36148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 754.235508][ T32] #1: ffffc90004187c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 754.249811][ T32] #2: ffff88802a9371e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 754.263573][ T32] #3: ffff8880227e71e0 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 754.273496][ T32] #4: ffff8880368b11a8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 754.285836][ T32] #5: ffff888047709a68 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 754.298203][ T32] 1 lock held by syz.3.2475/15066: [ 754.303712][ T32] #0: ffff88802a9371e0 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 754.314282][ T32] 1 lock held by syz-executor/17016: [ 754.319811][ T32] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 754.331054][ T32] 1 lock held by syz.6.3136/17521: [ 754.338091][ T32] #0: ffff88802a9371e0 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 754.350255][ T32] 2 locks held by syz.4.3148/17577: [ 754.356358][ T32] #0: ffffffff8f341be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 754.367057][ T32] #1: ffffffff8e764780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 754.379227][ T32] [ 754.387004][ T32] ============================================= [ 754.387004][ T32] [ 754.396149][ T32] NMI backtrace for cpu 1 [ 754.396167][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 754.396182][ T32] Tainted: [L]=SOFTLOCKUP [ 754.396187][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 754.396194][ T32] Call Trace: [ 754.396199][ T32] [ 754.396204][ T32] dump_stack_lvl+0xe8/0x150 [ 754.396224][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 754.396236][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.396251][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 754.396264][ T32] sys_info+0x135/0x170 [ 754.396273][ T32] watchdog+0xfd9/0x1030 [ 754.396286][ T32] ? watchdog+0x21a/0x1030 [ 754.396298][ T32] kthread+0x388/0x470 [ 754.396308][ T32] ? __pfx_watchdog+0x10/0x10 [ 754.396317][ T32] ? __pfx_kthread+0x10/0x10 [ 754.396328][ T32] ret_from_fork+0x51e/0xb90 [ 754.396343][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 754.396355][ T32] ? __switch_to+0xc7d/0x1450 [ 754.396369][ T32] ? __pfx_kthread+0x10/0x10 [ 754.396379][ T32] ret_from_fork_asm+0x1a/0x30 [ 754.396400][ T32] [ 754.396405][ T32] Sending NMI from CPU 1 to CPUs 0: [ 754.528874][ C0] NMI backtrace for cpu 0 [ 754.528897][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.528923][ C0] Tainted: [L]=SOFTLOCKUP [ 754.528929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 754.528939][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 754.528966][ C0] Code: 7e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 92 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 754.528980][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 754.528994][ C0] RAX: 0000000000fc2fe9 RBX: ffffffff819a9d1a RCX: 0000000080000001 [ 754.529006][ C0] RDX: 0000000000000001 RSI: ffffffff8defbcfa RDI: ffffffff8c27d580 [ 754.529018][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733 [ 754.529029][ C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000 [ 754.529040][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 754.529051][ C0] FS: 0000000000000000(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 754.529068][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.529078][ C0] CR2: 00007f35221e92f8 CR3: 0000000076bfa000 CR4: 00000000003526f0 [ 754.529093][ C0] Call Trace: [ 754.529102][ C0] [ 754.529108][ C0] default_idle+0x9/0x20 [ 754.529129][ C0] default_idle_call+0x72/0xb0 [ 754.529145][ C0] do_idle+0x36a/0x5f0 [ 754.529168][ C0] ? __pfx_do_idle+0x10/0x10 [ 754.529191][ C0] cpu_startup_entry+0x43/0x60 [ 754.529218][ C0] rest_init+0x2de/0x300 [ 754.529235][ C0] start_kernel+0x385/0x3d0 [ 754.529253][ C0] x86_64_start_reservations+0x24/0x30 [ 754.529272][ C0] x86_64_start_kernel+0x143/0x1c0 [ 754.529291][ C0] common_startup_64+0x13e/0x147 [ 754.529314][ C0] [ 754.738999][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 754.746484][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 754.759089][ T32] Tainted: [L]=SOFTLOCKUP [ 754.763878][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 754.775346][ T32] Call Trace: [ 754.779227][ T32] [ 754.784216][ T32] vpanic+0x56c/0xa60 [ 754.789220][ T32] ? __pfx___schedule+0x10/0x10 [ 754.794530][ T32] ? __pfx_vpanic+0x10/0x10 [ 754.799397][ T32] ? __pfx_console_unlock+0x10/0x10 [ 754.806768][ T32] panic+0xc5/0xd0 [ 754.810721][ T32] ? __pfx_panic+0x10/0x10 [ 754.815955][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 754.822311][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 754.828988][ T32] watchdog+0x1023/0x1030 [ 754.833690][ T32] ? watchdog+0x21a/0x1030 [ 754.838655][ T32] kthread+0x388/0x470 [ 754.844053][ T32] ? __pfx_watchdog+0x10/0x10 [ 754.849175][ T32] ? __pfx_kthread+0x10/0x10 [ 754.854744][ T32] ret_from_fork+0x51e/0xb90 [ 754.859796][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 754.865543][ T32] ? __switch_to+0xc7d/0x1450 [ 754.870321][ T32] ? __pfx_kthread+0x10/0x10 [ 754.876553][ T32] ret_from_fork_asm+0x1a/0x30 [ 754.881984][ T32] [ 754.888371][ T32] Kernel Offset: disabled [ 754.893400][ T32] Rebooting in 86400 seconds..