last executing test programs: 1m25.682521874s ago: executing program 4 (id=2892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006300)={r1, 0xffffffffffffffff, 0xb, 0x0, @void}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/251, 0xfb}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001b00)=""/111, 0x6f}, {&(0x7f0000001b80)=""/152, 0x98}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/165, 0xa5}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000002d80)=""/208, 0xd0}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000003080)=""/222, 0xde}, {&(0x7f0000003180)=""/246, 0xf6}], 0x9}, 0x81}], 0x4, 0x40010132, 0x0) 1m25.376949726s ago: executing program 4 (id=2893): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x7a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) syz_io_uring_setup(0x21c1, &(0x7f0000000340)={0x0, 0xca23, 0x82, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000000)) close(0x3) 1m25.167495117s ago: executing program 4 (id=2894): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES8=r2, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r4], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r7, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r7}}, 0x1c) rmdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x0, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x4}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff707900082402ff200126ff09058503"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 1m20.829877455s ago: executing program 4 (id=2905): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8c", 0x1d, 0x20000000, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES32=r4], 0x6d) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r7, r6, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a300)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x150, 0x0, 0xfffffffffffffff9, [{{0x2, 0x1, 0x6, 0x800, 0x6, 0x4, {0x0, 0x56541a3c, 0x7, 0x8, 0x4, 0x1ff, 0xb28d, 0x0, 0xffff, 0x4000, 0x0, r2, r3, 0x8, 0x6}}, {0x4, 0x7, 0x1, 0x0, '.%'}}, {{0x6, 0x3, 0x5, 0x7fffffffffffffff, 0x3, 0x0, {0x5, 0x0, 0x7000, 0x6, 0x6, 0x6, 0x3, 0x8, 0x5e, 0x6000, 0x0, r2, r3, 0x8, 0x8}}, {0x6, 0x7, 0x7, 0x4e24, 'user_id'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) unshare(0x2c020400) r8 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x45, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x1, 0x1, 0x1, 0xd0, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0xee, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x1, 0x1, [{0x7, 0x8}]}], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x0, 0x1, 0xc, {0xf, 0x25, 0x1, 0xb, "3cd43f4c3f9122b1722c01"}}}]}}}}}]}}, 0x0) r10 = syz_pidfd_open(r8, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setns(r12, 0x10000000) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, 0x0, 0x0) 1m18.899648215s ago: executing program 4 (id=2913): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1, 0x1) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 1m17.624249717s ago: executing program 4 (id=2921): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x9, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m17.000561061s ago: executing program 32 (id=2921): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x9, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 9.383588961s ago: executing program 5 (id=3093): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfdffffff}, 0x94) 9.052089936s ago: executing program 5 (id=3095): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000dc0)={0x2c, &(0x7f0000000140)={0x60, 0x9, 0x4e, {0x4e, 0x24, "028b57665f04f869fd2a60b28240ee86f49b84332d4f89d807010dc31e0734a89a4e1ffa8ee4bdad3c0ceb287e0a09efd542cf90cc0b57c6bee2e481c815379b0158ebb25b89cf3158b15a3d"}}, &(0x7f0000000c00)={0x0, 0x3, 0x94, @string={0x94, 0x3, "53b3b1fb07b11825418cc2ef7cb2039209cd40990a5553486909134a0c279eae5dde06b5fc39a09789a60d7fd5b41498ef9d74bc12e1ccc90f709da3e900bd6c1fab09b23317234e2ce66b94fd3dcdc3df3332413a0c5e37bdeafc851c192dad8c526eb0f82105a1b56954fc18f59ef873b738ab0946c53d1686d9de5bd175dca519afae816ea97386b182a9395c0b091e03"}}, &(0x7f0000000cc0)={0x0, 0xf, 0x42, {0x5, 0xf, 0x42, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x3, 0x0, 0x8, [0xf, 0x60, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "754f9226e35bc564deed88440f039e72"}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x10, 0xc, "85484472", "c9910693"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x10, 0x3, 0x6, 0x7, 0x5}}}, &(0x7f0000001540)={0x84, &(0x7f0000001040)={0x0, 0xe, 0xff, "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"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001200)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001240)={0x20, 0x0, 0x8, {0x40, 0x8, [0x78f]}}, &(0x7f0000001280)={0x40, 0x7, 0x2, 0xa6}, &(0x7f00000012c0)={0x40, 0x9, 0x1, 0x8d}, &(0x7f0000001300)={0x40, 0xb, 0x2, "ebda"}, &(0x7f0000001340)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000001380)={0x40, 0x13, 0x6}, &(0x7f00000013c0)={0x40, 0x17, 0x6}, &(0x7f0000001400)={0x40, 0x19, 0x2, "d050"}, &(0x7f0000001440)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001480)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000014c0)={0x40, 0x1e, 0x1}, &(0x7f0000001500)={0x40, 0x21, 0x1, 0x1}}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) (async) r2 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbaf5) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) r3 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000002700)={{0x0, 0x5, 0x9, 0x8000000, 'syz0\x00', 0x9}, 0x3, 0x200, 0x0, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f00000026c0)=['\x00'], 0x1}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.068583524s ago: executing program 3 (id=3049): read(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0x1, &(0x7f0000001000)=@raw=[@ldst={0x3, 0x3, 0x6, 0xb, 0x0, 0xc}], &(0x7f0000001040)='syzkaller\x00', 0xfffffffc, 0x4b, &(0x7f0000001080)=""/75, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0xe, 0x7, 0x702}, 0x10, 0x9765, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x13, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}, {}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001300)='GPL\x00', 0x0, 0x1000, &(0x7f0000001340)=""/4096, 0x100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x5, 0x2, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[0x1], 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000025c0)={@ifindex, 0xf, 0x1, 0x3, &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002500)=[0x0, 0x0], &(0x7f0000002540)=[0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = memfd_secret(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002600)={@fallback, r0, 0x5, 0x16, r1, @void, @value=r3, @void, @void, r2}, 0x20) close_range(r3, r0, 0x2) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000002640)) sendmsg$kcm(r1, &(0x7f0000002840)={&(0x7f0000002680)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x3, 0x3, 0x1, {0xa, 0x4e20, 0xff, @private2, 0x5}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)="0f1b08ed9bd096d86c80c0af0be3fe2919b93d055435304787e9a66687993a520c64ee4840a886b0a3aede4fb389c6b0a7ad9f8d28fa2ee634879e361fe031ebe86f873a17ac1b38a11e2ed5685909b14d3235bf1a761b2a880c81f1c82a05d91893e4ad6b5f9ed3d54ffa5312cbffb2c49b5f55bc782d8dd39c82822ac555e7f404a66025e07c6ead43585e765f0cd0724e207c219f146dd62a8409453c052ab7f5a4b631626911916ec9ecd41001b427d503ecca31cc59dd6f49c5a631d096ac8786cd5755ab1014435bb4462527711a168429b1b749d92d48214834d0ba0be100", 0xe2}], 0x1}, 0x4000) mknodat(r3, &(0x7f0000002880)='./file0\x00', 0x10, 0x6) io_uring_enter(r3, 0x42f1, 0x2330, 0x22, &(0x7f00000028c0)={[0x8000000000000000]}, 0x8) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000002900)={{0x1, 0x800, 0xa}, 'syz0\x00', 0x25}) recvfrom(r3, &(0x7f0000002a00)=""/231, 0xe7, 0x40, &(0x7f0000002b00)=@phonet={0x23, 0xe, 0x3, 0x7}, 0x80) 7.749768367s ago: executing program 3 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x718, 0x0, 0x550, 0x0, 0x130, 0x430, 0x648, 0x648, 0x648, 0x648, 0x648, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0xa9, 0x2, 0x0, [0x2, 0x2, 0x1, 0xfff1, 0x1, 0x1, 0xff, 0x8, 0x9, 0x4, 0x400, 0x9, 0x8, 0x862, 0xf801, 0xfe01], 0x3}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x9, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0xffffff00], 'pimreg\x00', 'veth0_vlan\x00', {0xff}, {}, 0x2e, 0x3, 0x1, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x4, 0x7], 0x3b79, 0x1, 0x5, [@local, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1}], 0xd}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ipv6header={{0x28}, {0x4, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xe, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c136000001c1a60000d30a000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000069000b0000000000b6e45db1a7f238"], 0x18}}, 0x4000000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0xfffe}], 0x1) 7.679129818s ago: executing program 3 (id=3101): syz_emit_ethernet(0x6e, &(0x7f0000000940)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6000000000383a00fe8040000000000000000000000000000000000000000000000000000102009078000005dc608cb02b00002fff00000000040000000000000000000000aa1d000d7168000000000000000000000000000000000000368837b007ae5eff66e1cf7c7b5a4cd43896b58bff6bec8cd14a8dc1670b00bd0e6b3818858413b52dd9a79720e1cc1a64846ba659a5c3d86e0a856a7ed288b169a215a78d5f8d5f00524151737b4c6732f3a4a880f766bf021ed0b55c2c6bdfca55a79c65667403ab55920f66dbe1c16088ecce6c61c55be3ed1c2d365d56b58c8847bc6b9753aa7e6255ff53a565503dc89af754aa8a83af2fd2768b89d6d14cd0cd6c55084c4f3911fead9a922e37743af27639d2599bdbd860a1688586cc654ff245536226fbc56f253f6629c4c63c97"], 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x7, @empty, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000580)='-', 0x1}], 0x1, 0x1) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x6, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0x10, 0x29, 0x0, @multicast2, @remote}}}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000) sendmmsg(r4, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x4000045) splice(r2, 0x0, r3, 0x0, 0xfffd, 0xa) 7.270399131s ago: executing program 3 (id=3102): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync_file_range(r0, 0x9, 0x1, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000002bc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40051}, 0x20040010) bind$alg(r1, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0xff39, 0x880}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002980)={{r4, &(0x7f00000002c0)='ecb-camellia-aesni\x00', 0x100, &(0x7f0000000300)={@align=0x100, {0xff, 0x7, 0x245, 0x100000000}}, 0xfffffffb, &(0x7f0000000340), &(0x7f0000000380)}, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002a00)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYRES64=r5], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fd", 0xa4}], 0x3}], 0x1, 0x40800) 7.243281611s ago: executing program 5 (id=3104): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) unshare(0x2c060000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) unshare(0x2a040700) 6.938036693s ago: executing program 5 (id=3106): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40480d0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{0x8138}], 0x1, 0x9, 0x20, 0x0, 0x0, 0x3f}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, 0x0) 6.549160797s ago: executing program 1 (id=3111): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x149a82, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) sendfile(r0, r0, 0x0, 0xb) 6.321671091s ago: executing program 1 (id=3113): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e1e, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$inet(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2000030000000a00000000000000000200000400098000"/32], 0x20}], 0x1, 0x0, 0x0, 0x40080}, 0x44004) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b000000038eb7528dbf19963b0d69d5948b996a5182354ace875f20bb52ad79ce8d1cd3e7a1284252a11cca57c3e15c054cc7f3e5ad283cdb335d8832afbaa58d1a8573d9c9ae7a9c6e29fc25fa39ce7c6ba349f6b25facd1d004fdc62dba213dbc39f3ef47da39c9e", @ANYRES16, @ANYBLOB="01002dbd7000fbdbdf250400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x41001}, 0x8000) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r5, &(0x7f0000000340)={0x6, 0x2, 0x3, 0x0, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) 5.605867383s ago: executing program 3 (id=3116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@getnetconf={0x14, 0x52, 0x800, 0x8070bd25, 0x25dfdbfc}, 0x14}}, 0x20040880) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r3, 0x0, 0x0, 0x100, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000140)={0x2, 0x0, @ioapic={0xe6eff000, 0x9fc, 0x0, 0x20008000, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x80}, {0x0, 0x3, 0x4, '\x00', 0xc}, {0x0, 0x8, 0xf0, '\x00', 0xd}, {0x2, 0x8f, 0x6, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x9, '\x00', 0x78}, {0xb, 0x6, 0x7, '\x00', 0x2}, {0x6, 0x2, 0x9, '\x00', 0x1}, {0x9, 0xa, 0x40, '\x00', 0x6}, {0x9, 0x1, 0x5, '\x00', 0x1}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0x3, 0x1, 0x4, '\x00', 0x7f}, {0x9, 0x5, 0x7, '\x00', 0x2}, {0x1e, 0xf, 0x5, '\x00', 0x9}, {0x2, 0x8, 0x4c, '\x00', 0x7}, {0xa, 0x5, 0x4}, {0x4, 0x2, 0x4f, '\x00', 0xc}, {0x5, 0x4, 0x2, '\x00', 0x40}, {0x6, 0x6, 0x8b, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x88}, {0x2, 0x2, 0x99, '\x00', 0x85}, {0x6, 0x8, 0x9c, '\x00', 0x4}, {0x7f, 0x3, 0x80, '\x00', 0xd3}, {0x0, 0x4, 0x3a, '\x00', 0x5}]}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x254, 0x24, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0xfff2, 0xd}, {0x10, 0x18}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x8, 0x7f, 0x5, 0xa}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4e9}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5c, 0x5, 0x20, 0x101, 0x2, 0x7, 0x7, 0x2}}, {0x8, 0x2, [0xc, 0x9]}}, {{0x1c, 0x1, {0x4, 0x4, 0x3ff, 0x1, 0x0, 0x9, 0x3, 0x2}}, {0x8, 0x2, [0xb9, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7c6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x86ec, 0xe9c, 0x3, 0x2, 0x9, 0x7}}, {0x12, 0x2, [0x9fd, 0x101, 0xac4, 0x3, 0xc, 0x8, 0x7]}}, {{0x1c, 0x1, {0x6, 0x3, 0xf44, 0x5, 0x2, 0x9, 0x0, 0x2}}, {0x8, 0x2, [0x351, 0x6]}}, {{0x1c, 0x1, {0x6, 0x40, 0x1, 0xffffff7f, 0x0, 0x3, 0x7f, 0x3}}, {0xa, 0x2, [0x6, 0xb, 0xfff8]}}, {{0x1c, 0x1, {0x5, 0x7f, 0x5, 0xfff, 0x0, 0x10, 0x5, 0x4}}, {0xc, 0x2, [0x72, 0x1, 0x3, 0xa6]}}, {{0x1c, 0x1, {0xc, 0x7, 0x0, 0x0, 0x2, 0x5, 0x4, 0x4}}, {0xc, 0x2, [0x3, 0x2, 0x2, 0x3c16]}}, {{0x1c, 0x1, {0x99, 0x2, 0x0, 0x3, 0x1, 0xa, 0x9, 0x7}}, {0x12, 0x2, [0xb, 0x6, 0x1, 0x0, 0x6, 0x8, 0x3ff]}}, {{0x1c, 0x1, {0x3, 0x7, 0xffff, 0x7, 0x2, 0xdbe, 0x3, 0x6}}, {0x10, 0x2, [0xffff, 0xfffa, 0x401, 0x401, 0x7, 0x3ff]}}, {{0x1c, 0x1, {0x9, 0xab, 0x3, 0xfffffffb, 0x0, 0x6, 0x8, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0x9, 0x0, 0x0, 0x2, 0x2, 0x3, 0x7f, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xc3, 0x2, 0x737, 0x10, 0xc5e5980bafd037b3, 0x1ff, 0x5, 0x1}}, {0x6, 0x2, [0xae34]}}]}, @TCA_RATE={0x6, 0x5, {0x81, 0x1}}]}, 0x254}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120111017bd6dd2004231a028cc7010217010902240001a40b008b0904c30102cfa0320909050a0420000207a209058c0010000a0806"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x38, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 4.443655076s ago: executing program 5 (id=3119): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00c0000904eb02027f9c1f000905060220000200020905a229"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0}, 0x68) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r4, 0x1f, 0x0, 0x1000041}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.766884812s ago: executing program 1 (id=3120): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030302d3034303030302c757365725f69643d92fcd2d52905075e006fc68f650c77c3fb268fe5dbfe49bc911b62f19f26a200c43dd6994b38f217ec26a0501db2c3f025e5634a0607a0d352dc6d86387b7340", @ANYRES64=0x0, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRES16=r2], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$netlink(r3, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000600)=ANY=[], 0x38}, {0x0}], 0x2}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x6840) syz_fuse_handle_req(r2, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/4107, 0x100b}], 0x3) 2.84157783s ago: executing program 1 (id=3122): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x6a040000) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_GET_TSC_KHZ_vm(r4, 0xaea3) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001300)=""/4096, 0x1000, 0xffffffffffffffff) 2.706583883s ago: executing program 2 (id=3124): read(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0x1, &(0x7f0000001000)=@raw=[@ldst={0x3, 0x3, 0x6, 0xb, 0x0, 0xc}], &(0x7f0000001040)='syzkaller\x00', 0xfffffffc, 0x4b, &(0x7f0000001080)=""/75, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0xe, 0x7, 0x702}, 0x10, 0x9765, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x13, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}, {}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001300)='GPL\x00', 0x0, 0x1000, &(0x7f0000001340)=""/4096, 0x100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x5, 0x2, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[0x1], 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000025c0)={@ifindex, 0xf, 0x1, 0x3, &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002500)=[0x0, 0x0], &(0x7f0000002540)=[0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = memfd_secret(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002600)={@fallback, r0, 0x5, 0x16, r1, @void, @value=r3, @void, @void, r2}, 0x20) close_range(r3, r0, 0x2) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000002640)) sendmsg$kcm(r1, &(0x7f0000002840)={&(0x7f0000002680)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x3, 0x3, 0x1, {0xa, 0x4e20, 0xff, @private2, 0x5}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)="0f1b08ed9bd096d86c80c0af0be3fe2919b93d055435304787e9a66687993a520c64ee4840a886b0a3aede4fb389c6b0a7ad9f8d28fa2ee634879e361fe031ebe86f873a17ac1b38a11e2ed5685909b14d3235bf1a761b2a880c81f1c82a05d91893e4ad6b5f9ed3d54ffa5312cbffb2c49b5f55bc782d8dd39c82822ac555e7f404a66025e07c6ead43585e765f0cd0724e207c219f146dd62a8409453c052ab7f5a4b631626911916ec9ecd41001b427d503ecca31cc59dd6f49c5a631d096ac8786cd5755ab1014435bb4462527711a168429b1b749d92d48214834d0ba0be100", 0xe2}], 0x1}, 0x4000) mknodat(r3, &(0x7f0000002880)='./file0\x00', 0x10, 0x6) io_uring_enter(r3, 0x42f1, 0x2330, 0x22, &(0x7f00000028c0)={[0x8000000000000000]}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002980), 0x200800) recvfrom(r3, &(0x7f0000002a00)=""/231, 0xe7, 0x40, &(0x7f0000002b00)=@phonet={0x23, 0xe, 0x3, 0x7}, 0x80) 2.651156539s ago: executing program 2 (id=3125): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x8000}, {r0, 0x10}], 0x2, 0x0, 0x0, 0x0) (async) fcntl$setpipe(r0, 0x407, 0x800) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x8000000, 0x9fc, 0x0, 0x8000, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x80}, {0x0, 0x4, 0x4, '\x00', 0xc}, {0x0, 0x8, 0xf0, '\x00', 0xd}, {0x2, 0xf, 0x6, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x9, '\x00', 0x78}, {0xb, 0x6, 0x7, '\x00', 0x2}, {0x6, 0x2, 0x9, '\x00', 0x1}, {0x9, 0xa, 0x40, '\x00', 0x6}, {0x9, 0x1, 0x5, '\x00', 0x1}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0x3, 0x1, 0xe, '\x00', 0x7f}, {0x9, 0x5, 0x7, '\x00', 0x2}, {0x1e, 0x10, 0x5, '\x00', 0x9}, {0x2, 0x8, 0x4c, '\x00', 0x7}, {0xa, 0x5, 0x4}, {0x4, 0x2, 0x4f, '\x00', 0xc}, {0x5, 0x4, 0x2, '\x00', 0x40}, {0x6, 0x6, 0x8b, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x88}, {0x2, 0x2, 0x99, '\x00', 0x85}, {0x6, 0x8, 0x9c, '\x00', 0x4}, {0x7f, 0x3, 0x80, '\x00', 0xd3}, {0x0, 0x4, 0x3a, '\x00', 0x5}]}}) (async) rmdir(&(0x7f0000000000)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000003c0)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x2, 0x3, 0x40, 0x8}, 0x20) 2.626362416s ago: executing program 1 (id=3126): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5ad2, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = dup2(r2, r1) readv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x2}, 0x1, 0x2, 0x0, 0x0, "69908b952e0f9a67"}, 0x10}}, 0x408d1) r5 = accept(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x80) close(r5) 2.488910485s ago: executing program 2 (id=3127): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync_file_range(r0, 0x9, 0x1, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000002bc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40051}, 0x20040010) bind$alg(r1, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x2000000, 0x880}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002980)={{r4, &(0x7f00000002c0)='ecb-camellia-aesni\x00', 0x100, &(0x7f0000000300)={@align=0x100, {0xff, 0x7, 0x245, 0x100000000}}, 0xfffffffb, &(0x7f0000000340), &(0x7f0000000380)}, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002a00)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYRES64=r5], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fd", 0xa4}], 0x3}], 0x1, 0x40800) 2.447571926s ago: executing program 0 (id=3128): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x3, 0x0, 0x41ff7484, 0x0}, {0x1, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xf3f, 0x0}, {0x4, 0x15, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x6ba, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.386429303s ago: executing program 3 (id=3129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, '.\x02\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000002000000000000000000000000a00000000000200", @ANYRES32=0x0], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x68) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r6, &(0x7f0000000000)='./file0\x00', 0x2) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000380)="0f789852a35d03b3a84baa280c2808a933debeda31aadd58c063507f2319f3e1dcbfdf9ce0d37cabf9008b012679d44de96b3569bfbb42c1b2c52d73d440b2ce303c3dd8b6d8282736c47af786c8769fdbe737ec1f38e4cf7a4a72a18cc227ccba2bf9790afdc521debf590df68780b2b3dcdadf2821adc0be51338948aa023433ab3945dc", 0x85, 0x76b5) fcntl$lock(r7, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xfffffffffffffffc) 2.146192525s ago: executing program 1 (id=3130): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e1e, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2000030000000a00000000000000000200000400098000"/32], 0x20}], 0x1, 0x0, 0x0, 0x40080}, 0x44004) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b000000038eb7528dbf19963b0d69d5948b996a5182354ace875f20bb52ad79ce8d1cd3e7a1284252a11cca57c3e15c054cc7f3e5ad283cdb335d8832afbaa58d1a8573d9c9ae7a9c6e29fc25fa39ce7c6ba349f6b25facd1d004fdc62dba213dbc39f3ef47da39c9e", @ANYRES16, @ANYBLOB="01002dbd7000fbdbdf250400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x41001}, 0x8000) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r6, &(0x7f0000000340)={0x6, 0x2, 0x3, 0x0, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) 2.145834482s ago: executing program 0 (id=3131): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x6, 0x3959, 0x64, 0x5, 0x3}, {0xc000000b, 0x5067f620, 0x1, 0xffffffff, 0xd5aa}]}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x86c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) 1.831340539s ago: executing program 0 (id=3132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0xc000) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000380)={'\x00', 0x3, 0x96c, 0xffff, 0x8, 0xdb, 0x0}) capset(&(0x7f0000000100)={0x20071026, r7}, &(0x7f0000000400)={0x1, 0x5, 0xffff, 0x2, 0x1, 0x2a}) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.332904403s ago: executing program 2 (id=3133): userfaultfd(0x801) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.178370234s ago: executing program 5 (id=3134): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000000000000000002d0009058103000400ff03"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) socket$key(0xf, 0x3, 0x2) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 985.659734ms ago: executing program 2 (id=3135): read(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0x1, &(0x7f0000001000)=@raw=[@ldst={0x3, 0x3, 0x6, 0xb, 0x0, 0xc}], &(0x7f0000001040)='syzkaller\x00', 0xfffffffc, 0x4b, &(0x7f0000001080)=""/75, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0xe, 0x7, 0x702}, 0x10, 0x9765, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x13, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}, {}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001300)='GPL\x00', 0x0, 0x1000, &(0x7f0000001340)=""/4096, 0x100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x5, 0x2, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[0x1], 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000025c0)={@ifindex, 0xf, 0x1, 0x3, &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002500)=[0x0, 0x0], &(0x7f0000002540)=[0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = memfd_secret(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002600)={@fallback, r0, 0x5, 0x16, r1, @void, @value=r3, @void, @void, r2}, 0x20) close_range(r3, r0, 0x2) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000002640)) sendmsg$kcm(r1, &(0x7f0000002840)={&(0x7f0000002680)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x3, 0x3, 0x1, {0xa, 0x4e20, 0xff, @private2, 0x5}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)="0f1b08ed9bd096d86c80c0af0be3fe2919b93d055435304787e9a66687993a520c64ee4840a886b0a3aede4fb389c6b0a7ad9f8d28fa2ee634879e361fe031ebe86f873a17ac1b38a11e2ed5685909b14d3235bf1a761b2a880c81f1c82a05d91893e4ad6b5f9ed3d54ffa5312cbffb2c49b5f55bc782d8dd39c82822ac555e7f404a66025e07c6ead43585e765f0cd0724e207c219f146dd62a8409453c052ab7f5a4b631626911916ec9ecd41001b427d503ecca31cc59dd6f49c5a631d096ac8786cd5755ab1014435bb4462527711a168429b1b749d92d48214834d0ba0be100", 0xe2}], 0x1}, 0x4000) mknodat(r3, &(0x7f0000002880)='./file0\x00', 0x10, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002980), 0x200800) recvfrom(r3, &(0x7f0000002a00)=""/231, 0xe7, 0x40, &(0x7f0000002b00)=@phonet={0x23, 0xe, 0x3, 0x7}, 0x80) 691.01697ms ago: executing program 2 (id=3136): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x6, 0xfb, 0x3, 0x4, 0x9, 0x8, 0x5, 0x1, 0x1, 0x7f, 0x3, 0xf8, 0xf9, 0x7, 0x2, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r3, 0x0, 0x0, 0x4881, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getaddr={0x40, 0x16, 0x200, 0x70bd25, 0x25dfdbfc, {0x2, 0x40, 0x9, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0x12}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 605.284768ms ago: executing program 0 (id=3137): syz_io_uring_setup(0x4000000b, &(0x7f00000002c0)={0x0, 0x4200002b, 0x800, 0x1, 0x100020b}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) (async) syz_io_uring_setup(0x114, &(0x7f0000000140)={0x0, 0xd9ae, 0x10, 0x4, 0x312}, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) 237.819396ms ago: executing program 0 (id=3138): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async, rerun: 32) syz_usb_connect(0x6, 0x61d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100028ae01f10d8165372a78b0102030109020b06030b0580080904010806552ea5000a24020209000100040809050400ff0301fe04610e56de7ceb7d7b175664356f39b327044088aaa4050f636dd4548c21a54026c388d25bf54075f9765e537dc3d958421f0dacaf5149419730e3601a79a019413b713c6f179b713afd9cef23eff6c67c4c773b9a654105a77d6c5bb08576fb7b6c07250108010a00090509000004f7100307250104af0a000725010c06ff07090506034802ed810a0905070040000f7ff709050c100800013c000725010000ff7f09050f120004a32209bc16c01d7a3a66fb6a56719b090e7a07250100037b26c024407832ded95d3ae7937165fe2d990fc259677665dea2556397bea8e9f9ac7eaff7533b840cf24a4befce5b706f733b7ab5685d1aae7626600a99d50316c58922f5a8929f607174365cc7089c313bfc187afb84ae933b964c0fca0a3b460ebd0d3bb788f834e023d43075c54dc9f9bdf38aa998ac0406a511517014be26ff9ab65f55005c1c0106452a2aa470ba84de3f72a458f12cbc0120d36c9efb3f0fb252f95c11c85d7c93bdd6a9ae0369246d4d398df19a102985a8285fb0d9c293090415030623ac8b010921040008012261030924060001f0fbd85a052400ff7f0d240f010080000000048f0a0506241a01000009050c3f100001024007250100fe030007250108f407000905060320001bfa06072501040607005d210d04d56a42c92a881b3a7dab3667ddf359536f918503f5701e078ed7e3ab503d75e704b0fe0b58143341cd3247a95e1d170cca9fe67fd66e5bef9a1efe8aa0bacdfa396eadcf5a707007dd10fcfb479f0905040020000607591311bd62a1617509a62bbe4f5ebe7d6c50c0363f0e08ec45805fceee27c2c9f8d90dd787e938a7d442bcb9b58cd8af22ea41abfbbe132240a985d2618eccaeb87284676146da8ee58ad3a1aa7f3f85c9fa5c09050810200063fa9409050b1040000a050507250108090100300872007fac83baec50c98dddfc52e5a42bd51a05566e780a4f7fc3cb94c4d869b48bedc418467c5e7715182e80a3780905020320000308ff072501004004000904b4400707507f0209050f0cff030102fe072501080e000809050100ff030203cf650d6b33eddf9adced68a3bc20c850f9fb193de2e734b19621d270c32553baeb18233748e8824bfee276cdd12dc6c9a7e93601794affb20361d4e389ec76db1c1dd1dd25ae7fe2dc3597aeb5a4350688b37d1642f6f5ab7a68007952bae4bf4babaa4d9972250c6e8af5308e43cf9799f5c04f965e0514c24021759c23a07a72f1ce3476270bddb1b99e090580000004ed0508e022a212d2903137445e25432c20933f430a6eac745ba4261892262d36c44e54f97bbbaf929ac40b94e08b24ef1b1c514ab1fc5a09ea3196ae92e9beb724a946633bd39a71b1e00d5364f493a881b3279921cbb15e19c9e04d9eaa31a3dbc2215796a3f47b6c42b292a5f7d7510527dd376983603c71dec63e52796a11d7ce0d1e9f8df60c57f6c0254cd5404bbfd2afcd2aba1f4a2a456c9fc48022fe9e952ccbbdc9b93ecef81c5a90f49076979242ea1911abec06dde05fa488629ceaeb0bf0fe0ed44b1578d351b5b7be38cddfd8e71d2fed15c8d1711cced9357e045c0152bff737a55b8c3f79820db00725010cfb0200090500000800022d7f5f0320d1728e82ae8f16e40a19d7d5762849e1349099a099b943cdd916dc2b9e1a304aa1f2df71a4bfd35f0a829f048190f9df44452aae8d300810ec2e3c6e936f1e0e334730251b4819949f36651658ea5eaf7f3b0ef22146257b6657b05a0725010400782709050100080002072d9e03863a2b0a392bd17ede3a4f62b3690aa70543c0c893561f836f5bae3144b8f9ec6f4cc0bbd300b5a0af9ab006aee6d6d64bc94bbc1c80dc9652e8e5eec99a13557638b2edf864e9e6741dd563df8bd765b66201cab216f0a32e276bcd0369a9c102d972007e0800d64f7dbd01b0e8564013d97092e9760b3e1bd37a7042e442966e952ffd2081e5188140e2b328e1e81c4d60b44d460af49406915ab309050e000800080205072501040800043106fd117741a66845b66f9b1ff7210643f44cf69315abb9300a89110b4bd12e1ab661f3fe7265fd2032f5f31d1709050c100800070480072501040306000c000d00ad5e1e9468197e91f075308a78fc18556ab7826757833ee3e990b2a1e283c38c237bac9cf52afe200000000000000000000000d7b385af57c942908095773213f18f7eda95134943b67b9c30d386daeb06d23758b8c96f304036de6c8865f47f5aa705d9188f30eda5fad90bab078a9b3d6600931ff083298634811330"], &(0x7f0000000cc0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x310, 0x5, 0x8, 0x1, 0xff}, 0x17a, &(0x7f0000000180)=ANY=[@ANYBLOB="050f7a010697100b2a28b73c41cdb52865da319dfd1f1184f63f6c1ef40f9a1d263a687a8a9d23ad0fb10ad15f533840ea6702da1a33db201d1fc38138a2ae19b00411b1c4f28e45660873456014a6699da63bb3d60edcbd87b42f510c72eaebc2b31fe578d5fbdb39ed5b93937776e35903bbdf4507db4601fff93d7435d34da55e25969786f41d5df0dee81b8debd5afaab041380b861b8ba36e0e07100206710200ac1001d300f537d98e3707a62e38674300a2fc292749384ca1bf10163a0803b357a4cd5a7c86a1495e5f1c799dcc6fb407b8bbc819bb597f327c20035f54fd729822363d6b5c23d5c4240cfa90fe296ddcf068662e13c0077448e95c4112bf48b547f77f0befd47bd001d5d59b0815f4b7d3700da3c9f2d93fd096ddebcf36b42467ca19e7b46ebb72c6cb0146e410731cb091636b4e8e92f3e9e84d4f702b3a8f2846655c0598617be76b2b03100b14100407a3fc92688f944709edd27bc62d0140ca14100405888969e833af53fc287bfb42bb00ee2a3c56439112666294c7ad87e05e21f8b8d8ef832f49bf4b3fe3e15b70a6964ff031492197d36592d51690b38962e9fd35fb357a0c2c599938f4c014d789f8bb01c807a6019c2396faafacf37c4439ec78e617fa806a26f21c288c7184be20552fd059b5c84fc58bfb9ff2ce5d7b661b222afe6b931bdf48"]}) (async, rerun: 32) io_uring_setup(0x1159, &(0x7f0000000440)={0x0, 0x2dd6, 0x40, 0x3, 0x81000117}) (async, rerun: 32) syz_usb_connect$uac2(0x1, 0xa8, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x812}}]}) (rerun: 32) 0s ago: executing program 0 (id=3139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x3c0, 0x140, 0x1000, 0x6, 0x2, 0x0, {0x0, 0x9}, {0x4000350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4000005, 0x400, 0x1}, 0x1, 0x100, 0xfff, 0xd614, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x3, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000000c0)=0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073}]}) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xffff0000, 0x51, 0x0, 0x0, 0x9, 0x8, 0x5, 0x4, 0x3, 0x2, 0x9, 0x1ff, 0x7, 0x9, 0x8, 0x0, {0x8, 0x34}, 0x7, 0x9}}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{0x62, 0x6}, {0xf, 0x4}, 0x2, 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRESHEX=r3, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) syz_usb_control_io(r6, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): pwc: recv_control_msg error -71 req 06 val 0600 [ 720.049858][ T898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 720.052898][ T7016] pwc: recv_control_msg error -71 req 04 val 1500 [ 720.097851][ T7016] pwc: recv_control_msg error -71 req 02 val 2500 [ 720.109716][ T898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 720.137925][ T7016] pwc: recv_control_msg error -71 req 02 val 2400 [ 720.160696][ T7016] pwc: recv_control_msg error -71 req 02 val 2600 [ 720.169774][ T898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 720.186122][ T7016] pwc: recv_control_msg error -71 req 02 val 2900 [ 720.208209][ T7016] pwc: recv_control_msg error -71 req 02 val 2800 [ 720.231380][ T7016] pwc: recv_control_msg error -71 req 04 val 1100 [ 720.239746][ T898] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 720.252050][ T7016] pwc: recv_control_msg error -71 req 04 val 1200 [ 720.267602][ T7016] pwc: Failed to power off camera (-71) [ 720.290401][T15348] cifs: Unknown parameter 'fd' [ 720.299846][ T7016] pwc: Registered as video103. [ 720.314713][ T898] mceusb 4-1:0.0: Registered 獦 with mce emulator interface version 1 [ 720.342142][ T7016] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 720.372605][ T898] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 720.397287][ T7016] usb 2-1: USB disconnect, device number 107 [ 721.250230][ T898] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 721.399648][ T898] usb 3-1: Using ep0 maxpacket: 8 [ 721.403757][ T898] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 721.403786][ T898] usb 3-1: config 179 has no interface number 0 [ 721.403861][ T898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 721.403890][ T898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 721.403929][ T898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 721.403958][ T898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 721.404018][ T898] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 721.404063][ T898] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 721.404089][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.409246][T15372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 721.820674][T15372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.836735][T15372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.874922][T15390] cifs: Unknown parameter 'fd' [ 722.037031][ T7015] usb 3-1: USB disconnect, device number 90 [ 722.037076][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 722.051504][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 722.285799][T15400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.359974][ T898] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 722.388890][T15400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.411144][T15400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.432986][T15400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.541989][ T898] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 722.568208][ T898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.602106][ T898] usb 5-1: config 0 descriptor?? [ 722.630252][ T898] pwc: Creative Labs Webcam 5 detected. [ 723.034887][ T898] pwc: send_video_command error -71 [ 723.043975][ T898] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 723.054449][ T898] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 723.070815][ T898] usb 5-1: USB disconnect, device number 114 [ 723.128398][T15414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.143053][ T5924] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 723.155208][T15414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.303964][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.322728][ T5924] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 723.343296][ T5924] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 723.353628][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.367113][ T5924] usb 1-1: Product: syz [ 723.371841][ T5924] usb 1-1: Manufacturer: syz [ 723.383797][ T5924] usb 1-1: SerialNumber: syz [ 723.396451][ T5924] usb 1-1: config 0 descriptor?? [ 723.625269][T15409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2750'. [ 723.671514][ T898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 723.720666][T15409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.753513][T15409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.764301][T15422] cifs: Unknown parameter 'fd' [ 723.795940][ T898] usb 1-1: USB disconnect, device number 99 [ 723.900975][ T7025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 724.022939][T15427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 724.029557][T15427] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 724.057829][T15427] vhci_hcd vhci_hcd.0: Device attached [ 724.239833][ T898] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 724.291471][T15434] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2757'. [ 724.320960][ T898] usb 37-1: new full-speed USB device number 12 using vhci_hcd [ 724.601861][T15442] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 724.608516][T15442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 724.639047][T15442] vhci_hcd vhci_hcd.0: Device attached [ 724.666028][T15441] openvswitch: netlink: Message has 1 unknown bytes. [ 724.708612][T15441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.059987][T15445] vhci_hcd: connection closed [ 725.073549][ T7249] vhci_hcd vhci_hcd.2: stop threads [ 725.095470][T15430] vhci_hcd: connection reset by peer [ 725.118290][ T7249] vhci_hcd vhci_hcd.2: release socket [ 725.135487][ T7249] vhci_hcd vhci_hcd.2: disconnect device [ 725.153858][ T7249] vhci_hcd vhci_hcd.2: stop threads [ 725.159220][ T7249] vhci_hcd vhci_hcd.2: release socket [ 725.166132][ T7249] vhci_hcd vhci_hcd.2: disconnect device [ 725.722358][T15462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.770767][T15462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.320862][ T5924] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 726.506780][ T5924] usb 1-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 726.540877][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.598395][ T5924] usb 1-1: config 0 descriptor?? [ 726.628950][ T5924] pwc: Creative Labs Webcam 5 detected. [ 726.773811][T15475] loop5: detected capacity change from 0 to 7 [ 726.844482][ T5924] pwc: Failed to set LED on/off time (-71) [ 726.853228][ T5924] pwc: send_video_command error -71 [ 726.858499][ T5924] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 726.869438][ T5924] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 726.883364][ T5924] usb 1-1: USB disconnect, device number 100 [ 726.897406][T15475] loop5: p1 < > p4 [ 726.905375][T15477] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 726.911935][T15477] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 726.933562][T15475] loop5: partition table partially beyond EOD, truncated [ 726.967676][T15477] vhci_hcd vhci_hcd.0: Device attached [ 727.139565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 727.142533][ T7015] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 727.250773][ T7015] usb 41-1: new full-speed USB device number 7 using vhci_hcd [ 727.531615][T15484] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 727.538281][T15484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 727.577063][T15484] vhci_hcd vhci_hcd.0: Device attached [ 727.643612][T15490] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2771'. [ 728.230184][ T7025] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 728.411995][ T7025] usb 1-1: Using ep0 maxpacket: 32 [ 728.460868][ T7025] usb 1-1: config 247 has an invalid interface number: 177 but max is 0 [ 728.476088][ T7025] usb 1-1: config 247 has no interface number 0 [ 728.502019][ T7025] usb 1-1: config 247 interface 177 altsetting 246 bulk endpoint 0x8 has invalid maxpacket 511 [ 728.548906][ T7025] usb 1-1: config 247 interface 177 altsetting 246 bulk endpoint 0xC has invalid maxpacket 1023 [ 728.582285][ T7025] usb 1-1: config 247 interface 177 has no altsetting 0 [ 728.616297][ T7025] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=58.f4 [ 728.630702][ T7025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.672783][ T7025] usb 1-1: Product: syz [ 728.687139][ T7025] usb 1-1: Manufacturer: syz [ 728.707448][ T7025] usb 1-1: SerialNumber: syz [ 728.733253][T15496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.749796][T15496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 729.152073][T15485] vhci_hcd: connection closed [ 729.152388][ T7253] vhci_hcd vhci_hcd.4: stop threads [ 729.180115][T15478] vhci_hcd: connection reset by peer [ 729.186471][ T7253] vhci_hcd vhci_hcd.4: release socket [ 729.222310][ T7253] vhci_hcd vhci_hcd.4: disconnect device [ 729.230578][ T7025] kvaser_usb 1-1:247.177: error -ENODEV: Cannot get usb endpoint(s) [ 729.242895][ T7253] vhci_hcd vhci_hcd.4: stop threads [ 729.254536][ T7253] vhci_hcd vhci_hcd.4: release socket [ 729.264878][ T7025] usb 1-1: USB disconnect, device number 101 [ 729.271334][ T7253] vhci_hcd vhci_hcd.4: disconnect device [ 729.449795][ T898] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 729.559734][T15164] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 729.733590][T15164] usb 2-1: unable to get BOS descriptor or descriptor too short [ 729.757275][T15164] usb 2-1: not running at top speed; connect to a high speed hub [ 729.789228][T15164] usb 2-1: config 129 has an invalid interface number: 80 but max is 0 [ 729.820635][T15164] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 729.871076][T15164] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 729.905420][T15164] usb 2-1: config 129 has no interface number 0 [ 729.948381][T15164] usb 2-1: config 129 has no interface number 1 [ 729.999407][T15164] usb 2-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 730.062141][T15164] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 730.110611][T15164] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 730.178138][T15164] usb 2-1: config 129 interface 80 has no altsetting 0 [ 730.194019][T15164] usb 2-1: config 129 interface 5 has no altsetting 0 [ 730.234226][T15164] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 730.264955][T15164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.297190][T15164] usb 2-1: SerialNumber: syz [ 730.447750][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 730.594380][T15504] binder: 15503:15504 ioctl c0306201 2000000003c0 returned -14 [ 731.105793][T15525] vlan4: entered promiscuous mode [ 731.426939][T15537] openvswitch: netlink: IP tunnel dst address not specified [ 731.731720][T15540] IPVS: length: 4096 != 8 [ 731.750157][T15540] netlink: 'syz.4.2787': attribute type 13 has an invalid length. [ 731.767972][T15540] netlink: 'syz.4.2787': attribute type 17 has an invalid length. [ 731.794402][ T7017] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 731.960477][ T7017] usb 1-1: Using ep0 maxpacket: 16 [ 731.980861][ T7017] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 732.009697][ T7017] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 732.029702][ T7017] usb 1-1: config 0 interface 0 has no altsetting 0 [ 732.052397][ T7017] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 732.062281][ T7017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.070793][T15540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.087853][ T7017] usb 1-1: Product: syz [ 732.094150][ T7017] usb 1-1: Manufacturer: syz [ 732.108460][ T7017] usb 1-1: SerialNumber: syz [ 732.126737][ T7017] usb 1-1: config 0 descriptor?? [ 732.377581][T15164] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.393817][ T7017] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input70 [ 732.398267][T15164] usb 2-1: MIDIStreaming interface descriptor not found [ 732.410493][ T7015] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 732.734367][T15164] usb 2-1: USB disconnect, device number 108 [ 732.748120][T15561] netlink: 'syz.3.2794': attribute type 10 has an invalid length. [ 732.768356][ T898] usb 1-1: USB disconnect, device number 102 [ 732.837098][T15561] bond0: (slave dummy0): Releasing backup interface [ 732.926065][T15561] dummy0: entered allmulticast mode [ 732.968716][T13688] udevd[13688]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.987187][T15561] team0: Port device dummy0 added [ 733.123211][T15567] netlink: 'syz.4.2796': attribute type 9 has an invalid length. [ 733.151959][T15574] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 733.158533][T15574] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 733.220927][T15574] vhci_hcd vhci_hcd.0: Device attached [ 733.400350][ T5924] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 733.489180][T15164] hid-generic 0008:0091:0009.0021: reserved main item tag 0xd [ 733.501573][ T5924] usb 35-1: new full-speed USB device number 9 using vhci_hcd [ 733.525679][T15164] hid-generic 0008:0091:0009.0021: item fetching failed at offset 28/32 [ 733.561186][T15164] hid-generic 0008:0091:0009.0021: probe with driver hid-generic failed with error -22 [ 733.721656][T15595] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 733.728307][T15595] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 733.782950][T15595] vhci_hcd vhci_hcd.0: Device attached [ 733.961267][T15607] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2804'. [ 734.134057][T15599] vhci_hcd: connection closed [ 734.136576][ T1097] vhci_hcd vhci_hcd.1: stop threads [ 734.176388][T15575] vhci_hcd: connection reset by peer [ 734.189411][ T1097] vhci_hcd vhci_hcd.1: release socket [ 734.224354][ T1097] vhci_hcd vhci_hcd.1: disconnect device [ 734.256233][ T1097] vhci_hcd vhci_hcd.1: stop threads [ 734.274610][ T1097] vhci_hcd vhci_hcd.1: release socket [ 734.304432][ T1097] vhci_hcd vhci_hcd.1: disconnect device [ 736.238852][T15627] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2807'. [ 736.449656][T15164] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 736.458292][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 736.458310][ T30] audit: type=1326 audit(1776670654.394:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 736.586728][ T30] audit: type=1326 audit(1776670654.414:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 736.616597][ T30] audit: type=1326 audit(1776670654.414:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 736.639698][ T30] audit: type=1326 audit(1776670654.414:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 736.663362][ T30] audit: type=1326 audit(1776670654.414:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 736.689759][T15164] usb 1-1: Using ep0 maxpacket: 8 [ 736.731062][T15164] usb 1-1: unable to get BOS descriptor or descriptor too short [ 736.745663][T15164] usb 1-1: config 4 has an invalid interface number: 133 but max is 0 [ 736.762542][T15164] usb 1-1: config 4 has no interface number 0 [ 736.763874][ T30] audit: type=1326 audit(1776670654.414:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 736.841528][T15164] usb 1-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59 [ 736.852111][T15164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.893736][T15164] usb 1-1: Product: syz [ 736.896846][ T30] audit: type=1326 audit(1776670654.414:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 736.924228][T15164] usb 1-1: Manufacturer: syz [ 736.955647][T15164] usb 1-1: SerialNumber: syz [ 736.965670][ T30] audit: type=1326 audit(1776670654.414:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 737.071763][ T30] audit: type=1326 audit(1776670654.414:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 737.132340][ T30] audit: type=1326 audit(1776670654.414:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15628 comm="syz.1.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0d7439c819 code=0x7ffc0000 [ 737.196347][T15639] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 737.229191][T15164] huawei_cdc_ncm 1-1:4.133: CDC Union missing and no IAD found [ 737.245573][T15164] huawei_cdc_ncm 1-1:4.133: bind() failure [ 737.263324][T15639] team0: Port device batadv1 added [ 737.303998][T15164] usb 1-1: USB disconnect, device number 103 [ 737.315450][T15642] hub 9-0:1.0: USB hub found [ 737.487046][T15642] hub 9-0:1.0: 1 port detected [ 738.650462][ T5924] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 740.332220][T15678] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2822'. [ 740.474623][T15681] binder: 15668:15681 ioctl c0046209 200000000000000 returned -22 [ 740.498078][T15680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 740.835702][T15686] xt_TCPMSS: Only works on TCP SYN packets [ 740.912316][T15686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2824'. [ 741.729796][T15164] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 741.940567][T15164] usb 1-1: Using ep0 maxpacket: 32 [ 741.958077][T15164] usb 1-1: unable to get BOS descriptor or descriptor too short [ 742.003595][T15164] usb 1-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 742.064437][T15164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.103407][T15164] usb 1-1: Product: syz [ 742.135561][T15164] usb 1-1: Manufacturer: syz [ 742.166802][T15164] usb 1-1: SerialNumber: syz [ 742.452470][T15164] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 742.492095][T15164] usb 1-1: 2:1 : bogus bTerminalLink 23 [ 742.667442][T15164] usb 1-1: USB disconnect, device number 104 [ 742.773733][T13780] udevd[13780]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 742.816662][T13780] udevd[13780]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 743.051825][ T7017] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 743.222047][ T7017] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 743.241376][ T7017] usb 5-1: config 0 has no interface number 0 [ 743.265513][ T7017] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 743.330654][T15164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 743.348706][T15702] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2829'. [ 743.357893][ T7017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.384058][ T7017] usb 5-1: Product: syz [ 743.471872][ T7017] usb 5-1: Manufacturer: syz [ 743.513313][ T7017] usb 5-1: SerialNumber: syz [ 743.646172][ T7017] usb 5-1: config 0 descriptor?? [ 743.703791][ T7017] snd-usb-us122l 5-1:0.1: usb_set_interface error [ 743.733007][ T7017] snd-usb-us122l 5-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 743.886882][ T7017] usb 5-1: USB disconnect, device number 115 [ 743.900536][T15164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 744.342524][T15164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 745.123271][T15718] binder: 15713:15718 ioctl c0046209 200000000000000 returned -22 [ 745.393712][T15164] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 746.033972][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 746.153103][T15712] hsr0: entered promiscuous mode [ 746.254153][T15719] hsr_slave_0: left promiscuous mode [ 746.319974][T15719] hsr_slave_1: left promiscuous mode [ 746.366227][T15719] hsr0 (unregistering): left promiscuous mode [ 747.232976][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.240135][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.253907][ T898] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 747.454007][ T898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 747.502630][ T898] usb 1-1: not running at top speed; connect to a high speed hub [ 747.525003][ T898] usb 1-1: language id specifier not provided by device, defaulting to English [ 747.548046][ T898] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 747.564383][T15732] vlan2: entered promiscuous mode [ 747.569888][ T898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.583012][ T898] usb 1-1: Product: 賃 郓 [ 747.588838][ T898] usb 1-1: SerialNumber: syz [ 747.815845][T15724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.848306][T15724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.944116][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2833'. [ 747.954808][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2833'. [ 748.012140][T15750] kvm: vcpu 0: requested 3200 ns lapic timer period limited to 200000 ns [ 748.024253][T15750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 748.211832][ T898] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 748.479187][ T898] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 748.498526][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 748.537737][ T898] usb 1-1: USB disconnect, device number 105 [ 748.639420][T13780] udevd[13780]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.894300][T15762] fuse: Invalid gid '0000000000000000000000000000000000000000004' [ 749.111618][T15770] PKCS8: Unsupported PKCS#8 version [ 749.170047][T15770] binder: 15763:15770 ioctl c0306201 200000000280 returned -14 [ 749.210667][T15770] binder: 15763:15770 ioctl 3b81 200000000200 returned -22 [ 749.299883][ T7015] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 749.491977][ T7015] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.528804][ T7015] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 749.566151][ T7015] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 749.604361][ T7015] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 749.635848][ T7015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.671635][T15769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 750.042846][T15777] vlan2: entered promiscuous mode [ 750.759565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 750.819711][T15164] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 750.999664][T15164] usb 3-1: Using ep0 maxpacket: 8 [ 751.042277][T15164] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 751.052868][T15164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 751.062791][T15164] usb 3-1: Product: syz [ 751.078826][T15164] usb 3-1: Manufacturer: syz [ 751.086929][T15164] usb 3-1: SerialNumber: syz [ 751.127269][T15164] usb 3-1: config 0 descriptor?? [ 751.152115][T15164] gspca_main: sq905-2.14.0 probing 2770:9120 [ 751.476179][T15769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.504677][T15769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.510167][ T898] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 751.688411][ T898] usb 2-1: config 0 has no interfaces? [ 751.745142][ T898] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 751.765413][ T898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.774384][ T898] usb 2-1: Product: syz [ 751.778720][ T898] usb 2-1: Manufacturer: syz [ 751.785575][ T898] usb 2-1: SerialNumber: syz [ 751.802597][ T898] usb 2-1: config 0 descriptor?? [ 751.859980][T15164] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 751.867778][T15164] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 752.878447][ T7015] aiptek 5-1:17.0: Aiptek tried all speeds, no sane response [ 752.887173][ T7015] aiptek 5-1:17.0: probe with driver aiptek failed with error -22 [ 752.900583][ T7015] usb 5-1: USB disconnect, device number 116 [ 753.501139][ T7015] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 753.622517][ T7017] usb 3-1: USB disconnect, device number 91 [ 753.671603][ T7015] usb 5-1: Using ep0 maxpacket: 8 [ 753.691486][ T7015] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 753.721372][ T7015] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 753.751638][ T7015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 753.781670][ T7015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 753.804037][ T7015] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.853391][ T7015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 753.891498][ T7015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.106606][ T10] usb 2-1: USB disconnect, device number 109 [ 754.126506][ T7015] usb 5-1: usb_control_msg returned -32 [ 754.144911][ T7015] usbtmc 5-1:16.0: can't read capabilities [ 754.180163][ T5924] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 754.201464][ T7017] usb 5-1: USB disconnect, device number 117 [ 754.271132][T15164] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 754.365418][ T5924] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 754.378398][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 754.394849][ T5924] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 754.404797][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.412986][ T5924] usb 3-1: Product: syz [ 754.417319][ T5924] usb 3-1: Manufacturer: syz [ 754.422442][ T5924] usb 3-1: SerialNumber: syz [ 754.430001][ T5924] usb 3-1: config 0 descriptor?? [ 754.440216][T15164] usb 1-1: Using ep0 maxpacket: 16 [ 754.442198][ T5924] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 754.460601][T15164] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.484526][T15164] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 754.499655][T15164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.509764][T15164] usb 1-1: Product: syz [ 754.516357][T15164] usb 1-1: Manufacturer: syz [ 754.525700][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2864'. [ 754.526748][T15164] usb 1-1: SerialNumber: syz [ 754.548180][T15822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.563583][T15164] usb 1-1: config 0 descriptor?? [ 754.577621][T15822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.602382][T15164] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 754.619854][ T7017] usb 5-1: new low-speed USB device number 118 using dummy_hcd [ 754.707333][T15822] netlink: 'syz.3.2864': attribute type 23 has an invalid length. [ 754.756261][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2864'. [ 754.792398][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'. [ 754.801830][ T7017] usb 5-1: Invalid ep0 maxpacket: 16 [ 754.953737][ T7017] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 754.972812][ T7253] usb 1-1: Failed to submit usb control message: -71 [ 754.973999][T15164] usb 1-1: USB disconnect, device number 106 [ 754.987143][ T7253] usb 1-1: unable to send the bmi data to the device: -71 [ 755.006469][ T7253] usb 1-1: unable to get target info from device [ 755.038142][ T7253] usb 1-1: could not get target info (-71) [ 755.048656][ T7253] usb 1-1: could not probe fw (-71) [ 755.141212][ T7017] usb 5-1: Invalid ep0 maxpacket: 16 [ 755.147343][ T7017] usb usb5-port1: attempt power cycle [ 755.509648][ T7017] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 755.540657][ T7017] usb 5-1: Invalid ep0 maxpacket: 16 [ 755.683392][ T7017] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 755.728963][ T5924] usb 3-1: USB disconnect, device number 92 [ 755.750221][ T7017] usb 5-1: Invalid ep0 maxpacket: 16 [ 755.771194][ T7017] usb usb5-port1: unable to enumerate USB device [ 756.844726][ T10] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 757.023357][ T10] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 757.041824][T15862] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 757.048467][T15862] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 757.059683][ T10] usb 2-1: config 5 has no interface number 0 [ 757.074969][ T10] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 757.111132][T15862] vhci_hcd vhci_hcd.0: Device attached [ 757.123304][ T10] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 12846, setting to 64 [ 757.155764][ T10] usb 2-1: config 5 interface 123 has no altsetting 0 [ 757.177245][ T10] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 757.207506][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.244259][ T10] usb 2-1: Product: syz [ 757.265504][ T10] usb 2-1: Manufacturer: syz [ 757.287189][ T10] usb 2-1: SerialNumber: syz [ 757.300369][T15164] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 757.333080][T15849] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 757.391690][T15164] usb 37-1: new full-speed USB device number 13 using vhci_hcd [ 757.484647][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 757.592265][T15868] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 757.598999][T15868] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 757.637640][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 757.756228][T15868] vhci_hcd vhci_hcd.0: Device attached [ 758.213332][T15876] vhci_hcd: connection closed [ 758.213681][ T7253] vhci_hcd vhci_hcd.2: stop threads [ 758.231368][ T7017] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 758.244507][T15863] vhci_hcd: connection reset by peer [ 758.262195][ T7253] vhci_hcd vhci_hcd.2: release socket [ 758.277296][ T7253] vhci_hcd vhci_hcd.2: disconnect device [ 758.297374][ T7253] vhci_hcd vhci_hcd.2: stop threads [ 758.317238][ T7253] vhci_hcd vhci_hcd.2: release socket [ 758.341885][ T7253] vhci_hcd vhci_hcd.2: disconnect device [ 758.412369][ T7017] usb 1-1: unable to get BOS descriptor or descriptor too short [ 758.422104][ T7017] usb 1-1: config 66 has an invalid interface number: 108 but max is 0 [ 758.433366][ T7017] usb 1-1: config 66 has an invalid descriptor of length 101, skipping remainder of the config [ 758.444207][ T7017] usb 1-1: config 66 has no interface number 0 [ 758.450598][ T7017] usb 1-1: too many endpoints for config 66 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 758.462283][ T7017] usb 1-1: config 66 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 758.476313][ T7017] usb 1-1: config 66 interface 108 has no altsetting 0 [ 758.489878][ T7017] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 758.499646][ T7017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.507753][ T7017] usb 1-1: Product: syz [ 758.553013][ T7017] usb 1-1: Manufacturer: syz [ 758.585880][ T7017] usb 1-1: SerialNumber: syz [ 758.843304][ T7017] usb 1-1: USB disconnect, device number 107 [ 759.229730][ T7016] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 759.400877][ T7016] usb 5-1: Using ep0 maxpacket: 8 [ 759.421016][ T7016] usb 5-1: config 1 interface 0 has no altsetting 0 [ 759.454571][ T7016] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 759.485856][ T7016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.521427][ T7016] usb 5-1: Product: syz [ 759.527970][ T7016] usb 5-1: Manufacturer: syz [ 759.534684][ T7016] usb 5-1: SerialNumber: syz [ 759.714457][ T10] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 759.785453][ T10] usb 2-1: USB disconnect, device number 110 [ 759.940504][T15905] xt_l2tp: v2 doesn't support IP mode [ 760.471025][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 760.651866][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 760.694248][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.729153][T15917] bridge0: entered allmulticast mode [ 760.737377][ T10] usb 2-1: config 0 descriptor?? [ 760.769207][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 760.849761][ T7017] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 760.993052][ T7016] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input72 [ 761.019856][ T7017] usb 1-1: Using ep0 maxpacket: 8 [ 761.040184][ T7017] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 761.080032][ T7017] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 761.092676][ T7016] usb 5-1: USB disconnect, device number 122 [ 761.105569][ T7017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.118824][ T5195] bcm5974 5-1:1.0: could not read from device [ 761.138390][ T7017] usb 1-1: Product: syz [ 761.150244][ T7017] usb 1-1: Manufacturer: syz [ 761.173996][ T7017] usb 1-1: SerialNumber: syz [ 761.213097][ T7017] usb 1-1: config 0 descriptor?? [ 761.244310][ T7017] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 762.489790][T15164] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 762.541260][T15939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2894'. [ 763.026364][ T7025] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 763.210577][ T7025] usb 5-1: Using ep0 maxpacket: 32 [ 763.237321][ T7025] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 763.262744][ T7025] usb 5-1: config 0 has no interface number 0 [ 763.294267][ T7025] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 763.351571][ T7025] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 763.447525][ T7025] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 763.486492][ T7025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.535562][ T7025] usb 5-1: Product: syz [ 763.568007][ T7025] usb 5-1: Manufacturer: syz [ 763.595038][ T7025] usb 5-1: SerialNumber: syz [ 763.600098][ T7017] gspca_zc3xx: reg_r err -110 [ 763.632651][ T7025] usb 5-1: config 0 descriptor?? [ 764.036404][T13780] udevd[13780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 764.202240][ T7017] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 764.228430][ T7017] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 764.277743][ T7017] usb 1-1: USB disconnect, device number 108 [ 765.315047][ T10] usb 2-1: USB disconnect, device number 111 [ 765.381148][ T898] usb 5-1: USB disconnect, device number 123 [ 765.562036][T15964] batman_adv: batadv0: Adding interface: dummy0 [ 765.582868][T15964] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.669179][T15964] batman_adv: batadv0: Interface activated: dummy0 [ 765.739630][ T7015] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 765.803953][T15967] batadv0: mtu less than device minimum [ 765.820936][T15968] netlink: 'syz.1.2900': attribute type 10 has an invalid length. [ 765.850843][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.864137][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.875967][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.887672][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.899288][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.910958][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.922618][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.934401][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.946150][T15967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 766.021822][ T7015] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.034999][ T7015] usb 1-1: config 0 has no interface number 0 [ 766.096410][ T7015] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.151932][ T7015] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.198590][ T7015] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 766.237749][ T7015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.275872][ T7015] usb 1-1: config 0 descriptor?? [ 766.658223][T15978] loop5: detected capacity change from 0 to 7 [ 766.667472][T15978] loop5: p1 < > p4 [ 766.676753][T15978] loop5: partition table partially beyond EOD, truncated [ 766.792425][ T7015] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0022/input/input73 [ 766.915080][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2901'. [ 766.979694][ T10] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 767.091559][ T7015] holtek_kbd 0003:04D9:A055.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 767.150654][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 767.177962][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 767.222360][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 767.258333][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.292365][ T10] usb 5-1: Product: syz [ 767.302740][ T10] usb 5-1: Manufacturer: syz [ 767.321747][ T10] usb 5-1: SerialNumber: syz [ 767.360444][T15977] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 767.700199][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 768.743508][ T7015] usb 1-1: USB disconnect, device number 109 [ 768.770295][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 768.799141][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 768.904054][T16013] cifs: Unknown parameter 'fd' [ 769.172907][ T10] usb 5-1: USB disconnect, device number 124 [ 769.419805][ T7016] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 769.601125][ T7016] usb 2-1: Using ep0 maxpacket: 16 [ 769.626577][ T7016] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 769.661016][ T7016] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 769.691878][ T7016] usb 2-1: config 166 has no interface number 0 [ 769.714827][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.728624][ T7016] usb 2-1: config 166 has no interface number 1 [ 769.740649][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.752227][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 769.770798][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 769.779476][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 769.808800][ T7016] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 769.845565][T13405] tipc: Resetting bearer [ 769.892576][ T7016] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 769.925284][ T7016] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 769.974736][ T7016] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 770.021528][ T7016] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 770.054470][ T7016] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 770.072515][T13405] tipc: Disabling bearer [ 770.079469][ T7016] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 770.100062][ T7016] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 770.112453][ T7016] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 770.137300][ T7016] usb 2-1: config 166 interface 177 has no altsetting 0 [ 770.149717][ T7016] usb 2-1: config 166 interface 34 has no altsetting 0 [ 770.160749][ T7016] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 770.176543][ T7016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.199602][ T7016] usb 2-1: Product: syz [ 770.203853][ T7016] usb 2-1: Manufacturer: syz [ 770.208495][ T7016] usb 2-1: SerialNumber: syz [ 770.451543][ T7016] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 770.587393][ T7016] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 770.724777][ T7016] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 770.756800][ T7016] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 770.783915][ T7016] uvcvideo 2-1:166.34: No valid video chain found. [ 770.807517][T16053] cifs: Unknown parameter 'fd' [ 770.832598][ T7016] usb 2-1: USB disconnect, device number 112 [ 770.834221][T16051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2926'. [ 770.880183][T14114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 770.902825][T14114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 770.912766][T14114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 770.928858][T14114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 770.938713][T14114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 771.210898][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 771.226243][T16061] bond0: Caught tx_queue_len zero misconfig [ 771.349765][ T10] usb 3-1: device descriptor read/64, error -71 [ 771.511632][ T7253] team0: left allmulticast mode [ 771.520880][ T7253] team_slave_0: left allmulticast mode [ 771.537777][ T7253] team_slave_1: left allmulticast mode [ 771.547038][ T7253] team0: left promiscuous mode [ 771.552023][ T7253] team_slave_0: left promiscuous mode [ 771.557704][ T7253] team_slave_1: left promiscuous mode [ 771.564106][ T7253] bridge0: port 3(team0) entered disabled state [ 771.579098][ T7253] bridge_slave_1: left allmulticast mode [ 771.598617][ T7253] bridge_slave_1: left promiscuous mode [ 771.616017][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.630842][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 771.630867][ T7253] bridge_slave_0: left allmulticast mode [ 771.648368][ T7253] bridge_slave_0: left promiscuous mode [ 771.654238][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.779627][ T10] usb 3-1: device descriptor read/64, error -71 [ 771.792679][ T7253] ip6gretap0 (unregistering): left promiscuous mode [ 771.859789][T14114] Bluetooth: hci5: command tx timeout [ 771.890731][ T10] usb usb3-port1: attempt power cycle [ 772.049927][ T7025] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 772.118248][ T7253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.134428][ T7253] bond0 (unregistering): Released all slaves [ 772.155168][ T7253] bond1 (unregistering): Released all slaves [ 772.185963][ T7253] bond2 (unregistering): Released all slaves [ 772.217777][ T7253] bond3 (unregistering): (slave veth3): Releasing active interface [ 772.229717][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 772.238693][ T7025] usb 2-1: Using ep0 maxpacket: 32 [ 772.251364][ T7253] bond3 (unregistering): Released all slaves [ 772.262244][ T10] usb 3-1: device descriptor read/8, error -71 [ 772.269252][ T7025] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 772.279989][ T7025] usb 2-1: config 0 has no interface number 0 [ 772.301684][ T7025] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 772.315777][ T7253] bond4 (unregistering): Released all slaves [ 772.326197][ T7025] usb 2-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 772.336782][ T7025] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 772.357074][ T7025] usb 2-1: config 0 interface 86 has no altsetting 0 [ 772.376646][ T7253] bond5 (unregistering): Released all slaves [ 772.388950][ T7025] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 772.410164][ T7025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.425844][ T7025] usb 2-1: Product: syz [ 772.438085][ T7253] bond6 (unregistering): Released all slaves [ 772.444575][ T7025] usb 2-1: Manufacturer: syz [ 772.449410][ T7025] usb 2-1: SerialNumber: syz [ 772.478812][ T7025] usb 2-1: config 0 descriptor?? [ 772.484833][T16074] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 772.509869][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 772.550503][ T10] usb 3-1: device descriptor read/8, error -71 [ 772.563279][T16058] chnl_net:caif_netlink_parms(): no params data found [ 772.615194][T16026] chnl_net:caif_netlink_parms(): no params data found [ 772.628172][ T7253] tipc: Disabling bearer [ 772.644533][ T7253] tipc: Disabling bearer [ 772.685060][ T10] usb usb3-port1: unable to enumerate USB device [ 772.729873][ T7253] tipc: Left network mode [ 772.811035][T16074] kernel profiling enabled (shift: 63) [ 772.930620][T16074] profiling shift: 63 too large [ 773.069734][T14114] Bluetooth: hci1: command tx timeout [ 773.121084][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2932'. [ 773.238938][T16081] 8021q: adding VLAN 0 to HW filter on device bond7 [ 773.250855][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2930'. [ 773.339400][T16058] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.351227][T16058] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.358639][T16058] bridge_slave_0: entered allmulticast mode [ 773.372829][T16058] bridge_slave_0: entered promiscuous mode [ 773.392820][T16081] macsec0: entered promiscuous mode [ 773.398229][T16081] bond7: entered promiscuous mode [ 773.404602][T16081] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 773.418144][T16081] bond7: left promiscuous mode [ 773.446735][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.454620][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.470546][T16026] bridge_slave_0: entered allmulticast mode [ 773.478951][T16026] bridge_slave_0: entered promiscuous mode [ 773.502388][T16058] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.517449][T16058] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.533503][T16058] bridge_slave_1: entered allmulticast mode [ 773.566198][T16058] bridge_slave_1: entered promiscuous mode [ 773.605696][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.616369][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.627016][T16026] bridge_slave_1: entered allmulticast mode [ 773.637748][T16026] bridge_slave_1: entered promiscuous mode [ 773.785981][T16058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.801250][T16026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.820424][T16026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.837915][T16058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.851878][T16092] fuse: root generation should be zero [ 773.860376][ T7025] ljca 2-1:0.86: submit rx urb failed: -90 [ 773.866348][ T7025] ljca 2-1:0.86: probe with driver ljca failed with error -90 [ 773.891557][ T7025] usb 2-1: USB disconnect, device number 113 [ 773.946561][T16090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.951521][T14114] Bluetooth: hci5: command tx timeout [ 773.990068][T16090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.091607][T16026] team0: Port device team_slave_0 added [ 774.137700][T16098] net_ratelimit: 12 callbacks suppressed [ 774.137755][T16098] openvswitch: netlink: IPv4 tun info is not correct [ 774.174678][T16026] team0: Port device team_slave_1 added [ 774.203760][ T7253] hsr_slave_0: left promiscuous mode [ 774.215455][ T7253] hsr_slave_1: left promiscuous mode [ 774.222127][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.242109][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.942691][ T7253] team0 (unregistering): Port device team_slave_1 removed [ 774.995674][ T7253] team0 (unregistering): Port device team_slave_0 removed [ 775.149782][T14114] Bluetooth: hci1: command tx timeout [ 775.215957][T16058] team0: Port device team_slave_0 added [ 775.253369][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1 [ 775.285293][T16058] team0: Port device team_slave_1 added [ 775.410011][T16026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.417658][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.444320][T16026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.470360][T16026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.481953][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.537097][T16026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.581336][T16058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.589290][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.633869][T16058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.658302][T16058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.666098][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.693503][T16058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.789779][ T7025] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 775.881524][T16026] hsr_slave_0: entered promiscuous mode [ 775.897609][T16026] hsr_slave_1: entered promiscuous mode [ 775.951115][ T7025] usb 2-1: Using ep0 maxpacket: 16 [ 775.978241][ T7025] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.989203][ T7025] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.006953][ T7025] usb 2-1: config 0 interface 0 has no altsetting 0 [ 776.030726][T14114] Bluetooth: hci5: command tx timeout [ 776.037197][ T7253] IPVS: stop unused estimator thread 0... [ 776.044966][ T7025] usb 2-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 776.067432][T16058] hsr_slave_0: entered promiscuous mode [ 776.073312][ T7025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.084780][T16058] hsr_slave_1: entered promiscuous mode [ 776.097279][ T7025] usb 2-1: config 0 descriptor?? [ 776.105727][T16058] debugfs: 'hsr0' already exists in 'hsr' [ 776.112071][T16058] Cannot create hsr debugfs directory [ 776.336588][ T185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 776.746671][ T185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 776.911878][ T7025] usb 2-1: string descriptor 0 read error: -71 [ 776.948358][ T7025] usbhid 2-1:0.0: can't add hid device: -71 [ 776.983037][ T7025] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 777.012349][ T7025] usb 2-1: USB disconnect, device number 114 [ 777.154359][ T185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 777.230489][T14114] Bluetooth: hci1: command tx timeout [ 777.352973][ T185] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 777.403587][ T185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 777.519380][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 778.112664][T14114] Bluetooth: hci5: command tx timeout [ 778.223798][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 778.325562][ T185] bridge_slave_1: left allmulticast mode [ 778.335988][ T185] bridge_slave_1: left promiscuous mode [ 778.355685][ T185] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.413369][ T185] bridge_slave_0: left allmulticast mode [ 778.432067][ T185] bridge_slave_0: left promiscuous mode [ 778.453688][ T185] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.672810][T16178] loop9: detected capacity change from 0 to 7 [ 778.690295][ C1] blk_print_req_error: 10 callbacks suppressed [ 778.690311][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.705830][ C1] buffer_io_error: 10 callbacks suppressed [ 778.705846][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 778.725604][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.734809][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 778.774319][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.783542][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 778.809623][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.818827][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 778.836651][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.845877][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 778.863849][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.882286][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.891516][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 778.912865][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.922084][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 778.949540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 778.952479][T16178] ldm_validate_partition_table(): Disk read failed. [ 778.980895][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 778.990225][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 778.999876][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.009089][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 779.020398][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 779.028533][T16178] Dev loop9: unable to read RDB block 0 [ 779.035392][T16178] loop9: unable to read partition table [ 779.048164][T16178] loop9: partition table beyond EOD, truncated [ 779.087543][T16178] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 779.232266][T16178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2947'. [ 779.261705][T16178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2947'. [ 779.301148][T14114] Bluetooth: hci1: command tx timeout [ 779.411562][T16196] fuse: Bad value for 'user_id' [ 779.418612][T16196] fuse: Bad value for 'user_id' [ 779.432829][T16182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.534908][ T185] bridge0 (unregistering): left allmulticast mode [ 779.762250][ T185] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 779.780204][ T185] bridge1 (unregistering): left promiscuous mode [ 779.850437][ T185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.864023][ T185] bond0 (unregistering): Released all slaves [ 779.884352][ T185] bond1 (unregistering): Released all slaves [ 779.951951][ T185] bond2 (unregistering): Released all slaves [ 780.025453][ T185] bond3 (unregistering): Released all slaves [ 780.080809][ T185] bond4 (unregistering): Released all slaves [ 780.154188][ T185] bond5 (unregistering): Released all slaves [ 780.259058][ T185] bond6 (unregistering): Released all slaves [ 780.309035][ T185] bond7 (unregistering): Released all slaves [ 780.432868][ T5505] 8021q: adding VLAN 0 to HW filter on device eth3 [ 780.589936][ T7025] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 780.795578][ T7025] usb 2-1: Using ep0 maxpacket: 32 [ 780.801625][T16221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.812051][T16210] team0: Device gtp0 is of different type [ 780.822762][T16221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.854168][ T7025] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 780.867510][ T7025] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 780.908772][ T7025] usb 2-1: config 0 has no interface number 0 [ 780.938426][ T7025] usb 2-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0 [ 780.961719][ T7025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.981847][ T7025] usb 2-1: Product: syz [ 780.987639][ T7025] usb 2-1: Manufacturer: syz [ 781.004842][ T7025] usb 2-1: SerialNumber: syz [ 781.032442][ T7025] usb 2-1: config 0 descriptor?? [ 781.115287][ T185] !: left promiscuous mode [ 781.377367][ T185] m>e5n: left promiscuous mode [ 781.753278][ T185] tipc: Disabling bearer [ 781.779336][ T185] tipc: Left network mode [ 782.144936][ T185] IPVS: stopping backup sync thread 10427 ... [ 783.693330][ T185] batman_adv: batadv0: Removing interface: macsec1 [ 783.924145][ T5505] 8021q: adding VLAN 0 to HW filter on device eth4 [ 784.040976][ T185] hsr_slave_0: left promiscuous mode [ 784.076481][ T185] hsr_slave_1: left promiscuous mode [ 784.090599][ T185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.104196][ T185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.106214][T16244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.126601][T16244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.397089][ T7025] uvcvideo 2-1:0.68: Found Unit with invalid ID 0 [ 784.422772][ T7025] uvcvideo 2-1:0.68: Found UVC 0.40 device syz (045e:0703) [ 784.448560][ T7025] uvcvideo 2-1:0.68: No valid video chain found. [ 784.466720][ T7025] usb 2-1: USB disconnect, device number 115 [ 784.508659][ T185] team0 (unregistering): Port device team_slave_1 removed [ 784.927662][T16026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 784.949719][ T7025] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 784.969452][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.010426][T16026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 785.029201][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.099145][T16026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.144779][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.148482][ T7025] usb 2-1: unable to get BOS descriptor or descriptor too short [ 785.157543][T16026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 785.203697][ T7025] usb 2-1: not running at top speed; connect to a high speed hub [ 785.232515][T16026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.246449][ T7025] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 785.273819][ T7025] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 785.304437][ T7025] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 785.327684][ T7025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.346555][ T7025] usb 2-1: Product: syz [ 785.356654][ T7025] usb 2-1: Manufacturer: syz [ 785.366784][ T7025] usb 2-1: SerialNumber: syz [ 785.458090][T16058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 785.478817][T16058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.499762][T16058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 785.519232][T16058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.538695][T16058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 785.552248][T16058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.569799][T16058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 785.572207][ T185] IPVS: stop unused estimator thread 0... [ 785.597292][T16058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.717980][ T7025] usb 2-1: 1:1 : unsupported format bits 0x80 [ 785.746715][ T7025] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 785.970233][ T7025] usb 2-1: USB disconnect, device number 116 [ 786.031641][T16270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.065408][T16026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.074940][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.131412][T13780] udevd[13780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.188849][T16026] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.239672][ T7015] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 786.277530][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.284820][ T7253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.318234][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.325519][ T7247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.392940][T16058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.442058][T16275] cifs: Unknown parameter 'fd' [ 786.489324][T16058] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.535706][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.542911][ T7253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.632509][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.639744][ T7253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.687527][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2963'. [ 786.749208][T16026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.985976][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2964'. [ 786.995919][T16058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.016447][T16026] veth0_vlan: entered promiscuous mode [ 787.099479][T16026] veth1_vlan: entered promiscuous mode [ 787.411592][T16058] veth0_vlan: entered promiscuous mode [ 787.458175][T16294] loop5: detected capacity change from 0 to 7 [ 787.496994][T16294] loop5: p1 < > p4 [ 787.506037][T16294] loop5: partition table partially beyond EOD, truncated [ 787.635245][T16026] veth0_macvtap: entered promiscuous mode [ 787.691913][T16058] veth1_vlan: entered promiscuous mode [ 787.739283][T16026] veth1_macvtap: entered promiscuous mode [ 787.847176][T16026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.918507][T16026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.966003][T16058] veth0_macvtap: entered promiscuous mode [ 788.005216][T16058] veth1_macvtap: entered promiscuous mode [ 788.049694][T16124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.059694][T16124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.101425][T16124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.118349][T16124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.308439][T16058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.413775][T16058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.448431][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.489151][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.571518][ T1097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.594248][ T1097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.887419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.915687][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.967481][T16299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.047898][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.101191][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.306603][T16124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.330858][T16124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.421248][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.448816][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.318937][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 790.628438][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 791.129781][ T7025] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 791.303104][ T7025] usb 1-1: unable to get BOS descriptor or descriptor too short [ 791.311812][ T7025] usb 1-1: not running at top speed; connect to a high speed hub [ 791.321294][ T7025] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.331825][ T7025] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 791.345009][ T7025] usb 1-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 791.356073][ T7025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.364218][ T7025] usb 1-1: Product: syz [ 791.368598][ T7025] usb 1-1: Manufacturer: syz [ 791.373325][ T7025] usb 1-1: SerialNumber: syz [ 792.434806][ T7025] usb 1-1: unit 2 not found! [ 792.454933][ T7025] usb 1-1: unit 8 not found! [ 792.602066][ T7025] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 792.679226][ T7025] usb 1-1: USB disconnect, device number 110 [ 792.759736][ T7016] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 792.785230][T13780] udevd[13780]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.871642][T16370] FAULT_INJECTION: forcing a failure. [ 792.871642][T16370] name failslab, interval 1, probability 0, space 0, times 0 [ 792.934320][T16370] CPU: 1 UID: 0 PID: 16370 Comm: syz.3.2985 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.934354][T16370] Tainted: [L]=SOFTLOCKUP [ 792.934363][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 792.934377][T16370] Call Trace: [ 792.934387][T16370] [ 792.934396][T16370] dump_stack_lvl+0xe8/0x150 [ 792.934435][T16370] should_fail_ex+0x412/0x560 [ 792.934481][T16370] should_failslab+0xa8/0x100 [ 792.934511][T16370] __kmalloc_noprof+0xe8/0x760 [ 792.934536][T16370] ? tomoyo_encode+0x28b/0x550 [ 792.934561][T16370] tomoyo_encode+0x28b/0x550 [ 792.934585][T16370] tomoyo_realpath_from_path+0x58d/0x5d0 [ 792.934619][T16370] tomoyo_mount_permission+0x3e8/0x9d0 [ 792.934654][T16370] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 792.934684][T16370] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 792.934768][T16370] security_sb_mount+0xe4/0x320 [ 792.934819][T16370] path_mount+0xbc/0x10e0 [ 792.934857][T16370] ? user_path_at+0xd4/0x160 [ 792.934882][T16370] __se_sys_mount+0x31d/0x420 [ 792.934908][T16370] ? __pfx___se_sys_mount+0x10/0x10 [ 792.934935][T16370] ? __x64_sys_mount+0x20/0xc0 [ 792.934954][T16370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.934976][T16370] do_syscall_64+0x15f/0xf80 [ 792.935006][T16370] ? trace_irq_disable+0x3b/0x140 [ 792.935033][T16370] ? clear_bhb_loop+0x40/0x90 [ 792.935058][T16370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.935079][T16370] RIP: 0033:0x7f41a939c819 [ 792.935098][T16370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.935115][T16370] RSP: 002b:00007f41aa1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 792.935137][T16370] RAX: ffffffffffffffda RBX: 00007f41a9615fa0 RCX: 00007f41a939c819 [ 792.935152][T16370] RDX: 0000200000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 792.935165][T16370] RBP: 00007f41aa1f6090 R08: 0000200000002140 R09: 0000000000000000 [ 792.935179][T16370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.935191][T16370] R13: 00007f41a9616038 R14: 00007f41a9615fa0 R15: 00007f41a973fa48 [ 792.935223][T16370] [ 792.935639][T16370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 793.160758][ T7016] usb 2-1: device descriptor read/64, error -71 [ 793.409695][ T7016] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 793.540118][ T7016] usb 2-1: device descriptor read/64, error -71 [ 793.650059][ T7016] usb usb2-port1: attempt power cycle [ 794.069639][ T7016] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 794.127454][ T7016] usb 2-1: device descriptor read/8, error -71 [ 794.220414][T16383] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2987'. [ 794.430807][ T7016] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 794.552153][ T7016] usb 2-1: device descriptor read/8, error -71 [ 794.679093][ T7016] usb usb2-port1: unable to enumerate USB device [ 796.168752][T16397] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2989'. [ 796.932382][T16412] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2992'. [ 797.683393][T16423] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2995'. [ 798.624465][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 798.662931][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 798.682189][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 798.709358][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 798.731534][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 799.650709][T16438] bridge0: entered promiscuous mode [ 799.733596][T16438] bridge0: port 3(macvlan2) entered blocking state [ 799.761922][T16438] bridge0: port 3(macvlan2) entered disabled state [ 799.787831][T16438] macvlan2: entered allmulticast mode [ 799.812928][T16438] bridge0: entered allmulticast mode [ 799.851291][T16438] macvlan2: left allmulticast mode [ 799.886289][T16438] bridge0: left allmulticast mode [ 799.913503][T16438] bridge0: left promiscuous mode [ 800.343833][ T1097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.820036][T14114] Bluetooth: hci2: command tx timeout [ 800.921791][ T7017] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 801.017277][ T1097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.071429][ T7015] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 801.122132][ T7017] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.160112][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 801.175271][ T7017] usb 1-1: config 0 has no interfaces? [ 801.208699][ T7017] usb 1-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 801.263617][ T7017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.278224][ T7015] usb 2-1: config index 0 descriptor too short (expected 24441, got 36) [ 801.331014][ T7015] usb 2-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 801.346284][ T7017] usb 1-1: config 0 descriptor?? [ 801.367875][ T1097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.370242][ T7015] usb 2-1: config 114 has an invalid descriptor of length 101, skipping remainder of the config [ 801.395731][ T5904] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 801.425287][ T7015] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 801.434014][ T5904] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 801.454945][T16465] trusted_key: encrypted_key: master key parameter 'truste<0000000000000128' is invalid [ 801.466848][ T5904] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 801.489001][ T5904] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 801.490703][ T7015] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 801.501309][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.538769][ T7015] usb 2-1: New USB device strings: Mfr=0, Product=10, SerialNumber=0 [ 801.574001][ T7015] usb 2-1: Product: syz [ 801.578372][T16467] trusted_key: encrypted_key: hex blob is missing [ 801.594529][T16459] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 801.664370][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 801.664388][ T30] audit: type=1400 audit(1776670719.614:403): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16449 comm="syz.0.2998" [ 801.717651][ T1097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.735718][ T7017] usb 1-1: USB disconnect, device number 111 [ 801.891979][T16434] chnl_net:caif_netlink_parms(): no params data found [ 801.938450][ T7015] usb 2-1: USB disconnect, device number 121 [ 802.422563][ T5904] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 802.438520][T16434] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.450207][ T5904] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input75 [ 802.462244][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.480022][T16434] bridge_slave_0: entered allmulticast mode [ 802.503681][T16434] bridge_slave_0: entered promiscuous mode [ 802.571956][T16434] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.611667][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.628332][T16434] bridge_slave_1: entered allmulticast mode [ 802.654487][T16434] bridge_slave_1: entered promiscuous mode [ 802.900346][T14114] Bluetooth: hci2: command tx timeout [ 803.467528][T16494] syzkaller0: entered promiscuous mode [ 803.493598][T16494] syzkaller0: entered allmulticast mode [ 803.543238][T16434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.600634][T16434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.056201][T16434] team0: Port device team_slave_0 added [ 804.074040][ T1097] batadv0: left allmulticast mode [ 804.091800][ T1097] bridge0: port 3(batadv0) entered disabled state [ 804.142472][ T1097] bridge_slave_1: left allmulticast mode [ 804.164432][ T1097] bridge_slave_1: left promiscuous mode [ 804.182065][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.215644][ T1097] bridge_slave_0: left allmulticast mode [ 804.237105][ T1097] bridge_slave_0: left promiscuous mode [ 804.275484][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.819348][T16508] binder: 16505:16508 ioctl c0046209 200000000000000 returned -22 [ 804.979683][T14114] Bluetooth: hci2: command tx timeout [ 805.547790][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.590781][ T1097] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 805.644812][ T1097] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 805.682135][ T1097] bond0 (unregistering): Released all slaves [ 805.711468][T16519] binder: BINDER_SET_CONTEXT_MGR already set [ 805.718738][T16519] binder: 16518:16519 ioctl 4018620d 200000000100 returned -16 [ 805.737603][ T1097] bond1 (unregistering): Released all slaves [ 805.750158][T16519] binder: 16518:16519 unknown command 0 [ 805.765754][T16519] binder: 16518:16519 ioctl c0306201 200000000040 returned -22 [ 805.826884][ T1097] bond2 (unregistering): Released all slaves [ 805.903568][ T1097] bond3 (unregistering): Released all slaves [ 805.971536][ T1097] bond4 (unregistering): Released all slaves [ 806.036627][ T1097] bond5 (unregistering): Released all slaves [ 806.106429][ T1097] bond6 (unregistering): Released all slaves [ 806.166527][ T1097] bond7 (unregistering): Released all slaves [ 806.233145][ T1097] bond8 (unregistering): Released all slaves [ 806.296086][T16434] team0: Port device team_slave_1 added [ 807.069909][T14114] Bluetooth: hci2: command tx timeout [ 808.665205][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.672113][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.554262][T16528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.596613][T16541] usb 6-1: USB disconnect, device number 2 [ 810.596638][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 810.616960][ T1097] m>e5n: left promiscuous mode [ 810.876610][T16434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.907701][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.972852][T16434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.986634][T16434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.997082][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.093169][T16434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.147780][ T1097] tipc: Disabling bearer [ 811.170915][ T1097] tipc: Left network mode [ 811.317478][T16434] hsr_slave_0: entered promiscuous mode [ 811.330078][ T7017] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 811.339006][T16434] hsr_slave_1: entered promiscuous mode [ 811.352225][T16434] debugfs: 'hsr0' already exists in 'hsr' [ 811.366161][T16434] Cannot create hsr debugfs directory [ 811.511060][ T7017] usb 1-1: Using ep0 maxpacket: 16 [ 811.536446][ T7017] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 811.576000][ T7017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.604468][ T7017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.626059][ T7017] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 811.662636][ T7017] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 811.689624][ T7017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.723526][ T7017] usb 1-1: config 0 descriptor?? [ 812.270232][ T7017] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0023/input/input76 [ 812.401566][ T7017] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0023/input/input77 [ 812.646401][ T7017] kye 0003:0458:5013.0023: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 812.781867][ T7017] usb 1-1: USB disconnect, device number 112 [ 813.036495][T16578] fido_id[16578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 813.351544][T15164] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 813.477143][ T30] audit: type=1326 audit(1776670731.424:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16585 comm="syz.0.3021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f0a3b996597 code=0x0 [ 813.565934][ T30] audit: type=1326 audit(1776670731.454:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16585 comm="syz.0.3021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f0a3b996597 code=0x0 [ 813.589954][T15164] usb 2-1: Using ep0 maxpacket: 32 [ 813.660551][T15164] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 813.725061][T15164] usb 2-1: config 0 has no interface number 0 [ 813.770995][T15164] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 813.787796][T15164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.797554][T15164] usb 2-1: Product: syz [ 813.802275][T15164] usb 2-1: Manufacturer: syz [ 813.808717][T15164] usb 2-1: SerialNumber: syz [ 813.846977][T15164] usb 2-1: config 0 descriptor?? [ 813.871825][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.896596][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.015016][ T1097] team0 (unregistering): Port device batadv1 removed [ 814.280275][T16597] netlink: 'syz.3.3023': attribute type 13 has an invalid length. [ 814.680361][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 814.715741][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 815.236532][ T7025] IPVS: starting estimator thread 0... [ 815.330616][T16610] IPVS: using max 33 ests per chain, 79200 per kthread [ 815.397967][ T5505] 8021q: adding VLAN 0 to HW filter on device eth5 [ 815.531162][T16124] bond6: (slave gretap1): link status up again after 0 ms [ 815.560799][T16124] bond6: (slave gretap1): link status up again after 0 ms [ 815.619669][ T7253] bond6: (slave gretap1): link status up again after 0 ms [ 815.665523][ T7253] bond6: (slave gretap1): link status up again after 0 ms [ 815.701612][ T7249] bond6: (slave gretap1): link status up again after 0 ms [ 815.729626][ T7253] bond6: (slave gretap1): link status up again after 0 ms [ 815.757222][ T185] bond6: (slave gretap1): link status up again after 0 ms [ 815.793426][ T7249] bond6: (slave gretap1): link status up again after 0 ms [ 815.829204][ T7249] bond6: (slave gretap1): link status up again after 0 ms [ 815.844650][T16617] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 815.880180][ T7249] bond6: (slave gretap1): link status up again after 0 ms [ 815.909740][ T7249] bond6: (slave gretap1): link status up again after 0 ms [ 816.178027][T15164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 816.201879][T16629] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3030'. [ 816.228880][T15164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 816.265482][T15164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 816.285684][T15164] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 816.345166][T15164] usb 2-1: USB disconnect, device number 122 [ 817.550340][T16541] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 817.613520][T16434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 817.686573][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.733704][T16541] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.746123][T16434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 817.774676][T16541] usb 2-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.816370][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.829677][T16541] usb 2-1: config 1 interface 0 has no altsetting 0 [ 817.840330][T16434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 817.855349][T16541] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.886615][T16541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.898656][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.928441][T16541] usb 2-1: Product: syz [ 817.934397][T16434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 817.948171][T16541] usb 2-1: Manufacturer: syz [ 817.960526][T16541] usb 2-1: SerialNumber: syz [ 817.987163][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.211737][T16541] cdc_ether 2-1:1.0: skipping garbage [ 818.243589][T16541] usb 2-1: No union descriptors [ 818.294054][T16541] usb 2-1: USB disconnect, device number 123 [ 818.453427][T16434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.521251][T16434] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.558843][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.562450][T15164] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 818.566306][ T7249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.637588][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.644833][ T7249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.779628][T15164] usb 6-1: Using ep0 maxpacket: 16 [ 818.797770][T15164] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.824627][T15164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 818.849889][T16664] netlink: 'syz.3.3035': attribute type 3 has an invalid length. [ 818.876595][T15164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 818.912361][T16664] program syz.3.3035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 818.913817][T15164] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 818.962226][T15164] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.995672][T15164] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 819.016976][T15164] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 819.028053][T15164] usb 6-1: Manufacturer: syz [ 819.055651][T15164] usb 6-1: config 0 descriptor?? [ 819.128285][T16434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.287423][T16434] veth0_vlan: entered promiscuous mode [ 819.347709][T16434] veth1_vlan: entered promiscuous mode [ 819.537918][T16434] veth0_macvtap: entered promiscuous mode [ 819.604840][T16434] veth1_macvtap: entered promiscuous mode [ 819.699848][T15164] rc_core: IR keymap rc-hauppauge not found [ 819.718965][T16434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.743230][T15164] Registered IR keymap rc-empty [ 819.758523][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 819.805000][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 819.809228][T16684] binder: 16678:16684 ioctl c0046209 200000000000000 returned -22 [ 819.895489][T15164] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 819.923013][T15164] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input78 [ 819.997342][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.055989][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.100435][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.139920][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.176410][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.201858][T16434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.209880][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.255216][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.283734][ T7253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.298650][ T7253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.318031][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.325413][ T7253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.359741][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.404542][ T1097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.428482][T15164] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 820.473484][T15164] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 820.494447][T15164] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 820.582635][T15164] usb 6-1: USB disconnect, device number 3 [ 821.009629][ T1097] net_ratelimit: 30 callbacks suppressed [ 821.009651][ T1097] bond6: (slave gretap1): failed to get link speed/duplex [ 821.212594][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.240783][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.347816][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.370005][ T1097] bond6: (slave gretap1): failed to get link speed/duplex [ 821.382322][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.489633][ T5924] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 821.509754][T16124] bond6: (slave gretap1): failed to get link speed/duplex [ 821.650452][ T185] bond6: (slave gretap1): failed to get link speed/duplex [ 821.669618][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 821.709922][ T5924] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 821.750434][ T5924] usb 6-1: config 0 has no interface number 0 [ 821.780798][ T5924] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 821.810375][ T185] bond6: (slave gretap1): failed to get link speed/duplex [ 821.830510][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.862408][ T5924] usb 6-1: Product: syz [ 821.887056][ T5924] usb 6-1: Manufacturer: syz [ 821.908317][ T5924] usb 6-1: SerialNumber: syz [ 821.938674][ T5924] usb 6-1: config 0 descriptor?? [ 821.979916][T16124] bond6: (slave gretap1): failed to get link speed/duplex [ 822.142569][ T185] bond6: (slave gretap1): failed to get link speed/duplex [ 822.281096][ T185] bond6: (slave gretap1): failed to get link speed/duplex [ 822.413796][T16706] ======================================================= [ 822.413796][T16706] WARNING: The mand mount option has been deprecated and [ 822.413796][T16706] and is ignored by this kernel. Remove the mand [ 822.413796][T16706] option from the mount to silence this warning. [ 822.413796][T16706] ======================================================= [ 822.472563][ T185] bond6: (slave gretap1): failed to get link speed/duplex [ 822.600275][ T7249] bond6: (slave gretap1): failed to get link speed/duplex [ 822.760146][ T5904] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 822.795278][T16709] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3045'. [ 822.929959][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 822.942107][ T5904] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 822.968923][ T5904] usb 2-1: config 0 has no interface number 0 [ 823.001497][ T5904] usb 2-1: config 0 interface 187 has no altsetting 0 [ 823.037705][ T5904] usb 2-1: New USB device found, idVendor=c942, idProduct=2c0f, bcdDevice=47.09 [ 823.063566][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.095359][ T5904] usb 2-1: config 0 descriptor?? [ 823.343831][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'. [ 823.359793][T16707] netlink: 'syz.1.3044': attribute type 12 has an invalid length. [ 823.449205][T16719] binder: 16710:16719 ioctl c0046209 200000000000000 returned -22 [ 823.523848][ T5904] usb 2-1: string descriptor 0 read error: -71 [ 823.575393][ T5904] usb-storage 2-1:0.187: USB Mass Storage device detected [ 823.592676][T16721] overlayfs: missing 'lowerdir' [ 823.644320][T14721] IPVS: starting estimator thread 0... [ 823.749756][T16722] IPVS: using max 29 ests per chain, 69600 per kthread [ 823.797142][ T5904] usb 2-1: USB disconnect, device number 124 [ 824.670879][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'. [ 824.717182][T16707] netlink: 'syz.1.3044': attribute type 12 has an invalid length. [ 824.805866][ T185] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.856497][ T185] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.903710][T14721] usb 4-1: USB disconnect, device number 105 [ 824.913200][ T185] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.938622][ T185] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.291730][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 825.305374][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 825.315281][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 825.335707][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 825.346330][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 825.449455][ T5924] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 825.488512][ T5924] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 825.517667][ T5924] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 825.557420][ T5924] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 825.610974][ T5924] usb 6-1: USB disconnect, device number 4 [ 826.304597][ T7249] net_ratelimit: 11 callbacks suppressed [ 826.304619][ T7249] bond6: (slave gretap1): failed to get link speed/duplex [ 826.368475][T16729] chnl_net:caif_netlink_parms(): no params data found [ 826.418325][T16745] netlink: 'syz.5.3054': attribute type 1 has an invalid length. [ 826.842469][T16624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 826.964245][ T7017] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 827.014430][T14721] IPVS: starting estimator thread 0... [ 827.103719][T16624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 827.149820][T16766] IPVS: using max 29 ests per chain, 69600 per kthread [ 827.382066][ T51] Bluetooth: hci3: command tx timeout [ 827.402079][T16624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 827.433473][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.441145][T16729] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.452128][T16729] bridge_slave_0: entered allmulticast mode [ 827.460898][T16729] bridge_slave_0: entered promiscuous mode [ 827.525582][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.549771][T16729] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.560920][T16729] bridge_slave_1: entered allmulticast mode [ 827.587093][T16729] bridge_slave_1: entered promiscuous mode [ 827.813850][T16624] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 827.876632][T16624] team0: Port device netdevsim0 removed [ 827.958086][T16624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 828.237441][T16729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.316699][T16729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.474163][T16729] team0: Port device team_slave_0 added [ 828.491666][T16729] team0: Port device team_slave_1 added [ 828.748665][T16729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.758761][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.787727][T16729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.801652][ T7025] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 828.853006][T16729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.862125][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.889040][T16729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.969745][ T7025] usb 3-1: Using ep0 maxpacket: 32 [ 828.977718][ T7025] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 828.992169][ T7025] usb 3-1: config 0 has no interface number 0 [ 829.011891][ T7025] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 829.025931][ T7025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.043028][ T7025] usb 3-1: Product: syz [ 829.047650][ T7025] usb 3-1: Manufacturer: syz [ 829.060435][T16624] bridge_slave_1: left allmulticast mode [ 829.069325][T16624] bridge_slave_1: left promiscuous mode [ 829.075318][ T7025] usb 3-1: SerialNumber: syz [ 829.093896][T16624] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.105119][ T7025] usb 3-1: config 0 descriptor?? [ 829.126974][T16624] bridge_slave_0: left allmulticast mode [ 829.144148][T16624] bridge_slave_0: left promiscuous mode [ 829.155020][T16624] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.421563][ T7017] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 829.461016][T14114] Bluetooth: hci3: command tx timeout [ 829.590753][ T7017] usb 1-1: Using ep0 maxpacket: 8 [ 829.605319][T16624] bond6 (unregistering): (slave gretap1): Removing an active aggregator [ 829.614219][ T7017] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 829.614259][ T7017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.614282][ T7017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.614302][ T7017] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 829.614336][ T7017] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 829.614355][ T7017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.643912][ T7017] usb 1-1: config 0 descriptor?? [ 829.760609][T16624] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 830.052178][T16802] binder: 16791:16802 ioctl c0046209 200000000000000 returned -22 [ 830.063160][T16624] bond0 (unregistering): (slave 70): Releasing backup interface [ 830.084686][T16624] bond0 (unregistering): Released all slaves [ 830.135224][T16624] bond1 (unregistering): Released all slaves [ 830.243375][T16624] bond2 (unregistering): Released all slaves [ 830.338494][T16624] bond3 (unregistering): Released all slaves [ 830.404777][T16624] bond4 (unregistering): Released all slaves [ 830.497533][T16624] bond5 (unregistering): Released all slaves [ 830.566324][T16624] bond6 (unregistering): Released all slaves [ 830.632155][T16624] bond7 (unregistering): Released all slaves [ 831.307294][T16805] team0: Device gtp0 is of different type [ 831.514799][T16729] hsr_slave_0: entered promiscuous mode [ 831.544020][ T51] Bluetooth: hci3: command tx timeout [ 831.552025][ T7017] usbhid 1-1:0.0: can't add hid device: -71 [ 831.564218][T16729] hsr_slave_1: entered promiscuous mode [ 831.575447][ T7017] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 831.584472][T16729] debugfs: 'hsr0' already exists in 'hsr' [ 831.592043][T16729] Cannot create hsr debugfs directory [ 831.600819][ T7017] usb 1-1: USB disconnect, device number 114 [ 831.613370][T16624] hma(sha22: left promiscuous mode [ 831.917076][ T7025] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 831.965117][ T7025] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 832.001977][ T7025] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 832.044827][ T7025] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 832.091003][ T7025] usb 3-1: USB disconnect, device number 99 [ 833.551000][T16624] hsr_slave_0: left promiscuous mode [ 833.574376][T16624] hsr_slave_1: left promiscuous mode [ 833.592380][T16624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.621985][ T51] Bluetooth: hci3: command tx timeout [ 833.642254][T16624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.689636][ T7017] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 833.704752][T16624] pim6reg (unregistering): left allmulticast mode [ 833.860651][ T7017] usb 3-1: Using ep0 maxpacket: 32 [ 833.871767][ T7017] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 833.881797][ T7017] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 833.892365][ T7017] usb 3-1: config 0 interface 0 has no altsetting 0 [ 833.904627][ T7017] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 833.913902][ T7017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.925873][ T7017] usb 3-1: Product: syz [ 833.930737][ T7017] usb 3-1: Manufacturer: syz [ 833.935391][ T7017] usb 3-1: SerialNumber: syz [ 833.944557][ T7017] usb 3-1: config 0 descriptor?? [ 833.953425][T16863] binder: 16856:16863 ioctl c0046209 200000000000000 returned -22 [ 834.008989][T16624] team_slave_1 (unregistering): left allmulticast mode [ 834.024127][T16624] team0 (unregistering): Port device team_slave_1 removed [ 834.033384][ T7022] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 834.064453][T16624] team_slave_0 (unregistering): left allmulticast mode [ 834.080515][T16624] team0 (unregistering): Port device team_slave_0 removed [ 834.199647][ T7022] usb 6-1: Using ep0 maxpacket: 32 [ 834.209913][ T7022] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 834.218500][ T7022] usb 6-1: config 0 has no interface number 0 [ 834.229964][ T7022] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 834.239416][ T7022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.249614][ T7022] usb 6-1: Product: syz [ 834.254018][ T7022] usb 6-1: Manufacturer: syz [ 834.258814][ T7022] usb 6-1: SerialNumber: syz [ 834.284693][ T7022] usb 6-1: config 0 descriptor?? [ 834.368091][ T7017] gs_usb 3-1:0.0: Configuring for 154 interfaces [ 834.405738][T16624] dummy0 (unregistering): left allmulticast mode [ 834.426714][T16624] team0 (unregistering): Port device dummy0 removed [ 834.568244][ T5505] 8021q: adding VLAN 0 to HW filter on device eth5 [ 834.585943][ T7017] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 834.634696][ T7017] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 835.245979][T16866] Set syz1 is full, maxelem 768 reached [ 835.273616][T16866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.299112][T16866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.361574][ T7022] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 835.433783][ T7022] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 835.472244][ T7022] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 835.562040][ T7022] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 835.625127][ T7022] usb 6-1: USB disconnect, device number 5 [ 835.705001][T16624] IPVS: stop unused estimator thread 0... [ 836.243250][T16729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 836.256213][T16729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 836.275983][T16729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 836.313597][T16729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 836.336345][T16729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 836.367361][T16729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 836.380596][T16888] FAULT_INJECTION: forcing a failure. [ 836.380596][T16888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.394697][T16729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 836.417661][T16729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 836.439794][T16888] CPU: 0 UID: 0 PID: 16888 Comm: syz.0.3083 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.439824][T16888] Tainted: [L]=SOFTLOCKUP [ 836.439831][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 836.439844][T16888] Call Trace: [ 836.439852][T16888] [ 836.439861][T16888] dump_stack_lvl+0xe8/0x150 [ 836.439898][T16888] should_fail_ex+0x412/0x560 [ 836.439932][T16888] _copy_to_user+0x31/0xb0 [ 836.439955][T16888] simple_read_from_buffer+0xe1/0x170 [ 836.439981][T16888] proc_fail_nth_read+0x1bb/0x230 [ 836.440005][T16888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 836.440031][T16888] ? rw_verify_area+0x2a6/0x4d0 [ 836.440054][T16888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 836.440076][T16888] vfs_read+0x20c/0xa70 [ 836.440101][T16888] ? __pfx___mutex_lock+0x10/0x10 [ 836.440121][T16888] ? __pfx_vfs_read+0x10/0x10 [ 836.440146][T16888] ? __fget_files+0x2a/0x420 [ 836.440170][T16888] ? __fget_files+0x3a0/0x420 [ 836.440189][T16888] ? __fget_files+0x2a/0x420 [ 836.440216][T16888] ksys_read+0x150/0x270 [ 836.440240][T16888] ? __pfx_ksys_read+0x10/0x10 [ 836.440276][T16888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.440298][T16888] do_syscall_64+0x15f/0xf80 [ 836.440328][T16888] ? trace_irq_disable+0x3b/0x140 [ 836.440355][T16888] ? clear_bhb_loop+0x40/0x90 [ 836.440379][T16888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.440399][T16888] RIP: 0033:0x7f0a3b95d04e [ 836.440419][T16888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 836.440436][T16888] RSP: 002b:00007f0a3c76dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 836.440475][T16888] RAX: ffffffffffffffda RBX: 00007f0a3c76e6c0 RCX: 00007f0a3b95d04e [ 836.440492][T16888] RDX: 000000000000000f RSI: 00007f0a3c76e0a0 RDI: 0000000000000004 [ 836.440505][T16888] RBP: 00007f0a3c76e090 R08: 0000000000000000 R09: 0000000000000000 [ 836.440519][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.440532][T16888] R13: 00007f0a3bc16038 R14: 00007f0a3bc15fa0 R15: 00007f0a3bd3fa48 [ 836.440566][T16888] [ 836.484908][ T7017] usb 3-1: USB disconnect, device number 100 [ 836.802845][T16899] fuse: Bad value for 'fd' [ 836.959311][T16899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3085'. [ 836.982168][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 836.998660][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 837.051323][T16904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3085'. [ 837.421214][T16729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.499450][T16729] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.509608][ T7017] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 837.592218][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.599446][T16124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.671217][ T7017] usb 2-1: Using ep0 maxpacket: 32 [ 837.674513][ T7017] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 837.674543][ T7017] usb 2-1: config 0 has no interface number 0 [ 837.680511][ T7017] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 837.680541][ T7017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.680564][ T7017] usb 2-1: Product: syz [ 837.680580][ T7017] usb 2-1: Manufacturer: syz [ 837.680596][ T7017] usb 2-1: SerialNumber: syz [ 837.700683][ T7017] usb 2-1: config 0 descriptor?? [ 837.758966][T16931] tipc: Failed to remove unknown binding: 66,0,0/0:93931210/93931212 [ 837.759028][T16931] tipc: Failed to remove unknown binding: 66,0,0/0:93931210/93931211 [ 837.765150][T16931] tipc: Failed to remove unknown binding: 66,0,0/0:93931210/93931212 [ 837.765249][T16931] tipc: Failed to remove unknown binding: 66,0,0/0:93931210/93931211 [ 837.811161][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.811271][T16124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.202347][T16729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.308326][T16729] veth0_vlan: entered promiscuous mode [ 838.323916][T16729] veth1_vlan: entered promiscuous mode [ 838.461076][T16729] veth0_macvtap: entered promiscuous mode [ 838.476265][T16729] veth1_macvtap: entered promiscuous mode [ 838.501191][T16931] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 838.515032][T16931] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 838.523924][T16729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.550801][T16729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.552696][T16931] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 838.588304][T16931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 838.594980][ T7253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.605340][T16931] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 838.614167][ T7253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.629975][ T7253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.640321][T16124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.657751][T16931] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 838.673151][T16931] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 838.719114][T16931] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 838.776509][T16931] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 838.811316][T16931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 838.831225][T16931] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 838.852063][T16931] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 838.999315][T16624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.029145][T16624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.104619][T16124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.109903][ T7022] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 839.112799][ T7025] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 839.136779][T16124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.281326][ T7022] usb 1-1: Using ep0 maxpacket: 16 [ 839.302563][ T7022] usb 1-1: config 194 has an invalid interface number: 102 but max is 2 [ 839.332824][ T7025] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 839.334870][ T7022] usb 1-1: config 194 has 2 interfaces, different from the descriptor's value: 3 [ 839.357401][ T7025] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 839.383120][ T7017] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 839.404820][ T7025] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 839.430577][ T7025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 839.440221][ T7017] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 839.451290][ T7022] usb 1-1: config 194 has no interface number 1 [ 839.455329][ T7025] usb 6-1: SerialNumber: syz [ 839.475013][ T7022] usb 1-1: config 194 interface 0 has no altsetting 1 [ 839.487517][ T7017] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 839.509215][ T7025] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 839.520805][ T7022] usb 1-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 839.538757][ T7025] usb-storage 6-1:1.0: USB Mass Storage device detected [ 839.544321][ T7017] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 839.555392][ T7022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.571849][ T7022] usb 1-1: Product: syz [ 839.588852][ T7017] usb 2-1: USB disconnect, device number 125 [ 839.595200][ T7022] usb 1-1: Manufacturer: syz [ 839.609580][ T7022] usb 1-1: SerialNumber: syz [ 839.614630][ T7025] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 839.654315][ T7025] scsi host1: usb-storage 6-1:1.0 [ 839.674091][T16972] x_tables: duplicate underflow at hook 1 [ 839.846727][ T7022] qmi_wwan 1-1:194.0: probe with driver qmi_wwan failed with error -22 [ 839.857313][ T7022] usb 1-1: unknown number of interfaces: 2 [ 839.883375][ T7022] usb 1-1: USB disconnect, device number 115 [ 840.092440][T16987] netlink: 'syz.2.3100': attribute type 4 has an invalid length. [ 840.100671][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 840.135647][ T7025] usb 6-1: USB disconnect, device number 6 [ 840.660440][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 840.739928][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 840.819723][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 841.390119][ T7025] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 841.621893][ T7025] usb 2-1: Using ep0 maxpacket: 32 [ 841.635848][ T7025] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 841.654635][ T7025] usb 2-1: config 0 has no interface number 0 [ 841.676882][ T7025] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 841.709341][ T7025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.739162][ T7025] usb 2-1: Product: syz [ 841.770881][ T7025] usb 2-1: Manufacturer: syz [ 841.785061][ T7025] usb 2-1: SerialNumber: syz [ 841.809069][ T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 841.820591][ T7025] usb 2-1: config 0 descriptor?? [ 841.979670][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 842.001312][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 842.024947][ T10] usb 3-1: config 0 has no interface number 0 [ 842.050414][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 842.077537][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 842.095575][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.118056][ T10] usb 3-1: Product: syz [ 842.149127][ T10] usb 3-1: Manufacturer: syz [ 842.171118][ T10] usb 3-1: SerialNumber: syz [ 842.179697][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 842.223704][ T10] usb 3-1: config 0 descriptor?? [ 842.257828][T17037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.292054][ T898] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 842.469686][ T898] usb 4-1: device descriptor read/64, error -71 [ 842.506547][T17037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.740461][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 842.759701][ T898] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 842.779802][T15164] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 842.820437][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 842.899976][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 842.920422][ T898] usb 4-1: device descriptor read/64, error -71 [ 842.961639][T15164] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 842.992545][T15164] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 843.029004][ T7025] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 843.043505][ T898] usb usb4-port1: attempt power cycle [ 843.051820][ T7025] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 843.063794][T15164] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 843.074472][T15164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.082712][ T7025] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 843.093721][T15164] usb 1-1: Product: syz [ 843.097943][T15164] usb 1-1: Manufacturer: syz [ 843.102843][T15164] usb 1-1: SerialNumber: syz [ 843.109170][ T7025] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 843.119162][T15164] usb 1-1: config 0 descriptor?? [ 843.133963][ T7025] usb 2-1: USB disconnect, device number 126 [ 843.140788][T15164] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 843.269677][ T7022] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 843.399645][ T898] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 843.419941][ T7022] usb 6-1: Using ep0 maxpacket: 16 [ 843.425106][ T898] usb 4-1: device descriptor read/8, error -71 [ 843.434146][ T7022] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 843.442793][ T7022] usb 6-1: config 254 has no interface number 0 [ 843.449547][ T7022] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 843.460285][ T7022] usb 6-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 843.472299][ T7022] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 843.483737][ T7022] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.494082][ T7022] usb 6-1: config 254 interface 235 has no altsetting 0 [ 843.505128][ T7022] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 843.514285][ T7022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.522353][ T7022] usb 6-1: Product: syz [ 843.526535][ T7022] usb 6-1: Manufacturer: syz [ 843.531215][ T7022] usb 6-1: SerialNumber: syz [ 843.544362][T17055] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 843.679672][ T898] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 843.703352][ T898] usb 4-1: device descriptor read/8, error -71 [ 843.714656][T17057] fuse: Bad value for 'rootmode' [ 843.820027][ T898] usb usb4-port1: unable to enumerate USB device [ 843.880616][T17055] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 843.891654][ T7022] usbtest 6-1:254.235: Linux gadget zero [ 843.897456][ T7022] usbtest 6-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 843.956679][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 843.969943][ T10] asix 3-1:0.188: probe with driver asix failed with error -71 [ 843.987804][ T10] usb 3-1: USB disconnect, device number 101 [ 844.260356][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 844.379914][ T10] usb 1-1: USB disconnect, device number 116 [ 844.820934][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 844.900862][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 844.979968][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 845.227737][T17095] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3129'. [ 845.512067][ T7017] usb 6-1: USB disconnect, device number 7 [ 845.529708][T15164] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 845.719582][T15164] usb 2-1: Using ep0 maxpacket: 32 [ 845.730665][T15164] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 845.745377][T15164] usb 2-1: config 0 has no interface number 0 [ 845.770847][T15164] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 845.800386][T15164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.819140][T15164] usb 2-1: Product: syz [ 845.838400][T15164] usb 2-1: Manufacturer: syz [ 845.845781][T15164] usb 2-1: SerialNumber: syz [ 845.898672][T15164] usb 2-1: config 0 descriptor?? [ 846.669633][ T7022] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 846.840689][ T7022] usb 6-1: Using ep0 maxpacket: 16 [ 846.864196][ T7022] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.899808][ T7022] usb 6-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 25 [ 846.937352][ T7022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.959966][ T7022] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 846.988778][ T7022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.037378][ T7022] usb 6-1: config 0 descriptor?? [ 847.084556][ T7022] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 847.399215][T17131] [ 847.401671][T17131] ============================================ [ 847.408020][T17131] WARNING: possible recursive locking detected [ 847.414212][T17131] syzkaller #0 Tainted: G L [ 847.420220][T17131] -------------------------------------------- [ 847.426390][T17131] syz.5.3134/17131 is trying to acquire lock: [ 847.432485][T17131] ffffffff8f3cef90 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 847.442732][T17131] [ 847.442732][T17131] but task is already holding lock: [ 847.450123][T17131] ffffffff8f3cef90 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 847.460441][T17131] [ 847.460441][T17131] other info that might help us debug this: [ 847.468526][T17131] Possible unsafe locking scenario: [ 847.468526][T17131] [ 847.476006][T17131] CPU0 [ 847.479308][T17131] ---- [ 847.482615][T17131] lock(qp_broker_list.mutex); [ 847.487505][T17131] lock(qp_broker_list.mutex); [ 847.492395][T17131] [ 847.492395][T17131] *** DEADLOCK *** [ 847.492395][T17131] [ 847.500581][T17131] May be due to missing lock nesting notation [ 847.500581][T17131] [ 847.508949][T17131] 1 lock held by syz.5.3134/17131: [ 847.514095][T17131] #0: ffffffff8f3cef90 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 847.524904][T17131] [ 847.524904][T17131] stack backtrace: [ 847.530831][T17131] CPU: 1 UID: 0 PID: 17131 Comm: syz.5.3134 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.530866][T17131] Tainted: [L]=SOFTLOCKUP [ 847.530876][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 847.530889][T17131] Call Trace: [ 847.530899][T17131] [ 847.530909][T17131] dump_stack_lvl+0xe8/0x150 [ 847.530944][T17131] print_deadlock_bug+0x279/0x290 [ 847.530969][T17131] __lock_acquire+0x253f/0x2cf0 [ 847.531002][T17131] ? is_bpf_text_address+0x292/0x2b0 [ 847.531032][T17131] ? is_bpf_text_address+0x26/0x2b0 [ 847.531063][T17131] ? kernel_text_address+0xa5/0xe0 [ 847.531089][T17131] ? __kernel_text_address+0xd/0x30 [ 847.531116][T17131] ? vmci_qp_broker_detach+0x117/0xf20 [ 847.531141][T17131] lock_acquire+0x106/0x350 [ 847.531170][T17131] ? vmci_qp_broker_detach+0x117/0xf20 [ 847.531201][T17131] __mutex_lock+0x1a3/0x1550 [ 847.531220][T17131] ? vmci_qp_broker_detach+0x117/0xf20 [ 847.531247][T17131] ? kasan_save_track+0x4f/0x80 [ 847.531269][T17131] ? kasan_save_track+0x3e/0x80 [ 847.531291][T17131] ? kasan_save_free_info+0x46/0x50 [ 847.531309][T17131] ? __kasan_slab_free+0x5c/0x80 [ 847.531332][T17131] ? kfree+0x1c5/0x640 [ 847.531350][T17131] ? vmci_ctx_put+0x5ef/0xc40 [ 847.531378][T17131] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 847.531408][T17131] ? vmci_datagram_dispatch+0x450/0xc60 [ 847.531439][T17131] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 847.531463][T17131] ? vmci_host_close+0x98/0x160 [ 847.531485][T17131] ? vmci_qp_broker_detach+0x117/0xf20 [ 847.531509][T17131] ? exit_to_user_mode_loop+0xed/0x480 [ 847.531537][T17131] ? __pfx___mutex_lock+0x10/0x10 [ 847.531565][T17131] vmci_qp_broker_detach+0x117/0xf20 [ 847.531644][T17131] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 847.531670][T17131] ? kasan_quarantine_put+0xbb/0x1f0 [ 847.531694][T17131] ? lockdep_hardirqs_on+0x7a/0x110 [ 847.531728][T17131] ? kfree+0x1c5/0x640 [ 847.531749][T17131] ? vmci_ctx_put+0x5ef/0xc40 [ 847.531778][T17131] ? vmci_ctx_put+0x141/0xc40 [ 847.531810][T17131] vmci_ctx_put+0x64e/0xc40 [ 847.531843][T17131] ? vmci_ctx_put+0x141/0xc40 [ 847.531875][T17131] ? __pfx_vmci_ctx_put+0x10/0x10 [ 847.531913][T17131] ? do_raw_spin_unlock+0xf5/0x210 [ 847.531942][T17131] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 847.531979][T17131] vmci_datagram_dispatch+0x450/0xc60 [ 847.532015][T17131] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 847.532054][T17131] vmci_qp_broker_detach+0x8dd/0xf20 [ 847.532086][T17131] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 847.532109][T17131] ? kasan_quarantine_put+0xbb/0x1f0 [ 847.532135][T17131] ? kfree+0x1c5/0x640 [ 847.532154][T17131] ? vmci_ctx_put+0x5ef/0xc40 [ 847.532198][T17131] vmci_ctx_put+0x64e/0xc40 [ 847.532227][T17131] ? vmci_ctx_put+0x141/0xc40 [ 847.532257][T17131] ? __pfx_vmci_ctx_put+0x10/0x10 [ 847.532312][T17131] vmci_host_close+0x98/0x160 [ 847.532341][T17131] ? __pfx_vmci_host_close+0x10/0x10 [ 847.532366][T17131] __fput+0x44f/0xa60 [ 847.532392][T17131] task_work_run+0x1d9/0x270 [ 847.532419][T17131] ? __pfx_task_work_run+0x10/0x10 [ 847.532448][T17131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.532471][T17131] exit_to_user_mode_loop+0xed/0x480 [ 847.532501][T17131] ? rcu_is_watching+0x15/0xb0 [ 847.532522][T17131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.532545][T17131] do_syscall_64+0x33e/0xf80 [ 847.532586][T17131] ? trace_irq_disable+0x3b/0x140 [ 847.532614][T17131] ? clear_bhb_loop+0x40/0x90 [ 847.532640][T17131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.532662][T17131] RIP: 0033:0x7f84ced9c819 [ 847.532693][T17131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.532712][T17131] RSP: 002b:00007f84cfc58028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 847.532734][T17131] RAX: 0000000000000000 RBX: 00007f84cf016090 RCX: 00007f84ced9c819 [ 847.532749][T17131] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 847.532763][T17131] RBP: 00007f84cee32c91 R08: 0000000000000000 R09: 0000000000000000 [ 847.532778][T17131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.532791][T17131] R13: 00007f84cf016128 R14: 00007f84cf016090 R15: 00007f84cf13fa48 [ 847.532813][T17131] [ 848.329722][T15164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 848.361145][T15164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 848.389713][T15164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 848.413905][T15164] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 848.478555][T15164] usb 2-1: USB disconnect, device number 127 [ 848.689701][ T7017] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 848.839677][ T7017] usb 1-1: Using ep0 maxpacket: 32 [ 848.846385][ T7017] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 848.856076][ T7017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.866790][ T7017] usb 1-1: config 0 descriptor?? [ 848.883712][ T7017] gspca_main: sunplus-2.14.0 probing 041e:400b [ 849.485947][T17133] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3139'. [ 850.104554][T17133] kvm: pic: non byte write [ 850.112740][ T7017] gspca_sunplus: reg_w_riv err -71 [ 850.121805][ T7017] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 850.134393][ T7017] usb 1-1: USB disconnect, device number 117