last executing test programs: 8m2.39693523s ago: executing program 2 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setxattr$incfs_metadata(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @random="6481bf928700", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0xffff0000}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000"], 0xa0}}, 0x0) (async) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) syz_open_dev$midi(&(0x7f0000000100), 0x20000000400000, 0x2000) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {r1, r2}}, './file0/../file0/file0\x00'}) (async) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r10, @ANYBLOB="000000000000000008000300", @ANYRES32=r9], 0x28}, 0x1, 0x8}, 0x0) write$cgroup_int(r6, &(0x7f0000000280)=0x5, 0x12) socket$vsock_stream(0x28, 0x1, 0x0) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000a9922091c4c8e790000000000000002dac06b5b19046d2000000860090780000000000000000400000000000ee3f000000002b036f8c006e75021d683910c3090b3185a7c747eb2278a273c1b800294429118927"], 0xfdef) write$6lowpan_enable(r3, &(0x7f00000000c0)='1', 0x1) (async) r11 = socket(0x10, 0x3, 0x0) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200480c4}, 0x4810) (async) socket$nl_route(0x10, 0x3, 0x0) 8m2.265046935s ago: executing program 2 (id=1038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x64, [0x4, 0x0, 0x5779, 0x1b7c, 0x103, 0x2, 0x7f, 0x0, 0x6, 0x9, 0x8000, 0xc, 0x6, 0x4, 0x9, 0xd, 0x7, 0x20, 0x2, 0x9, 0x1c0, 0x7fff, 0xfff8, 0x271, 0x1002, 0x7, 0x2, 0x55, 0x2, 0x5, 0x7f, 0x2, 0xd, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0xfffe, 0x8, 0x6, 0x4010, 0x2, 0x205, 0x2, 0x8009, 0x43, 0x1], 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000036c0)=ANY=[@ANYBLOB="14000000000000000700"/20], 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x4000) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) 8m1.92474965s ago: executing program 2 (id=1041): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x0, 0x8040) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="ff5f730f01c566b8c3008ec80f2f4639b8070000000f23c00f21f835020001000f23f80fc7adf00600000f322e0f01d1660f3882a1f17f00000f20d8", 0x3c}], 0x1, 0x6d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180), &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000240)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1, 0x1}, {0x4}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) 8m1.086417866s ago: executing program 2 (id=1048): syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x3bf8, 0x400, 0x1, 0x34}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r4, 0x6f58, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 8m0.212130137s ago: executing program 2 (id=1050): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r1, &(0x7f0000000140)=""/177, 0xb1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r2, 0xaea2, &(0x7f00000004c0)={[{0x15c8, 0xc787, 0x2, 0x6, 0x0, 0xc6, 0x70, 0x0, 0x3, 0xc, 0xda, 0xf8, 0x3}, {0x0, 0xf3f, 0x0, 0x7d, 0x8, 0x7, 0x2, 0xc, 0x0, 0x85, 0xd, 0x4e, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x6, 0x9, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0x40045108, &(0x7f0000001b80)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m59.272794898s ago: executing program 2 (id=1054): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) syz_usb_connect(0x0, 0x63, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)="b927db", 0x3, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) (async) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000001540)=""/124, 0x7c}], 0x7, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000100) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="160000001c0007a21e172ee2aba0dd000700"], 0x28}}, 0x20000000) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x20000004) (rerun: 32) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) (async) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYBLOB="910d7f5d66f2a7e7bdb6fd5444329da5d04eae7b8f9a31c61ca06b7e06faf3055222e909c0b890506da6c9c42fdc47624ba9f8", @ANYRESOCT, @ANYBLOB], 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) 7m58.994479301s ago: executing program 32 (id=1054): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) syz_usb_connect(0x0, 0x63, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)="b927db", 0x3, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) (async) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000001540)=""/124, 0x7c}], 0x7, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40000100) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="160000001c0007a21e172ee2aba0dd000700"], 0x28}}, 0x20000000) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x20000004) (rerun: 32) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) (async) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYBLOB="910d7f5d66f2a7e7bdb6fd5444329da5d04eae7b8f9a31c61ca06b7e06faf3055222e909c0b890506da6c9c42fdc47624ba9f8", @ANYRESOCT, @ANYBLOB], 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) 16.330035751s ago: executing program 0 (id=2782): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@l={0x92, 0x9, 0xb0, 0x1, 0x3, 0x6, 0x6c}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x256c, 0x6d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x3, 0xfa, {0x9, 0x21, 0x9, 0x9b, 0x1, {0x22, 0x86e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x40, 0x10}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0xee, 0x1, 0x8, 0x40, 0xd3}, 0x8, &(0x7f00000006c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xdc, &(0x7f0000000700)=@string={0xdc, 0x3, "02d6f67a03ee1cafd2518a85c55381767d6048197896f201316bd974ff125292879fb6af107d4719a35b5c99e161b07d5a9e2dcaa05206d0b83f29f2866b8df5fe184cbe6fb83ee6ae6b9ebfcc3306002c26fca7405a8647ee61b770073e61a515f08453440f9f43264c018678568eae92e44107fa99aa6bdcc2361901133bfb541a2003e945a42a79913e62fd66179396a26547a2905590f79b9d91c6ee46c51d9cd6016587573b1f485344233f0b4377c88318b59acef05b8b24cca0d609dce13ae7ff2a0f69c91f31b5edee92a3520f41724caa065a7b0eac"}}]}) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x12c, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff5c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x30}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f000000b800)=0x3) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40815}, 0x4045) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x20000000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$char_usb(r8, &(0x7f0000000480)=""/74, 0x4a) write$char_usb(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000003700)=ANY=[]) 13.292221054s ago: executing program 0 (id=2800): syz_usb_connect(0x2, 0x1b4, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xf2, 0xe4, 0x68, 0x10, 0x12d1, 0xb355, 0x4592, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a2, 0x1, 0x0, 0xfd, 0x20, 0x0, [{{0x9, 0x4, 0x23, 0x0, 0x8, 0xff, 0x5, 0x18, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x6, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xff, 0xfffd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x9, 0x62, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}]}}, {{0x9, 0x5, 0x2, 0x5, 0x0, 0x7, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xf, 0x6, 0x9, [@generic={0xd5, 0x24, "af42efe7849480ed498a9f04d7e4e943f5eecfe2b69d73ab166d86eaa04e1888fe6a5b53ff62df8a5a70f206347a4b5c68b76b925b2849962f4de8f5465d77a1b59892252404a5a377110064309e878d6d9a7118fcb9b1c685a5c2556460d30ace31a08cf50cacb645f84680993437f3a5286035b1d60883c904e72d81f42def09b024ddf3661a0090cbb2153662a6402cbfb6580989fdbefb1dddc19dacec9f182e2f92a859132408721260dfffa502878fc849621b089cd367d32c20e4a3f5b416827cc46ce2ee8d8bd9044cdd843976c78b"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0xe, 0x7, 0x2}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x7, 0xc3, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x7, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x4}, @generic={0x57, 0x23, "677a586ee5bce2007a9f525dc7e81180251a290c8c0387e21948ae31ebf73ded69570dd53b3f7f8717cefd5a58f573c00b252b44546a34c06a59916f67fd41de4e3ebcf2f484b80e329631e59e361d7ff7e12f1fce"}]}}]}}]}}]}}, 0x0) 10.170020105s ago: executing program 3 (id=2810): socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x10, 0xc, 0x4f}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 10.004765952s ago: executing program 0 (id=2811): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x18) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0], 0xc4}}, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 9.698035776s ago: executing program 4 (id=2813): syz_emit_ethernet(0x42, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800480000340000000000019078ac1e0001ac1414bb440c0c01ac1414bb000000000d009078000000000000000000000000fffffffa7d0cd314e6238b1cae7b3e30bfaf0aee67b818e7efc61bc0ee5ebc564fd7bfde24483493d9fce4bce79de41543461701a0361aa536555696"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000040c0)={0xd, {"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", 0x1000}}, 0x1006) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) (async) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="170900100000000000118d000000050007000000000008000900060002000000000014001f0000000000000000000000000000000000140020006812bb87148c69870968f8000000000000002000eaff0106001b004e", @ANYRES8=0x0], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000680)={{0x2, 0x4e23, @empty}, {0x285, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x48, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 'team0\x00'}) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0x118, 0x118, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xff000000, 0x0, 0xff000000], 'veth1_macvtap\x00', 'dummy0\x00', {0x3e177b2ac6de4a87}, {}, 0x5c, 0x5, 0x2, 0x81}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x80, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, [0xff000000, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xffffffff], 'wg0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x0, 0x6, 0x2}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x800, 0x7, 0x5, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5}, {0x4, 0x4, 0x4}, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000040)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x9, 0x8a, 0x1, 0x7}, 0x8) 8.73427158s ago: executing program 4 (id=2815): keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) syz_usb_disconnect(r2) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 8.146049009s ago: executing program 3 (id=2817): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x800, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {0x0, 0x3, 0x0, 0xffffffffffffff80, 0x0, 0x8}, {0x9}, {0x1, 0xffffffff}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8601, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x60000027}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000100)={0xc000201a}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f00000000c0)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) unshare(0x2c020400) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x8000) 7.594065301s ago: executing program 1 (id=2818): r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040), 0xff7a}], 0x1}}], 0x8000000000000df, 0x40080c1) shutdown(r0, 0x1) syz_usb_connect(0x0, 0x63, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) getsockname(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) (async) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@broadcast, @dev, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0x0, 0x3b6}, &(0x7f0000002000), 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880), 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000032200000", @ANYRES32, @ANYBLOB="f38eca53c8768625b3d0facd8682462cf603eb0bb5702d625b1985072abcefa64df8515d43b34f7a243fc3ac2f0bda41924a8a4a95c87e4323b571d26f161db38a7b8fea90906d0e7629ef19fce010bf84e91dab0d332583bf54d4c1467c20d392339d", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) (async) recvmsg(r2, &(0x7f0000000840)={&(0x7f00000005c0)=@rc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000640)=""/175, 0xaf}, {&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f00000036c0)=""/4096, 0x1000}], 0x6, &(0x7f00000007c0)=""/73, 0x49}, 0x100) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000011600005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.263987528s ago: executing program 5 (id=2819): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x3f00, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 7.102871256s ago: executing program 3 (id=2820): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (fail_nth: 2) 6.610435678s ago: executing program 5 (id=2821): socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(0x0, 0x800000000002, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0xdd}]}, 0x10) (rerun: 64) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000001340)={0x2ec, 0x12, 0x300, 0x70bd2c, 0x25dfdbff, {0x8, 0x5, 0xd, 0x0, {0x4e24, 0x4e23, [0x3, 0x1, 0x2, 0x10001], [0xcd9a, 0x352a, 0x200, 0x8], 0x0, [0x9, 0x4]}, 0x0, 0xfff}, [@INET_DIAG_REQ_BYTECODE={0x64, 0x1, "a83e954e2275e519e75722112750136e4f42ad6aa75511025f0ea635f8d21a578dd4ac7390fa592f6248e3663e37d6ea7f0849e8aaf53542a45bf65ae6d92db533b21b37a02bb2bb333c9a6c196946621c9fc2d3d5f579a781f20099498f76eb"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "7077112ff4eaf4"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "abe0598b7128439477929570692ee871bbea368031358f995b1cc2cfb64cde4dfabd522fb97fa115aa140279dc110adc2fca9b337c932996cb64b9b1a69dc8034bf5327d5caf29c97a3b5f8e675eb4361cd8eefd9ff4cb552363f7ae62bdcfa4503e6086a23f377dc9ba47e1ea602987866d9daef86cc54d506153daaa0b52"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "95871cb73465e3319c65532b3b403cdc51ecd3947de402c1eb28eccd9b3ba33c1dd9e7c2b7a34be502a871e5f90c5b1a4361d2f5781c1bff7607fb41b80535f60460874878cef89f"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "6d53efe794a6809ec2df2010cd8fcda922e2f862ea59aa7b569a33e71c24b41d66fa0a5355b5eb2f4b3ef7db37df57d6f3a7f54c9f9d3f9d151df4f65a2bb3d10838930f70097ee6269c9240d8f9e1d260bbe8518cc48c399506c508076859a49b96d10c00b0ee4aa18bd33ffd05c2bae51edebf9235ffbda5a8f1ff3fc976c7a8b8cdb1370012e0da8e171ecbfb2bf1b81eb5108305a5af55dcf5c8dd52467b343e8f106691c63d7881b72079b9320a7902097d8fd7bd6f4401eb162fcdd314147eeb7bc94ff5db4d4f05ccf70b2db88a6356533f5f725435a6b8"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, "b50a"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "901495bb08238b32cc6904401cb95a061f301e0d4e61caf5ea7ff967a6771968a34d9a867c36d1b7e3905dca817ea1fe6b1eb65eef05b2c209391b7412a9beeaa6dce151c379c51fc608b1894d880687d913a44ec8d9b00556f0d8b2ddd5168795263edf0421e813ac94896a57e3ab9b5a4ead"}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="47436b4c816815fc81d0e21fd7ec4a1915dc9fc0fe06f8eb6d722e85f699369715ed9263c36e63cd683296a55146b9b4f5c821c452ab0e1d9ef91b74c6f4ef51627f74acf58d70ac5acc56480ea6be72acae424a39866ba6ae3667ac959a832a3106307be8e70717456a968c2eaa0d344507f6253f15e6605cd39b", 0x7b}, {&(0x7f0000000f80)="6dcb05f2e48e61674ebd89769f9b927046079a4c6ab892d9f86b4055e41f9354be76dac275a1f97b8ae4a5a32ef98168f544f231803f620017a7a9faa294c78047e4ca39d474942f867f63510b836739483f0abaca269f0e173855387e16996e23c2482f194dd78e17f67aeeda5d35a842c298f9972314014c439d57cd74cb190e527db50d4760e4a54c12735b8e98871b0c7bd10748e969ef864f65381d4db90528adcbdf460d31074d34b27770933de479090331e728e8434347c93c52f985105a3d57f766486ea16428a7e8054cff9dbec74e9c77fe4c483e306e10", 0xdd}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x12, 0x0, 0x27) 6.057985882s ago: executing program 5 (id=2822): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030d0000000000000000000000030005000000000002004e20ac1e01010000000000000000020007"], 0x68}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) socket$kcm(0xa, 0x2, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000250001006cbd7000ffdbdf250600000008002a00", @ANYRES32=r5, @ANYBLOB="0400e7e07ce12a1265a498e02eca004088305bb0f52f8b61e0d3bade63462cf481f02b66f7c1166e9c8ada281074c7e8d1181aceebdf041b340000"], 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.988660008s ago: executing program 1 (id=2823): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) r1 = socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x15, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x12) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac14"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) socket$rds(0x15, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x6) getsockopt(r5, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001080006040001aaaaaaaaaaaaac1414bbaaaaaaaaaaaaac1414bbd383cf23006233f2711c5e5524481b53c65e14080efd9134b8543a298e60ac4f698fb4fea898e4842f5d9c5aca41b2a22e1a792d89bd98d295805d926f1a"], 0x0) 5.958925763s ago: executing program 0 (id=2824): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x8000) syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x800003f, r3, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010301010009210101000122050009058103ff"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="201209"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4.864056417s ago: executing program 4 (id=2825): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r2, 0x2) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x3f6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.486358122s ago: executing program 3 (id=2826): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0x980902, 0xffffff7c}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000047090000000700000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000d7c700008500000083000000bf090000000000005509010000000000950000000000000085000000d0000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000009d9b1f57"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 4.255451862s ago: executing program 5 (id=2827): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (fail_nth: 7) 3.476562292s ago: executing program 1 (id=2828): r0 = socket(0x26, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x8, 0x10, 0x4, 0xfffffffe, {{0xc, 0x4, 0x3, 0x9, 0x30, 0x64, 0x0, 0x3, 0x2b, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0xb, 0x0, 0x8, [0x7, 0x29f, 0x7, 0x8001, 0x7, 0x3]}]}}}}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, "0400"}) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000000)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x201, &(0x7f00000000c0)={0x0}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0x1, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0xde}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x60}]}, 0x20) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x52, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0xa0, 0x24, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x7}, {0x2, 0xf}, {0xc, 0x8}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xbf, 0x1, 0x1193, 0x1, 0x6, 0x4, 0x2}}, {0x8, 0x2, [0x6, 0x8]}}, {{0x1c, 0x1, {0x3, 0x3, 0x8, 0x8, 0x2, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x1b7]}}, {{0x1c, 0x1, {0x9, 0x8, 0x5, 0xa, 0x2, 0x8, 0x79bad7c9, 0x3}}, {0xa, 0x2, [0xfe00, 0x3, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x3a}}]}, 0xa0}}, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x44002, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800}, {}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xd4}, @jmp={0x5, 0x0, 0x4, 0xb, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x0, 0x0, 0x3, 0xa, 0x8, 0x20, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x3, 0x2, 0x3, 0x1, 0x9, 0x0, 0x5caa332c0cdeac2d}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x9, 0xc7, &(0x7f0000000540)=""/199, 0x41100, 0x5, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0xc, 0x4, 0xa7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x5, 0x3, 0xd, 0x1}, {0x1, 0x4, 0x2, 0x9}, {0x4, 0x2, 0xe, 0x9}, {0x3, 0x2, 0xf, 0x2}], 0x10, 0xe032, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000800)=r7) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000040)={0x8, 0x9d, "0beeca9e783b87132ad74ac65488c8612b59d323488eb03a2d17814af375701a623502e1ace6c1a51f31d454bdcba397665836c5bfe3f2db987cc4de9165c570306f880a180ab7e26d8cf57f461a53288063a3b8c6daab0fb1e401ff155fd9c3511fa2562f2e83f5f7cd8846bb46591d3c7fd23720119df1c685ddf7ce002096241cd0883cba0794327a4b8c5f26354cd67c18134d0d8b80d8d0b59e28"}) 3.21032938s ago: executing program 5 (id=2829): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) writev(r1, 0x0, 0x0) 2.733956908s ago: executing program 1 (id=2830): unshare(0x68040200) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/fscaps', 0x20100, 0x1e3daaa307bad460) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x9e13b000) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0}) prctl$PR_SET_TIMERSLACK(0x1d, 0xfff) nanosleep(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}, [0x4, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffc, 0x6, 0x0, 0x1000, 0x4b69, 0x6, 0x2, 0x1, 0xf63, 0x0, 0x0, 0x8001]}, &(0x7f0000000240)=0x100) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x9, 0x3, 0x8001}}, 0x30) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x80, 0x10, 0xb, 0xff}]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) unshare(0x24000100) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x3, @pix_mp={0x4, 0x7, 0x31384142, 0x5, 0x4, [{0x8, 0x6}, {0x8000, 0x6}, {0x40, 0x5}, {0x9, 0xf22}, {0x26}, {0x7, 0xfffff001}, {0x1, 0x3f}, {0x83c, 0x1000}], 0x7, 0x3, 0x3, 0x2}}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000096e000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4048aecb, &(0x7f00000005c0)=ANY=[]) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) r7 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r0, &(0x7f0000000300)="5c7fdf989879c771a9ff39ab92d8f063431dccf78816e0d1d5f01f73cf1750b6de5f1b1dbf7655195c2ec8e2609955becc034d125fd08cae66c9f0ec093f2f4ab811611b1c8309a46c84b5b8b86bab8615351f4429a1f2e90d2e2638e71e9054dd28b7e47a558504b9930e09c2b67e98d6f00c1d7506217410f60f938888c5aaa28a6f89c144ef8132b02276966c17fcf4eaa640948e06501e4b935e9ed4cb56f010c9bab2293d2b15599a6ad1cf757cf3fec077a8c184478905ca59c73d3a96371975aaab1f5178eab15e0521c1382ece02", 0xd2, 0x4040000, &(0x7f0000000400)={0x2, 0x4e24, @multicast2}, 0x10) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x103902, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='afs_make_fs_call1\x00', r0, 0x0, 0x6}, 0x18) sendto$inet(r7, 0x0, 0x0, 0x2400a018, &(0x7f0000000080)={0x2, 0x2, @loopback}, 0x10) 2.711451342s ago: executing program 0 (id=2831): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0xd, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r4, 0x0, 0x0, 0x8, 0x0) (async) preadv(r4, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x7}, @TCA_PIE_ECN={0x8, 0x6, 0x80000}]}}]}, 0x40}}, 0x44080) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x7}, @TCA_PIE_ECN={0x8, 0x6, 0x80000}]}}]}, 0x40}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="47436b4c816815fc81d0010000004a1915dc9fc0fe06f8eb6d722e85f699369715ed9263c36e63cd683296a55146b9b4f5c821c452ab0e1d9ef9197456480ea6be72ac", 0x43}], 0x1}}], 0x1, 0xc0) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000640)="18496ffc7cd2f2e900e4df80e6baf13c5720eb5274d94da6ba2d3bca4a7b9f7478f3daf2ac1d6f4933e3c482a327291f9facc77b2a025f8cd08f8feb8fce6c1010bc606ba397928fe347a623bae3dcac91e9604aeaabca02889065303ae4366c74d639262558178d183dff04f7bb2b0ff06461b21e548eca537f2adc8dd57f98fa0f1ba693b8893f31b6230d57de10bda02b54066a0066f486e481ad8dfe177a12466a95031b3b6301", 0xa9}, {&(0x7f0000000700)="0c026b46d6d8f33ce10a2501928fbc1e49cdccefe81ac1aabd26a08d0df2e022a1db5975190eb9e0027fc9e31e45bc2582b5f3af433c4af93efd0a3612789ee4895cdafde5c8159a880299ca10a5fcc1d425fc0b8fc08c741ad5580ec29b043b0dfe00ef78d22331b6df8401887aa902e716ffd72edf30b3f0753c439a", 0x7d}, {&(0x7f00000002c0)="021ec9e1c2879f22ce6c", 0xa}, {&(0x7f0000000a40)="9d4c1bc5fc4decb27fa5b654eeb332be24ed2d48ac37328222c361ca101ef51a863dd9038cab69e718d3fb7b1234a235bc223184e91b15519544b8a39a33e61569dc80057c2693172738604bbe686d0dc8910ff561a538c375900679451e77a25852cb544a7be448f3727eec38393e5ae3d6587a557adf7f04fdcf4896b496b417a8ef5da3b365a666501ba135c199ab257a7dd0cc3f43ca59d50dad771bd2e1e1a882887cc3c4945565d728954100c14b84888889bed9466e4b40fc337bdb186ebb4161decfce663fa1c44bcf47282306b76967285348f700a66762d3b58c51f37779a9491c3cc76adf65d21cfcd64499c31d86161138", 0xf7}, {0x0}, {0x0}], 0x6}, 0x40000) 2.708844824s ago: executing program 4 (id=2832): r0 = socket$qrtr(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0x2}, {0x0, 0xd}, {0x1, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7988c09d9dc372f4, 0xffff}}]}}]}, 0x3c}}, 0x20040054) connect$qrtr(r0, &(0x7f0000000080), 0xc) read(r0, &(0x7f0000000040)=""/49, 0x31) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2800}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fff}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) r7 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000c80)=[{r7}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x4, 0x7ffe}, 0xc) (async) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x4, 0x7ffe}, 0xc) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r5, 0x0, 0x0) (async) write$binfmt_script(r5, 0x0, 0x0) rseq(0xfffffffffffffffd, 0x41, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100000402505a1a440000102030109025f000201f910800904000001020d000008240600019772e705240009000d240f"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) open(0x0, 0x14507e, 0x0) (async) open(0x0, 0x14507e, 0x0) close_range(r8, 0xffffffffffffffff, 0x100000000000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0) 1.890135637s ago: executing program 4 (id=2833): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x160) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}}, 0x8000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') read$alg(r3, &(0x7f0000000e80)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000b600014c06ad3ea36fc7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x41, 0x6, 0xcd, 0x40, 0x6cd, 0x10f, 0xd51b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xb, 0xfd, 0x2, 0x33, 0x77, 0x61, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x81, 0x40, 0x6}}, {{0x9, 0x5, 0x87, 0x3, 0x8, 0xf, 0xff, 0x7}}]}}]}}]}}, 0x0) 1.858294001s ago: executing program 3 (id=2834): userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000112200"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ptrace(0x10, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) 1.739004676s ago: executing program 5 (id=2835): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x418}) r3 = syz_open_dev$vcsa(&(0x7f0000000200), 0x5, 0x101100) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RFSYNC(r5, &(0x7f0000000280)={0x7, 0x33, 0x1}, 0x7) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f00000002c0)={0x80000000}) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000300)={0x0, 0x2, 0x13}) syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000400)={0x3, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={0x0, r7, r8, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000580)={r9, 0x3, &(0x7f00000004c0)=[0x3116, 0x1b, 0x7], &(0x7f0000000500)=[0xd, 0x7], &(0x7f0000000540)=[0xa42, 0x6, 0x4, 0x1, 0xf9, 0x145]}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000005c0)=0x0) syz_open_procfs$userns(r10, &(0x7f0000000600)) r11 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2b, 0x30, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x2, 0x23, 0x1, {0x22, 0x9a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x6, 0x27}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x3, 0x8c}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x8, 0xfa, 0xe, 0x20, 0x48}, 0x34, &(0x7f00000006c0)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2c, "2e98e3590704d335b17f3667ca06f403"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7fffffa, 0xf000, 0xfff5, [0xff3f00, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x1, 0x7, 0x2}]}, 0x1, [{0xb0, &(0x7f0000000700)=@string={0xb0, 0x3, "3890deb9dc7bc02c098e7b57894c878f80b4d932e3ebbd9ddec590c852a599e79121f931fc9f55a329ab58a9fb232c68b2b163c6abfed79e5857140022a6cbfca579e9d195f10ad5c73a1d4796b55e39afdc67069c1f8d2ed7726ff9c0a54932dc2301b45988c7754fa4de453418733b9275f9ecd43020c061ab00b63c4d6ef7d3ee24bef516996f32f4867da78f73dd83b2b19f4a9dd8adbb582b28f710bd760a0a6ce86572bfbe742bf9c1ec81"}}]}) syz_usb_control_io$hid(r11, &(0x7f00000009c0)={0x24, &(0x7f0000000800)={0x0, 0x2, 0xd2, {0xd2, 0xb, "dc10890f369d0683b2887ee1019bb81232c3515fd97f84ed574cd241dc17ac139d79b15cc75b26d9dbc36e122e5f9d72bc987fe2492cf6cbe30aefb4ea21ad7969c4e6d57897bf85d065804059a9e0620dc8016f48d5b2c0753f8d9d2dc459b96b490389f7bc2d53eee7793b2ad7473eccc276747b81b7b3f52a15222275f87113ec4e18fa76546926686698d214a2ee654d6044b0b978b6186129160899075d26b54e5d935ebf1b5e9e1dba93b6302554cc3c1205c8f5fe008f5fbb68f55fc653c3fd60a15eb12da80989ff11dcb824"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000940)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x3, "430911d1"}, @global=@item_4={0x3, 0x1, 0xa, "6e4c52de"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0xb98}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x0, 0x9, 0x2, "9c2c"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000ac0)={0x20, 0x1, 0xa7, "c6afaf874f64a27dc421b241eb4a1b0bd40841673f67fbf6f40933e3c74147e0dfd4d9869e74e5b828f0d08b72625549a1911a68e2bb93d6d9de7b83a90cb13a32de6d64b207878e4730d47b7b7058411ea100b9b6e8ad057e7ffdd84d4f80a184e1b5e60e61a9b90a43d50baea67abe152186ed1fe5752a462f9fa46e3cd063f35bcbe00d8d4d3e35d03f65e8b996bd7339411273eb3b59ee886e0337054bb4b06121f422df3c"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x4}}) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000c00)=0x1ff) read$qrtrtun(r1, &(0x7f0000000c40)=""/162, 0xa2) pread64(r6, &(0x7f0000000d00)=""/155, 0x9b, 0x1ff) syz_open_dev$dri(&(0x7f0000000dc0), 0xb3, 0x10000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000e00)=@v1={0x0, @aes128, 0x4, @desc2}) fsetxattr$security_evm(r6, &(0x7f0000000e40), &(0x7f0000000e80)=@sha1={0x1, "b427fddc27efb5f5b477cbf80f38aeae489aa97f"}, 0x15, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x90df, 0x1}}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000f00)={0x0, r12, 0xfffffffffffffffd, 0x1, 0x101, 0xdc}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000f40)={0x2, 0x9cb, 0x7, 0x5, 0x2, "689d61f46417ca0f46de3e658b6c12c06a9512"}) r13 = syz_open_dev$sndctrl(&(0x7f0000000f80), 0x8, 0x705301) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r13, 0x40045532, &(0x7f0000000fc0)=0x1) 660.248748ms ago: executing program 3 (id=2836): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="7b0201000000000071113c000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1d, &(0x7f0000000100)=""/195, 0x0, 0x31, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x136, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x100, 0x3c, 0x0, @empty, @mcast2, {[], {0x0, 0x1, 0x100, 0x0, @wg=@data={0x4, 0x7, 0xa, "740cafccb23ec7f71dee63d6c53848e6dcaccfe358a0d403bdf4f42559037a6c22359e82e2cb6721311470a374bfce1dcf7eac9300faad5f16afccd0c63ac2a4e0112ed72aded8fea39cb8bb69d92f58ccc9876919b09080a4e5bdf2131bc0a11ecf5bd6ffa0b07ace78d0036a59fffebc5d8abb87371bea21e68d6d1a3d68c8a83ac24c4fb871ca59d7ec5038b7d68d4834ab78fc5a42062cb09698adfbaeaebd167976584213a714f057b67b4e04250fff93661b1a2fc172b4ed354feb674d0f8dde976b7a5e96cf665f5b8aa8a748cff8d17ffbc80982e66097a93bfb3857d2a1c1a31017586d"}}}}}}}, 0x0) r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x6c27, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000000901010000000000030000000000001000048008000f4100000003040002000c0002800500"], 0x58}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r7, r7}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'sha1-generic\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000200)=""/143) 439.764417ms ago: executing program 0 (id=2837): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xf9fd, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) accept4$inet(r1, 0x0, &(0x7f0000000000), 0x80000) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x1}}}}}]}}]}}, 0x0) (async) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x1}}}}}]}}]}}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101}}}], 0x20}, 0x8000) sendmsg$inet(r5, &(0x7f0000000800)={0x0, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000340)="c19e1bbe7e213c2cec96372b886337181824b48decc10ada6f94514339aeb5f96a7eee506405df89cc9a5a8f6e6d88c282b58561fa84d5a4d9233180efef6a9c9cdf75c8e6682af6d1f775f09089d1e77c599023", 0x54}, {&(0x7f0000002200)="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", 0x567}, {&(0x7f0000000640)="649351262ab8", 0x6}], 0x3}, 0x800) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x20000080) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x20000080) write$yama_ptrace_scope(r1, &(0x7f0000000100)='0\x00', 0x2) (async) write$yama_ptrace_scope(r1, &(0x7f0000000100)='0\x00', 0x2) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "00df0010"}, @global=@item_012={0x1, 0x1, 0x6, 'O'}]}}, 0x0}, 0x0) 355.529435ms ago: executing program 4 (id=2838): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x75881, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x20035f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) 157.827135ms ago: executing program 1 (id=2839): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (fail_nth: 8) 0s ago: executing program 1 (id=2840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003424ab000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"/421], 0x0) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000040)=@in, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000000140)=""/162, 0xa2}, 0x348}, {{&(0x7f0000001500)=@nfc, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f0000001680)=""/240, 0xf0}, {&(0x7f0000001780)=""/100, 0x73}, {&(0x7f0000001800)=""/255, 0xff}, {&(0x7f0000001900)=""/210, 0xd2}, {&(0x7f0000001a00)=""/155, 0x9b}], 0x6, &(0x7f0000001b40)=""/18, 0x12}, 0xdb57}, {{&(0x7f0000001b80)=@alg, 0x80, &(0x7f0000002100)=[{&(0x7f0000001c00)=""/135, 0x87}, {&(0x7f0000001cc0)=""/59, 0x3b}, {&(0x7f0000001d40)=""/2, 0x2}, {&(0x7f0000002700)=""/203, 0xcb}, {&(0x7f0000001e40)=""/215, 0xd7}, {&(0x7f0000001f40)=""/248, 0xf8}, {&(0x7f0000002040)=""/186, 0xba}], 0x7}, 0x10001}, {{&(0x7f0000002180)=@alg, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002200)=""/101, 0x65}, {&(0x7f0000002280)=""/137, 0x89}, {&(0x7f0000002340)=""/255, 0xff}, {&(0x7f0000002440)=""/113, 0x72}], 0x3, &(0x7f0000002500)=""/137, 0x89}, 0x200}], 0x4, 0x102, &(0x7f00000026c0)={0x0, 0x3938700}) kernel console output (not intermixed with test programs): EOD, truncated [ 730.384364][T14933] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[14933] [ 730.566305][T13463] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 730.715724][T13463] usb 4-1: Using ep0 maxpacket: 32 [ 730.723177][T13463] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.734790][T13463] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.747477][T13463] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 730.756728][T13463] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 730.766053][T13463] usb 4-1: Product: syz [ 730.770740][T13463] usb 4-1: Manufacturer: syz [ 730.792388][T13463] hub 4-1:4.0: USB hub found [ 731.002917][T13463] hub 4-1:4.0: 2 ports detected [ 731.018228][T13463] hub 4-1:4.0: config failed, can't get hub status (err -5) [ 731.078216][T13463] usb 4-1: USB disconnect, device number 33 [ 731.175778][T13464] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 731.358090][T13464] usb 2-1: config 0 has no interfaces? [ 731.372645][T13464] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 731.383208][T13464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.463333][T13464] usb 2-1: Product: syz [ 731.471850][T13464] usb 2-1: Manufacturer: syz [ 731.528784][T13464] usb 2-1: SerialNumber: syz [ 731.545717][T13463] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 731.594362][T13464] usb 2-1: config 0 descriptor?? [ 731.830910][T13463] usb 4-1: config 0 has no interfaces? [ 731.853243][T13463] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 731.855804][T13456] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 731.916630][T13463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.964648][T13453] usb 2-1: USB disconnect, device number 43 [ 732.012430][T13463] usb 4-1: Product: syz [ 732.043421][T13463] usb 4-1: Manufacturer: syz [ 732.056738][T13456] usb 6-1: Using ep0 maxpacket: 32 [ 732.068302][T13456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.082355][T13456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.128102][T13463] usb 4-1: SerialNumber: syz [ 732.160274][T13463] usb 4-1: config 0 descriptor?? [ 732.171176][T13456] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 732.220255][T13456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.258107][T13456] usb 6-1: config 0 descriptor?? [ 732.932481][T13456] savu 0003:1E7D:2D5A.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 733.414146][T13456] usb 6-1: USB disconnect, device number 113 [ 733.898084][T14965] x_tables: ip_tables: CT.2 target: invalid size 72 (kernel) != (user) 0 [ 733.992566][T14964] overlayfs: missing 'lowerdir' [ 734.040570][T14969] loop6: detected capacity change from 0 to 7 [ 734.129273][T14969] Dev loop6: unable to read RDB block 7 [ 734.136300][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.153485][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.164206][T14969] loop6: AHDI p3 p4 [ 734.218319][T14969] loop6: partition table partially beyond EOD, truncated [ 734.239719][T14969] loop6: p3 start 1886353253 is beyond EOD, truncated [ 734.333142][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 734.521255][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.636207][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.818372][T13456] usb 4-1: USB disconnect, device number 34 [ 735.477208][T14983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2336'. [ 735.621481][T14991] SET target dimension over the limit! [ 735.634405][T14991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.646193][T14991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.685761][T13456] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 735.936374][T13456] usb 6-1: Using ep0 maxpacket: 32 [ 735.953332][T13456] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 735.971339][T13456] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 735.982700][T13456] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 735.993090][T13456] usb 6-1: config 1 has no interface number 0 [ 735.999408][T13453] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 736.010782][T13456] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.022941][T13456] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 736.037045][T13456] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 736.047119][T13456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.066671][T13456] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 736.162738][T13453] usb 2-1: config 0 has no interfaces? [ 736.196635][T13453] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 736.206368][T13453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.214570][T13453] usb 2-1: Product: syz [ 736.219624][T13453] usb 2-1: Manufacturer: syz [ 736.224371][T13453] usb 2-1: SerialNumber: syz [ 736.250597][T13453] usb 2-1: config 0 descriptor?? [ 736.278704][T13456] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 736.851828][T15002] loop6: detected capacity change from 0 to 7 [ 736.861261][T15002] Dev loop6: unable to read RDB block 7 [ 736.867882][T15002] loop6: AHDI p3 p4 [ 736.872347][T15002] loop6: partition table partially beyond EOD, truncated [ 736.880317][T15002] loop6: p3 start 1886353253 is beyond EOD, truncated [ 737.338380][T13456] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 737.847800][T15024] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 737.963104][T13463] usb 6-1: USB disconnect, device number 114 [ 737.979219][T13463] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 737.983300][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'. [ 738.026581][T15026] netlink: 'syz.0.2348': attribute type 9 has an invalid length. [ 738.161801][T15026] macvlan3: entered allmulticast mode [ 738.206971][T15026] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 738.844953][T15038] loop2: detected capacity change from 0 to 7 [ 738.857480][ T5880] Dev loop2: unable to read RDB block 7 [ 738.863840][ T5880] loop2: unable to read partition table [ 738.874502][ T5880] loop2: partition table beyond EOD, truncated [ 738.876864][T15041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.893130][T15038] Dev loop2: unable to read RDB block 7 [ 738.897609][T15041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.908577][T15029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2349'. [ 738.918937][T15038] loop2: unable to read partition table [ 738.925363][T15038] loop2: partition table beyond EOD, truncated [ 738.943880][T15038] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 739.076192][T15045] loop6: detected capacity change from 0 to 7 [ 739.091680][T15045] Dev loop6: unable to read RDB block 7 [ 739.105750][T13456] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 739.119021][T15045] loop6: AHDI p3 p4 [ 739.132443][T15045] loop6: partition table partially beyond EOD, truncated [ 739.144610][T15045] loop6: p3 start 1886353253 is beyond EOD, truncated [ 739.322375][T13463] usb 2-1: USB disconnect, device number 44 [ 739.406077][T15054] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2357'. [ 739.765104][T15069] netlink: 'syz.5.2361': attribute type 4 has an invalid length. [ 739.775716][T13463] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 739.826174][T15069] rdma_op ffff88805bf471f0 conn xmit_rdma 0000000000000000 [ 739.955201][T13463] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 739.972430][T13463] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 739.981923][T13463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.045929][T13463] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 740.057073][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.208854][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.219605][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.295510][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.304443][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.328159][T13463] usb 2-1: USB disconnect, device number 45 [ 740.934092][T15086] loop6: detected capacity change from 0 to 7 [ 740.953877][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.994650][T15087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.074997][T15086] Dev loop6: unable to read RDB block 7 [ 741.111912][T15087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.121931][T15086] loop6: AHDI p3 p4 [ 741.136112][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.183219][T15086] loop6: partition table partially beyond EOD, truncated [ 741.195941][T15086] loop6: p3 start 1886353253 is beyond EOD, truncated [ 741.683675][T15104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.704706][T15104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.100617][T15111] hsr0: entered promiscuous mode [ 742.109431][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 742.153670][T15111] hsr_slave_0: left promiscuous mode [ 742.190047][T13468] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 742.276350][T15111] hsr_slave_1: left promiscuous mode [ 742.294748][T10871] Bluetooth: hci1: unexpected event for opcode 0x64c6 [ 742.457407][T15111] hsr0 (unregistering): left promiscuous mode [ 742.619939][T13468] usb 6-1: config 0 has no interfaces? [ 742.638455][T13468] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 742.648753][T13468] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.677669][T13468] usb 6-1: Product: syz [ 742.684946][T13468] usb 6-1: Manufacturer: syz [ 742.731676][T13468] usb 6-1: SerialNumber: syz [ 742.749272][T13468] usb 6-1: config 0 descriptor?? [ 742.910035][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2375'. [ 743.158603][T15109] team_slave_0: entered promiscuous mode [ 743.166791][T15109] team_slave_1: entered promiscuous mode [ 743.205552][T15109] vlan2: entered promiscuous mode [ 743.210770][T15109] team0: entered promiscuous mode [ 743.875949][T15077] delete_channel: no stack [ 744.615884][T13468] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 744.765905][T13464] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 744.845314][T13453] usb 6-1: USB disconnect, device number 116 [ 744.859923][T13468] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 744.899894][T13468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.927760][T13464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 228, changing to 11 [ 744.956621][T13464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9895, setting to 1024 [ 744.978464][T13468] usb 4-1: Product: syz [ 744.988599][T13468] usb 4-1: Manufacturer: syz [ 744.998758][T13468] usb 4-1: SerialNumber: syz [ 745.008985][T13464] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 745.030492][T13468] usb 4-1: config 0 descriptor?? [ 745.065966][T13464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.078890][T13468] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 745.105530][T13464] usb 2-1: config 0 descriptor?? [ 745.140811][T15135] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 745.247025][T15141] loop6: detected capacity change from 0 to 7 [ 745.265925][T15141] Dev loop6: unable to read RDB block 7 [ 745.309314][T15141] loop6: AHDI p3 p4 [ 745.317587][T15141] loop6: partition table partially beyond EOD, truncated [ 745.358603][T15141] loop6: p3 start 1886353253 is beyond EOD, truncated [ 745.382934][T13468] gspca_sunplus: reg_r err -71 [ 745.390438][T13468] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 745.407853][T13468] usb 4-1: USB disconnect, device number 35 [ 745.560480][T13464] hid-generic 0003:05AC:4262.0023: unbalanced delimiter at end of report description [ 745.701198][T13464] hid-generic 0003:05AC:4262.0023: probe with driver hid-generic failed with error -22 [ 746.242621][T15161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.255349][T15161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.847880][T15171] loop2: detected capacity change from 0 to 7 [ 746.855320][T15171] Dev loop2: unable to read RDB block 7 [ 746.861301][T15171] loop2: unable to read partition table [ 746.871174][T15171] loop2: partition table beyond EOD, truncated [ 746.880359][T15171] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 747.130119][T15179] fuse: Bad value for 'fd' [ 747.160827][T15165] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 747.171583][T15165] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 747.178728][T15165] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 747.185257][T15165] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 747.196083][T15165] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 747.207063][T15165] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 747.240599][T15173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.260976][T15173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.322426][T13468] usb 2-1: USB disconnect, device number 46 [ 747.334348][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.343075][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.438791][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. [ 747.496545][T13463] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 747.701827][T13463] usb 6-1: Using ep0 maxpacket: 8 [ 747.740305][T13463] usb 6-1: unable to get BOS descriptor or descriptor too short [ 747.753040][T13463] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 747.763566][T13463] usb 6-1: config 8 interface 0 has no altsetting 0 [ 747.779732][T13463] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 747.792338][T13463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.834737][T13463] usb 6-1: Product: syz [ 747.844329][T13463] usb 6-1: Manufacturer: syz [ 747.852754][T13463] usb 6-1: SerialNumber: syz [ 747.915672][T15169] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 748.149012][T13463] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 748.192243][T13463] usb 6-1: selecting invalid altsetting 0 [ 748.407402][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.421758][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.446020][T10871] Bluetooth: hci0: command 0x0c1a tx timeout [ 748.504332][T13463] usb 6-1: USB disconnect, device number 117 [ 748.592691][T10386] udevd[10386]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.258090][T10871] Bluetooth: hci3: command 0x0406 tx timeout [ 749.264441][T10871] Bluetooth: hci4: command 0x0405 tx timeout [ 749.270833][T10871] Bluetooth: hci2: command 0x0c1a tx timeout [ 749.278080][T10871] Bluetooth: hci1: command 0x0c1a tx timeout [ 749.476853][T15207] input: syz1 as /devices/virtual/input/input72 [ 749.757657][T15211] loop2: detected capacity change from 0 to 7 [ 749.782269][ T5880] Dev loop2: unable to read RDB block 7 [ 749.815254][ T5880] loop2: unable to read partition table [ 749.834343][T15214] xt_l2tp: invalid flags combination: 4 [ 749.854969][ T5880] loop2: partition table beyond EOD, truncated [ 749.870982][T15211] Dev loop2: unable to read RDB block 7 [ 749.877605][T15211] loop2: unable to read partition table [ 749.904541][T15211] loop2: partition table beyond EOD, truncated [ 749.998552][T15211] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 750.674884][T15188] delete_channel: no stack [ 750.675857][T13463] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 750.860271][T13463] usb 4-1: Using ep0 maxpacket: 8 [ 750.890198][T13463] usb 4-1: config 0 has no interfaces? [ 750.938499][T13463] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 750.968079][T13463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.036177][T13463] usb 4-1: config 0 descriptor?? [ 751.325756][T15205] Bluetooth: hci3: command 0x0406 tx timeout [ 751.412083][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2406'. [ 751.484402][T13453] usb 4-1: USB disconnect, device number 36 [ 751.653633][T15249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.678242][T15249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.739139][T15250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2408'. [ 751.757493][T15226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2408'. [ 751.811029][T15226] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[15226] [ 751.822946][T15226] dns_resolver: Unsupported server list version (0) [ 751.855886][T13456] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 751.966546][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2415'. [ 752.049721][T13456] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.121772][T13456] usb 6-1: config 0 interface 0 has no altsetting 0 [ 752.138284][T13456] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 752.156856][T13456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.166740][T15258] loop2: detected capacity change from 0 to 7 [ 752.173660][T13456] usb 6-1: Product: syz [ 752.188065][T13456] usb 6-1: Manufacturer: syz [ 752.198682][T15258] Dev loop2: unable to read RDB block 7 [ 752.204620][T13456] usb 6-1: SerialNumber: syz [ 752.218540][T15258] loop2: unable to read partition table [ 752.239457][T13456] usb 6-1: config 0 descriptor?? [ 752.245204][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 752.245222][ T30] audit: type=1326 audit(1745747348.213:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.3.2417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a57d8e969 code=0x0 [ 752.261727][T13456] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 752.288686][T15258] loop2: partition table beyond EOD, truncated [ 752.308172][T15258] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 752.332685][T13456] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 752.386811][T13456] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 752.402203][T13456] usb 6-1: media controller created [ 752.715706][T13453] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 752.740221][T13456] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.822725][T13456] DVB: Unable to find symbol tda10046_attach() [ 752.829515][T13456] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 752.838760][T13456] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 752.856135][T13456] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 752.940634][T13456] usb 6-1: USB disconnect, device number 118 [ 752.949915][T13453] usb 2-1: config 0 has no interfaces? [ 752.959599][T13453] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 753.007816][T13453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.028333][T13453] usb 2-1: Product: syz [ 753.043166][T13453] usb 2-1: Manufacturer: syz [ 753.055472][T13453] usb 2-1: SerialNumber: syz [ 753.082032][T13453] usb 2-1: config 0 descriptor?? [ 753.127928][T15286] xt_l2tp: invalid flags combination: 4 [ 753.351502][T15290] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 4, id = 0 [ 753.384755][T15268] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2418'. [ 753.621520][T15298] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2425'. [ 753.718913][T15301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.736166][T15301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.155899][T13456] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 755.371833][T13453] usb 2-1: USB disconnect, device number 47 [ 755.564736][T13456] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 755.582757][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.592242][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.612704][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.645938][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.668859][T13456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.678900][T13456] usb 6-1: Product: syz [ 755.683123][T13456] usb 6-1: Manufacturer: syz [ 755.688671][T13456] usb 6-1: SerialNumber: syz [ 755.697173][T13456] usb 6-1: config 0 descriptor?? [ 755.709602][T13456] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 755.835687][T13468] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 755.877531][T15321] ip6gretap1: entered promiscuous mode [ 755.883737][T15321] ip6gretap1: entered allmulticast mode [ 755.995747][T13468] usb 4-1: Using ep0 maxpacket: 8 [ 756.010008][T13468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.040770][T13468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.080464][T13468] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 756.114929][T13468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.144840][T13468] usb 4-1: config 0 descriptor?? [ 756.277876][T15327] netlink: 'syz.0.2434': attribute type 27 has an invalid length. [ 756.286394][T15327] netlink: 'syz.0.2434': attribute type 3 has an invalid length. [ 756.294630][T15327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2434'. [ 756.309606][T15327] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 756.881687][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.901889][T15335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.904574][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.972837][T15335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.711496][T15340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.724657][T15340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.877135][T13456] gspca_sunplus: reg_r err -110 [ 757.882473][T13456] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 757.961101][T15343] loop6: detected capacity change from 0 to 7 [ 757.977815][ T5905] Dev loop6: unable to read RDB block 7 [ 757.983784][ T5905] loop6: AHDI p3 p4 [ 758.008090][ T5905] loop6: partition table partially beyond EOD, truncated [ 758.049533][ T5905] loop6: p3 start 1886353253 is beyond EOD, truncated [ 758.088584][T15343] Dev loop6: unable to read RDB block 7 [ 758.094648][T15343] loop6: AHDI p3 p4 [ 758.107358][T15343] loop6: partition table partially beyond EOD, truncated [ 758.176061][T15343] loop6: p3 start 1886353253 is beyond EOD, truncated [ 758.353521][T13468] usbhid 4-1:0.0: can't add hid device: -71 [ 758.469526][T13468] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 758.519676][T13468] usb 4-1: USB disconnect, device number 37 [ 759.094975][T13453] usb 6-1: USB disconnect, device number 119 [ 759.299322][T13456] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 759.455738][T13456] usb 4-1: Using ep0 maxpacket: 32 [ 759.479840][T13456] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 759.502853][T13456] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 759.525876][T13456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.554913][T13456] usb 4-1: Product: syz [ 759.566125][T13468] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 759.605783][T13453] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 759.625931][T13456] usb 4-1: Manufacturer: syz [ 759.645274][T13456] usb 4-1: SerialNumber: syz [ 759.692204][T13456] usb 4-1: config 0 descriptor?? [ 759.706633][T15358] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 759.727894][T13456] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.737657][T13468] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.802864][T13468] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.837336][T13468] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 759.882162][T13468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 759.965848][T13468] usb 2-1: SerialNumber: syz [ 759.977864][T13456] usb 4-1: USB disconnect, device number 38 [ 760.244282][T13468] usb 2-1: 0:2 : does not exist [ 760.275817][T13468] usb 2-1: unit 5 not found! [ 760.312376][T13468] usb 2-1: USB disconnect, device number 48 [ 760.436640][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.936363][T15381] input: syz1 as /devices/virtual/input/input73 [ 761.964967][T15406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.282552][T15414] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 763.856983][T15443] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 764.506056][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 764.566358][T15461] netlink: 'syz.1.2472': attribute type 21 has an invalid length. [ 764.805906][T13463] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 764.975805][T13463] usb 6-1: Using ep0 maxpacket: 32 [ 764.992501][T13463] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 765.039043][T13463] usb 6-1: config 0 has no interface number 0 [ 765.070286][T13463] usb 6-1: config 0 interface 30 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 765.097703][T13463] usb 6-1: config 0 interface 30 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 765.115286][T13463] usb 6-1: config 0 interface 30 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 765.140323][T13463] usb 6-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 765.157490][T13463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.169261][T13463] usb 6-1: Product: syz [ 765.178599][T13463] usb 6-1: Manufacturer: syz [ 765.183646][T13463] usb 6-1: SerialNumber: syz [ 765.203851][T13463] usb 6-1: config 0 descriptor?? [ 765.213019][T15464] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 765.221934][T15464] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 765.240017][T13463] quatech2 6-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected [ 765.309095][T15476] fuse: Bad value for 'fd' [ 765.332371][T15479] loop2: detected capacity change from 0 to 7 [ 765.344163][ T5905] Dev loop2: unable to read RDB block 7 [ 765.355501][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.366075][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.369534][ T5905] loop2: unable to read partition table [ 765.400126][ T5905] loop2: partition table beyond EOD, truncated [ 765.411222][T15479] Dev loop2: unable to read RDB block 7 [ 765.421525][T15479] loop2: unable to read partition table [ 765.448551][T13463] usb 6-1: qt2_attach - failed to power on unit: -71 [ 765.463574][T13463] quatech2 6-1:0.30: probe with driver quatech2 failed with error -71 [ 765.473139][T15479] loop2: partition table beyond EOD, truncated [ 765.491295][T15479] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 765.538937][T13463] usb 6-1: USB disconnect, device number 121 [ 766.100606][T15506] xt_l2tp: invalid flags combination: 4 [ 766.217996][T15511] loop2: detected capacity change from 0 to 7 [ 766.260308][ T5880] Dev loop2: unable to read RDB block 7 [ 766.266069][ T5880] loop2: unable to read partition table [ 766.271971][ T5880] loop2: partition table beyond EOD, truncated [ 766.322867][T15511] Dev loop2: unable to read RDB block 7 [ 766.328996][T15511] loop2: unable to read partition table [ 766.334934][T15511] loop2: partition table beyond EOD, truncated [ 766.348444][T15511] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 766.380285][ T5201] Dev loop2: unable to read RDB block 7 [ 766.390393][ T5201] loop2: unable to read partition table [ 766.397318][ T5201] loop2: partition table beyond EOD, truncated [ 766.406090][T13463] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 766.565974][T13463] usb 4-1: device descriptor read/64, error -71 [ 766.651865][T15516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.677169][T15516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.724079][T15516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.764327][T15516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.805735][T13463] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 766.956048][T13463] usb 4-1: device descriptor read/64, error -71 [ 767.066278][T13463] usb usb4-port1: attempt power cycle [ 767.077755][T15525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2489'. [ 767.111414][ T30] audit: type=1326 audit(1745747363.083:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.2488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ff38e969 code=0x0 [ 767.189407][T15527] loop2: detected capacity change from 0 to 7 [ 767.200878][ T5880] Dev loop2: unable to read RDB block 7 [ 767.209531][ T5880] loop2: unable to read partition table [ 767.215398][ T5880] loop2: partition table beyond EOD, truncated [ 767.298303][T15527] Dev loop2: unable to read RDB block 7 [ 767.322484][T15527] loop2: unable to read partition table [ 767.330467][T15527] loop2: partition table beyond EOD, truncated [ 767.337137][T15527] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 767.425837][T13463] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 767.557802][T13463] usb 4-1: device descriptor read/8, error -71 [ 767.956102][T13463] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 768.048818][T15534] loop6: detected capacity change from 0 to 7 [ 768.071835][T13463] usb 4-1: device descriptor read/8, error -71 [ 768.094590][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.109322][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.124252][T15534] Dev loop6: unable to read RDB block 7 [ 768.155529][T15534] loop6: AHDI p3 p4 [ 768.165838][T15534] loop6: partition table partially beyond EOD, truncated [ 768.186022][T13463] usb usb4-port1: unable to enumerate USB device [ 768.192938][T15534] loop6: p3 start 1886353253 is beyond EOD, truncated [ 768.199648][T15539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.212983][T15539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.225077][T15539] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 768.431047][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2494'. [ 768.441022][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2494'. [ 768.450760][T13463] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 768.585713][T13463] usb 2-1: device descriptor read/64, error -71 [ 768.849616][T13463] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 768.973498][T15555] loop2: detected capacity change from 0 to 7 [ 768.990649][ T5905] Dev loop2: unable to read RDB block 7 [ 768.997338][ T5905] loop2: unable to read partition table [ 769.004325][ T5905] loop2: partition table beyond EOD, truncated [ 769.005849][T13463] usb 2-1: device descriptor read/64, error -71 [ 769.020981][T15555] Dev loop2: unable to read RDB block 7 [ 769.027416][T15555] loop2: unable to read partition table [ 769.037241][T15555] loop2: partition table beyond EOD, truncated [ 769.054177][T15555] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 769.126525][T13463] usb usb2-port1: attempt power cycle [ 769.375794][T13464] usb 6-1: new low-speed USB device number 122 using dummy_hcd [ 769.466252][T13463] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 769.486609][T13463] usb 2-1: device descriptor read/8, error -71 [ 769.515771][T13464] usb 6-1: device descriptor read/64, error -71 [ 769.525780][T13462] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 769.668444][T13462] usb 4-1: device descriptor read/64, error -71 [ 769.736136][T13463] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 769.755860][T13464] usb 6-1: new low-speed USB device number 123 using dummy_hcd [ 769.777000][T13463] usb 2-1: device descriptor read/8, error -71 [ 769.887315][T13463] usb usb2-port1: unable to enumerate USB device [ 769.895924][T13464] usb 6-1: device descriptor read/64, error -71 [ 769.916987][T13462] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 770.007561][T13464] usb usb6-port1: attempt power cycle [ 770.055749][T13462] usb 4-1: device descriptor read/64, error -71 [ 770.167927][T13462] usb usb4-port1: attempt power cycle [ 770.345708][T13464] usb 6-1: new low-speed USB device number 124 using dummy_hcd [ 770.366272][T13464] usb 6-1: device descriptor read/8, error -71 [ 770.505731][T13462] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 770.526399][T13462] usb 4-1: device descriptor read/8, error -71 [ 770.605827][T13464] usb 6-1: new low-speed USB device number 125 using dummy_hcd [ 770.626639][T13464] usb 6-1: device descriptor read/8, error -71 [ 770.737151][T13464] usb usb6-port1: unable to enumerate USB device [ 770.767189][T13462] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 770.787192][T13462] usb 4-1: device descriptor read/8, error -71 [ 770.896878][T13462] usb usb4-port1: unable to enumerate USB device [ 772.106665][T15571] loop2: detected capacity change from 0 to 7 [ 772.117618][T15571] Dev loop2: unable to read RDB block 7 [ 772.123436][T15571] loop2: unable to read partition table [ 772.129676][T15571] loop2: partition table beyond EOD, truncated [ 772.137169][T15571] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 772.372422][T15575] loop6: detected capacity change from 0 to 7 [ 772.396643][T15575] Dev loop6: unable to read RDB block 7 [ 772.412760][T15575] loop6: AHDI p3 p4 [ 772.422440][T15575] loop6: partition table partially beyond EOD, truncated [ 772.431181][T15575] loop6: p3 start 1886353253 is beyond EOD, truncated [ 772.514858][T15581] input: syz1 as /devices/virtual/input/input75 [ 772.766962][T15587] loop2: detected capacity change from 0 to 7 [ 772.774252][T15587] Dev loop2: unable to read RDB block 7 [ 772.782717][T15587] loop2: unable to read partition table [ 772.792549][T15587] loop2: partition table beyond EOD, truncated [ 772.800004][T15585] bond0: (slave bond_slave_0): Releasing backup interface [ 772.800485][T15587] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 772.822248][T15585] bond0: (slave bond_slave_1): Releasing backup interface [ 772.866121][T13453] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 772.882829][T15585] team_slave_0: left promiscuous mode [ 772.915351][T15585] team0: Port device team_slave_0 removed [ 772.928089][T15585] team_slave_1: left promiscuous mode [ 772.947173][T15585] team0: Port device team_slave_1 removed [ 772.954476][T15585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.965944][T15585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.981067][T15585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.990007][T15585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.037407][T13453] usb 4-1: Using ep0 maxpacket: 8 [ 773.060926][T13453] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 773.100673][T13453] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 773.122249][T13453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.149563][T13453] usb 4-1: config 0 descriptor?? [ 773.363348][T13453] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 773.459719][T15603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.526317][T15603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.604361][T15605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.614499][T15603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.627176][T15605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.639004][T15603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.745864][T13463] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 773.797589][T13453] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 773.916658][T13463] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 773.944017][T13463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.952783][T15583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2507'. [ 773.971382][T15583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2507'. [ 773.987290][T13463] usb 2-1: Product: syz [ 773.996719][T13463] usb 2-1: Manufacturer: syz [ 774.001447][T13463] usb 2-1: SerialNumber: syz [ 774.005917][T15583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2507'. [ 774.018714][T13463] usb 2-1: config 0 descriptor?? [ 774.027758][T15583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2507'. [ 774.053266][T13453] usb 6-1: config 0 has no interfaces? [ 774.072617][T13453] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 774.083248][T13453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.092368][T13453] usb 6-1: Product: syz [ 774.114719][T13453] usb 6-1: Manufacturer: syz [ 774.124854][T13453] usb 6-1: SerialNumber: syz [ 774.150600][T13453] usb 6-1: config 0 descriptor?? [ 774.233483][T13463] int51x1 2-1:0.0: probe with driver int51x1 failed with error -71 [ 774.292381][T13463] usb 2-1: USB disconnect, device number 53 [ 774.567935][T15613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.582417][T15613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.030528][T15618] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2518'. [ 775.457994][T13453] usb 4-1: USB disconnect, device number 47 [ 776.538577][T13453] usb 6-1: USB disconnect, device number 126 [ 776.673187][T15636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.684502][T15636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.886848][T15638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2522'. [ 778.639771][T15621] delete_channel: no stack [ 778.689035][ T30] audit: type=1326 audit(1745747374.663:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.5.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 778.716945][ T30] audit: type=1326 audit(1745747374.663:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.5.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 778.744353][ T30] audit: type=1326 audit(1745747374.663:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.5.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 778.768595][ T30] audit: type=1326 audit(1745747374.663:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.5.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 778.792253][ T30] audit: type=1326 audit(1745747374.663:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.5.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 778.828124][ T30] audit: type=1326 audit(1745747374.663:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.5.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 778.858212][ T30] audit: type=1326 audit(1745747374.793:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.5.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 778.890021][ T30] audit: type=1326 audit(1745747374.793:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.5.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 779.933772][T15684] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20000 [ 780.227765][T15681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2534'. [ 780.318203][T15681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2534'. [ 780.336437][T15694] loop6: detected capacity change from 0 to 7 [ 780.355198][T15694] Dev loop6: unable to read RDB block 7 [ 780.362828][T15694] loop6: AHDI p3 p4 [ 780.369519][T15694] loop6: partition table partially beyond EOD, truncated [ 780.378230][T15694] loop6: p3 start 1886353253 is beyond EOD, truncated [ 780.781887][T15698] netlink: 'syz.5.2538': attribute type 10 has an invalid length. [ 780.797067][T15698] veth1_vlan: entered allmulticast mode [ 780.823568][T15698] team0: Device veth1_vlan failed to register rx_handler [ 781.361422][T15710] No such timeout policy "syz0" [ 781.427682][ T30] audit: type=1326 audit(1745747377.403:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15714 comm="syz.1.2544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f078f18e969 code=0x0 [ 781.540452][T15717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2544'. [ 781.895676][T13462] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 782.056082][T13462] usb 6-1: Using ep0 maxpacket: 16 [ 782.124904][T13462] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 782.150508][T13462] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.189193][T13462] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.205794][ T119] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 782.237002][T13462] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.274280][T13462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.314753][T13462] usb 6-1: Product: syz [ 782.345164][T13462] usb 6-1: Manufacturer: syz [ 782.365903][ T119] usb 4-1: Using ep0 maxpacket: 8 [ 782.367340][T13462] usb 6-1: SerialNumber: syz [ 782.379546][ T119] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 782.392556][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.436540][ T119] usb 4-1: Product: syz [ 782.448880][ T119] usb 4-1: Manufacturer: syz [ 782.539442][ T119] usb 4-1: SerialNumber: syz [ 782.663309][ T119] usb 4-1: config 0 descriptor?? [ 782.693617][ T119] gspca_main: sq905-2.14.0 probing 2770:9120 [ 782.822577][T13462] usb 6-1: 0:2 : does not exist [ 782.886402][T13464] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 782.903035][ T119] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 782.910616][ T119] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 782.921451][ T119] usb 4-1: USB disconnect, device number 48 [ 783.077981][T13464] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 783.090859][T13464] usb 2-1: config 0 has no interface number 0 [ 783.099889][T15733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.114523][T13464] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 783.124382][T13464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.137848][T15733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.150021][T13464] usb 2-1: Product: syz [ 783.154503][T13464] usb 2-1: Manufacturer: syz [ 783.161072][T13464] usb 2-1: SerialNumber: syz [ 783.176487][T13464] usb 2-1: config 0 descriptor?? [ 784.579954][T15712] delete_channel: no stack [ 784.616456][T13453] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 784.741896][T15720] delete_channel: no stack [ 784.760384][T13462] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 784.806793][T13453] usb 4-1: Using ep0 maxpacket: 8 [ 784.836905][T13453] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 784.844732][T13464] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 784.864923][T13464] uvcvideo 2-1:0.64: Entity type for entity Output 3 was not initialized! [ 784.894856][T13453] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 784.936758][T13462] usb 6-1: USB disconnect, device number 127 [ 784.960031][T13464] usb 2-1: Failed to create links for entity 3 [ 784.985041][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2553'. [ 785.005981][T13464] usb 2-1: Failed to register entities (-22). [ 785.037602][T13453] usb 4-1: config 1 has no interface number 1 [ 785.044144][T13453] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 785.070488][T13464] usb 2-1: USB disconnect, device number 54 [ 785.107157][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.145234][T13453] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 785.222462][T13453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.284145][T13453] usb 4-1: Manufacturer: à³µä¾»î«´à¨™È¯ïº¨â•¹æ²›ê‹ [ 785.727811][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 785.875768][ T5883] usb 6-1: device descriptor read/64, error -71 [ 785.912114][T15780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.927996][T15780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.956129][ T119] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 786.115851][ T119] usb 2-1: Using ep0 maxpacket: 16 [ 786.131809][ T119] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 786.141452][ T5883] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 786.149633][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.163892][ T119] usb 2-1: Product: syz [ 786.179347][ T119] usb 2-1: Manufacturer: syz [ 786.191579][ T119] usb 2-1: SerialNumber: syz [ 786.211121][ T119] usb 2-1: config 0 descriptor?? [ 786.220224][ T119] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 786.300089][ T5883] usb 6-1: device descriptor read/64, error -71 [ 786.479897][ T5883] usb usb6-port1: attempt power cycle [ 786.849606][T13453] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 786.856899][ T5883] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 786.889057][ T5883] usb 6-1: device descriptor read/8, error -71 [ 786.911978][ T119] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 786.935178][T13453] usb 4-1: USB disconnect, device number 49 [ 786.951980][ T119] usb 2-1: USB disconnect, device number 55 [ 787.003730][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.176125][ T5883] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 787.207297][ T5883] usb 6-1: device descriptor read/8, error -71 [ 787.305826][T13453] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 787.316507][ T5883] usb usb6-port1: unable to enumerate USB device [ 787.479685][T13453] usb 4-1: Using ep0 maxpacket: 32 [ 787.487658][T13453] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 787.497239][T13453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.509793][T13453] usb 4-1: config 0 descriptor?? [ 787.527725][T13453] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 787.705714][T13464] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 787.724248][T13453] gspca_nw80x: reg_r err -32 [ 787.730193][T13453] nw80x 4-1:0.0: probe with driver nw80x failed with error -32 [ 787.761112][T13453] usb 4-1: USB disconnect, device number 50 [ 787.855769][T13464] usb 2-1: Using ep0 maxpacket: 8 [ 787.866096][T13464] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 787.936009][T13464] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 787.944331][T13464] usb 2-1: Product: syz [ 787.950286][T13464] usb 2-1: Manufacturer: syz [ 787.955080][T13464] usb 2-1: SerialNumber: syz [ 787.991819][T13464] usb 2-1: config 0 descriptor?? [ 788.012200][T13464] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 788.419589][T13464] gspca_zc3xx: reg_r err -71 [ 788.474528][T13464] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 788.545700][T13464] usb 2-1: USB disconnect, device number 56 [ 788.739994][T15799] loop2: detected capacity change from 0 to 7 [ 788.779342][ T5880] Dev loop2: unable to read RDB block 7 [ 788.833026][ T5880] loop2: unable to read partition table [ 788.857290][ T5880] loop2: partition table beyond EOD, truncated [ 788.897292][T15799] Dev loop2: unable to read RDB block 7 [ 788.902971][T15799] loop2: unable to read partition table [ 788.966034][T15799] loop2: partition table beyond EOD, truncated [ 789.065962][T15799] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 789.345900][T13453] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 789.546839][T13453] usb 2-1: Using ep0 maxpacket: 8 [ 789.553954][T13453] usb 2-1: config 2 has an invalid interface number: 138 but max is 0 [ 789.563087][T13453] usb 2-1: config 2 has no interface number 0 [ 789.575734][T13453] usb 2-1: config 2 interface 138 has no altsetting 0 [ 789.597675][T13453] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=e8.14 [ 789.623039][T13453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.655401][T13453] usb 2-1: Product: syz [ 789.671134][T13453] usb 2-1: Manufacturer: syz [ 789.691862][T13453] usb 2-1: SerialNumber: syz [ 789.902638][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.916238][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.962642][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.008049][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.030270][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.066450][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.089132][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.115290][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.139035][T13462] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 790.153991][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.195109][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.315656][T13462] usb 4-1: Using ep0 maxpacket: 32 [ 790.351655][T15807] syz.0.2572 (15807): drop_caches: 2 [ 790.361959][T13462] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 790.373621][T13462] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 790.396004][T13462] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 790.405409][T13462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 790.416057][T13462] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 790.426195][T13462] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 790.440065][T13462] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 790.449668][T13462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.483827][T13462] usb 4-1: config 0 descriptor?? [ 790.561025][T13453] kvaser_usb 2-1:2.138: error -ENODEV: Cannot get usb endpoint(s) [ 790.630414][T13453] usb 2-1: USB disconnect, device number 57 [ 790.753497][T15827] loop6: detected capacity change from 0 to 7 [ 790.779925][T15827] Dev loop6: unable to read RDB block 7 [ 790.795835][T15827] loop6: AHDI p3 p4 [ 790.802886][T15827] loop6: partition table partially beyond EOD, truncated [ 790.820990][T15827] loop6: p3 start 1886353253 is beyond EOD, truncated [ 790.896530][T13462] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 790.919886][T13462] usb 4-1: USB disconnect, device number 51 [ 790.939486][T13462] usblp0: removed [ 791.296162][T13462] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 791.304206][T13464] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 791.402334][T15840] loop2: detected capacity change from 0 to 7 [ 791.411233][T15840] Dev loop2: unable to read RDB block 7 [ 791.417190][T15840] loop2: unable to read partition table [ 791.423446][T15840] loop2: partition table beyond EOD, truncated [ 791.430886][T15840] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 791.456149][T13464] usb 6-1: device descriptor read/64, error -71 [ 791.475817][T13462] usb 4-1: Using ep0 maxpacket: 32 [ 791.494485][T13462] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 791.503312][T13462] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 791.514234][T13462] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 791.524766][T13462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 791.535211][T13462] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 791.545877][T13462] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 791.559731][T13462] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 791.571553][T13462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.586393][T13462] usb 4-1: config 0 descriptor?? [ 791.695862][T13464] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 791.809606][T13462] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 791.836282][T13464] usb 6-1: device descriptor read/64, error -71 [ 791.986559][T13464] usb usb6-port1: attempt power cycle [ 792.004346][T15851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.032742][T15851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.356067][T13464] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 792.386412][T13464] usb 6-1: device descriptor read/8, error -71 [ 792.525963][T13468] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 792.655918][T13464] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 792.685945][T13468] usb 2-1: Using ep0 maxpacket: 16 [ 792.697370][T13464] usb 6-1: device descriptor read/8, error -71 [ 792.712161][T13468] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 792.722412][T13468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.731161][T13468] usb 2-1: Product: syz [ 792.736334][T13468] usb 2-1: Manufacturer: syz [ 792.741087][T13468] usb 2-1: SerialNumber: syz [ 792.759345][T13468] usb 2-1: config 0 descriptor?? [ 792.781367][T13468] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 792.801565][T13468] usb 2-1: Detected FT-X [ 792.816392][T13464] usb usb6-port1: unable to enumerate USB device [ 792.984761][T13468] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 792.992848][T13468] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 793.001493][T13468] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 793.025395][T13468] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 793.052669][T13468] usb 2-1: USB disconnect, device number 58 [ 793.080831][T13468] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 793.091542][T13468] ftdi_sio 2-1:0.0: device disconnected [ 793.453618][T15866] loop6: detected capacity change from 0 to 7 [ 793.466638][ T5880] Dev loop6: unable to read RDB block 7 [ 793.474823][ T5880] loop6: AHDI p3 p4 [ 793.483545][ T5880] loop6: partition table partially beyond EOD, truncated [ 793.494078][ T5880] loop6: p3 start 1886353253 is beyond EOD, truncated [ 793.516147][T15866] Dev loop6: unable to read RDB block 7 [ 793.528191][T15866] loop6: AHDI p3 p4 [ 793.543849][T15866] loop6: partition table partially beyond EOD, truncated [ 793.566117][T15866] loop6: p3 start 1886353253 is beyond EOD, truncated [ 793.730465][ C1] usblp0: nonzero read bulk status received: -71 [ 793.738777][T13462] usb 4-1: USB disconnect, device number 52 [ 793.984509][T13453] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 794.085892][T15818] usblp0: removed [ 794.146843][T13453] usb 2-1: Using ep0 maxpacket: 16 [ 794.167274][T13453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.186240][T13453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.208101][T13453] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 794.227495][T13453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.270493][T13453] usb 2-1: config 0 descriptor?? [ 794.515772][ T119] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 794.668847][ T119] usb 6-1: device descriptor read/64, error -71 [ 794.688421][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.697238][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.710692][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.776614][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.803266][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.842232][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.940875][T13453] usbhid 2-1:0.0: can't add hid device: -71 [ 794.952687][T13453] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 794.976442][ T119] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 794.993894][T13453] usb 2-1: USB disconnect, device number 59 [ 795.058790][T15892] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (61) [ 795.102466][T15878] delete_channel: no stack [ 795.109854][T15878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.124407][T15895] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2597'. [ 795.135872][ T119] usb 6-1: device descriptor read/64, error -71 [ 795.150639][T15895] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2597'. [ 795.289359][ T119] usb usb6-port1: attempt power cycle [ 795.645999][ T119] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 795.666464][ T119] usb 6-1: device descriptor read/8, error -71 [ 795.900320][T15905] delete_channel: no stack [ 795.970231][ T119] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 796.031888][ T119] usb 6-1: device descriptor read/8, error -71 [ 796.176991][ T119] usb usb6-port1: unable to enumerate USB device [ 797.588831][T15922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.636386][T15922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.406229][T15960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.432325][T15960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.511998][T15980] netlink: 'syz.1.2620': attribute type 39 has an invalid length. [ 802.607782][T15983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2620'. [ 802.783970][T15985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.809885][T15985] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 802.995811][T13468] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 803.155668][T13468] usb 2-1: Using ep0 maxpacket: 16 [ 803.163287][T13468] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 803.175158][T13468] usb 2-1: config 8 has no interface number 0 [ 803.201096][T13468] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 803.221946][T13468] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 803.234545][T13468] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 803.251018][T13468] usb 2-1: config 8 interface 39 has no altsetting 0 [ 803.264997][T13468] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 803.296907][T13468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.336090][T13468] usb 2-1: Product: syz [ 803.342754][T13468] usb 2-1: Manufacturer: syz [ 803.350455][T13468] usb 2-1: SerialNumber: syz [ 803.556077][T15964] delete_channel: no stack [ 803.580056][T13468] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 803.592817][T13468] ipheth 2-1:8.39: probe with driver ipheth failed with error -71 [ 803.611802][T13468] usb 2-1: USB disconnect, device number 60 [ 803.935130][T16001] netlink: 'syz.4.2628': attribute type 3 has an invalid length. [ 803.972469][T16001] netlink: 'syz.4.2628': attribute type 3 has an invalid length. [ 804.008871][T16001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2628'. [ 804.422265][T16011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.506256][T16011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.905468][T16030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.920320][T16030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.825687][T13455] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 806.987782][T13455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 807.001728][T13455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.012829][T13455] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 807.029612][T13455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.047391][T13455] usb 6-1: config 0 descriptor?? [ 807.477376][T13455] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 807.531128][T13455] hid-thrustmaster 0003:044F:B65D.0024: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 807.581766][T13455] hid-thrustmaster 0003:044F:B65D.0024: Wrong number of endpoints? [ 807.693575][ C0] hid-thrustmaster 0003:044F:B65D.0024: Unknown packet type 0x0, unable to proceed further with wheel init [ 807.839208][T16068] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 807.903582][T13455] usb 6-1: USB disconnect, device number 14 [ 808.085185][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2647'. [ 808.298630][T16013] delete_channel: no stack [ 808.313098][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.325160][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.334522][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 808.343457][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 808.351471][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.455867][T13464] usb 5-1: USB disconnect, device number 109 [ 808.769185][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.776931][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.493875][T11818] bridge_slave_1: left allmulticast mode [ 809.525688][T11818] bridge_slave_1: left promiscuous mode [ 809.531565][T11818] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.581951][T11818] bridge_slave_0: left allmulticast mode [ 809.588867][T11818] bridge_slave_0: left promiscuous mode [ 809.596529][T11818] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.836562][T11818] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 809.848819][T11818] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 809.859157][T11818] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 7a:19:87:44:0b:9c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 809.992965][T13464] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 810.203585][T13464] usb 2-1: Using ep0 maxpacket: 32 [ 810.211050][T13464] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 810.222648][T13464] usb 2-1: config 0 has no interface number 0 [ 810.233275][T13464] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 810.245912][T13464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.260824][T13464] usb 2-1: Product: syz [ 810.278333][T13464] usb 2-1: Manufacturer: syz [ 810.283111][T13464] usb 2-1: SerialNumber: syz [ 810.316711][T13464] usb 2-1: config 0 descriptor?? [ 810.328364][T13464] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 810.445852][ T5842] Bluetooth: hci5: command tx timeout [ 810.538205][T13464] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 810.559352][T13464] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 810.737941][T16098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.748397][T16098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.024257][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 811.038667][T13463] usb 2-1: USB disconnect, device number 61 [ 811.054938][T13463] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 811.142203][T13463] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 811.161001][T13463] quatech2 2-1:0.51: device disconnected [ 811.206464][T11818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.276240][T11818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.316661][T11818] bond0 (unregistering): Released all slaves [ 811.921328][T11818] bond1 (unregistering): (slave veth3): Releasing backup interface [ 811.959741][T11818] bond1 (unregistering): Released all slaves [ 811.991182][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2655'. [ 812.193011][T16080] chnl_net:caif_netlink_parms(): no params data found [ 812.219891][T13455] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 812.220649][T11818] IPVS: stopping backup sync thread 15290 ... [ 812.460249][T13455] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 812.475362][T13455] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.519636][T13455] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 812.529263][ T5842] Bluetooth: hci5: command tx timeout [ 812.557044][T13455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9649, setting to 1024 [ 812.597790][T13455] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 812.610945][T13455] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 812.635751][ T119] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 812.679225][T13455] usb 2-1: Product: syz [ 812.711999][T13455] usb 2-1: Manufacturer: syz [ 812.792806][T16123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 812.800620][ T119] usb 6-1: device descriptor read/64, error -71 [ 812.846166][T13455] cdc_wdm 2-1:1.0: skipping garbage [ 812.894661][T13455] cdc_wdm 2-1:1.0: skipping garbage [ 812.960704][T13455] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 812.978288][T13455] cdc_wdm 2-1:1.0: Unknown control protocol [ 813.056063][ T119] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 813.110093][T16080] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.140903][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.147728][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.154743][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.161392][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.167923][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.174660][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.181112][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.187755][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.194119][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.200766][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.207202][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.213880][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.221170][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.228273][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.235097][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.241740][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.248105][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.254734][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.261133][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 813.267783][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 813.282005][T16080] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.353686][T16080] bridge_slave_0: entered allmulticast mode [ 813.380692][T16080] bridge_slave_0: entered promiscuous mode [ 813.415800][ T119] usb 6-1: device descriptor read/64, error -71 [ 813.463216][T16080] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.499267][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.522476][T16080] bridge_slave_1: entered allmulticast mode [ 813.546753][ T119] usb usb6-port1: attempt power cycle [ 813.548898][T16080] bridge_slave_1: entered promiscuous mode [ 813.853830][T11818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.946455][ T119] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 814.036971][ T119] usb 6-1: device descriptor read/8, error -71 [ 814.177981][T11818] pimreg (unregistering): left allmulticast mode [ 814.296143][ T119] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 814.332220][ T119] usb 6-1: device descriptor read/8, error -71 [ 814.449356][ T119] usb usb6-port1: unable to enumerate USB device [ 814.608124][ T5842] Bluetooth: hci5: command tx timeout [ 815.115378][T13455] usb 2-1: USB disconnect, device number 62 [ 815.136474][T16121] delete_channel: no stack [ 815.695710][T13464] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 815.897016][T13464] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 815.934402][T13464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.963946][T13464] usb 2-1: config 0 descriptor?? [ 815.993265][T13464] usb 2-1: selecting invalid altsetting 1 [ 816.138537][T13464] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 816.154801][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.201990][T13464] usb 2-1: USB disconnect, device number 63 [ 816.381135][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'. [ 816.691509][ T5842] Bluetooth: hci5: command tx timeout [ 816.932041][ T119] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 817.149641][ T119] usb 4-1: unable to get BOS descriptor or descriptor too short [ 817.455081][ T119] usb 4-1: not running at top speed; connect to a high speed hub [ 817.489658][ T119] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.524625][ T119] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 817.565465][ T119] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 817.598518][ T119] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 817.634286][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.661643][ T119] usb 4-1: Product: syz [ 817.669533][ T119] usb 4-1: Manufacturer: syz [ 817.674540][ T119] usb 4-1: SerialNumber: syz [ 818.367244][T16080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.476622][T16080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.601864][T16080] team0: Port device team_slave_0 added [ 818.627856][T16080] team0: Port device team_slave_1 added [ 818.737321][T16080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.755823][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.818666][T16080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.842012][T16080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.891624][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.972565][T16080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.190835][T16080] hsr_slave_0: entered promiscuous mode [ 819.212559][T16080] hsr_slave_1: entered promiscuous mode [ 819.632154][ T119] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 819.660792][ T119] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 819.691633][ T119] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 819.760085][ T119] usb 4-1: USB disconnect, device number 53 [ 819.824022][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.890845][T16201] tipc: Enabling of bearer rejected, failed to enable media [ 819.912675][T16201] netlink: zone id is out of range [ 819.918912][T16201] netlink: zone id is out of range [ 820.841007][T16080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 820.873721][T16080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 820.908873][T16080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 820.951819][T16080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 821.285489][T16080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.341609][T16080] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.362473][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.369816][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.577557][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.584845][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.817881][ T30] audit: type=1326 audit(1745747417.793:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16233 comm="syz.5.2684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x0 [ 822.225738][T16080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.369404][ T119] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 822.536298][T16080] veth0_vlan: entered promiscuous mode [ 822.537109][ T119] usb 6-1: Using ep0 maxpacket: 16 [ 822.732146][T16201] delete_channel: no stack [ 822.767570][T16080] veth1_vlan: entered promiscuous mode [ 823.071612][T16080] veth0_macvtap: entered promiscuous mode [ 823.269356][T16080] veth1_macvtap: entered promiscuous mode [ 823.494585][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.538768][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.588459][T16080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.672511][T16080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.715197][T16080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.842293][T16080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.928858][T16080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.987302][T16080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.029382][T16080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.078089][T16080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.573020][T11419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.641615][T11419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.734794][ T119] usb 6-1: unable to get BOS descriptor or descriptor too short [ 824.745398][ T119] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 824.782942][ T119] usb 6-1: can't read configurations, error -71 [ 824.799784][T11419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.824097][T11419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.155752][ T119] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 825.316311][T13455] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 825.346332][ T119] usb 6-1: Using ep0 maxpacket: 16 [ 825.359818][ T119] usb 6-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 825.377828][ T119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.388950][ T119] usb 6-1: Product: syz [ 825.393272][ T119] usb 6-1: Manufacturer: syz [ 825.400490][ T119] usb 6-1: SerialNumber: syz [ 825.419858][ T119] usb 6-1: config 0 descriptor?? [ 825.475886][T13455] usb 5-1: Using ep0 maxpacket: 8 [ 825.494992][T13455] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 825.511613][T13455] usb 5-1: config 0 has no interface number 0 [ 825.519023][T13455] usb 5-1: config 0 interface 12 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 825.536142][T13464] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 825.542202][T13455] usb 5-1: config 0 interface 12 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 825.564112][T13455] usb 5-1: config 0 interface 12 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 825.576691][T13455] usb 5-1: config 0 interface 12 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 825.587133][T13455] usb 5-1: config 0 interface 12 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 825.603146][T13455] usb 5-1: config 0 interface 12 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 825.622515][T13455] usb 5-1: New USB device found, idVendor=1066, idProduct=0700, bcdDevice=60.6a [ 825.635672][T13455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.643797][T13455] usb 5-1: Product: syz [ 825.648219][T13455] usb 5-1: Manufacturer: syz [ 825.652901][T13455] usb 5-1: SerialNumber: syz [ 825.662376][T13455] usb 5-1: config 0 descriptor?? [ 825.669430][T16293] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 825.677155][T16293] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 825.691833][T13455] ipaq 5-1:0.12: PocketPC PDA converter detected [ 825.698812][T13455] usb 5-1: active config #0 != 1 ?? [ 825.706219][T13464] usb 2-1: Using ep0 maxpacket: 16 [ 825.724046][T13464] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 825.750605][T13464] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 825.766448][T13464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.787434][T13464] usb 2-1: Product: syz [ 825.791698][T13464] usb 2-1: Manufacturer: syz [ 825.799013][T13464] usb 2-1: SerialNumber: syz [ 825.810163][T13464] usb 2-1: config 0 descriptor?? [ 825.829669][T13464] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 825.838817][T16286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.851630][T16286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.853934][T13464] usb 2-1: Detected FT232R [ 825.902103][ T119] mxuport 6-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 825.911333][T13455] usb 5-1: USB disconnect, device number 110 [ 825.927097][ T119] mxuport 6-1:0.0: probe with driver mxuport failed with error -5 [ 825.971458][ T119] usb 6-1: USB disconnect, device number 20 [ 826.066173][T13464] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 826.110553][T16317] IPv6: sit1: Disabled Multicast RS [ 826.361329][T13464] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 826.389144][T13464] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 828.316330][T13464] usb 2-1: USB disconnect, device number 64 [ 828.361740][T13464] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 828.405098][T13464] ftdi_sio 2-1:0.0: device disconnected [ 831.607438][T16417] loop2: detected capacity change from 0 to 7 [ 831.630698][ T5880] Dev loop2: unable to read RDB block 7 [ 831.652730][ T5880] loop2: unable to read partition table [ 831.680715][ T5880] loop2: partition table beyond EOD, truncated [ 831.701269][T16417] Dev loop2: unable to read RDB block 7 [ 831.710897][T16417] loop2: unable to read partition table [ 831.756079][T16417] loop2: partition table beyond EOD, truncated [ 831.813946][T16417] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 833.145843][T13464] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 833.318469][T13464] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 833.342642][T13464] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 833.363781][T13464] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 833.383791][T13464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.412465][T16441] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 833.442181][T13464] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.635224][ T119] usb 5-1: USB disconnect, device number 111 [ 835.144184][T13464] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 835.375683][T13464] usb 6-1: Using ep0 maxpacket: 8 [ 835.401650][T13464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 835.432067][T13464] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 835.518994][T13464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 835.583094][T13464] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 835.612950][T13464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.660560][T13464] usb 6-1: Product: syz [ 835.664927][T13464] usb 6-1: Manufacturer: syz [ 835.669958][T13464] usb 6-1: SerialNumber: syz [ 835.708512][T13464] usb 6-1: config 0 descriptor?? [ 835.740273][T13464] radioshark 6-1:0.0: Invalid radioSHARK device [ 835.747511][T13464] radioshark 6-1:0.0: probe with driver radioshark failed with error -22 [ 835.822395][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 835.866003][T13464] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 836.276704][ T30] audit: type=1326 audit(1745747432.243:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.5.2727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ff5d8e969 code=0x0 [ 836.384656][T16492] FAULT_INJECTION: forcing a failure. [ 836.384656][T16492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.406117][T16492] CPU: 0 UID: 0 PID: 16492 Comm: syz.0.2732 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 836.406151][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 836.406165][T16492] Call Trace: [ 836.406174][T16492] [ 836.406185][T16492] dump_stack_lvl+0x189/0x250 [ 836.406220][T16492] ? __lock_acquire+0xaac/0xd20 [ 836.406262][T16492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.406290][T16492] ? __pfx__printk+0x10/0x10 [ 836.406308][T16492] ? __might_fault+0xb0/0x130 [ 836.406344][T16492] should_fail_ex+0x414/0x560 [ 836.406380][T16492] _copy_from_user+0x2d/0xb0 [ 836.406408][T16492] ___sys_sendmsg+0x158/0x2a0 [ 836.406435][T16492] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.406494][T16492] ? __fget_files+0x2a/0x420 [ 836.406519][T16492] ? __fget_files+0x3a0/0x420 [ 836.406555][T16492] __x64_sys_sendmsg+0x19b/0x260 [ 836.406582][T16492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 836.406623][T16492] ? do_syscall_64+0xba/0x210 [ 836.406650][T16492] do_syscall_64+0xf6/0x210 [ 836.406672][T16492] ? clear_bhb_loop+0x45/0xa0 [ 836.406697][T16492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.406718][T16492] RIP: 0033:0x7fe9f3b8e969 [ 836.406738][T16492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.406756][T16492] RSP: 002b:00007fe9f49dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.406779][T16492] RAX: ffffffffffffffda RBX: 00007fe9f3db5fa0 RCX: 00007fe9f3b8e969 [ 836.406794][T16492] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 836.406807][T16492] RBP: 00007fe9f49dc090 R08: 0000000000000000 R09: 0000000000000000 [ 836.406820][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.406832][T16492] R13: 0000000000000000 R14: 00007fe9f3db5fa0 R15: 00007fe9f3edfa28 [ 836.406862][T16492] [ 836.917229][T16509] loop2: detected capacity change from 0 to 7 [ 836.930557][ T5880] Dev loop2: unable to read RDB block 7 [ 836.936797][ T5880] loop2: unable to read partition table [ 836.942801][ T5880] loop2: partition table beyond EOD, truncated [ 836.958139][T16509] Dev loop2: unable to read RDB block 7 [ 836.987417][T16509] loop2: unable to read partition table [ 836.994498][T16509] loop2: partition table beyond EOD, truncated [ 837.001633][T16509] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 837.455786][T13464] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 837.605717][T13455] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 837.605858][T13464] usb 4-1: Using ep0 maxpacket: 16 [ 837.659499][T13464] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.672485][T13464] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.740663][T13464] usb 4-1: config 0 interface 0 has no altsetting 0 [ 837.773750][T13464] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 837.781148][T13455] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 837.797987][T13455] usb 5-1: can't read configurations, error -61 [ 837.846016][T13464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.882768][T13464] usb 4-1: config 0 descriptor?? [ 837.891348][T13462] usb 6-1: USB disconnect, device number 21 [ 837.957570][T13455] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 838.075804][T13468] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 838.160999][T13455] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 838.169105][T13455] usb 5-1: can't read configurations, error -61 [ 838.176922][T13455] usb usb5-port1: attempt power cycle [ 838.244510][T13468] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 838.312322][T16528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2744'. [ 838.321640][T13464] mcp2200 0003:04D8:00DF.0025: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 838.346376][T13468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.354539][T13468] usb 2-1: Product: syz [ 838.521674][T13463] usb 4-1: USB disconnect, device number 54 [ 838.541565][T13468] usb 2-1: Manufacturer: syz [ 838.553760][T13468] usb 2-1: SerialNumber: syz [ 838.568177][T13455] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 838.620315][T13468] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 838.643771][T13455] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 838.658968][T13464] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 838.668264][T13455] usb 5-1: can't read configurations, error -61 [ 838.817308][T13455] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 838.911075][T13463] usb 2-1: USB disconnect, device number 65 [ 838.927659][T13455] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 838.942688][T16524] sctp: [Deprecated]: syz.5.2742 (pid 16524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 838.942688][T16524] Use struct sctp_sack_info instead [ 838.964385][T13455] usb 5-1: can't read configurations, error -61 [ 838.973323][T13455] usb usb5-port1: unable to enumerate USB device [ 839.100431][T16522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.434172][T16549] FAULT_INJECTION: forcing a failure. [ 839.434172][T16549] name failslab, interval 1, probability 0, space 0, times 0 [ 839.455108][T16549] CPU: 0 UID: 0 PID: 16549 Comm: syz.3.2746 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 839.455142][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 839.455156][T16549] Call Trace: [ 839.455166][T16549] [ 839.455177][T16549] dump_stack_lvl+0x189/0x250 [ 839.455217][T16549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.455247][T16549] ? __pfx__printk+0x10/0x10 [ 839.455274][T16549] ? __pfx___might_resched+0x10/0x10 [ 839.455312][T16549] should_fail_ex+0x414/0x560 [ 839.455350][T16549] should_failslab+0xa8/0x100 [ 839.455380][T16549] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 839.455406][T16549] ? __alloc_skb+0x112/0x2d0 [ 839.455431][T16549] __alloc_skb+0x112/0x2d0 [ 839.455455][T16549] netlink_sendmsg+0x5c6/0xb30 [ 839.455640][T16549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.455683][T16549] ? aa_sock_msg_perm+0x94/0x160 [ 839.455708][T16549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 839.455731][T16549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.455750][T16549] __sock_sendmsg+0x219/0x270 [ 839.455781][T16549] ____sys_sendmsg+0x505/0x830 [ 839.455811][T16549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.455843][T16549] ? import_iovec+0x74/0xa0 [ 839.455873][T16549] ___sys_sendmsg+0x21f/0x2a0 [ 839.455897][T16549] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.455949][T16549] ? __fget_files+0x2a/0x420 [ 839.455976][T16549] ? __fget_files+0x3a0/0x420 [ 839.456013][T16549] __x64_sys_sendmsg+0x19b/0x260 [ 839.456040][T16549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.456082][T16549] ? do_syscall_64+0xba/0x210 [ 839.456109][T16549] do_syscall_64+0xf6/0x210 [ 839.456132][T16549] ? clear_bhb_loop+0x45/0xa0 [ 839.456158][T16549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.456179][T16549] RIP: 0033:0x7f9a57d8e969 [ 839.456199][T16549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.456216][T16549] RSP: 002b:00007f9a58ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.456236][T16549] RAX: ffffffffffffffda RBX: 00007f9a57fb5fa0 RCX: 00007f9a57d8e969 [ 839.456250][T16549] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 839.456262][T16549] RBP: 00007f9a58ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 839.456273][T16549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.456285][T16549] R13: 0000000000000000 R14: 00007f9a57fb5fa0 R15: 00007f9a580dfa28 [ 839.456314][T16549] [ 839.896041][T13464] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 839.913674][T13464] ath9k_htc: Failed to initialize the device [ 839.966263][T13463] usb 2-1: ath9k_htc: USB layer deinitialized [ 840.075130][T16561] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20003 [ 840.297087][T13468] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 840.460814][T13468] usb 4-1: Using ep0 maxpacket: 16 [ 840.483935][T13468] usb 4-1: unable to get BOS descriptor or descriptor too short [ 840.503355][T13468] usb 4-1: config 1 interface 0 has no altsetting 0 [ 840.533320][T13468] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 840.544316][T13468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.559318][T13468] usb 4-1: Product: syz [ 840.569528][T13468] usb 4-1: Manufacturer: syz [ 840.578860][T13468] usb 4-1: SerialNumber: syz [ 840.715748][T13464] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 840.973607][T13464] usb 5-1: config 0 has no interfaces? [ 840.984559][T13464] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 840.995848][T13464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.037017][T13464] usb 5-1: Product: syz [ 841.054235][T13464] usb 5-1: Manufacturer: syz [ 841.078554][T13464] usb 5-1: SerialNumber: syz [ 841.148954][T13464] usb 5-1: config 0 descriptor?? [ 841.415005][T16572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.440532][T16572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.555755][ T5883] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 841.758300][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 841.768596][ T5883] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 841.778293][ T5883] usb 2-1: config 0 has no interface number 0 [ 841.788437][ T5883] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 841.802138][ T5883] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 841.825897][ T5883] usb 2-1: config 0 interface 255 has no altsetting 0 [ 841.847749][ T5883] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 841.881435][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.948888][ T5883] usb 2-1: Product: syz [ 841.959454][ T5883] usb 2-1: Manufacturer: syz [ 841.972365][ T5883] usb 2-1: SerialNumber: syz [ 841.984254][ T5883] usb 2-1: config 0 descriptor?? [ 842.211839][ T5883] usb 2-1: USB disconnect, device number 66 [ 842.405075][T16548] delete_channel: no stack [ 842.845979][ T5883] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 842.985914][ T5883] usb 6-1: device descriptor read/64, error -71 [ 843.119427][T13468] usbhid 4-1:1.0: can't add hid device: -71 [ 843.131726][T13468] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 843.154517][T13468] usb 4-1: USB disconnect, device number 55 [ 843.238650][ T5883] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 843.381658][ T5883] usb 6-1: device descriptor read/64, error -71 [ 843.428087][T13455] usb 5-1: USB disconnect, device number 116 [ 843.491782][T16591] loop2: detected capacity change from 0 to 7 [ 843.496134][ T5883] usb usb6-port1: attempt power cycle [ 843.501591][T16591] Dev loop2: unable to read RDB block 7 [ 843.513768][T16591] loop2: unable to read partition table [ 843.520280][T16591] loop2: partition table beyond EOD, truncated [ 843.534075][T16591] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 843.586734][ T119] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 843.633630][T16597] loop2: detected capacity change from 0 to 7 [ 843.642554][T16597] Dev loop2: unable to read RDB block 7 [ 843.650022][T16597] loop2: unable to read partition table [ 843.656582][T16597] loop2: partition table beyond EOD, truncated [ 843.662878][T16597] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 843.748336][ T119] usb 4-1: unable to get BOS descriptor or descriptor too short [ 843.764224][ T119] usb 4-1: config 9 has an invalid interface number: 209 but max is 2 [ 843.773014][ T119] usb 4-1: config 9 has an invalid interface number: 254 but max is 2 [ 843.781432][ T119] usb 4-1: config 9 has an invalid interface number: 8 but max is 2 [ 843.789776][ T119] usb 4-1: config 9 has no interface number 0 [ 843.796872][ T119] usb 4-1: config 9 has no interface number 1 [ 843.803002][ T119] usb 4-1: config 9 has no interface number 2 [ 843.809277][ T119] usb 4-1: config 9 interface 209 has no altsetting 0 [ 843.816278][ T119] usb 4-1: config 9 interface 254 has no altsetting 0 [ 843.823523][ T119] usb 4-1: config 9 interface 8 has no altsetting 0 [ 843.835838][ T119] usb 4-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=d1.2a [ 843.846138][ T119] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 843.855452][ T119] usb 4-1: Product: syz [ 843.859924][ T5883] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 843.875597][ T119] usb 4-1: Manufacturer: syz [ 843.881223][ T119] usb 4-1: SerialNumber: syz [ 843.908573][ T5883] usb 6-1: device descriptor read/8, error -71 [ 844.138960][ T119] usb 4-1: USB disconnect, device number 56 [ 844.155792][ T5883] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 844.212295][ T5883] usb 6-1: device descriptor read/8, error -71 [ 844.333560][ T5883] usb usb6-port1: unable to enumerate USB device [ 844.635346][T16600] delete_channel: no stack [ 844.896819][ T5883] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 845.058451][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.069177][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.083959][ T5883] usb 5-1: New USB device found, idVendor=016d, idProduct=c200, bcdDevice= 0.00 [ 845.130965][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.156219][ T5883] usb 5-1: config 0 descriptor?? [ 845.172224][ T5883] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 845.177159][T16620] loop6: detected capacity change from 0 to 7 [ 845.196818][T16620] Dev loop6: unable to read RDB block 7 [ 845.203710][T16620] loop6: AHDI p3 p4 [ 845.214135][T16620] loop6: partition table partially beyond EOD, truncated [ 845.235778][T16620] loop6: p3 start 1886353253 is beyond EOD, truncated [ 845.376773][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.396400][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.635981][ T5883] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 845.717601][T16636] loop2: detected capacity change from 0 to 7 [ 845.724783][T16636] Dev loop2: unable to read RDB block 7 [ 845.730559][T16636] loop2: unable to read partition table [ 845.736908][T16636] loop2: partition table beyond EOD, truncated [ 845.743190][T16636] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 845.797889][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 845.809039][ T5883] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 845.818076][ T5883] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 845.906553][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 845.916120][ T5883] usb 2-1: config 1 has no interface number 0 [ 845.925108][ T5883] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 845.936625][ T5883] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 845.985809][ T5883] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 845.996166][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.022843][ T5883] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 846.227826][ T5883] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 847.074352][ T30] audit: type=1326 audit(1745747443.043:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16656 comm="syz.5.2780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ff5d8e969 code=0x0 [ 847.245941][ T5883] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 847.298818][T16658] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 847.383927][ T5883] usb 2-1: USB disconnect, device number 67 [ 847.465171][ T5883] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 847.758346][ T5883] usb 5-1: USB disconnect, device number 117 [ 848.122139][T16672] loop6: detected capacity change from 0 to 7 [ 848.138643][ T5905] Dev loop6: unable to read RDB block 7 [ 848.144747][ T5905] loop6: AHDI p3 p4 [ 848.151211][ T5905] loop6: partition table partially beyond EOD, truncated [ 848.161571][ T5905] loop6: p3 start 1886353253 is beyond EOD, truncated [ 848.181247][T16672] Dev loop6: unable to read RDB block 7 [ 848.189741][T16672] loop6: AHDI p3 p4 [ 848.193741][T16672] loop6: partition table partially beyond EOD, truncated [ 848.214214][T16672] loop6: p3 start 1886353253 is beyond EOD, truncated [ 848.386323][T16676] fuse: Bad value for 'group_id' [ 848.391912][T16676] fuse: Bad value for 'group_id' [ 848.443106][T16678] loop2: detected capacity change from 0 to 7 [ 848.454321][T16678] Dev loop2: unable to read RDB block 7 [ 848.461359][T16678] loop2: unable to read partition table [ 848.467484][T16678] loop2: partition table beyond EOD, truncated [ 848.473817][T16678] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 848.575833][ T5883] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 848.727031][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 848.749919][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.782130][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.792574][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 848.807144][ T5883] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 848.819732][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.841087][ T5883] usb 6-1: config 0 descriptor?? [ 849.478561][ T5883] usbhid 6-1:0.0: can't add hid device: -71 [ 849.488775][ T5883] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 849.502408][ T5883] usb 6-1: USB disconnect, device number 26 [ 849.928962][ T30] audit: type=1326 audit(1745747445.903:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.3.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a57d8e969 code=0x7ffc0000 [ 850.009673][ T30] audit: type=1326 audit(1745747445.943:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.3.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f9a57d8e969 code=0x7ffc0000 [ 850.046237][T13453] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 850.129324][ T30] audit: type=1326 audit(1745747445.943:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.3.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a57d8e969 code=0x7ffc0000 [ 850.158467][ T30] audit: type=1326 audit(1745747445.943:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.3.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a57d8e969 code=0x7ffc0000 [ 850.227690][T13453] usb 2-1: config 0 has no interfaces? [ 850.244761][T13453] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 850.271919][T13453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.304318][T13453] usb 2-1: Product: syz [ 850.330105][T13453] usb 2-1: Manufacturer: syz [ 850.393525][T13453] usb 2-1: SerialNumber: syz [ 850.536861][T13453] usb 2-1: config 0 descriptor?? [ 853.137755][T13455] usb 2-1: USB disconnect, device number 68 [ 853.376816][ T30] audit: type=1326 audit(1745747449.353:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.4.2803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf3858e969 code=0x0 [ 853.735723][T13464] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 853.785505][T16742] FAULT_INJECTION: forcing a failure. [ 853.785505][T16742] name failslab, interval 1, probability 0, space 0, times 0 [ 853.798799][T16742] CPU: 1 UID: 0 PID: 16742 Comm: syz.3.2804 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 853.798829][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 853.798843][T16742] Call Trace: [ 853.798852][T16742] [ 853.798861][T16742] dump_stack_lvl+0x189/0x250 [ 853.798898][T16742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.798919][T16742] ? __pfx__printk+0x10/0x10 [ 853.798939][T16742] ? __pfx___might_resched+0x10/0x10 [ 853.798962][T16742] ? fs_reclaim_acquire+0x7d/0x100 [ 853.798988][T16742] should_fail_ex+0x414/0x560 [ 853.799016][T16742] should_failslab+0xa8/0x100 [ 853.799037][T16742] kmem_cache_alloc_noprof+0x73/0x3c0 [ 853.799055][T16742] ? getname_flags+0xb8/0x540 [ 853.799078][T16742] getname_flags+0xb8/0x540 [ 853.799099][T16742] __x64_sys_mkdir+0x5d/0x80 [ 853.799115][T16742] do_syscall_64+0xf6/0x210 [ 853.799133][T16742] ? clear_bhb_loop+0x45/0xa0 [ 853.799151][T16742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.799165][T16742] RIP: 0033:0x7f9a57d8e969 [ 853.799179][T16742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.799191][T16742] RSP: 002b:00007f9a58ba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 853.799207][T16742] RAX: ffffffffffffffda RBX: 00007f9a57fb5fa0 RCX: 00007f9a57d8e969 [ 853.799224][T16742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000020c0 [ 853.799234][T16742] RBP: 00007f9a58ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 853.799243][T16742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.799252][T16742] R13: 0000000000000000 R14: 00007f9a57fb5fa0 R15: 00007f9a580dfa28 [ 853.799274][T16742] [ 854.077622][T13464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.087830][T13464] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 854.102854][T13464] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 854.112389][T13464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.123878][T13464] usb 6-1: config 0 descriptor?? [ 854.450688][ T30] audit: type=1326 audit(1745747450.423:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 854.506010][ T30] audit: type=1326 audit(1745747450.423:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 854.647785][ T30] audit: type=1326 audit(1745747450.423:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 854.647842][ T30] audit: type=1326 audit(1745747450.423:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 854.647913][ T30] audit: type=1326 audit(1745747450.423:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 854.647958][ T30] audit: type=1326 audit(1745747450.423:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff5d8e969 code=0x7ffc0000 [ 854.648004][ T30] audit: type=1326 audit(1745747450.423:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ff5d8e56b code=0x7ffc0000 [ 854.648075][ T30] audit: type=1326 audit(1745747450.423:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ff5d8e56b code=0x7ffc0000 [ 854.648118][ T30] audit: type=1326 audit(1745747450.463:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16746 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ff5dc1225 code=0x7ffc0000 [ 854.703361][T13464] lenovo 0003:17EF:6067.0026: reserved main item tag 0xd [ 854.727708][T13464] lenovo 0003:17EF:6067.0026: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0 [ 854.923348][ T5883] usb 6-1: USB disconnect, device number 27 [ 856.069490][T13453] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 856.444611][T13453] usb 5-1: config 0 has no interfaces? [ 856.512214][T13453] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 856.523479][T13453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.549701][T13453] usb 5-1: Product: syz [ 856.583640][T13453] usb 5-1: Manufacturer: syz [ 856.591752][T13453] usb 5-1: SerialNumber: syz [ 856.608627][T13453] usb 5-1: config 0 descriptor?? [ 856.844552][T13455] usb 5-1: USB disconnect, device number 118 [ 858.428056][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 858.920271][T16804] FAULT_INJECTION: forcing a failure. [ 858.920271][T16804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.925891][T16822] ptrace attach of "./syz-executor exec"[10081] was attempted by "./syz-executor exec"[16822] [ 858.978002][T16804] CPU: 0 UID: 0 PID: 16804 Comm: syz.3.2820 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 858.978034][T16804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 858.978048][T16804] Call Trace: [ 858.978056][T16804] [ 858.978066][T16804] dump_stack_lvl+0x189/0x250 [ 858.978104][T16804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.978134][T16804] ? __pfx__printk+0x10/0x10 [ 858.978169][T16804] should_fail_ex+0x414/0x560 [ 858.978207][T16804] strncpy_from_user+0x36/0x290 [ 858.978243][T16804] getname_flags+0xf3/0x540 [ 858.978278][T16804] __x64_sys_mkdir+0x5d/0x80 [ 858.978302][T16804] do_syscall_64+0xf6/0x210 [ 858.978327][T16804] ? clear_bhb_loop+0x45/0xa0 [ 858.978353][T16804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.978373][T16804] RIP: 0033:0x7f9a57d8e969 [ 858.978391][T16804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.978409][T16804] RSP: 002b:00007f9a58ba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 858.978431][T16804] RAX: ffffffffffffffda RBX: 00007f9a57fb5fa0 RCX: 00007f9a57d8e969 [ 858.978445][T16804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000020c0 [ 858.978458][T16804] RBP: 00007f9a58ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 858.978471][T16804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.978484][T16804] R13: 0000000000000000 R14: 00007f9a57fb5fa0 R15: 00007f9a580dfa28 [ 858.978515][T16804] [ 859.297379][T16822] dns_resolver: Unsupported server list version (0) [ 859.822617][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 859.822640][ T30] audit: type=1326 audit(1745747455.783:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16825 comm="syz.4.2825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf3858e969 code=0x0 [ 859.850965][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.209860][T16836] FAULT_INJECTION: forcing a failure. [ 860.209860][T16836] name failslab, interval 1, probability 0, space 0, times 0 [ 860.245661][T16836] CPU: 1 UID: 0 PID: 16836 Comm: syz.5.2827 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 860.245692][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 860.245705][T16836] Call Trace: [ 860.245715][T16836] [ 860.245724][T16836] dump_stack_lvl+0x189/0x250 [ 860.245762][T16836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.245793][T16836] ? __pfx__printk+0x10/0x10 [ 860.245819][T16836] ? __pfx___might_resched+0x10/0x10 [ 860.245922][T16836] ? fs_reclaim_acquire+0x7d/0x100 [ 860.245965][T16836] should_fail_ex+0x414/0x560 [ 860.246005][T16836] should_failslab+0xa8/0x100 [ 860.246041][T16836] __kmalloc_cache_noprof+0x70/0x3d0 [ 860.246067][T16836] ? tcx_entry_fetch_or_create+0x236/0x380 [ 860.246107][T16836] tcx_entry_fetch_or_create+0x236/0x380 [ 860.246143][T16836] clsact_init+0xb4/0x5a0 [ 860.246175][T16836] ? __pfx_clsact_init+0x10/0x10 [ 860.246208][T16836] qdisc_create+0x78a/0xe80 [ 860.246245][T16836] tc_modify_qdisc+0x1808/0x20b0 [ 860.246288][T16836] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 860.246311][T16836] ? aa_get_newest_label+0xf7/0x5d0 [ 860.246365][T16836] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 860.246391][T16836] rtnetlink_rcv_msg+0x779/0xb70 [ 860.246428][T16836] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 860.246465][T16836] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 860.246501][T16836] ? ref_tracker_free+0x63a/0x7d0 [ 860.246521][T16836] ? __copy_skb_header+0xa7/0x550 [ 860.246555][T16836] netlink_rcv_skb+0x219/0x490 [ 860.246589][T16836] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 860.246658][T16836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 860.246721][T16836] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.246752][T16836] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.246790][T16836] netlink_unicast+0x758/0x8d0 [ 860.246832][T16836] netlink_sendmsg+0x805/0xb30 [ 860.246861][T16836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.246884][T16836] ? aa_sock_msg_perm+0x94/0x160 [ 860.246908][T16836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.246931][T16836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.246950][T16836] __sock_sendmsg+0x219/0x270 [ 860.246978][T16836] ____sys_sendmsg+0x505/0x830 [ 860.247006][T16836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.247037][T16836] ? import_iovec+0x74/0xa0 [ 860.247066][T16836] ___sys_sendmsg+0x21f/0x2a0 [ 860.247090][T16836] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.247149][T16836] ? __fget_files+0x2a/0x420 [ 860.247171][T16836] ? __fget_files+0x3a0/0x420 [ 860.247206][T16836] __x64_sys_sendmsg+0x19b/0x260 [ 860.247231][T16836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.247269][T16836] ? do_syscall_64+0xba/0x210 [ 860.247294][T16836] do_syscall_64+0xf6/0x210 [ 860.247314][T16836] ? clear_bhb_loop+0x45/0xa0 [ 860.247338][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.247357][T16836] RIP: 0033:0x7f5ff5d8e969 [ 860.247374][T16836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.247392][T16836] RSP: 002b:00007f5ff6c85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.247413][T16836] RAX: ffffffffffffffda RBX: 00007f5ff5fb5fa0 RCX: 00007f5ff5d8e969 [ 860.247428][T16836] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 860.247440][T16836] RBP: 00007f5ff6c85090 R08: 0000000000000000 R09: 0000000000000000 [ 860.247452][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.247464][T16836] R13: 0000000000000000 R14: 00007f5ff5fb5fa0 R15: 00007f5ff60dfa28 [ 860.247494][T16836] [ 860.597644][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.741130][T16865] netlink: 'syz.3.2834': attribute type 1 has an invalid length. [ 862.785841][T13453] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 862.854114][T16871] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 862.947812][T13453] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 862.956087][T13464] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 862.965232][T13453] usb 5-1: config 0 has no interface number 0 [ 862.971873][T13453] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 862.982506][T13453] usb 5-1: config 0 interface 11 has no altsetting 0 [ 862.989392][T13453] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 862.999531][T13453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.024685][T13453] usb 5-1: config 0 descriptor?? [ 863.034244][T16861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 863.087616][T13453] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 863.087636][T13464] usb 6-1: device descriptor read/64, error -71 [ 863.153214][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 863.170683][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 863.189438][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 863.336086][T13464] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 863.349606][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 863.367476][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 863.376591][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 863.426906][T13453] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 863.449237][T13455] IPVS: starting estimator thread 0... [ 863.478539][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 863.530497][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 863.555659][T13464] usb 6-1: device descriptor read/64, error -71 [ 863.564936][T16877] netlink: 'syz.3.2836': attribute type 21 has an invalid length. [ 863.573904][T16877] IPv6: NLM_F_CREATE should be specified when creating new route [ 863.576718][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 863.582966][T16877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 863.590117][T16875] IPVS: using max 30 ests per chain, 72000 per kthread [ 863.597122][T16877] IPv6: NLM_F_CREATE should be set when creating new route [ 863.597197][T16877] IPv6: NLM_F_CREATE should be set when creating new route [ 863.597228][T16877] IPv6: NLM_F_CREATE should be set when creating new route [ 863.635003][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 863.651513][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 863.665885][T13453] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 863.676030][T13464] usb usb6-port1: attempt power cycle [ 863.686100][T13453] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 863.725247][T13453] usb 5-1: USB disconnect, device number 119 [ 863.767607][T13453] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 863.852377][T13453] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 863.883856][T13453] keyspan 5-1:0.11: device disconnected [ 863.958143][T16881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.012092][T16881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.038676][T13464] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 864.104300][T13464] usb 6-1: device descriptor read/8, error -71 [ 864.181198][T11818] IPVS: stop unused estimator thread 0... [ 864.395989][T13464] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 864.429161][T13464] usb 6-1: device descriptor read/8, error -71 [ 864.559336][T13464] usb usb6-port1: unable to enumerate USB device [ 865.286678][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 866.724061][T16920] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 867.236117][T13453] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 867.406070][T13453] usb 5-1: Using ep0 maxpacket: 32 [ 867.443939][T13453] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 867.495675][ T5883] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 867.526846][T13453] usb 5-1: config 0 has no interface number 0 [ 867.556090][T13453] usb 5-1: config 0 interface 12 has no altsetting 0 [ 867.587007][T13453] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 867.597091][T13453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.606727][T13453] usb 5-1: Product: syz [ 867.611053][T13453] usb 5-1: Manufacturer: syz [ 867.616328][T13453] usb 5-1: SerialNumber: syz [ 867.628723][T13453] usb 5-1: config 0 descriptor?? [ 867.688678][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 867.699913][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.711892][ T5883] usb 6-1: config 0 has no interfaces? [ 867.719604][ T5883] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 867.729685][ T5883] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 867.737947][ T5883] usb 6-1: Product: syz [ 867.742169][ T5883] usb 6-1: Manufacturer: syz [ 867.748807][ T5883] usb 6-1: SerialNumber: syz [ 867.758179][ T5883] usb 6-1: config 0 descriptor?? [ 867.840026][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2847'. [ 867.881213][T13453] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 867.895772][T13453] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 867.903133][T13453] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 867.912380][T13453] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 867.927997][T13453] usb 5-1: USB disconnect, device number 120 [ 867.971047][T11402] tipc: Subscription rejected, illegal request [ 867.982304][T13464] usb 6-1: USB disconnect, device number 32 [ 870.208959][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.215355][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.531885][ T5887] kworker/1:6 (5887) used greatest stack depth: 15800 bytes left [ 931.649613][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.656458][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.735794][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 993.090232][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.097199][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.806359][ T31] INFO: task kworker/1:2:5161 blocked for more than 143 seconds. [ 1023.814178][ T31] Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 [ 1023.822164][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1023.831351][ T31] task:kworker/1:2 state:D stack:14888 pid:5161 tgid:5161 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1023.843796][ T31] Workqueue: usb_hub_wq hub_event [ 1023.849084][ T31] Call Trace: [ 1023.852399][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1023.855364][ T31] __schedule+0x16e2/0x4cd0 [ 1023.861383][ T31] ? __lock_acquire+0xaac/0xd20 [ 1023.870052][ T31] ? schedule+0x165/0x360 [ 1023.874464][ T31] ? __pfx___schedule+0x10/0x10 [ 1023.880193][ T31] ? schedule+0x91/0x360 [ 1023.884588][ T31] schedule+0x165/0x360 [ 1023.890618][ T31] usb_kill_urb+0x1be/0x2d0 [ 1023.895191][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1023.900707][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1023.907894][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 1023.913091][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1023.953658][ T31] ? __kmalloc_noprof+0x29b/0x4f0 [ 1024.015619][ T31] usb_control_msg+0x232/0x3e0 [ 1024.020687][ T31] hub_port_init+0xbf9/0x2800 [ 1024.064276][ T31] hub_event+0x2518/0x4a00 [ 1024.078295][ T31] ? __pfx_hub_event+0x10/0x10 [ 1024.083240][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1024.126422][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1024.131729][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1024.145597][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1024.151494][ T31] process_scheduled_works+0xadb/0x17a0 [ 1024.162951][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1024.170629][ T31] worker_thread+0x8a0/0xda0 [ 1024.175318][ T31] kthread+0x70e/0x8a0 [ 1024.195871][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1024.202223][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.213698][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.219260][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1024.235559][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1024.240868][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.260702][ T31] ret_from_fork+0x4b/0x80 [ 1024.267578][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.284723][ T31] ret_from_fork_asm+0x1a/0x30 [ 1024.316334][ T31] [ 1024.320772][ T31] [ 1024.320772][ T31] Showing all locks held in the system: [ 1024.338287][ T31] 1 lock held by khungtaskd/31: [ 1024.343268][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1024.391486][ T31] 5 locks held by kworker/1:2/5161: [ 1024.397553][ T31] #0: ffff888020effd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1024.409713][ T31] #1: ffffc9000f657c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1024.422380][ T31] #2: ffff888028751198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1024.431883][ T31] #3: ffff888028754510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1024.442644][ T31] #4: ffff888142769268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1024.453137][ T31] 2 locks held by getty/5589: [ 1024.460782][ T31] #0: ffff88803096e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1024.471297][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1024.483088][ T31] 1 lock held by syz-executor/5845: [ 1024.492905][ T31] #0: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 1024.510030][ T31] 2 locks held by kworker/0:4/5883: [ 1024.515301][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1024.531219][ T31] #1: ffffc90004c27c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1024.545102][ T31] 1 lock held by syz-executor/10066: [ 1024.556722][ T31] 2 locks held by syz-executor/10081: [ 1024.562249][ T31] #0: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1024.576897][ T31] #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 1024.592161][ T31] 1 lock held by syz.1.1763/12912: [ 1024.599685][ T31] #0: ffff88805b852008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1024.613791][ T31] 1 lock held by syz.1.2668/16167: [ 1024.620820][ T31] #0: ffff88807a454408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1024.664511][ T31] [ 1024.710306][T12899] vhci_hcd: connection reset by peer [ 1024.733543][ T31] ============================================= [ 1024.733543][ T31] [ 1024.776008][T11418] vhci_hcd: stop threads [ 1024.780342][T11418] vhci_hcd: release socket [ 1024.809454][ T31] NMI backtrace for cpu 0 [ 1024.809479][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 1024.809505][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1024.809518][ T31] Call Trace: [ 1024.809527][ T31] [ 1024.809537][ T31] dump_stack_lvl+0x189/0x250 [ 1024.809572][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1024.809599][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1024.809626][ T31] ? __pfx__printk+0x10/0x10 [ 1024.809658][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1024.809691][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1024.809717][ T31] ? _printk+0xcf/0x120 [ 1024.809741][ T31] ? __pfx__printk+0x10/0x10 [ 1024.809763][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1024.809787][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1024.809819][ T31] watchdog+0xfee/0x1030 [ 1024.809848][ T31] ? watchdog+0x1de/0x1030 [ 1024.809881][ T31] kthread+0x70e/0x8a0 [ 1024.809909][ T31] ? __pfx_watchdog+0x10/0x10 [ 1024.809932][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.809957][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.809978][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1024.810009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1024.810029][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.810051][ T31] ret_from_fork+0x4b/0x80 [ 1024.810071][ T31] ? __pfx_kthread+0x10/0x10 [ 1024.810102][ T31] ret_from_fork_asm+0x1a/0x30 [ 1024.810137][ T31] [ 1024.810145][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1024.923884][T11418] vhci_hcd: disconnect device [ 1024.924511][ C1] NMI backtrace for cpu 1 [ 1024.924528][ C1] CPU: 1 UID: 0 PID: 11418 Comm: kworker/u8:17 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 1024.924550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1024.924564][ C1] Workqueue: usbip_event event_handler [ 1024.924598][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1024.924621][ C1] Code: e8 1e 40 82 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 34 e4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1024.924637][ C1] RSP: 0018:ffffc90004eef498 EFLAGS: 00000006 [ 1024.924651][ C1] RAX: 1ffffffff3369705 RBX: 00000000000003f9 RCX: 0000000000000000 [ 1024.924663][ C1] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 1024.924675][ C1] RBP: ffffc90004eef670 R08: 0000000000000003 R09: 0000000000000004 [ 1024.924686][ C1] R10: dffffc0000000000 R11: ffffffff853d7e60 R12: dffffc0000000000 [ 1024.924699][ C1] R13: dffffc0000000000 R14: ffffffff99b4bbc0 R15: 0000000000000000 [ 1024.924712][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 1024.924726][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1024.924738][ C1] CR2: 00007fffd16eeff8 CR3: 00000000309e0000 CR4: 00000000003526f0 [ 1024.924754][ C1] DR0: 0000000100000000 DR1: 0000000000000040 DR2: 0000000000000003 [ 1024.924770][ C1] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1024.924781][ C1] Call Trace: [ 1024.924788][ C1] [ 1024.924797][ C1] serial8250_console_write+0x581/0x1ba0 [ 1024.924827][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1024.924847][ C1] ? console_flush_all+0x13a/0xc40 [ 1024.924867][ C1] ? console_flush_all+0x13a/0xc40 [ 1024.924888][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1024.924907][ C1] ? console_flush_all+0x13a/0xc40 [ 1024.924924][ C1] ? console_flush_all+0x13a/0xc40 [ 1024.924942][ C1] console_flush_all+0x725/0xc40 [ 1024.924962][ C1] ? console_flush_all+0x13a/0xc40 [ 1024.924983][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1024.925006][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1024.925031][ C1] console_unlock+0xc4/0x270 [ 1024.925049][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1024.925067][ C1] ? vprintk_emit+0x444/0x7a0 [ 1024.925081][ C1] ? vprintk_emit+0x444/0x7a0 [ 1024.925097][ C1] vprintk_emit+0x5b7/0x7a0 [ 1024.925111][ C1] ? vprintk_emit+0x444/0x7a0 [ 1024.925127][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1024.925141][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1024.925168][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1024.925186][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1024.925211][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1024.925243][ C1] _printk+0xcf/0x120 [ 1024.925263][ C1] ? __pfx__printk+0x10/0x10 [ 1024.925283][ C1] ? vhci_shutdown_connection+0x33a/0x4d0 [ 1024.925303][ C1] event_handler+0x2a7/0x490 [ 1024.925328][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1024.925356][ C1] process_scheduled_works+0xadb/0x17a0 [ 1024.925397][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1024.925432][ C1] worker_thread+0x8a0/0xda0 [ 1024.925467][ C1] kthread+0x70e/0x8a0 [ 1024.925492][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1024.925508][ C1] ? __pfx_kthread+0x10/0x10 [ 1024.925530][ C1] ? __pfx_kthread+0x10/0x10 [ 1024.925550][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1024.925576][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1024.925593][ C1] ? __pfx_kthread+0x10/0x10 [ 1024.925611][ C1] ret_from_fork+0x4b/0x80 [ 1024.925629][ C1] ? __pfx_kthread+0x10/0x10 [ 1024.925648][ C1] ret_from_fork_asm+0x1a/0x30 [ 1024.925673][ C1] [ 1025.396788][ T5161] vhci_hcd: vhci_device speed not set [ 1025.422340][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1025.429255][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 1025.441185][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1025.451279][ T31] Call Trace: [ 1025.454588][ T31] [ 1025.457554][ T31] dump_stack_lvl+0x99/0x250 [ 1025.462190][ T31] ? __asan_memcpy+0x40/0x70 [ 1025.466989][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1025.472467][ T31] ? __pfx__printk+0x10/0x10 [ 1025.477112][ T31] panic+0x2db/0x790 [ 1025.481231][ T31] ? __pfx_panic+0x10/0x10 [ 1025.485795][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 1025.491308][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1025.496718][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1025.502908][ T31] watchdog+0x102d/0x1030 [ 1025.507261][ T31] ? watchdog+0x1de/0x1030 [ 1025.511706][ T31] kthread+0x70e/0x8a0 [ 1025.515828][ T31] ? __pfx_watchdog+0x10/0x10 [ 1025.520611][ T31] ? __pfx_kthread+0x10/0x10 [ 1025.525222][ T31] ? __pfx_kthread+0x10/0x10 [ 1025.529837][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1025.535100][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1025.540332][ T31] ? __pfx_kthread+0x10/0x10 [ 1025.545023][ T31] ret_from_fork+0x4b/0x80 [ 1025.549482][ T31] ? __pfx_kthread+0x10/0x10 [ 1025.554086][ T31] ret_from_fork_asm+0x1a/0x30 [ 1025.558872][ T31] [ 1025.562172][ T31] Kernel Offset: disabled [ 1025.566501][ T31] Rebooting in 86400 seconds..