last executing test programs: 2m45.170483887s ago: executing program 1 (id=6773): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x33, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000001e00", "0cfcb67ecace717eb34a87013860510f", "15f4a07f", "1600"}, 0x28) r6 = syz_pidfd_open(r0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000000540)={0x0, 0x3, 0x0, &(0x7f00000009c0)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setns(r6, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) 2m41.495001011s ago: executing program 1 (id=6783): r0 = socket$inet_tcp(0x2, 0x1, 0x0) lstat(&(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() r3 = timerfd_create(0x7, 0x80000) pipe(&(0x7f0000003e40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r6, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$cgroup_int(r6, &(0x7f0000000100)=0x4, 0x12) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000041c0)={0x0, 0x0}) r8 = socket(0x2, 0x805, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fstat(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4001, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r10, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) r12 = geteuid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x3}, [{0x2, 0x6, r10}, {0x2, 0x2, r11}, {0x2, 0x3, r12}, {0x2, 0x1, r13}], {}, [{0x8, 0x1}], {0x10, 0x1}}, 0x4c, 0x0) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000780)=ANY=[@ANYBLOB="66643dd63bf9f225aab4177f667e7b1d871f024bc9cdc7085846fdf9a450815bb72b012de4f843a79942ba69e0d52dc2df564c13c071956dfa17f95f14343bfec5d1a37aa2f4ea1ea45a47989d0fcda980d96d7ec4f021769d4024281f75d0e7fdf0759b2a5c3e8db0bbdabf2b558e1e5282b17289861c36e307421dc279574b08922be6ba8357057fabf0bf3fcc554dd992ea5d924fae5e01d6bba86203eba82aa68dd268c18122d1712e6eb5d52807ea9f5f9cf38d9e46d0bcbb0deae80ccdd6e0e9ae8f297aaa8374cca5f6be661cf538926229bc4df5c342d91e3d07b4359070a22c933e8447ee", @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r14, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r14, &(0x7f0000000080)={0x50, 0x0, r15, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r14, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r14, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r14, &(0x7f000000c400)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x8000000000000000, {0x3, 0x0, 0x3, 0x5, 0x434, 0x70, {0x4, 0x477d, 0x3, 0x8, 0x6, 0xc, 0x5, 0x4, 0x4, 0xa000, 0xfffffff7, r16, r17, 0xc, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @val=@iter={&(0x7f0000004240)=@cgroup={0x2, 0xffffffffffffffff, 0x8}, 0x10}}, 0x20) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000042c0), 0x8000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000200)="0da2688209a50f0fccd900b1e7c48a557ac106ab139d4b2747772b3aa5285779133b2606a1086139c192cc309a92c800931546b0a9dd056dbbeb1259177aef5ca5deffdd9043dcf4b7dec36dfebef75661d7c17ab4b784edb7dfe404b427f60eb6373ff63a093d3d9d91b194f84888beadf42e1c2ba1ea56f6ade6e1751f81a63290209593fe10fbf217638f5e2ceccdb4c79de8424e5a65d03133000eb247a24b79b441676e7c8742138e4e3cbf2e822fdd874da931513c256ec29ca9ab39914848f309fd4308f624f46e10b508a51d57075b8f7b8b78cdff", 0xd9}, {&(0x7f0000000300)="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", 0xff}, {&(0x7f00000000c0)="c12a45f6471c404415c709343a5d1c31ae573ebe44747279bfa13b91854d1d62331167e7cfb33a9086158c02faf8856efa7141af7610a7764c7a9c2d", 0x3c}, {&(0x7f0000000400)="5503c8a8a38aa3a5cce1d18e006dd25f6d9deec0b3b44643f28806ec907be06b5cc2f9a26b3951ae8328e96e6a3ecfad463b5f7a067cd2b5b764536b4917804a40", 0x41}, {&(0x7f0000000480)="08ade4c04ad7dc4ec2302c99533736cce97f258c9ed3c42ba844ab9933039a8d710208b24feb41755d0dbc0b2a300a7e02cfb48fc554b110011b5f22145fde938d0d461598ad80dba6421a862e50554b23260f959c5657debc1fd73dd81fb0f040c13560a72f76d0aad14c1c5861", 0x6e}, {&(0x7f0000000500)="1386f6f92450c3814f57baf74dc17cee3b27bc9051e3f8326e6daef80a75f2e2de896a9baae6f83c34481064d3fad1f200ace3ef0102b5c9e0c10c4ce462efee3478", 0x42}, {&(0x7f0000000580)="ac834e9fa3a4bfff43ba35b97353b06c706f0b3ecee1e6735acf0432062e1e9ae108a60013d5aec14ffe20482a4837ad4799ea20751451f28a44a759c3735eb347f6ee9e60b98566f68f6fac8520fd7cebb3a13b7963653595d47c81e3b5faa3b61a1b722b7530a025be44d3e8283c6671b2b2572988c5a8c380440b6df43a09d67333331bc49ee1c6ac86fee40f8b522bc23e953de298e0000a6fa8480e250d6efe207b0bfd413933295d1279bb1350d361e42dfb61c4296aac57e9aee7e18bc052f222337c94c11c0392f3", 0xcc}], 0x7, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x60, 0x3d}}, {{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000d00)="94229d20ce23f568edce081620a2934d54759f37aff0335eac3a1c87097a134e3e82e78e89d3f9074869ae979d91ddac8163130ef62749cb9a19f4ca63edd9eba266f00f8d0c9a2638da6f5acab1cff366786e92790f7f5d6eb721f91654e4f5ec7657d4c03702", 0x67}, {&(0x7f0000000d80)="7e4b5c7dc596ac7a6431a709473064290b181c8fd4bd66222311d5a458db60510a09fa7e88d7e7db651cd6e7ecc311a218728be6cc6a189997ddb7957785a124624556eb964a1a38f2af8e114042d91b1ee3bf6fa4c77abdc9484899dab414db070eb2bf44324e72a43645", 0x6b}, {&(0x7f0000000e00)="6a62ca03204ab4057f3c0f7905dd359ab87f482d5fad9d4a15c974743aba67cb0d34a24b8ef63e3b4964f36cde217335a7cd03195f66636790ca91490aa8a6632918a591b9535410fc0bb1806b681bf03abda73103c34e2f4f6f27d7d8d192cfd1cf3ba7fe8f9dd0f955dd39e1a2384562cfe17c026ffe119cf78cd1794c53ac602c4b74535bd6637f22398e4083a5816a4da410cfa90be3189d8128cb062e06740905f8fe8aed", 0xa7}, {&(0x7f0000000ec0)="c62149a358a3f31473b3cc9a2437373121b6b433b195440626f3", 0x1a}], 0x4, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x2}}, {{&(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001000)="c0ed7aad68c62603649e5a0914ed5d5c64b7e1465e2efa93e3c76958ced9700f6d848aaaa19538ab49fb97d77976ff5548d54be2a30443082b9b48475d1c0a7be877d7d01ec4e9d4aa94f392aad24c40d564d6e5de8d42f51f4ed7296512fa69f02b7e79e001723140bd688d3c8033b3605ffe0ec37adbbf29521c42598d51ee91dd08ef3f38d8a8a6d00b250ddefa4d6eb531251c9f89e8c4e4050d9cd6923439185af46fb5417b68436b16e7a82bd91e59e87f74e152bb86d5ad8be2f74966002c0afbc40e776f22a0a38adb366ed5cd28bd49926ff3bde7ded6a1a685c69d2841afc34f59ea6fb461f0a4", 0xec}, {&(0x7f0000001100)="0bc047fb3d82b6edd9393b021a765fdf930542888d4b8c88369890a1e7df9b35e951f19484f4992a4f0f7cbbeaddd2538080768c859e3a8e4b9dedc1e7e1a5c14b75895b719665a6dbc4bb867ea4e38f98ec268de05929a6676a71f134dea837436e9706e911609d04f38e536336724c0a091dad70bf92a11efd2d00976d98606c0e2770ed1b876cd5fb43ddb34241ff6fc3da65dc445d325b0756b1cae0a3a31a620517c3570a", 0xa7}, {&(0x7f00000011c0)="f15e016349285e41db945299524757ebde446c7004665cc58323039ad2de5921fafcbf6bf7a4368b9fc5509a651c1062b7d871da1247b88dd705db8e93df46abc99f3227ac30c4b306095f", 0x4b}, {&(0x7f0000001240)="c29f64e0469fb722bd2af9bbfc16fcb916ba28b44b7b4b5fc9444f887ee203213b7e4a0bab255a787d142e0d8ebc5100923c918f2cd4515450af733b38dc988d3ec3c248550e150985a1362bc037337f94719105ae2774f876cda28cb4f1b97de8c68a4ef171c192fd60436f9a1e2443ebacd38bf5bd4d94f730e9446eaf376401a34d97685194ceb1c1ea630c9eba2585e66686cf71dda7cdf098d111825333b6d0931b562a419648450ebc09e087665ef6509e0fe6ea1f8b923ad6368841dff0a13f8309d4b089fdc318c072e0dc4866", 0xd1}, {&(0x7f0000001340)="a97e6a6e578744", 0x7}, {&(0x7f0000001380)="0d031f178a", 0x5}, {&(0x7f00000013c0)="9eab05968aae88cb762445627efa31fe2b00d89596c74514663c8617b6eeac1122fa9f79e42c26ff0bc096a7a4717d1c32eb5bd684ee2ab157772259253e9c", 0x3f}], 0x7, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x20040000}}, {{&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001540)="fac9ed3e4b50374f978a264c98a4519b745cf5436c950ab585acdee4a35539537c287e0dea2aaf42e7b8bdce743ce916ebc507bfac0891d694f2b534f13c63225c75c0384eeeaed8aab79e633cc06a6433a2963d28a381e7c6fc16ed3a16989ad1af3e5b1427bd7dc92fce23392925a80471591c1153c557a28dba27046125160f63046fd4f6bdf7f6", 0x89}, {&(0x7f0000001600)="38e6ab009409f48cdb114f0d82eeb3b1c531c7e289e3949d79f9d3c54a400108d65743d76f09202ed28d188b00ddf08298aeaf8cf82e89fa552a7044017ea41f1747d193a7f93a7c192b206a1d64fa19177c53b6ff1e0c9a15713769a8c25f1426123b880a71365bfb369887848cc4b92e038669bc8ec89a51e389bd25d8551cb2cb32f441c7023871dad25e415f0c7637118beb912c654ae0462e812bb7c10f6f1ecdd63d6df618b8", 0xa9}, {&(0x7f00000016c0)="16ac09f2162ea483806be682fa7ecfb78eec18e6bc095739ee5401f09562be5b7fea21cc48bd4d86e61dbc6db592e04c49440be9b55c04b6c34d2d33fc1c43ec359b343df7e98694bbe54556fab5468cb861c5a1633c7c86e78bb92180941ab7556c3a95b51e504871e70ffe6dfee8ec71b26f34e981683119e81343a244967d6beeced9fefc4ed37f5c9d4d4762e0827e63980e", 0x94}, {&(0x7f0000001780)="3d292ec6e6ebc94bf33bc89cc844b894b0abb65b89561339fde6c09b6fcdea483baae858b9d188728ba46a7e4df0d06428d44638b8226f6c777212f71414c081b0bc65b550b5e95975f93819eefcdb742ca39a38b0cbce45715d1e48e8b95ee52a18eb111e8b31f14671a29535e1f697a70182", 0x73}], 0x4, &(0x7f0000003e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @rights={{0x1c, 0x1, 0x1, [r3, r4, r5]}}], 0x108, 0x4c000}}, {{&(0x7f0000003fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000004040)="ef8a84c8679b39d302637007886c2c6dc1c84370f027949162f90101223a7f8ff9de841c754d0f8e4bc8f0366dfa7f9f6805dc378474a78fe910b40586723bdb3b2d9697b71247", 0x47}, {&(0x7f00000040c0)="a7c16157830c8a5605aa228d43c88e8363d63c1fc68505dfd234cf9892b1d954a95888c027ad371c200c61ff8543396f34662a549ed8780f0ef5089921e0797889dd06e7aad64b1248f58ee8c057939798", 0x51}, {&(0x7f0000004140)="baf47d30f24defc93d1d5c8e57", 0xd}], 0x3, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r12, r17}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r18, r19]}}], 0x58, 0x4000010}}], 0x5, 0x10) r20 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r20, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000002000002c0012800b00010062726964676500001c00028008001a00ff01000008001c002800009f0008001b00060000fc7649de90dc911c7522eb8ecd567b8257ce"], 0x4c}}, 0x40000) 2m41.054107282s ago: executing program 1 (id=6784): epoll_create1(0x80000) r0 = eventfd2(0x9, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x0, 0x1e4}) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @private0, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x1, 0x40}}) 2m40.682421517s ago: executing program 1 (id=6785): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)=ANY=[], 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$l2tp6(r0, 0x0, 0x0, 0x40040, &(0x7f00000000c0)={0xa, 0xf5ff, 0x7d, @private0, 0x9, 0x3}, 0x20) 2m40.469950406s ago: executing program 1 (id=6786): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001040)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800", 0x2}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800", 0x2}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m40.229775953s ago: executing program 1 (id=6787): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$vbi(0x0, 0x1, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}, {0x36de, 0x5800, 0x0, 0x0}], 0x2}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xf, &(0x7f0000000000)="2a59a27e0f62", 0xffffff1f) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd, 0x24080) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x3}) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast1, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) io_setup(0x197, &(0x7f0000000440)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x8402, 0x37) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}]) syz_io_uring_setup(0x2add, &(0x7f0000000240)={0x0, 0xec25, 0x4, 0x1, 0x40000333}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x25, 0x1, @void}, 0x10) syz_io_uring_submit(r5, 0x0, &(0x7f0000000400)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd=r6}) syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_submit(r5, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r1, 0x80, &(0x7f00000000c0)=@llc={0x1a, 0x320, 0xc, 0x8, 0xfe, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}) 2m24.800672163s ago: executing program 32 (id=6787): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$vbi(0x0, 0x1, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}, {0x36de, 0x5800, 0x0, 0x0}], 0x2}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xf, &(0x7f0000000000)="2a59a27e0f62", 0xffffff1f) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd, 0x24080) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x3}) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast1, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) io_setup(0x197, &(0x7f0000000440)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x8402, 0x37) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}]) syz_io_uring_setup(0x2add, &(0x7f0000000240)={0x0, 0xec25, 0x4, 0x1, 0x40000333}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x25, 0x1, @void}, 0x10) syz_io_uring_submit(r5, 0x0, &(0x7f0000000400)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd=r6}) syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_submit(r5, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r1, 0x80, &(0x7f00000000c0)=@llc={0x1a, 0x320, 0xc, 0x8, 0xfe, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}) 10.536356085s ago: executing program 2 (id=7296): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) (async) wait4(0x0, 0x0, 0x8, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0xffffff1b, &(0x7f0000000000)='\x00\x00') ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000030104000000", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r6, 0x101, 0x0, r7, 0x0) (async) ftruncate(r5, 0x6000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x4000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 8.189126061s ago: executing program 2 (id=7302): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x1001, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r4, &(0x7f00000001c0), 0x0}, 0x20) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x20000, 0x3}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x6c}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x10) r9 = dup2(r3, r3) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f00000001c0)=0x2) timer_create(0x7, &(0x7f0000000280)={0x0, 0x7, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r10, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000380)) 8.125550098s ago: executing program 5 (id=7303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0xf0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="ccd82b5946268215f1ca94379b0592e621e442235b4dbd338ac560a4200cad36a9b2d6be7af5ecc8db4055af744b6d31116a15b16509b52e24585eecb31cd32cfd1a59e629ed42111eefe81e9acd7ee74fae070fc53ff70c238330e4624d35249709950c55f68a15f377eae813209cbb664d8849982e4aaac0604987ea09da3a9dc9b0635dcda48cd68aab525e081bd26f5f3089319d98d2dee0bb72baae3de0fa142cf29689f19365a421cd5fe5e24310"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r5) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000040), 0x4) 7.932663635s ago: executing program 5 (id=7305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0xf0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 7.572463316s ago: executing program 5 (id=7307): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0x1}}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xee) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x17d0, 0x3631564e, 0x1, @stepwise={0x81, 0x2, 0xd14, 0x2, 0x8, 0x4}}) 7.318318027s ago: executing program 5 (id=7308): unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x8, 0x3, 0x100, 0x1, 0x8b36]}, &(0x7f00000005c0)=0x54) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 7.250108559s ago: executing program 0 (id=7309): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="080005000400000005"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004fe0000000000000a", 0x39}], 0x1) 6.957360259s ago: executing program 0 (id=7312): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="200e0400c85f00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.062886328s ago: executing program 2 (id=7316): unshare(0x60000600) (async) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0xa, 0x9) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x7}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)="5b2c055772", 0x5}], 0x1) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xc0000010}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x20, 0x2001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3fffffffd, 0x80000001, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x0, @in6=@loopback, 0x3503, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x200003}}, 0xe8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) (async) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3}) (async) read$FUSE(r2, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r9, 0x0) (async) getpgid(r9) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) 4.788461779s ago: executing program 5 (id=7319): recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'pimreg1\x00', @broadcast}) write$tun(r0, 0x0, 0x340a) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x8000, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r13, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x541b, 0x0) 4.773705146s ago: executing program 2 (id=7320): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001b"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) rename(0x0, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x18) 4.624121133s ago: executing program 3 (id=7321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read$FUSE(r3, &(0x7f00000025c0)={0x2020}, 0x2020) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000004600)={0x4}) r5 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0x40045731, &(0x7f0000000040)={0x1}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)) 4.090225843s ago: executing program 3 (id=7322): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="080005000400000005"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004fe0000000000000a", 0x39}], 0x1) 3.702067949s ago: executing program 0 (id=7325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0xf0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (fail_nth: 4) 3.570018777s ago: executing program 3 (id=7326): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000002c0)={0x3, 0x0, {[0x80000000, 0x1, 0xfffffffffffffffe, 0x8, 0x8, 0x10001, 0x8, 0x1fd]}}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0xffff1000, 0x7, 0x22, 0x7ff, 0x0, [{0x40, 0xfd, 0x4d, '\x00', 0xff}, {0x7, 0x5, 0x6, '\x00', 0xf1}, {0x2, 0x6, 0x3, '\x00', 0x6}, {0xeb, 0x9, 0x22, '\x00', 0x2}, {0xf7, 0x86, 0x10, '\x00', 0x11}, {0x3, 0x4, 0x7, '\x00', 0xff}, {0x10, 0x81, 0x9, '\x00', 0x7}, {0x80, 0x3, 0xc, '\x00', 0x6}, {0x40, 0x65, 0x4, '\x00', 0x3}, {0x1, 0xfe, 0x4, '\x00', 0x7}, {0x3, 0x5, 0x2, '\x00', 0xff}, {0x0, 0x7, 0x6, '\x00', 0x42}, {0x5, 0x16, 0xff, '\x00', 0x1}, {0xc, 0x37, 0x9, '\x00', 0x6}, {0xcc, 0xd1, 0x0, '\x00', 0x15}, {0xa2, 0x1, 0xa7, '\x00', 0x3}, {0x80, 0x7, 0x2, '\x00', 0xe}, {0xa5, 0x4, 0x5, '\x00', 0x6}, {0x42, 0x9d, 0x6, '\x00', 0x12}, {0x1, 0x1, 0x11, '\x00', 0x50}, {0x9, 0x3, 0x82, '\x00', 0x5}, {0x4, 0x7, 0x0, '\x00', 0x5}, {0x7, 0x0, 0x5, '\x00', 0x3d}, {0x4, 0x4, 0x89, '\x00', 0x4}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg(r1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000080)=@chain) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', 0x0) (async) r7 = io_uring_setup(0x5eb7, &(0x7f0000000140)={0x0, 0x9cc2, 0x10000, 0x0, 0x28}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x80010, r7, 0x8000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.605491765s ago: executing program 4 (id=7327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0xf0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="ccd82b5946268215f1ca94379b0592e621e442235b4dbd338ac560a4200cad36a9b2d6be7af5ecc8db4055af744b6d31116a15b16509b52e24585eecb31cd32cfd1a59e629ed42111eefe81e9acd7ee74fae070fc53ff70c238330e4624d35249709950c55f68a15f377eae813209cbb664d8849982e4aaac0604987ea09da3a9dc9b0635dcda48cd68aab525e081bd26f5f3089319d98d2dee0bb72baae3de0fa142cf29689f19365a421cd5fe5e24310"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r5) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000040), 0x4) 2.493748786s ago: executing program 0 (id=7328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8931, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_hwaddr}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="c7", 0x1}], 0x2, 0x3, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="64670f01c80f01cf0f01c2d9e4baf80c66b8681b928866efbafc0cedbaf80c66b880947f8f66efbafc0c66b80080000066efbaf80c66b868359c8a66efbafc0cec66b8010000000f01d9ba4100b80500ef66b9800000c00f326635002000000f30", 0x61}], 0x1, 0x3, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x5, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r7 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 2.236829579s ago: executing program 4 (id=7329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001400)=""/18, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 2.222558265s ago: executing program 3 (id=7330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000fa7f000000000000", @ANYRES32, @ANYBLOB="00000000000000000021000000000000000000004c41860c97010000003c4ef3b8235f88172951a46b1fb5e2572541f405cdcfb0212b9d85b2c5e995701ec1e066b0a28a96", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012000800103afffe8000000000000000000000000000bbff0200000000000000000000000000018600907801000204000000000000000099515ecd1359facb015a34f70078d0ebf143db5129121b52655a311774d9cb0159ca99e8a06cb5a00df2760bf742cbf70794f0dfc31efb492cd4d7588a815a98edac30ca2f1da6d1058b03635a0c8ee11131244e25435bdae463a66a5fc8b6365bbd797222775eb897e9357fb66c3ea3a6f3d3cfbd06d3aa45399fa58f911cace7961ad4cd79ac510d6ff06ddf731fd235bfc0ba2c10b804ccd578db3fcf80d8595874cdaf3fab8797c5a6129b08"], 0x0) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f00000007c0)={0x0, "d6309093fa7936fc7ab4ce479e5fad975b89ed15c642c6c537e7baf08da1630d", 0x4, 0x1}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x4000840) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r7, &(0x7f00000004c0), 0x0, 0x2000, 0x101, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet(r2, &(0x7f0000000340)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000001c0)=""/13, &(0x7f0000000200)=0xd) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0xfffd, 0x3) fsopen(0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r9) socket$pppl2tp(0x18, 0x1, 0x1) 2.022181147s ago: executing program 0 (id=7331): recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'pimreg1\x00', @broadcast}) write$tun(r0, 0x0, 0x340a) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x8000, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r13, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x541b, 0x0) 1.991039727s ago: executing program 4 (id=7332): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000180)=0x2, 0x4) io_setup(0x8, 0x0) r2 = syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x77c8, 0x10, 0x8000, 0x100000d6, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x2ede8ec33678cf20) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x623, 0x4c1, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r7, @ANYRES8=r7, @ANYRESOCT=r5, @ANYRES32, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x2000c090}, 0x810) socket(0x10, 0x3, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'hsr0\x00', 0x10}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 1.5655519s ago: executing program 5 (id=7333): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x52491629, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x0, 0x3009, 0x0, 0x8, 0x0, 0x3, 0xdd2fcb245114ab72}}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.206055626s ago: executing program 3 (id=7334): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 955.668671ms ago: executing program 4 (id=7335): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800cef010006120000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) 603.106114ms ago: executing program 2 (id=7336): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="080005000400000005"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004fe0000000000000a", 0x39}], 0x1) 333.39982ms ago: executing program 4 (id=7337): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00003d0000/0x4000)=nil, 0x4000, 0x13) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fc, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}, 0x1c) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xd60b, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd1, 0xfffffffffffffffe, 0x1000000}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 332.130313ms ago: executing program 2 (id=7338): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x3, 0x1000000, 0x0, 0x1, 0x0, 0x8}, {0x409, 0x0, 0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611084000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000340)={0xa, {{0x2, 0x4e21, @empty}}}, 0x88) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc34000ac00000109022400010000a0000904000001030101000921000800012201000905810330"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0xc0105702, &(0x7f00000000c0)) syz_usb_control_io(r1, 0x0, &(0x7f0000000540)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 208.865369ms ago: executing program 0 (id=7339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0xf0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="ccd82b5946268215f1ca94379b0592e621e442235b4dbd338ac560a4200cad36a9b2d6be7af5ecc8db4055af744b6d31116a15b16509b52e24585eecb31cd32cfd1a59e629ed42111eefe81e9acd7ee74fae070fc53ff70c238330e4624d35249709950c55f68a15f377eae813209cbb664d8849982e4aaac0604987ea09da3a9dc9b0635dcda48cd68aab525e081bd26f5f3089319d98d2dee0bb72baae3de0fa142cf29689f19365a421cd5fe5e24310"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000040), 0x4) 54.696554ms ago: executing program 4 (id=7340): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x14ba00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x15, 0x4, 0x81}) r1 = epoll_create(0x5) r2 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x300, r2, &(0x7f0000000040)={0x32000000}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x3, 0x3, 0x1, 0x1, 0xded}, 0x5, 0x7ff, 0x400001}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x48}}, 0x4040000) 0s ago: executing program 3 (id=7341): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x2a}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20, 0x2800}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) kernel console output (not intermixed with test programs): callback - 0 bytes [ 1989.371924][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1989.378556][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1989.384888][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1989.391531][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1989.397875][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1989.404479][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1989.417613][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1989.426438][ T1212] usb 4-1: USB disconnect, device number 76 [ 1990.454024][T16733] usb 5-1: USB disconnect, device number 119 [ 1990.751484][T30678] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1990.867893][T30681] netlink: 'syz.0.6751': attribute type 27 has an invalid length. [ 1990.878287][T29460] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1990.910887][T16733] usb 2-1: USB disconnect, device number 35 [ 1991.066028][T29460] usb 4-1: Using ep0 maxpacket: 32 [ 1991.090813][T29460] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1991.103668][T29460] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.151736][T29460] usb 4-1: config 0 has no interface number 0 [ 1991.215369][T29460] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1991.243490][T29460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.293411][T29460] usb 4-1: Product: syz [ 1991.312603][T29460] usb 4-1: Manufacturer: syz [ 1991.339134][T29460] usb 4-1: SerialNumber: syz [ 1991.421848][T29460] usb 4-1: config 0 descriptor?? [ 1991.480893][T29460] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1991.598396][T29460] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input178 [ 1991.779863][T30694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.789614][T30694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.187425][ T1212] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1992.427664][ T1212] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1992.471038][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1992.522883][ T1212] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1993.351021][ T1212] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1993.389289][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.424496][ T1212] usb 2-1: Product: syz [ 1993.442546][ T1212] usb 2-1: Manufacturer: syz [ 1993.471073][ T1212] usb 2-1: SerialNumber: syz [ 1993.520061][ T1212] usb 2-1: config 0 descriptor?? [ 1993.689528][T30699] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1993.747208][T16733] usb 4-1: USB disconnect, device number 77 [ 1993.911533][T30699] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1995.137618][T29474] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1995.342411][T29474] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1995.378039][T29474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.407323][T29474] usb 5-1: Product: syz [ 1995.426457][T29474] usb 5-1: Manufacturer: syz [ 1995.446578][T29474] usb 5-1: SerialNumber: syz [ 1995.489313][T29474] usb 5-1: config 0 descriptor?? [ 1995.555326][T29474] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 120 [ 1995.901256][T29474] (null): failure reading functionality [ 1995.911645][T30708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1995.928590][T30708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.987274][T29474] i2c i2c-1: connected i2c-tiny-usb device [ 1996.037289][T16737] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1996.197132][T16737] usb 4-1: Using ep0 maxpacket: 8 [ 1996.210567][T16737] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1996.232358][T16737] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 90, changing to 7 [ 1996.243798][ T1212] usb 5-1: USB disconnect, device number 120 [ 1996.280590][T16737] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 1996.297463][T16737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.333573][T16737] usb 4-1: Product: syz [ 1996.352916][T16737] usb 4-1: Manufacturer: syz [ 1996.371546][T16737] usb 4-1: SerialNumber: syz [ 1996.614674][T16737] usb 4-1: 1:1: invalid format type 0x1005 is detected, processed as PCM [ 1996.647564][ T1212] usb 2-1: USB disconnect, device number 36 [ 1996.685086][T16737] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1996.970136][T16737] usb 4-1: USB disconnect, device number 78 [ 1997.159976][T11197] udevd[11197]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1997.797330][T30741] netlink: 'syz.4.6769': attribute type 27 has an invalid length. [ 1998.109472][T30740] kvm: pic: level sensitive irq not supported [ 1998.109641][T30740] pic_ioport_write: 3 callbacks suppressed [ 1998.109654][T30740] kvm: pic: single mode not supported [ 1998.467115][T29460] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 2000.146660][T30758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2000.185499][T30762] sctp: [Deprecated]: syz.0.6775 (pid 30762) Use of int in maxseg socket option. [ 2000.185499][T30762] Use struct sctp_assoc_value instead [ 2000.243425][T30762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6775'. [ 2001.716784][T30775] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2002.067156][T29474] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2002.227350][T29474] usb 1-1: Using ep0 maxpacket: 8 [ 2002.253864][T29474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.255384][ T1220] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2002.289523][T29474] usb 1-1: config 0 has no interfaces? [ 2002.311647][T29474] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2002.333325][T29474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.357208][T29474] usb 1-1: Product: syz [ 2002.376589][T30784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 2002.394385][T30784] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 2002.403251][T29474] usb 1-1: Manufacturer: syz [ 2002.426521][T29474] usb 1-1: SerialNumber: syz [ 2002.438982][ T1220] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.441998][T29474] usb 1-1: config 0 descriptor?? [ 2002.455471][ T1220] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2002.492057][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.556882][ T1220] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2002.745094][T30775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2002.757864][T30775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.019247][T29460] usb 1-1: USB disconnect, device number 92 [ 2003.271374][T30791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6786'. [ 2003.293260][T30792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6786'. [ 2003.697126][T29460] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2003.847131][T29460] usb 2-1: Using ep0 maxpacket: 8 [ 2003.862337][T29460] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 2003.876101][T29460] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2003.886161][T29460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.908662][T29460] usb 2-1: Product: syz [ 2003.920751][T29460] usb 2-1: Manufacturer: syz [ 2003.938394][T29460] usb 2-1: SerialNumber: syz [ 2003.971821][T29460] usb 2-1: config 0 descriptor?? [ 2004.023098][T29460] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2004.032911][T29460] usb 2-1: setting power ON [ 2004.041402][T29460] dvb-usb: bulk message failed: -22 (2/0) [ 2004.062809][ T1220] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 2004.078612][ T1220] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2004.091315][T29460] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2004.101925][ T1220] stv0680 5-1:4.0: last error: 86, command = 0x78 [ 2004.135892][T29460] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2004.147194][ T1220] usb 5-1: USB disconnect, device number 121 [ 2004.166695][T29460] usb 2-1: media controller created [ 2004.200754][T30808] netlink: 'syz.3.6791': attribute type 27 has an invalid length. [ 2004.225078][T29460] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2004.244323][T30794] dvb-usb: bulk message failed: -22 (3/0) [ 2004.338639][T29460] usb 2-1: selecting invalid altsetting 6 [ 2004.357751][T29460] usb 2-1: digital interface selection failed (-22) [ 2004.384992][T29460] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2004.404759][T29460] usb 2-1: setting power OFF [ 2004.428108][T29460] dvb-usb: bulk message failed: -22 (2/0) [ 2004.441675][T29460] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2004.457060][T29460] (NULL device *): no alternate interface [ 2005.392994][T30820] netlink: 'syz.4.6794': attribute type 1 has an invalid length. [ 2005.452805][T30821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6794'. [ 2005.457581][T30820] netlink: 'syz.4.6794': attribute type 1 has an invalid length. [ 2005.545623][T30820] netlink: 'syz.4.6794': attribute type 1 has an invalid length. [ 2005.622300][T30820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6794'. [ 2005.678688][T30820] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6794'. [ 2010.557268][ T1220] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2011.113374][T30892] fuse: Bad value for 'fd' [ 2011.428273][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 2011.428294][ T29] audit: type=1326 audit(1774515994.410:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30894 comm="syz.4.6818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bd979c799 code=0x0 [ 2013.644985][T30931] kvm: user requested TSC rate below hardware speed [ 2015.562724][T30935] netlink: 'syz.4.6828': attribute type 21 has an invalid length. [ 2015.671741][ T1220] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2015.672989][T30935] netlink: 'syz.4.6828': attribute type 6 has an invalid length. [ 2015.742015][T30935] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6828'. [ 2015.879984][ T1220] usb 4-1: Using ep0 maxpacket: 16 [ 2015.887530][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2015.910206][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2015.920695][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2015.968962][ T1220] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2015.987328][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.017430][ T1220] usb 4-1: config 0 descriptor?? [ 2016.097085][T29474] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2016.237099][T29474] usb 5-1: device descriptor read/64, error -71 [ 2016.463713][T30959] netlink: 'syz.2.6834': attribute type 1 has an invalid length. [ 2016.514543][T29474] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2016.717105][T29474] usb 5-1: device descriptor read/64, error -71 [ 2016.738369][T30959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2016.819983][T30961] bond3: (slave geneve3): making interface the new active one [ 2016.827909][T29474] usb usb5-port1: attempt power cycle [ 2016.834091][T30961] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 2017.164508][T30965] loop9: detected capacity change from 0 to 7 [ 2017.206423][ T29] audit: type=1326 audit(1774516000.190:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30964 comm="syz.2.6835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08539c799 code=0x0 [ 2017.255881][T11313] buffer_io_error: 10 callbacks suppressed [ 2017.255905][T11313] Buffer I/O error on dev loop9, logical block 0, async page read [ 2017.298921][T11313] Buffer I/O error on dev loop9, logical block 0, async page read [ 2017.788406][T11313] Buffer I/O error on dev loop9, logical block 0, async page read [ 2017.945801][T11313] Buffer I/O error on dev loop9, logical block 0, async page read [ 2018.010709][T11313] Buffer I/O error on dev loop9, logical block 0, async page read [ 2018.717519][ T1220] usbhid 4-1:0.0: can't add hid device: -71 [ 2018.723709][ T1212] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2018.745858][ T1220] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2018.859744][ T1220] usb 4-1: USB disconnect, device number 80 [ 2018.949902][ T1212] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2018.991484][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.050946][ T1212] usb 5-1: config 0 descriptor?? [ 2019.294870][ T1212] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2019.465568][T24113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2019.480242][T24113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2019.493649][T24113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2019.504183][T24113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2019.515484][ T1212] [drm:udl_init] *ERROR* Selecting channel failed [ 2019.522609][T24113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2019.592027][ T1212] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 2019.599249][ T1212] [drm] Initialized udl on minor 2 [ 2019.612819][ T1212] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2019.623591][ T1212] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2019.631729][ T42] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2019.642914][ T1212] usb 5-1: USB disconnect, device number 125 [ 2019.649322][ T42] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2020.588297][T30985] chnl_net:caif_netlink_parms(): no params data found [ 2020.869276][T30985] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.878067][T30985] bridge0: port 1(bridge_slave_0) entered disabled state [ 2020.889988][T30985] bridge_slave_0: entered allmulticast mode [ 2020.898539][T30985] bridge_slave_0: entered promiscuous mode [ 2020.909392][T30985] bridge0: port 2(bridge_slave_1) entered blocking state [ 2020.916639][T30985] bridge0: port 2(bridge_slave_1) entered disabled state [ 2020.925113][T30985] bridge_slave_1: entered allmulticast mode [ 2020.969315][T30985] bridge_slave_1: entered promiscuous mode [ 2021.124118][T30985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2021.155896][T30985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2021.292103][T30985] team0: Port device team_slave_0 added [ 2021.329698][T30985] team0: Port device team_slave_1 added [ 2021.405062][T30985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2021.425672][T30985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2021.478071][T30985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2021.523137][T30985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2021.537455][T30985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2021.587311][T30985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2021.612681][T24113] Bluetooth: hci1: command tx timeout [ 2021.724565][T30985] hsr_slave_0: entered promiscuous mode [ 2021.731734][T30985] hsr_slave_1: entered promiscuous mode [ 2021.739002][T30985] debugfs: 'hsr0' already exists in 'hsr' [ 2021.744859][T30985] Cannot create hsr debugfs directory [ 2022.546460][T30985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2022.564135][T31020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2022.577227][T29474] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2022.600065][T31021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2022.611041][T30985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2022.644469][T30985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2022.671811][T24113] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 2022.679673][T30985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2022.750705][T29474] usb 4-1: Using ep0 maxpacket: 16 [ 2022.764308][T29474] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2022.813499][T29474] usb 4-1: config 6 has an invalid descriptor of length 213, skipping remainder of the config [ 2022.861319][T29474] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 2022.874868][T30985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2022.909028][T29474] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=75.cb [ 2022.937758][T29474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.945862][T29474] usb 4-1: Product: syz [ 2022.959536][T30985] 8021q: adding VLAN 0 to HW filter on device team0 [ 2022.977104][T29474] usb 4-1: Manufacturer: syz [ 2022.991565][T29474] usb 4-1: SerialNumber: syz [ 2022.998325][T29322] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.005560][T29322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2023.083152][T29322] bridge0: port 2(bridge_slave_1) entered blocking state [ 2023.090403][T29322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2023.188768][T31034] FAULT_INJECTION: forcing a failure. [ 2023.188768][T31034] name failslab, interval 1, probability 0, space 0, times 0 [ 2023.205945][T30985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2023.218963][T31034] CPU: 1 UID: 0 PID: 31034 Comm: syz.2.6856 Tainted: G L syzkaller #0 PREEMPT(full) [ 2023.218998][T31034] Tainted: [L]=SOFTLOCKUP [ 2023.219007][T31034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2023.219020][T31034] Call Trace: [ 2023.219030][T31034] [ 2023.219040][T31034] dump_stack_lvl+0xe8/0x150 [ 2023.219080][T31034] should_fail_ex+0x412/0x560 [ 2023.219120][T31034] should_failslab+0xa8/0x100 [ 2023.219215][T31034] ? skb_clone+0x212/0x3a0 [ 2023.219246][T31034] kmem_cache_alloc_noprof+0x87/0x650 [ 2023.219269][T31034] ? __netlink_lookup+0xc6/0x8b0 [ 2023.219300][T31034] skb_clone+0x212/0x3a0 [ 2023.219331][T31034] __netlink_deliver_tap+0x404/0x850 [ 2023.219378][T31034] ? netlink_deliver_tap+0x2e/0x1b0 [ 2023.219413][T31034] netlink_deliver_tap+0x19c/0x1b0 [ 2023.219448][T31034] netlink_unicast+0x7e3/0x9b0 [ 2023.219487][T31034] ? __pfx_netlink_unicast+0x10/0x10 [ 2023.219520][T31034] ? netlink_sendmsg+0x650/0xb40 [ 2023.219539][T31034] ? skb_put+0x11b/0x210 [ 2023.219565][T31034] netlink_sendmsg+0x813/0xb40 [ 2023.219596][T31034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2023.219620][T31034] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2023.219656][T31034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2023.219688][T31034] ____sys_sendmsg+0x972/0x9f0 [ 2023.219723][T31034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2023.219758][T31034] ? import_iovec+0x73/0xa0 [ 2023.219786][T31034] ___sys_sendmsg+0x2a5/0x360 [ 2023.219818][T31034] ? __pfx____sys_sendmsg+0x10/0x10 [ 2023.219881][T31034] ? __fget_files+0x2a/0x420 [ 2023.219914][T31034] ? __fget_files+0x3a0/0x420 [ 2023.219957][T31034] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2023.219988][T31034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2023.220024][T31034] ? __pfx_ksys_write+0x10/0x10 [ 2023.220062][T31034] do_syscall_64+0x14d/0xf80 [ 2023.220089][T31034] ? trace_irq_disable+0x3b/0x150 [ 2023.220130][T31034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.220160][T31034] ? clear_bhb_loop+0x40/0x90 [ 2023.220185][T31034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.220208][T31034] RIP: 0033:0x7fe08539c799 [ 2023.220229][T31034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2023.220249][T31034] RSP: 002b:00007fe08618c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2023.220273][T31034] RAX: ffffffffffffffda RBX: 00007fe085615fa0 RCX: 00007fe08539c799 [ 2023.220290][T31034] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 2023.220304][T31034] RBP: 00007fe08618c090 R08: 0000000000000000 R09: 0000000000000000 [ 2023.220318][T31034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2023.220332][T31034] R13: 00007fe085616038 R14: 00007fe085615fa0 R15: 00007fe08573fa48 [ 2023.220368][T31034] [ 2023.596247][T31032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6855'. [ 2023.629020][T29474] usb 4-1: USB disconnect, device number 81 [ 2023.672791][T30985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2023.687215][T24113] Bluetooth: hci1: command tx timeout [ 2023.719320][T31032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6855'. [ 2023.972490][T30985] veth0_vlan: entered promiscuous mode [ 2024.007283][T31044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.016110][T31044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.037317][T30985] veth1_vlan: entered promiscuous mode [ 2024.203437][T31044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.213209][T31044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.240818][T30985] veth0_macvtap: entered promiscuous mode [ 2024.288267][T30985] veth1_macvtap: entered promiscuous mode [ 2024.314080][T31044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.326554][T31044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.397790][ T1220] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2024.408255][T30985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2024.442093][T30985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2024.489967][T29322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.520106][T29322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.572422][ T1220] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2024.586192][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.601055][T29322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.631912][ T1220] usb 5-1: Product: syz [ 2024.644173][T29322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2024.664012][ T1220] usb 5-1: Manufacturer: syz [ 2024.677105][ T1220] usb 5-1: SerialNumber: syz [ 2024.710833][ T1220] usb 5-1: config 0 descriptor?? [ 2024.761026][ T1220] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 2025.073050][T29308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2025.093218][ T1220] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 2025.111758][T29308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.145141][ T1220] sq905c 5-1:0.0: Get version command failed [ 2025.177376][ T1220] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 2025.250637][ T1220] usb 5-1: USB disconnect, device number 126 [ 2025.331057][T29322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2025.375186][T29322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.478850][T31070] FAULT_INJECTION: forcing a failure. [ 2025.478850][T31070] name failslab, interval 1, probability 0, space 0, times 0 [ 2025.527962][T31070] CPU: 0 UID: 0 PID: 31070 Comm: syz.0.6866 Tainted: G L syzkaller #0 PREEMPT(full) [ 2025.527999][T31070] Tainted: [L]=SOFTLOCKUP [ 2025.528007][T31070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2025.528021][T31070] Call Trace: [ 2025.528029][T31070] [ 2025.528039][T31070] dump_stack_lvl+0xe8/0x150 [ 2025.528077][T31070] should_fail_ex+0x412/0x560 [ 2025.528114][T31070] should_failslab+0xa8/0x100 [ 2025.528142][T31070] ? skb_clone+0x212/0x3a0 [ 2025.528168][T31070] kmem_cache_alloc_noprof+0x87/0x650 [ 2025.528201][T31070] skb_clone+0x212/0x3a0 [ 2025.528230][T31070] __netlink_deliver_tap+0x404/0x850 [ 2025.528275][T31070] ? netlink_deliver_tap+0x2e/0x1b0 [ 2025.528310][T31070] netlink_deliver_tap+0x19c/0x1b0 [ 2025.528344][T31070] netlink_sendskb+0x68/0x140 [ 2025.528376][T31070] netlink_unicast+0x3a3/0x9b0 [ 2025.528413][T31070] ? __pfx_netlink_unicast+0x10/0x10 [ 2025.528453][T31070] netlink_rcv_skb+0x2b6/0x4b0 [ 2025.528486][T31070] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2025.528519][T31070] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2025.528571][T31070] ? bpf_lsm_capable+0x9/0x20 [ 2025.528600][T31070] ? security_capable+0x7e/0x2c0 [ 2025.528639][T31070] nfnetlink_rcv+0x2c0/0x27b0 [ 2025.528676][T31070] ? __local_bh_enable_ip+0xd0/0x130 [ 2025.528706][T31070] ? lockdep_hardirqs_on+0x7a/0x110 [ 2025.528731][T31070] ? __dev_queue_xmit+0x277/0x3890 [ 2025.528773][T31070] ? __local_bh_enable_ip+0xd0/0x130 [ 2025.528799][T31070] ? __dev_queue_xmit+0x277/0x3890 [ 2025.528825][T31070] ? __dev_queue_xmit+0x1e78/0x3890 [ 2025.528850][T31070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.528880][T31070] ? __dev_queue_xmit+0x277/0x3890 [ 2025.528913][T31070] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2025.528949][T31070] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2025.528984][T31070] ? ref_tracker_free+0x693/0x840 [ 2025.529015][T31070] ? __copy_skb_header+0xa3/0x4a0 [ 2025.529042][T31070] ? __pfx_ref_tracker_free+0x10/0x10 [ 2025.529073][T31070] ? __skb_clone+0x63/0x7a0 [ 2025.529102][T31070] ? __skb_clone+0x483/0x7a0 [ 2025.529134][T31070] ? skb_clone+0x246/0x3a0 [ 2025.529163][T31070] ? __netlink_deliver_tap+0x807/0x850 [ 2025.529195][T31070] ? netlink_deliver_tap+0x2e/0x1b0 [ 2025.529246][T31070] ? netlink_deliver_tap+0x2e/0x1b0 [ 2025.529286][T31070] netlink_unicast+0x80f/0x9b0 [ 2025.529324][T31070] ? __pfx_netlink_unicast+0x10/0x10 [ 2025.529356][T31070] ? netlink_sendmsg+0x650/0xb40 [ 2025.529374][T31070] ? skb_put+0x11b/0x210 [ 2025.529400][T31070] netlink_sendmsg+0x813/0xb40 [ 2025.529430][T31070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2025.529454][T31070] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2025.529488][T31070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2025.529516][T31070] ____sys_sendmsg+0x972/0x9f0 [ 2025.529556][T31070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2025.529591][T31070] ? import_iovec+0x73/0xa0 [ 2025.529619][T31070] ___sys_sendmsg+0x2a5/0x360 [ 2025.529650][T31070] ? __pfx____sys_sendmsg+0x10/0x10 [ 2025.529711][T31070] ? __fget_files+0x2a/0x420 [ 2025.529742][T31070] ? __fget_files+0x3a0/0x420 [ 2025.529783][T31070] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2025.529812][T31070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2025.529846][T31070] ? __pfx_ksys_write+0x10/0x10 [ 2025.529882][T31070] do_syscall_64+0x14d/0xf80 [ 2025.529906][T31070] ? trace_irq_disable+0x3b/0x150 [ 2025.529938][T31070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.529959][T31070] ? clear_bhb_loop+0x40/0x90 [ 2025.529986][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.530007][T31070] RIP: 0033:0x7fc732d9c799 [ 2025.530028][T31070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2025.530046][T31070] RSP: 002b:00007fc730ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2025.530070][T31070] RAX: ffffffffffffffda RBX: 00007fc733015fa0 RCX: 00007fc732d9c799 [ 2025.530086][T31070] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 2025.530101][T31070] RBP: 00007fc730ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2025.530114][T31070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2025.530128][T31070] R13: 00007fc733016038 R14: 00007fc733015fa0 R15: 00007fc73313fa48 [ 2025.530162][T31070] [ 2026.094278][T24113] Bluetooth: hci1: command tx timeout [ 2026.744303][T31082] syzkaller0: entered promiscuous mode [ 2026.807849][T31085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6868'. [ 2026.827980][T31082] syzkaller0: entered allmulticast mode [ 2027.068988][T31084] FAULT_INJECTION: forcing a failure. [ 2027.068988][T31084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2027.346235][T31084] CPU: 1 UID: 0 PID: 31084 Comm: syz.5.6839 Tainted: G L syzkaller #0 PREEMPT(full) [ 2027.346274][T31084] Tainted: [L]=SOFTLOCKUP [ 2027.346283][T31084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2027.346297][T31084] Call Trace: [ 2027.346307][T31084] [ 2027.346317][T31084] dump_stack_lvl+0xe8/0x150 [ 2027.346355][T31084] should_fail_ex+0x412/0x560 [ 2027.346395][T31084] _copy_to_user+0x31/0xb0 [ 2027.346422][T31084] simple_read_from_buffer+0xe1/0x170 [ 2027.346459][T31084] proc_fail_nth_read+0x1bb/0x230 [ 2027.346495][T31084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2027.346531][T31084] ? rw_verify_area+0x2a6/0x4d0 [ 2027.346555][T31084] ? reacquire_held_locks+0x104/0x190 [ 2027.346587][T31084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2027.346621][T31084] vfs_read+0x20c/0xa70 [ 2027.346644][T31084] ? fdget_pos+0x246/0x320 [ 2027.346676][T31084] ? __pfx___mutex_lock+0x10/0x10 [ 2027.346706][T31084] ? __pfx_vfs_read+0x10/0x10 [ 2027.346732][T31084] ? __fget_files+0x2a/0x420 [ 2027.346768][T31084] ? __fget_files+0x3a0/0x420 [ 2027.346800][T31084] ? __fget_files+0x2a/0x420 [ 2027.346841][T31084] ksys_read+0x150/0x270 [ 2027.346868][T31084] ? __pfx_ksys_read+0x10/0x10 [ 2027.346889][T31084] ? fput+0xa0/0xd0 [ 2027.346932][T31084] do_syscall_64+0x14d/0xf80 [ 2027.346958][T31084] ? trace_irq_disable+0x3b/0x150 [ 2027.346990][T31084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.347014][T31084] ? clear_bhb_loop+0x40/0x90 [ 2027.347041][T31084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.347064][T31084] RIP: 0033:0x7f9df275cfce [ 2027.347085][T31084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2027.347104][T31084] RSP: 002b:00007f9df3585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2027.347129][T31084] RAX: ffffffffffffffda RBX: 00007f9df35866c0 RCX: 00007f9df275cfce [ 2027.347146][T31084] RDX: 000000000000000f RSI: 00007f9df35860a0 RDI: 0000000000000005 [ 2027.347159][T31084] RBP: 00007f9df3586090 R08: 0000000000000000 R09: 0000000000000000 [ 2027.347175][T31084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.347188][T31084] R13: 00007f9df2a16128 R14: 00007f9df2a16090 R15: 00007f9df2b3fa48 [ 2027.347223][T31084] [ 2028.108435][T31099] program syz.5.6870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2028.167489][T24113] Bluetooth: hci1: command tx timeout [ 2028.542682][T31109] netlink: 'syz.4.6873': attribute type 6 has an invalid length. [ 2029.120499][T31127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6874'. [ 2029.233007][T31127] netlink: 'syz.4.6874': attribute type 7 has an invalid length. [ 2029.267450][T31127] netlink: 'syz.4.6874': attribute type 8 has an invalid length. [ 2029.275289][T31127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6874'. [ 2030.117482][T16346] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2030.222630][T31148] netlink: 'syz.0.6884': attribute type 1 has an invalid length. [ 2030.258365][T16346] usb 6-1: device descriptor read/64, error -71 [ 2030.277105][ T29] audit: type=1326 audit(1774516013.260:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31146 comm="syz.3.6883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc23299c799 code=0x0 [ 2030.302486][T31148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2030.443024][T31152] bond4: (slave geneve4): making interface the new active one [ 2030.607285][T16346] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2030.619380][T31152] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 2030.709662][T31154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6883'. [ 2030.827435][T16346] usb 6-1: device descriptor read/64, error -71 [ 2031.007204][T16346] usb usb6-port1: attempt power cycle [ 2031.367641][T16346] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2031.410136][T16346] usb 6-1: device descriptor read/8, error -71 [ 2031.523085][T31166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6887'. [ 2031.553333][T31166] netlink: 'syz.4.6887': attribute type 7 has an invalid length. [ 2031.577155][T31166] netlink: 'syz.4.6887': attribute type 8 has an invalid length. [ 2031.605294][T31166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6887'. [ 2031.677320][T16346] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2031.718355][T16346] usb 6-1: device descriptor read/8, error -71 [ 2031.847357][T16346] usb usb6-port1: unable to enumerate USB device [ 2031.889557][T31169] syzkaller0: entered promiscuous mode [ 2031.908584][T31169] syzkaller0: entered allmulticast mode [ 2032.797104][ T1212] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2032.957117][ T1212] usb 4-1: Using ep0 maxpacket: 8 [ 2033.148617][ T1212] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2033.264495][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.299406][ T1212] usb 4-1: Product: syz [ 2033.307820][T31188] tap0: tun_chr_ioctl cmd 1128283397 [ 2033.318688][ T1212] usb 4-1: Manufacturer: syz [ 2033.323355][ T1212] usb 4-1: SerialNumber: syz [ 2033.499095][ T1212] usb 4-1: config 0 descriptor?? [ 2033.517731][ T1212] gspca_main: se401-2.14.0 probing 047d:5003 [ 2034.157132][ T1212] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input179 [ 2034.397990][T16346] usb 4-1: USB disconnect, device number 82 [ 2034.847095][T31201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6898'. [ 2034.875889][T31201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6898'. [ 2034.907867][T31201] netlink: 'syz.5.6898': attribute type 13 has an invalid length. [ 2035.113594][T31205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6899'. [ 2035.131484][T31205] netlink: 'syz.5.6899': attribute type 7 has an invalid length. [ 2035.167188][T31205] netlink: 'syz.5.6899': attribute type 8 has an invalid length. [ 2035.254740][T31205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6899'. [ 2036.447169][T16346] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2036.507095][T25475] IPVS: starting estimator thread 0... [ 2036.513986][T31220] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 2036.628722][T16346] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2036.675513][T16346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.707089][T31225] IPVS: using max 28 ests per chain, 67200 per kthread [ 2036.728328][T16346] usb 4-1: config 0 descriptor?? [ 2036.768326][T16346] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2037.261423][T16346] gspca_cpia1: usb_control_msg 03, error -32 [ 2037.498244][T25475] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2037.532116][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.538754][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.658915][T25475] usb 5-1: Using ep0 maxpacket: 16 [ 2037.699714][T25475] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.752289][T25475] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2037.820228][T25475] usb 5-1: config 1 has no interface number 1 [ 2037.870897][T25475] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2037.907121][T25475] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2037.979046][T25475] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2037.996429][T31244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6909'. [ 2038.028225][T25475] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2038.054496][T25475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.083337][T25475] usb 5-1: Product: syz [ 2038.097094][T25475] usb 5-1: Manufacturer: syz [ 2038.109870][T25475] usb 5-1: SerialNumber: syz [ 2038.319094][T31250] syzkaller0: entered promiscuous mode [ 2038.328325][T16346] gspca_cpia1: usb_control_msg 03, error -110 [ 2038.342943][T31250] syzkaller0: entered allmulticast mode [ 2038.416697][T16346] gspca_cpia1: usb_control_msg 01, error -32 [ 2038.437638][T25475] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 2038.447311][T16346] gspca_cpia1: usb_control_msg 01, error -32 [ 2038.473796][T25475] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 2038.480295][T16346] gspca_cpia1: usb_control_msg 01, error -32 [ 2038.521212][T25475] usb 5-1: selecting invalid altsetting 0 [ 2038.527124][T16346] gspca_cpia1: usb_control_msg 01, error -32 [ 2038.533552][T16346] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 2038.554361][T25475] usb 5-1: selecting invalid altsetting 0 [ 2038.558890][T31257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6911'. [ 2038.611798][T31257] netlink: 'syz.2.6911': attribute type 14 has an invalid length. [ 2038.677091][T31257] netlink: 'syz.2.6911': attribute type 13 has an invalid length. [ 2038.772915][T31257] vxlan0: entered promiscuous mode [ 2038.829401][T29310] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2038.880571][T25475] usb 5-1: USB disconnect, device number 127 [ 2038.889217][T29310] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2038.944967][T29310] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2038.989799][T29310] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2039.055982][T11201] udevd[11201]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2039.113122][T29503] usb 4-1: USB disconnect, device number 83 [ 2040.493284][T31293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6921'. [ 2040.504220][T31293] IPv6: NLM_F_CREATE should be specified when creating new route [ 2041.057682][T25475] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2041.290774][T25475] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2041.302496][T25475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.642258][T25475] usb 6-1: config 0 descriptor?? [ 2042.328052][T25475] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2042.765626][T31310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6924'. [ 2043.917218][T31325] sctp: [Deprecated]: syz.0.6928 (pid 31325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2043.917218][T31325] Use struct sctp_sack_info instead [ 2043.996907][T31327] ptrace attach of "./syz-executor exec"[28516] was attempted by "./syz-executor exec"[31327] [ 2044.394175][T25475] gspca_stv06xx: Photobit pb0100 sensor detected [ 2045.263457][T31296] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6922'. [ 2045.409841][T25475] input: STV06xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input180 [ 2045.481223][T25475] usb 6-1: USB disconnect, device number 6 [ 2045.885017][T16737] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2046.197544][T16737] usb 5-1: Using ep0 maxpacket: 16 [ 2046.227530][T16737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2046.297387][T16737] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2046.367389][T16737] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 2046.375614][T16737] usb 5-1: Manufacturer: syz [ 2046.459896][T16737] usb 5-1: config 0 descriptor?? [ 2047.376749][T31355] kvm: pic: non byte write [ 2047.768301][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2047.969939][T31363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6935'. [ 2047.987049][T31363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6935'. [ 2047.996024][T31363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6935'. [ 2048.307553][T25475] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2048.437696][T25475] usb 4-1: device descriptor read/64, error -71 [ 2048.473595][T31375] ip6t_rpfilter: unknown options [ 2048.504196][T31376] netlink: 182 bytes leftover after parsing attributes in process `syz.2.6938'. [ 2048.611749][T16737] usbhid 5-1:0.0: can't add hid device: -71 [ 2048.627230][T16737] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2048.696024][T16737] usb 5-1: USB disconnect, device number 2 [ 2048.697468][T25475] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2048.759720][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6940'. [ 2048.797665][T31378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6940'. [ 2048.867241][T25475] usb 4-1: device descriptor read/64, error -71 [ 2048.977717][T25475] usb usb4-port1: attempt power cycle [ 2049.347050][T25475] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2049.399232][T25475] usb 4-1: device descriptor read/8, error -71 [ 2049.647185][T25475] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2049.679537][T25475] usb 4-1: device descriptor read/8, error -71 [ 2049.715024][ T29] audit: type=1800 audit(1774516032.700:4932): pid=31393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6945" name=0A dev="tmpfs" ino=1019 res=0 errno=0 [ 2049.737869][T16737] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2049.788294][T25475] usb usb4-port1: unable to enumerate USB device [ 2049.887310][T16737] usb 6-1: device descriptor read/64, error -71 [ 2050.157228][T16737] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2050.328225][T16737] usb 6-1: device descriptor read/64, error -71 [ 2050.448035][T16737] usb usb6-port1: attempt power cycle [ 2050.625329][T31397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6946'. [ 2050.827083][T16737] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2050.882584][T16737] usb 6-1: device descriptor read/8, error -71 [ 2050.903705][T31403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6948'. [ 2050.922881][T31403] netlink: 'syz.4.6948': attribute type 7 has an invalid length. [ 2050.938539][T31403] netlink: 'syz.4.6948': attribute type 8 has an invalid length. [ 2050.946821][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6948'. [ 2051.157220][T16737] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2051.255954][T16737] usb 6-1: device descriptor read/8, error -71 [ 2051.370258][T16737] usb usb6-port1: unable to enumerate USB device [ 2052.217115][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2052.225351][T25475] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2052.377279][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 2052.389165][T25475] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.405093][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2052.447657][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2052.472887][T25475] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 2052.507252][T25475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.537618][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2052.579376][T25475] usb 4-1: Product: syz [ 2052.615222][T25475] usb 4-1: Manufacturer: syz [ 2052.621252][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2052.653548][T25475] usb 4-1: SerialNumber: syz [ 2052.703132][T25475] usb 4-1: config 0 descriptor?? [ 2052.709062][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2052.771720][T31422] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6955'. [ 2052.790298][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2052.807570][T25475] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2052.838949][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2052.932037][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2053.017079][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2053.126424][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2053.194174][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2053.241630][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2053.274051][T25475] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2053.304628][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2053.327858][T25475] usb 4-1: USB disconnect, device number 88 [ 2053.368208][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2053.425050][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2053.452584][T11313] udevd[11313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2053.470030][ T24] usb 5-1: string descriptor 0 read error: -22 [ 2053.476745][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2053.497802][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.577179][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2053.669115][T16737] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2053.827094][T16737] usb 6-1: Using ep0 maxpacket: 32 [ 2053.854641][T31430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6954'. [ 2053.878005][T16737] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2053.927460][T16737] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2053.936741][T31430] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2053.978962][T16737] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2054.013131][T31432] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2054.047032][T16737] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2054.055314][T16737] usb 6-1: Product: syz [ 2054.118364][T16737] usb 6-1: Manufacturer: syz [ 2054.141717][T16737] usb 6-1: SerialNumber: syz [ 2054.193164][T16737] usb 6-1: config 0 descriptor?? [ 2054.228560][ T29] audit: type=1326 audit(1774516037.210:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31418 comm="syz.4.6954" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bd979c799 code=0x0 [ 2054.977426][T16737] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 2055.160451][T16737] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2055.215987][T16737] usb 4-1: not running at top speed; connect to a high speed hub [ 2055.259716][T16737] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 2055.325934][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6961'. [ 2055.328859][T16737] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 2055.360821][T31443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6961'. [ 2055.396150][T16737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.448856][T31443] netlink: 'syz.0.6961': attribute type 7 has an invalid length. [ 2055.475543][T16737] usb 4-1: Product: è¾ë¡‚⺵䕭嶕둥玷넖ጷ↦⤔ꀛ䠖랜쾴谑㺛ﯨ켨꼚ï±å†‚ᇲⳞ擢ïŽå¹«ï¡·îŸæ›ë˜¾ì­”講㼎膙킽װ⓴ï¬è¸£í”»ï¦¥î¤¤ï‘”塴줬└䑪娙鎻Ꞽ娩쫅䥪】ï°êŸžå„œå¼™ê­¯ï‹›ãž¶è®ä±¯ë»§æžŽè’ áƒ¦î±–戈䢺裛좯êºéž´æœë®â¯íœéš²â‚¡ê¾„ߵꅡ镛镂궞臈꥗탗 [ 2055.582409][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6961'. [ 2055.591450][T29308] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2055.617373][T29308] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2055.626208][T16737] usb 4-1: Manufacturer: ⓮â»è‘”î—黻磬㯓ﳜȤ [ 2055.654377][T29503] usb 5-1: USB disconnect, device number 3 [ 2055.660712][T16737] usb 4-1: SerialNumber: å¿šã¸â˜­à¥‰ì‹ªì†ê¬ì¡˜ç‚•ìž¼â¹¿â½‡îŽ¥ä®«ì‚⾻蟉䀑ᶦ暔ṹ刹ṧ矆㉽除Ⴜ彣ï£ë’…ã¼»è㇔⧥鲋íŒê¨€ç‹îŠ©ç¯­î¸§æ•ƒé¡â¬² [ 2055.677379][T29308] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2055.705664][T31443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6961'. [ 2055.719454][T29308] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2055.756159][T31443] netlink: 'syz.0.6961': attribute type 7 has an invalid length. [ 2055.991419][T16737] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 2056.026572][T16737] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 2056.065349][T16737] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 2056.101138][T16737] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 2056.120628][T31453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6964'. [ 2056.157191][T16737] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 2056.240759][T29503] usb 6-1: USB disconnect, device number 11 [ 2056.446209][T16737] usb 4-1: USB disconnect, device number 89 [ 2056.601552][T11197] udevd[11197]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2056.925780][T31467] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 2056.943973][T29503] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2056.967445][T31467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2057.142159][T29503] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2057.151516][T29503] usb 6-1: can't read configurations, error -61 [ 2057.387782][T29503] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2057.607583][T29503] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2057.618968][T29503] usb 6-1: can't read configurations, error -61 [ 2057.667219][T29503] usb usb6-port1: attempt power cycle [ 2058.044870][T31491] veth0: entered promiscuous mode [ 2058.067176][T29503] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2058.143150][T29503] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2058.160372][T29503] usb 6-1: can't read configurations, error -61 [ 2058.468158][T29503] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2058.491087][T29503] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2058.502351][T29503] usb 6-1: can't read configurations, error -61 [ 2058.521282][T29503] usb usb6-port1: unable to enumerate USB device [ 2058.597092][T25475] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2058.765065][T25475] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2058.783227][T25475] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2058.826902][T25475] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2058.836296][T25475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.894527][T31498] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 2058.920176][T25475] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2058.940478][T31490] veth0: left promiscuous mode [ 2061.586840][T31524] syzkaller0: entered promiscuous mode [ 2061.613742][T31524] syzkaller0: entered allmulticast mode [ 2061.676057][T31524] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6984'. [ 2062.153501][ T1220] usb 4-1: USB disconnect, device number 90 [ 2062.380486][T31538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2062.623532][T31545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6991'. [ 2062.645864][T31545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6991'. [ 2062.720119][T25475] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2062.920968][T25475] usb 6-1: Using ep0 maxpacket: 8 [ 2062.933621][T25475] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2062.943351][T25475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.954974][T25475] usb 6-1: Product: syz [ 2062.966247][T25475] usb 6-1: Manufacturer: syz [ 2062.982409][T25475] usb 6-1: SerialNumber: syz [ 2062.998249][T25475] usb 6-1: config 0 descriptor?? [ 2063.107167][T16737] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2063.221614][T25475] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2063.300853][T16737] usb 4-1: Using ep0 maxpacket: 32 [ 2063.347215][T16737] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 2063.355499][T16737] usb 4-1: config 0 has no interface number 0 [ 2063.397089][T16737] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2063.447623][T16737] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2063.507158][T16737] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2063.557247][T16737] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2063.597053][T16737] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2063.650022][T16737] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2063.689421][T16737] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2063.727221][T16737] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 2063.765411][T16737] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2063.800580][T16737] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2063.850274][T16737] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2063.880481][T16737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.907080][T16737] usb 4-1: Product: syz [ 2063.917334][T16737] usb 4-1: Manufacturer: syz [ 2063.938038][T16737] usb 4-1: SerialNumber: syz [ 2063.968632][T16737] usb 4-1: config 0 descriptor?? [ 2063.989905][T31551] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2063.999195][T31551] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2064.021232][T16737] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2064.061106][T16737] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2064.119061][T16737] scsi host1: microtekX6 [ 2064.267165][T16346] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2064.283811][ T24] usb 4-1: USB disconnect, device number 91 [ 2064.457765][T16346] usb 5-1: Using ep0 maxpacket: 16 [ 2064.476856][T16346] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 2064.506039][T16346] usb 5-1: config 0 has no interface number 0 [ 2064.526382][T16346] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 2064.574951][T16346] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 2064.637185][T16346] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2064.662193][T31567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2064.677045][T16346] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 2064.729654][T16346] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 2064.767267][T16346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.796283][T16346] usb 5-1: Product: syz [ 2064.828577][T16346] usb 5-1: Manufacturer: syz [ 2064.840177][T16346] usb 5-1: SerialNumber: syz [ 2064.899324][T16346] usb 5-1: config 0 descriptor?? [ 2064.905220][T31560] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2065.154836][T31560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2065.164593][T31560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2065.229799][T16346] qcserial 5-1:0.49: Qualcomm USB modem converter detected [ 2065.310176][T16346] usb 5-1: USB disconnect, device number 4 [ 2065.373297][T16346] qcserial 5-1:0.49: device disconnected [ 2066.063920][T31578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7001'. [ 2066.172546][T25475] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2066.637629][T25475] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2066.928657][T25475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.967015][T25475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.017043][T25475] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2067.069006][T25475] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2067.118541][T25475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.127262][T29503] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2067.202519][T25475] usb 4-1: config 0 descriptor?? [ 2067.301267][T29503] usb 5-1: Using ep0 maxpacket: 32 [ 2067.313728][T29503] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2067.335331][T16733] usb 6-1: USB disconnect, device number 16 [ 2067.377130][T29503] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2067.398128][T29503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.487528][T29503] usb 5-1: Product: syz [ 2067.491817][T29503] usb 5-1: Manufacturer: syz [ 2067.561163][T29503] usb 5-1: SerialNumber: syz [ 2067.596769][T29503] usb 5-1: config 0 descriptor?? [ 2067.609960][T29503] usb 5-1: bad CDC descriptors [ 2067.616484][T29503] usb 5-1: unsupported MDLM descriptors [ 2067.723884][T25475] plantronics 0003:047F:FFFF.0067: reserved main item tag 0xd [ 2067.798236][T25475] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2067.898714][T29503] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2068.129131][T29503] usb 6-1: Using ep0 maxpacket: 16 [ 2068.157804][T29503] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 32, changing to 7 [ 2068.188466][T31598] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7006'. [ 2068.244381][T29503] usb 6-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 2068.352875][T29503] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.388663][T29503] usb 6-1: Product: syz [ 2068.427976][T29503] usb 6-1: Manufacturer: syz [ 2068.455232][T29503] usb 6-1: SerialNumber: syz [ 2068.976304][T29503] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2069.024932][T29503] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2069.167469][ T1220] usb 4-1: reset high-speed USB device number 92 using dummy_hcd [ 2069.419357][T29503] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2069.557779][T16346] usb 5-1: USB disconnect, device number 5 [ 2069.603205][T29503] usb 6-1: USB disconnect, device number 17 [ 2069.761554][T11313] udevd[11313]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2069.865999][T31604] netlink: 'syz.0.7007': attribute type 1 has an invalid length. [ 2070.348347][T31604] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2070.857452][ T1220] usb 4-1: device descriptor read/64, error -71 [ 2070.875615][T31615] netlink: 'syz.4.7010': attribute type 1 has an invalid length. [ 2071.083751][T31605] bond5: (slave veth3): Enslaving as an active interface with a down link [ 2071.140784][ T1220] usb 4-1: reset high-speed USB device number 92 using dummy_hcd [ 2071.154280][ T1220] usb 4-1: device reset changed ep0 maxpacket size! [ 2071.197976][T31604] bond5: (slave dummy0): making interface the new active one [ 2071.220963][T25475] usb 4-1: USB disconnect, device number 92 [ 2071.293026][T31604] dummy0: entered promiscuous mode [ 2071.355770][T31604] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 2071.458650][T31615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2071.489060][T25475] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2071.554200][T31616] bond2: (slave veth3): Enslaving as an active interface with a down link [ 2071.573360][T31619] bond2: (slave dummy0): making interface the new active one [ 2071.585069][T31619] dummy0: entered promiscuous mode [ 2071.605482][T31619] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 2071.754811][T25475] usb 4-1: Using ep0 maxpacket: 32 [ 2071.937858][T25475] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2071.989258][T25475] usb 4-1: config 0 has no interface number 0 [ 2072.075928][T25475] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2072.101017][T25475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.115430][T25475] usb 4-1: Product: syz [ 2072.139446][T25475] usb 4-1: Manufacturer: syz [ 2072.185920][T25475] usb 4-1: SerialNumber: syz [ 2072.291155][T25475] usb 4-1: config 0 descriptor?? [ 2072.330867][T25475] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2072.388280][T25475] usb 4-1: selecting invalid altsetting 1 [ 2072.418625][T25475] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2072.461285][T25475] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2072.492363][T25475] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2072.513857][T25475] usb 4-1: media controller created [ 2072.598644][T25475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2072.994268][T25475] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2073.097941][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2073.203963][T25475] usb 4-1: USB disconnect, device number 93 [ 2073.257383][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 2073.341991][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 2073.418762][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.452535][ T24] usb 6-1: Product: syz [ 2073.470426][ T24] usb 6-1: Manufacturer: syz [ 2073.499826][ T24] usb 6-1: SerialNumber: syz [ 2074.565647][T31652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7019'. [ 2075.557069][T16346] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2075.727089][T16346] usb 4-1: Using ep0 maxpacket: 16 [ 2075.779950][T16346] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 2075.820427][T16346] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 2075.833337][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2075.863485][T16346] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.915240][T16346] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 2075.941781][ T24] usb 6-1: USB disconnect, device number 18 [ 2075.966324][T16346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2076.014245][T16346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.036678][T11313] udevd[11313]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2076.057102][T16346] usb 4-1: Product: syz [ 2076.061332][T16346] usb 4-1: Manufacturer: syz [ 2076.098518][T31665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7022'. [ 2076.117094][T16346] usb 4-1: SerialNumber: syz [ 2076.430777][T31671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2077.819702][T16346] usb 4-1: 0:2 : does not exist [ 2077.838631][T16346] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2077.868207][T31681] i2c i2c-0: dtv_property_process_set: SET cmd 0x6ba0600e undefined [ 2078.193176][T16346] usb 4-1: USB disconnect, device number 94 [ 2078.196846][T31687] fuse: Bad value for 'group_id' [ 2078.260513][T31687] fuse: Bad value for 'group_id' [ 2078.447215][ T29] audit: type=1326 audit(1774516061.410:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08539c799 code=0x7ffc0000 [ 2078.510940][ T29] audit: type=1326 audit(1774516061.410:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08539c799 code=0x7ffc0000 [ 2078.563529][ T29] audit: type=1326 audit(1774516061.410:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe08539c799 code=0x7ffc0000 [ 2078.903373][ T29] audit: type=1326 audit(1774516061.410:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08539c799 code=0x7ffc0000 [ 2079.056370][ T29] audit: type=1326 audit(1774516061.410:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe08539c799 code=0x7ffc0000 [ 2079.323549][T31705] netlink: 'syz.4.7034': attribute type 10 has an invalid length. [ 2079.351995][ T29] audit: type=1326 audit(1774516061.410:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08539c799 code=0x7ffc0000 [ 2079.407172][ T29] audit: type=1326 audit(1774516061.410:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe08539e007 code=0x7ffc0000 [ 2079.437362][ T29] audit: type=1326 audit(1774516061.410:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe08535cfce code=0x7ffc0000 [ 2079.501653][T31705] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2079.789749][ T29] audit: type=1326 audit(1774516061.410:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe08535cfce code=0x7ffc0000 [ 2080.195783][ T29] audit: type=1326 audit(1774516061.420:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31683 comm="syz.2.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe08535cfce code=0x7ffc0000 [ 2080.247125][T29474] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 2080.387336][T29474] usb 5-1: device descriptor read/64, error -71 [ 2080.658647][T29474] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 2080.682665][T31723] netlink: 'syz.2.7037': attribute type 1 has an invalid length. [ 2080.827154][T29474] usb 5-1: device descriptor read/64, error -71 [ 2080.957629][T29474] usb usb5-port1: attempt power cycle [ 2081.007974][T16346] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2081.147062][T16346] usb 4-1: device descriptor read/64, error -71 [ 2081.317199][T29474] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 2081.359267][T29474] usb 5-1: device descriptor read/8, error -71 [ 2081.401624][T16346] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2081.491410][T31735] fuse: Bad value for 'group_id' [ 2081.507118][T31735] fuse: Bad value for 'group_id' [ 2081.607149][T29474] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 2081.615376][T16346] usb 4-1: device descriptor read/64, error -71 [ 2081.638797][T29474] usb 5-1: device descriptor read/8, error -71 [ 2081.728102][T16346] usb usb4-port1: attempt power cycle [ 2081.789292][T29474] usb usb5-port1: unable to enumerate USB device [ 2082.069294][T16346] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2082.097953][T16346] usb 4-1: device descriptor read/8, error -71 [ 2082.112771][T31744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2082.371466][T16346] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2082.410263][T31750] loop3: detected capacity change from 0 to 7 [ 2082.418652][T16346] usb 4-1: device descriptor read/8, error -71 [ 2082.459565][T31750] Dev loop3: unable to read RDB block 7 [ 2082.521824][T31750] loop3: unable to read partition table [ 2082.534484][T31750] loop3: partition table beyond EOD, truncated [ 2082.545551][T31750] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2082.557774][T16346] usb usb4-port1: unable to enumerate USB device [ 2082.819381][T31753] usb usb7: usbfs: process 31753 (syz.4.7048) did not claim interface 0 before use [ 2083.287477][T25475] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2083.378300][T29323] dummy0: left promiscuous mode [ 2083.478199][T25475] usb 5-1: Using ep0 maxpacket: 16 [ 2083.489245][T25475] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2083.503365][T25475] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.575447][T25475] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 2083.612068][T29322] dummy0: left promiscuous mode [ 2083.629250][T25475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.691279][T25475] usb 5-1: config 0 descriptor?? [ 2083.935518][T31756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2083.976220][T31756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2084.280975][T25475] apple 0003:05AC:024B.0068: unknown main item tag 0x7 [ 2084.317463][T25475] apple 0003:05AC:024B.0068: unbalanced collection at end of report description [ 2084.351158][T25475] apple 0003:05AC:024B.0068: parse failed [ 2084.372846][T25475] apple 0003:05AC:024B.0068: probe with driver apple failed with error -22 [ 2084.412237][T31768] fuse: Bad value for 'group_id' [ 2084.447317][T31768] fuse: Bad value for 'group_id' [ 2084.497174][T25475] usb 5-1: USB disconnect, device number 10 [ 2084.559518][T31772] netlink: 'syz.0.7054': attribute type 2 has an invalid length. [ 2085.567076][T16346] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2085.777346][T16346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.837040][T16346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.857740][T31801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2086.039045][T16346] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2086.094771][T16346] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2086.154659][T16346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.187068][T29474] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2086.242523][T16346] usb 4-1: config 0 descriptor?? [ 2086.367426][T29474] usb 6-1: Using ep0 maxpacket: 8 [ 2086.440135][T29474] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.451464][T29474] usb 6-1: config 0 has no interfaces? [ 2086.470364][T29474] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2086.480433][T29474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.490364][T29474] usb 6-1: Product: syz [ 2086.494591][T29474] usb 6-1: Manufacturer: syz [ 2086.505480][T29474] usb 6-1: SerialNumber: syz [ 2086.521709][T29474] usb 6-1: config 0 descriptor?? [ 2086.725418][T16346] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2087.609885][T31809] binder: 31784:31809 ioctl c0306201 0 returned -14 [ 2088.197587][T25475] usb 4-1: reset high-speed USB device number 99 using dummy_hcd [ 2088.232570][T31821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7070'. [ 2088.691083][T31827] binder: 31822:31827 ioctl 40044591 0 returned -22 [ 2088.790469][T31825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2088.904061][T31830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7072'. [ 2088.913434][T31830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7072'. [ 2089.260521][T16346] usb 6-1: USB disconnect, device number 19 [ 2090.368451][ T24] usb 4-1: USB disconnect, device number 99 [ 2092.125818][T31879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7084'. [ 2092.157286][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 2092.157304][ T29] audit: type=1326 audit(1774516075.100:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df279c799 code=0x7ffc0000 [ 2092.363045][ T29] audit: type=1326 audit(1774516075.100:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9df279c799 code=0x7ffc0000 [ 2092.473471][ T29] audit: type=1326 audit(1774516075.100:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df279c799 code=0x7ffc0000 [ 2092.583753][ T29] audit: type=1326 audit(1774516075.100:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9df279c799 code=0x7ffc0000 [ 2092.694321][ T29] audit: type=1326 audit(1774516075.100:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9df279c799 code=0x7ffc0000 [ 2092.867197][ T29] audit: type=1326 audit(1774516075.100:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9df279e007 code=0x7ffc0000 [ 2092.983230][ T29] audit: type=1326 audit(1774516075.100:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9df275cfce code=0x7ffc0000 [ 2093.080336][ T29] audit: type=1326 audit(1774516075.100:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9df275cfce code=0x7ffc0000 [ 2093.170814][ T29] audit: type=1326 audit(1774516075.100:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9df275cfce code=0x7ffc0000 [ 2093.259337][ T29] audit: type=1326 audit(1774516075.100:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31873 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9df275cfce code=0x7ffc0000 [ 2093.828950][T31889] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 2093.835523][T31889] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2093.887279][T31889] vhci_hcd vhci_hcd.0: Device attached [ 2093.984517][T31890] vhci_hcd: connection closed [ 2093.985001][T29323] vhci_hcd vhci_hcd.2: stop threads [ 2094.047198][T29323] vhci_hcd vhci_hcd.2: release socket [ 2094.095071][T29323] vhci_hcd vhci_hcd.2: disconnect device [ 2094.316682][T31896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7088'. [ 2094.362591][T31896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7088'. [ 2095.507053][ T24] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 2095.717812][T31922] dummy0: entered allmulticast mode [ 2095.836613][T29313] bond5: (slave dummy0): link status definitely down, disabling slave [ 2095.938695][T29313] bond5: now running without any active interface! [ 2098.398855][T29503] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2098.547359][T29503] usb 6-1: device descriptor read/64, error -71 [ 2098.797044][T29503] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2098.937050][T29503] usb 6-1: device descriptor read/64, error -71 [ 2098.970812][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.977276][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.051329][T29503] usb usb6-port1: attempt power cycle [ 2099.399020][T29503] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2099.458874][T29503] usb 6-1: device descriptor read/8, error -71 [ 2099.720005][T29503] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2099.768144][T29503] usb 6-1: device descriptor read/8, error -71 [ 2099.775297][T31975] syzkaller1: entered promiscuous mode [ 2099.785915][T31975] syzkaller1: entered allmulticast mode [ 2099.889786][T29503] usb usb6-port1: unable to enumerate USB device [ 2100.067033][T29503] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2100.291660][T29503] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2100.308284][T29503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2100.347150][T25475] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 2101.357488][T29503] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2101.575972][T29503] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2101.670303][T29503] usb 4-1: Manufacturer: syz [ 2101.740478][T29503] usb 4-1: config 0 descriptor?? [ 2101.917983][T29503] rc_core: IR keymap rc-hauppauge not found [ 2101.933338][T29503] Registered IR keymap rc-empty [ 2101.979615][T29503] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2102.038594][T29503] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input182 [ 2103.066852][T32003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7122'. [ 2103.192905][ T24] usb 4-1: USB disconnect, device number 101 [ 2104.156051][T32020] xt_hashlimit: size too large, truncated to 1048576 [ 2104.394938][T32024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7128'. [ 2104.457131][T32024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7128'. [ 2104.688050][T32032] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7131'. [ 2104.806317][T32024] vlan3: entered allmulticast mode [ 2104.847174][T32024] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2105.197475][T29503] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2105.365733][T32058] fuse: Unknown parameter 'grou00000000000000000000' [ 2105.434869][T29503] usb 4-1: Using ep0 maxpacket: 16 [ 2105.519504][T29503] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2105.542937][T29503] usb 4-1: config 6 has an invalid interface number: 125 but max is 0 [ 2105.585638][T29503] usb 4-1: config 6 has no interface number 0 [ 2105.736250][T16346] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2106.158930][T29503] usb 4-1: config 6 interface 125 has no altsetting 0 [ 2106.253880][T29503] usb 4-1: string descriptor 0 read error: -22 [ 2106.579520][T29503] usb 4-1: New USB device found, idVendor=1385, idProduct=4251, bcdDevice= a.3d [ 2106.654870][T29503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.957741][T29503] usb 4-1: Could not find all expected endpoints [ 2107.119350][T29503] usb 4-1: USB disconnect, device number 102 [ 2108.158583][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7142'. [ 2108.225734][T32079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7143'. [ 2108.308221][T16733] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2108.482395][T16737] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 2108.518996][T16733] usb 6-1: config 0 has no interfaces? [ 2108.534668][T16733] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2108.573867][T16733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.654118][T16733] usb 6-1: config 0 descriptor?? [ 2108.683619][T16737] usb 4-1: config 0 has too many interfaces: 175, using maximum allowed: 32 [ 2108.715132][T16737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2108.749939][T16737] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 175 [ 2108.801959][T16737] usb 4-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=e0.9e [ 2108.827176][T16737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.856215][T16737] usb 4-1: Product: syz [ 2108.873668][T16737] usb 4-1: Manufacturer: syz [ 2108.888310][T16737] usb 4-1: SerialNumber: syz [ 2108.918224][ T24] usb 6-1: USB disconnect, device number 24 [ 2108.928867][T16737] usb 4-1: config 0 descriptor?? [ 2109.229597][T25475] usb 4-1: USB disconnect, device number 103 [ 2109.397326][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2109.557723][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7147'. [ 2109.577059][T32094] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7147'. [ 2109.605013][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2109.614978][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.635928][ T24] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2109.674203][T32094] vlan2: entered allmulticast mode [ 2109.693620][ T24] usb 6-1: string descriptor 0 read error: -22 [ 2109.702811][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 2109.712602][T32094] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2109.735353][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.897882][T32098] fuse: Unknown parameter 'grou00000000000000000000' [ 2110.048567][T25475] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2110.264971][T25475] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2110.287238][T25475] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 2110.353178][T25475] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.392377][T25475] usb 5-1: config 0 descriptor?? [ 2110.517062][T29503] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2110.667252][T29503] usb 4-1: Using ep0 maxpacket: 8 [ 2110.677380][T29503] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2110.692825][T29503] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2110.709162][T29503] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2110.738838][T29503] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2110.808303][T29503] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2110.837114][T29503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.969095][T25475] konepure 0003:1E7D:2DBE.006A: unexpected long global item [ 2111.003217][T25475] konepure 0003:1E7D:2DBE.006A: parse failed [ 2111.046519][T25475] konepure 0003:1E7D:2DBE.006A: probe with driver konepure failed with error -22 [ 2111.066312][T29503] usb 4-1: GET_CAPABILITIES returned 0 [ 2111.097441][ T24] usb 6-1: USB disconnect, device number 25 [ 2111.105044][T29503] usbtmc 4-1:16.0: can't read capabilities [ 2111.464772][T32112] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2112.093219][T29503] usb 4-1: USB disconnect, device number 104 [ 2112.579685][T16733] usb 5-1: USB disconnect, device number 13 [ 2112.877077][T25475] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 2114.601987][T32137] syzkaller1: entered promiscuous mode [ 2114.613935][T32137] syzkaller1: entered allmulticast mode [ 2114.667283][T16733] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2114.903379][T16733] usb 4-1: Using ep0 maxpacket: 16 [ 2115.085746][T32142] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7158'. [ 2115.197118][T16733] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2115.237830][T16733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.278838][T16733] usb 4-1: Product: syz [ 2115.283163][T16733] usb 4-1: Manufacturer: syz [ 2115.355317][T32140] team0 (unregistering): Port device team_slave_0 removed [ 2115.376161][T16733] usb 4-1: SerialNumber: syz [ 2115.447623][T16733] usb 4-1: can't set config #157, error -71 [ 2115.512557][T32140] team0 (unregistering): Port device team_slave_1 removed [ 2115.518025][T16733] usb 4-1: USB disconnect, device number 105 [ 2115.641778][T32146] fuse: Unknown parameter 'grou00000000000000000000' [ 2115.657543][T32149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7160'. [ 2115.731725][T32149] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7160'. [ 2115.848327][T32149] vlan2: entered allmulticast mode [ 2115.872572][T32149] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2116.468088][T32164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7165'. [ 2116.604520][T32164] netlink: 'syz.3.7165': attribute type 1 has an invalid length. [ 2116.660643][T29503] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2116.671889][T32164] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7165'. [ 2116.841247][T29503] usb 5-1: Using ep0 maxpacket: 32 [ 2117.039113][T29503] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2117.061088][T29503] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2117.119881][T29503] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 2117.146973][T29503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.180935][T29503] usb 5-1: Product: syz [ 2117.191627][T29503] usb 5-1: Manufacturer: syz [ 2117.230803][T29503] usb 5-1: SerialNumber: syz [ 2117.340595][T32167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2117.384221][T32167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2117.507503][T32168] openvswitch: netlink: Unknown key attributes 1 [ 2117.575460][T29503] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 2117.608236][T29503] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2117.628420][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 2117.628441][ T29] audit: type=1800 audit(1774516100.610:4987): pid=32170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7167" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2118.047387][T29503] usb 5-1: USB disconnect, device number 14 [ 2118.084095][T32175] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 2118.953502][T32185] xt_hashlimit: size too large, truncated to 1048576 [ 2119.267335][T29503] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2119.431940][T32195] fuse: Unknown parameter 'group_i00000000000000000000' [ 2119.487889][T29503] usb 4-1: Using ep0 maxpacket: 32 [ 2119.527951][T29503] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 2119.557720][T29503] usb 4-1: config 0 has no interface number 0 [ 2119.587072][T29503] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2119.608021][T29503] usb 4-1: config 0 interface 85 has no altsetting 0 [ 2119.652367][T29503] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2119.680011][T29503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.752377][T29503] usb 4-1: Product: syz [ 2119.756621][T29503] usb 4-1: Manufacturer: syz [ 2119.812061][T29503] usb 4-1: SerialNumber: syz [ 2119.915368][T29503] usb 4-1: config 0 descriptor?? [ 2120.215283][T32204] dvmrp0: entered allmulticast mode [ 2120.397269][ T1220] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2120.443196][T32213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7179'. [ 2120.452624][T32213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7179'. [ 2120.608068][ T1220] usb 5-1: Using ep0 maxpacket: 32 [ 2120.658322][ T1220] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 2120.670666][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.724642][ T1220] usb 5-1: Product: syz [ 2120.731689][T29503] appletouch 4-1:0.85: Geyser mode initialized. [ 2120.742814][ T1220] usb 5-1: Manufacturer: syz [ 2120.771739][T29503] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input183 [ 2120.783352][ T1220] usb 5-1: SerialNumber: syz [ 2120.799923][ T1220] usb 5-1: config 0 descriptor?? [ 2120.833272][ T1220] ttusb_dec_send_command: command bulk message failed: error -22 [ 2120.853897][ T1220] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 2120.996427][ T1220] usb 4-1: USB disconnect, device number 106 [ 2121.002771][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 2121.030467][T32206] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 2121.038204][T32219] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 2121.061962][T32206] netlink: 'syz.4.7177': attribute type 11 has an invalid length. [ 2121.084073][T29503] usb 5-1: USB disconnect, device number 15 [ 2121.176551][ T1220] appletouch 4-1:0.85: input: appletouch disconnected [ 2121.232842][T32203] dvmrp0: left allmulticast mode [ 2121.868237][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7181'. [ 2122.246853][T32234] usb usb7: usbfs: process 32234 (syz.3.7184) did not claim interface 0 before use [ 2122.579827][T32236] fuse: Unknown parameter 'group_i00000000000000000000' [ 2123.241737][T32245] netlink: 'syz.3.7189': attribute type 10 has an invalid length. [ 2123.282531][T32245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7189'. [ 2123.424896][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7190'. [ 2123.449132][T16733] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2123.461084][T32249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7190'. [ 2123.637373][T16733] usb 5-1: Using ep0 maxpacket: 16 [ 2123.658178][T16733] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 2123.666379][T16733] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.737099][T16733] usb 5-1: config 8 has no interface number 0 [ 2123.743286][T16733] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2123.792492][T32257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7192'. [ 2123.807136][T16733] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2123.866767][T16733] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 2123.897095][T16733] usb 5-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2123.960734][T16733] usb 5-1: config 8 interface 39 has no altsetting 0 [ 2124.005292][T16733] usb 5-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 2124.031168][T16733] usb 5-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 2124.071239][T32257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7192'. [ 2124.080339][T32257] openvswitch: netlink: Unknown nsh attribute 0 [ 2124.108769][T16733] usb 5-1: Product: syz [ 2124.113019][T16733] usb 5-1: Manufacturer: syz [ 2124.152464][T16733] usb 5-1: SerialNumber: syz [ 2124.496484][T32242] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7188'. [ 2125.062688][T32273] fuse: Unknown parameter 'group_i00000000000000000000' [ 2125.231245][T16733] ipheth 5-1:8.39: Unable to find endpoints [ 2125.258587][T16733] usb 5-1: USB disconnect, device number 16 [ 2125.538835][T32281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2125.587951][T32281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2125.612625][T32283] xt_hashlimit: size too large, truncated to 1048576 [ 2125.692700][T32286] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 2125.757974][T32290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7203'. [ 2125.816351][T32290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7203'. [ 2125.941887][T32293] syzkaller1: entered promiscuous mode [ 2125.978253][T32293] syzkaller1: entered allmulticast mode [ 2126.119441][T32298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7204'. [ 2128.117055][T16733] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 2128.198979][T32320] fuse: Unknown parameter 'group_id00000000000000000000' [ 2128.267040][T16733] usb 6-1: device descriptor read/64, error -71 [ 2128.464619][T32325] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 2128.507155][T16733] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 2128.559833][T32326] overlay: Unknown parameter 'ÅWõƒzÓ!ö?V1—|GŸ*‚ [ 2139.347581][T32414] dump_stack_lvl+0xe8/0x150 [ 2139.347622][T32414] should_fail_ex+0x412/0x560 [ 2139.347661][T32414] _copy_from_user+0x2d/0xb0 [ 2139.347688][T32414] i2cdev_ioctl+0x303/0x880 [ 2139.347805][T32414] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2139.347830][T32414] ? __fget_files+0x3a0/0x420 [ 2139.347864][T32414] ? __fget_files+0x2a/0x420 [ 2139.347900][T32414] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2139.347930][T32414] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2139.347952][T32414] __se_sys_ioctl+0xfc/0x170 [ 2139.347982][T32414] do_syscall_64+0x14d/0xf80 [ 2139.348009][T32414] ? trace_irq_disable+0x3b/0x150 [ 2139.348042][T32414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.348065][T32414] ? clear_bhb_loop+0x40/0x90 [ 2139.348092][T32414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.348115][T32414] RIP: 0033:0x7f9bd979c799 [ 2139.348136][T32414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2139.348156][T32414] RSP: 002b:00007f9bda678028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2139.348180][T32414] RAX: ffffffffffffffda RBX: 00007f9bd9a15fa0 RCX: 00007f9bd979c799 [ 2139.348197][T32414] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000006 [ 2139.348211][T32414] RBP: 00007f9bda678090 R08: 0000000000000000 R09: 0000000000000000 [ 2139.348224][T32414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.348238][T32414] R13: 00007f9bd9a16038 R14: 00007f9bd9a15fa0 R15: 00007f9bd9b3fa48 [ 2139.348271][T32414] [ 2139.568475][ T1220] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2139.576360][ T1220] em28xx 5-1:0.0: dvb set to bulk mode. [ 2139.981333][ T24] em28xx 5-1:0.0: Binding DVB extension [ 2140.011767][ T1220] usb 5-1: USB disconnect, device number 19 [ 2140.099983][ T1220] em28xx 5-1:0.0: Disconnecting em28xx [ 2140.293824][ T24] em28xx 5-1:0.0: Registering input extension [ 2140.302665][ T1220] em28xx 5-1:0.0: Closing input extension [ 2140.419628][T32450] fuse: Bad value for 'user_id' [ 2140.425664][T32450] fuse: Bad value for 'user_id' [ 2140.438918][ T1220] em28xx 5-1:0.0: Freeing device [ 2140.448575][T16346] usb 6-1: USB disconnect, device number 32 [ 2142.255509][T24113] Bluetooth: hci1: command 0x0406 tx timeout [ 2144.024479][T32489] tipc: Enabling of bearer rejected, failed to enable media [ 2144.480817][T32498] fuse: Bad value for 'user_id' [ 2144.490043][T32498] fuse: Bad value for 'user_id' [ 2144.607286][T29474] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2144.757145][T29474] usb 6-1: Using ep0 maxpacket: 16 [ 2144.771456][T29474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2144.803305][T29474] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2144.830748][T29474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.856406][T29474] usb 6-1: Product: syz [ 2144.869354][T29474] usb 6-1: Manufacturer: syz [ 2144.886618][T29474] usb 6-1: SerialNumber: syz [ 2144.949415][T29474] usb 6-1: config 0 descriptor?? [ 2144.982669][T29474] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2145.021786][T29474] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2145.098129][ T24] IPVS: starting estimator thread 0... [ 2145.156473][T32512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7265'. [ 2145.187768][T32510] IPVS: using max 29 ests per chain, 69600 per kthread [ 2145.596436][T29474] em28xx 6-1:0.0: unknown em28xx chip ID (55) [ 2146.251505][T29474] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2146.274053][T29474] em28xx 6-1:0.0: board has no eeprom [ 2146.568462][T29474] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2146.608082][T29474] em28xx 6-1:0.0: dvb set to bulk mode. [ 2146.613749][T16737] em28xx 6-1:0.0: Binding DVB extension [ 2146.670545][T29474] usb 6-1: USB disconnect, device number 33 [ 2146.701897][T29474] em28xx 6-1:0.0: Disconnecting em28xx [ 2146.814344][T16737] em28xx 6-1:0.0: Registering input extension [ 2146.843910][T29474] em28xx 6-1:0.0: Closing input extension [ 2146.880621][T29474] em28xx 6-1:0.0: Freeing device [ 2147.019232][T32521] fuse: Bad value for 'rootmode' [ 2147.645273][T32531] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7273'. [ 2147.965264][T32536] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 2148.047065][ T1220] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2148.197107][ T1220] usb 5-1: device descriptor read/64, error -71 [ 2148.447830][ T1220] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2148.608266][ T1220] usb 5-1: device descriptor read/64, error -71 [ 2148.787403][ T1220] usb usb5-port1: attempt power cycle [ 2149.137834][ T1220] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2149.168375][ T1220] usb 5-1: device descriptor read/8, error -71 [ 2149.280091][T32552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7280'. [ 2149.457567][ T1220] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2149.491946][ T1220] usb 5-1: device descriptor read/8, error -71 [ 2149.635765][ T1220] usb usb5-port1: unable to enumerate USB device [ 2149.754896][T32556] netlink: 'syz.2.7283': attribute type 1 has an invalid length. [ 2149.818814][T32556] gretap1: entered allmulticast mode [ 2150.178613][T29474] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 2150.360062][T29474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2150.391401][T29474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 2150.435175][T29474] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2150.477696][T29474] usb 4-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 2150.517300][T29474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.568548][T29474] usb 4-1: config 0 descriptor?? [ 2150.574200][T32560] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 2151.024595][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.055700][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.087310][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.096668][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.129694][T32570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7288'. [ 2151.137484][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.177228][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.185611][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.231213][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.257095][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.265525][T29474] logitech-hidpp-device 0003:046D:C081.006D: unknown main item tag 0x0 [ 2151.320955][T29474] logitech-hidpp-device 0003:046D:C081.006D: hidraw0: USB HID v0.08 Device [HID 046d:c081] on usb-dummy_hcd.3-1/input0 [ 2151.370329][T29474] usb 4-1: USB disconnect, device number 109 [ 2151.427601][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2151.613396][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 2151.626574][ T24] usb 6-1: config 4 has an invalid interface number: 228 but max is 0 [ 2151.635923][ T24] usb 6-1: config 4 has no interface number 0 [ 2151.645286][ T24] usb 6-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 2151.657743][ T24] usb 6-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2151.668840][ T24] usb 6-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0 [ 2151.679377][ T24] usb 6-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 2151.699079][ T24] usb 6-1: config 4 interface 228 has no altsetting 0 [ 2151.710357][ T24] usb 6-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 2151.720102][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.733892][ T24] usb 6-1: Product: syz [ 2151.750001][ T24] usb 6-1: Manufacturer: syz [ 2151.755884][ T24] usb 6-1: SerialNumber: syz [ 2152.004129][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2152.113197][ T24] snd-usb-audio 6-1:4.228: probe with driver snd-usb-audio failed with error -12 [ 2152.148630][T29503] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2152.179599][ T24] usb 6-1: USB disconnect, device number 34 [ 2152.321166][T29503] usb 4-1: Using ep0 maxpacket: 32 [ 2152.331004][T29503] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2152.341142][T29503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.355239][T29503] usb 4-1: config 0 descriptor?? [ 2152.365674][T29503] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2153.119201][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2153.282872][ T29] audit: type=1326 audit(1774516136.270:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23299c799 code=0x7ffc0000 [ 2153.288803][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 2153.368068][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2153.386137][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2153.417470][ T29] audit: type=1326 audit(1774516136.270:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23299c799 code=0x7ffc0000 [ 2153.445601][ T24] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2153.487128][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2153.517308][ T29] audit: type=1326 audit(1774516136.270:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc23299c799 code=0x7ffc0000 [ 2153.570999][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2153.598336][ T29] audit: type=1326 audit(1774516136.270:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23299c799 code=0x7ffc0000 [ 2153.621364][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.687069][ T24] usb 6-1: Product: syz [ 2153.691207][ T29] audit: type=1326 audit(1774516136.270:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23299c799 code=0x7ffc0000 [ 2153.697530][ T24] usb 6-1: Manufacturer: syz [ 2153.825791][ T24] usb 6-1: SerialNumber: syz [ 2153.851322][ T29] audit: type=1326 audit(1774516136.310:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc23299c799 code=0x7ffc0000 [ 2153.896582][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2153.917117][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input187 [ 2153.979746][ T29] audit: type=1326 audit(1774516136.320:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc23299c799 code=0x7ffc0000 [ 2154.075873][ T29] audit: type=1326 audit(1774516136.320:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc23299c42b code=0x7ffc0000 [ 2154.078126][T29503] gspca_sunplus: reg_w_riv err -110 [ 2154.117090][ T29] audit: type=1326 audit(1774516136.320:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc23299c42b code=0x7ffc0000 [ 2154.141340][T29503] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 2154.154626][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2154.179481][ T24] (id 0x00) [ 2154.192852][ T29] audit: type=1326 audit(1774516136.320:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32576 comm="syz.3.7291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc23295cfce code=0x7ffc0000 [ 2154.375759][T32598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7297'. [ 2154.497099][ T24] rc_core: IR keymap rc-imon-pad not found [ 2154.504314][ T24] Registered IR keymap rc-empty [ 2154.510988][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2154.573269][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2154.639654][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 2154.713741][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input188 [ 2154.733242][ T24] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:35> initialized [ 2154.747508][ T24] usb 6-1: USB disconnect, device number 35 [ 2156.777112][ T24] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 2156.798773][T32640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.847290][T32640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.936446][T32640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7311'. [ 2156.989543][ T24] usb 6-1: config 0 has no interfaces? [ 2156.996236][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2157.031460][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.072512][ T24] usb 6-1: config 0 descriptor?? [ 2157.809632][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2157.933560][T32659] æÿîÿ: entered promiscuous mode [ 2157.967262][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 2157.975560][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2157.985540][ T24] usb 5-1: config 179 has no interface number 0 [ 2158.004779][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2158.050671][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2158.097271][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2158.137441][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2158.163680][ T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2158.180477][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2158.193035][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.206202][T32650] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2158.221560][ T1220] usb 6-1: USB disconnect, device number 36 [ 2158.674487][T32667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.760916][T32667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.953691][ T1220] usb 5-1: USB disconnect, device number 24 [ 2158.953754][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2158.968010][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2159.238920][T32677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7320'. [ 2159.648832][T32682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7323'. [ 2159.968445][T32689] FAULT_INJECTION: forcing a failure. [ 2159.968445][T32689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2160.032662][T32689] CPU: 0 UID: 0 PID: 32689 Comm: syz.0.7325 Tainted: G L syzkaller #0 PREEMPT(full) [ 2160.032691][T32689] Tainted: [L]=SOFTLOCKUP [ 2160.032697][T32689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2160.032707][T32689] Call Trace: [ 2160.032714][T32689] [ 2160.032721][T32689] dump_stack_lvl+0xe8/0x150 [ 2160.032749][T32689] should_fail_ex+0x412/0x560 [ 2160.032776][T32689] _copy_from_iter+0x1d3/0x1670 [ 2160.032827][T32689] ? rcu_is_watching+0x15/0xb0 [ 2160.032856][T32689] ? __pfx__copy_from_iter+0x10/0x10 [ 2160.032886][T32689] ? netlink_sendmsg+0x650/0xb40 [ 2160.032903][T32689] ? skb_put+0x11b/0x210 [ 2160.032924][T32689] netlink_sendmsg+0x6c0/0xb40 [ 2160.032950][T32689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2160.032968][T32689] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2160.032994][T32689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2160.033015][T32689] ____sys_sendmsg+0x972/0x9f0 [ 2160.033039][T32689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2160.033064][T32689] ? import_iovec+0x73/0xa0 [ 2160.033083][T32689] ___sys_sendmsg+0x2a5/0x360 [ 2160.033105][T32689] ? __pfx____sys_sendmsg+0x10/0x10 [ 2160.033147][T32689] ? __fget_files+0x2a/0x420 [ 2160.033170][T32689] ? __fget_files+0x3a0/0x420 [ 2160.033200][T32689] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2160.033220][T32689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2160.033245][T32689] ? __pfx_ksys_write+0x10/0x10 [ 2160.033308][T32689] do_syscall_64+0x14d/0xf80 [ 2160.033333][T32689] ? trace_irq_disable+0x3b/0x150 [ 2160.033364][T32689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.033387][T32689] ? clear_bhb_loop+0x40/0x90 [ 2160.033414][T32689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.033440][T32689] RIP: 0033:0x7fc732d9c799 [ 2160.033455][T32689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2160.033468][T32689] RSP: 002b:00007fc730ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2160.033486][T32689] RAX: ffffffffffffffda RBX: 00007fc733015fa0 RCX: 00007fc732d9c799 [ 2160.033497][T32689] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 2160.033507][T32689] RBP: 00007fc730ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.033516][T32689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.033526][T32689] R13: 00007fc733016038 R14: 00007fc733015fa0 R15: 00007fc73313fa48 [ 2160.033549][T32689] [ 2160.424072][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.430640][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.507150][T16737] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2162.618760][T32720] xt_hashlimit: size too large, truncated to 1048576 [ 2162.717200][T16737] usb 6-1: Using ep0 maxpacket: 8 [ 2162.747376][T16737] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2162.787074][T16737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.856366][T16737] usb 6-1: Product: syz [ 2162.887091][T16737] usb 6-1: Manufacturer: syz [ 2162.891754][T16737] usb 6-1: SerialNumber: syz [ 2162.942857][T32723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7335'. [ 2163.003040][T32723] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7335'. [ 2163.052460][T16737] usb 6-1: config 0 descriptor?? [ 2163.097576][T32723] vlan2: entered allmulticast mode [ 2163.144103][T16737] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2163.607758][ T30] INFO: task kworker/1:5:29460 blocked for more than 143 seconds. [ 2163.621891][ T30] Tainted: G L syzkaller #0 [ 2163.643874][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2163.690197][ T30] task:kworker/1:5 state:D stack:22120 pid:29460 tgid:29460 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2163.734395][ T30] Workqueue: usb_hub_wq hub_event [ 2163.750022][ T30] Call Trace: [ 2163.761268][ T30] [ 2163.770541][ T30] __schedule+0x15dd/0x52d0 [ 2163.785417][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 2163.801833][ T30] ? bus_for_each_drv+0x258/0x2f0 [ 2163.818526][T16737] gspca_sonixj: reg_r err -110 [ 2163.822064][ T30] ? usb_probe_device+0x1c4/0x3b0 [ 2163.823508][T16737] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 2163.853546][ T30] ? driver_probe_device+0x4f/0x240 [ 2163.874867][ T30] ? device_add+0x7b6/0xb70 [ 2163.891514][ T30] ? usb_new_device+0xa08/0x16f0 [ 2163.909966][ T30] ? hub_event+0x2a1c/0x4f30 [ 2163.928288][ T30] ? process_scheduled_works+0xb6e/0x18c0 [ 2163.942000][ T30] ? worker_thread+0xa53/0xfc0 [ 2163.952840][ T30] ? __pfx___schedule+0x10/0x10 [ 2163.963539][ T30] ? schedule+0x90/0x360 [ 2163.972820][ T30] schedule+0x164/0x360 [ 2163.982781][ T30] schedule_timeout+0xc3/0x2c0 [ 2163.992306][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2164.003164][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2164.015851][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2164.027191][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2164.038160][ T30] ? wait_for_completion+0x274/0x5e0 [ 2164.050588][ T30] wait_for_completion+0x2cc/0x5e0 [ 2164.061560][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 2164.073220][ T30] i2c_del_adapter+0x5c0/0x790 [ 2164.083795][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2164.094186][ T30] ? kfree+0x4d/0x630 [ 2164.098995][ T30] dvb_usb_i2c_exit+0x64/0xb0 [ 2164.104115][ T30] dvb_usb_device_exit+0x1cb/0x360 [ 2164.109516][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 2164.115589][ T30] cxusb_probe+0x60f/0x710 [ 2164.120287][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2164.126456][ T30] ? __pfx_cxusb_probe+0x10/0x10 [ 2164.131688][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2164.138051][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 2164.143868][ T30] usb_probe_interface+0x668/0xc90 [ 2164.149717][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 2164.155716][ T30] really_probe+0x267/0xaf0 [ 2164.160910][ T30] __driver_probe_device+0x18c/0x320 [ 2164.166371][ T30] driver_probe_device+0x4f/0x240 [ 2164.177566][ T30] __device_attach_driver+0x279/0x430 [ 2164.185070][ T30] bus_for_each_drv+0x258/0x2f0 [ 2164.190284][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 2164.196332][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2164.203350][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 2164.208953][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2164.215018][ T30] __device_attach+0x2c5/0x450 [ 2164.220068][ T30] ? __pfx___device_attach+0x10/0x10 [ 2164.225788][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2164.230936][ T30] device_initial_probe+0xa1/0xd0 [ 2164.236294][ T30] bus_probe_device+0x12a/0x220 [ 2164.241461][ T30] ? device_add+0x726/0xb70 [ 2164.246124][ T30] device_add+0x7b6/0xb70 [ 2164.251361][ T30] usb_set_configuration+0x1a87/0x2110 [ 2164.257576][ T30] usb_generic_driver_probe+0x8d/0x150 [ 2164.263394][ T30] usb_probe_device+0x1c4/0x3b0 [ 2164.268779][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 2164.274554][ T30] really_probe+0x267/0xaf0 [ 2164.279308][ T30] __driver_probe_device+0x18c/0x320 [ 2164.284868][ T30] driver_probe_device+0x4f/0x240 [ 2164.290456][ T30] __device_attach_driver+0x279/0x430 [ 2164.296088][ T30] bus_for_each_drv+0x258/0x2f0 [ 2164.301454][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 2164.308898][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2164.314436][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 2164.320065][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2164.326029][ T30] __device_attach+0x2c5/0x450 [ 2164.331316][ T30] ? __pfx___device_attach+0x10/0x10 [ 2164.336763][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2164.341962][ T30] device_initial_probe+0xa1/0xd0 [ 2164.347407][ T30] bus_probe_device+0x12a/0x220 [ 2164.352515][ T30] ? device_add+0x726/0xb70 [ 2164.357402][ T30] device_add+0x7b6/0xb70 [ 2164.362047][ T30] usb_new_device+0xa08/0x16f0 [ 2164.367151][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 2164.372641][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2164.378305][ T30] hub_event+0x2a1c/0x4f30 [ 2164.382882][ T30] ? __update_load_avg_cfs_rq+0x6f6/0xc10 [ 2164.389123][ T30] ? __pfx_hub_event+0x10/0x10 [ 2164.394054][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 2164.400191][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 2164.406556][ T30] process_scheduled_works+0xb6e/0x18c0 [ 2164.414205][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2164.421812][ T30] ? assign_work+0x3d5/0x5e0 [ 2164.426674][ T30] worker_thread+0xa53/0xfc0 [ 2164.432515][ T30] kthread+0x388/0x470 [ 2164.436869][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2164.443422][ T30] ? __pfx_kthread+0x10/0x10 [ 2164.448349][ T30] ret_from_fork+0x51e/0xb90 [ 2164.453179][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2164.458760][ T30] ? __switch_to+0xc7d/0x1450 [ 2164.463613][ T30] ? __pfx_kthread+0x10/0x10 [ 2164.468744][ T30] ret_from_fork_asm+0x1a/0x30 [ 2164.473835][ T30] [ 2164.493779][ T30] INFO: task syz.1.6787:30794 blocked for more than 144 seconds. [ 2164.524166][ T30] Tainted: G L syzkaller #0 [ 2164.540140][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2164.561426][ T30] task:syz.1.6787 state:D stack:27976 pid:30794 tgid:30793 ppid:27906 task_flags:0x400040 flags:0x00080002 [ 2164.584574][ T30] Call Trace: [ 2164.589768][ T30] [ 2164.592854][ T30] __schedule+0x15dd/0x52d0 [ 2164.598839][ T30] ? __pfx___schedule+0x10/0x10 [ 2164.603898][ T30] ? schedule+0x90/0x360 [ 2164.609117][ T30] schedule+0x164/0x360 [ 2164.613455][ T30] schedule_preempt_disabled+0x13/0x30 [ 2164.619536][ T30] __mutex_lock+0x7fe/0x1300 [ 2164.624311][ T30] ? __mutex_lock+0x5ac/0x1300 [ 2164.631675][ T30] ? usbdev_open+0x182/0x770 [ 2164.636469][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2164.643104][ T30] ? bus_find_device+0x27d/0x2d0 [ 2164.649772][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 2164.655380][ T30] ? usbdev_open+0xa7/0x770 [ 2164.662234][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 2164.668335][ T30] usbdev_open+0x182/0x770 [ 2164.672941][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 2164.678577][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 2164.683804][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 2164.692951][ T30] chrdev_open+0x4cd/0x5e0 [ 2164.699214][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2164.704391][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2164.711987][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2164.717460][ T30] do_dentry_open+0x785/0x14e0 [ 2164.722494][ T30] vfs_open+0x3b/0x340 [ 2164.726723][ T30] ? path_openat+0x2df0/0x3860 [ 2164.733282][ T30] path_openat+0x2e08/0x3860 [ 2164.740477][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 2164.746090][ T30] ? stack_depot_save_flags+0x33/0x810 [ 2164.753308][ T30] ? __pfx_path_openat+0x10/0x10 [ 2164.759684][ T30] ? __x64_sys_openat+0x138/0x170 [ 2164.764889][ T30] ? do_syscall_64+0x14d/0xf80 [ 2164.772372][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.778965][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 2164.784136][ T30] do_file_open+0x23e/0x4a0 [ 2164.789228][ T30] ? __pfx_do_file_open+0x10/0x10 [ 2164.794482][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2164.800640][ T30] ? alloc_fd+0x64b/0x6c0 [ 2164.805212][ T30] do_sys_openat2+0x113/0x200 [ 2164.812151][ T30] ? __se_sys_futex+0x3a8/0x450 [ 2164.818242][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2164.823626][ T30] ? rcu_is_watching+0x15/0xb0 [ 2164.829018][ T30] __x64_sys_openat+0x138/0x170 [ 2164.834054][ T30] do_syscall_64+0x14d/0xf80 [ 2164.839737][ T30] ? trace_irq_disable+0x3b/0x150 [ 2164.844928][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.854672][ T30] ? clear_bhb_loop+0x40/0x90 [ 2164.860858][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.868254][ T30] RIP: 0033:0x7fed7555cfce [ 2164.872868][ T30] RSP: 002b:00007fed737f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2164.883760][ T30] RAX: ffffffffffffffda RBX: 00007fed737f66c0 RCX: 00007fed7555cfce [ 2164.893388][ T30] RDX: 0000000000024080 RSI: 00007fed737f5c00 RDI: ffffffffffffff9c [ 2164.901850][ T30] RBP: 00007fed737f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 2164.910535][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2164.921856][ T30] R13: 00007fed75816038 R14: 00007fed75815fa0 R15: 00007fed7593fa48 [ 2164.930809][ T30] [ 2164.934035][ T30] [ 2164.934035][ T30] Showing all locks held in the system: [ 2165.047370][ T30] 7 locks held by kworker/0:1/10: [ 2165.052555][ T30] 1 lock held by khungtaskd/30: [ 2165.057924][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2165.068733][ T30] 2 locks held by getty/5584: [ 2165.073464][ T30] #0: ffff888031c650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2165.084829][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2165.095378][ T30] 4 locks held by udevd/11284: [ 2165.100473][ T30] #0: ffff88808e687b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 2165.110308][ T30] #1: ffff888034550088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 2165.121113][ T30] #2: ffff888031405c38 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 2165.131533][ T30] #3: ffff888021b871e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 2165.145708][ T30] 5 locks held by kworker/1:5/29460: [ 2165.154119][ T30] #0: ffff88823be68148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 2165.194917][ T30] #1: ffffc90004727c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 2165.218604][ T1212] usb 6-1: USB disconnect, device number 37 [ 2165.238435][ T30] #2: ffff888029dd21e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2165.255457][ T30] #3: ffff888021b871e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2165.268546][ T30] #4: ffff888029d1c1a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2165.281483][ T30] 1 lock held by syz.1.6787/30794: [ 2165.290331][ T30] #0: ffff888029e531e0 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 2165.299745][ T30] [ 2165.302107][ T30] ============================================= [ 2165.302107][ T30] [ 2165.311522][ T30] NMI backtrace for cpu 1 [ 2165.311543][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2165.311571][ T30] Tainted: [L]=SOFTLOCKUP [ 2165.311580][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2165.311593][ T30] Call Trace: [ 2165.311602][ T30] [ 2165.311611][ T30] dump_stack_lvl+0xe8/0x150 [ 2165.311648][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 2165.311694][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2165.311725][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2165.311760][ T30] sys_info+0x135/0x170 [ 2165.311787][ T30] watchdog+0xfd9/0x1030 [ 2165.311826][ T30] ? watchdog+0x21a/0x1030 [ 2165.311866][ T30] kthread+0x388/0x470 [ 2165.311888][ T30] ? __pfx_watchdog+0x10/0x10 [ 2165.311919][ T30] ? __pfx_kthread+0x10/0x10 [ 2165.311941][ T30] ret_from_fork+0x51e/0xb90 [ 2165.311973][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2165.312001][ T30] ? __switch_to+0xc7d/0x1450 [ 2165.312030][ T30] ? __pfx_kthread+0x10/0x10 [ 2165.312052][ T30] ret_from_fork_asm+0x1a/0x30 [ 2165.312109][ T30] [ 2165.312117][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2165.429739][ C0] NMI backtrace for cpu 0 [ 2165.429760][ C0] CPU: 0 UID: 0 PID: 5196 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 2165.429786][ C0] Tainted: [L]=SOFTLOCKUP [ 2165.429792][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2165.429804][ C0] RIP: 0010:__phys_addr+0xd6/0x180 [ 2165.429829][ C0] Code: 00 e8 2e 51 4d 00 49 89 df 44 89 f1 49 d3 ef 31 ff 4c 89 fe e8 fb 55 4d 00 4d 85 ff 0f 85 9f 00 00 00 e8 0d 51 4d 00 48 89 d8 <5b> 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c0 10 50 57 8e 48 c1 e8 03 [ 2165.429846][ C0] RSP: 0018:ffffc900032b7d80 EFLAGS: 00000293 [ 2165.429863][ C0] RAX: 0000000053d2f900 RBX: 0000000053d2f900 RCX: ffff88807d4a5b80 [ 2165.429877][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2165.429888][ C0] RBP: ffffc900032b7eb8 R08: ffff88807d4a5b80 R09: 0000000000000002 [ 2165.429901][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888053d2f900 [ 2165.429913][ C0] R13: 0000000000000200 R14: 000000000000002e R15: 0000000000000000 [ 2165.429925][ C0] FS: 00007f6529681880(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 2165.429942][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2165.429954][ C0] CR2: 0000556a1cecd000 CR3: 000000007f394000 CR4: 00000000003526f0 [ 2165.429971][ C0] Call Trace: [ 2165.429978][ C0] [ 2165.429987][ C0] kmem_cache_free+0x34/0x630 [ 2165.430017][ C0] do_readlinkat+0x451/0x510 [ 2165.430046][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 2165.430075][ C0] ? __pfx_ksys_read+0x10/0x10 [ 2165.430099][ C0] __x64_sys_readlink+0x7f/0x90 [ 2165.430125][ C0] do_syscall_64+0x14d/0xf80 [ 2165.430146][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.430164][ C0] ? clear_bhb_loop+0x40/0x90 [ 2165.430185][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.430203][ C0] RIP: 0033:0x7f6528f153a7 [ 2165.430218][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 2165.430233][ C0] RSP: 002b:00007ffe951d42e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000059 [ 2165.430250][ C0] RAX: ffffffffffffffda RBX: 00007ffe951d44f0 RCX: 00007f6528f153a7 [ 2165.430264][ C0] RDX: 0000000000000200 RSI: 00007ffe951d42f0 RDI: 00007ffe951d44f0 [ 2165.430276][ C0] RBP: 0000556a1cd25910 R08: 0000000000000064 R09: 0000000000000000 [ 2165.430288][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe951d42f0 [ 2165.430300][ C0] R13: 00005569e68c2100 R14: 00000000000000b4 R15: 00007ffe951d4b10 [ 2165.430322][ C0] [ 2165.693357][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2165.700289][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2165.711008][ T30] Tainted: [L]=SOFTLOCKUP [ 2165.715359][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2165.725450][ T30] Call Trace: [ 2165.728764][ T30] [ 2165.731737][ T30] vpanic+0x56c/0xa60 [ 2165.735765][ T30] ? __pfx___schedule+0x10/0x10 [ 2165.740657][ T30] ? __pfx_vpanic+0x10/0x10 [ 2165.745206][ T30] ? __pfx_console_unlock+0x10/0x10 [ 2165.750456][ T30] panic+0xc5/0xd0 [ 2165.754310][ T30] ? __pfx_panic+0x10/0x10 [ 2165.758771][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 2165.764189][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2165.770402][ T30] watchdog+0x1023/0x1030 [ 2165.774784][ T30] ? watchdog+0x21a/0x1030 [ 2165.779256][ T30] kthread+0x388/0x470 [ 2165.783362][ T30] ? __pfx_watchdog+0x10/0x10 [ 2165.788083][ T30] ? __pfx_kthread+0x10/0x10 [ 2165.792710][ T30] ret_from_fork+0x51e/0xb90 [ 2165.797351][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2165.802506][ T30] ? __switch_to+0xc7d/0x1450 [ 2165.807227][ T30] ? __pfx_kthread+0x10/0x10 [ 2165.811858][ T30] ret_from_fork_asm+0x1a/0x30 [ 2165.816684][ T30] [ 2165.820349][ T30] Kernel Offset: disabled [ 2165.824694][ T30] Rebooting in 86400 seconds..