last executing test programs: 23m16.226968313s ago: executing program 1 (id=1576): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff2]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r5, 0x8107}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xb, 0x1d, 0xd802, 0x5, 0xff, 0x4, 0x8, 0xd, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x5, 0x97], 0xc000, 0x8082}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) setresuid(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100), &(0x7f00000000c0)=0xe) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000280)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x25000, 0x1000, 0xb, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x6, 0x0, 0x3, 0xc4}, {0x2000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x5, 0x46, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x4, 0x8, 0x4, 0x8d, 0x21, 0x3}, {0x6000, 0xeeef0000, 0x3, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0xd000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0x4000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x3fd, 0x8, 0x5]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000120fcff0700040000000100000804004880100001800c0010800400088004002a800c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 23m13.062236453s ago: executing program 1 (id=1589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140c, 0xb71decfdf6a93ea7}, 0x10}}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xdc, 0x0, 0x3, 0x200000000002, 0x5, 0x8, 0x4}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xcd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x18, 0x40054}}], 0x1, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x39000, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 23m12.779131215s ago: executing program 1 (id=1592): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', "0000000000000000000000000000000000000000000000000000000200"}}}}}}, 0x0) 23m12.690436918s ago: executing program 1 (id=1593): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) (async) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) syz_fuse_handle_req(r4, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r6, &(0x7f0000001900)=""/76, 0x4c) (async) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 23m12.682204991s ago: executing program 1 (id=1594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412bd3", 0x10}, {&(0x7f0000000140)="128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9", 0x21}], 0x2}], 0x1, 0x24044801) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000100040000000000000007000000", @ANYRES32=r3, @ANYBLOB="8000f2040a0002000180c2000002000008000f"], 0x30}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) write(r2, &(0x7f0000000040)="1627d6ef86b512e25613f5326215f699b84b57a3c3c2cfbdb0a006e1ba631d81f8da68f3ba0822a369612bc7a00e5d44fa6a2e99b5fdc29eeb4a5b80bde4482d5e498bf49689e87f8129d1e38b2a41022c10f639bb272abca09e6b", 0x5b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 23m12.518423291s ago: executing program 1 (id=1595): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e0, 0x0, 0x420, 0x330, 0x0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0xfffa, @empty, @mcast2, @private2={0xfc, 0x2, '\x00', 0x8}, [0x0, 0x0, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xff], 'bridge0\x00', 'erspan0\x00', {0xff}, {}, 0x67}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0x2c731f28b040cc3c], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0, 0x67}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010100, 0x5, 0x3d, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 23m12.071256012s ago: executing program 32 (id=1595): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e0, 0x0, 0x420, 0x330, 0x0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0xfffa, @empty, @mcast2, @private2={0xfc, 0x2, '\x00', 0x8}, [0x0, 0x0, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xff], 'bridge0\x00', 'erspan0\x00', {0xff}, {}, 0x67}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0x2c731f28b040cc3c], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0, 0x67}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010100, 0x5, 0x3d, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) 22m30.595776709s ago: executing program 4 (id=1757): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) (async) syz_genetlink_get_family_id$batadv(0x0, r0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) poll(0x0, 0x0, 0x9) (async) setitimer(0x2, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c040000060a090400000000000000000200000204803c0001800e000100696d6d656469000000000000280002801c000280180002800900020073797a32fcd50000000008000180ffff73797a30000000000900020073797a320000c0ead0517013b100001400000011000100000000e5ffffff000000"], 0x94}}, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 22m28.853426863s ago: executing program 4 (id=1769): r0 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x24020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000003010101000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004814}, 0x20000040) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400007a1fa506b5ea9b3570c97626f6a99409aa387a0f99d4e7853769efd37db5aa6ae4d7d68d2f50ab38087af500d4b544b1415402789d6576de8f7d128da8682a1dd7c3a262a1b6aec76fd72ae159aa6839c8dcc8"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x4) 22m28.201791709s ago: executing program 4 (id=1773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "374051c4", "a44a889722b66244"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x91, 0xc, &(0x7f00000003c0)="b648489ede2a3a891565dacc795bd2036709d23170c475cd602af46621461810925f89ead9f8a6ec485d603be96fb3d76121328733d27a5becc6eac413bc526cb8604e7b0c4d3d0ec5bce8a4a8e9abb73c6b70338cb675776514883113dc1ece4f21d6178860b95f87c79cffa5fea4aeb1f80ab20b1b3313709022a4fbd3aea41ca47d717ba96bf85e88fd755eb12eecca"}) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}], 0x1c) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e24, 0xa, @private1, 0x8}, 0x1c) shutdown(r9, 0x1) 22m26.017491806s ago: executing program 4 (id=1779): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000001"], 0x18}}], 0x1, 0x4000000) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 22m25.813804013s ago: executing program 4 (id=1780): r0 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x481}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) (async) ppoll(&(0x7f0000000040)=[{r0, 0x481}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xd064db0e491fa98f}}}, 0x24}}, 0x4044080) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 22m25.386253591s ago: executing program 4 (id=1781): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket(0x1e, 0x5, 0xb) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048910) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030428bd58000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900200000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24448}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) socket(0x1e, 0x4, 0x6c0) 22m24.979426756s ago: executing program 33 (id=1781): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket(0x1e, 0x5, 0xb) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048910) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030428bd58000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900200000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24448}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) socket(0x1e, 0x4, 0x6c0) 2m37.855425393s ago: executing program 6 (id=6717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000026a09010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.610900078s ago: executing program 6 (id=6718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a03000000000000000000070000000900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797830000000000900010073797a3000000000080005400000000d4c0012803c0001800a0001006c696d69740000002c0002800c00024000000000000010000c0001400000000000000001080004400000000108000340000100000c000180080001006475700808000340000001"], 0xd8}}, 0x20050800) 2m36.967117041s ago: executing program 6 (id=6722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x6}}}]}, 0x38}}, 0x24000040) sendmsg$nl_route_sched(r1, 0x0, 0x40082) 2m36.738797295s ago: executing program 6 (id=6723): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r1]) readv(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000001c0)=""/19, 0x13}], 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a204a9971a46afced2c32642b1ec9fe34818d8ccd82041b700", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) 2m33.474504654s ago: executing program 6 (id=6737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xa01, 0x0) ioctl$KVM_CAP_VM_TYPES(r3, 0x4068aea3, &(0x7f00000001c0)) ppoll(&(0x7f0000002140)=[{r3, 0x2162}], 0x1, 0x0, 0x0, 0x0) pidfd_send_signal(r3, 0x1d, &(0x7f00000000c0)={0x3b, 0x7fff, 0x7991}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f00000002c0)=""/133) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 2m32.938277327s ago: executing program 6 (id=6741): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r1, 0x2008002) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000000c0)={0xa}) r2 = socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0xffffffff, 0x0, 0x0}) 2m17.622226356s ago: executing program 34 (id=6741): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r1, 0x2008002) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000000c0)={0xa}) r2 = socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0xffffffff, 0x0, 0x0}) 7.495382523s ago: executing program 7 (id=7242): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 7.093833808s ago: executing program 7 (id=7243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtfilter={0x12c0, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x6, 0xfff4}, {0x5, 0x8}, {0xfff1, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x3}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1224, 0x2, [@TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast1}, @TCA_FLOWER_ACT={0x11f0, 0x3, [@m_csum={0x114, 0x2, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80f3, 0x5, 0x5, 0x44, 0x7}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x0, 0x3, 0x95}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x1ff, 0x4, 0x80, 0x6}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x0, 0x4, 0x10}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x1, 0x4, 0x2}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000, 0x6, 0x2, 0x6}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x5, 0x7, 0x80000000, 0x2}, 0xa}}]}, {0x23, 0x6, "5db72d5e0228a560e492e86572f6b2a4b4483a3a606f9b0681ec6f70ae9d24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xf40, 0x7, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x80, 0x3, 0x3, 0xe, 0x1000}, 0x6, 0x5, [{0x2, 0x6, 0xfb800000, 0x4, 0x2, 0x3}, {0x9, 0x77, 0x1000, 0x7ff, 0x400, 0x80000001}]}, [{0x7a, 0x7, 0x0, 0x10, 0x5, 0x10001}, {0x8, 0x0, 0x8000, 0x7, 0x4, 0x6}, {0x0, 0x7, 0x6, 0x8001, 0x2a5b, 0x7ea}, {0x3, 0x59ae0, 0x9, 0x2, 0x400, 0xb688}, {0x9, 0x53, 0x1, 0x8, 0x1, 0x80000000}, {0x8, 0x4ba, 0x80000000, 0x7fffffff, 0x8, 0xe}, {0x8, 0x7, 0x1ff, 0x2768, 0x7, 0x1}, {0x505e, 0xd, 0x5, 0x4, 0x5383, 0x6}, {0x3, 0x3, 0xb, 0xfff80000, 0x5, 0x12080}, {0x7, 0xc9, 0x0, 0x0, 0x4, 0x3}, {0x6, 0x7ff, 0x5, 0xd319, 0xd, 0x9}, {0x7, 0x7, 0xff, 0xa, 0x1, 0x3}, {0x1ff, 0x8472, 0xa57e, 0xf7, 0x5, 0xd52}, {0x7, 0xffffffff, 0xd, 0x3, 0x8, 0x5}, {0x3, 0x7, 0x5, 0x35}, {0xcb, 0x8, 0x9bba, 0x9, 0x4, 0xfff}, {0x0, 0x1, 0x8, 0x8950, 0xfffffff9, 0xa}, {0xf7000000, 0x8, 0x7, 0xfffffff7, 0x8, 0x3}, {0x10001, 0x7, 0xfffffffb, 0x3, 0x101, 0x9}, {0x8000, 0x400, 0x7, 0x0, 0x0, 0x200}, {0xfffffff7, 0x3, 0x9, 0x3, 0x2, 0xfffffffc}, {0x3, 0x401, 0x8, 0x81, 0x1, 0x7}, {0x4, 0xe6e, 0x1, 0x1ff, 0xd5, 0x1}, {0x3, 0x9, 0x1, 0x6, 0x6, 0x2}, {0x3, 0x5, 0x7fffffff, 0x6, 0xfc, 0x9}, {0x9, 0x0, 0x80000000, 0xecf9, 0x7ff}, {0xfffffffa, 0x9, 0x40, 0xf8bd, 0x4}, {0xc3d5, 0xd, 0xfff, 0x1, 0x147, 0x5}, {0xffffffff, 0x8, 0x8, 0xffffff35, 0xff, 0x3}, {0x2, 0x0, 0x0, 0x1, 0xcb, 0xcd3}, {0x1ff, 0x4, 0x12, 0x684a, 0x7}, {0x5, 0x2, 0x8, 0x0, 0x2, 0x4}, {0x0, 0xbbb, 0x7, 0x1, 0xfffffff9, 0x5}, {0x5, 0x1, 0x7d55, 0x0, 0x8, 0x5}, {0x4e655bfb, 0x2, 0xffff, 0x6, 0x5, 0x738}, {0x1, 0x7, 0xe, 0x0, 0x9, 0x1}, {0x0, 0x427, 0xffffff00, 0x8, 0x6, 0x5}, {0x8, 0x4, 0x7, 0x3, 0x2, 0x97}, {0x0, 0x0, 0xe, 0x40079a41, 0x401}, {0xcb5e, 0x57cc, 0x2, 0x9, 0x4, 0x9}, {0x0, 0x8, 0x10, 0x2, 0x7, 0x200}, {0x3, 0x7, 0x6, 0x5, 0xb7, 0x24}, {0x6, 0x480000, 0xc18b, 0x5, 0x6, 0xbc}, {0xc, 0x6, 0x742, 0x0, 0x99ce}, {0x8, 0x9, 0x6, 0x3, 0x7, 0xa}, {0x2, 0x4d8, 0x5, 0x10, 0x800, 0x6}, {0x5, 0xd, 0xa, 0x6, 0x3, 0x7ff}, {0x2, 0x6, 0x35e4, 0x101, 0x0, 0x2}, {0x8, 0x0, 0x7, 0x7, 0x5ac5, 0x3}, {0x7, 0xc1, 0x2, 0x400, 0x3, 0xf}, {0x9, 0x6, 0x8, 0x400, 0x4, 0x401}, {0x2, 0x2, 0x9, 0x2, 0x4, 0x4}, {0x4, 0xfffffff7, 0x3, 0xa, 0x1, 0x4}, {0x80000000, 0x8001, 0x4, 0x7, 0x7f, 0x51ca}, {0x9, 0x9, 0xe9c, 0x70, 0x3, 0x4}, {0xa, 0xffffffff, 0x4, 0x3, 0x80, 0x8}, {0x2, 0xffffffff, 0x2, 0x9, 0x3, 0x7f}, {0x5ddfe914, 0x7, 0x9, 0x1, 0xffff, 0x2}, {0x100, 0x3, 0x100, 0x989, 0x400, 0x3ff}, {0x6, 0x4, 0x4485, 0x101, 0xfed0, 0x2}, {0x6, 0x80000001, 0x9, 0x1, 0x401, 0x9}, {0x7, 0x6, 0x80000000, 0x40000, 0x0, 0x6}, {0x8, 0x3, 0x101, 0x80000000, 0x6, 0x6df4}, {0xff, 0x0, 0x6, 0x7, 0x6, 0x5}, {0x3, 0xffffda49, 0x4, 0x7ff, 0x49, 0xe}, {0x1, 0x10000, 0x5, 0xfffffe01, 0x4, 0x8}, {0xf615e29, 0x7fffffff, 0xff, 0xeb03, 0x1, 0xfffffffe}, {0x8000, 0xfffffff9, 0x3, 0x2, 0x48000, 0x1000}, {0x9, 0x8, 0x9, 0x400, 0x9, 0x8}, {0x9, 0xeff, 0x8001, 0xf, 0x7fffffff, 0x3}, {0x5, 0x6, 0x1ff, 0x1, 0x7, 0x8}, {0xfffffffc, 0x7f, 0x4bd52ae3, 0x1000, 0x4}, {0x10000, 0x7f, 0x10, 0x401, 0x80, 0x12}, {0x1, 0x0, 0x101, 0xfffffffa, 0x5}, {0x100, 0x10001, 0x0, 0x2, 0x2, 0x2}, {0x3ff, 0x8, 0x2, 0xf0, 0x7, 0x8}, {0x0, 0x787, 0x100, 0xb, 0x8, 0x2}, {0x1, 0x9, 0x4, 0x8, 0x6, 0x2}, {0x800, 0x5, 0x43f, 0x600d11e2, 0x7, 0x4}, {0xffff, 0x2, 0x1, 0x0, 0x9, 0x7}, {0x7, 0x7, 0x63, 0xffffffff, 0x401, 0x5cfa}, {0xfffff5cc, 0x0, 0x30, 0x101, 0x3, 0x2}, {0x5, 0x8001, 0x0, 0x0, 0x0, 0xff}, {0x2, 0x101, 0x4, 0x0, 0x6, 0xade}, {0x2, 0x8000, 0x6, 0x75, 0x9, 0x45}, {0x3, 0x4, 0xfffffffc, 0x8, 0x400, 0x70000000}, {0xe, 0x8, 0x9, 0x40, 0x9, 0x1}, {0x5, 0x8, 0x4, 0x46, 0x0, 0x81}, {0x10001, 0xab, 0x8000, 0x0, 0xd, 0x9}, {0x1, 0xf4, 0xb, 0x100, 0x1, 0xa}, {0xffff8000, 0x2, 0x2b4, 0x3, 0x6, 0x1ba2b7bc}, {0xc, 0x1, 0x2, 0x5bb, 0x5, 0x3}, {0x4214, 0x0, 0xcf80, 0x1ff, 0x4, 0x10}, {0xe2c, 0x8000, 0x101, 0x2, 0x7, 0x8}, {0x54, 0x7, 0xffff, 0x1, 0x4, 0x4}, {0x474e, 0xfffffff8, 0x5, 0x10000, 0x1492, 0x13f}, {0x10001, 0xffff7fff, 0x9, 0x8, 0x1, 0x4}, {0xfffffffe, 0x0, 0x3, 0xd4c3}, {0xff, 0x0, 0xd, 0x7ff, 0x7, 0xa}, {0x1, 0xfffffff1, 0x5, 0x5, 0x7ff, 0x2}, {0x0, 0x101, 0x401, 0x6, 0x4, 0x4}, {0x1, 0xfd2e, 0x2, 0x7e5, 0x0, 0x1ff}, {0x8, 0xda, 0x6, 0x1000000, 0xffff, 0x7}, {0xb, 0xffff0655, 0xaa6, 0x0, 0x45, 0x100}, {0x3, 0x4, 0x9, 0x6f22, 0x3ff, 0x8}, {0x1, 0xc, 0x2, 0xfffffff0, 0x1, 0x7}, {0x4, 0x9, 0xfffffffb, 0x4, 0x8, 0x3}, {0xd, 0xfffffa32, 0x2, 0xa, 0x3, 0x6}, {0xfffffff7, 0x4, 0x7, 0x4, 0x80000000, 0x8001}, {0x3080000, 0x8, 0x7, 0xed, 0x8, 0x7}, {0xb, 0x9, 0x5, 0x1, 0xb869}, {0x7, 0x8, 0xb, 0x2, 0x2cc6, 0xffff}, {0xe3d, 0xf0000000, 0x5, 0xfffffff9, 0x8, 0x6}, {0x6, 0x0, 0x10000, 0x2, 0x10001, 0x4}, {0x9, 0x8000, 0x2fffaf66, 0x7, 0x0, 0x8}, {0x2, 0x8, 0x5, 0xdc, 0x0, 0x7545}, {0x7fff, 0x80000000, 0x9, 0x6, 0x8, 0xc7}, {0x5, 0x7, 0x3, 0x7, 0x8, 0xffff}, {0x9, 0x148, 0x0, 0x0, 0x8a, 0x9}, {0x0, 0x3000, 0x78c, 0x3, 0x6, 0x3}, {0xb, 0x7, 0x3, 0xeb43, 0xfffffffd, 0xffffffff}, {0x3, 0xfffff73e, 0x2, 0x2, 0x7fff, 0xc}, {0x8, 0x9, 0x8, 0x7a8, 0x8, 0x8}, {0x4b, 0x7d, 0x9, 0xa, 0x2}, {0x400, 0x5085, 0xf923, 0xffff, 0x81, 0x81}, {0x8, 0x7f, 0x9, 0x40, 0x101, 0x8}, {0xfff, 0x2, 0x2, 0x9, 0xc51f, 0x5}, {0x3, 0x0, 0x4, 0xffff, 0xffff, 0x5}], [{0x5}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {}, {0x4}, {0x2}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x64550964350f6483}, {0x1}, {0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x3, 0x1}], 0x1}}]}, {0x63, 0x6, "9a7bd901ae9a9689926693e9ee8e27fb3aa96be36fa141d7498e2584a6699aa0bada516d57f1faacaa33d40d2e843b035962ad019f5b307ae6b79a1ebd7337c74cbdd241f126acc75f8642eda6351ffaf336917db3bf7d7b612b20c6dccad2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x38, 0xc, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x74, 0x1b, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x10000000, 0xfffffffd}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6e}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x1c, 0x6, "6c31c48c97bef6c9cacffb342e5a7cfe9c7bc543afc1aa23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xec, 0x12, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x3, 0x0, 0x0, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x6, 0x0, 0x6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x62c, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e59, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x0, 0x2, 0x65204942, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x12b6, 0x5}}]}, {0x52, 0x6, "aa7f4002e9933319988f701feadb48ef4b1890d06ff06fccbdbd50a67d419c7af31c93c54b5ce0bd778346fdd52cb336716ef582385354a51118a9eae052faf50a12d66a76fa287e2a267301e690"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x1c, '\x00', @buffer={"28db2bde8cdcfd2639b8c149c449782e2e7cf5398209b6f31d09656e81fd8d28", 0x20}, 0x1}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.587522057s ago: executing program 7 (id=7245): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r3 = socket$kcm(0xa, 0x3, 0x87) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@bridge_newvlan={0x30, 0x70, 0x600, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40048c0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001f8c4242010001ffff000000000020d0083651f1627ed35ed44839d7004f7f78de0b4e07b92c", @ANYRES32=0x0, @ANYBLOB="0000000008440000280012800b00010067656e657665000018000280140007000000000000000000000000000000000108000a00", @ANYRES32=r2, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.780073371s ago: executing program 7 (id=7249): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xc6, &(0x7f0000000b00)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0xf, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x3f, 0x3, [{0x1, 0x2}, {0x1, 0x2}, {0x6, 0x10, "be7aada44f5abdc7009ed7bc8f6c"}, {0x5, 0xa, "e2ccf2008abaee14"}, {0x0, 0xa, '\x00\x00\x00\x00\x00\x00I\x00'}, {0x4, 0x2}, {0x7, 0xf, "28129179ce0bad1bb91df7c254"}]}, @end]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x63, 0x0, 0x6, 0x2f, 0x0, @loopback, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x5b, 0x1, 0x0, [{@remote, 0x1000001}, {@private=0xa010101, 0xb00}, {@broadcast}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}]}]}}}}}}}, 0x0) syz_usb_disconnect(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xae0, 0x6, 0x3, 0x3, 0x6, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000850) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$uac3(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_connect(0x2, 0x1b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xc1, 0x91, 0x1, 0x8, 0x10b8, 0x1f98, 0x3da2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x2, 0x58, 0x90, 0x5}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.466200179s ago: executing program 3 (id=7250): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340), 0x10, 0x0}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1a3000) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_disconnect(r4) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x13, &(0x7f0000001180)="22c4e79fb3000000000000000000f7b3000000") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a30000000060a010400000000000000000a0000040900010073797a3100000000040004800900020073797a3200000000140000001100010000000000000000000300000a6b19cbcdc92f43793014"], 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.369775935s ago: executing program 5 (id=7251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) lstat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB='fd=', @ANYRES32=r0, @ANYBLOB="2c726f4f746d6f64653d3030304030303028303030303030303d63163c5669bdbaac5d4c47e95692fc000000000000000000000000000000005b5f8ab6ca566d8cc3ab17cd0f08135c9ec5f22b034f1889d1e99a3cc52e6839669a9b0a8b78023f54e3c8f9cff94601a0a1f758b4112aaf283fe8d777f50b0ba313a8a599ed11", @ANYRESDEC=0x0, @ANYBLOB=',grour_id=', @ANYRESDEC=r2, @ANYRESHEX=0x0]) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffe, 0x1420140, 0x0, 0x39f, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x6}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0x800, 0x8, 0x2e5}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000140)={0x7, 0x1b, 0xfffe}, 0x7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000001500000000000001fc010000000000000015000000000001000107144e230005000000001c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="4001feffffff00010000ac1e0101000000000000000000000000fc01000107174e2300050a00002057000000abed7efef3208b0626d0b38859a5a90000000000000000000000000000000000200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000103000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) splice(r5, 0x0, r4, 0x0, 0x20000000000002, 0xa) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000740)=""/4032, 0xfc0}, {&(0x7f00000048c0)=""/4125, 0x101d}, {&(0x7f0000001900)=""/131, 0x83}, {&(0x7f0000000680)=""/151, 0x97}, {&(0x7f0000000180)=""/79, 0x4f}], 0x6}, 0x40000102) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 4.884974109s ago: executing program 2 (id=7252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0x5, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) 4.10167773s ago: executing program 5 (id=7253): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x0, 0x5}, 'syz1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x75, "da8ccccea8e598a38c439ba5b142c47d184afdb26d8166a485e53d969f8c81091e157123e819766141517a1a207332694e6956839039fdffa2013bdd97f689e0704db5a41150ca600c51801ac1ad83eb6277a90ed85943d46ff49aaba6a5646a57cfe0422513c530e6edadf4fb88dbecedc4e93bbd"}, &(0x7f0000000180)=0x7d) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={r4, 0x6, 0x1, [0x7f]}, 0xa) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.099147481s ago: executing program 2 (id=7254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x8000) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x6}}}]}, 0x38}}, 0x24000040) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x4, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0xd, 0x10}, {}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40082) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r10, 0xc}, &(0x7f00000001c0)=0x8) 3.697785314s ago: executing program 0 (id=7255): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0xfa}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffffd2, 0x30008095, 0x0, 0x12a3b) 3.462381526s ago: executing program 5 (id=7256): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x704, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x273}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20008840) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x34201, 0x0) process_mrelease(r1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)={{0x108, 0x2, 0x5, 0x69, 0x2db, 0x0, 0x66, 0xffff}, "4ae04a4520be041bf0bd3803a368df8df916a1d60322e23cbc0c1a526dad8558d01bb6579a22b2abb6eecd81bc38f71af9e8aac612ff05863853", ['\x00', '\x00']}, 0x25a) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x131080, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000600), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000700)={@multicast1, @multicast2, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0xf7, 0x8, 0x20, @rand_addr=' \x01\x00', @empty, 0x80, 0x8000, 0x8, 0xfffffffb}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'nr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @loopback, @empty}, &(0x7f00000009c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a40)={0x0, @rand_addr, @remote}, &(0x7f0000000a80)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xa, 0x3, 0x37, @dev={0xfe, 0x80, '\x00', 0xd}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x7, 0x0, 0x1ff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000c40)={@multicast2, @loopback, 0x0}, &(0x7f0000000c80)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001280)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000000cc0)={0x550, r4, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r6}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r14}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x34}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x37, 0x4, 0x200}, {0x7, 0xf7, 0xfe, 0x9a3}]}}}]}}, {{0x8, 0x1, r17}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x550}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) r20 = syz_open_dev$dri(&(0x7f00000012c0), 0x3, 0x280001) ioctl$DRM_IOCTL_ADD_MAP(r20, 0xc0286415, &(0x7f0000001300)={&(0x7f0000ffc000/0x3000)=nil, 0x6f980914, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001340)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r21, 0x84, 0x7, &(0x7f0000001380), &(0x7f00000013c0)=0x4) 3.305258058s ago: executing program 5 (id=7257): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x20) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@generic={0xfe, 0x39, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36"}, @generic={0x80, 0xa, "09e12e5f0b6bdcf72f2e"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x188}}], 0x1, 0x810) (rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x2021) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_emit_ethernet(0x46, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) 3.181770903s ago: executing program 2 (id=7258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r1, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) unshare(0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x60a802) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe17}, 0x50) r3 = syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_pidfd_open(r3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) pidfd_send_signal(r4, 0x21, 0x0, 0x4) epoll_create1(0x0) 2.910349736s ago: executing program 2 (id=7259): poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x1100}, {}], 0x2, 0x20002080) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f0000000000)={0x8, 0x1, 0x1}) 2.793582605s ago: executing program 5 (id=7260): syz_emit_ethernet(0x95, &(0x7f0000000240)={@random="007f2610ae14", @local, @void, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}], @generic="12dec2886b79a0a211a33b8a7d42621a90c3cf1801e0be190e64d8b6f440e59123f2509425d724377e9cda16a06cc76b618b40c2fc2901211573045f51de9c7171e3abb361c389712268432e52408b10023e0d5996c3379185df9adb2e15bd495b1ba73eae7958d989b4174d35bbbffab139bda79fb9c001ab4e3966a1a778658765ea"}}}}, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) (async) socket(0x1a, 0x80805, 0x1fe) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xc}, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0xffffffff, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) (async) r6 = syz_io_uring_setup(0x235f, 0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_enter(r6, 0xd44, 0x0, 0xc, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x1) 2.715142164s ago: executing program 0 (id=7261): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x80000001, 0x1, 0x7}) (async) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x80, 0x7fff, 0x3ff, 0xfffffff8, 0x40, 0x7ff}) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000480)={0x201, "4baa8a91b80f01951804c704340024f07e00000000000000006100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000300)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) (async) r7 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioprio_set$pid(0x1, r7, 0x0) (async) r8 = accept4(r0, 0x0, 0x0, 0x800) (async) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)) sendmmsg$alg(r8, &(0x7f00000088c0)=[{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000000040)="d90077132dd512cf36818b740f406797e56c57a8a08e687399", 0x19}, {&(0x7f0000000280)="61eedfd3d39ecad6c07862c49cda04b8ef66799b8aec9a36630e4f86a182d883a6a410100ae1447055af285fdf62bb1efc0ff740f68048b6adb33c194f8665fbb98eb4d591edb7f54d35a511b0b708834b8741399c4335d0", 0x58}, {&(0x7f0000000380)="fce9b3ce7b5e620042567c6fff5dd8a3776d38f46019de2a8f9dea85ed5f3f8a2ca6c626d6a514dbaa0c249e9fbe909cc39151bc933a3e5332ff8e225ba8fce0638108cbf9e50816749aa4d9285bd740263b9438c2f2425000f070b31cc48ba57e8edafc79a033f6e10b10a1acc9c1b205ae9a140756eb", 0x77}, {&(0x7f00000004c0)="9a7a637d95d3bcd56255681360f1cf94b81bf7cb816a3f9b3eb161e571b45de7c6df6538e88600afefb28c902fe52ea76195711b6c76a0e9811a003a54307e19d0ca31ec7017164553a5546d81418a4e0cadac260c08e1141e81c728307e60027208824fb2aabb330679e3437dee215ff0e20d1fe6f5c6cc9afaf0d8f8054130ce0e0704ed40b26c47d7b5fe5815f1cbdb07c0f4d67c94309dbc39966e21070c2e7f01f75cf8aff77d925c095a11c9a47187e1d31743f6824debe964c08d539a1c6a878cfb", 0xc5}, {&(0x7f0000001240)="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", 0xe53}], 0x5, 0x0, 0x0, 0x800}], 0x1, 0x150) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES8, @ANYBLOB="0000000000000000380012800e00010069703665727370616e00000024000280140005000000000000000000000000000000000105001600020000000400120008000400", @ANYRESHEX=r0], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) 2.506699599s ago: executing program 7 (id=7262): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0xb8, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2c707}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_MPLS={0xffffffffffffff96}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x20, 0x0, 0x0, 0xb7}, {0x8, 0x14}, {0x8, 0xb, 0x0, 0x0, 0x10000}, {0x8, 0x15, 0x0, 0x0, 0x1}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x403, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x442404c0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0xc6f5a084915b544f, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x5d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 2.506093899s ago: executing program 0 (id=7263): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000185}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r6, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 2.273830621s ago: executing program 0 (id=7264): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="05000000000000001c0012800b00010067726574617000040c00028008000700e00000020800040080000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = dup(r1) write$binfmt_elf64(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46060478a3060000000000000002003e00cd000000b8010000000000003ffffffff7000000ea02000000000000000001000500380001000600b1060004030000008100000000ff0300000000000097000000000000000700"/105], 0x78) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6d0f91c36a754498ef4929e7b0baa331504901870a58427d38c613b60deb7a282d7b6bfa6c1ce01b2776418f32ce64849d13e6ec691c828627881e028e0df5b3474a20471b3305d8d822bbebc11b9d0b07fc6883caba9f0143a33047f23ca1b9ecc2360294a7775d37ae558b5d0ab8b7150d00b3da9746c67425f39cab84a5d6763ea15031d337008dd0c8e4966e162f0669133e2d7881d23517a720ea08f84075b401a40ef96cfcb5c7e02ac0948119822a378f37886022ab42384b807e450c594ab761ef79d1696f480ce34a1092185a7f41ec9f", @ANYRES32=r3, @ANYBLOB="480000001000010029bd7000ffdbdf2500004000"], 0x48}, 0x1, 0x0, 0x0, 0x400c0c2}, 0x804) r4 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) (async) r5 = fanotify_init(0x200, 0x1000) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x1, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x88080000, 0x1, 0xff, 0x0, 0xfffd, 0x9}, 0x20) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async) listen(r7, 0x3) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x5, 0x3, [0x6, 0x9, 0x8]}, &(0x7f0000000080)=0xe) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000500)=""/157) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000100)={r8, 0xf97, 0x30}, &(0x7f0000000140)=0xc) (async) r9 = dup(r4) fanotify_mark(r5, 0x1, 0x48001028, r9, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.051897578s ago: executing program 7 (id=7265): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ec"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x100000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, 0x0, &(0x7f0000000080)) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="120101026e694b109911039000d7010203010902290001fb0780020904000000ffd36b0505240600000000d10002004000"/59], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) 2.048346612s ago: executing program 0 (id=7266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x2b}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3, 0x0, 0x80ff}, 0x70bd2c, 0x3503, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x48080) 1.866652482s ago: executing program 2 (id=7267): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) 1.833380643s ago: executing program 3 (id=7268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4001, 0x30) recvfrom$l2tp(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x0, &(0x7f0000001040)={0x2, 0x0, @multicast2}, 0x10) fcntl$getflags(r0, 0x1) r1 = openat(r0, &(0x7f0000001080)='./file1\x00', 0x202000, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000010c0)={0x0, 0xa, 0x401}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001140)={r3, 0xa1, "a1a6d0508651533447c645b095a70bcaae9777665c52b2c886bc34b9ff4deda85b4e64cd0f025da1227d2315c73e400ef4eb5ebacf2ca8639fdb67c27b954c804a84f10863f862ec5e455520ad17b30a26cd6e9812bd8717fd84108da98f0953f2372ae7638bd102228142adea997dd4a1eb0ad535c90876fc3a5b58929f6fbd3723c1a2f1a8d2a8e4de547f28cffa19d1b163a3e04c1eadb0c5fca6f9c55c7e67"}, &(0x7f0000001200)=0xa9) readahead(r1, 0x9, 0x7) futex(&(0x7f0000001240)=0x1, 0x4, 0x1, &(0x7f0000001280)={0x0, 0x3938700}, &(0x7f00000012c0)=0x2, 0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001300)={{r1}, 0xa02, 0x8, 0xffffffffffffffff}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000001340)=@svm={0x1, 0x1, 0x1080, {0xeeeed000}, {"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"}}) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000023c0)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002440), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000090) times(&(0x7f0000002540)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000002580)={r3, 0x7, 0x3a, "f59ec9723440d0428ff96a9699f4929197d24fa614d44bae9dbfe802367120fa10d0d56e6927a07d08d4afb5169d78686d767c7ba7228a2fe2c3"}, 0x42) r5 = open$dir(&(0x7f0000002600)='./file0\x00', 0x4000, 0x30) openat(r5, &(0x7f0000002640)='./file0\x00', 0x8200, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002680), 0x181000, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002700)={0x7, &(0x7f00000026c0)=[{0x0, 0xe, 0x8, 0x2}, {0x1, 0x9, 0x7, 0x7}, {0xb, 0x1, 0x8, 0x6}, {0x8001, 0xb, 0x1, 0x1}, {0x8, 0x37, 0x9, 0x1}, {0x6, 0x5b, 0xc0, 0x3ff}, {0x8, 0x2, 0x2, 0x200}]}, 0x10) semtimedop(0x0, &(0x7f0000002740)=[{0x2, 0xf, 0x800}], 0x1, &(0x7f0000002780)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002800), r1) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x48, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4841}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002980)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x1b0, 0x1b0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000002940), {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x4}, {0x2, 0x6, 0x8}, {0xffffffffffffffff, 0x2, 0x5}, 0xffffffff, 0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], 'bridge0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0xa2, 0x9, 0x3, 0x9}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x0, 0x6, 0x1}}, @common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x437, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) getdents(r6, &(0x7f0000002dc0)=""/51, 0x33) openat$uinput(0xffffffffffffff9c, &(0x7f0000002e00), 0x802, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000002e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002e80)=0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000002f00)={0x0, @l2tp={0x2, 0x0, @private=0xa010101}, @nfc={0x27, r9, 0xffffffffffffffff, 0x4}, @nfc={0x27, r10, 0xffffffffffffffff}, 0xfff9, 0x0, 0x0, 0x0, 0xe8, &(0x7f0000002ec0)='bridge0\x00', 0x7, 0x5, 0x5}) 1.819801185s ago: executing program 0 (id=7269): r0 = syz_clone3(&(0x7f0000000180)={0x6a04a80, 0x0, 0x0, 0x0, {0x40003e}, 0x0, 0xffffffffffffff66, 0x0, 0x0}, 0x30) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000900)={0x7ffffffb, 0x50424752, 0x2, @stepwise={0x2, 0xff, 0xfffffbff, 0x9, 0x2, 0x7f}}) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040b40464de0000000000010902240001000000080904000001030005000921ffff060122030009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x24, 0x26, {0x26, 0x21, "02088039ccfb3253af843074a8e4bbbe3218a2fdc4d0061fc0fdaf2caa0a6f8cc3720240"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 1.654353406s ago: executing program 3 (id=7270): r0 = io_uring_setup(0x744b, &(0x7f00000000c0)={0x0, 0xaf08, 0x1, 0x3, 0x1c6}) unshare(0x2020480) unshare(0x4020000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000002c0)={0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/233, 0xe9}], &(0x7f0000000280)=[0xfffffffffffffff7, 0x5, 0x3, 0x71], 0x1}, 0x20) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x28) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/26, 0x1a}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') unshare(0x6020480) close_range(r0, 0xffffffffffffffff, 0x0) 1.653054286s ago: executing program 2 (id=7271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f40)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="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"/267], 0x30}, 0x1, 0x0, 0x0, 0x40000e5}, 0x1044) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x9e8, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xa0, 0xa0, 0x71, 0x10, 0x582, 0x5, 0xd754, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d6, 0x3, 0x45, 0x0, 0x80, 0x7, "", [{{0x9, 0x4, 0xd0, 0x0, 0xa, 0x58, 0x50, 0x9, 0x0, [@generic={0xf8, 0x22, "5ad0f5b4ae1db724fb5e0825bf5bb19a7a0a310ed414f4aae8882d62e6e45b770c250419199691b05e102fb95379f1835526253758c7b80a82201cb72719aef355f93d27d5d05c6e3d644ae3459ffed13b431858ed6aad71babbad62de21a02ca2882418ff8b6e447e1783a1e223cb54e28d1c02a19f43603cc2fc0ed32e366482ac12313bcc233a5d9ab1cb37beadfee02b5ead800f099dd2c92eb68b2584234b8de202c635fe90a7fcce1e397bbe3cbdf1dfe5562a0d086554a6089f7826251beb8ab7539b5593a354861e165cbb58e5c5f8c2f1fd5cff534e3397827048827e0d97c04fb5996c8c60bc1f7971c3ba5afce9b4593b"}], [{{0x9, 0x5, 0x4, 0x8, 0x400, 0x7f, 0x1, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xc636}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x10, 0x3, 0x0, [@generic={0x9c, 0x24, "4353e6d4d2f0e6260df62ae4735f5c9807777c2e887a3e883ec57644bde8b5f36ffcf3901a3bd4b49de86a84d837cffc39226f5379f7d2ef22b83ec61a9378aa6b6b9662cbeecf35f4f3b38b83eb20d00c21643b6bd6c82c18c1bac65fe9998d6f9fe833a5763f6bcb87effcb1bdac74d7c369efb2d38ffb65523e85099539883f40e5e2d8bb4a098fd2392d98d4a1c73a5a3115a10658473e5d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0xf1, 0x2, 0xdf, [@generic={0x32, 0x21, "663d7d6ad9f5dbd43f3991c540c1325a3b459b12b723665483b044b520dd4abbea7904adc80f0616d96650962a698ec4"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0xf, 0x40, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}]}}, {{0x9, 0x5, 0x8, 0x1, 0x0, 0x13, 0x20, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5a, 0xc94f}, @generic={0x4a, 0xb, "bb0825e0850e5f1f5d96f708fb6fb78f58a5dd071be062d18ec72c7433c815e2240e9c7f1d61f4a0284c60f4306a9b33a73968f76d7022d50ad94b14435fbdf919729955e5970415"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x2a, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x64b4}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0xde, 0x11, 0x4, [@generic={0xfe, 0x8, "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"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x7, 0xa, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x21, 0xde, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc1, 0xad1}]}}]}}, {{0x9, 0x4, 0x23, 0x0, 0xc, 0x90, 0xd4, 0x46, 0xf, [@generic={0xaf, 0x21, "e321f7efb6c32d892687ec8c874e56af8e72074cd3eb4535cc740ba0755df9bc87a0d0b53481e7f6ebd773c828b2f8c4ddb8d8254b354907aa6bbf81a9fe19c454519e321f72b2f14c8a3297cc3db62e2f38fb443b3ac6e8abc9517600fa56725907330202355b5673bccac5329cdbb9af7e9342fe661194c47732a56b6bd4b8368ec5a93b5ebd71d46eebdadb5dc6e786987a932f44e895b6592018ebe16cb54661fa5427f6337b5417c85b2e"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "5cca2e5d62"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x5, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x8}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}]}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x4, 0xf8, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x1, 0x7, 0x40, [@generic={0x72, 0x9, "809c5821f90440b42361f4ff58314e0e73b565d553c1b3c6dfeba73921103a3e3d78478b64f2e9c3475c1d7b208ca984f61126bd54632627687c3b3ae85b2edb9800d43344dc814f3fea3cebf7c2adaba23eed8c19acfdf51add0048cc2e1afa380a1f580b46f9266f5957a962dc47e9"}, @generic={0xf, 0x1, "491878541a97200f50034e4df4"}]}}, {{0x9, 0x5, 0x6, 0xc6e9b29ab848fa9a, 0x10, 0x21, 0xd2, 0x9, [@generic={0x13, 0x24, "206bcb717f7b8de84e6012c6ee197ca3d7"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x9, 0x40, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x62c2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x7b, 0x4, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x35}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5716}, @generic={0xd7, 0xa, "1d0ee2f4aae9584c9b55fb0fde3252e6ff4d8cac2957aa8aa31236dc9e8990a5a71781afdec571605745d265129a61a9b2107e73cfc8d761e642ecdf07fd72c9750fef892e9c4cde89cff8751fb5c3e3f2faa6638ef40ab21e9cc638c74f2355654cf5b27758798ce35c61e8432eaf5a66ede44df8f8efcb138200906bb036c69742f918161d4a594c5fe2f60b72969d70d78f6e10f36f6e94671cd96401e052ab28f1599d606f1546a903c29582b45fb7b98e060756f2680f0797a03eeba92ae71c72160a1330b264ef6a4ba4721ec8623bb3712a"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x8, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xa}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcce43902a8d3c0b3, 0x69, 0xf8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x34, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0xc5, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8aa5bc32f6387544, 0x3, 0x7}]}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0xfc, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x4}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x0, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0xc, 0x5e36f77e92f2b930, 0x40, 0x6, 0x8, 0x32, [@generic={0x29, 0xa, "27edbe55768485d7dc65f00f0d840b435ef5e62ec400a8906eab70bfd48b63acc8c953d38e75b5"}]}}]}}, {{0x9, 0x4, 0x6f, 0x60, 0x8, 0x2, 0x2, 0x1, 0x8, [@generic={0x4, 0x22, "3db6"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "20a953a4c4"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x0, 0x100, 0x9}, [@acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x8, 0x4, 0x40, 0x0, 0x1a, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xde, 0x2}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x9, 0xa, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x9, 0x2, 0xfe, [@generic={0xce, 0xf, "57ae4173cb9d0151bf36c930adc83602517e22cab546218b68e324b7611f74b3c7b23d9a6b4368083e7db85dd21f9db6fcae1cf921fd0216b1181f667ce2dc582cdf5ea60b8e1eae1e46b3eaf899fdf429c6e2993d2233a202a167dd6551115d8f0b675dbe93b4c823782ce6055bd46ce751a491dae2abb987be36c93fc5f170db54ea08b483be45e05c2a6fbecb8f8e12c5c9e60cbe761bc3533e648525b3d4bcf0a26c11b285f95cbe603b1e76a23a380ef3d436c3de11ca402de179086d10c724317d0b67b5d94c97df0a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x7, 0xd2, 0x0, [@generic={0x55, 0x11, "86bd45cbf13a98a59e8bbbf852fbac8ccc105e0fa02a3102114cf524baedbf1d53b58edf197a138264909233cda6b85cb00a7d5fb78cec323181fc5e7389975252bed6f79423e96ae343920a7a25085eb415ed"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x80, 0x1, 0xf3, [@generic={0xdd, 0xf, "670349f84b11c2d1321b6e132688e68757992dd96db04553d67c8337474d21a5108cfe65336c13f8b6a1c966894ec074c62ac05390681e34533f72e0928e0ff5a55f6aba487b5f254520ff5177b185d976b5dfacc36fae0e2ee228acebb3497c228053713a8f6485e0cf777f549a2fbea29a181f9434e0442ada4acb18ba8367f194429d5184acde51ecb7b72f5b48d49097894b176a056ec5af450df9316ff096f6144e9294b8fa05b2eb8d808e1617ff59a374456742c2683fe3acb8b921b8eb26ca7dc6d03949a49f8d9bae36664cf1d2f6c7a6a7c57d1f94f9"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x2, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xe}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x66, 0x9a, 0x8, [@generic={0x4d, 0x24, "5ad8ef31ac7ebee52b7aa951a39be40898db9660d373038f976dd13a584992362cff3fdacad82c0313e0101acd0ad7ea23c3f209f4c1568a8ed646bb2ff8c7c2055869cef359c969b554a4"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x1, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x250, 0x6d, 0x4, 0x3, 0x20, 0xfe}, 0x1c, &(0x7f0000000e00)={0x5, 0xf, 0x1c, 0x2, [@generic={0x3, 0x10, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x50, "9e4a406da3ff44416a1383617b03d9c3"}]}, 0x3, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0xfffffffffffffffe, 0x7ff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.606710204s ago: executing program 3 (id=7272): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 64) r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc5ca, 0x20, 0x0, 0x7a}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) open(&(0x7f00000001c0)='./file0\x00', 0x80200, 0x9) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) (async) read(r1, 0x0, 0xff00) 1.263432276s ago: executing program 5 (id=7273): r0 = syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x80, 0xf4}}]}}, 0x0) r1 = syz_usb_connect(0x4, 0x1cb, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0xa, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0xf7, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x1, 0xc0}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x68, 0x9d, 0xc, 0xff, 0x7}, 0x62, &(0x7f0000000800)={0x5, 0xf, 0x62, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x6b, 0xf000, 0x7, [0x0, 0x0, 0xff3ff0, 0xffc0f0, 0x0, 0x80403f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b99498009d2c1abf5df7a95faafbb139"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x8, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x5, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4f9de0dafc7e2f134593f2946e20066b"}]}, 0x7, [{0x4, &(0x7f0000000880)=@lang_id={0x4}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x81d}}, {0x78, &(0x7f0000000a40)=@string={0x78, 0x3, "60579cf55eb401e0cfd7a9f609abf22e0a009a724566373d331c203e6b005f73a4cc5d18b8fbe15c0e7c06bce17e1a17750c6795fc21595f5ace622e7ae9f599ec112d17eabaa58075996dee405c009c0ed9ebc23ec41f2fb1de1b8da2400718ce1ec2c6509a60fff8132f86229c9dfe1103ad6d6667"}}]}) syz_usb_connect$uac2(0x5, 0x10b, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x3, 0x1, 0x6, 0xb0, 0x0, {0x8, 0xb, 0x0, 0x0, 0x1, 0xa, 0x20, 0xf8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x9, 0x2b, 0xfa}, [@source_unit={0x8, 0x24, 0xa, 0x1, 0x4, 0x1, 0x5, 0x4}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x101, 0x3, 0x7, 0x8, 0x7, 0x7, 0x5e, 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x7, "e158f70779"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x8c, 0x0, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1ff, 0x3, 0x2, 0xf}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x8, 0xa0, 0x9, 0x3}, @as_header={0x10, 0x24, 0x1, 0x1, 0xd, 0x3, 0x4, 0x1, 0x610651a9, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x8, 0x6, {0x8, 0x25, 0x1, 0x1, 0x33, 0x6, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x77, 0x1, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x9, 0x0, "", "c795"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x9, 0x7, "9a39bb8bf685eea2d4"}, @as_header={0x10, 0x24, 0x1, 0x8, 0xd, 0x2, 0x1002, 0xd, 0x8, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x5e330c0c08b7c213, 0x7, 0xa, 0x1e, {0x8, 0x25, 0x1, 0x80, 0xf, 0x2, 0x1}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x7, 0x1, 0xc, 0x10, 0x6}, 0x30, &(0x7f0000000380)={0x5, 0xf, 0x30, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x0, 0x2, 0x15, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x7fffffb, 0x1ef00, 0x939a, [0xc000, 0x3f00, 0xc000, 0xc00f, 0xff3f18]}]}, 0x6, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}, {0x29, &(0x7f00000004c0)=@string={0x29, 0x3, "604010a934dad56b716e662a6c88d15e05fa004090dae8d0b0db5512692000b70a629e8d66b37d"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2001}}, {0x36, &(0x7f0000000580)=@string={0x36, 0x3, "93315f27d134c0b154987c4575a07a0a112d309dd34aa811a6555db4abe185716a470bcef6ed90a6176c3cb8533b701a73620c0b"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xc8, &(0x7f0000000680)=@string={0xc8, 0x3, "18f495e7e8a040ee282a6b82388840e0e507d0c9676efcc865ec942b23eac18d1e34f7fe6cfe6e495f01a858fe738f2aeeebe54122f79fe62ad68e6265f3c35e94ed0cd69a273f411022a0340fec5681202288f6a4c8a9210e74382483b5e1e234ece56d8d0267911b3b1f651761d928be976a5bc31079aca1b428d85c9f70f41e4f44d7737dbe262c489d113bda288b200a99d3032b31da892d9b5601cb5644f6b89d4687b4e5100db79d628b637cd108d011f437c9513a4e224921855a9a9819cd7b4a1644"}}]}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x20, 0x8, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x10, 0x6, "d9e091d2edce"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 238.4851ms ago: executing program 3 (id=7274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 0s ago: executing program 3 (id=7275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0xc, 0x0, 0x0, 0x80, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mlock2(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0xcd, 0x0, 0x19, "100056f200"}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cf5c7cd8260162d300000000950000000000b4fe62c0daed6a6167af567f163b4dc3e3116c221eda6dd904371f8a"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10) ioctl$TIOCMSET(r5, 0x5418, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) sendfile(r6, r4, 0x0, 0xb7ed) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f00000002c0)=[{{0x80000000, 0x0}}, {{0x80000000}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f00000001c0)={{r10, r9, 0x1, [0x104, 0xf7df]}, {r11, r12, 0x4, [0x6, 0xfffff7ff]}, 0x2, [0x2, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): ry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.097228][T29676] do_syscall_64+0x15f/0xf80 [ 1715.097253][T29676] ? trace_irq_disable+0x3b/0x140 [ 1715.097288][T29676] ? clear_bhb_loop+0x40/0x90 [ 1715.097316][T29676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.097338][T29676] RIP: 0033:0x7fa5f7d9cdd9 [ 1715.097358][T29676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.097377][T29676] RSP: 002b:00007fa5f8d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1715.097401][T29676] RAX: ffffffffffffffda RBX: 00007fa5f8015fa0 RCX: 00007fa5f7d9cdd9 [ 1715.097418][T29676] RDX: 0000000000048080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1715.097433][T29676] RBP: 00007fa5f8d17090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.097446][T29676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.097460][T29676] R13: 00007fa5f8016038 R14: 00007fa5f8015fa0 R15: 00007fa5f813fa48 [ 1715.097492][T29676] [ 1715.436169][T29679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6827'. [ 1715.606069][T29668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.632066][T29668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.659103][T27122] ath6kl: Unsupported hardware version: 0x0 [ 1715.667703][T27122] ath6kl: Failed to init ath6kl core: -22 [ 1715.696057][T22332] usbhid 6-1:7.0: can't add hid device: -71 [ 1715.702347][T22332] usbhid 6-1:7.0: probe with driver usbhid failed with error -71 [ 1715.715456][T27122] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1715.761416][T22332] usb 6-1: USB disconnect, device number 47 [ 1715.855725][ T7403] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1715.916173][T27121] usb 4-1: USB disconnect, device number 2 [ 1715.938330][T29684] netlink: 'syz.7.6790': attribute type 1 has an invalid length. [ 1716.018060][ T7403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1716.059065][ T7403] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1716.083366][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6790'. [ 1716.107441][ T7403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.123743][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6790'. [ 1716.143256][ T7403] usb 3-1: config 0 descriptor?? [ 1716.164970][T29681] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1716.525954][T16034] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1716.551112][T16034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1716.561509][T16034] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1716.570721][T16034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1716.579636][T16034] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1716.609007][ T7403] hid_parser_main: 212 callbacks suppressed [ 1716.609031][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1716.754379][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1716.816789][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1716.835449][T29681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1716.869238][T29681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1716.885840][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1716.914166][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1716.941631][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1716.965026][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1716.972569][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1717.016927][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1717.046378][ T7403] koneplus 0003:1E7D:2E22.0086: unknown main item tag 0x0 [ 1717.067870][ T7403] koneplus 0003:1E7D:2E22.0086: reserved main item tag 0xe [ 1717.068043][ T7403] koneplus 0003:1E7D:2E22.0086: unexpected long global item [ 1717.068597][ T7403] koneplus 0003:1E7D:2E22.0086: parse failed [ 1717.068649][ T7403] koneplus 0003:1E7D:2E22.0086: probe with driver koneplus failed with error -22 [ 1717.075573][ T7403] usb 3-1: USB disconnect, device number 112 [ 1717.534659][T27131] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1717.700223][T27131] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.700256][T27131] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1717.700280][T27131] usb 6-1: config 1 has no interface number 1 [ 1717.700322][T27131] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1717.700378][T27131] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1717.707485][T27131] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1717.707529][T27131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.707554][T27131] usb 6-1: Product: syz [ 1717.707572][T27131] usb 6-1: Manufacturer: syz [ 1717.707589][T27131] usb 6-1: SerialNumber: syz [ 1717.770254][T29700] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1718.115472][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1718.115521][ T30] audit: type=1326 audit(1777506511.076:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.115575][ T30] audit: type=1326 audit(1777506511.076:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.120412][T29700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6834'. [ 1718.188740][T29712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.189380][T29712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.269749][ T30] audit: type=1326 audit(1777506511.226:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f485c35d60e code=0x7ffc0000 [ 1718.269846][ T30] audit: type=1326 audit(1777506511.226:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.270260][ T30] audit: type=1326 audit(1777506511.226:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.271945][ T30] audit: type=1326 audit(1777506511.226:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.272438][ T30] audit: type=1326 audit(1777506511.226:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.318202][ T30] audit: type=1326 audit(1777506511.236:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.318287][ T30] audit: type=1326 audit(1777506511.236:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.328199][ T30] audit: type=1326 audit(1777506511.286:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.2.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1718.543801][T27131] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1718.543937][T27131] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1718.708340][T16034] Bluetooth: hci6: command tx timeout [ 1718.784757][T27131] usb 6-1: USB disconnect, device number 48 [ 1718.930130][T28052] udevd[28052]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1719.970741][T22207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.017952][T22207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.488927][T29727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.685680][T29732] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6841'. [ 1720.794819][T16034] Bluetooth: hci6: command tx timeout [ 1721.013275][T22207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.079478][T22207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.175710][T27128] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1721.354764][T27128] usb 3-1: Using ep0 maxpacket: 16 [ 1721.370782][T27128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.412890][T27128] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.492384][T27128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1721.501424][T27128] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1721.512084][T27128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.526321][T22207] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 1721.553845][T27128] usb 3-1: config 0 descriptor?? [ 1721.559164][T27131] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1721.574051][T22207] team0: Port device netdevsim1 removed [ 1721.599410][T22207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.611791][T22207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.635949][T29690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.643935][T29690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.657851][T29690] bridge_slave_0: entered allmulticast mode [ 1721.671676][T29690] bridge_slave_0: entered promiscuous mode [ 1721.675341][T27121] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1721.688932][T29690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.709178][T29690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.716984][T27131] usb 4-1: Using ep0 maxpacket: 32 [ 1721.728440][T27131] usb 4-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1721.744230][T29690] bridge_slave_1: entered allmulticast mode [ 1721.751703][T27131] usb 4-1: config 123 interface 0 has no altsetting 0 [ 1721.768929][T27131] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 1721.781360][T29690] bridge_slave_1: entered promiscuous mode [ 1721.787384][T27131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.801279][T29740] loop5: detected capacity change from 0 to 7 [ 1721.819445][T27131] usb 4-1: Product: syz [ 1721.837572][T29740] loop5: p1 < > p3 p4 [ 1721.845634][T27131] usb 4-1: Manufacturer: syz [ 1721.850652][T27121] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.865470][T29740] loop5: partition table partially beyond EOD, truncated [ 1721.872876][T27131] usb 4-1: SerialNumber: syz [ 1721.885548][T27121] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1721.906891][T29740] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1721.914539][T27121] usb 6-1: config 1 has no interface number 1 [ 1721.919806][T27121] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1721.975033][T27121] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1721.983221][T29740] loop5: p4 start 33554432 is beyond EOD, truncated [ 1722.027280][T27121] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1722.044580][T27121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.069684][T27121] usb 6-1: Product: syz [ 1722.084920][T27121] usb 6-1: Manufacturer: syz [ 1722.104501][T27121] usb 6-1: SerialNumber: syz [ 1722.120697][T29750] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1722.188085][T27128] hid_parser_main: 448 callbacks suppressed [ 1722.188112][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.242806][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.262342][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.285937][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.297090][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.358070][T29750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6847'. [ 1722.367059][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.367097][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.367134][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.400311][T22207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.437666][T27131] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 1722.447672][T22207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.461264][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.472783][T29752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.488480][T27131] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1722.503631][T27128] cougar 0003:060B:500A.0087: unknown main item tag 0x0 [ 1722.522222][T29752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1722.535249][T27131] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 1722.542861][T27128] cougar 0003:060B:500A.0087: unexpected long global item [ 1722.563217][T27131] usb 4-1: media controller created [ 1722.572530][T27128] cougar 0003:060B:500A.0087: parse failed [ 1722.593539][T27128] cougar 0003:060B:500A.0087: probe with driver cougar failed with error -22 [ 1722.639122][T27131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1722.650143][T27128] usb 3-1: USB disconnect, device number 113 [ 1722.671065][T29690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.754717][T27131] set interface failed [ 1722.754753][T27131] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1722.782850][T27131] error writing reg: 0xff, val: 0x00 [ 1722.790199][T27121] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1722.821593][T29690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.844829][T27121] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1722.865123][T16034] Bluetooth: hci6: command tx timeout [ 1722.969833][T27131] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1723.099278][T27121] usb 6-1: USB disconnect, device number 49 [ 1723.129186][T27131] usb 4-1: USB disconnect, device number 3 [ 1723.149750][T29690] team0: Port device team_slave_0 added [ 1723.210069][T29690] team0: Port device team_slave_1 added [ 1723.368914][T28484] udevd[28484]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1723.524801][T29690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.561825][T29690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.692536][T29690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.853912][T29690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.938785][T29690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.090122][T29690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.945132][T16034] Bluetooth: hci6: command tx timeout [ 1725.059066][T29690] hsr_slave_0: entered promiscuous mode [ 1725.118507][T29690] hsr_slave_1: entered promiscuous mode [ 1725.169196][T29690] debugfs: 'hsr0' already exists in 'hsr' [ 1725.208358][T29690] Cannot create hsr debugfs directory [ 1725.579333][T22207] bridge_slave_1: left allmulticast mode [ 1725.601032][T22207] bridge_slave_1: left promiscuous mode [ 1725.629343][T22207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.691691][T22207] bridge_slave_0: left allmulticast mode [ 1725.723305][T22207] bridge_slave_0: left promiscuous mode [ 1725.770701][T22207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.050521][T22207] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1728.010762][T22207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1728.060669][T22207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1728.098121][T22207] bond0 (unregistering): Released all slaves [ 1728.152091][T22207] bond1 (unregistering): Released all slaves [ 1728.222863][T22207] bond2 (unregistering): Released all slaves [ 1728.292360][T22207] bond3 (unregistering): Released all slaves [ 1728.387687][ T7403] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1728.472457][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1728.577045][T22207] tipc: Disabling bearer [ 1728.594404][ T7403] usb 6-1: Using ep0 maxpacket: 32 [ 1728.610875][ T7403] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.626424][T22207] tipc: Left network mode [ 1728.663183][ T7403] usb 6-1: config 0 has no interfaces? [ 1728.692995][ T7403] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1728.715108][ T7403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.734435][ T7403] usb 6-1: Product: syz [ 1728.750867][ T7403] usb 6-1: Manufacturer: syz [ 1728.776209][ T7403] usb 6-1: SerialNumber: syz [ 1728.821248][ T7403] usb 6-1: config 0 descriptor?? [ 1729.024946][T22332] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1729.312527][T22332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.349227][T22332] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1729.441626][T22332] usb 4-1: config 1 has no interface number 1 [ 1729.471644][T22332] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1729.539374][T22332] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1729.600043][T22332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1729.633687][T22332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.682917][T22332] usb 4-1: Product: syz [ 1729.729794][T22332] usb 4-1: Manufacturer: syz [ 1729.752811][T22332] usb 4-1: SerialNumber: syz [ 1729.825088][T29800] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1730.081800][T29800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6857'. [ 1730.134703][ T7403] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1730.161019][T29811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.204713][T29811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.308568][ T7403] usb 3-1: Using ep0 maxpacket: 16 [ 1730.314830][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.321428][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.339052][ T7403] usb 3-1: no configurations [ 1730.357122][ T7403] usb 3-1: can't read configurations, error -22 [ 1730.514832][ T7403] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1730.577323][T27131] usb 6-1: USB disconnect, device number 50 [ 1730.685333][ T7403] usb 3-1: Using ep0 maxpacket: 16 [ 1730.723887][ T7403] usb 3-1: no configurations [ 1730.742874][ T7403] usb 3-1: can't read configurations, error -22 [ 1730.767636][ T7403] usb usb3-port1: attempt power cycle [ 1730.798567][T22332] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1730.830178][T22332] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1731.144816][ T7403] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1731.200427][ T7403] usb 3-1: Using ep0 maxpacket: 16 [ 1731.225398][T22332] usb 4-1: USB disconnect, device number 4 [ 1731.236330][ T7403] usb 3-1: no configurations [ 1731.267717][ T7403] usb 3-1: can't read configurations, error -22 [ 1731.347977][T22207] hsr_slave_0: left promiscuous mode [ 1731.407812][T22207] hsr_slave_1: left promiscuous mode [ 1731.427090][ T7403] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1731.450504][T22207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1731.473456][T28484] udevd[28484]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1731.489300][ T7403] usb 3-1: Using ep0 maxpacket: 16 [ 1731.495235][T22207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1731.513975][ T7403] usb 3-1: no configurations [ 1731.541765][ T7403] usb 3-1: can't read configurations, error -22 [ 1731.560469][T22207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1731.590419][ T7403] usb usb3-port1: unable to enumerate USB device [ 1731.613509][T22207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.705964][T22207] batadv_slave_1: left promiscuous mode [ 1731.718831][T22207] veth1_macvtap: left promiscuous mode [ 1731.735918][T22207] veth0_macvtap: left promiscuous mode [ 1731.744161][T22207] veth1_vlan: left promiscuous mode [ 1731.753680][T22207] veth0_vlan: left promiscuous mode [ 1731.847160][T22332] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1732.027269][T22332] usb 4-1: Using ep0 maxpacket: 32 [ 1732.044933][T22332] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1732.065357][T22332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.087366][T22332] usb 4-1: Product: syz [ 1732.097488][T22332] usb 4-1: Manufacturer: syz [ 1732.107831][T22332] usb 4-1: SerialNumber: syz [ 1732.159317][T22332] usb 4-1: config 0 descriptor?? [ 1732.224565][T27122] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1732.364760][T27122] usb 6-1: device descriptor read/64, error -71 [ 1732.391770][T22332] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 1732.414081][T22332] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1732.472984][T22332] usb 4-1: USB disconnect, device number 5 [ 1732.614850][T27122] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1732.714913][T22207] team_slave_1 (unregistering): left promiscuous mode [ 1732.723816][T22207] team0 (unregistering): Port device team_slave_1 removed [ 1732.746724][T22207] team_slave_0 (unregistering): left promiscuous mode [ 1732.756928][T22207] team0 (unregistering): Port device team_slave_0 removed [ 1732.774902][T27122] usb 6-1: device descriptor read/64, error -71 [ 1732.898598][T27122] usb usb6-port1: attempt power cycle [ 1733.265686][T27122] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1733.316721][T27122] usb 6-1: device descriptor read/8, error -71 [ 1733.604543][T27122] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1733.639931][T27122] usb 6-1: device descriptor read/8, error -71 [ 1733.774863][T27122] usb usb6-port1: unable to enumerate USB device [ 1733.987170][T29854] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6868'. [ 1734.195084][T27121] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1734.240483][T29858] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1734.368319][T27121] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.427473][T27121] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1734.469561][T27121] usb 3-1: config 1 has no interface number 1 [ 1734.534218][T27121] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1734.596485][T27121] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1734.655607][T27121] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1734.671270][T27121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.697894][T27121] usb 3-1: Product: syz [ 1734.714326][T27121] usb 3-1: Manufacturer: syz [ 1734.757056][T27121] usb 3-1: SerialNumber: syz [ 1734.817950][T29856] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1735.071957][T29856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6869'. [ 1735.165719][T29856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.201155][T29856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.588653][T27121] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1735.596053][T22332] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1735.646377][T27121] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1735.767266][T22332] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1735.822368][T22332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.845539][T29875] loop9: detected capacity change from 0 to 7 [ 1735.873081][T29875] Dev loop9: unable to read RDB block 7 [ 1735.880443][T22332] usb 6-1: config 0 descriptor?? [ 1735.914745][T29875] loop9: unable to read partition table [ 1735.931222][T22332] cp210x 6-1:0.0: cp210x converter detected [ 1735.955842][T29875] loop9: partition table beyond EOD, truncated [ 1735.996619][T29875] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1736.047980][T27121] usb 3-1: USB disconnect, device number 118 [ 1736.354211][T29690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1736.373279][T28484] udevd[28484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1736.516034][T29690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1736.559240][T29690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1736.712911][T29690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1736.770062][T29690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1736.838319][T29690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1736.876011][T29690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1736.995756][T29690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1737.485437][T22332] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1737.527255][T22332] cp210x 6-1:0.0: querying part number failed [ 1737.585296][T22332] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1737.753919][T29690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1737.890629][T29690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.958350][T22204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.965610][T22204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.028129][T29912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1738.040670][T22207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.048019][T22207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1738.181153][T29915] openvswitch: netlink: Actions may not be safe on all matching packets [ 1738.462321][T29690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1738.676358][T29690] veth0_vlan: entered promiscuous mode [ 1738.718019][T29690] veth1_vlan: entered promiscuous mode [ 1738.818669][T22332] usb 6-1: USB disconnect, device number 55 [ 1738.880761][T22332] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1738.935689][T22332] cp210x 6-1:0.0: device disconnected [ 1738.959799][T29690] veth0_macvtap: entered promiscuous mode [ 1739.020889][T29690] veth1_macvtap: entered promiscuous mode [ 1739.036925][T29925] netlink: 'syz.5.6880': attribute type 32 has an invalid length. [ 1739.137830][T29690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1739.208204][T29690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.260713][T22190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.289068][T22190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.355641][T22190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.381108][T22190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.929598][T22190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.965129][T22190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.207034][T22211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.245354][T22211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.282574][T29943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6882'. [ 1740.390630][T29945] loop9: detected capacity change from 0 to 7 [ 1740.417071][T29945] Dev loop9: unable to read RDB block 7 [ 1740.434549][T29945] loop9: unable to read partition table [ 1740.498562][T29945] loop9: partition table beyond EOD, truncated [ 1740.567861][T29945] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1740.775769][T29953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1740.920324][T29953] netlink: 'syz.0.6829': attribute type 8 has an invalid length. [ 1740.962380][T29953] sch_fq: defrate 0 ignored. [ 1741.018005][T29960] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6886'. [ 1741.479266][T29979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1741.915207][T29981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.982536][T29981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.636744][T30005] loop9: detected capacity change from 0 to 7 [ 1742.668280][T30005] Dev loop9: unable to read RDB block 7 [ 1742.691816][T30005] loop9: unable to read partition table [ 1742.728983][T30005] loop9: partition table beyond EOD, truncated [ 1742.750398][T30005] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1742.879505][T29981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1743.077860][T29981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1743.112398][T30002] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6894'. [ 1743.147263][T29981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1743.161720][T29981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1743.277463][T29981] veth1_vlan: left promiscuous mode [ 1743.316922][T29981] veth0_vlan: left promiscuous mode [ 1743.349377][T29981] veth0_vlan: entered promiscuous mode [ 1743.407525][T29981] veth1_vlan: entered promiscuous mode [ 1743.462123][T29981] veth1_macvtap: left promiscuous mode [ 1743.476721][T29981] veth0_macvtap: left promiscuous mode [ 1743.499289][T29981] veth0_macvtap: entered promiscuous mode [ 1743.543402][T29981] veth1_macvtap: entered promiscuous mode [ 1743.598827][T29981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1743.655275][T29981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1743.706751][T29981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1743.765342][T29981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1743.899122][T29981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1743.966980][T29981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1744.097042][T29981] bond3: left promiscuous mode [ 1744.125297][T29981] bond3: left allmulticast mode [ 1744.193429][T29981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1744.260807][T29981] veth3: left promiscuous mode [ 1744.342861][T29981] ip6gre1: left promiscuous mode [ 1744.354790][T29981] ip6gre1: left allmulticast mode [ 1744.866388][T29981] vlan2: left allmulticast mode [ 1744.890502][T29981] bond4: left allmulticast mode [ 1744.905182][T29981] geneve2: left allmulticast mode [ 1745.092879][T22204] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1745.136131][T22204] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1745.172162][T22204] bond3: (slave veth3): making interface the new active one [ 1745.209037][T22204] bond3: active interface up! [ 1745.233530][T22207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.240885][T22207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1745.493639][T30009] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1745.550841][T22200] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.593276][T22200] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.640414][T22214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1745.692341][T22214] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1745.716422][T27128] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1745.772943][T22200] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.878194][T22332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1745.879356][T22200] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.245526][ T993] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1746.333113][T27128] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1746.453809][ T993] usb 3-1: config index 0 descriptor too short (expected 8562, got 36) [ 1746.501265][ T993] usb 3-1: config 32 has too many interfaces: 157, using maximum allowed: 32 [ 1746.543522][ T993] usb 3-1: config 32 has an invalid descriptor of length 167, skipping remainder of the config [ 1746.590998][ T993] usb 3-1: config 32 has 0 interfaces, different from the descriptor's value: 157 [ 1746.644811][ T993] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1746.681697][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.245349][T30062] netlink: 'syz.0.6913': attribute type 1 has an invalid length. [ 1747.609335][T30075] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6914'. [ 1747.621850][T30076] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1747.701489][T30075] erspan0: entered promiscuous mode [ 1747.736361][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1747.747638][T30075] erspan0: left promiscuous mode [ 1747.902396][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1747.902415][ T30] audit: type=1326 audit(1777506540.856:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30070 comm="syz.0.6915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd86f19cdd9 code=0x0 [ 1747.938930][T22332] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1748.027836][T30079] : entered promiscuous mode [ 1748.127501][T22332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.209397][T22332] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1748.242377][T22332] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1748.262581][T22332] usb 6-1: Manufacturer: syz [ 1748.324119][T22332] usb 6-1: config 0 descriptor?? [ 1748.665086][ T993] usb 3-1: string descriptor 0 read error: -71 [ 1748.689249][ T993] usb 3-1: USB disconnect, device number 119 [ 1748.774785][T27128] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1748.968019][T27128] usb 4-1: Using ep0 maxpacket: 32 [ 1748.984999][T30095] kernel read not supported for file / 7âW)s!Qf (pid: 30095 comm: syz.2.6920) [ 1749.019157][T30097] netlink: 'syz.7.6921': attribute type 32 has an invalid length. [ 1749.034189][T27128] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1749.103248][T27128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1749.146067][ T30] audit: type=1800 audit(1777506542.106:2016): pid=30095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6920" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56604 dev="mqueue" ino=153777 res=0 errno=0 [ 1749.174687][T27128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1749.210805][T27128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1749.226103][T22332] uclogic 0003:256C:006D.0088: interface is invalid, ignoring [ 1749.239074][T30075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.271634][T27128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1749.289945][T30075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.333278][T27128] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1749.371591][T22332] usb 6-1: USB disconnect, device number 56 [ 1749.386886][T27128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.429802][T27128] usb 4-1: Product: syz [ 1749.446252][T27128] usb 4-1: Manufacturer: syz [ 1749.486396][T27128] usb 4-1: SerialNumber: syz [ 1749.517964][T27128] usb 4-1: config 0 descriptor?? [ 1749.674905][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1749.715082][T30100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1749.757527][T27128] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1749.970794][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.020600][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.074884][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.111970][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.184810][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.223554][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.260762][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.311361][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.344074][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.372354][T30117] netlink: 'syz.5.6925': attribute type 1 has an invalid length. [ 1750.420245][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.447553][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.479003][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.511961][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.557679][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.627354][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.641411][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.669846][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.693188][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.765599][T27128] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1750.792547][T27128] input input131: Timeout waiting for response from device. [ 1750.825052][T27128] usb 4-1: USB disconnect, device number 6 [ 1751.134428][T27127] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1751.194941][T27128] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1751.304763][T27127] usb 6-1: Using ep0 maxpacket: 32 [ 1751.329352][T27127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.367444][T27127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.399677][T27127] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1751.419482][T27127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.435713][T27128] usb 4-1: Using ep0 maxpacket: 32 [ 1751.456723][T27127] usb 6-1: config 0 descriptor?? [ 1751.463231][T27128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.500296][T27127] hub 6-1:0.0: USB hub found [ 1751.531436][T27128] usb 4-1: config 0 has no interfaces? [ 1751.553063][T27128] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1751.577924][T27128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.603502][T27128] usb 4-1: Product: syz [ 1751.620768][T27128] usb 4-1: Manufacturer: syz [ 1751.640630][T27128] usb 4-1: SerialNumber: syz [ 1751.676316][T27128] usb 4-1: config 0 descriptor?? [ 1751.691473][T27127] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1752.105262][T27127] hid-generic 0003:046D:C31C.0089: collection stack underflow [ 1752.141809][T27127] hid-generic 0003:046D:C31C.0089: item 0 0 0 12 parsing failed [ 1752.175814][T27127] hid-generic 0003:046D:C31C.0089: probe with driver hid-generic failed with error -22 [ 1752.265248][ T30] audit: type=1326 audit(1777506545.226:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30134 comm="syz.7.6931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f964b79cdd9 code=0x0 [ 1752.315336][T30126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.325359][T30126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.489273][T27128] usb 6-1: USB disconnect, device number 57 [ 1753.082594][T27131] usb 4-1: USB disconnect, device number 7 [ 1753.287101][T30159] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6937'. [ 1753.306678][T30159] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6937'. [ 1753.324873][T30162] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6938'. [ 1753.764662][T27128] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1753.774603][ T993] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1753.925096][ T993] usb 6-1: Using ep0 maxpacket: 16 [ 1753.956038][ T993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.960218][T27128] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 196, changing to 4 [ 1754.021832][ T993] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.067400][ T993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1754.087928][T27128] usb 3-1: language id specifier not provided by device, defaulting to English [ 1754.112705][ T993] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1754.142065][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.156998][T27128] usb 3-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 1754.184081][ T993] usb 6-1: config 0 descriptor?? [ 1754.197448][T27128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.216047][T27128] usb 3-1: Product: syz [ 1754.231317][T27128] usb 3-1: Manufacturer: ԗ”括렃鲚蝸高뱏畅瘝ﺗ脔格혥꞊쵰ꈩⷁ [ 1754.255980][T30182] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1754.270522][T27128] usb 3-1: SerialNumber: syz [ 1754.422650][T30168] loop5: detected capacity change from 0 to 7 [ 1754.457295][T30168] loop5: p1 < > p3 p4 [ 1754.467824][T30168] loop5: partition table partially beyond EOD, truncated [ 1754.509466][T30168] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 1754.524923][T30189] loop9: detected capacity change from 0 to 7 [ 1754.567619][T30189] Dev loop9: unable to read RDB block 7 [ 1754.595515][T30168] loop5: p4 start 33554432 is beyond EOD, truncated [ 1754.651146][T30189] loop9: AHDI p1 p2 p3 [ 1754.687686][T30189] loop9: partition table partially beyond EOD, truncated [ 1754.735941][T30189] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1754.772219][ T993] hid_parser_main: 101 callbacks suppressed [ 1754.772246][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1754.794386][T30189] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1754.840870][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1754.907114][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1754.976269][T27131] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1755.018589][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1755.070954][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1755.107211][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1755.137484][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1755.159236][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1755.172699][T27131] usb 4-1: device descriptor read/64, error -71 [ 1755.185785][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1755.207363][ T993] cougar 0003:060B:500A.008A: unknown main item tag 0x0 [ 1755.234956][ T993] cougar 0003:060B:500A.008A: unexpected long global item [ 1755.273973][ T993] cougar 0003:060B:500A.008A: parse failed [ 1755.301440][ T993] cougar 0003:060B:500A.008A: probe with driver cougar failed with error -22 [ 1755.354968][ T993] usb 6-1: USB disconnect, device number 58 [ 1755.465512][T27131] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1755.644704][T27131] usb 4-1: device descriptor read/64, error -71 [ 1755.774855][T27131] usb usb4-port1: attempt power cycle [ 1755.944787][T27130] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1756.134765][T27131] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1756.144458][T27130] usb 6-1: Using ep0 maxpacket: 8 [ 1756.159744][T27130] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1756.181282][T27130] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1756.197467][T27130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.215179][T27131] usb 4-1: device descriptor read/8, error -71 [ 1756.221960][T27130] usb 6-1: Product: syz [ 1756.227574][T27130] usb 6-1: Manufacturer: syz [ 1756.232290][T27130] usb 6-1: SerialNumber: syz [ 1756.282608][T27130] usb 6-1: config 0 descriptor?? [ 1756.306263][T27130] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1756.319069][T27130] usb 6-1: setting power ON [ 1756.328317][T27130] dvb-usb: bulk message failed: -22 (2/0) [ 1756.379990][T27130] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1756.419033][T27130] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1756.438111][T27130] usb 6-1: media controller created [ 1756.474952][T27131] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1756.524106][T27130] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1756.547092][T27131] usb 4-1: device descriptor read/8, error -71 [ 1756.558440][T30204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.607725][T30204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.642717][T30204] dvb-usb: bulk message failed: -22 (3/0) [ 1756.669111][T30204] cxusb: i2c rd: len=147 is too big! [ 1756.669111][T30204] [ 1756.675427][T27131] usb usb4-port1: unable to enumerate USB device [ 1756.690401][T30204] cxusb: i2c rd: len=180 is too big! [ 1756.690401][T30204] [ 1756.718048][T27128] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1756.742128][T27130] usb 6-1: selecting invalid altsetting 6 [ 1756.756606][T27128] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1756.770364][T27130] usb 6-1: digital interface selection failed (-22) [ 1756.793150][T27130] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1756.823371][T27130] usb 6-1: setting power OFF [ 1756.842817][T27130] dvb-usb: bulk message failed: -22 (2/0) [ 1756.868774][T27130] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1756.902936][T27130] (NULL device *): no alternate interface [ 1756.945526][T27128] usb 3-1: USB disconnect, device number 120 [ 1757.039861][T27130] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1757.116174][T27130] usb 6-1: USB disconnect, device number 59 [ 1757.215692][T28130] udevd[28130]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1757.824522][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1758.006783][T27128] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1758.145332][ T7403] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1758.164524][T27130] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1758.186410][T27128] usb 6-1: Using ep0 maxpacket: 16 [ 1758.197686][T27128] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.209811][T27128] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1758.221727][T27128] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1758.307431][T27130] usb 3-1: device descriptor read/64, error -71 [ 1758.334103][T30225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.356216][T30225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.384027][T30225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.401111][T30225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.438577][T30225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.457020][T30228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.484845][T30225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.521697][T30228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.554748][T27130] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1758.659653][ T7403] usb 4-1: string descriptor 0 read error: -71 [ 1758.696223][ T7403] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1758.724780][T27130] usb 3-1: device descriptor read/64, error -71 [ 1758.731209][ T7403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.763430][ T7403] usb 4-1: can't set config #1, error -71 [ 1758.780109][ T7403] usb 4-1: USB disconnect, device number 12 [ 1758.855999][T27130] usb usb3-port1: attempt power cycle [ 1759.206223][T27130] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1759.259078][T27130] usb 3-1: device descriptor read/8, error -71 [ 1759.514904][T27130] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1759.565423][T27130] usb 3-1: device descriptor read/8, error -71 [ 1759.675394][T27130] usb usb3-port1: unable to enumerate USB device [ 1759.694940][ T7403] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1759.872349][ T7403] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 196, changing to 4 [ 1759.901698][ T7403] usb 4-1: language id specifier not provided by device, defaulting to English [ 1759.948494][ T7403] usb 4-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 1759.981617][ T7403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.002487][ T7403] usb 4-1: Product: syz [ 1760.018342][ T7403] usb 4-1: Manufacturer: ԗ”括렃鲚蝸高뱏畅瘝ﺗ脔格혥꞊쵰ꈩⷁ [ 1760.044986][ T7403] usb 4-1: SerialNumber: syz [ 1760.770275][ T7403] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1760.811520][ T7403] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1761.122096][ T7403] usb 4-1: USB disconnect, device number 13 [ 1761.355975][T28130] udevd[28130]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1761.663871][T27128] usb 6-1: string descriptor 0 read error: -71 [ 1761.715029][T27128] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1761.757671][T27128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.811530][T27128] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1761.837192][T30264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6969'. [ 1761.862744][T27128] usb 6-1: no configuration chosen from 1 choice [ 1761.902961][T27128] usb 6-1: USB disconnect, device number 60 [ 1762.173039][T30272] FAULT_INJECTION: forcing a failure. [ 1762.173039][T30272] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.216237][ T7403] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1762.229097][T30272] CPU: 1 UID: 0 PID: 30272 Comm: syz.5.6974 Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.229139][T30272] Tainted: [L]=SOFTLOCKUP [ 1762.229149][T30272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1762.229164][T30272] Call Trace: [ 1762.229173][T30272] [ 1762.229183][T30272] dump_stack_lvl+0xe8/0x150 [ 1762.229216][T30272] should_fail_ex+0x412/0x560 [ 1762.229250][T30272] should_failslab+0xa8/0x100 [ 1762.229287][T30272] __kmalloc_cache_noprof+0x88/0x660 [ 1762.229320][T30272] ? tcf_chain_create+0xb0/0x310 [ 1762.229360][T30272] tcf_chain_create+0xb0/0x310 [ 1762.229396][T30272] __tcf_chain_get+0x111/0x3c0 [ 1762.229426][T30272] tc_new_tfilter+0x77e/0x1780 [ 1762.229465][T30272] ? kmem_cache_free+0x182/0x650 [ 1762.229520][T30272] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1762.229567][T30272] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1762.229609][T30272] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1762.229640][T30272] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1762.229669][T30272] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1762.229694][T30272] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1762.229718][T30272] ? ref_tracker_free+0x693/0x840 [ 1762.229750][T30272] ? __pfx_ref_tracker_free+0x10/0x10 [ 1762.229778][T30272] ? __asan_memcpy+0x40/0x70 [ 1762.229804][T30272] ? __skb_clone+0x63/0x7a0 [ 1762.229841][T30272] netlink_rcv_skb+0x232/0x4b0 [ 1762.229867][T30272] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1762.229895][T30272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1762.229936][T30272] ? netlink_deliver_tap+0x2e/0x1b0 [ 1762.229962][T30272] ? netlink_deliver_tap+0x2e/0x1b0 [ 1762.229996][T30272] netlink_unicast+0x75c/0x8e0 [ 1762.230032][T30272] netlink_sendmsg+0x813/0xb40 [ 1762.230070][T30272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1762.230101][T30272] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1762.230132][T30272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1762.230166][T30272] ____sys_sendmsg+0x972/0x9f0 [ 1762.230195][T30272] ? __might_fault+0xaf/0x130 [ 1762.230230][T30272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1762.230270][T30272] ? import_iovec+0x73/0xa0 [ 1762.230305][T30272] ___sys_sendmsg+0x2a5/0x360 [ 1762.230333][T30272] ? __lock_acquire+0x6b5/0x2cf0 [ 1762.230363][T30272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1762.230432][T30272] ? __fget_files+0x2a/0x420 [ 1762.230464][T30272] ? __fget_files+0x3a0/0x420 [ 1762.230502][T30272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1762.230534][T30272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1762.230574][T30272] ? __pfx_ksys_write+0x10/0x10 [ 1762.230614][T30272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.230639][T30272] do_syscall_64+0x15f/0xf80 [ 1762.230664][T30272] ? trace_irq_disable+0x3b/0x140 [ 1762.230697][T30272] ? clear_bhb_loop+0x40/0x90 [ 1762.230725][T30272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.230748][T30272] RIP: 0033:0x7f4dffd9cdd9 [ 1762.230769][T30272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.230788][T30272] RSP: 002b:00007f4e00cf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1762.230811][T30272] RAX: ffffffffffffffda RBX: 00007f4e00015fa0 RCX: 00007f4dffd9cdd9 [ 1762.230828][T30272] RDX: 0000000000040082 RSI: 0000200000000140 RDI: 0000000000000004 [ 1762.230842][T30272] RBP: 00007f4e00cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.230856][T30272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.230869][T30272] R13: 00007f4e00016038 R14: 00007f4e00015fa0 R15: 00007f4e0013fa48 [ 1762.230903][T30272] [ 1762.645176][ T30] audit: type=1326 audit(1777506555.596:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30269 comm="syz.3.6973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdf479cdd9 code=0x0 [ 1762.755363][ T7403] usb 3-1: Using ep0 maxpacket: 8 [ 1762.826402][ T7403] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.842025][ T7403] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1762.856022][ T7403] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1762.863339][ T7403] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1762.873833][ T7403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.902792][ T7403] usb 3-1: config 0 descriptor?? [ 1763.336635][ T7403] kye 0003:0458:0138.008B: unexpected long global item [ 1763.359487][ T7403] kye 0003:0458:0138.008B: parse failed [ 1763.381286][ T7403] kye 0003:0458:0138.008B: probe with driver kye failed with error -22 [ 1763.658820][ T7403] usb 3-1: USB disconnect, device number 125 [ 1764.340908][T30297] netlink: 372 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1764.640502][T30307] FAULT_INJECTION: forcing a failure. [ 1764.640502][T30307] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.686481][T30307] CPU: 1 UID: 0 PID: 30307 Comm: syz.2.6986 Tainted: G L syzkaller #0 PREEMPT(full) [ 1764.686517][T30307] Tainted: [L]=SOFTLOCKUP [ 1764.686525][T30307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1764.686539][T30307] Call Trace: [ 1764.686548][T30307] [ 1764.686558][T30307] dump_stack_lvl+0xe8/0x150 [ 1764.686590][T30307] should_fail_ex+0x412/0x560 [ 1764.686623][T30307] should_failslab+0xa8/0x100 [ 1764.686659][T30307] __kmalloc_cache_noprof+0x88/0x660 [ 1764.686692][T30307] ? tcf_proto_create+0x65/0x330 [ 1764.686730][T30307] tcf_proto_create+0x65/0x330 [ 1764.686767][T30307] tc_new_tfilter+0x12ff/0x1780 [ 1764.686825][T30307] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1764.686870][T30307] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1764.686912][T30307] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1764.686942][T30307] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1764.686971][T30307] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1764.687007][T30307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1764.687030][T30307] ? ref_tracker_free+0x693/0x840 [ 1764.687067][T30307] ? __pfx_ref_tracker_free+0x10/0x10 [ 1764.687094][T30307] ? __asan_memcpy+0x40/0x70 [ 1764.687120][T30307] ? __skb_clone+0x63/0x7a0 [ 1764.687155][T30307] netlink_rcv_skb+0x232/0x4b0 [ 1764.687185][T30307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1764.687212][T30307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1764.687252][T30307] ? netlink_deliver_tap+0x2e/0x1b0 [ 1764.687279][T30307] ? netlink_deliver_tap+0x2e/0x1b0 [ 1764.687312][T30307] netlink_unicast+0x75c/0x8e0 [ 1764.687347][T30307] netlink_sendmsg+0x813/0xb40 [ 1764.687387][T30307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1764.687418][T30307] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1764.687448][T30307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1764.687481][T30307] ____sys_sendmsg+0x972/0x9f0 [ 1764.687516][T30307] ? __might_fault+0xaf/0x130 [ 1764.687551][T30307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1764.687590][T30307] ? import_iovec+0x73/0xa0 [ 1764.687625][T30307] ___sys_sendmsg+0x2a5/0x360 [ 1764.687653][T30307] ? __lock_acquire+0x6b5/0x2cf0 [ 1764.687682][T30307] ? __pfx____sys_sendmsg+0x10/0x10 [ 1764.687749][T30307] ? __fget_files+0x2a/0x420 [ 1764.687774][T30307] ? __fget_files+0x3a0/0x420 [ 1764.687811][T30307] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1764.687842][T30307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1764.687882][T30307] ? __pfx_ksys_write+0x10/0x10 [ 1764.687923][T30307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.687947][T30307] do_syscall_64+0x15f/0xf80 [ 1764.687973][T30307] ? trace_irq_disable+0x3b/0x140 [ 1764.688038][T30307] ? clear_bhb_loop+0x40/0x90 [ 1764.688065][T30307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.688088][T30307] RIP: 0033:0x7f485c39cdd9 [ 1764.688108][T30307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.688128][T30307] RSP: 002b:00007f485d2cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1764.688151][T30307] RAX: ffffffffffffffda RBX: 00007f485c615fa0 RCX: 00007f485c39cdd9 [ 1764.688168][T30307] RDX: 0000000000040082 RSI: 0000200000000140 RDI: 0000000000000004 [ 1764.688182][T30307] RBP: 00007f485d2cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.688195][T30307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.688209][T30307] R13: 00007f485c616038 R14: 00007f485c615fa0 R15: 00007f485c73fa48 [ 1764.688241][T30307] [ 1765.094478][T27130] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1765.164055][T30312] netlink: 'syz.2.6987': attribute type 4 has an invalid length. [ 1765.277303][T27130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.288368][T27130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1765.298712][T27130] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1765.311838][T27130] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1765.321247][T27130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.333768][T27130] usb 6-1: config 0 descriptor?? [ 1765.389300][ T30] audit: type=1326 audit(1777506558.346:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30313 comm="syz.2.6988" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f485c39cdd9 code=0x0 [ 1765.760491][T27130] hid_parser_main: 101 callbacks suppressed [ 1765.764217][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.787402][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.796416][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.805303][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.813208][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.833058][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.844456][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.855052][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.872484][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.890697][T27130] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x0 [ 1765.996837][T27130] plantronics 0003:047F:FFFF.008C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1766.075562][T30303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.111113][T30303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.411296][T30331] loop4: detected capacity change from 0 to 7 [ 1766.422110][T30331] Dev loop4: unable to read RDB block 7 [ 1766.434064][T30331] loop4: unable to read partition table [ 1766.445943][T30331] loop4: partition table beyond EOD, truncated [ 1766.475582][T30331] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1766.714218][T27130] usb 6-1: USB disconnect, device number 61 [ 1766.774845][T27127] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1766.954942][T27127] usb 3-1: Using ep0 maxpacket: 8 [ 1766.986001][T27127] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1767.029950][T27127] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1767.062463][T27127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.098776][T27127] usb 3-1: Product: syz [ 1767.120326][T27127] usb 3-1: Manufacturer: syz [ 1767.140338][T27127] usb 3-1: SerialNumber: syz [ 1767.172493][T30337] FAULT_INJECTION: forcing a failure. [ 1767.172493][T30337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.209629][T27127] usb 3-1: config 0 descriptor?? [ 1767.245969][T27127] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1767.253039][T30337] CPU: 0 UID: 0 PID: 30337 Comm: syz.3.6996 Tainted: G L syzkaller #0 PREEMPT(full) [ 1767.253075][T30337] Tainted: [L]=SOFTLOCKUP [ 1767.253085][T30337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1767.253097][T30337] Call Trace: [ 1767.253106][T30337] [ 1767.253116][T30337] dump_stack_lvl+0xe8/0x150 [ 1767.253147][T30337] should_fail_ex+0x412/0x560 [ 1767.253180][T30337] _copy_to_user+0x31/0xb0 [ 1767.253214][T30337] simple_read_from_buffer+0xe1/0x170 [ 1767.253246][T30337] proc_fail_nth_read+0x1bb/0x230 [ 1767.253277][T30337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1767.253300][T30337] ? rw_verify_area+0x2a6/0x4d0 [ 1767.253321][T30337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1767.253342][T30337] vfs_read+0x20c/0xa70 [ 1767.253367][T30337] ? __pfx___mutex_lock+0x10/0x10 [ 1767.253387][T30337] ? __pfx_vfs_read+0x10/0x10 [ 1767.253410][T30337] ? __fget_files+0x2a/0x420 [ 1767.253431][T30337] ? __fget_files+0x3a0/0x420 [ 1767.253449][T30337] ? __fget_files+0x2a/0x420 [ 1767.253473][T30337] ksys_read+0x150/0x270 [ 1767.253493][T30337] ? __fget_files+0x2a/0x420 [ 1767.253513][T30337] ? __pfx_ksys_read+0x10/0x10 [ 1767.253534][T30337] ? fdget+0x183/0x1e0 [ 1767.253557][T30337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.253574][T30337] do_syscall_64+0x15f/0xf80 [ 1767.253592][T30337] ? trace_irq_disable+0x3b/0x140 [ 1767.253615][T30337] ? clear_bhb_loop+0x40/0x90 [ 1767.253634][T30337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.253650][T30337] RIP: 0033:0x7fbdf475d60e [ 1767.253665][T30337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1767.253678][T30337] RSP: 002b:00007fbdf55d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1767.253699][T30337] RAX: ffffffffffffffda RBX: 00007fbdf55da6c0 RCX: 00007fbdf475d60e [ 1767.253712][T30337] RDX: 000000000000000f RSI: 00007fbdf55da0a0 RDI: 0000000000000003 [ 1767.253722][T30337] RBP: 00007fbdf55da090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.253731][T30337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.253741][T30337] R13: 00007fbdf4a16038 R14: 00007fbdf4a15fa0 R15: 00007fbdf4b3fa48 [ 1767.253765][T30337] [ 1767.671312][T30349] loop9: detected capacity change from 0 to 7 [ 1767.707456][T30349] Dev loop9: unable to read RDB block 7 [ 1767.737610][T30349] loop9: unable to read partition table [ 1767.759221][T30349] loop9: partition table beyond EOD, truncated [ 1767.776033][T30349] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1768.156513][T27127] gspca_zc3xx: reg_w_i err -71 [ 1768.321036][T30363] sg_write: data in/out 384728/56 bytes for SCSI command 0x0-- guessing data in; [ 1768.321036][T30363] program syz.5.7005 not setting count and/or reply_len properly [ 1768.744699][T27127] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1768.751342][T27127] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1768.763030][T27127] usb 3-1: USB disconnect, device number 126 [ 1768.812335][T30367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7006'. [ 1768.840272][T30367] ipvlan2: entered allmulticast mode [ 1768.847541][T30367] syz_tun: entered allmulticast mode [ 1768.955359][T27128] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1769.114844][T27128] usb 6-1: Using ep0 maxpacket: 32 [ 1769.133752][T27128] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1769.151224][T30373] syzkaller0: entered promiscuous mode [ 1769.162391][T27128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.173500][T30373] syzkaller0: entered allmulticast mode [ 1769.180657][T27128] usb 6-1: Product: 嵚ᦧ怦猍䍁㋓贡㈈ඞ̙粗彏ꎾ鄩⼃䔄ꄣ攠䟏䆃란⒗詹譸㳴藆Å怞銙肂턘၅馰륝蝙䈛爵Ꙡ޸싾◦呢덧틍᧰劳ꚫ묙⹍纗뒜勔ˁ猈ꟻ㗪㝮熦蜷䱦즱엻뿞仸碄呹沓蒮敶沩ꤙ㇓挓⧦⟽裫쓲ק頡羞ഁ젻䷄럣盧鞄㠖䌭鷤稔◧Ⴥޠ꿾ḕ [ 1769.222086][T30375] TC_ACT_REPEAT abuse ? [ 1769.257454][T27128] usb 6-1: Manufacturer: 췹శﳄ෭悡茘죕촅磍㢞떺േ党儱ᣓ斢宠錠떕雓셼ℏ虄Ꮭꏟ [ 1769.293353][T27128] usb 6-1: SerialNumber: syz [ 1769.546405][T27128] usb 6-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1769.749758][T27128] usb 6-1: incorrect wMaxPacketSize 0x40 for BADD profile [ 1769.787996][T30381] loop9: detected capacity change from 0 to 7 [ 1769.806782][T30381] Dev loop9: unable to read RDB block 7 [ 1769.823224][T30381] loop9: unable to read partition table [ 1769.849114][T30381] loop9: partition table beyond EOD, truncated [ 1769.860104][T27128] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1769.870026][T30381] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1769.880173][ T7403] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1769.920025][T27128] usb 6-1: USB disconnect, device number 62 [ 1770.036862][T28130] udevd[28130]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1770.057997][ T7403] usb 3-1: Using ep0 maxpacket: 8 [ 1770.069525][ T7403] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1770.084352][ T7403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.110054][ T7403] usb 3-1: Product: syz [ 1770.119952][ T7403] usb 3-1: Manufacturer: syz [ 1770.125317][ T7403] usb 3-1: SerialNumber: syz [ 1770.137665][ T7403] usb 3-1: config 0 descriptor?? [ 1770.349749][ T7403] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1770.531208][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7015'. [ 1771.005046][T27130] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1771.163894][T30377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.191206][T27130] usb 4-1: Using ep0 maxpacket: 32 [ 1771.211751][T30377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.222865][T27130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.242222][T27130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1771.263410][T27130] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1771.298193][T27130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.368143][T27130] usb 4-1: config 0 descriptor?? [ 1771.545026][T30401] netlink: 'syz.5.7021': attribute type 1 has an invalid length. [ 1771.613966][ T30] audit: type=1326 audit(1777506564.566:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.7.7019" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f964b79cdd9 code=0x0 [ 1771.955058][T27130] savu 0003:1E7D:2D5A.008D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1772.072854][T27130] usb 4-1: USB disconnect, device number 14 [ 1772.085012][T30377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.188000][T30377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.342697][T30420] loop9: detected capacity change from 0 to 7 [ 1772.364908][ T7403] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1772.434563][T30420] Dev loop9: unable to read RDB block 7 [ 1772.461716][ T7403] usb 3-1: USB disconnect, device number 127 [ 1772.480786][T30420] loop9: unable to read partition table [ 1772.524055][T30420] loop9: partition table beyond EOD, truncated [ 1772.547429][T30415] fido_id[30415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1772.579971][T30420] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1773.248953][T30437] loop4: detected capacity change from 0 to 7 [ 1773.296844][T30437] Dev loop4: unable to read RDB block 7 [ 1773.325730][T30437] loop4: unable to read partition table [ 1773.354753][T30437] loop4: partition table beyond EOD, truncated [ 1773.380929][T30437] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1774.264740][T27121] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1774.424835][T27121] usb 3-1: device descriptor read/64, error -71 [ 1774.465476][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1774.673179][ T30] audit: type=1326 audit(1777506567.626:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30452 comm="syz.0.7036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd86f19cdd9 code=0x0 [ 1774.714523][T27121] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1774.865290][T27121] usb 3-1: device descriptor read/64, error -71 [ 1774.975034][T27121] usb usb3-port1: attempt power cycle [ 1775.303132][T30478] loop4: detected capacity change from 0 to 7 [ 1775.324371][T27121] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1775.335920][T30478] Dev loop4: unable to read RDB block 7 [ 1775.356329][T30478] loop4: unable to read partition table [ 1775.376659][T27121] usb 3-1: device descriptor read/8, error -71 [ 1775.386700][T30478] loop4: partition table beyond EOD, truncated [ 1775.393162][T30478] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1775.656978][T27121] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1775.707434][T27121] usb 3-1: device descriptor read/8, error -71 [ 1775.835138][T27121] usb usb3-port1: unable to enumerate USB device [ 1776.149805][T30496] loop9: detected capacity change from 0 to 7 [ 1776.172302][T30496] Dev loop9: unable to read RDB block 7 [ 1776.193989][T30496] loop9: AHDI p1 p2 p3 [ 1776.222455][T30496] loop9: partition table partially beyond EOD, truncated [ 1776.266595][T30496] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1776.335239][T30496] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1776.702145][T30503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1776.744778][T30506] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1777.059084][T30509] sctp: [Deprecated]: syz.5.7056 (pid 30509) Use of int in max_burst socket option. [ 1777.059084][T30509] Use struct sctp_assoc_value instead [ 1778.064558][T27130] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1778.076570][T30534] xt_hashlimit: size too large, truncated to 1048576 [ 1778.244432][T27130] usb 6-1: Using ep0 maxpacket: 8 [ 1778.271590][T27130] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.303365][T27130] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1778.372327][T27130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.421141][T27130] usb 6-1: config 0 descriptor?? [ 1778.441081][T30542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.463193][T27130] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1778.494083][T30542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.220697][T30552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1779.695832][T27127] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1779.966330][T27127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.019856][T27127] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1780.065318][T27127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.111185][T27127] usb 4-1: Product: syz [ 1780.131942][T27127] usb 4-1: Manufacturer: syz [ 1780.156720][T27127] usb 4-1: SerialNumber: syz [ 1780.157339][T27130] gspca_vc032x: reg_w err -71 [ 1780.206706][T27127] usb 4-1: config 0 descriptor?? [ 1780.217764][T27130] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 1780.278411][T27127] usb 4-1: No union descriptors [ 1780.316373][T27127] usb 4-1: unsupported MDLM descriptors [ 1780.385347][T27130] usb 6-1: USB disconnect, device number 63 [ 1781.149452][T30563] netlink: 'syz.0.7068': attribute type 10 has an invalid length. [ 1781.252276][T30567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7069'. [ 1783.194654][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1783.289182][ T7403] usb 4-1: USB disconnect, device number 15 [ 1783.377672][T27130] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1783.385777][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1783.398699][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1783.446735][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.450841][T30595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7079'. [ 1783.487457][ T9] usb 3-1: Product: syz [ 1783.497053][ T9] usb 3-1: Manufacturer: syz [ 1783.522937][ T9] usb 3-1: SerialNumber: syz [ 1783.547516][ T9] usb 3-1: config 0 descriptor?? [ 1783.584970][T27130] usb 6-1: Using ep0 maxpacket: 8 [ 1783.604500][T27130] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1783.623546][T27130] usb 6-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1783.652651][T27130] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1783.676436][T27130] usb 6-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1783.700634][T27130] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1783.712625][T27130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.721741][T27130] usb 6-1: Product: syz [ 1783.727228][T27130] usb 6-1: Manufacturer: syz [ 1783.732146][T27130] usb 6-1: SerialNumber: syz [ 1783.758417][T27130] hso 6-1:6.0: Can't find BULK endpoints [ 1783.784418][ T7403] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1783.927466][ T7403] usb 4-1: device descriptor read/64, error -71 [ 1783.967503][T30591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.993264][T27128] usb 6-1: USB disconnect, device number 64 [ 1784.024948][T30591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.186969][ T7403] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1784.324486][ T7403] usb 4-1: device descriptor read/64, error -71 [ 1784.458810][ T7403] usb usb4-port1: attempt power cycle [ 1784.814791][ T7403] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1784.847294][ T7403] usb 4-1: device descriptor read/8, error -71 [ 1785.085251][ T7403] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1785.137147][ T7403] usb 4-1: device descriptor read/8, error -71 [ 1785.265897][ T7403] usb usb4-port1: unable to enumerate USB device [ 1786.235293][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1786.306743][ T9] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1786.377470][ T9] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1786.377470][ T9] Please send a copy of this message to and [ 1786.729140][ T9] usb 3-1: USB disconnect, device number 8 [ 1786.954781][T27122] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1787.324374][T22332] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1787.371350][T30656] netlink: 'syz.0.7095': attribute type 2 has an invalid length. [ 1787.403679][T30656] netlink: 'syz.0.7095': attribute type 8 has an invalid length. [ 1787.433933][T30656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7095'. [ 1787.509635][T22332] usb 6-1: Using ep0 maxpacket: 8 [ 1787.535480][T22332] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1787.562086][T22332] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1787.615117][T22332] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1787.648843][T22332] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1787.671684][T22332] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1787.702399][ T30] audit: type=1326 audit(1777506580.626:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30657 comm="syz.3.7096" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdf479cdd9 code=0x0 [ 1787.735877][T22332] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1787.761429][T22332] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1787.770299][T22332] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1787.782572][T22332] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1787.851588][T22332] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1787.886078][T22332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.894748][T22332] usb 6-1: Product: syz [ 1787.899259][T22332] usb 6-1: Manufacturer: syz [ 1787.904140][T22332] usb 6-1: SerialNumber: syz [ 1788.276618][T30667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7098'. [ 1788.370962][T30667] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1790.161016][T22332] adutux 6-1:168.0: interrupt endpoints not found [ 1790.238982][T22332] usb 6-1: USB disconnect, device number 65 [ 1790.378552][T30691] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1790.429765][T30694] netlink: 'syz.5.7106': attribute type 11 has an invalid length. [ 1791.235169][T30700] loop9: detected capacity change from 0 to 7 [ 1791.285197][T30700] Dev loop9: unable to read RDB block 7 [ 1791.311003][T30700] loop9: AHDI p1 p2 p3 [ 1791.333112][T30700] loop9: partition table partially beyond EOD, truncated [ 1791.362066][T30700] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1791.399747][T30700] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1791.746178][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.753556][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.074800][T27121] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1792.212419][T30712] Invalid argument reading file caps for ./file0 [ 1792.234582][T27121] usb 6-1: device descriptor read/64, error -71 [ 1792.258894][T30712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1792.505276][T27121] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1792.664552][T27121] usb 6-1: device descriptor read/64, error -71 [ 1792.722176][T30722] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7113'. [ 1792.747790][T30722] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1792.796078][T27121] usb usb6-port1: attempt power cycle [ 1793.154337][T27121] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1793.185166][T22332] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1793.198533][T27121] usb 6-1: device descriptor read/8, error -71 [ 1793.368732][T30734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7117'. [ 1793.435673][T22332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1793.474366][T27121] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1793.480189][T22332] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1793.532924][T22332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.546223][T27121] usb 6-1: device descriptor read/8, error -71 [ 1793.564509][T22332] usb 3-1: config 0 descriptor?? [ 1793.604067][T30728] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1793.694908][T27121] usb usb6-port1: unable to enumerate USB device [ 1793.817472][T30742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.863519][T30742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.891833][T30742] netlink: 9 bytes leftover after parsing attributes in process `syz.7.7119'. [ 1794.233704][T22332] hid_parser_main: 5 callbacks suppressed [ 1794.233734][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.293294][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.301816][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.319867][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.332910][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.348262][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.358508][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.371095][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.381345][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.393422][T22332] hid-picolcd 0003:04D8:C002.008E: unknown main item tag 0x0 [ 1794.420220][T22332] hid-picolcd 0003:04D8:C002.008E: item fetching failed at offset 231/483 [ 1794.443625][T22332] hid-picolcd 0003:04D8:C002.008E: device report parse failed [ 1794.462424][T22332] hid-picolcd 0003:04D8:C002.008E: probe with driver hid-picolcd failed with error -22 [ 1794.851727][ T7403] IPVS: starting estimator thread 0... [ 1794.954649][T30751] IPVS: using max 27 ests per chain, 64800 per kthread [ 1795.156511][ T7403] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1795.332515][ T7403] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 196, changing to 4 [ 1795.382306][ T7403] usb 4-1: language id specifier not provided by device, defaulting to English [ 1795.423677][ T7403] usb 4-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 1795.467321][ T7403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.499237][ T7403] usb 4-1: Product: syz [ 1795.516494][ T7403] usb 4-1: Manufacturer: ԗ”括렃鲚蝸高뱏畅瘝ﺗ脔格혥꞊쵰ꈩⷁ [ 1795.549641][ T7403] usb 4-1: SerialNumber: syz [ 1795.855558][T30765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1795.878698][T30765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1795.897671][T30765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1795.918638][T30765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1795.933539][T30765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1796.378041][ T7403] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1796.413223][ T7403] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1796.606627][ T7403] usb 4-1: USB disconnect, device number 21 [ 1796.759019][T28130] udevd[28130]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1797.144075][T30782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7129'. [ 1797.330394][T30778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1797.337852][T30778] IPv6: NLM_F_CREATE should be set when creating new route [ 1797.701255][T30786] loop4: detected capacity change from 0 to 7 [ 1797.738687][ T7403] usb 3-1: USB disconnect, device number 9 [ 1797.758799][T30786] Dev loop4: unable to read RDB block 7 [ 1797.802227][T30786] loop4: unable to read partition table [ 1797.876801][T30786] loop4: partition table beyond EOD, truncated [ 1797.885673][T30786] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1798.075037][T30765] Bluetooth: hci1: command tx timeout [ 1798.356882][ T7403] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1798.466286][T22214] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.537286][ T7403] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1798.578062][ T7403] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.610768][ T7403] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1798.634487][ T7403] usb 3-1: config 150 has no interface number 0 [ 1798.649244][ T7403] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1798.675782][ T7403] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1798.703570][ T7403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.736527][ T7403] usb 3-1: Product: syz [ 1798.750482][ T7403] usb 3-1: Manufacturer: syz [ 1798.783488][ T7403] usb 3-1: SerialNumber: syz [ 1798.861870][T30797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7134'. [ 1798.888803][T30797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7134'. [ 1798.972232][T30797] bridge0: entered promiscuous mode [ 1799.009170][T30797] syz_tun: entered promiscuous mode [ 1799.037888][T30789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.055573][T30789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.079123][T30789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.131988][T30789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.177306][T30789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.217081][T30789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.228521][T30789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.239700][T30789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.250348][T30789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.260773][T30789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.286535][ T7403] xr_serial 3-1:150.204: skipping garbage [ 1799.301061][T22214] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.315015][ T7403] usb 3-1: USB disconnect, device number 10 [ 1799.573967][T30805] loop4: detected capacity change from 0 to 7 [ 1799.614894][T30805] Dev loop4: unable to read RDB block 7 [ 1799.646252][T30805] loop4: unable to read partition table [ 1799.663237][T22214] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.678133][T30805] loop4: partition table beyond EOD, truncated [ 1799.706968][T30805] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1800.041067][T22214] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.152769][T30765] Bluetooth: hci1: command tx timeout [ 1800.491626][T30769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.529657][T30769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.557065][T30769] bridge_slave_0: entered allmulticast mode [ 1800.595680][T30769] bridge_slave_0: entered promiscuous mode [ 1800.627530][T30769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.656749][T30769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.677298][T30769] bridge_slave_1: entered allmulticast mode [ 1800.691133][T30769] bridge_slave_1: entered promiscuous mode [ 1801.449685][T30769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.561305][T30769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.585742][T22332] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1801.683621][T30826] netlink: 'syz.3.7139': attribute type 10 has an invalid length. [ 1801.832541][T30835] loop4: detected capacity change from 0 to 7 [ 1801.839642][T22332] usb 3-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 1801.858417][T30835] Dev loop4: unable to read RDB block 7 [ 1801.915048][T30835] loop4: unable to read partition table [ 1802.019772][T30835] loop4: partition table beyond EOD, truncated [ 1802.105478][T22332] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1802.134934][T30835] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1802.160966][T30769] team0: Port device team_slave_0 added [ 1802.240423][T30765] Bluetooth: hci1: command tx timeout [ 1802.637547][T22332] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1802.674762][T22332] usb 3-1: New USB device strings: Mfr=0, Product=57, SerialNumber=1 [ 1802.694701][T22332] usb 3-1: Product: syz [ 1802.711839][T22332] usb 3-1: SerialNumber: syz [ 1802.740568][T30769] team0: Port device team_slave_1 added [ 1802.780906][T22332] usb 3-1: config 0 descriptor?? [ 1802.913462][T22332] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1803.210358][T30841] loop9: detected capacity change from 0 to 7 [ 1803.255754][T30839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7142'. [ 1803.279931][T30841] Dev loop9: unable to read RDB block 7 [ 1803.303948][T30841] loop9: AHDI p1 p2 p3 [ 1803.324398][T30841] loop9: partition table partially beyond EOD, truncated [ 1803.407602][T30841] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1803.476955][T30841] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1803.953734][T30852] loop9: detected capacity change from 0 to 7 [ 1803.983388][T30852] Dev loop9: unable to read RDB block 7 [ 1804.018604][T30852] loop9: unable to read partition table [ 1804.072578][T30852] loop9: partition table beyond EOD, truncated [ 1804.105725][T30852] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1804.217131][T22214] bond3 (unregistering): (slave vti0): Releasing backup interface [ 1804.275225][T22214] vti0 (unregistering): left promiscuous mode [ 1804.304734][T30765] Bluetooth: hci1: command tx timeout [ 1804.909280][T22214] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1805.535234][T22214] bond0 (unregistering): Released all slaves [ 1805.590523][T22214] bond1 (unregistering): Released all slaves [ 1805.691575][T22214] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1805.736415][T22214] bond2 (unregistering): Released all slaves [ 1805.755366][T27130] usb 3-1: USB disconnect, device number 11 [ 1805.857043][T22214] bond3 (unregistering): Released all slaves [ 1805.898836][T22214] bond4 (unregistering): Released all slaves [ 1805.953281][T22214] bond5 (unregistering): Released all slaves [ 1806.001020][T30769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1806.024444][T30769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1806.066956][T30769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1806.124010][T30769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1806.133662][T30769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1806.202004][T30769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1806.227264][T27130] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1806.277453][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1806.377283][T27130] usb 3-1: device descriptor read/64, error -71 [ 1806.547996][T30769] hsr_slave_0: entered promiscuous mode [ 1806.550938][T30769] hsr_slave_1: entered promiscuous mode [ 1806.634983][T27130] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1806.683140][T22214] tipc: Left network mode [ 1806.768694][T27130] usb 3-1: device descriptor read/64, error -71 [ 1806.833378][T30886] loop4: detected capacity change from 0 to 7 [ 1806.875048][T27130] usb usb3-port1: attempt power cycle [ 1806.885942][T30886] Dev loop4: unable to read RDB block 7 [ 1806.885979][T30886] loop4: unable to read partition table [ 1806.886170][T30886] loop4: partition table beyond EOD, truncated [ 1806.886187][T30886] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1806.962669][T22214] IPVS: stopping master sync thread 23575 ... [ 1807.227455][T27130] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1807.275721][T27130] usb 3-1: device descriptor read/8, error -71 [ 1807.534550][T27130] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1807.597925][T27130] usb 3-1: device descriptor read/8, error -71 [ 1807.735874][T27130] usb usb3-port1: unable to enumerate USB device [ 1807.873128][T30900] netlink: 'syz.3.7155': attribute type 1 has an invalid length. [ 1808.321317][T30900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1808.374850][T27122] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1808.385149][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1808.424789][T30903] bond1: (slave veth0_to_bond): making interface the new active one [ 1808.451707][T30903] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1808.570512][T27122] usb 4-1: Using ep0 maxpacket: 32 [ 1808.588399][T27122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.640723][T27122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.684537][T27122] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1808.721476][T27122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.764707][T27122] usb 4-1: config 0 descriptor?? [ 1808.856887][T27122] hub 4-1:0.0: USB hub found [ 1809.017582][T27122] hub 4-1:0.0: 1 port detected [ 1809.503637][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1809.732908][T22214] hsr_slave_0: left promiscuous mode [ 1809.749335][T27127] hub 4-1:0.0: activate --> -90 [ 1809.758889][T22214] hsr_slave_1: left promiscuous mode [ 1809.808517][T22214] veth1_macvtap: left promiscuous mode [ 1809.841926][T22214] veth0_macvtap: left promiscuous mode [ 1810.152267][T30898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7155'. [ 1810.262988][T30935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7162'. [ 1811.547351][T27127] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 1811.602415][T27127] usb 4-1-port1: config error [ 1811.640326][T27127] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 1811.676947][T27127] usb 4-1-port1: connect-debounce failed [ 1811.707649][T27127] usb 4-1-port1: cannot disable (err = -32) [ 1811.829195][T22332] usb 4-1: USB disconnect, device number 22 [ 1812.196593][T30957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7168'. [ 1812.366854][T22332] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1812.532354][T22332] usb 4-1: device descriptor read/64, error -71 [ 1812.630757][T30965] loop2: detected capacity change from 0 to 7 [ 1812.642958][T22214] IPVS: stop unused estimator thread 0... [ 1812.669955][T30965] Dev loop2: unable to read RDB block 7 [ 1812.705107][T30965] loop2: AHDI p3 [ 1812.715167][T30965] loop2: partition table partially beyond EOD, truncated [ 1812.815329][T22332] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1812.962622][T30969] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7171'. [ 1812.977045][T22332] usb 4-1: device descriptor read/64, error -71 [ 1813.042859][T30970] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7171'. [ 1813.094772][T22332] usb usb4-port1: attempt power cycle [ 1813.333241][ T30] audit: type=1326 audit(1777506606.266:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1813.444660][T22332] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1813.462485][ T30] audit: type=1326 audit(1777506606.286:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1813.515564][T30769] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1813.526426][T22332] usb 4-1: device descriptor read/8, error -71 [ 1813.569992][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1813.582424][ T30] audit: type=1326 audit(1777506606.286:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1813.621220][T30769] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1813.672918][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.693364][ T30] audit: type=1326 audit(1777506606.286:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1813.767062][ T30] audit: type=1326 audit(1777506606.286:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1813.790688][T22332] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1813.806738][T30769] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1813.836197][T22332] usb 4-1: device descriptor read/8, error -71 [ 1813.862287][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1813.871884][ T30] audit: type=1326 audit(1777506606.286:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1813.908057][T30769] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1813.919333][ T30] audit: type=1326 audit(1777506606.286:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1813.947120][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1813.964954][T22332] usb usb4-port1: unable to enumerate USB device [ 1813.980630][ T30] audit: type=1326 audit(1777506606.326:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1814.085151][ T7403] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1814.094875][ T30] audit: type=1326 audit(1777506606.326:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485c39cdd9 code=0x7ffc0000 [ 1814.246094][ T7403] usb 3-1: Using ep0 maxpacket: 8 [ 1814.257691][ T7403] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1814.281499][ T7403] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1814.319314][ T7403] usb 3-1: string descriptor 0 read error: -22 [ 1814.345570][ T7403] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1814.399115][ T7403] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1814.468379][ T7403] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1814.531345][ T7403] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1814.560219][T30769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.578176][ T7403] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1814.606858][ T7403] usb 3-1: media controller created [ 1814.618120][T30769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.643411][ T7403] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1814.701107][T22200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.708418][T22200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.819219][T31005] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7178'. [ 1814.910709][T22190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.918017][T22190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1815.590596][T31016] dlm: no locking on control device [ 1815.747005][ T7403] zl10353_read_register: readreg error (reg=127, ret==0) [ 1815.841640][T30769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1816.088257][ T7403] usb 3-1: USB disconnect, device number 16 [ 1816.288717][T30769] veth0_vlan: entered promiscuous mode [ 1816.375675][T30769] veth1_vlan: entered promiscuous mode [ 1816.638388][T30769] veth0_macvtap: entered promiscuous mode [ 1816.859407][T30769] veth1_macvtap: entered promiscuous mode [ 1817.003730][T30769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1817.335648][T30769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1817.447380][T22190] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.465635][T31040] netlink: 'syz.3.7184': attribute type 1 has an invalid length. [ 1817.483989][T22190] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.822369][T31040] bond2: entered promiscuous mode [ 1817.846309][T31040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1817.891777][T22190] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.065736][T31044] bond2: (slave bridge1): making interface the new active one [ 1818.106145][T31044] bridge1: entered promiscuous mode [ 1818.153098][T31044] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1818.161552][T22332] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1818.188418][T22190] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.368619][T22332] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1818.411956][T27128] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1818.457174][T22332] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 1818.530235][T22332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1818.606922][T27128] usb 3-1: device descriptor read/64, error -71 [ 1818.639415][T22332] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1818.667276][T31065] loop4: detected capacity change from 0 to 7 [ 1818.679346][T22332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.701373][T22332] usb 4-1: Product: syz [ 1818.718746][T22332] usb 4-1: Manufacturer: syz [ 1818.718845][T31065] Dev loop4: unable to read RDB block 7 [ 1818.730370][T22332] usb 4-1: SerialNumber: syz [ 1818.756563][T22332] usb 4-1: config 0 descriptor?? [ 1818.774896][T31040] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1818.784796][T31065] loop4: unable to read partition table [ 1818.798509][T22332] usb 4-1: ucan: probing device on interface #0 [ 1818.810405][T22207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1818.813790][T31065] loop4: partition table beyond EOD, [ 1818.828388][T22332] usb 4-1: ucan: invalid endpoint configuration [ 1818.835720][T31065] truncated [ 1818.843842][T22207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1818.846898][T31065] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1818.866205][T22332] usb 4-1: ucan: probe failed; try to update the device firmware [ 1818.874604][T27128] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1819.006260][T27131] usb 4-1: USB disconnect, device number 27 [ 1819.019129][T22207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.038680][T27128] usb 3-1: device descriptor read/64, error -71 [ 1819.060462][T22207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.188465][T27128] usb usb3-port1: attempt power cycle [ 1819.544990][T27128] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1819.574750][T31076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7190'. [ 1819.605419][T27128] usb 3-1: device descriptor read/8, error -71 [ 1819.762425][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1819.864758][T27128] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1819.919276][T27128] usb 3-1: device descriptor read/8, error -71 [ 1820.055829][T27128] usb usb3-port1: unable to enumerate USB device [ 1820.139887][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1820.139907][ T30] audit: type=1326 audit(1777506613.096:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31087 comm="syz.7.7193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f964b79cdd9 code=0x0 [ 1821.443736][T31107] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7199'. [ 1821.454613][T27122] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1821.678344][T27122] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1821.709089][T27122] usb 6-1: config 0 has no interface number 0 [ 1821.739019][T27122] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1821.770341][T27122] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1821.804132][T27122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.870768][T27122] usb 6-1: Product: syz [ 1821.884500][T27122] usb 6-1: Manufacturer: syz [ 1821.899011][T27122] usb 6-1: SerialNumber: syz [ 1821.925144][T27122] usb 6-1: config 0 descriptor?? [ 1822.812970][T31123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.869580][T31123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.933521][T27122] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1823.187475][T31149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7208'. [ 1823.648032][T31158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7210'. [ 1824.545050][T16034] Bluetooth: hci5: command 0x0406 tx timeout [ 1824.653144][T31169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7212'. [ 1825.447065][T31180] loop9: detected capacity change from 0 to 7 [ 1825.486277][T31180] Dev loop9: unable to read RDB block 7 [ 1825.517949][T31180] loop9: AHDI p1 p2 p3 [ 1825.524367][T27131] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1825.542030][T27122] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1825.566210][T31180] loop9: partition table partially beyond EOD, truncated [ 1825.596361][T27122] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1825.615725][T31180] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1825.649312][T27122] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1825.658148][T31180] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1825.687822][T27131] usb 3-1: device descriptor read/64, error -71 [ 1825.716354][T27122] usb 6-1: USB disconnect, device number 70 [ 1825.744184][T31182] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1825.750951][T31182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1825.821802][T31182] vhci_hcd vhci_hcd.0: Device attached [ 1825.839069][T31187] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1825.954473][T27131] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1825.962307][T22332] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1826.054979][ T5749] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 1826.067780][T31189] netlink: 'syz.0.7220': attribute type 3 has an invalid length. [ 1826.104715][T27131] usb 3-1: device descriptor read/64, error -71 [ 1826.144724][T22332] usb 4-1: Using ep0 maxpacket: 8 [ 1826.160882][T22332] usb 4-1: config index 0 descriptor too short (expected 10520, got 45) [ 1826.179661][T22332] usb 4-1: config 7 has too many interfaces: 160, using maximum allowed: 32 [ 1826.206312][T22332] usb 4-1: config 7 has an invalid descriptor of length 233, skipping remainder of the config [ 1826.228588][T27131] usb usb3-port1: attempt power cycle [ 1826.248122][T22332] usb 4-1: config 7 has 0 interfaces, different from the descriptor's value: 160 [ 1826.279269][T22332] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1826.296317][T22332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.538212][T31183] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1826.557554][T31182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.576034][T22200] vhci_hcd vhci_hcd.3: stop threads [ 1826.594170][T22200] vhci_hcd vhci_hcd.3: release socket [ 1826.596061][T27131] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1826.609424][T22200] vhci_hcd vhci_hcd.3: disconnect device [ 1826.615804][T31182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.640218][T22332] usb 4-1: USB disconnect, device number 28 [ 1826.665906][T27131] usb 3-1: device descriptor read/8, error -71 [ 1826.924857][T27131] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1826.963573][T27131] usb 3-1: device descriptor read/8, error -71 [ 1827.085918][T27131] usb usb3-port1: unable to enumerate USB device [ 1827.118177][T31202] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7225'. [ 1827.424995][T27131] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1827.526252][T31218] loop9: detected capacity change from 0 to 7 [ 1827.545576][T31218] Dev loop9: unable to read RDB block 7 [ 1827.559230][T31218] loop9: AHDI p1 p2 p3 [ 1827.568985][T31218] loop9: partition table partially beyond EOD, truncated [ 1827.594051][T31218] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1827.611558][T31218] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1827.627201][T27131] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1827.649286][T27131] usb 6-1: not running at top speed; connect to a high speed hub [ 1827.697907][T27131] usb 6-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1827.734017][T27131] usb 6-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1827.778117][T27131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.802284][T27131] usb 6-1: Product: syz [ 1827.830982][T27131] usb 6-1: Manufacturer: syz [ 1827.854840][T27131] usb 6-1: SerialNumber: syz [ 1828.148904][T31207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.204954][T31207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.230101][T31207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.254590][T31207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.287752][T31207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.362210][T31207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.372138][T31207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.382838][T31207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.392173][T31207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.404787][T31207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.476618][T27131] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1828.523903][T27131] usb 6-1: unit 3 not found! [ 1828.674486][ T993] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1828.757586][T27131] usb 6-1: USB disconnect, device number 71 [ 1828.799992][T31242] loop5: detected capacity change from 0 to 7 [ 1828.832268][T31242] Dev loop5: unable to read RDB block 7 [ 1828.832327][T31242] loop5: unable to read partition table [ 1828.832548][T31242] loop5: partition table beyond EOD, truncated [ 1828.832572][T31242] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1828.843814][ T993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.843877][ T993] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1828.843904][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.861578][ T993] usb 3-1: config 0 descriptor?? [ 1828.953233][ T993] pwc: Askey VC010 type 2 USB webcam detected. [ 1828.990568][T28484] udevd[28484]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1829.207447][ T4992] Dev loop5: unable to read RDB block 7 [ 1829.207491][ T4992] loop5: unable to read partition table [ 1829.207686][ T4992] loop5: partition table beyond EOD, truncated [ 1829.851134][T31248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.859014][T31248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.177357][T31271] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7241'. [ 1830.271299][ T993] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1830.313747][ T993] pwc: recv_control_msg error -32 req 02 val 2700 [ 1830.562166][T31248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.636088][T31248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1831.116208][T31281] loop9: detected capacity change from 0 to 7 [ 1831.147498][T31281] Dev loop9: unable to read RDB block 7 [ 1831.171198][T31281] loop9: AHDI p1 p2 p3 [ 1831.175822][ T5749] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1831.189560][T31281] loop9: partition table partially beyond EOD, truncated [ 1831.211693][T31281] loop9: p1 start 1920169572 is beyond EOD, truncated [ 1831.272710][T31281] loop9: p2 start 1851744889 is beyond EOD, truncated [ 1831.422192][T31257] sit1: entered allmulticast mode [ 1832.079094][T22200] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.118947][T31289] netlink: 'syz.7.7245': attribute type 1 has an invalid length. [ 1832.130171][T22200] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.256807][T31290] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7245'. [ 1832.480085][T31289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1832.554811][T22200] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.593258][T22200] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.880280][T31298] bond3: entered allmulticast mode [ 1833.265438][T31310] fuse: Bad value for 'fd' [ 1833.425894][T31312] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7251'. [ 1833.460547][T31312] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7251'. [ 1833.528657][ T993] pwc: recv_control_msg error -71 req 04 val 1000 [ 1833.548910][ T993] pwc: recv_control_msg error -71 req 04 val 1300 [ 1833.577494][ T993] pwc: recv_control_msg error -71 req 04 val 1400 [ 1833.603485][ T993] pwc: recv_control_msg error -71 req 02 val 2000 [ 1833.632070][ T993] pwc: recv_control_msg error -71 req 02 val 2100 [ 1833.658053][ T993] pwc: recv_control_msg error -71 req 04 val 1500 [ 1833.682153][ T993] pwc: recv_control_msg error -71 req 02 val 2500 [ 1833.707641][ T993] pwc: recv_control_msg error -71 req 02 val 2400 [ 1833.716937][T31265] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1833.744055][ T993] pwc: recv_control_msg error -71 req 02 val 2600 [ 1833.776808][ T993] pwc: recv_control_msg error -71 req 02 val 2900 [ 1833.799991][ T993] pwc: recv_control_msg error -71 req 02 val 2800 [ 1833.829634][ T993] pwc: recv_control_msg error -71 req 04 val 1100 [ 1833.854737][ T993] pwc: recv_control_msg error -71 req 04 val 1200 [ 1833.884492][T31265] usb 4-1: Using ep0 maxpacket: 8 [ 1833.906117][T31265] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.927335][ T993] pwc: Registered as video103. [ 1833.941810][T31265] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1833.970964][ T993] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input134 [ 1833.991395][T31265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1834.036059][T31265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1834.079349][T31265] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1834.114931][ T993] usb 3-1: USB disconnect, device number 25 [ 1834.128744][T31265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.189589][T31265] hub 4-1:1.0: bad descriptor, ignoring hub [ 1834.232985][T31265] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1834.291338][T31265] cdc_wdm 4-1:1.0: skipping garbage [ 1834.315167][T31265] cdc_wdm 4-1:1.0: skipping garbage [ 1834.352087][T31265] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1834.392096][T31265] cdc_wdm 4-1:1.0: Unknown control protocol [ 1834.455677][T31265] usb 4-1: USB disconnect, device number 30 [ 1834.563629][T31321] netlink: 'syz.2.7254': attribute type 1 has an invalid length. [ 1834.592765][T31320] input: syz1 as /devices/virtual/input/input135 [ 1834.617617][T31320] input: failed to attach handler leds to device input135, error: -6 [ 1834.807599][T31325] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7254'. [ 1834.900563][T31321] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1835.062646][T31323] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1835.831379][T31346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7261'. [ 1836.107519][T31354] binder: 31352:31354 ioctl c0306201 200000000640 returned -22 [ 1836.238495][T31353] veth2: entered allmulticast mode [ 1837.174347][ T5749] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1837.182575][T27130] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1837.404644][T27130] usb 3-1: Using ep0 maxpacket: 32 [ 1837.412045][T27130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.437118][T27130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.437261][ T5749] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1837.458458][T27130] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1837.480662][ T5749] usb 4-1: config 0 has no interface number 0 [ 1837.488257][T27130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.501777][ T5749] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1837.522238][T27130] usb 3-1: config 0 descriptor?? [ 1837.530408][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.540957][ T5749] usb 4-1: Product: syz [ 1837.552607][T27130] hub 3-1:0.0: USB hub found [ 1837.568668][ T5749] usb 4-1: Manufacturer: syz [ 1837.579361][ T5749] usb 4-1: SerialNumber: syz [ 1837.596050][ T5749] usb 4-1: config 0 descriptor?? [ 1837.604795][T31265] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1837.763090][T27130] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1837.774823][T31265] usb 6-1: Using ep0 maxpacket: 16 [ 1837.796567][T31265] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1837.814634][ T5749] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1837.836332][ T5749] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1837.844793][T31265] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1837.849386][ T5749] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1837.866982][ T5749] usb 4-1: media controller created [ 1837.878318][T31265] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1837.907079][ T5749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1837.914757][T31265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.937138][T31265] usb 6-1: Product: syz [ 1837.954928][T31265] usb 6-1: Manufacturer: syz [ 1837.964778][T31265] usb 6-1: SerialNumber: syz [ 1837.980376][T31377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.993973][T31377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.024495][T31265] usb 6-1: 0:2 : does not exist [ 1838.092067][ T5749] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1838.254462][T27130] usbhid 3-1:0.0: can't add hid device: -71 [ 1838.278504][T27130] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1838.308526][ T5749] usb 4-1: USB disconnect, device number 31 [ 1838.337970][T27130] usb 3-1: USB disconnect, device number 26 [ 1838.418096][T31382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.441790][T31382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.457626][T31382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.467028][ T31] INFO: task syz.6.6741:29393 blocked for more than 143 seconds. [ 1838.486617][T31382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.494580][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1838.513772][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1838.544116][ T31] task:syz.6.6741 state:D stack:28120 pid:29393 tgid:29392 ppid:22077 task_flags:0x400040 flags:0x00080002 [ 1838.586330][T31265] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1838.604485][ T31] Call Trace: [ 1838.608524][ T31] [ 1838.619844][ T31] __schedule+0x17b4/0x5680 [ 1838.640122][ T31] ? __pfx___schedule+0x10/0x10 [ 1838.658187][T31265] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1838.674305][ T31] ? schedule+0x90/0x360 [ 1838.686117][ T31] schedule+0x164/0x360 [ 1838.705081][ T31] schedule_preempt_disabled+0x13/0x30 [ 1838.733630][ T31] __mutex_lock+0x7f7/0x1550 [ 1838.758562][ T31] ? __mutex_lock+0x608/0x1550 [ 1838.787802][ T31] ? usbdev_open+0x182/0x770 [ 1838.809160][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1838.856314][ T31] ? bus_find_device+0x27d/0x2d0 [ 1838.886839][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1838.909974][T31265] usb 6-1: USB disconnect, device number 72 [ 1838.918358][ T31] ? usbdev_open+0xa7/0x770 [ 1838.940122][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1838.968610][ T31] usbdev_open+0x182/0x770 [ 1838.986960][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 1839.018149][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1839.039770][T28130] udevd[28130]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1839.050828][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1839.107237][ T31] chrdev_open+0x4cd/0x5e0 [ 1839.134452][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1839.157285][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1839.176726][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1839.200501][ T31] do_dentry_open+0x785/0x14e0 [ 1839.215026][ T31] vfs_open+0x3b/0x340 [ 1839.234333][ T31] ? path_openat+0x2df0/0x3860 [ 1839.244654][ T31] path_openat+0x2e08/0x3860 [ 1839.257642][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1839.267723][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1839.284327][ T31] ? __pfx_path_openat+0x10/0x10 [ 1839.289528][ T31] ? __x64_sys_openat+0x138/0x170 [ 1839.304362][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1839.310962][ T31] do_file_open+0x23e/0x4a0 [ 1839.322445][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1839.335279][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1839.348188][ T31] ? alloc_fd+0x64b/0x6c0 [ 1839.357870][ T31] do_sys_openat2+0x113/0x200 [ 1839.375054][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1839.380571][ T31] ? exc_page_fault+0x6a/0xc0 [ 1839.394327][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1839.399759][ T31] __x64_sys_openat+0x138/0x170 [ 1839.418376][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.439677][ T31] do_syscall_64+0x15f/0xf80 [ 1839.454640][ T31] ? trace_irq_disable+0x3b/0x140 [ 1839.462514][ T31] ? clear_bhb_loop+0x40/0x90 [ 1839.474598][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.486512][ T31] RIP: 0033:0x7ff83355d60e [ 1839.496046][ T31] RSP: 002b:00007ff8317f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1839.516476][ T31] RAX: ffffffffffffffda RBX: 00007ff8317f66c0 RCX: 00007ff83355d60e [ 1839.545321][ T31] RDX: 0000000000109301 RSI: 00007ff8317f5c00 RDI: ffffffffffffff9c [ 1839.567902][ T31] RBP: 00007ff8317f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1839.578432][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1839.596543][ T31] R13: 00007ff833816038 R14: 00007ff833815fa0 R15: 00007ff83393fa48 [ 1839.614301][ T31] [ 1839.619385][ T31] [ 1839.619385][ T31] Showing all locks held in the system: [ 1839.741983][ T31] 1 lock held by khungtaskd/31: [ 1839.780406][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1839.827557][ T31] 2 locks held by getty/5383: [ 1839.847438][ T31] #0: ffff8880374b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1839.888969][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1839.905260][T30765] Bluetooth: hci6: command 0x0406 tx timeout [ 1839.965251][ T31] 6 locks held by kworker/0:6/5728: [ 1840.007294][ T31] 7 locks held by kworker/u9:0/16034: [ 1840.053566][ T31] #0: ffff888033ac7940 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1840.143358][ T31] #1: ffffc9000576fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1840.244029][ T31] #2: ffff8880587ecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1840.314472][ T31] #3: ffff8880587ec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1840.354784][ T31] #4: ffffffff8ff51980 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 1840.403969][ T31] #5: ffff888054e42af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1840.451009][ T31] #6: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1840.504497][ T31] 1 lock held by syz.6.6741/29393: [ 1840.526244][ T31] #0: ffff88802b0681d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1840.580344][ T31] 1 lock held by syz.5.7273/31381: [ 1840.601602][ T31] 1 lock held by syz.3.7275/31390: [ 1840.633935][ T31] [ 1840.663733][ T31] ============================================= [ 1840.663733][ T31] [ 1840.696302][ T31] NMI backtrace for cpu 1 [ 1840.696331][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1840.696372][ T31] Tainted: [L]=SOFTLOCKUP [ 1840.696382][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1840.696398][ T31] Call Trace: [ 1840.696408][ T31] [ 1840.696420][ T31] dump_stack_lvl+0xe8/0x150 [ 1840.696454][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1840.696492][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1840.696521][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1840.696561][ T31] sys_info+0x135/0x170 [ 1840.696593][ T31] watchdog+0xfd3/0x1030 [ 1840.696649][ T31] ? watchdog+0x1c9/0x1030 [ 1840.696691][ T31] kthread+0x388/0x470 [ 1840.696723][ T31] ? __pfx_watchdog+0x10/0x10 [ 1840.696756][ T31] ? __pfx_kthread+0x10/0x10 [ 1840.696790][ T31] ret_from_fork+0x514/0xb70 [ 1840.696820][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1840.696846][ T31] ? __switch_to+0xc79/0x1410 [ 1840.696886][ T31] ? __pfx_kthread+0x10/0x10 [ 1840.696919][ T31] ret_from_fork_asm+0x1a/0x30 [ 1840.696968][ T31] [ 1840.696978][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1840.817393][ C0] NMI backtrace for cpu 0 [ 1840.817417][ C0] CPU: 0 UID: 0 PID: 5728 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1840.817445][ C0] Tainted: [L]=SOFTLOCKUP [ 1840.817453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1840.817468][ C0] Workqueue: usb_hub_wq hub_event [ 1840.817497][ C0] RIP: 0010:lock_release+0x111/0x3c0 [ 1840.817523][ C0] Code: 24 83 f8 32 0f 83 2a 02 00 00 4a 8d 1c ad 00 00 00 00 4c 01 eb 48 8d 6c dd 00 48 89 ef 4c 89 f6 e8 a4 09 06 0a 44 89 64 24 14 <45> 89 e5 85 c0 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d [ 1840.817541][ C0] RSP: 0018:ffffc90000007550 EFLAGS: 00000046 [ 1840.817563][ C0] RAX: 0000000000000001 RBX: 0000000000000019 RCX: 0000000080000100 [ 1840.817577][ C0] RDX: 0000000000000001 RSI: ffffffff8e95cd60 RDI: ffff888029fae898 [ 1840.817593][ C0] RBP: ffff888029fae898 R08: ffffc900000076e7 R09: 0000000000000000 [ 1840.817608][ C0] R10: ffffc900000076d8 R11: fffff52000000edd R12: 0000000000000005 [ 1840.817622][ C0] R13: 0000000000000005 R14: ffffffff8e95cd60 R15: ffff888029fadc40 [ 1840.817637][ C0] FS: 0000000000000000(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 1840.817655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1840.817669][ C0] CR2: 0000200000032030 CR3: 000000003618c000 CR4: 00000000003526f0 [ 1840.817688][ C0] Call Trace: [ 1840.817696][ C0] [ 1840.817706][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1840.817734][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1840.817758][ C0] unwind_next_frame+0x1bba/0x2550 [ 1840.817786][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1840.817810][ C0] ? irq_exit_rcu+0x9/0x30 [ 1840.817832][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1840.817867][ C0] arch_stack_walk+0x11b/0x150 [ 1840.817895][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1840.817920][ C0] stack_trace_save+0xa9/0x100 [ 1840.817949][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1840.817978][ C0] ? kfree+0x1c5/0x640 [ 1840.818002][ C0] ? __usb_hcd_giveback_urb+0x376/0x540 [ 1840.818027][ C0] ? dummy_timer+0xbc0/0x4650 [ 1840.818053][ C0] ? __hrtimer_run_queues+0x3c0/0xa20 [ 1840.818081][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1840.818103][ C0] kasan_save_track+0x3e/0x80 [ 1840.818129][ C0] ? kasan_save_track+0x3e/0x80 [ 1840.818154][ C0] ? kasan_save_free_info+0x46/0x50 [ 1840.818176][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1840.818203][ C0] ? kmem_cache_free+0x182/0x650 [ 1840.818230][ C0] ? ath6kl_usb_recv_complete+0x1d6/0x4d0 [ 1840.818254][ C0] ? __usb_hcd_giveback_urb+0x376/0x540 [ 1840.818279][ C0] ? dummy_timer+0xbc0/0x4650 [ 1840.818305][ C0] ? __hrtimer_run_queues+0x3c0/0xa20 [ 1840.818330][ C0] ? hrtimer_run_softirq+0x17a/0x240 [ 1840.818364][ C0] ? handle_softirqs+0x22a/0x840 [ 1840.818383][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1840.818403][ C0] ? irq_exit_rcu+0x9/0x30 [ 1840.818442][ C0] ? ath6kl_usb_recv_complete+0x1d6/0x4d0 [ 1840.818465][ C0] kasan_save_free_info+0x46/0x50 [ 1840.818487][ C0] __kasan_slab_free+0x5c/0x80 [ 1840.818515][ C0] kmem_cache_free+0x182/0x650 [ 1840.818546][ C0] ath6kl_usb_recv_complete+0x1d6/0x4d0 [ 1840.818572][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 1840.818602][ C0] dummy_timer+0xbc0/0x4650 [ 1840.818637][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1840.818660][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1840.818688][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1840.818721][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1840.818748][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1840.818771][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1840.818796][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 1840.818830][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1840.818860][ C0] handle_softirqs+0x22a/0x840 [ 1840.818881][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1840.818905][ C0] __irq_exit_rcu+0xca/0x220 [ 1840.818925][ C0] irq_exit_rcu+0x9/0x30 [ 1840.818944][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1840.818967][ C0] [ 1840.818974][ C0] [ 1840.818982][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1840.819003][ C0] RIP: 0010:memset_orig+0x42/0xb0 [ 1840.819029][ C0] Code: 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 <48> 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 [ 1840.819047][ C0] RSP: 0018:ffffc90004d06590 EFLAGS: 00000202 [ 1840.819064][ C0] RAX: 0000000000000000 RBX: ffff8880ac998000 RCX: 000000000000001c [ 1840.819078][ C0] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffffed10159338c0 [ 1840.819091][ C0] RBP: 0000000000000001 R08: ffffffff903098f7 R09: 0000000000000000 [ 1840.819104][ C0] R10: ffffed1015933000 R11: fffffbfff206131f R12: 0000000000000001 [ 1840.819119][ C0] R13: ffffea0002b26600 R14: 0000000000008000 R15: dffffc0000000000 [ 1840.819142][ C0] kasan_unpoison+0x48/0x70 [ 1840.819167][ C0] __kasan_unpoison_pages+0x25/0x30 [ 1840.819195][ C0] post_alloc_hook+0x95/0x280 [ 1840.819224][ C0] get_page_from_freelist+0x24ba/0x2540 [ 1840.819259][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1840.819283][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1840.819321][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1840.819360][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1840.819398][ C0] ? refill_objects+0x114/0x3d0 [ 1840.819419][ C0] allocate_slab+0x77/0x660 [ 1840.819439][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1840.819464][ C0] refill_objects+0x339/0x3d0 [ 1840.819486][ C0] ? __pcs_replace_empty_main+0x25c/0x720 [ 1840.819509][ C0] __pcs_replace_empty_main+0x321/0x720 [ 1840.819531][ C0] ? rcu_is_watching+0x15/0xb0 [ 1840.819559][ C0] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 1840.819590][ C0] ? __netdev_alloc_skb+0xc1/0x810 [ 1840.819613][ C0] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 1840.819644][ C0] __alloc_skb+0x2c1/0x7d0 [ 1840.819668][ C0] __netdev_alloc_skb+0xc1/0x810 [ 1840.819690][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1840.819719][ C0] ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 1840.819750][ C0] ath6kl_usb_power_on+0x6a/0x280 [ 1840.819772][ C0] ath6kl_core_init+0x1e1/0x10b0 [ 1840.819803][ C0] ? rcu_is_watching+0x15/0xb0 [ 1840.819828][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1840.819856][ C0] ? __pfx_ath6kl_core_init+0x10/0x10 [ 1840.819888][ C0] ? __asan_memcpy+0x40/0x70 [ 1840.819912][ C0] ? ath6kl_core_create+0x7de/0x980 [ 1840.819944][ C0] ath6kl_usb_probe+0x14a6/0x15a0 [ 1840.819972][ C0] usb_probe_interface+0x659/0xc70 [ 1840.820003][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1840.820027][ C0] really_probe+0x267/0xaf0 [ 1840.820055][ C0] __driver_probe_device+0x1ef/0x380 [ 1840.820080][ C0] driver_probe_device+0x4f/0x240 [ 1840.820107][ C0] __device_attach_driver+0x279/0x430 [ 1840.820134][ C0] bus_for_each_drv+0x258/0x2f0 [ 1840.820169][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1840.820194][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1840.820224][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1840.820247][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1840.820270][ C0] __device_attach+0x2c5/0x450 [ 1840.820294][ C0] ? __pfx___device_attach+0x10/0x10 [ 1840.820320][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1840.820348][ C0] device_initial_probe+0xa1/0xd0 [ 1840.820372][ C0] bus_probe_device+0x12a/0x220 [ 1840.820402][ C0] device_add+0x7e9/0xbb0 [ 1840.820425][ C0] usb_set_configuration+0x1a87/0x2110 [ 1840.820461][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1840.820484][ C0] usb_probe_device+0x1c4/0x3b0 [ 1840.820509][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1840.820532][ C0] really_probe+0x267/0xaf0 [ 1840.820560][ C0] __driver_probe_device+0x1ef/0x380 [ 1840.820585][ C0] driver_probe_device+0x4f/0x240 [ 1840.820613][ C0] __device_attach_driver+0x279/0x430 [ 1840.820640][ C0] bus_for_each_drv+0x258/0x2f0 [ 1840.820669][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1840.820694][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1840.820724][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1840.820746][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1840.820769][ C0] __device_attach+0x2c5/0x450 [ 1840.820793][ C0] ? __pfx___device_attach+0x10/0x10 [ 1840.820818][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1840.820838][ C0] device_initial_probe+0xa1/0xd0 [ 1840.820863][ C0] bus_probe_device+0x12a/0x220 [ 1840.820894][ C0] device_add+0x7e9/0xbb0 [ 1840.820917][ C0] usb_new_device+0xa08/0x16f0 [ 1840.820952][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1840.820985][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1840.821006][ C0] hub_event+0x2a1c/0x4f30 [ 1840.821026][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1840.821079][ C0] ? __pfx_hub_event+0x10/0x10 [ 1840.821099][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1840.821125][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1840.821145][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1840.821166][ C0] process_scheduled_works+0xb5d/0x1860 [ 1840.821202][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1840.821226][ C0] ? assign_work+0x3d5/0x5e0 [ 1840.821247][ C0] worker_thread+0xa53/0xfc0 [ 1840.821290][ C0] kthread+0x388/0x470 [ 1840.821313][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1840.821330][ C0] ? __pfx_kthread+0x10/0x10 [ 1840.821358][ C0] ret_from_fork+0x514/0xb70 [ 1840.821378][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1840.821397][ C0] ? __switch_to+0xc79/0x1410 [ 1840.821423][ C0] ? __pfx_kthread+0x10/0x10 [ 1840.821446][ C0] ret_from_fork_asm+0x1a/0x30 [ 1840.821474][ C0] [ 1842.275774][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1842.282761][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1842.293488][ T31] Tainted: [L]=SOFTLOCKUP [ 1842.297860][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1842.308011][ T31] Call Trace: [ 1842.311347][ T31] [ 1842.314324][ T31] vpanic+0x56c/0xa60 [ 1842.318382][ T31] ? __pfx___schedule+0x10/0x10 [ 1842.323362][ T31] ? __pfx_vpanic+0x10/0x10 [ 1842.327942][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1842.334186][ T31] panic+0xc5/0xd0 [ 1842.337994][ T31] ? __pfx_panic+0x10/0x10 [ 1842.342497][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1842.347958][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1842.354383][ T31] watchdog+0x102c/0x1030 [ 1842.358811][ T31] ? watchdog+0x1c9/0x1030 [ 1842.363402][ T31] kthread+0x388/0x470 [ 1842.367567][ T31] ? __pfx_watchdog+0x10/0x10 [ 1842.372318][ T31] ? __pfx_kthread+0x10/0x10 [ 1842.376989][ T31] ret_from_fork+0x514/0xb70 [ 1842.381653][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1842.386921][ T31] ? __switch_to+0xc79/0x1410 [ 1842.391759][ T31] ? __pfx_kthread+0x10/0x10 [ 1842.396515][ T31] ret_from_fork_asm+0x1a/0x30 [ 1842.401455][ T31] [ 1842.406134][ T31] Kernel Offset: disabled [ 1842.410518][ T31] Rebooting in 86400 seconds..