last executing test programs: 8m38.350985332s ago: executing program 2 (id=3135): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2501792f249c96d0bfb46f"], 0x34}}, 0x4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2501792f249c96d0bfb46f"], 0x34}}, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x80000000, 0x6, 0xc5, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x100000000009}, {0xc00, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x8, 0xa, 0x16, 0x7, 0x6, 0x1}, {0x1ff, 0x1e, 0xd, 0x12, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x6, 0xf3b8, 0x0, 0x1000, 0x402, 0x4002004c4, 0x1000, 0x3, 0x97, 0x1000000000000006, 0x0, 0x7, 0x4], 0xeeee8000, 0x400}) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_bond\x00', 0x2}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @multicast2}, &(0x7f0000000340)=0xc) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x6, 0x7f, 0x100, 0x8, 0x12, r6}) 8m37.860850528s ago: executing program 2 (id=3138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8907, 0x0) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000040)='./file1/file3\x00', 0x38) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8m35.223949511s ago: executing program 2 (id=3143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) close(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) poll(&(0x7f0000000140), 0x0, 0x8000) syz_emit_ethernet(0x6a, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004606f907800e7"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xcc}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) 8m31.742585235s ago: executing program 2 (id=3145): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0xc, 0x0, 0xdf}}], 0xc}}], 0x2, 0x800) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 8m30.769693991s ago: executing program 2 (id=3149): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x11c) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 8m30.076625704s ago: executing program 2 (id=3155): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="516924e8b8f9"}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 8m29.589020202s ago: executing program 32 (id=3155): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="516924e8b8f9"}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 5m51.209898645s ago: executing program 0 (id=3781): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYBLOB="938b7d272052e77560ee93b521c4ac5ff25ec4d9197072d283f3db8293f5502f17bb217aa04405afc05d9d0aa5bc3d1de2d2b50c0f44c7d0dd235a135f04809bd8eac4bbd0504704e2392d5068d0d724fab53e9e2e5fad9a3ccfb8517f0232116729be61db37d5fc401fac94896a7a129444fd6f7642acae21a66e623e340cc90c", @ANYRESDEC=r0, @ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYBLOB="938b7d272052e77560ee93b521c4ac5ff25ec4d9197072d283f3db8293f5502f17bb217aa04405afc05d9d0aa5bc3d1de2d2b50c0f44c7d0dd235a135f04809bd8eac4bbd0504704e2392d5068d0d724fab53e9e2e5fad9a3ccfb8517f0232116729be61db37d5fc401fac94896a7a129444fd6f7642acae21a66e623e340cc90c", @ANYRESDEC=r0, @ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000008a4c000000060a0b16000000000000000002000008200004801c0001800b0001006e756d67656e0000fc92028008000140000000030900010073987a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000002c00), 0x800003d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x95dd30ab3e9ebebb) (async) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x95dd30ab3e9ebebb) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$netlink(r0, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xfffffffffffffedb) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) socket$packet(0x11, 0x3, 0x300) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) 5m50.676056972s ago: executing program 0 (id=3786): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') unshare(0x400) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='##\x00', &(0x7f0000000100)='%.@)@!\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x560}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0xfffd}, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000340)={0x1d, r5}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) openat$binder_debug(0xffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x5, 0xfc, 0x9, 0xe, 0x0, 0x70bd27, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81, 0x0, 0x0, 0xa0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r6, 0xff80, 0x10}, 0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000100)=0xb8) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='macsec0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x10a, 0x0, 0xa}]}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 5m49.695359607s ago: executing program 0 (id=3792): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x84) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/24, 0x18}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f0000000500)=""/79, 0x4f}], 0x5, &(0x7f00000006c0)=""/16, 0x10}, 0x81}, {{&(0x7f0000002400)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/21, 0x15}, {&(0x7f0000000940)=""/4086, 0xff6}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/217, 0xd9}], 0x6}, 0x3}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/58, 0x3a}, {&(0x7f0000001bc0)=""/184, 0xb8}, {&(0x7f0000001c80)=""/30, 0x1e}], 0x3, &(0x7f0000001d00)=""/47, 0x2f}, 0xffffff5c}, {{&(0x7f0000001d40)=@generic, 0x80, &(0x7f0000002240)=[{&(0x7f0000001dc0)=""/81, 0x51}, {&(0x7f0000001e40)=""/179, 0xb3}, {&(0x7f0000001f00)=""/11, 0xb}, {&(0x7f0000001f40)=""/41, 0x29}, {&(0x7f0000001f80)=""/231, 0xe7}, {&(0x7f0000002080)=""/145, 0x91}, {&(0x7f0000002140)=""/250, 0xfa}], 0x7, &(0x7f0000002280)=""/219, 0xdb}, 0x3}], 0x4, 0x40002042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e01f1ffffff000100000006000000e0002101e00000df9094a8c8f92eb50064010100ffffffff"], 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', '\x00\x00\x00', 0x20, 0x3}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r5, &(0x7f0000000180)='\v', 0x1, 0xd8d94c8c679ec55d, &(0x7f0000000400)={0x11, 0x5, r6, 0x1, 0xff}, 0x14) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x241) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m47.749377881s ago: executing program 0 (id=3797): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000007880), 0x0, 0x24000001) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x7c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x59, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="7d8cc6decdc2", {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @void, @void, @val={0x3, 0x1, 0x24}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x7, 0x74, 0x7c}}, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x4, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @void, @void}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) sendmsg$nl_xfrm(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {0xfffffffffffffffd}, {0x0, 0x200000000, 0x0, 0x100000}, {0x0, 0x0, 0x2}, 0x70bd2a, 0x0, 0x2, 0x4}, [@algo_crypt={0x4a, 0x2, {{'ecb(cipher_null)\x00'}, 0x10, "ab73"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x0, 0x3, 0x1, 0x2}}, 0x2e) shutdown(r0, 0x1) 5m46.781282785s ago: executing program 0 (id=3800): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_fuse_handle_req(r5, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbb78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783f13cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b000000001034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db234687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a5aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x0, {0x4, 0x3, 0x0, 0x7e30, 0xf, 0x0, {0x0, 0x20000, 0x0, 0x1, 0x3, 0x1, 0x2, 0x2, 0x0, 0x8000, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5m46.284689556s ago: executing program 0 (id=3802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)="524f1e556e2c40b2c5996d2cf2693c4daee65ce0bc9a1a76c1901f769478c4afceefaaa1b39d8858384fcc7a73fd9132cf68dd331b1db514b85df59af18b3391af4638a86db4dc4560f1f267a7fdcd50fd07a471762a28fd53fbe60743c6507c8eb19c51caae77d1f54c3adc", 0x6c}, {&(0x7f0000000140)="a8acadf9ec0257142fb955d3768e8c130d8d663264e752d636cebaf016dfdfca", 0x20}, {&(0x7f00000004c0)="703bf1c0b6357aba11b64b9ab761635db2af637b0138a52bc335496ce41c220ce11eb1a669e6b4a3e81ad54203100e3dfee9f2ced0a80eddac3728a572745021e12778bfdc", 0x45}, {&(0x7f0000000540)="c19a128c53a4076ada8c7da3109ee4fafc5362290b0d1eeb4ec8b39275800db53d81d28aefaa4e43abc26cf87bf07cf001532257c37a0073fd82f8fb4945a616b700ca3c433a3f79", 0x48}, {&(0x7f00000005c0)="6c82fd9f9b3553297c1c588a7eb47d82595374aa04d71a465837dddb1f51b22d6b045d2510c649dbdd9a9199753400404f5af8af45fb8e375c8c2546f51b2eb4a0fc98136db4399d7d6c44b88fb90082efaa2df579358cf647debcfd8e13ab8c910169da85ae799724816129f5183f8e1d4b734d711c425ad8672a5175f710b77ae223bfff67964dfc1e1777595fb23bc1f4865605778cc07ec1e64c58bb62a93123ed1c4c9ff8cbddd6c0e7444d1099cb7a1b4fabb75de5a1f4e8ecd90a83", 0xbf}, {&(0x7f0000000300)="fa97", 0x2}, {&(0x7f0000000700)="21555b09f747868b3db6c8436437d891b2fa182dd5329d8e2c214525a9dad8bda13eb1ba0eb2cf526ea8a9cf95c1c0ed032ccfaf1a6fa073b93423140aa1c9532d2895771a14a97e46a2b0a3605a38c0fb1d8b5e17af8c5bc6f5e078e594cc8d1a910bdf2bde359d8f63cc06cb1026244793689e6ddde0a66cd53a562e2cf5041eb9ad53a34753954ec642633ef9b9e72710d791d475c9bcd9891f8db4001bfed77c9c9052e6d2b503b7142b644e1bade30ef5530d064dae80b37669745d6dd77c57e12b2ca12cf3beb866e6dcae7e178b133df84dc3c089eabaf501c7408d32", 0xe0}], 0x7, 0x0, 0x0, 0x24048850}}], 0x1, 0x8015) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x38, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x8, 0x2, [@TCA_RSVP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40881) 5m45.476552519s ago: executing program 33 (id=3802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)="524f1e556e2c40b2c5996d2cf2693c4daee65ce0bc9a1a76c1901f769478c4afceefaaa1b39d8858384fcc7a73fd9132cf68dd331b1db514b85df59af18b3391af4638a86db4dc4560f1f267a7fdcd50fd07a471762a28fd53fbe60743c6507c8eb19c51caae77d1f54c3adc", 0x6c}, {&(0x7f0000000140)="a8acadf9ec0257142fb955d3768e8c130d8d663264e752d636cebaf016dfdfca", 0x20}, {&(0x7f00000004c0)="703bf1c0b6357aba11b64b9ab761635db2af637b0138a52bc335496ce41c220ce11eb1a669e6b4a3e81ad54203100e3dfee9f2ced0a80eddac3728a572745021e12778bfdc", 0x45}, {&(0x7f0000000540)="c19a128c53a4076ada8c7da3109ee4fafc5362290b0d1eeb4ec8b39275800db53d81d28aefaa4e43abc26cf87bf07cf001532257c37a0073fd82f8fb4945a616b700ca3c433a3f79", 0x48}, {&(0x7f00000005c0)="6c82fd9f9b3553297c1c588a7eb47d82595374aa04d71a465837dddb1f51b22d6b045d2510c649dbdd9a9199753400404f5af8af45fb8e375c8c2546f51b2eb4a0fc98136db4399d7d6c44b88fb90082efaa2df579358cf647debcfd8e13ab8c910169da85ae799724816129f5183f8e1d4b734d711c425ad8672a5175f710b77ae223bfff67964dfc1e1777595fb23bc1f4865605778cc07ec1e64c58bb62a93123ed1c4c9ff8cbddd6c0e7444d1099cb7a1b4fabb75de5a1f4e8ecd90a83", 0xbf}, {&(0x7f0000000300)="fa97", 0x2}, {&(0x7f0000000700)="21555b09f747868b3db6c8436437d891b2fa182dd5329d8e2c214525a9dad8bda13eb1ba0eb2cf526ea8a9cf95c1c0ed032ccfaf1a6fa073b93423140aa1c9532d2895771a14a97e46a2b0a3605a38c0fb1d8b5e17af8c5bc6f5e078e594cc8d1a910bdf2bde359d8f63cc06cb1026244793689e6ddde0a66cd53a562e2cf5041eb9ad53a34753954ec642633ef9b9e72710d791d475c9bcd9891f8db4001bfed77c9c9052e6d2b503b7142b644e1bade30ef5530d064dae80b37669745d6dd77c57e12b2ca12cf3beb866e6dcae7e178b133df84dc3c089eabaf501c7408d32", 0xe0}], 0x7, 0x0, 0x0, 0x24048850}}], 0x1, 0x8015) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x38, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x8, 0x2, [@TCA_RSVP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40881) 15.515480444s ago: executing program 4 (id=4909): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) syz_usb_connect$uac1(0x5, 0xb2, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x8, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4a, 0x6}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0x8d5, 0x8, "9077"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x6, 0x81, 0x9, 0x83, 0xfe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7f, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x1, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xff, 0x200, 0x4, "173b953d0b"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x2, 0xe5, 0x54, "d2469d1ce7bb82"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xc5, 0x1, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x7fe, 0x3, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x6, 0xfffc}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x101, 0x4, 0x7, 0xf7, 0x40, 0x7}, 0x12d, &(0x7f0000000380)={0x5, 0xf, 0x12d, 0x5, [@generic={0xf5, 0x10, 0x3, "abee19c5534d09af10571030df038eb6c1733394985737380992d0c525ec52e6513908179bd33673647d5daa19b4b8ee1aa15c3540d41dffd01bcd9f42dadc52914176d6bace313b5204ecf1a9ba9fc83b6e2a14f8b076a6e7e7a0c31c9a4387065ef50c5f75108d3e812844dc00157a384a52d7c6326a48023fd330b232c4213c51982ef0c6cd81ecfb7a4856a40fe323142cfdaad538f73c3816e49c5df75e3cd173074948153b11ffc2776b51b8ba9f92b539484ba0602ca273092f7d6457802b78f0a8be1a19b061f322eaeec19a3291c5c292d034dbca6c9edbc8825bbd3fba773caefd60451ffcd78d2c50412dad58"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xa, 0xf4, 0x427}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "43caab284cf8e5ccde0b75df0617e8e6"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x1, 0x4, 0x6, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x3, 0x8}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1001}}, {0xc5, &(0x7f0000000580)=@string={0xc5, 0x3, "3aea9fdde9d7ed92474ee5a633a8601663ceedbfd5608d312981989a33b1a89cbab1385c719851e138f9ce4f562e7b6fd4c945a60a45d36c07a9587c311d43ba4f6f69fc70ea5183e0de6b4ec7ac6fe4ce9fb1c80e1965b8a675c6a06ff792e7a734ffb5633316b4a27b78e653595e3fe47cae2613a93175b9525a4e48fb4f82bea9cf318c7fe76326ddd3a924e29b0ce2f68136c42946ee461ac2e067ff2a69815ba683ec931844a9407c7ebc5662666835e756bebaa9eb25fbbeab17da093d79832a"}}, {0xad, &(0x7f0000000780)=@string={0xad, 0x3, "ee88a4d9c6b7b9190ba74936d514ead1cd0f39ec164a1ff94ef000ab3c0db52742029a7593bf1b48f05a50d9bf580c52ba4b69e890e36018a8b5603b0b3bb93557f6d2ce7a710714e3548cfc1229ac0b911769b34676823d68f40f6496902ebf6d7c86848cdc6c4864f62062706949c88720e06f1373c9bef7da283bb26abbe4f9452b81c00e1d583487babcd3361cbbcce21d3f7f7adf33050bf14af7ffe03239927140e8c69ca2cbcb49"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3866}}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x27c}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000000700)="a27f83b3c87343f4da6f7df6001d38d2d4e7c43f8ce4dd4ff5c8d30f411d4a3b35a1aa8f36f12a518b9baabc6fb69cd41943661cd632e22457c06d08141ffc6a08842d227b9281f89dfbbe8ba02446f837a85524e8136a3d14e037f7d096", 0x5e}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007fc0)=[{0x0}, {&(0x7f0000006f00)="827a73a8fcb4db", 0x7}], 0x2}}], 0x3, 0x4000c8d1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b00010000000009040000012e6d0a000905ff"], 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB=' &m\r\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) 12.725708772s ago: executing program 1 (id=4915): open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x81900) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2e0, 0x0, 0xffffffff, 0xc2, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 12.02067397s ago: executing program 4 (id=4917): r0 = socket(0x2, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfd, 0x1, 0x0, @rand_addr, @multicast1}, @address_reply}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x2000c040, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 10.600201295s ago: executing program 3 (id=4919): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/533], &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x63}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) r1 = socket(0x2, 0x3, 0x1) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0x42, 0x4, 0x270, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x1dc, 0x1dc, 0x1dc, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x1, {0x2}}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@ip={@broadcast, @remote, 0x0, 0xffff00, 'batadv0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x1231e48dc931f0a2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x25, 0x1}, {0x0, 0xfc}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2cc) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0xc, &(0x7f00000000c0)={0x0, 0xf, 0x89, {0x89, 0xe, "e2ef7864db78ea9387a3a64765f5a2716330ffc1073ee8a754f68bef88adabe14de5fc86751fa36605f4c7e9e5c57ef9ef3cbebfc009bac40f8dbc297cc6ddf9f5c6253e0b357901fb558c9890e0039b2d3a6f13b1c9108d1005e5c772da2f4a28e85a8e0594d36092a8db99558605cd5d408eba2cd5f5ce6bab6d6f8304ec084a4fadccc51000"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}}, &(0x7f0000000800)={0x24, &(0x7f00000002c0)={0x40, 0xe, 0xa3, "2ab4aa49dbb6080488262efef10737664ece47fa9b27a9e0c2c293102042adb2a9c772382a9153fef25c647b0ba18ec28322cee8e6e7f5b17a4c819d31122e7576580a782a342b38013bbfb845950472bcce00cfd14db711c40d132a906eb762372d5347a807a7284ae8f5f7ae5a9a5882cd8a92d5ab9371a64a7e608dbe408f5735b924c72866a8bc318e1c2702287429055d5868884d933ac025406f90047d51944b"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x81, 0x2, "92d7"}, &(0x7f0000000440)={0x20, 0x82, 0x1, "d9"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "5390e4"}, &(0x7f0000000780)={0x20, 0x84, 0x1, '0'}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "42e6d0"}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4010a, 0x1120}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, &(0x7f0000000480)) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x7, 0x17, 0x0, 0x2000, r2, 0x755b, '\x00', 0x0, r4, 0x3, 0x5, 0x1}, 0x50) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000740)={0x20, 0xe, 0x4, "e13d1b64"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.599068161s ago: executing program 5 (id=4922): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x2000c040, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x13) 9.273642705s ago: executing program 5 (id=4923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xc8}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$alg(r2, 0x0, 0x40000) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000, r1}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) close(0x3) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_macvtap\x00', 0x10) r7 = socket(0x10, 0x803, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000030a050000000000000000000a0000040900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000574700001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'gre0\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, r10}, 0xc) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000003000000090000000700000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="02000000ea00000000e6880484000000000000000000000000000008"], 0x50) 9.221406984s ago: executing program 1 (id=4924): r0 = mq_open(&(0x7f0000000040)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x8000000}) mq_timedsend(r0, 0x0, 0x700, 0x0, 0x0) mmap(&(0x7f0000e12000/0x2000)=nil, 0x2000, 0x2000004, 0x4111, 0xffffffffffffffff, 0xe2021000) r1 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000005}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) write$sysctl(r9, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) 8.706726347s ago: executing program 4 (id=4925): open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x81900) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2e0, 0x0, 0xffffffff, 0xc2, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 8.242887161s ago: executing program 5 (id=4926): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x10, 0xfffffffffffffff5, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x80, 0x4) 8.012152257s ago: executing program 1 (id=4927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r4, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) (async) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r4, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) (async) close(r2) (async) 7.360341865s ago: executing program 5 (id=4928): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0xe0a82, 0x0) madvise(&(0x7f000078e000/0x4000)=nil, 0x4000, 0x17) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x26}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000001000000400000000000000e600000000a242dec70c5616d79ee76a9c6eeed74ed16a75520305a2e8cd9c83d65458fff78c7fa675af69f6581d7d04c857602674d538a8ff463366f5e8e474cafa356d0a2b1c8b2799a9cbd9fb1cf2566c5f49aa2258397d5cdf08c98ba6e471f1ba7493cdc82107cdb5d63209aba84a94d853a8af68343bd8e1fba3f9bc121750dd293258be6a447196fd17532baf153ac1ab2a927b70448ac3647372fc7af51df3551273c1c8a2981c", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000051401000a000100aaaaaaaaaafb00000800040080000000"], 0x5c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) read(0xffffffffffffffff, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040), 0x2) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x803, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_io_uring_setup(0xbc5, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r5, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0, 0x1000}) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) 7.3587364s ago: executing program 3 (id=4929): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffffc}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r5, 0x5) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000408) splice(r5, 0x0, r4, 0x0, 0x200, 0x9) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f00000003c0)="851b1f71d5", 0x5}], 0x1, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9, 0x5a, 0x6c, 0x20, 0x1199, 0x68aa, 0xa470, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x7d, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0x1b, 0x18, 0x1, 0xff, 0xff, 0xff, 0x4, [@generic={0x7, 0x5, "ba5f66cd00"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x8, 0x2}}]}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000400)="5a65b90c1667c5181d1acf9aca4df8fcfeca86755a204007e7bf4c400882973e95d35eeab0aa62f527e4be2ef7631d09c8fcce3e281f5137ad2acdfadbdc360e2c64e2b57d131867a9f6c82c7c308c86130055bbf7143f05fe44f9677eda4f42fb6d66677c71c292d7e385af4ae83fac93f8210d9e7afb5f7462411d5475e2e3658226d88d3c5c32a4ddfcb0e7ecaef0b25aab4caad59d0601a6aa54017cac502bed113cf934af6bf19b385e3b5d2997660000936037b22ac9725387a2085e89cd2d3fb97a3a517801bf5acdfaf3fbac79b2ab28864b91833dbe8e4bcf838fc0f3862621e0e9360fc808bb4938", 0xed, 0x2) 6.71003688s ago: executing program 6 (id=4931): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x1, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0x10, 0x74}}) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 6.216592739s ago: executing program 1 (id=4932): ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x412, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x6, 0x9, 0x20, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40001c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfd5], [0x0, 0x7ffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x4, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe, 0x0, 0x1000003, 0x0, 0x1, 0x1ff]}, 0x45c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@empty, 0x3b}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) syz_open_dev$midi(&(0x7f0000000140), 0x8000003, 0xa8502) syz_usb_disconnect(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x1c}}, 0x20000080) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/uinput\x00'}], 0xa, "946ac22791098f0c2356457a6ebcd737045bb9aa4c233cdef6c94a43931420310ef2527baf1f4a7074599d6fdfecc97aa3c18248acfbaee6589e7cc0bae6da92afb67611fa76266c68d426ebe932b83c24253b801a0de0ae8ce84650afb9b586e1923f0ffadd005f2a"}, 0x81) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x20, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) socket$unix(0x1, 0x1, 0x0) 5.696258533s ago: executing program 6 (id=4933): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x2000c040, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x14) 5.610782657s ago: executing program 6 (id=4934): open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x81900) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2e0, 0x0, 0xffffffff, 0xc2, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 4.591180981s ago: executing program 3 (id=4935): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.347082271s ago: executing program 4 (id=4936): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0xda}}}}]}, 0x38}}, 0x0) umount2(&(0x7f0000000640)='./file0\x00', 0x2) (async) umount2(&(0x7f0000000640)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000001640)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.031095433s ago: executing program 5 (id=4937): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902"], 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xa}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000080)="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", 0x1f5d7363fb9df849, 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b80)) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b80)) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) dup(r2) (async) r6 = dup(r2) r7 = fcntl$dupfd(r1, 0x406, r5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000280)={0x4, 0x8, 0x4, 0x0, 0x46f, 0x1000}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000280)={0x4, 0x8, 0x4, 0x0, 0x46f, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 3.989765314s ago: executing program 1 (id=4938): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x50) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00', 0x0, [0x900, 0xffffffff, 0x7, 0x342, 0x1]}, &(0x7f00000001c0)=0x54) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000440)={"89ee8e935e58eb0ebd1ee5246fac39a7b670ac830684210ef852d7fc1e2a1d52"}) 3.658100452s ago: executing program 4 (id=4939): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba919736d3429"], 0x2c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) r2 = accept4(r1, 0x0, 0x0, 0x800) add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb", 0x4}], 0x1}], 0x1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000400)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090240000101002008090400001a02020000052406000005240004000d240f01000000000100fcffda5a24010380090582021000020c00090503020004fc0000"], 0x0) 3.407940675s ago: executing program 3 (id=4940): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0x0) (async) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x400fa11, 0x224}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x400fa11, 0x224}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000000140)={0x38, 0x6, 0x3c, 0xe, 0x2, 0x2, 0x3fc0000000000, 0x40, 0x9, 0x8}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) (async) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='permprofile && \r:', @ANYRES64], 0xff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 2.418228986s ago: executing program 6 (id=4941): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6161, &(0x7f0000000740)={0x0, 0x4221, 0x1, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x1}, 0x1}) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/19, 0x13}], 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) io_uring_setup(0x7326, &(0x7f00000000c0)={0x0, 0x5dc0, 0x400, 0x1, 0x25, 0x0, r2}) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x4) execveat(r1, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x1100) close(0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x4096) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x8, 0xa, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x68, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x41) 2.417601818s ago: executing program 5 (id=4942): open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x81900) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2e0, 0x0, 0xffffffff, 0xc2, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 963.966139ms ago: executing program 6 (id=4943): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create(0x10000e9) (async) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x8, [0x5, 0x2, 0x5, 0xb, 0xff, 0xd, 0x9, 0x8, 0xc, 0x5, 0xc, 0xd, 0x9, 0xc, 0x3, 0xc], 0x1, [0x1ff, 0x164, 0x101, 0x5, 0x688, 0x8001, 0x8, 0x5, 0x927, 0x2e, 0x1, 0x3, 0xfffc, 0x6, 0x6, 0xb], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0x614, 0x0, 0x3, 0xe3, 0xffff, 0x7, 0x5, 0x1, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000180)=""/47, 0x2f}], 0x4b, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) read$hidraw(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}}, 0xc000) (async) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r8, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) shutdown(r0, 0x1) (async) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, &(0x7f00000003c0)={0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r9, 0x81, 0x6, &(0x7f0000000040)="d3a4e4092900") 693.582113ms ago: executing program 4 (id=4944): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000240)=""/165, &(0x7f0000000300)="f614ba8ce65387373a20052b99721ef688c9bc42fd9e64b9b1776788db2d7e05a3993c54c0a9a856dccb21266f862106008ada296fbf938353903c33d25ba0fae87f3a0e10728eb64fdef6db23f3929d9bbed8770296f161620b57f8a3b29915d21dca924e9ab5f28576cf3b5bb3064d8ce271347d1577", &(0x7f0000000380)="e83ba4a54658b283610888a02b4475cd6c83b5360c098d189c4af229a2814c14e59a0aecee0be8d8196fd926fb79b8402add6f62586a38283749d04aa14c94ffea5290a4bb599d4f6ad8ce3ee54d04b109ea198b94583fcdc3dc6b971b06f61c073ed7500d2d2de11ae502162343aaaaacf5142a2179a864d0eede9fbbdd2827eab9bc354c8c8e9f2a7b443f4afd762c647f69a6baf9f982c0f9e34131e9753d74a1841866caf9dbad6ea591200b63c8e281175f722cea", 0x6, r2}, 0x38) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@ptr={0x4, 0x0, 0x0, 0x2, 0x5}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x1, [{0xa, 0xffff, 0x6}, {0x2, 0xfff, 0x5}, {0x4, 0x40, 0x3}, {0xa, 0x3, 0x81}, {0x10, 0x473, 0x1}]}, @var={0x2000006, 0x0, 0x0, 0xe, 0x4}, @func_proto]}}, 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x3, {{@in6=@remote, @in=@private=0xa010102, 0x10, 0x0, 0x80, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {0x7}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x2, 0x2, 0x4, 0x0, 0x6a}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}, 0x0, 0xc0}}]}, 0x13c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000680)={@val={0x0, 0x88f8}, @val={0x1, 0x4, 0x0, 0x3, 0x3d}, @eth={@random="13baa9b26b81", @link_local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "f870a0", 0x1b, 0x11, 0x0, @empty, @private2, {[], {0x4e22, 0x4e22, 0x1b, 0x0, @wg=@data={0x4, 0x6, 0x5, "aa02dc"}}}}}}}}, 0x5f) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) syz_usb_connect(0x5, 0xb6, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605ffff020102092403050703020496062404024cfe09050b00400080000007250181f7090009050d0000046404050725010300bfbb0905020200000000000000003847c1db"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x860}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x415}}, {0x51, &(0x7f0000000100)=@string={0x51, 0x3, "ebedbed826f0ef434688117db21210d06c45eb8f797c940cb7b953b5013c87671ee85a5f3a7dbc782d2269c59806a6478d3cb89d55b105a337e45a88145251466cb663a2b351af850648f883d4a44d"}}]}) 447.227979ms ago: executing program 3 (id=4945): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x2, 0x8}]}, 0xc, 0x1) write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0, 0x3, 0x4}}, 0xffffff4d) unshare(0x2040400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) read(r2, &(0x7f00000000c0)=""/163, 0xd0140f23) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000001c0)={0x10002, 0x0, &(0x7f000068c000/0x1000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 159.888278ms ago: executing program 1 (id=4946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(r1, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=[{0xc, 0x123, 0x7fff}, {0xc, 0x84, 0x400}], 0x18}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x10}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x5452, &(0x7f0000000240)=""/77) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendto$inet(r0, &(0x7f0000000500)="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"/558, 0x22e, 0x86ea08a1d69dd067, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0x5}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg(r1, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=[{0xc, 0x123, 0x7fff}, {0xc, 0x84, 0x400}], 0x18}, 0x0) (async) timer_create(0x3, &(0x7f0000000000)={0x0, 0x10}, &(0x7f0000000080)) (async) timer_settime(r2, 0x1, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) (async) ioctl$EVIOCGLED(r3, 0x5452, &(0x7f0000000240)=""/77) (async) syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) (async) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) sendto$inet(r0, &(0x7f0000000500)="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"/558, 0x22e, 0x86ea08a1d69dd067, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0x5}, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) 96.336517ms ago: executing program 6 (id=4947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x7, 0x1, 0x1, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x32314d4e}) 0s ago: executing program 3 (id=4948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x2) shutdown(r2, 0x0) listen(r2, 0x722) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001000000090001"], 0xd0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x28d, 0x0, 0x2000000}]}) r9 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r12 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r9, 0x4ce1, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): enable register: -EPIPE [ 1466.734903][T26001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4520'. [ 1466.810044][T17738] iowarrior 5-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 1466.935900][T17738] usb 5-1: USB disconnect, device number 32 [ 1467.075240][T26009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4520'. [ 1467.104021][T17719] usb 7-1: USB disconnect, device number 59 [ 1467.274612][T26004] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1467.319545][T26009] bond0 (unregistering): (slave geneve2): Releasing backup interface [ 1467.343761][T26009] bond0 (unregistering): Released all slaves [ 1467.916858][T17738] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1468.289511][T17738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.563885][T26034] input: syz0 as /devices/virtual/input/input194 [ 1468.706890][T17738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1468.725249][T19605] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1468.880791][T17738] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1468.893884][T19605] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1468.921248][T17738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.941176][T19605] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1469.339218][T17738] usb 5-1: config 0 descriptor?? [ 1469.433554][T17738] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1469.473062][T19605] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1469.485616][T17738] dvb-usb: bulk message failed: -22 (3/0) [ 1469.583150][T19605] usb 4-1: USB disconnect, device number 26 [ 1469.590337][T17738] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1469.639820][T17738] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1469.684295][T17738] usb 5-1: media controller created [ 1469.727314][T17738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1469.821564][T17738] dvb-usb: bulk message failed: -22 (6/0) [ 1469.828461][T17723] IPVS: starting estimator thread 0... [ 1469.846920][T17738] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1469.889715][T17738] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input195 [ 1469.940403][T17738] dvb-usb: schedule remote query interval to 150 msecs. [ 1469.960055][T26044] IPVS: using max 38 ests per chain, 91200 per kthread [ 1470.001916][T17738] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1470.024786][T26046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1470.069366][T17738] usb 5-1: USB disconnect, device number 33 [ 1470.198037][T17738] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1470.226527][T26055] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4533'. [ 1470.258858][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1470.258872][ T30] audit: type=1326 audit(1765530452.575:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.289978][ T30] audit: type=1326 audit(1765530452.605:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.333337][ T30] audit: type=1326 audit(1765530452.605:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.356376][T17719] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1470.374660][T26056] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4533'. [ 1470.408120][ T30] audit: type=1326 audit(1765530452.605:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.456843][T17723] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1470.495503][ T30] audit: type=1326 audit(1765530452.605:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.545460][T17719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.592225][T17719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.614559][ T30] audit: type=1326 audit(1765530452.605:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.637300][T17723] usb 7-1: device descriptor read/64, error -71 [ 1470.644239][T17719] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1470.654714][T17719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.663522][ T30] audit: type=1326 audit(1765530452.605:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.690128][T17719] usb 2-1: config 0 descriptor?? [ 1470.773006][ T30] audit: type=1326 audit(1765530452.605:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.900279][T26051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.909617][T26051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.928757][ T30] audit: type=1326 audit(1765530452.605:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1470.952481][T17723] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1471.016862][T17719] usbhid 2-1:0.0: can't add hid device: -71 [ 1471.030119][T17719] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1471.050528][T17719] usb 2-1: USB disconnect, device number 52 [ 1471.056620][ T30] audit: type=1326 audit(1765530452.605:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26052 comm="syz.3.4533" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1471.145773][T26072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.161661][T17723] usb 7-1: device descriptor read/64, error -71 [ 1471.242864][T26074] program syz.5.4538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1471.254896][T26074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4538'. [ 1471.280253][T17723] usb usb7-port1: attempt power cycle [ 1471.626845][T17723] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1471.647598][T17723] usb 7-1: device descriptor read/8, error -71 [ 1471.906856][T17723] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1471.935605][T17723] usb 7-1: device descriptor read/8, error -71 [ 1472.067261][T17723] usb usb7-port1: unable to enumerate USB device [ 1472.157006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.286831][T17738] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1472.436935][T17738] usb 4-1: Using ep0 maxpacket: 8 [ 1472.453233][T17738] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1472.462831][T17738] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1472.465043][T26095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.474283][T17738] usb 4-1: config 0 has no interface number 0 [ 1472.483681][T26095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.517019][T17738] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1472.542223][T17738] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1472.580219][T17738] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1472.632110][T17738] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1472.646391][T17738] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1472.686863][T17738] usb 4-1: Product: syz [ 1472.691179][T17738] usb 4-1: Manufacturer: syz [ 1472.707774][T17738] usb 4-1: config 0 descriptor?? [ 1472.721858][T26083] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1472.836896][T17723] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1473.003458][T17723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.034913][T17723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.056835][T17723] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1473.076964][T17723] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1473.096200][T17723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.109739][T17723] usb 5-1: config 0 descriptor?? [ 1473.175518][T26104] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1473.182104][T26104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1473.193395][T26104] vhci_hcd vhci_hcd.0: Device attached [ 1473.197011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.258416][T26107] vhci_hcd: connection closed [ 1473.259532][T20016] vhci_hcd vhci_hcd.5: stop threads [ 1473.270264][T20016] vhci_hcd vhci_hcd.5: release socket [ 1473.278318][T20016] vhci_hcd vhci_hcd.5: disconnect device [ 1473.312450][T26112] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4551'. [ 1473.364225][T26115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4549'. [ 1473.748807][T17738] usb 4-1: USB disconnect, device number 27 [ 1473.874234][T26125] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4554'. [ 1473.951547][T17723] plantronics 0003:047F:FFFF.00A5: unbalanced collection at end of report description [ 1474.024262][T17723] plantronics 0003:047F:FFFF.00A5: parse failed [ 1474.118409][T17723] plantronics 0003:047F:FFFF.00A5: probe with driver plantronics failed with error -22 [ 1474.206884][T17738] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1474.227129][T26130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.242634][T17723] usb 5-1: USB disconnect, device number 34 [ 1474.395531][T26130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.407615][T17738] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1474.488396][T17738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1474.567785][T17738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1474.816240][T17738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1474.855047][T17738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1474.931708][T17738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1474.963615][T17738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1474.975183][T17738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.003182][T17738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.083233][T17738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1475.163343][T17738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.201580][T17738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.221969][T26143] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4560'. [ 1475.231240][T26143] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4560'. [ 1475.236937][T17738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1475.279928][T17738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.311246][T17738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.414604][T17738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1475.434432][T17738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.447546][T17738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.467216][T17738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1475.474996][T17738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.548880][T17738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.580010][T17738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1475.593761][T17738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.604744][T17738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.617136][T17738] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1475.628724][T17738] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1475.638103][T17180] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1475.648348][T17738] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1475.657192][T17738] usb 4-1: Product: syz [ 1475.661395][T17738] usb 4-1: Manufacturer: syz [ 1475.666016][T17738] usb 4-1: SerialNumber: syz [ 1475.773316][T26158] netlink: 'syz.6.4564': attribute type 3 has an invalid length. [ 1475.846876][T17180] usb 5-1: Using ep0 maxpacket: 32 [ 1475.915746][T17180] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1476.239455][T17738] usb 4-1: config 0 descriptor?? [ 1476.464472][T17180] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1476.483012][T17180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.502551][T17738] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1476.518927][T17180] usb 5-1: Product: syz [ 1476.526915][T17180] usb 5-1: Manufacturer: syz [ 1476.556892][T17180] usb 5-1: SerialNumber: syz [ 1476.594919][T17180] usb 5-1: config 0 descriptor?? [ 1476.670989][ T30] audit: type=1800 audit(1765530458.975:1508): pid=26163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4565" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1476.840977][T26167] vcan0: tx drop: invalid da for name 0x0000000000000010 [ 1476.863220][T26166] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 1476.946571][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 1476.954680][T17738] usb 4-1: USB disconnect, device number 28 [ 1476.979102][T17738] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1477.041140][T17180] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1477.115483][T26174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4567'. [ 1477.326875][T19605] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1477.499144][T19605] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 1477.515465][T19605] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.537470][T19605] usb 7-1: config 0 has no interface number 0 [ 1477.544000][T19605] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1477.556548][T19605] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1477.576001][T19605] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1477.592998][T19605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.602863][T19605] usb 7-1: Product: syz [ 1477.636866][T19605] usb 7-1: Manufacturer: syz [ 1477.641758][T19605] usb 7-1: SerialNumber: syz [ 1477.716478][T19605] usb 7-1: config 0 descriptor?? [ 1477.893789][T26189] fuse: Bad value for 'fd' [ 1478.362611][T26181] pim6reg: entered allmulticast mode [ 1478.372070][T17180] usb 5-1: USB disconnect, device number 35 [ 1480.507397][T26187] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1480.513916][T26187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1480.521962][T26187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1480.528237][T26187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1480.534444][T26187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1480.540880][T26187] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1480.546925][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 1480.649843][T19605] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1480.672514][T19605] usb 7-1: USB disconnect, device number 64 [ 1480.794699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.943995][T26207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.994363][T26207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.116852][T19605] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1481.345404][T26218] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1481.405247][T19605] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1481.416229][T19605] usb 7-1: config 0 has no interface number 0 [ 1481.447812][T19605] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1481.463248][T19605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.472268][T19605] usb 7-1: Product: syz [ 1481.476464][T19605] usb 7-1: Manufacturer: syz [ 1481.481138][T19605] usb 7-1: SerialNumber: syz [ 1481.517389][T19605] usb 7-1: config 0 descriptor?? [ 1481.526393][T17723] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1481.707125][T17723] usb 4-1: Using ep0 maxpacket: 8 [ 1481.720479][T17723] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1481.729073][T17723] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1481.739133][T19605] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1481.750270][T17723] usb 4-1: config 0 has no interface number 0 [ 1481.764689][T17723] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.772524][T19605] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1481.826988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.838349][T17723] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1481.849420][T17723] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1481.924671][T17723] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1481.933947][T17723] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1481.943206][T17723] usb 4-1: Product: syz [ 1481.950366][T17723] usb 4-1: Manufacturer: syz [ 1481.956604][T19605] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1481.975245][T19605] usb 7-1: media controller created [ 1482.000355][T17723] usb 4-1: config 0 descriptor?? [ 1482.009414][T26219] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1482.048632][T19605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1482.188806][T19605] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 1482.502206][T26231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4581'. [ 1482.556835][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1482.562953][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1482.569070][T18636] Bluetooth: hci1: command 0x0406 tx timeout [ 1482.569176][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1482.585406][T26232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.600014][T26232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.626865][T26232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.637327][T26232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.826158][T17723] usb 4-1: USB disconnect, device number 29 [ 1482.876962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.987854][T17719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.054222][T26241] binder: 26236:26241 ioctl c0306201 0 returned -14 [ 1483.161402][T26243] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4583'. [ 1483.407310][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.775435][T17723] usb 7-1: USB disconnect, device number 65 [ 1484.144575][T26253] FAULT_INJECTION: forcing a failure. [ 1484.144575][T26253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.161624][T26253] CPU: 1 UID: 0 PID: 26253 Comm: syz.6.4588 Tainted: G L syzkaller #0 PREEMPT(full) [ 1484.161660][T26253] Tainted: [L]=SOFTLOCKUP [ 1484.161669][T26253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1484.161683][T26253] Call Trace: [ 1484.161693][T26253] [ 1484.161703][T26253] dump_stack_lvl+0x189/0x250 [ 1484.161737][T26253] ? __pfx____ratelimit+0x10/0x10 [ 1484.161768][T26253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1484.161795][T26253] ? __pfx__printk+0x10/0x10 [ 1484.161829][T26253] ? __might_fault+0xb0/0x130 [ 1484.161875][T26253] should_fail_ex+0x414/0x560 [ 1484.161911][T26253] _copy_from_iter+0x1cd/0x1630 [ 1484.161949][T26253] ? __build_skb_around+0x22d/0x3c0 [ 1484.161988][T26253] ? __pfx__copy_from_iter+0x10/0x10 [ 1484.162018][T26253] ? __alloc_skb+0x2f1/0x430 [ 1484.162054][T26253] ? __pfx___alloc_skb+0x10/0x10 [ 1484.162090][T26253] ? netlink_sendmsg+0x642/0xb30 [ 1484.162113][T26253] ? skb_put+0x11b/0x210 [ 1484.162138][T26253] netlink_sendmsg+0x6b2/0xb30 [ 1484.162173][T26253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1484.162202][T26253] ? __import_iovec+0x5d4/0x7f0 [ 1484.162222][T26253] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1484.162249][T26253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1484.162271][T26253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1484.162306][T26253] __sock_sendmsg+0x21c/0x270 [ 1484.162339][T26253] ____sys_sendmsg+0x505/0x820 [ 1484.162368][T26253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1484.162397][T26253] ? kstrtouint+0x6e/0xe0 [ 1484.162434][T26253] ___sys_sendmsg+0x21f/0x2a0 [ 1484.162460][T26253] ? __pfx____sys_sendmsg+0x10/0x10 [ 1484.162490][T26253] ? rcu_read_lock_any_held+0xb3/0x120 [ 1484.162548][T26253] ? __fget_files+0x2a/0x420 [ 1484.162576][T26253] ? __fget_files+0x3a0/0x420 [ 1484.162616][T26253] __sys_sendmsg+0x164/0x220 [ 1484.162641][T26253] ? __pfx___sys_sendmsg+0x10/0x10 [ 1484.162673][T26253] ? __pfx_ksys_write+0x10/0x10 [ 1484.162699][T26253] ? __do_fast_syscall_32+0xbe/0x570 [ 1484.162724][T26253] __do_fast_syscall_32+0x1f7/0x570 [ 1484.162746][T26253] ? rcu_is_watching+0x15/0xb0 [ 1484.162771][T26253] ? do_fast_syscall_32+0x34/0x80 [ 1484.162796][T26253] do_fast_syscall_32+0x34/0x80 [ 1484.162817][T26253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1484.162844][T26253] RIP: 0023:0xf70dd539 [ 1484.162864][T26253] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1484.162883][T26253] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1484.162907][T26253] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1484.162922][T26253] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1484.162936][T26253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1484.162949][T26253] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1484.162962][T26253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1484.162993][T26253] [ 1484.183357][ T30] audit: type=1800 audit(1765530466.485:1509): pid=26255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4587" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1484.547817][T26264] netlink: 'syz.1.4589': attribute type 3 has an invalid length. [ 1484.659715][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1484.891753][T26272] vivid-002: disconnect [ 1485.835817][T26269] vivid-002: reconnect [ 1485.963481][T26287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.974881][T26289] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 1485.991964][T26287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.284875][T26293] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1486.291474][T26293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1486.314193][T26293] vhci_hcd vhci_hcd.0: Device attached [ 1486.334150][T26294] vhci_hcd: connection closed [ 1486.334916][ T5940] vhci_hcd vhci_hcd.6: stop threads [ 1486.345343][ T5940] vhci_hcd vhci_hcd.6: release socket [ 1486.354266][ T5940] vhci_hcd vhci_hcd.6: disconnect device [ 1486.767030][T17180] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1486.936837][T17180] usb 4-1: Using ep0 maxpacket: 8 [ 1487.014479][T17180] usb 4-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 1487.038170][T17180] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 1487.072831][T17180] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1487.111441][T17180] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1487.124783][T17180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.139415][T26307] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4599'. [ 1487.239366][T17180] usb 4-1: Product: syz [ 1487.244623][T17180] usb 4-1: Manufacturer: syz [ 1487.250079][T17180] usb 4-1: SerialNumber: syz [ 1487.280251][T17180] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1487.298026][T17180] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1487.332768][T17180] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1487.866193][T17180] usb 4-1: USB disconnect, device number 30 [ 1489.093546][T26317] FAULT_INJECTION: forcing a failure. [ 1489.093546][T26317] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.107403][T26317] CPU: 1 UID: 0 PID: 26317 Comm: syz.6.4602 Tainted: G L syzkaller #0 PREEMPT(full) [ 1489.107439][T26317] Tainted: [L]=SOFTLOCKUP [ 1489.107447][T26317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1489.107461][T26317] Call Trace: [ 1489.107470][T26317] [ 1489.107480][T26317] dump_stack_lvl+0x189/0x250 [ 1489.107512][T26317] ? __pfx____ratelimit+0x10/0x10 [ 1489.107543][T26317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1489.107569][T26317] ? __pfx__printk+0x10/0x10 [ 1489.107602][T26317] ? __lock_acquire+0x6b6/0x2cf0 [ 1489.107635][T26317] should_fail_ex+0x414/0x560 [ 1489.107670][T26317] should_failslab+0xa8/0x100 [ 1489.107700][T26317] kmem_cache_alloc_noprof+0x88/0x710 [ 1489.107732][T26317] ? __netlink_lookup+0xbd/0x8a0 [ 1489.107758][T26317] ? skb_clone+0x212/0x3a0 [ 1489.107787][T26317] skb_clone+0x212/0x3a0 [ 1489.107815][T26317] __netlink_deliver_tap+0x404/0x850 [ 1489.107854][T26317] ? netlink_deliver_tap+0x2e/0x1b0 [ 1489.107880][T26317] netlink_deliver_tap+0x19c/0x1b0 [ 1489.107906][T26317] netlink_unicast+0x7fa/0x9e0 [ 1489.107946][T26317] ? __pfx_netlink_unicast+0x10/0x10 [ 1489.107969][T26317] ? netlink_sendmsg+0x642/0xb30 [ 1489.107992][T26317] ? skb_put+0x11b/0x210 [ 1489.108016][T26317] netlink_sendmsg+0x805/0xb30 [ 1489.108050][T26317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.108079][T26317] ? __import_iovec+0x5d4/0x7f0 [ 1489.108100][T26317] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1489.108126][T26317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1489.108148][T26317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.108174][T26317] __sock_sendmsg+0x21c/0x270 [ 1489.108206][T26317] ____sys_sendmsg+0x505/0x820 [ 1489.108234][T26317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.108262][T26317] ? kstrtouint+0x6e/0xe0 [ 1489.108297][T26317] ___sys_sendmsg+0x21f/0x2a0 [ 1489.108323][T26317] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.108353][T26317] ? rcu_read_lock_any_held+0xb3/0x120 [ 1489.108408][T26317] ? __fget_files+0x2a/0x420 [ 1489.108438][T26317] ? __fget_files+0x3a0/0x420 [ 1489.108473][T26317] __sys_sendmsg+0x164/0x220 [ 1489.108492][T26317] ? __pfx___sys_sendmsg+0x10/0x10 [ 1489.108515][T26317] ? __pfx_ksys_write+0x10/0x10 [ 1489.108533][T26317] ? __do_fast_syscall_32+0xbe/0x570 [ 1489.108552][T26317] __do_fast_syscall_32+0x1f7/0x570 [ 1489.108567][T26317] ? rcu_is_watching+0x15/0xb0 [ 1489.108586][T26317] ? do_fast_syscall_32+0x34/0x80 [ 1489.108604][T26317] do_fast_syscall_32+0x34/0x80 [ 1489.108619][T26317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1489.108639][T26317] RIP: 0023:0xf70dd539 [ 1489.108654][T26317] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1489.108669][T26317] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1489.108686][T26317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1489.108697][T26317] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1489.108706][T26317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1489.108716][T26317] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1489.108726][T26317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1489.108748][T26317] [ 1489.619673][T26317] veth1_to_team: entered promiscuous mode [ 1489.627182][T26317] ipvlan1: entered promiscuous mode [ 1489.634299][T26317] ipvlan1: left promiscuous mode [ 1489.670068][T26317] veth1_to_team: left promiscuous mode [ 1489.754280][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.779120][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.299530][T26324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4603'. [ 1490.576900][T17723] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1490.969439][T17723] usb 7-1: not running at top speed; connect to a high speed hub [ 1490.998137][T17723] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 1491.009515][T17723] usb 7-1: can't read configurations, error -22 [ 1491.177152][T17723] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1491.267083][T26351] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 1491.375124][T26355] netlink: 'syz.4.4610': attribute type 3 has an invalid length. [ 1491.484500][T17723] usb 7-1: not running at top speed; connect to a high speed hub [ 1491.658215][T17723] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 1491.722541][T17723] usb 7-1: can't read configurations, error -22 [ 1491.743488][T17723] usb usb7-port1: attempt power cycle [ 1491.930552][T17719] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1492.167244][T17723] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1492.196918][T17719] usb 4-1: Using ep0 maxpacket: 8 [ 1492.209754][T17723] usb 7-1: not running at top speed; connect to a high speed hub [ 1492.248875][T17723] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 1492.276929][T17723] usb 7-1: can't read configurations, error -22 [ 1492.334100][T17719] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1492.344186][T17719] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1492.356889][T17719] usb 4-1: config 0 has no interface number 0 [ 1492.376833][T17719] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1492.402665][T17719] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1492.416404][T17719] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1492.456982][T17719] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1492.466165][T17723] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1492.492735][T17719] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1492.512237][T17723] usb 7-1: not running at top speed; connect to a high speed hub [ 1492.530747][T17723] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 1492.557216][T17719] usb 4-1: Product: syz [ 1492.561429][T17719] usb 4-1: Manufacturer: syz [ 1492.586986][T17723] usb 7-1: can't read configurations, error -22 [ 1492.618044][T26365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.638109][T17719] usb 4-1: config 0 descriptor?? [ 1492.657170][T17723] usb usb7-port1: unable to enumerate USB device [ 1492.674535][T26365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.695325][T26353] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1492.703253][T26365] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4612'. [ 1492.779780][T26365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4612'. [ 1492.947714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.039850][T26371] FAULT_INJECTION: forcing a failure. [ 1493.039850][T26371] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.053257][T26371] CPU: 1 UID: 0 PID: 26371 Comm: syz.5.4614 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.053293][T26371] Tainted: [L]=SOFTLOCKUP [ 1493.053301][T26371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1493.053316][T26371] Call Trace: [ 1493.053325][T26371] [ 1493.053336][T26371] dump_stack_lvl+0x189/0x250 [ 1493.053378][T26371] ? __pfx____ratelimit+0x10/0x10 [ 1493.053409][T26371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1493.053437][T26371] ? __pfx__printk+0x10/0x10 [ 1493.053471][T26371] ? __pfx___might_resched+0x10/0x10 [ 1493.053498][T26371] ? fs_reclaim_acquire+0x7d/0x100 [ 1493.053527][T26371] should_fail_ex+0x414/0x560 [ 1493.053562][T26371] should_failslab+0xa8/0x100 [ 1493.053591][T26371] __kmalloc_cache_noprof+0x84/0x700 [ 1493.053614][T26371] ? rtnl_newlink+0xfb/0x1c90 [ 1493.053633][T26371] ? stack_depot_save_flags+0x40/0x850 [ 1493.053670][T26371] rtnl_newlink+0xfb/0x1c90 [ 1493.053690][T26371] ? kasan_save_track+0x4f/0x80 [ 1493.053710][T26371] ? kasan_save_track+0x3e/0x80 [ 1493.053730][T26371] ? kasan_save_free_info+0x46/0x50 [ 1493.053760][T26371] ? __kasan_slab_free+0x5c/0x80 [ 1493.053783][T26371] ? kmem_cache_free+0x197/0x620 [ 1493.053804][T26371] ? nlmon_xmit+0xb0/0x100 [ 1493.053826][T26371] ? dev_hard_start_xmit+0x2cd/0x800 [ 1493.053850][T26371] ? __dev_queue_xmit+0x1493/0x3140 [ 1493.053874][T26371] ? __netlink_deliver_tap+0x5ad/0x850 [ 1493.053897][T26371] ? netlink_deliver_tap+0x19c/0x1b0 [ 1493.053920][T26371] ? netlink_unicast+0x7fa/0x9e0 [ 1493.053939][T26371] ? netlink_sendmsg+0x805/0xb30 [ 1493.053965][T26371] ? __pfx_rtnl_newlink+0x10/0x10 [ 1493.053983][T26371] ? __do_fast_syscall_32+0x1f7/0x570 [ 1493.054003][T26371] ? do_fast_syscall_32+0x34/0x80 [ 1493.054023][T26371] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1493.054084][T26371] ? kasan_quarantine_put+0xdd/0x220 [ 1493.054107][T26371] ? lockdep_hardirqs_on+0x98/0x140 [ 1493.054146][T26371] ? kmem_cache_free+0x197/0x620 [ 1493.054167][T26371] ? nlmon_xmit+0xb0/0x100 [ 1493.054201][T26371] ? __lock_acquire+0x6b6/0x2cf0 [ 1493.054230][T26371] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1493.054258][T26371] ? __dev_queue_xmit+0x289/0x3140 [ 1493.054284][T26371] ? __dev_queue_xmit+0x289/0x3140 [ 1493.054308][T26371] ? __dev_queue_xmit+0x289/0x3140 [ 1493.054370][T26371] ? __pfx_rtnl_newlink+0x10/0x10 [ 1493.054391][T26371] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1493.054430][T26371] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1493.054463][T26371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1493.054496][T26371] ? ref_tracker_free+0x63a/0x7d0 [ 1493.054528][T26371] ? __asan_memcpy+0x40/0x70 [ 1493.054548][T26371] ? __pfx_ref_tracker_free+0x10/0x10 [ 1493.054590][T26371] netlink_rcv_skb+0x208/0x470 [ 1493.054616][T26371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1493.054653][T26371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1493.054688][T26371] ? netlink_deliver_tap+0x2e/0x1b0 [ 1493.054721][T26371] netlink_unicast+0x82f/0x9e0 [ 1493.054751][T26371] ? __pfx_netlink_unicast+0x10/0x10 [ 1493.054776][T26371] ? netlink_sendmsg+0x642/0xb30 [ 1493.054799][T26371] ? skb_put+0x11b/0x210 [ 1493.054824][T26371] netlink_sendmsg+0x805/0xb30 [ 1493.054856][T26371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1493.054878][T26371] ? __import_iovec+0x5d4/0x7f0 [ 1493.054895][T26371] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1493.054922][T26371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1493.054939][T26371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1493.054961][T26371] __sock_sendmsg+0x21c/0x270 [ 1493.054987][T26371] ____sys_sendmsg+0x505/0x820 [ 1493.055010][T26371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1493.055032][T26371] ? kstrtouint+0x6e/0xe0 [ 1493.055067][T26371] ___sys_sendmsg+0x21f/0x2a0 [ 1493.055088][T26371] ? __pfx____sys_sendmsg+0x10/0x10 [ 1493.055112][T26371] ? rcu_read_lock_any_held+0xb3/0x120 [ 1493.055157][T26371] ? __fget_files+0x2a/0x420 [ 1493.055179][T26371] ? __fget_files+0x3a0/0x420 [ 1493.055214][T26371] __sys_sendmsg+0x164/0x220 [ 1493.055234][T26371] ? __pfx___sys_sendmsg+0x10/0x10 [ 1493.055260][T26371] ? __pfx_ksys_write+0x10/0x10 [ 1493.055281][T26371] ? __do_fast_syscall_32+0xbe/0x570 [ 1493.055301][T26371] __do_fast_syscall_32+0x1f7/0x570 [ 1493.055319][T26371] ? rcu_is_watching+0x15/0xb0 [ 1493.055344][T26371] ? do_fast_syscall_32+0x34/0x80 [ 1493.055372][T26371] do_fast_syscall_32+0x34/0x80 [ 1493.055389][T26371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1493.055412][T26371] RIP: 0023:0xf703d539 [ 1493.055432][T26371] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1493.055447][T26371] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1493.055468][T26371] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1493.055484][T26371] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1493.055495][T26371] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1493.055506][T26371] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1493.055517][T26371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1493.055542][T26371] [ 1493.831926][T26380] veth1_to_bond: entered allmulticast mode [ 1493.986990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.090453][T26383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4616'. [ 1494.136988][T17723] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1494.357184][T17723] usb 5-1: not running at top speed; connect to a high speed hub [ 1494.410431][T17719] usb 4-1: USB disconnect, device number 31 [ 1494.508716][T17723] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.685949][T17723] usb 5-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1494.906347][T26387] loop6: detected capacity change from 0 to 524287999 [ 1494.992930][T17723] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1495.009114][T17723] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1495.037015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.103492][T17723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.154375][T17723] usb 5-1: Product: syz [ 1495.260968][T17723] usb 5-1: Manufacturer: syz [ 1495.278587][T17723] usb 5-1: SerialNumber: syz [ 1495.316846][T17719] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1495.542746][T17719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1495.555995][T17719] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1495.581319][T17719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1495.645186][T26373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.660458][T17719] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1495.677170][T26373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.720517][T17719] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1495.745164][T17723] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1495.826962][T17719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.840158][T17723] usb 5-1: USB disconnect, device number 36 [ 1495.865647][T17719] usb 4-1: config 0 descriptor?? [ 1496.127358][T17719] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 1496.134990][T17719] hdpvr 4-1:0.0: device init failed [ 1496.141001][T17719] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1496.153431][T17719] usb 4-1: USB disconnect, device number 32 [ 1496.807217][ T40] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1496.987158][ T40] usb 7-1: Using ep0 maxpacket: 8 [ 1497.011272][ T40] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.046225][ T40] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1497.085833][ T40] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1497.170910][ T40] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1497.186065][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.251110][ T40] usb 7-1: Product: syz [ 1497.255331][ T40] usb 7-1: Manufacturer: syz [ 1497.286844][ T40] usb 7-1: SerialNumber: syz [ 1497.317650][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4622'. [ 1497.407538][ T40] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1497.444507][ T40] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1497.461193][ T40] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1497.506170][T17180] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1497.570288][T26405] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4621'. [ 1497.686842][T17180] usb 4-1: Using ep0 maxpacket: 16 [ 1497.735051][T17180] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.987227][ T40] usb 7-1: USB disconnect, device number 70 [ 1498.063547][T17180] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.090364][T17180] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1498.237549][T26379] veth1_to_bond: left allmulticast mode [ 1498.308153][T17180] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1498.485090][T17180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.511816][T17180] usb 4-1: config 0 descriptor?? [ 1498.642267][T26413] FAULT_INJECTION: forcing a failure. [ 1498.642267][T26413] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.676524][T26413] CPU: 0 UID: 0 PID: 26413 Comm: syz.5.4627 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.676560][T26413] Tainted: [L]=SOFTLOCKUP [ 1498.676569][T26413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1498.676584][T26413] Call Trace: [ 1498.676593][T26413] [ 1498.676604][T26413] dump_stack_lvl+0x189/0x250 [ 1498.676639][T26413] ? __pfx____ratelimit+0x10/0x10 [ 1498.676670][T26413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1498.676698][T26413] ? __pfx__printk+0x10/0x10 [ 1498.676740][T26413] ? __pfx___might_resched+0x10/0x10 [ 1498.676769][T26413] should_fail_ex+0x414/0x560 [ 1498.676805][T26413] should_failslab+0xa8/0x100 [ 1498.676836][T26413] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 1498.676873][T26413] ? __d_alloc+0x37/0x6f0 [ 1498.676910][T26413] __d_alloc+0x37/0x6f0 [ 1498.676958][T26413] d_alloc+0x4b/0x190 [ 1498.676986][T26413] ? lookup_one_qstr_excl+0xc8/0x360 [ 1498.677019][T26413] lookup_one_qstr_excl+0xdc/0x360 [ 1498.677049][T26413] ? lookup_noperm_common+0x245/0x430 [ 1498.677084][T26413] start_dirop+0x5c/0x90 [ 1498.677114][T26413] simple_start_creating+0xc4/0x100 [ 1498.677145][T26413] ? __pfx_simple_start_creating+0x10/0x10 [ 1498.677175][T26413] ? do_raw_spin_unlock+0x122/0x240 [ 1498.677205][T26413] ? mntput+0x65/0xc0 [ 1498.677232][T26413] debugfs_start_creating+0xdb/0x1a0 [ 1498.677260][T26413] __debugfs_create_file+0x6f/0x400 [ 1498.677289][T26413] debugfs_create_file_full+0x3f/0x60 [ 1498.677317][T26413] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 1498.677352][T26413] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1498.677416][T26413] ? trace_kmalloc+0x1f/0xb0 [ 1498.677434][T26413] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 1498.677463][T26413] ? __raw_spin_lock_init+0x45/0x100 [ 1498.677497][T26413] alloc_netdev_mqs+0x272/0x11b0 [ 1498.677524][T26413] ? __pfx_hsr_dev_setup+0x10/0x10 [ 1498.677557][T26413] rtnl_create_link+0x31f/0xcf0 [ 1498.677595][T26413] rtnl_newlink_create+0x25c/0xb00 [ 1498.677633][T26413] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1498.677661][T26413] ? __pfx___mutex_lock+0x10/0x10 [ 1498.677694][T26413] ? ns_capable+0x8a/0xf0 [ 1498.677722][T26413] rtnl_newlink+0x16e7/0x1c90 [ 1498.677760][T26413] ? __pfx_rtnl_newlink+0x10/0x10 [ 1498.677779][T26413] ? __do_fast_syscall_32+0x1f7/0x570 [ 1498.677799][T26413] ? do_fast_syscall_32+0x34/0x80 [ 1498.677819][T26413] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1498.677882][T26413] ? kasan_quarantine_put+0xdd/0x220 [ 1498.677904][T26413] ? lockdep_hardirqs_on+0x98/0x140 [ 1498.677953][T26413] ? kmem_cache_free+0x197/0x620 [ 1498.677975][T26413] ? nlmon_xmit+0xb0/0x100 [ 1498.678012][T26413] ? __lock_acquire+0x6b6/0x2cf0 [ 1498.678038][T26413] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1498.678068][T26413] ? __dev_queue_xmit+0x289/0x3140 [ 1498.678095][T26413] ? __dev_queue_xmit+0x289/0x3140 [ 1498.678119][T26413] ? __dev_queue_xmit+0x289/0x3140 [ 1498.678175][T26413] ? __pfx_rtnl_newlink+0x10/0x10 [ 1498.678196][T26413] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1498.678234][T26413] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1498.678268][T26413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1498.678300][T26413] ? ref_tracker_free+0x63a/0x7d0 [ 1498.678333][T26413] ? __asan_memcpy+0x40/0x70 [ 1498.678353][T26413] ? __pfx_ref_tracker_free+0x10/0x10 [ 1498.678398][T26413] netlink_rcv_skb+0x208/0x470 [ 1498.678425][T26413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1498.678461][T26413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1498.678500][T26413] ? netlink_deliver_tap+0x2e/0x1b0 [ 1498.678533][T26413] netlink_unicast+0x82f/0x9e0 [ 1498.678565][T26413] ? __pfx_netlink_unicast+0x10/0x10 [ 1498.678590][T26413] ? netlink_sendmsg+0x642/0xb30 [ 1498.678613][T26413] ? skb_put+0x11b/0x210 [ 1498.678638][T26413] netlink_sendmsg+0x805/0xb30 [ 1498.678675][T26413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1498.678704][T26413] ? __import_iovec+0x5d4/0x7f0 [ 1498.678725][T26413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1498.678752][T26413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1498.678773][T26413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1498.678800][T26413] __sock_sendmsg+0x21c/0x270 [ 1498.678833][T26413] ____sys_sendmsg+0x505/0x820 [ 1498.678864][T26413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1498.678894][T26413] ? kstrtouint+0x6e/0xe0 [ 1498.678938][T26413] ___sys_sendmsg+0x21f/0x2a0 [ 1498.678965][T26413] ? __pfx____sys_sendmsg+0x10/0x10 [ 1498.678997][T26413] ? rcu_read_lock_any_held+0xb3/0x120 [ 1498.679057][T26413] ? __fget_files+0x2a/0x420 [ 1498.679085][T26413] ? __fget_files+0x3a0/0x420 [ 1498.679125][T26413] __sys_sendmsg+0x164/0x220 [ 1498.679151][T26413] ? __pfx___sys_sendmsg+0x10/0x10 [ 1498.679185][T26413] ? __pfx_ksys_write+0x10/0x10 [ 1498.679213][T26413] ? __do_fast_syscall_32+0xbe/0x570 [ 1498.679238][T26413] __do_fast_syscall_32+0x1f7/0x570 [ 1498.679261][T26413] ? rcu_is_watching+0x15/0xb0 [ 1498.679287][T26413] ? do_fast_syscall_32+0x34/0x80 [ 1498.679314][T26413] do_fast_syscall_32+0x34/0x80 [ 1498.679336][T26413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1498.679363][T26413] RIP: 0023:0xf703d539 [ 1498.679383][T26413] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1498.679402][T26413] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1498.679426][T26413] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1498.679442][T26413] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1498.679456][T26413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1498.679469][T26413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1498.679482][T26413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1498.679516][T26413] [ 1499.558327][T26402] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1499.621778][T17180] nzxt-smart2 0003:1E71:2009.00A6: unknown main item tag 0x0 [ 1499.646946][T17180] nzxt-smart2 0003:1E71:2009.00A6: unknown main item tag 0x0 [ 1499.654409][T17180] nzxt-smart2 0003:1E71:2009.00A6: unknown main item tag 0x0 [ 1499.715872][T17180] nzxt-smart2 0003:1E71:2009.00A6: unknown main item tag 0x0 [ 1499.749184][T17180] nzxt-smart2 0003:1E71:2009.00A6: unknown main item tag 0x0 [ 1499.797134][T17180] nzxt-smart2 0003:1E71:2009.00A6: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1500.326967][T17180] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1500.496902][T17180] usb 2-1: Using ep0 maxpacket: 8 [ 1500.507202][T17180] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1500.517385][T17180] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1500.934946][T17180] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1500.985779][T17180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1501.032150][T17180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.077926][T17738] usb 4-1: reset high-speed USB device number 33 using dummy_hcd [ 1501.096302][T17180] usb 2-1: Product: ᐁ [ 1501.114902][T17180] usb 2-1: Manufacturer: ࠚ [ 1501.149147][T17180] usb 2-1: SerialNumber:   [ 1501.200582][T26435] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1501.256906][T26435] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1501.557672][T26452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1502.299834][T26458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4636'. [ 1502.613512][T26465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1502.888168][ T40] usb 4-1: USB disconnect, device number 33 [ 1503.225443][T26479] FAULT_INJECTION: forcing a failure. [ 1503.225443][T26479] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.244496][T26479] CPU: 1 UID: 0 PID: 26479 Comm: syz.6.4642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.244521][T26479] Tainted: [L]=SOFTLOCKUP [ 1503.244531][T26479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1503.244541][T26479] Call Trace: [ 1503.244550][T26479] [ 1503.244558][T26479] dump_stack_lvl+0x189/0x250 [ 1503.244582][T26479] ? __pfx____ratelimit+0x10/0x10 [ 1503.244617][T26479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1503.244645][T26479] ? __pfx__printk+0x10/0x10 [ 1503.244685][T26479] ? __pfx___might_resched+0x10/0x10 [ 1503.244707][T26479] should_fail_ex+0x414/0x560 [ 1503.244755][T26479] should_failslab+0xa8/0x100 [ 1503.244776][T26479] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 1503.244808][T26479] ? __d_alloc+0x37/0x6f0 [ 1503.244834][T26479] __d_alloc+0x37/0x6f0 [ 1503.244861][T26479] d_alloc+0x4b/0x190 [ 1503.244880][T26479] ? lookup_one_qstr_excl+0xc8/0x360 [ 1503.244905][T26479] lookup_one_qstr_excl+0xdc/0x360 [ 1503.244926][T26479] ? lookup_noperm_common+0x245/0x430 [ 1503.244950][T26479] start_dirop+0x5c/0x90 [ 1503.244971][T26479] simple_start_creating+0xc4/0x100 [ 1503.244994][T26479] ? __pfx_simple_start_creating+0x10/0x10 [ 1503.245016][T26479] ? do_raw_spin_unlock+0x122/0x240 [ 1503.245038][T26479] ? mntput+0x65/0xc0 [ 1503.245058][T26479] debugfs_start_creating+0xdb/0x1a0 [ 1503.245077][T26479] __debugfs_create_file+0x6f/0x400 [ 1503.245097][T26479] debugfs_create_file_full+0x3f/0x60 [ 1503.245116][T26479] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 1503.245140][T26479] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1503.245184][T26479] ? trace_kmalloc+0x1f/0xb0 [ 1503.245196][T26479] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 1503.245217][T26479] ? __raw_spin_lock_init+0x45/0x100 [ 1503.245241][T26479] alloc_netdev_mqs+0x272/0x11b0 [ 1503.245260][T26479] ? __pfx_hsr_dev_setup+0x10/0x10 [ 1503.245282][T26479] rtnl_create_link+0x31f/0xcf0 [ 1503.245308][T26479] rtnl_newlink_create+0x25c/0xb00 [ 1503.245329][T26479] ? __mutex_lock+0x5bb/0x1350 [ 1503.245347][T26479] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1503.245367][T26479] ? __pfx___mutex_lock+0x10/0x10 [ 1503.245389][T26479] ? ns_capable+0x8a/0xf0 [ 1503.245407][T26479] rtnl_newlink+0x16e7/0x1c90 [ 1503.245433][T26479] ? __pfx_rtnl_newlink+0x10/0x10 [ 1503.245446][T26479] ? __do_fast_syscall_32+0x1f7/0x570 [ 1503.245460][T26479] ? do_fast_syscall_32+0x34/0x80 [ 1503.245474][T26479] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.245517][T26479] ? kasan_quarantine_put+0xdd/0x220 [ 1503.245552][T26479] ? lockdep_hardirqs_on+0x98/0x140 [ 1503.245579][T26479] ? kmem_cache_free+0x197/0x620 [ 1503.245594][T26479] ? nlmon_xmit+0xb0/0x100 [ 1503.245618][T26479] ? __lock_acquire+0x6b6/0x2cf0 [ 1503.245636][T26479] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1503.245655][T26479] ? __dev_queue_xmit+0x289/0x3140 [ 1503.245673][T26479] ? __dev_queue_xmit+0x289/0x3140 [ 1503.245691][T26479] ? __dev_queue_xmit+0x289/0x3140 [ 1503.245750][T26479] ? __pfx_rtnl_newlink+0x10/0x10 [ 1503.245772][T26479] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1503.245815][T26479] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1503.245848][T26479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1503.245880][T26479] ? ref_tracker_free+0x63a/0x7d0 [ 1503.245912][T26479] ? __asan_memcpy+0x40/0x70 [ 1503.245932][T26479] ? __pfx_ref_tracker_free+0x10/0x10 [ 1503.245976][T26479] netlink_rcv_skb+0x208/0x470 [ 1503.246002][T26479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1503.246038][T26479] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1503.246075][T26479] ? netlink_deliver_tap+0x2e/0x1b0 [ 1503.246107][T26479] netlink_unicast+0x82f/0x9e0 [ 1503.246139][T26479] ? __pfx_netlink_unicast+0x10/0x10 [ 1503.246162][T26479] ? netlink_sendmsg+0x642/0xb30 [ 1503.246185][T26479] ? skb_put+0x11b/0x210 [ 1503.246211][T26479] netlink_sendmsg+0x805/0xb30 [ 1503.246246][T26479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1503.246274][T26479] ? __import_iovec+0x5d4/0x7f0 [ 1503.246295][T26479] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1503.246323][T26479] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1503.246344][T26479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1503.246370][T26479] __sock_sendmsg+0x21c/0x270 [ 1503.246402][T26479] ____sys_sendmsg+0x505/0x820 [ 1503.246431][T26479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1503.246459][T26479] ? kstrtouint+0x6e/0xe0 [ 1503.246497][T26479] ___sys_sendmsg+0x21f/0x2a0 [ 1503.246523][T26479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1503.246555][T26479] ? rcu_read_lock_any_held+0xb3/0x120 [ 1503.246615][T26479] ? __fget_files+0x2a/0x420 [ 1503.246643][T26479] ? __fget_files+0x3a0/0x420 [ 1503.246684][T26479] __sys_sendmsg+0x164/0x220 [ 1503.246709][T26479] ? __pfx___sys_sendmsg+0x10/0x10 [ 1503.246742][T26479] ? __pfx_ksys_write+0x10/0x10 [ 1503.246768][T26479] ? __do_fast_syscall_32+0xbe/0x570 [ 1503.246805][T26479] __do_fast_syscall_32+0x1f7/0x570 [ 1503.246828][T26479] ? rcu_is_watching+0x15/0xb0 [ 1503.246854][T26479] ? do_fast_syscall_32+0x34/0x80 [ 1503.246881][T26479] do_fast_syscall_32+0x34/0x80 [ 1503.246904][T26479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.246930][T26479] RIP: 0023:0xf70dd539 [ 1503.246949][T26479] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1503.246970][T26479] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1503.246993][T26479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1503.247009][T26479] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1503.247023][T26479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1503.247036][T26479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1503.247048][T26479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1503.247082][T26479] [ 1503.820544][T26479] veth1_to_team: entered promiscuous mode [ 1503.827939][T26479] ipvlan1: entered promiscuous mode [ 1503.834326][T26479] ipvlan1: left promiscuous mode [ 1503.880983][T26479] veth1_to_team: left promiscuous mode [ 1503.932347][T26481] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1504.424407][T26483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.457879][T26483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.706890][T17719] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1504.843166][T17180] usb 2-1: USB disconnect, device number 53 [ 1504.897099][T17719] usb 5-1: Using ep0 maxpacket: 32 [ 1505.000442][T17719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.015711][T26487] veth1_to_team: entered promiscuous mode [ 1505.021598][T17719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.033033][T26487] ipvlan1: entered promiscuous mode [ 1505.119125][T26487] ipvlan1: left promiscuous mode [ 1505.184034][T26487] veth1_to_team: left promiscuous mode [ 1505.202065][T17719] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1505.236932][T17719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.282551][T17719] usb 5-1: config 0 descriptor?? [ 1505.474574][T17719] hub 5-1:0.0: USB hub found [ 1505.557989][T17719] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1505.795523][T17719] hid-generic 0003:046D:C31C.00A7: item fetching failed at offset 0/1 [ 1505.921426][T17719] hid-generic 0003:046D:C31C.00A7: probe with driver hid-generic failed with error -22 [ 1506.169097][T17719] usb 5-1: USB disconnect, device number 37 [ 1508.604560][T26525] syzkaller0: entered promiscuous mode [ 1508.626910][T26525] syzkaller0: entered allmulticast mode [ 1508.751748][ T30] audit: type=1326 audit(1765530491.055:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1508.796406][ T30] audit: type=1326 audit(1765530491.065:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1508.859409][ T30] audit: type=1326 audit(1765530491.065:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1508.882583][ T30] audit: type=1326 audit(1765530491.065:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1508.905199][ T30] audit: type=1326 audit(1765530491.095:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1508.940909][ T30] audit: type=1326 audit(1765530491.095:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1508.964126][ T30] audit: type=1326 audit(1765530491.095:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1509.239954][ T30] audit: type=1326 audit(1765530491.095:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1509.602455][ T30] audit: type=1326 audit(1765530491.095:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1509.890504][ T30] audit: type=1326 audit(1765530491.095:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.6.4654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1509.977781][T26549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.220955][T26549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.398238][T26549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.417324][T26549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.939883][T26561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.194257][ C1] sd 0:0:1:0: [sda] tag#5459 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1511.204784][ C1] sd 0:0:1:0: [sda] tag#5459 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 1511.279084][T26564] binder: 26562:26564 ioctl c0306201 0 returned -14 [ 1511.287928][T26564] binder: 26562:26564 ioctl c0306201 0 returned -14 [ 1511.480076][T26568] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38416761, 8, 0, 0, 0) [ 1511.986953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.850067][T26575] veth1_to_bond: entered allmulticast mode [ 1512.890470][T26575] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4662'. [ 1512.991339][T26581] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4665'. [ 1513.020188][T26581] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4665'. [ 1513.036935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.553644][T26599] trusted_key: encrypted_key: insufficient parameters specified [ 1513.627055][T17719] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1513.927844][T17719] usb 5-1: Using ep0 maxpacket: 8 [ 1514.000569][T17719] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1514.011559][T17719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.020955][T17719] usb 5-1: Product: syz [ 1514.025376][T17719] usb 5-1: Manufacturer: syz [ 1514.035035][T17719] usb 5-1: SerialNumber: syz [ 1514.313245][T17719] usb 5-1: config 0 descriptor?? [ 1514.769140][T17719] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1515.286532][T26578] veth1_to_bond: left allmulticast mode [ 1515.355274][T26614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.373753][T26614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.276986][T17180] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1516.417022][T17180] usb 7-1: device descriptor read/64, error -71 [ 1516.656917][T17180] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1516.787201][T17180] usb 7-1: device descriptor read/64, error -71 [ 1516.897874][T17180] usb usb7-port1: attempt power cycle [ 1516.904249][T17719] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1516.928712][T17719] usb 5-1: USB disconnect, device number 38 [ 1517.175618][T26625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4676'. [ 1517.184884][T26625] openvswitch: netlink: Flow actions attr not present in new flow. [ 1517.257670][T17180] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1517.267336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.298622][T17180] usb 7-1: device descriptor read/8, error -71 [ 1517.560897][T17180] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1517.599917][T17180] usb 7-1: device descriptor read/8, error -71 [ 1517.736291][T17180] usb usb7-port1: unable to enumerate USB device [ 1518.317163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.346866][T17180] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1518.496942][T17180] usb 4-1: Using ep0 maxpacket: 8 [ 1518.507023][T17180] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1518.581172][T17180] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1518.611165][T17180] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1518.634365][T17180] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1518.654328][T17180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.673522][T17180] usb 4-1: Product: ᐁ [ 1518.684731][T17180] usb 4-1: Manufacturer: ࠚ [ 1518.694875][T17180] usb 4-1: SerialNumber:   [ 1518.710672][T26631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1518.720512][T26631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1519.347065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.769716][T17719] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1519.830834][T26654] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4683'. [ 1519.946812][T17719] usb 2-1: Using ep0 maxpacket: 16 [ 1519.956836][T17719] usb 2-1: config index 0 descriptor too short (expected 4644, got 36) [ 1519.965228][T17719] usb 2-1: config 27 has too many interfaces: 211, using maximum allowed: 32 [ 1520.004940][T17719] usb 2-1: config 27 has an invalid descriptor of length 244, skipping remainder of the config [ 1520.055741][T17719] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 211 [ 1520.496912][T17719] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1520.526436][T17719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.577310][T26656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4684'. [ 1520.631527][T26656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4684'. [ 1520.769921][T26646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.817445][T26646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.913353][T17719] usb 2-1: string descriptor 0 read error: -71 [ 1520.936609][T17719] usb 2-1: USB disconnect, device number 54 [ 1520.983755][T17180] usb 4-1: USB disconnect, device number 34 [ 1521.269490][T26666] veth1_to_bond: entered allmulticast mode [ 1521.301781][T26666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4685'. [ 1521.483514][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1521.503195][ T30] audit: type=1326 audit(1765530503.795:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26668 comm="syz.6.4689" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x0 [ 1522.382396][T26680] gre0: entered promiscuous mode [ 1522.387703][T26680] gre0: entered allmulticast mode [ 1523.695751][T17738] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1523.949768][T17738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.961544][T17738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.971811][T17738] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1523.981193][T17738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.010234][T17738] usb 2-1: config 0 descriptor?? [ 1524.289348][T26697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.317407][T26697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.364727][T17738] usbhid 2-1:0.0: can't add hid device: -71 [ 1524.379712][T17738] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1524.424083][T17738] usb 2-1: USB disconnect, device number 55 [ 1524.585605][T26706] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4699'. [ 1524.718967][T26661] veth1_to_bond: left allmulticast mode [ 1525.486834][T17718] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1525.525888][T26716] bridge_slave_1: default FDB implementation only supports local addresses [ 1525.646855][T17718] usb 7-1: Using ep0 maxpacket: 16 [ 1525.654239][T17718] usb 7-1: config index 0 descriptor too short (expected 4644, got 36) [ 1525.663129][T17718] usb 7-1: config 27 has too many interfaces: 211, using maximum allowed: 32 [ 1525.698691][T17718] usb 7-1: config 27 has an invalid descriptor of length 244, skipping remainder of the config [ 1525.718856][T17718] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 211 [ 1525.729050][T17719] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 1525.758736][T17718] usb 7-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1525.778088][T17718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.865024][T26724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.873711][T17719] usb 5-1: device descriptor read/64, error -71 [ 1525.880574][T26724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.030687][T26711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.050353][T26711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.078038][T17718] usb 7-1: string descriptor 0 read error: -71 [ 1526.090581][T17718] usb 7-1: USB disconnect, device number 75 [ 1526.126928][T17719] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 1526.181634][T26730] netlink: 'syz.5.4707': attribute type 4 has an invalid length. [ 1526.253496][T26732] netlink: 'syz.5.4707': attribute type 4 has an invalid length. [ 1526.287272][T17719] usb 5-1: device descriptor read/64, error -71 [ 1526.299795][T26730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.374673][T26730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.398995][T17719] usb usb5-port1: attempt power cycle [ 1526.587157][T17718] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1526.767052][T17719] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 1526.808030][T17718] usb 4-1: Using ep0 maxpacket: 16 [ 1526.818302][T17719] usb 5-1: device descriptor read/8, error -71 [ 1526.959455][T17718] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 1526.969535][T17718] usb 4-1: config 0 has no interface number 0 [ 1526.988783][T17718] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1527.382448][T17718] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1527.411371][T17718] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1527.421534][T17719] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 1527.483416][T17719] usb 5-1: device descriptor read/8, error -71 [ 1527.667447][T17718] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1527.677137][T17718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.685279][T17718] usb 4-1: Product: syz [ 1527.689790][T17718] usb 4-1: Manufacturer: syz [ 1527.694530][T17718] usb 4-1: SerialNumber: syz [ 1527.760977][T17719] usb usb5-port1: unable to enumerate USB device [ 1527.824164][T17718] usb 4-1: config 0 descriptor?? [ 1527.877329][T26733] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1528.327660][T26733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.681433][T26733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.121165][T26733] syzkaller0: entered promiscuous mode [ 1529.127440][T26733] syzkaller0: entered allmulticast mode [ 1529.883532][T17718] usb 4-1: USB disconnect, device number 35 [ 1530.886543][T26770] veth1_to_bond: entered allmulticast mode [ 1530.914715][T26770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4715'. [ 1531.016553][T26774] usb usb8: usbfs: process 26774 (syz.4.4718) did not claim interface 0 before use [ 1531.286843][T26779] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4717'. [ 1532.121725][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4719'. [ 1532.153064][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4719'. [ 1534.027922][T26765] veth1_to_bond: left allmulticast mode [ 1534.542499][T26811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.639262][T26811] netlink: 'syz.3.4724': attribute type 2 has an invalid length. [ 1534.692248][ T30] audit: type=1326 audit(1765530517.005:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1534.780879][T26810] ALSA: mixer_oss: invalid OSS volume '' [ 1535.072236][ T30] audit: type=1326 audit(1765530517.035:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1535.264303][ T30] audit: type=1326 audit(1765530517.035:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1535.441630][ T30] audit: type=1326 audit(1765530517.035:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=181 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1535.469508][ T30] audit: type=1326 audit(1765530517.035:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1535.492127][ T30] audit: type=1326 audit(1765530517.035:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1535.515025][ T30] audit: type=1326 audit(1765530517.035:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1535.586960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.595460][ T30] audit: type=1326 audit(1765530517.035:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1535.617742][ T30] audit: type=1326 audit(1765530517.095:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1535.745061][ T30] audit: type=1326 audit(1765530517.095:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.3.4724" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 1536.626913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.559296][T26848] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4734'. [ 1537.920085][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4736'. [ 1537.936571][T26853] pimreg: entered allmulticast mode [ 1538.466933][T17718] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1538.607393][T17718] usb 7-1: device descriptor read/64, error -71 [ 1538.846857][T17719] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1538.867574][T17718] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1539.006877][T17719] usb 4-1: device descriptor read/64, error -71 [ 1539.018120][T17718] usb 7-1: device descriptor read/64, error -71 [ 1539.159547][T17718] usb usb7-port1: attempt power cycle [ 1539.242175][T26871] netlink: 'syz.1.4743': attribute type 2 has an invalid length. [ 1539.296952][T17719] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1539.437183][T17719] usb 4-1: device descriptor read/64, error -71 [ 1539.526846][T17718] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1539.547657][T17719] usb usb4-port1: attempt power cycle [ 1539.554366][T17718] usb 7-1: device descriptor read/8, error -71 [ 1539.796887][T17718] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1539.829946][T17718] usb 7-1: device descriptor read/8, error -71 [ 1539.907299][T17719] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1539.927621][T17719] usb 4-1: device descriptor read/8, error -71 [ 1539.937486][T17718] usb usb7-port1: unable to enumerate USB device [ 1540.166822][T17719] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1540.187519][T17719] usb 4-1: device descriptor read/8, error -71 [ 1540.307793][T17719] usb usb4-port1: unable to enumerate USB device [ 1540.376815][T17718] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1540.558452][T17718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.573446][T17718] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 1540.595383][T17718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.607469][T17718] usb 2-1: config 0 descriptor?? [ 1540.632048][T17718] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1540.641870][T17718] command write [95] error -22 [ 1540.807210][T17718] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1540.829235][T26881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.850906][T26881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.869467][T17719] usb 2-1: USB disconnect, device number 56 [ 1540.969356][T17718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1540.977999][T17718] usb 5-1: not running at top speed; connect to a high speed hub [ 1540.987465][T17718] usb 5-1: config 73 has an invalid descriptor of length 84, skipping remainder of the config [ 1540.998169][T17718] usb 5-1: config 73 has 0 interfaces, different from the descriptor's value: 2 [ 1541.010940][T17718] usb 5-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a1.f2 [ 1541.022237][T17718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.031270][T17718] usb 5-1: Product: syz [ 1541.035620][T17718] usb 5-1: Manufacturer: syz [ 1541.068773][T17718] usb 5-1: SerialNumber: syz [ 1542.427068][T17719] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1542.777227][T17719] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1542.970419][T17719] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1543.231552][T17719] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.544478][T17718] usb 5-1: USB disconnect, device number 43 [ 1543.887548][T17719] usb 2-1: config 220 has no interface number 2 [ 1543.960896][T17719] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1543.991898][T26928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4757'. [ 1544.027397][T17719] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1544.068388][T17719] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1544.113938][T17719] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1544.201333][T17719] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1544.217988][T17719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.236383][T17719] usb 2-1: Product: syz [ 1544.246438][T17719] usb 2-1: Manufacturer: syz [ 1544.256564][T17719] usb 2-1: SerialNumber: syz [ 1545.070950][T17719] usb 2-1: selecting invalid altsetting 0 [ 1545.270925][T17719] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1545.295190][T17719] uvcvideo 2-1:220.0: No valid video chain found. [ 1545.580949][T17719] usb 2-1: selecting invalid altsetting 0 [ 1545.652547][T17719] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1545.988912][T17719] usb 2-1: USB disconnect, device number 57 [ 1547.011381][T26959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.333413][T26972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.526057][T26972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.736996][T26976] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4769'. [ 1547.761145][T26976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.941793][T26976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.066940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.097969][T26972] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4769'. [ 1548.502106][T26953] sctp: [Deprecated]: syz.1.4765 (pid 26953) Use of int in max_burst socket option. [ 1548.502106][T26953] Use struct sctp_assoc_value instead [ 1548.815289][T26984] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 1549.106945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.198587][T26996] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4776'. [ 1550.414415][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4777'. [ 1550.535270][T17738] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1550.726859][T17180] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1550.740710][T17738] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1550.791761][T17738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.823620][T17738] usb 7-1: Product: syz [ 1550.847217][T17738] usb 7-1: Manufacturer: syz [ 1550.851846][T17738] usb 7-1: SerialNumber: syz [ 1550.878050][T17738] usb 7-1: config 0 descriptor?? [ 1550.896926][T17180] usb 4-1: Using ep0 maxpacket: 32 [ 1550.904809][T17738] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1550.941768][T17180] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1550.973192][T17180] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1550.996925][T17180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1551.103844][T27014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.112928][T27014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.137547][T17180] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1551.319716][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.326072][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.338886][T17738] sonixb 7-1:0.0: Error writing register 01: -71 [ 1551.362692][T17738] sonixb 7-1:0.0: probe with driver sonixb failed with error -71 [ 1551.376579][T17180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1551.392663][T17738] usb 7-1: USB disconnect, device number 80 [ 1551.405575][T17180] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1551.462379][T17180] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1551.472800][T17180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.481479][T17180] usb 4-1: Product: syz [ 1551.485694][T17180] usb 4-1: Manufacturer: syz [ 1551.490748][T17180] usb 4-1: SerialNumber: syz [ 1551.503120][T17180] usb 4-1: config 0 descriptor?? [ 1551.511156][T27002] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1551.535490][T17180] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1551.775089][T17723] usb 4-1: USB disconnect, device number 40 [ 1552.233117][T27021] netlink: 388 bytes leftover after parsing attributes in process `syz.6.4785'. [ 1552.341644][T27025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1552.899595][ T30] audit: type=1400 audit(1765530535.215:1540): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=27023 comm="syz.1.4784" [ 1552.920340][T27024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1553.553543][T27036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.577164][T17719] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1553.644798][T27036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.741949][T17719] usb 4-1: device descriptor read/64, error -71 [ 1554.070654][T17719] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1554.497937][T17719] usb 4-1: device descriptor read/64, error -71 [ 1554.657173][T17719] usb usb4-port1: attempt power cycle [ 1554.829525][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1554.924759][T27053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1555.086821][T17719] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1555.148190][T17719] usb 4-1: device descriptor read/8, error -71 [ 1555.396805][T17719] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1555.447483][T17719] usb 4-1: device descriptor read/8, error -71 [ 1555.585902][T17719] usb usb4-port1: unable to enumerate USB device [ 1556.755807][T27072] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 1558.044678][T27089] syzkaller0: entered promiscuous mode [ 1558.070559][T27089] syzkaller0: entered allmulticast mode [ 1558.850878][T27107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.886819][T27107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.971593][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4810'. [ 1559.766829][T17180] usb 7-1: new low-speed USB device number 81 using dummy_hcd [ 1559.942225][T27132] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4816'. [ 1559.958168][T17180] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1560.133237][T17180] usb 7-1: config 0 has no interface number 0 [ 1560.369308][T17180] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1560.499495][T17180] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1560.618280][T17180] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1560.754425][T17180] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1560.932522][ T40] IPVS: starting estimator thread 0... [ 1560.953013][T17180] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1560.989299][T27138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.062526][T17180] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1561.077788][T27138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.086979][T27139] IPVS: using max 37 ests per chain, 88800 per kthread [ 1561.107040][T17180] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1561.123812][T17180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.135723][T17180] usb 7-1: config 0 descriptor?? [ 1561.194899][T27125] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1561.246476][T27138] netlink: 'syz.5.4817': attribute type 4 has an invalid length. [ 1561.247425][T27125] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1561.293341][T17180] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1561.314069][T27138] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4817'. [ 1561.488797][T27120] ldusb 7-1:0.55: Write buffer overflow, 1685414111 bytes dropped [ 1562.737050][ T40] usb 7-1: USB disconnect, device number 81 [ 1563.084331][T17719] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1563.230613][ T40] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1563.248453][T17719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.258896][T17719] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1563.268054][T17719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.324464][T17719] usb 4-1: config 0 descriptor?? [ 1563.365411][T17719] pwc: Askey VC010 type 2 USB webcam detected. [ 1563.643288][ T40] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1563.850232][T17719] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1563.856926][ T40] usb 7-1: Using ep0 maxpacket: 16 [ 1563.864017][ T40] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.914906][T17719] pwc: recv_control_msg error -32 req 02 val 2700 [ 1563.917567][ T40] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1563.947342][T17719] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1563.955143][T17719] pwc: recv_control_msg error -71 req 04 val 1000 [ 1563.961609][ T40] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1563.980310][T17719] pwc: recv_control_msg error -71 req 04 val 1300 [ 1563.988978][T17719] pwc: recv_control_msg error -71 req 04 val 1400 [ 1564.005565][T17719] pwc: recv_control_msg error -71 req 02 val 2000 [ 1564.019073][T17719] pwc: recv_control_msg error -71 req 02 val 2100 [ 1564.034223][T17719] pwc: recv_control_msg error -71 req 04 val 1500 [ 1564.036009][ T40] usb 7-1: Manufacturer: syz [ 1564.070052][T17719] pwc: recv_control_msg error -71 req 02 val 2500 [ 1564.086949][T27167] binder: 27164:27167 ioctl 3ba0 80000080 returned -22 [ 1564.098648][T17719] pwc: recv_control_msg error -71 req 02 val 2400 [ 1564.112173][ T40] usb 7-1: config 0 descriptor?? [ 1564.148875][T17719] pwc: recv_control_msg error -71 req 02 val 2600 [ 1564.179310][T17719] pwc: recv_control_msg error -71 req 02 val 2900 [ 1564.227552][T17719] pwc: recv_control_msg error -71 req 02 val 2800 [ 1564.313535][T17719] pwc: recv_control_msg error -71 req 04 val 1100 [ 1564.332917][T17723] usb 7-1: USB disconnect, device number 82 [ 1564.349281][T17719] pwc: recv_control_msg error -71 req 04 val 1200 [ 1564.378173][T17719] pwc: Registered as video103. [ 1564.426564][T17719] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input200 [ 1564.557224][T17719] usb 4-1: USB disconnect, device number 45 [ 1564.868498][T27175] fuse: Bad value for 'fd' [ 1564.953168][T27177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.069365][T27177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.296867][T17719] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1565.459927][T17719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.487021][T17719] usb 7-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1565.502267][T17719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.525824][T17719] usb 7-1: config 0 descriptor?? [ 1566.092632][T17719] hid-alps 0003:044E:1215.00A8: hidraw0: USB HID v58.6c Device [HID 044e:1215] on usb-dummy_hcd.6-1/input0 [ 1566.557770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.015853][ T30] audit: type=1326 audit(1765530549.325:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.079255][ T30] audit: type=1326 audit(1765530549.355:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.152136][ T30] audit: type=1326 audit(1765530549.355:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=447 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.596899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.606345][T27216] input: syz0 as /devices/virtual/input/input201 [ 1567.681834][ T30] audit: type=1326 audit(1765530549.355:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.681892][ T30] audit: type=1326 audit(1765530549.355:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.681939][ T30] audit: type=1326 audit(1765530549.355:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.681986][ T30] audit: type=1326 audit(1765530549.355:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.682035][ T30] audit: type=1326 audit(1765530549.355:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.682084][ T30] audit: type=1326 audit(1765530549.355:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.682132][ T30] audit: type=1326 audit(1765530549.355:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27207 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1567.911448][ T40] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1568.097660][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 1568.115200][T27220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.115523][T27220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.134676][ T40] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1568.134719][ T40] usb 5-1: can't read configurations, error -61 [ 1568.177119][T17180] usb 7-1: USB disconnect, device number 83 [ 1568.290756][ T40] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1568.446926][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 1568.455673][ T40] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1568.463375][ T40] usb 5-1: can't read configurations, error -61 [ 1568.485676][ T40] usb usb5-port1: attempt power cycle [ 1568.626940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.767017][T17180] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1568.841996][T27232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.846856][ T40] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1568.866407][T27232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.901458][T27232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.917817][T27232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.926087][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 1569.004364][ T40] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1569.012108][T17180] usb 2-1: Using ep0 maxpacket: 16 [ 1569.019043][T17180] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1569.030843][ T40] usb 5-1: can't read configurations, error -61 [ 1569.038002][T17180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1569.056606][T17180] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1569.065932][T17180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.075131][T17180] usb 2-1: Product: syz [ 1569.080458][T17180] usb 2-1: Manufacturer: syz [ 1569.085562][T17180] usb 2-1: SerialNumber: syz [ 1569.098495][T17180] usb 2-1: config 0 descriptor?? [ 1569.114040][T17180] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1569.124480][T17180] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1569.176867][ T40] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1569.208343][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 1569.215644][ T40] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1569.216961][T17718] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1569.223371][ T40] usb 5-1: can't read configurations, error -61 [ 1569.238010][ T40] usb usb5-port1: unable to enumerate USB device [ 1569.310641][T27227] sctp: [Deprecated]: syz.1.4840 (pid 27227) Use of int in max_burst socket option. [ 1569.310641][T27227] Use struct sctp_assoc_value instead [ 1569.498833][T17718] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 1569.507196][T17718] usb 4-1: config 0 has no interface number 0 [ 1569.513335][T17718] usb 4-1: too many endpoints for config 0 interface 136 altsetting 23: 198, using maximum allowed: 30 [ 1569.524569][T17718] usb 4-1: config 0 interface 136 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 198 [ 1569.539043][T17718] usb 4-1: config 0 interface 136 has no altsetting 0 [ 1569.547890][T17718] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1569.557153][T17718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.565191][T17718] usb 4-1: Product: syz [ 1569.569564][T17718] usb 4-1: Manufacturer: syz [ 1569.574178][T17718] usb 4-1: SerialNumber: syz [ 1569.581321][T17718] usb 4-1: config 0 descriptor?? [ 1569.739850][T17180] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1569.747829][T17180] em28xx 2-1:0.0: Config register raw data: 0x56 [ 1569.754746][T17180] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1569.762555][T17180] em28xx 2-1:0.0: No AC97 audio processor [ 1569.801712][T27234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.816923][T27234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.905332][T17718] usb 4-1: USB disconnect, device number 46 [ 1570.327968][T17718] usb 2-1: USB disconnect, device number 58 [ 1570.334867][T17718] em28xx 2-1:0.0: Disconnecting em28xx [ 1570.376657][T17718] em28xx 2-1:0.0: Freeing device [ 1570.713834][T27256] syzkaller0: entered promiscuous mode [ 1570.720595][T27256] syzkaller0: entered allmulticast mode [ 1570.882287][T17738] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1571.051753][T17738] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1571.081229][T17738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.101768][T17738] usb 2-1: Product: syz [ 1571.138675][T17738] usb 2-1: Manufacturer: syz [ 1571.147979][T17738] usb 2-1: SerialNumber: syz [ 1571.174738][T17738] usb 2-1: config 0 descriptor?? [ 1571.208346][T17738] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1571.467608][T17738] gspca_sunplus: reg_w_riv err -71 [ 1571.493297][T17738] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1571.528246][T17738] usb 2-1: USB disconnect, device number 59 [ 1571.788921][T27286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4855'. [ 1571.798030][T27286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4855'. [ 1572.370019][T27298] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1572.786579][T27238] delete_channel: no stack [ 1572.887024][ T40] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1572.895791][T27298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1573.047434][T27298] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1573.056810][ T40] usb 4-1: Using ep0 maxpacket: 8 [ 1573.341736][T27305] ip6t_REJECT: ECHOREPLY is not supported [ 1573.395704][ T40] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1573.404105][ T40] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1573.416916][ T40] usb 4-1: config 0 has no interface number 0 [ 1573.423579][ T40] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1573.441741][T27309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4861'. [ 1573.451101][ T40] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1573.487527][ T40] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1574.362352][ T40] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1574.414865][T27311] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4862'. [ 1574.454887][ T40] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1574.464581][ T40] usb 4-1: Product: syz [ 1574.469585][ T40] usb 4-1: Manufacturer: syz [ 1574.482851][ T40] usb 4-1: config 0 descriptor?? [ 1574.494568][T27297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1575.220258][T27324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=5 (10 ns) > initial count (8 ns). Using initial count to start timer. [ 1575.448782][T27328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4866'. [ 1576.679097][T27336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4868'. [ 1576.797913][ T40] usb 4-1: USB disconnect, device number 47 [ 1576.808791][T27336] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4868'. [ 1576.898607][T27341] loop3: detected capacity change from 0 to 1 [ 1576.926487][T27341] Dev loop3: unable to read RDB block 1 [ 1576.966818][T27341] loop3: unable to read partition table [ 1576.979271][T27341] loop3: partition table beyond EOD, truncated [ 1576.990490][T27341] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1577.397222][T27362] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4873'. [ 1577.446973][T27362] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4873'. [ 1577.483265][T17719] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 1577.497244][T27357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.796985][T17719] usb 2-1: Invalid ep0 maxpacket: 64 [ 1577.842519][T27357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.937848][T17719] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 1578.252472][T17719] usb 2-1: Invalid ep0 maxpacket: 64 [ 1578.266015][T17719] usb usb2-port1: attempt power cycle [ 1578.519744][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4877'. [ 1578.656882][T17719] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 1578.718549][T17719] usb 2-1: Invalid ep0 maxpacket: 64 [ 1578.729619][T27380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1578.741160][T27380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1578.836797][ T40] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1578.856874][T17719] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 1578.877597][T17719] usb 2-1: Invalid ep0 maxpacket: 64 [ 1578.883322][T17719] usb usb2-port1: unable to enumerate USB device [ 1578.988705][ T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.006926][ T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1579.021022][ T40] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1579.039556][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1579.051271][ T40] usb 5-1: SerialNumber: syz [ 1579.166879][T27392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.177401][T27392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.290206][ T40] usb 5-1: 0:2 : does not exist [ 1579.330203][ T40] usb 5-1: USB disconnect, device number 48 [ 1579.400734][T18571] udevd[18571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1580.475626][T27408] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4883'. [ 1580.546944][ T40] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1580.810171][ T40] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1580.839411][ T40] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1580.861858][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1580.873345][ T40] usb 2-1: Product: syz [ 1580.877833][ T40] usb 2-1: Manufacturer: syz [ 1580.882625][ T40] usb 2-1: SerialNumber: syz [ 1580.988806][T27421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.034164][T27421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.121449][ T40] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1581.150028][ T40] usb 2-1: USB disconnect, device number 64 [ 1581.172063][ T40] usblp0: removed [ 1581.354087][T27427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1582.459177][T27433] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4888'. [ 1582.601919][T27440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1582.615557][T27440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1583.455741][T27457] fuse: Bad value for 'fd' [ 1583.572706][T27460] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4894'. [ 1583.738842][T27460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 1583.796566][T27460] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4894'. [ 1584.676924][T17718] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1584.869525][T17718] usb 5-1: Using ep0 maxpacket: 8 [ 1584.878972][T17718] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1584.888175][T17718] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1584.896382][T17718] usb 5-1: config 0 has no interface number 0 [ 1584.908212][T17718] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1584.936920][T17718] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1584.966876][T17718] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1585.243124][T17718] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1585.311379][T17718] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1585.321047][T17718] usb 5-1: Product: syz [ 1585.325253][T17718] usb 5-1: Manufacturer: syz [ 1585.352148][T17718] usb 5-1: config 0 descriptor?? [ 1585.367755][T27472] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1585.475075][T27485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4899'. [ 1585.592516][T27489] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4901'. [ 1585.855493][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4899'. [ 1585.949634][T27494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.961828][T27494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.011575][T27494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.040444][T27494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.103177][T27494] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4902'. [ 1587.217379][T17738] usb 7-1: new low-speed USB device number 84 using dummy_hcd [ 1587.360273][T27512] tipc: Enabling of bearer rejected, failed to enable media [ 1587.489174][T17738] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1587.497455][T17738] usb 7-1: config 0 has no interface number 0 [ 1587.550958][T17718] usb 5-1: USB disconnect, device number 49 [ 1587.553880][ T40] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1587.584761][T17738] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1587.617238][T17738] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1587.684469][T17738] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1587.700635][T17738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.726891][ T40] usb 2-1: Using ep0 maxpacket: 16 [ 1587.764724][T17738] usb 7-1: config 0 descriptor?? [ 1587.888811][ T40] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 1587.898356][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.958309][ T40] usb 2-1: Product: syz [ 1587.965009][ T40] usb 2-1: Manufacturer: syz [ 1587.969783][ T40] usb 2-1: SerialNumber: syz [ 1587.980399][T27504] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1588.028034][T17738] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1588.047580][ T40] usb 2-1: config 0 descriptor?? [ 1588.070615][ T40] usb 2-1: bad CDC descriptors [ 1588.265858][ T40] usb 7-1: USB disconnect, device number 84 [ 1588.265931][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1588.385778][T27511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.395320][T27511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.410496][T27511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.419886][T27511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.436202][T17718] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1588.616849][T17718] usb 5-1: Using ep0 maxpacket: 32 [ 1588.632461][T17718] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1588.641745][T17718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.663544][T17718] usb 5-1: Product: syz [ 1588.668925][T17718] usb 5-1: Manufacturer: syz [ 1588.676964][T17718] usb 5-1: SerialNumber: syz [ 1588.907425][T27526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.916495][T27526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.922879][T27519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.015462][T27519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.024831][T17718] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 1589.063789][T17718] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1589.083163][T17718] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1589.096360][T27519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.105216][T27519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.139335][T17718] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1589.446781][ T40] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1589.606836][ T40] usb 7-1: Using ep0 maxpacket: 32 [ 1589.616954][ T40] usb 7-1: config 4 has an invalid interface number: 134 but max is 3 [ 1589.625442][ T40] usb 7-1: config 4 has an invalid interface number: 6 but max is 3 [ 1589.634282][ T40] usb 7-1: config 4 has an invalid interface number: 89 but max is 3 [ 1589.646920][ T40] usb 7-1: config 4 has an invalid interface number: 176 but max is 3 [ 1589.665260][ T40] usb 7-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1589.690334][ T40] usb 7-1: config 4 has no interface number 0 [ 1589.725597][ T40] usb 7-1: config 4 has no interface number 1 [ 1589.737612][ T40] usb 7-1: config 4 has no interface number 2 [ 1589.743992][ T40] usb 7-1: config 4 has no interface number 3 [ 1589.759516][ T40] usb 7-1: config 4 interface 134 altsetting 1 endpoint 0x9 has an invalid bInterval 41, changing to 7 [ 1589.778030][ T40] usb 7-1: config 4 interface 134 altsetting 1 endpoint 0xD has an invalid bInterval 233, changing to 7 [ 1589.846061][ T40] usb 7-1: config 4 interface 134 altsetting 1 endpoint 0xB has invalid maxpacket 2007, setting to 64 [ 1589.925104][ T40] usb 7-1: config 4 interface 89 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1589.983314][ T40] usb 7-1: config 4 interface 89 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1590.013700][ T40] usb 7-1: config 4 interface 89 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1590.028175][ T40] usb 7-1: config 4 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1590.039273][ T40] usb 7-1: config 4 interface 89 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1590.050275][ T40] usb 7-1: config 4 interface 176 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1590.061353][ T40] usb 7-1: config 4 interface 176 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 1590.079766][ T40] usb 7-1: config 4 interface 176 altsetting 8 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1590.187400][ T40] usb 7-1: config 4 interface 176 altsetting 8 endpoint 0x83 has an invalid bInterval 243, changing to 7 [ 1590.297800][ T40] usb 7-1: config 4 interface 176 altsetting 8 endpoint 0x83 has invalid maxpacket 41624, setting to 1024 [ 1590.321563][T17738] usb 2-1: USB disconnect, device number 65 [ 1590.358142][ T40] usb 7-1: config 4 interface 176 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1590.398280][ T40] usb 7-1: config 4 interface 176 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 1590.411851][ T40] usb 7-1: config 4 interface 176 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 1590.476935][ T40] usb 7-1: config 4 interface 176 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 1590.489206][ T40] usb 7-1: config 4 interface 176 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1590.506819][ T40] usb 7-1: config 4 interface 176 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1590.524777][ T40] usb 7-1: config 4 interface 176 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1590.687968][ T40] usb 7-1: config 4 interface 176 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 1590.821970][ T40] usb 7-1: config 4 interface 176 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1590.853114][ T40] usb 7-1: config 4 interface 176 altsetting 8 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 1591.050631][T17718] usb 5-1: USB disconnect, device number 50 [ 1591.065781][T17718] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1591.124124][ T40] usb 7-1: config 4 interface 134 has no altsetting 0 [ 1591.134236][ T40] usb 7-1: config 4 interface 6 has no altsetting 0 [ 1591.144359][ T40] usb 7-1: config 4 interface 89 has no altsetting 0 [ 1591.145041][T17718] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1591.151957][ T40] usb 7-1: config 4 interface 176 has no altsetting 0 [ 1591.203789][T17718] visor 5-1:1.0: device disconnected [ 1591.231367][ T40] usb 7-1: New USB device found, idVendor=1b80, idProduct=e409, bcdDevice=1b.aa [ 1591.243027][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.253872][ T40] usb 7-1: Product: 槶慇﯀ￖ᥯࣍漶겹뭯젙桩隷ứꘄ츚읪낼결걾጗疩癉ꬎ콩騙ӫꁛﾛҜꐖ趾⾑蝩쐦蔉ᩍ傅쭏 [ 1591.356799][ T40] usb 7-1: Manufacturer: Є [ 1591.361475][ T40] usb 7-1: SerialNumber: 衇ꬌ쎔鵼괍쨟起봘匹謬폁Ꞃ㚓밨ᵦʽ떗蚘䢧ﳁ阏緲ꕫ섷凾戉唼蝑箈䛄猎袻䆁梛뉉ᩌ鏘ề닮說씍둍턇窍鰋쫥嚰ꐦ壍䍰떍态依꾁᫫롩뉾⠂鸓鵆놻犰癐⧇ꇸ๮皆笨噽ꀡ䣽ꔅ镠픁煖솨⍤粛⑮膧੡ [ 1591.590879][T27554] loop2: detected capacity change from 0 to 7 [ 1591.662961][T27553] __nla_validate_parse: 3 callbacks suppressed [ 1591.663014][T27553] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4916'. [ 1591.721375][T27554] loop2: [ 1591.724424][T27554] loop2: partition table partially beyond EOD, truncated [ 1592.209471][ T40] usb 7-1: USB disconnect, device number 85 [ 1592.631877][T27560] usb usb8: usbfs: process 27560 (syz.6.4920) did not claim interface 0 before use [ 1592.896987][ T40] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1593.073016][ T40] usb 4-1: device descriptor read/64, error -71 [ 1593.326834][T17718] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 1593.357745][ T40] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1593.576969][ T40] usb 4-1: device descriptor read/64, error -71 [ 1593.586461][T17718] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1593.661456][T17718] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1593.697934][ T40] usb usb4-port1: attempt power cycle [ 1593.788369][T17718] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 1593.925512][T17718] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1593.952901][T17718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.985178][T27571] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1594.004116][T27571] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1594.029615][T17718] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1594.136860][ T40] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1594.157523][ T40] usb 4-1: device descriptor read/8, error -71 [ 1594.396825][ T40] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1594.449134][ T40] usb 4-1: device descriptor read/8, error -71 [ 1594.603456][ T40] usb usb4-port1: unable to enumerate USB device [ 1595.516843][T17718] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1595.686964][T17718] usb 2-1: Using ep0 maxpacket: 32 [ 1595.703437][T17718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.743566][T17718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.767076][T17718] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1595.804000][T17718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.836880][T17718] usb 2-1: config 0 descriptor?? [ 1596.078116][T17738] usb 7-1: USB disconnect, device number 86 [ 1596.247038][T17723] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1596.302017][T17718] savu 0003:1E7D:2D5A.00A9: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1596.467210][T17723] usb 4-1: Using ep0 maxpacket: 32 [ 1596.484066][T27604] input: syz1 as /devices/virtual/input/input205 [ 1596.514406][T17723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1596.549444][T17723] usb 4-1: config 125 has an invalid interface number: 27 but max is 0 [ 1596.588786][T17723] usb 4-1: config 125 has no interface number 0 [ 1596.611864][T17723] usb 4-1: config 125 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1596.794508][T17723] usb 4-1: config 125 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1596.799941][ T40] usb 2-1: USB disconnect, device number 66 [ 1596.808142][T17723] usb 4-1: config 125 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1596.826959][T17723] usb 4-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1596.838145][T17723] usb 4-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1596.853897][T17723] usb 4-1: config 125 interface 27 has no altsetting 0 [ 1596.871462][T17723] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1596.885152][T17723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.894333][T17723] usb 4-1: Product: syz [ 1596.898587][T17723] usb 4-1: Manufacturer: syz [ 1596.905572][T17723] usb 4-1: SerialNumber: syz [ 1596.915063][T27596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1597.354396][T17723] hub 4-1:125.27: bad descriptor, ignoring hub [ 1597.375668][T17723] hub 4-1:125.27: probe with driver hub failed with error -5 [ 1597.386401][T17723] sierra 4-1:125.27: Sierra USB modem converter detected [ 1597.397953][T17723] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1597.499996][T17723] usb 4-1: USB disconnect, device number 52 [ 1597.536039][T17723] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1597.561004][T27613] input: syz0 as /devices/virtual/input/input206 [ 1597.599854][T17723] sierra 4-1:125.27: device disconnected [ 1599.275541][T27630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.308602][T27630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.647322][ T40] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1599.816802][ T40] usb 2-1: Using ep0 maxpacket: 16 [ 1599.905156][ T40] usb 2-1: config 0 has no interfaces? [ 1600.006984][T17738] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1600.099414][ T40] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1600.134360][ T40] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1600.148271][ T40] usb 2-1: Manufacturer: syz [ 1600.189945][ T40] usb 2-1: config 0 descriptor?? [ 1600.287868][T17738] usb 5-1: Using ep0 maxpacket: 32 [ 1600.322167][T17738] usb 5-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 1600.342675][T17738] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 1600.370271][T17738] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1600.385290][T17738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1600.394008][T17738] usb 5-1: SerialNumber: syz [ 1600.408956][T17738] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1600.427378][T17738] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1600.434469][T17738] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1600.697056][T17718] usb 5-1: USB disconnect, device number 51 [ 1600.728153][T27649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.739274][T27649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.142448][T27638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.291526][T27638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.392950][T27638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1602.467965][T17718] usb 2-1: USB disconnect, device number 67 [ 1602.730917][T27668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1602.776152][T27646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1602.935640][T27663] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4943'. [ 1602.944765][T27663] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1602.997611][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.106981][T17738] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1603.118066][T27676] [ 1603.120417][T27676] ===================================================== [ 1603.127342][T27676] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1603.134806][T27676] syzkaller #0 Tainted: G L [ 1603.140786][T27676] ----------------------------------------------------- [ 1603.147727][T27676] syz.1.4946/27676 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1603.155440][T27676] ffff888075998750 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1603.164153][T27676] [ 1603.164153][T27676] and this task is already holding: [ 1603.171517][T27676] ffff8880794e8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1603.181275][T27676] which would create a new lock dependency: [ 1603.187160][T27676] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1603.195259][T27676] [ 1603.195259][T27676] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1603.204705][T27676] (&dev->event_lock#2){..-.}-{3:3} [ 1603.204735][T27676] [ 1603.204735][T27676] ... which became SOFTIRQ-irq-safe at: [ 1603.217624][T27676] lock_acquire+0x117/0x340 [ 1603.222214][T27676] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1603.227500][T27676] input_event+0x76/0xe0 [ 1603.231829][T27676] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 1603.237550][T27676] __usb_hcd_giveback_urb+0x376/0x540 [ 1603.243020][T27676] dummy_timer+0x85f/0x45b0 [ 1603.247623][T27676] __hrtimer_run_queues+0x51c/0xc30 [ 1603.252918][T27676] hrtimer_run_softirq+0x187/0x2b0 [ 1603.258138][T27676] handle_softirqs+0x27d/0x850 [ 1603.262996][T27676] __irq_exit_rcu+0xca/0x1f0 [ 1603.267673][T27676] irq_exit_rcu+0x9/0x30 [ 1603.272003][T27676] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1603.277730][T27676] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1603.283849][T27676] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1603.289658][T27676] dummy_urb_enqueue+0x58a/0x780 [ 1603.294681][T27676] usb_hcd_submit_urb+0x328/0x1b80 [ 1603.299896][T27676] atp_open+0x63/0xc0 [ 1603.303966][T27676] input_open_device+0x1d3/0x390 [ 1603.308988][T27676] mousedev_open_device+0xcc/0x150 [ 1603.314187][T27676] mousedev_open+0x2ef/0x4a0 [ 1603.318869][T27676] chrdev_open+0x4cc/0x5e0 [ 1603.323374][T27676] do_dentry_open+0x7ce/0x1420 [ 1603.328227][T27676] vfs_open+0x3b/0x340 [ 1603.332384][T27676] path_openat+0x340e/0x3dd0 [ 1603.337054][T27676] do_filp_open+0x1fa/0x410 [ 1603.341639][T27676] do_sys_openat2+0x121/0x200 [ 1603.346402][T27676] __x64_sys_openat+0x138/0x170 [ 1603.351346][T27676] do_syscall_64+0xfa/0xf80 [ 1603.355941][T27676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.361919][T27676] [ 1603.361919][T27676] to a SOFTIRQ-irq-unsafe lock: [ 1603.368935][T27676] (tasklist_lock){.+.+}-{3:3} [ 1603.368961][T27676] [ 1603.368961][T27676] ... which became SOFTIRQ-irq-unsafe at: [ 1603.381591][T27676] ... [ 1603.381598][T27676] lock_acquire+0x117/0x340 [ 1603.388760][T27676] _raw_read_lock+0x36/0x50 [ 1603.393350][T27676] __do_wait+0xde/0x740 [ 1603.397593][T27676] do_wait+0x1e8/0x4f0 [ 1603.401752][T27676] kernel_wait+0xab/0x170 [ 1603.406170][T27676] call_usermodehelper_exec_work+0xbe/0x230 [ 1603.412148][T27676] process_scheduled_works+0xad1/0x1770 [ 1603.417777][T27676] worker_thread+0x8a0/0xda0 [ 1603.422454][T27676] kthread+0x711/0x8a0 [ 1603.426609][T27676] ret_from_fork+0x599/0xb30 [ 1603.431301][T27676] ret_from_fork_asm+0x1a/0x30 [ 1603.436154][T27676] [ 1603.436154][T27676] other info that might help us debug this: [ 1603.436154][T27676] [ 1603.446377][T27676] Chain exists of: [ 1603.446377][T27676] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1603.446377][T27676] [ 1603.459942][T27676] Possible interrupt unsafe locking scenario: [ 1603.459942][T27676] [ 1603.468254][T27676] CPU0 CPU1 [ 1603.473619][T27676] ---- ---- [ 1603.478976][T27676] lock(tasklist_lock); [ 1603.483219][T27676] local_irq_disable(); [ 1603.489967][T27676] lock(&dev->event_lock#2); [ 1603.497178][T27676] lock(&client->buffer_lock); [ 1603.504561][T27676] [ 1603.508020][T27676] lock(&dev->event_lock#2); [ 1603.512888][T27676] [ 1603.512888][T27676] *** DEADLOCK *** [ 1603.512888][T27676] [ 1603.521033][T27676] 7 locks held by syz.1.4946/27676: [ 1603.526228][T27676] #0: ffff888145f66118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1603.535382][T27676] #1: ffff88801c7e1230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1603.545489][T27676] #2: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1603.555155][T27676] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1603.564736][T27676] #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1603.573887][T27676] #5: ffff8880794e8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1603.584077][T27676] #6: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1603.593138][T27676] [ 1603.593138][T27676] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1603.603539][T27676] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1603.609191][T27676] IN-SOFTIRQ-W at: [ 1603.613256][T27676] lock_acquire+0x117/0x340 [ 1603.619583][T27676] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1603.626620][T27676] input_event+0x76/0xe0 [ 1603.632728][T27676] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 1603.640195][T27676] __usb_hcd_giveback_urb+0x376/0x540 [ 1603.647400][T27676] dummy_timer+0x85f/0x45b0 [ 1603.653733][T27676] __hrtimer_run_queues+0x51c/0xc30 [ 1603.660768][T27676] hrtimer_run_softirq+0x187/0x2b0 [ 1603.667709][T27676] handle_softirqs+0x27d/0x850 [ 1603.674300][T27676] __irq_exit_rcu+0xca/0x1f0 [ 1603.680709][T27676] irq_exit_rcu+0x9/0x30 [ 1603.686780][T27676] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1603.694239][T27676] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1603.702038][T27676] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1603.709620][T27676] dummy_urb_enqueue+0x58a/0x780 [ 1603.716384][T27676] usb_hcd_submit_urb+0x328/0x1b80 [ 1603.723321][T27676] atp_open+0x63/0xc0 [ 1603.729134][T27676] input_open_device+0x1d3/0x390 [ 1603.735895][T27676] mousedev_open_device+0xcc/0x150 [ 1603.742832][T27676] mousedev_open+0x2ef/0x4a0 [ 1603.749252][T27676] chrdev_open+0x4cc/0x5e0 [ 1603.755492][T27676] do_dentry_open+0x7ce/0x1420 [ 1603.762084][T27676] vfs_open+0x3b/0x340 [ 1603.767982][T27676] path_openat+0x340e/0x3dd0 [ 1603.774481][T27676] do_filp_open+0x1fa/0x410 [ 1603.780804][T27676] do_sys_openat2+0x121/0x200 [ 1603.787308][T27676] __x64_sys_openat+0x138/0x170 [ 1603.793983][T27676] do_syscall_64+0xfa/0xf80 [ 1603.800312][T27676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.808028][T27676] INITIAL USE at: [ 1603.812009][T27676] lock_acquire+0x117/0x340 [ 1603.818247][T27676] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1603.825185][T27676] input_inject_event+0xa5/0x340 [ 1603.831860][T27676] kbd_led_trigger_activate+0xbc/0x100 [ 1603.839060][T27676] led_trigger_set+0x52d/0x950 [ 1603.845570][T27676] led_trigger_set_default+0x260/0x2a0 [ 1603.852770][T27676] led_classdev_register_ext+0x73d/0x960 [ 1603.860157][T27676] input_leds_connect+0x517/0x790 [ 1603.866929][T27676] input_register_device+0xd00/0x1170 [ 1603.874060][T27676] atkbd_connect+0x73b/0xa50 [ 1603.880381][T27676] serio_driver_probe+0x82/0xd0 [ 1603.886970][T27676] really_probe+0x26d/0xad0 [ 1603.893205][T27676] __driver_probe_device+0x18c/0x320 [ 1603.900231][T27676] driver_probe_device+0x4f/0x240 [ 1603.906997][T27676] __driver_attach+0x349/0x650 [ 1603.913503][T27676] bus_for_each_dev+0x233/0x2b0 [ 1603.920095][T27676] serio_handle_event+0x1f9/0x8d0 [ 1603.926865][T27676] process_scheduled_works+0xad1/0x1770 [ 1603.934141][T27676] worker_thread+0x8a0/0xda0 [ 1603.940464][T27676] kthread+0x711/0x8a0 [ 1603.946295][T27676] ret_from_fork+0x599/0xb30 [ 1603.953138][T27676] ret_from_fork_asm+0x1a/0x30 [ 1603.959648][T27676] } [ 1603.962228][T27676] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1603.971337][T27676] -> (&client->buffer_lock){....}-{3:3} { [ 1603.977079][T27676] INITIAL USE at: [ 1603.980975][T27676] lock_acquire+0x117/0x340 [ 1603.987040][T27676] _raw_spin_lock_irq+0xa2/0xf0 [ 1603.993463][T27676] evdev_read+0x370/0xca0 [ 1603.999360][T27676] vfs_readv+0x5aa/0x850 [ 1604.005165][T27676] do_readv+0x14d/0x2d0 [ 1604.010892][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1604.017836][T27676] do_fast_syscall_32+0x34/0x80 [ 1604.024264][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1604.032165][T27676] } [ 1604.034665][T27676] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1604.042824][T27676] ... acquired at: [ 1604.046622][T27676] _raw_spin_lock+0x2e/0x40 [ 1604.051308][T27676] evdev_pass_values+0xb9/0xbd0 [ 1604.056337][T27676] evdev_events+0x1e6/0x340 [ 1604.061014][T27676] input_pass_values+0x288/0x890 [ 1604.066129][T27676] input_event_dispose+0x330/0x6b0 [ 1604.071419][T27676] input_inject_event+0x1dd/0x340 [ 1604.076623][T27676] evdev_write+0x2fc/0x480 [ 1604.081223][T27676] vfs_write+0x27e/0xb30 [ 1604.085637][T27676] ksys_write+0x145/0x250 [ 1604.090134][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1604.095502][T27676] do_fast_syscall_32+0x34/0x80 [ 1604.100525][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1604.107025][T27676] [ 1604.109346][T27676] [ 1604.109346][T27676] the dependencies between the lock to be acquired [ 1604.109354][T27676] and SOFTIRQ-irq-unsafe lock: [ 1604.122859][T27676] -> (tasklist_lock){.+.+}-{3:3} { [ 1604.128161][T27676] HARDIRQ-ON-R at: [ 1604.132311][T27676] lock_acquire+0x117/0x340 [ 1604.138814][T27676] _raw_read_lock+0x36/0x50 [ 1604.145318][T27676] __do_wait+0xde/0x740 [ 1604.151471][T27676] do_wait+0x1e8/0x4f0 [ 1604.157543][T27676] kernel_wait+0xab/0x170 [ 1604.163874][T27676] call_usermodehelper_exec_work+0xbe/0x230 [ 1604.171814][T27676] process_scheduled_works+0xad1/0x1770 [ 1604.179363][T27676] worker_thread+0x8a0/0xda0 [ 1604.185947][T27676] kthread+0x711/0x8a0 [ 1604.192016][T27676] ret_from_fork+0x599/0xb30 [ 1604.198602][T27676] ret_from_fork_asm+0x1a/0x30 [ 1604.205366][T27676] SOFTIRQ-ON-R at: [ 1604.209517][T27676] lock_acquire+0x117/0x340 [ 1604.216014][T27676] _raw_read_lock+0x36/0x50 [ 1604.222523][T27676] __do_wait+0xde/0x740 [ 1604.228685][T27676] do_wait+0x1e8/0x4f0 [ 1604.234761][T27676] kernel_wait+0xab/0x170 [ 1604.241092][T27676] call_usermodehelper_exec_work+0xbe/0x230 [ 1604.248999][T27676] process_scheduled_works+0xad1/0x1770 [ 1604.256541][T27676] worker_thread+0x8a0/0xda0 [ 1604.263129][T27676] kthread+0x711/0x8a0 [ 1604.269198][T27676] ret_from_fork+0x599/0xb30 [ 1604.275785][T27676] ret_from_fork_asm+0x1a/0x30 [ 1604.282554][T27676] INITIAL USE at: [ 1604.286623][T27676] lock_acquire+0x117/0x340 [ 1604.293039][T27676] _raw_write_lock_irq+0xa2/0xf0 [ 1604.299892][T27676] copy_process+0x2185/0x3950 [ 1604.306482][T27676] kernel_clone+0x21e/0x820 [ 1604.312892][T27676] user_mode_thread+0xdd/0x140 [ 1604.319566][T27676] rest_init+0x23/0x300 [ 1604.325633][T27676] start_kernel+0x3a7/0x400 [ 1604.332054][T27676] x86_64_start_reservations+0x24/0x30 [ 1604.339427][T27676] x86_64_start_kernel+0x143/0x1c0 [ 1604.346451][T27676] common_startup_64+0x13e/0x147 [ 1604.353298][T27676] INITIAL READ USE at: [ 1604.357800][T27676] lock_acquire+0x117/0x340 [ 1604.364647][T27676] _raw_read_lock+0x36/0x50 [ 1604.371523][T27676] __do_wait+0xde/0x740 [ 1604.378075][T27676] do_wait+0x1e8/0x4f0 [ 1604.384496][T27676] kernel_wait+0xab/0x170 [ 1604.391179][T27676] call_usermodehelper_exec_work+0xbe/0x230 [ 1604.399418][T27676] process_scheduled_works+0xad1/0x1770 [ 1604.407320][T27676] worker_thread+0x8a0/0xda0 [ 1604.414251][T27676] kthread+0x711/0x8a0 [ 1604.420668][T27676] ret_from_fork+0x599/0xb30 [ 1604.427607][T27676] ret_from_fork_asm+0x1a/0x30 [ 1604.434724][T27676] } [ 1604.437391][T27676] ... key at: [] tasklist_lock+0x18/0x40 [ 1604.445288][T27676] ... acquired at: [ 1604.449261][T27676] _raw_read_lock+0x36/0x50 [ 1604.453942][T27676] send_sigio+0x101/0x370 [ 1604.458454][T27676] dnotify_handle_event+0x169/0x440 [ 1604.463831][T27676] fsnotify+0x1668/0x1ab0 [ 1604.468338][T27676] __fsnotify_parent+0x3fe/0x540 [ 1604.473455][T27676] notify_change+0xc55/0xf40 [ 1604.478219][T27676] do_truncate+0x1a4/0x220 [ 1604.482828][T27676] do_ftruncate+0x4a5/0x560 [ 1604.487500][T27676] __ia32_compat_sys_ftruncate+0x9e/0xf0 [ 1604.493304][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1604.498676][T27676] do_fast_syscall_32+0x34/0x80 [ 1604.503705][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1604.510210][T27676] [ 1604.512531][T27676] -> (&f_owner->lock){....}-{3:3} { [ 1604.517835][T27676] INITIAL USE at: [ 1604.521827][T27676] lock_acquire+0x117/0x340 [ 1604.528066][T27676] _raw_write_lock_irq+0xa2/0xf0 [ 1604.534748][T27676] __f_setown+0x67/0x370 [ 1604.540753][T27676] tty_fasync+0x2dc/0x350 [ 1604.546824][T27676] do_fcntl+0x11d2/0x1a50 [ 1604.552895][T27676] do_compat_fcntl64+0x477/0x720 [ 1604.559578][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1604.566515][T27676] do_fast_syscall_32+0x34/0x80 [ 1604.573100][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1604.581167][T27676] INITIAL READ USE at: [ 1604.585579][T27676] lock_acquire+0x117/0x340 [ 1604.592253][T27676] _raw_read_lock_irqsave+0xaf/0x100 [ 1604.599714][T27676] send_sigio+0x38/0x370 [ 1604.606133][T27676] kill_fasync+0x24d/0x4d0 [ 1604.612728][T27676] lease_break_callback+0x26/0x30 [ 1604.619933][T27676] __break_lease+0x730/0x1620 [ 1604.626786][T27676] do_dentry_open+0x73a/0x1420 [ 1604.633724][T27676] vfs_open+0x3b/0x340 [ 1604.639971][T27676] path_openat+0x340e/0x3dd0 [ 1604.646733][T27676] do_filp_open+0x1fa/0x410 [ 1604.653492][T27676] do_sys_openat2+0x121/0x200 [ 1604.660347][T27676] __ia32_compat_sys_openat+0x131/0x160 [ 1604.668068][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1604.675523][T27676] do_fast_syscall_32+0x34/0x80 [ 1604.682540][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1604.691042][T27676] } [ 1604.693625][T27676] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1604.702561][T27676] ... acquired at: [ 1604.706454][T27676] _raw_read_lock_irqsave+0xaf/0x100 [ 1604.711916][T27676] send_sigio+0x38/0x370 [ 1604.716336][T27676] kill_fasync+0x24d/0x4d0 [ 1604.720933][T27676] lease_break_callback+0x26/0x30 [ 1604.726137][T27676] __break_lease+0x730/0x1620 [ 1604.730990][T27676] do_dentry_open+0x73a/0x1420 [ 1604.735934][T27676] vfs_open+0x3b/0x340 [ 1604.740177][T27676] path_openat+0x340e/0x3dd0 [ 1604.744944][T27676] do_filp_open+0x1fa/0x410 [ 1604.749617][T27676] do_sys_openat2+0x121/0x200 [ 1604.754477][T27676] __ia32_compat_sys_openat+0x131/0x160 [ 1604.760201][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1604.765571][T27676] do_fast_syscall_32+0x34/0x80 [ 1604.770593][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1604.777100][T27676] [ 1604.779419][T27676] -> (&new->fa_lock){...-}-{3:3} { [ 1604.784544][T27676] IN-SOFTIRQ-R at: [ 1604.788522][T27676] lock_acquire+0x117/0x340 [ 1604.794681][T27676] _raw_read_lock_irqsave+0xaf/0x100 [ 1604.801638][T27676] kill_fasync+0x199/0x4d0 [ 1604.807719][T27676] sock_wake_async+0x137/0x160 [ 1604.814137][T27676] sock_def_readable+0x3c1/0x530 [ 1604.820730][T27676] tcp_rcv_established+0x18e3/0x2580 [ 1604.827673][T27676] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1604.834005][T27676] tcp_v6_rcv+0x2247/0x2ae0 [ 1604.840160][T27676] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 1604.847443][T27676] ip6_input_finish+0x191/0x370 [ 1604.853945][T27676] NF_HOOK+0x30c/0x3a0 [ 1604.859675][T27676] ip6_input+0x16a/0x270 [ 1604.865580][T27676] NF_HOOK+0x30c/0x3a0 [ 1604.871313][T27676] __netif_receive_skb+0xd3/0x380 [ 1604.878001][T27676] process_backlog+0x622/0x1500 [ 1604.884511][T27676] __napi_poll+0xae/0x320 [ 1604.890497][T27676] net_rx_action+0x672/0xe50 [ 1604.896748][T27676] handle_softirqs+0x27d/0x850 [ 1604.903163][T27676] do_softirq+0xec/0x180 [ 1604.909073][T27676] __local_bh_enable_ip+0x17d/0x1c0 [ 1604.915926][T27676] tcp_sendmsg+0x39/0x50 [ 1604.921819][T27676] __sock_sendmsg+0xe5/0x270 [ 1604.928061][T27676] sock_write_iter+0x279/0x360 [ 1604.934473][T27676] vfs_write+0x5c9/0xb30 [ 1604.940361][T27676] ksys_write+0x145/0x250 [ 1604.946336][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1604.953180][T27676] do_fast_syscall_32+0x34/0x80 [ 1604.959682][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1604.967707][T27676] INITIAL USE at: [ 1604.971618][T27676] lock_acquire+0x117/0x340 [ 1604.977719][T27676] _raw_write_lock_irq+0xa2/0xf0 [ 1604.984233][T27676] fasync_remove_entry+0xf1/0x1c0 [ 1604.990835][T27676] tty_fasync+0x13c/0x350 [ 1604.996752][T27676] __fput+0x8a2/0xa70 [ 1605.002322][T27676] task_work_run+0x1d4/0x260 [ 1605.008485][T27676] exit_to_user_mode_loop+0xff/0x4f0 [ 1605.015335][T27676] __do_fast_syscall_32+0x3cb/0x570 [ 1605.022099][T27676] do_fast_syscall_32+0x34/0x80 [ 1605.028515][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.036408][T27676] INITIAL READ USE at: [ 1605.040744][T27676] lock_acquire+0x117/0x340 [ 1605.047256][T27676] _raw_read_lock_irqsave+0xaf/0x100 [ 1605.054547][T27676] kill_fasync+0x199/0x4d0 [ 1605.060972][T27676] sock_wake_async+0x137/0x160 [ 1605.067737][T27676] sk_wake_async+0x184/0x280 [ 1605.074332][T27676] unix_release_sock+0x747/0xc70 [ 1605.081269][T27676] unix_release+0x92/0xd0 [ 1605.087598][T27676] sock_close+0xc3/0x240 [ 1605.093846][T27676] __fput+0x44c/0xa70 [ 1605.099916][T27676] task_work_run+0x1d4/0x260 [ 1605.106508][T27676] do_exit+0x6c5/0x2310 [ 1605.112667][T27676] do_group_exit+0x21c/0x2d0 [ 1605.119260][T27676] get_signal+0x1285/0x1340 [ 1605.125762][T27676] arch_do_signal_or_restart+0x9a/0x7a0 [ 1605.133307][T27676] exit_to_user_mode_loop+0x87/0x4f0 [ 1605.140587][T27676] __do_fast_syscall_32+0x3cb/0x570 [ 1605.147785][T27676] do_fast_syscall_32+0x34/0x80 [ 1605.154628][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.162958][T27676] } [ 1605.165451][T27676] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1605.174124][T27676] ... acquired at: [ 1605.177924][T27676] _raw_read_lock_irqsave+0xaf/0x100 [ 1605.183386][T27676] kill_fasync+0x199/0x4d0 [ 1605.187981][T27676] evdev_pass_values+0x627/0xbd0 [ 1605.193096][T27676] evdev_events+0x1e6/0x340 [ 1605.197785][T27676] input_pass_values+0x288/0x890 [ 1605.202904][T27676] input_event_dispose+0x330/0x6b0 [ 1605.208196][T27676] input_inject_event+0x1dd/0x340 [ 1605.213394][T27676] evdev_write+0x2fc/0x480 [ 1605.217988][T27676] vfs_write+0x27e/0xb30 [ 1605.222403][T27676] ksys_write+0x145/0x250 [ 1605.226905][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1605.232278][T27676] do_fast_syscall_32+0x34/0x80 [ 1605.237297][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.243799][T27676] [ 1605.246121][T27676] [ 1605.246121][T27676] stack backtrace: [ 1605.252008][T27676] CPU: 0 UID: 0 PID: 27676 Comm: syz.1.4946 Tainted: G L syzkaller #0 PREEMPT(full) [ 1605.252030][T27676] Tainted: [L]=SOFTLOCKUP [ 1605.252037][T27676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1605.252047][T27676] Call Trace: [ 1605.252057][T27676] [ 1605.252064][T27676] dump_stack_lvl+0x189/0x250 [ 1605.252086][T27676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1605.252105][T27676] ? __pfx__printk+0x10/0x10 [ 1605.252131][T27676] __lock_acquire+0x2a95/0x2cf0 [ 1605.252155][T27676] ? kill_fasync+0x199/0x4d0 [ 1605.252177][T27676] lock_acquire+0x117/0x340 [ 1605.252191][T27676] ? kill_fasync+0x199/0x4d0 [ 1605.252219][T27676] _raw_read_lock_irqsave+0xaf/0x100 [ 1605.252241][T27676] ? kill_fasync+0x199/0x4d0 [ 1605.252263][T27676] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1605.252283][T27676] ? do_raw_spin_lock+0x121/0x290 [ 1605.252308][T27676] kill_fasync+0x199/0x4d0 [ 1605.252330][T27676] ? kill_fasync+0x53/0x4d0 [ 1605.252353][T27676] evdev_pass_values+0x627/0xbd0 [ 1605.252379][T27676] ? evdev_pass_values+0x5a1/0xbd0 [ 1605.252404][T27676] evdev_events+0x1e6/0x340 [ 1605.252425][T27676] ? evdev_events+0x79/0x340 [ 1605.252447][T27676] ? input_pass_values+0x8d/0x890 [ 1605.252468][T27676] input_pass_values+0x288/0x890 [ 1605.252491][T27676] ? input_handle_event+0x70c/0xf30 [ 1605.252510][T27676] input_event_dispose+0x330/0x6b0 [ 1605.252529][T27676] input_inject_event+0x1dd/0x340 [ 1605.252547][T27676] ? input_inject_event+0xb6/0x340 [ 1605.252566][T27676] evdev_write+0x2fc/0x480 [ 1605.252590][T27676] ? __pfx_evdev_write+0x10/0x10 [ 1605.252614][T27676] ? bpf_lsm_file_permission+0x9/0x20 [ 1605.252635][T27676] ? security_file_permission+0x75/0x290 [ 1605.252659][T27676] ? rw_verify_area+0x255/0x4d0 [ 1605.252673][T27676] ? __pfx_evdev_write+0x10/0x10 [ 1605.252695][T27676] vfs_write+0x27e/0xb30 [ 1605.252713][T27676] ? __pfx_vfs_write+0x10/0x10 [ 1605.252728][T27676] ? __fget_files+0x2a/0x420 [ 1605.252748][T27676] ? __fget_files+0x2a/0x420 [ 1605.252767][T27676] ? __fget_files+0x3a0/0x420 [ 1605.252786][T27676] ? __fget_files+0x2a/0x420 [ 1605.252808][T27676] ksys_write+0x145/0x250 [ 1605.252823][T27676] ? __pfx_ksys_write+0x10/0x10 [ 1605.252839][T27676] ? __do_fast_syscall_32+0xbe/0x570 [ 1605.252855][T27676] __do_fast_syscall_32+0x1f7/0x570 [ 1605.252870][T27676] ? rcu_is_watching+0x15/0xb0 [ 1605.252888][T27676] ? do_fast_syscall_32+0x34/0x80 [ 1605.252904][T27676] do_fast_syscall_32+0x34/0x80 [ 1605.252918][T27676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.252938][T27676] RIP: 0023:0xf70ed539 [ 1605.252952][T27676] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1605.252966][T27676] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1605.252982][T27676] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 1605.252993][T27676] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000 [ 1605.253002][T27676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1605.253011][T27676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1605.253021][T27676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1605.253036][T27676] [ 1605.635967][T19605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.639855][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.646213][ T1297] ieee802154 phy1 wpan1: encryption failed: -22