last executing test programs: 13m18.05776287s ago: executing program 2 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000180)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0x0, 0x204}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x891d, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200), r6}}, 0x18) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}]}, 0x2c}}, 0x4004) 13m17.798381295s ago: executing program 2 (id=971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000780)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f0000000380)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r3) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="88280000000000002400128009000100626f6e64000000001400028008001400f90000ac3128000800070005000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 13m17.41068285s ago: executing program 2 (id=972): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00') syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a8008009"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003fc0)={0x2020}, 0x2020) preadv(r1, &(0x7f0000003d40)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0x142, 0xfffffffa) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) sendto(r1, &(0x7f0000002b80)="1bd02d7a1d933399f657dd13dde1be5d89ffe205db6e4a1b98e70ede2b1c1a2de0f55cc34ee3ffcb76b2a81ff143878f46119522b38ea0a881b6ead17815e616381211f738c13b99304ece1b2cd13d62edf0e101131fa0085184b34aa7c9832123f724eeeca2fc53faf27e19c206ac6f9e305b7dd1551c2bb2c9edc4086cd9e1321f3f170dc495dfe4f206ff473f2eb9dd5ca64264eb96d4e4bd0104ebf36b8340d33610222e59db8333478d9c4dc732e3df434616", 0xb5, 0x20000000, &(0x7f0000002c40)=@rc={0x1f, @none, 0xdc}, 0x80) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x8000000) unshare(0x2c040000) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x9, 0x2, {0x2, 0x9}}, 0x0}, &(0x7f0000000280)={0x34, &(0x7f0000000100)={0x40, 0x0, 0x22, "4b34b813b354e616b0b20afe64e38f5392956baa10bff6ce73a41ab7b8b968b6fff5"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000001c0)={0xc0, 0xa1, 0x4, 0x9}, 0x0, &(0x7f0000000240)={0xc0, 0xa2, 0x2f, "bf5efec95f6dbb2856875696bfa6726d518701b9520b0456b3d681cce43ee3631644863d1bdb0ea9ffd29ba27b942c"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0500ffff"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x20}, 0x94) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13m13.71949996s ago: executing program 2 (id=984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r1, 0x705, 0x70bd31, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x3, 0xff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08360001ce61fcb7e067b20800000000000000d964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163c", 0x51}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/166, 0xa6}], 0x1, 0x0, 0x0, 0x4000050}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x697d}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000480)={'security\x00', 0x0, [0x80, 0x27e0, 0x2, 0x4, 0x7]}, &(0x7f0000000500)=0x54) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000400)={0x1, 'ip6_vti0\x00', {}, 0x4}) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$netlink(0x10, 0x3, 0x0) 13m13.377695259s ago: executing program 2 (id=987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x3, 0x9, 0xdedb, 0x11, '\v\x00\x00]\x00'}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004be, 0x100000007ff, 0xd559, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c}, {@in=@broadcast, 0x0, 0x3c}, @in=@local, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}]}, 0x138}}, 0x0) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x3, 0x9, 0xdedb, 0x11, '\v\x00\x00]\x00'}) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004be, 0x100000007ff, 0xd559, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c}, {@in=@broadcast, 0x0, 0x3c}, @in=@local, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}]}, 0x138}}, 0x0) (async) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) 13m12.05422867s ago: executing program 2 (id=996): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x4000844) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x6af, 0x1, 0x4, 0x400, 0xd, {}, {0x3, 0x0, 0x0, 0x1, 0xfc, 0x0, "12848098"}, 0x4, 0x3, {}, 0x1ff}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "249771100aafbc1d", "b46548063297a7557192eb6b67e38928", "a1abaf20", "50bb76bf742b9f99"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "8b99713c49ae53e4", "b26ac9163f2291edf70bc132ba23165e", "39a8b9d7", "a0391c46300a6180"}, 0x28) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13m11.387359384s ago: executing program 32 (id=996): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x4000844) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x6af, 0x1, 0x4, 0x400, 0xd, {}, {0x3, 0x0, 0x0, 0x1, 0xfc, 0x0, "12848098"}, 0x4, 0x3, {}, 0x1ff}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "249771100aafbc1d", "b46548063297a7557192eb6b67e38928", "a1abaf20", "50bb76bf742b9f99"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "8b99713c49ae53e4", "b26ac9163f2291edf70bc132ba23165e", "39a8b9d7", "a0391c46300a6180"}, 0x28) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 5m16.209975623s ago: executing program 3 (id=3718): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}, @call={0x85, 0x0, 0x0, 0x1f}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xf2}}}, &(0x7f0000000780)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4d, 0x0, &(0x7f00000000c0)="b44c806305624431ed3373010001000004bf7e47d5fe008c639000000000873094563683b788a1e78b4641d3a2599f69c84033e65c1d6a5320030700510cc8c625fc63f82bbfda3666696ed223", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x20f03) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000080000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000001c0008800c0002400000000000007fff0c"], 0xc8}}, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/fscaps', 0x82002, 0x105) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x4, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x3, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) (async) r9 = fsmount(r4, 0x0, 0x0) fchdir(r9) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e1e, @local}, 0x0, 0x3, 0x0, 0x3}}, 0x26) 5m16.184869257s ago: executing program 3 (id=3719): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r1 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) getpid() (async) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x1}) setns(r3, 0x24020000) syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 5m15.309944937s ago: executing program 3 (id=3722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') read$char_usb(r1, &(0x7f0000000540)=""/169, 0xa9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', '.\x02', [{0x20, 'cpuacct.usage_percpu_user\x00'}, {0x20, 'ramfs@v\"\xc83*\x0e?\xf3\x99r\xf0|\xb1\x9d\x9d\xe4\x06\xdb\xc1\xc6\x93\xe6\xdd\xbc\xe6\xbf\xfe4\xde\xc9T\x0ePR\x18\t\xe8\x19\v\xa1\xf4\x12\x13e\x00W\x02!@J\xf3*?\xb5\xf5\x96\xdf\xbfF\xb7<\x96#\xc1\x01Zo=\xda\xb2\xfa\xd2\xed\xb4D\xb7\v\xa0\xe4rJ\xe4\xaak{X,\xf4\xfd\x11\x8fC\x10\xa6\x0f\xdd\xd2|\xfc}\x89\x14\xef)\xfe\xd0\xb9y[\xd6c\v\xac\x87F\xbfeZ\xfa\x11~\xa1\x9a#\x00z\xd7\x9a\x00\xe2\xe2\xa6\xab\xe6.\xa1\x14\xfb(\xd4\xdb_$\xe7\xa5\x7f\xaa\x9e~'}, {0x20, '\x7f\x12\xde\xdb\'\xe4Q\x7f\x1b+\xda[\xb6\x12\xef\x98aded\x00'}, {0x20, 'cpuacct\x01\x00\x00\x00ge_percpu_user\x00\x11!\x88\x18\t\xcb\xa7\x0e\x9c\xbf\xf8\xcdPO\xfe\x8a\xd0u\xd1#u\xd1P\xaf\xde\xd7\xc4\xce\xafu\aY\xa8\x1b\xd9\xb8\x05\x83\xdbd[?\a\xfc\r`\xb4QJ\xa6\x9fg5\xf4;@p%\x0e_\xcc\xa0\xe7X\xb6tY>\x00\xa0\xd9\x1a\xe6f\x9d\xe8\xc3\x18\xd4\xff\xb85\xcf/\'\x0eof\x87\x95\x1c\x99\xc7\a\xba'}], 0xa, "5168290ef6c9a4ea27b0a2db73c91c80c58b8d77230e14dc63627c1e78deaa718beb19fdcbfa3a4babf775d416f924a139eee7c456185293bc3804316bddd0f4e378ee88ee0bb8c78dc5f8955cc6b36c492771e686b5368a7c695754bf887fb57334d50b0b9d5effc396d18c"}, 0x1b9) (async) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', '.\x02', [{0x20, 'cpuacct.usage_percpu_user\x00'}, {0x20, 'ramfs@v\"\xc83*\x0e?\xf3\x99r\xf0|\xb1\x9d\x9d\xe4\x06\xdb\xc1\xc6\x93\xe6\xdd\xbc\xe6\xbf\xfe4\xde\xc9T\x0ePR\x18\t\xe8\x19\v\xa1\xf4\x12\x13e\x00W\x02!@J\xf3*?\xb5\xf5\x96\xdf\xbfF\xb7<\x96#\xc1\x01Zo=\xda\xb2\xfa\xd2\xed\xb4D\xb7\v\xa0\xe4rJ\xe4\xaak{X,\xf4\xfd\x11\x8fC\x10\xa6\x0f\xdd\xd2|\xfc}\x89\x14\xef)\xfe\xd0\xb9y[\xd6c\v\xac\x87F\xbfeZ\xfa\x11~\xa1\x9a#\x00z\xd7\x9a\x00\xe2\xe2\xa6\xab\xe6.\xa1\x14\xfb(\xd4\xdb_$\xe7\xa5\x7f\xaa\x9e~'}, {0x20, '\x7f\x12\xde\xdb\'\xe4Q\x7f\x1b+\xda[\xb6\x12\xef\x98aded\x00'}, {0x20, 'cpuacct\x01\x00\x00\x00ge_percpu_user\x00\x11!\x88\x18\t\xcb\xa7\x0e\x9c\xbf\xf8\xcdPO\xfe\x8a\xd0u\xd1#u\xd1P\xaf\xde\xd7\xc4\xce\xafu\aY\xa8\x1b\xd9\xb8\x05\x83\xdbd[?\a\xfc\r`\xb4QJ\xa6\x9fg5\xf4;@p%\x0e_\xcc\xa0\xe7X\xb6tY>\x00\xa0\xd9\x1a\xe6f\x9d\xe8\xc3\x18\xd4\xff\xb85\xcf/\'\x0eof\x87\x95\x1c\x99\xc7\a\xba'}], 0xa, "5168290ef6c9a4ea27b0a2db73c91c80c58b8d77230e14dc63627c1e78deaa718beb19fdcbfa3a4babf775d416f924a139eee7c456185293bc3804316bddd0f4e378ee88ee0bb8c78dc5f8955cc6b36c492771e686b5368a7c695754bf887fb57334d50b0b9d5effc396d18c"}, 0x1b9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) getrusage(0xfffffffffffffffe, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x1e8b000) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000200)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000200)) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') (async) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) (async) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x1) landlock_restrict_self(r9, 0x9) (async) landlock_restrict_self(r9, 0x9) 5m13.745242328s ago: executing program 3 (id=3733): r0 = socket(0x2, 0x80805, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000400)=0x8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000000)="db", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xd, 0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x38, 0x4845}, 0x4008084) listen(r1, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x10001, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f00000000c0)=0x84) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000240)={{0x0, 0x1, 0x6, 0x0, 0x7f}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000180)={0x35d667a6, 0x5, 0x1, "7010127edb0a851c4557bf2aa3d4235032196427f8bbda6d9026f9bdc296f0a0", 0x3831354f}) socket$inet_tcp(0x2, 0x1, 0x0) 5m10.234141097s ago: executing program 3 (id=3751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x4) 5m9.725853732s ago: executing program 3 (id=3752): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2845}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)="846cb78afbe02da52bdb47824464b1e112d4ebc43734c99d9b8cf4ab4cb49805", 0x20}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xa0881) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x0, 0xfffffff7, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m9.466294599s ago: executing program 33 (id=3752): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2845}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)="846cb78afbe02da52bdb47824464b1e112d4ebc43734c99d9b8cf4ab4cb49805", 0x20}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xa0881) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x0, 0xfffffff7, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.752945002s ago: executing program 4 (id=5623): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0xfffffffc}}) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x1c}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f", 0x26}, {&(0x7f0000001400)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff88580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8cf811eee6448a7c2db438b06b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c7c3dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18668130ab897dfc9adda67502444c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c126533f0630d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549a33b4025b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf02002992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f08efef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a955205000000dd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f04702", 0xf0e}, {&(0x7f00000002c0)="01d2df27944cdb8a291a4db764bf54514270708beff0", 0x16}, {&(0x7f00000000c0)="7b069b90661a4bcd93277edf66d7bcaf49", 0x11}], 0x4}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.624909335s ago: executing program 5 (id=5625): syz_usb_connect(0x5, 0x5e, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0) 3.682065952s ago: executing program 0 (id=5632): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) (async) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f00000007c0)=[{0x24, '\x00', @st={0x4, [{0xe3acf54db7759d6c, @svalue=0xb3a}, {0x1, @svalue=0x6}, {0x0, @svalue=0xa71}, {0x2c044fbccee4fe50, @svalue=0x8}]}, 0x5}, {0x3b, '\x00', @buffer={"d280079895011716c590f938040000cd5e500100", 0x20}, 0x7ff}, {0x0, '\x00', @data=0x1008, 0x4000006}]}) (async) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) (async) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0x0, 0x0, {}, {}, {0x0, 0x200}, {0x0, 0x9}}}}}) (async, rerun: 64) syz_fuse_handle_req(r0, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x9, {0x7, 0x0, 0x3, 0xfff}}, 0x0}) (rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x41000, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) (async) unshare(0x2040400) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff, 0x0, 0x1}) (async, rerun: 32) r6 = socket$tipc(0x1e, 0x5, 0x0) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 32) sendmsg$tipc(r6, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r8 = socket(0xa, 0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/1269], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000009}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) getrandom(&(0x7f0000000080)=""/102, 0x66, 0x1) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x2e, 0x2, 0x8, "b43d7000ffff18000000000000006700", 0x20363159}) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x74}, 0x1, 0xd, 0x0, 0x20000000}, 0x0) 3.624444468s ago: executing program 0 (id=5633): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r0}, 0xc) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="642ef4dfbf0c00baf80c66b8c519af8066efbafc0cec3e0fd40c663e0f090f01cf67640fc7bb0000008066b9290300000f320f001866660f3841c4", 0x3b}], 0x1, 0x1, &(0x7f00000001c0)=[@cstype0={0x4, 0xb}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000200)={0x10001, r1, 'id1\x00'}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1000, 0x10001}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e23, @local}}, 0x6, 0x4, 0xffffffff, 0x5, 0x10, 0x3, 0xfb}, &(0x7f00000003c0)=0x9c) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x84) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getneigh={0x14, 0x1e, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x200018c0) syz_open_dev$loop(&(0x7f0000000540), 0x2, 0x80002) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000640)={@remote, 0x1f, r5}) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000680)=0x4) socket(0x2, 0x800, 0x82) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f00000006c0)={0x40000, 0xc000}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000700)=0x1, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000740)={0x2, 0x6}) syz_open_dev$vim2m(&(0x7f0000000780), 0x8e, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) fstat(r4, &(0x7f0000000880)) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r7, &(0x7f0000004f00)=[{{&(0x7f0000000900)=@xdp, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/80, 0x50}, {&(0x7f0000001a00)=""/209, 0xd1}], 0x3, &(0x7f0000001b40)=""/64, 0x40}, 0x7}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b80)=""/120, 0x78}], 0x1, &(0x7f0000001c40)=""/144, 0x90}, 0x35}, {{&(0x7f0000001d00)=@x25, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d80)=""/25, 0x19}, {&(0x7f0000001dc0)=""/153, 0x99}, {&(0x7f0000001e80)=""/252, 0xfc}, {&(0x7f0000001f80)=""/25, 0x19}, {&(0x7f0000001fc0)=""/51, 0x33}], 0x5, &(0x7f0000002080)=""/4096, 0x1000}, 0x400}, {{&(0x7f0000003080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004600)=[{&(0x7f0000003100)=""/8, 0x8}, {&(0x7f0000003140)=""/227, 0xe3}, {&(0x7f0000003240)=""/200, 0xc8}, {&(0x7f0000003340)=""/80, 0x50}, {&(0x7f00000033c0)=""/254, 0xfe}, {&(0x7f00000034c0)=""/11, 0xb}, {&(0x7f0000003500)=""/102, 0x66}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/94, 0x5e}], 0x9, &(0x7f00000046c0)=""/31, 0x1f}, 0x6d4e6b26}, {{&(0x7f0000004700)=@qipcrtr, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004780)=""/68, 0x44}, {&(0x7f0000004800)=""/215, 0xd7}, {&(0x7f0000004900)=""/240, 0xf0}, {&(0x7f0000004a00)=""/21, 0x15}, {&(0x7f0000004a40)=""/67, 0x43}, {&(0x7f0000004ac0)=""/36, 0x24}], 0x6}, 0x5}, {{&(0x7f0000004b80)=@ax25={{0x3, @rose}, [@netrom, @remote, @rose, @rose, @rose, @netrom, @null, @default]}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004c00)=""/148, 0x94}, {&(0x7f0000004cc0)=""/64, 0x40}, {&(0x7f0000004d00)=""/56, 0x38}, {&(0x7f0000004d40)=""/184, 0xb8}, {&(0x7f0000004e00)=""/62, 0x3e}, {&(0x7f0000004e40)=""/57, 0x39}], 0x6}, 0x7}], 0x6, 0x22, 0x0) umount2(&(0x7f0000005080)='./file0\x00', 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f00000050c0), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6b, r5}) 3.403109351s ago: executing program 6 (id=5634): syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x180) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0x1000000d, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x7, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x3, 0xfffffff7, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xdd0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x400, 0x6, 0x1, 0xff, 0x5, 0x80000001, 0x5f31, 0x11, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0xa, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0x7, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7ffb, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x1, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x0, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0x2, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0x1, 0x6, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x5, 0x24], [0x9, 0x840bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10002, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9a, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x54401, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000001c0)={0xfec00000, 0x10a000}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xb0000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0xa) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) poll(&(0x7f0000000340)=[{r5, 0x2208}, {r6, 0x200}, {r3, 0x90}, {r7, 0x4011}, {r4, 0x4580}, {r2, 0x4000}, {r4, 0x687}, {0xffffffffffffffff, 0xb068}], 0x8, 0x5) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) socket$inet_smc(0x2b, 0x1, 0x0) fsopen(&(0x7f0000000080)='qnx6\x00', 0x1) 3.277959863s ago: executing program 6 (id=5635): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x94000) io_setup(0x401, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b45090948f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f176792a1d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541259bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a1d83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16fedd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b6030000000000000015da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d2c624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) io_submit(r1, 0x0, &(0x7f0000003140)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x91, r0, &(0x7f0000000180)="29f887d1293891b0bd9b54f4f1af14e0ac0c882827f220c11618e558a1d3b8d4a9dd79e1bf91cddeb64daaf0df38981369cd313ab543f87fa4aa725a1f57db1aba61a6c720e9ed3ebc0fa3c475edd57d608be396cee0be236a94bde869672f53f2e39d9c6fc1dced04114b01bd8c9a108f61e97dcf9825d0120c68504769887c0e985f2c7135dca60cebc16fa8da2da318e740f98318f94b5d9d871ecb3d19d25b7b07bf253916681b87d4007a25b5e6349c676bdc35b9b0402e2f3e9af1dd7b55b46ae92a1726f5a5a0e165334b38e31c94045d09a6e87735e01fdf8798b078", 0x5, 0xffffffff}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f00000002c0)="6576e7a75f1900cc1dc9bf1d69c6418b93", 0x0, 0x2, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f0000000340)="e8a889251d17757ffb175d8d73cbbbc1d134cc1459f1ed3f32f5aab24d770e271d70c2ee0fa70654dd237dece122441fb15e24dbc2d65fedc27525493cbafc3bead695868eb5ca7ed36bf7cc956ae5e7ce67969b76518c954df432ba33f40f9fa11e67eecfd016375e288e106ed734a7606fe3bb00a0620b96cc12248ef4fe01c9d08aae036c1420cd67b7418254b975ae58593488670846b52146a25384f41ea76312fed246854ea7a3b8fa91879f09070eb3f25a0b230a21b0d6d40d4431319fe6eb093ab169a647bd0305226dbe010ed14cff1c98a3cf4a6b05ba7a98666dc98b4a9932de7311d18bb76626acbeebfc"}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0xae7, r2, &(0x7f0000000480)="b5c0773a5071ab861d84e40a3d16d396937bed8518f80b8ab618ddf297f9e7910ccd8599f21c102b47fe68b8d1682a258c229ce89694b4dc7715b7403424873d958bfa9aa71c097d0c760951335bf45a418f131e4d0d7bd3152301b402818e7873f9d34d18cbe9248b49d16ec091d0b419dbc0b614ae44897e744268b919d3d3ffb779cf67139e09c00921af76af9d295039d3568c50a538b27f21958f47cceca67528642027d1d82ae0ff4bd4d6ab4e4128ed0dbcd9f52103ab3fffdfad75639f510fc7a35712edecec79fb4127940ea8c9586bc41f", 0x0, 0x6, 0x0, 0x1}, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f0000002080)="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", 0x0, 0x534d, 0x0, 0x2, r3}, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x6, 0x82, r3, &(0x7f00000005c0)="9a96c35ad548e5121237dc46574e6e4a9ddfd3", 0x0, 0x9, 0x0, 0x2}]) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000600), &(0x7f0000000640)=0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) sendto$packet(r4, &(0x7f0000000000)="05031600d3fc140000004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @random="000000100600"}, 0x14) syz_open_dev$sndmidi(&(0x7f0000000080), 0x5, 0x800) 2.685355833s ago: executing program 0 (id=5637): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2507000000ceb90fa13ca56776c469b35eaca3d60ba3ff8472be56ade0374787152a94c58d470df1306afb77b79a171c13e7ae21882a62a7e3cb75429d5c2af665524b1742214832c97cc88299f8d0cf77aa359d78157a08b3be9fd1414a7bed5b2f7ebe2c7fcccaaa9a05384f5ea24569289eeaf8d7e558b106a3a1"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r2 = dup(r0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000000c0)={0x4, 0x4, 0x7, 0x80}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 2.501033342s ago: executing program 1 (id=5640): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000013c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0xcc000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5, 0xfffffffc, 0xfffffffe, 0x3, 0x18000, 0x9, 0x3c8, 0x9}}}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newtfilter={0x1b6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xb, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1b3c, 0x2, [@TCA_FLOW_EMATCHES={0x378, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_LIST={0x1bc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x9}, "1890ab23626256525624ed0aae0e7fcbe3ceb5a240cfc2ef52fc41e6b7892e08be2a1a1d1ec1cd74c1ba65a0688899757e98d46d88ca84891b51bdaced3bae4a5fba5e9f115393c231400de1471e9aab494badf9420e9b30654f6b77d9d9ee4493da21d9a6fbca80af52106ea40a3198e5f2c7bad0de980296707e32d8543dd2b7183ee5992ef9531aa48707bb5efd40359291524990cb7c865b15f4be80d39fb0613577795a2566eb917423179e9bd28d12cbab421c2d17c2f42804f4"}}, @TCF_EM_META={0x64, 0x3, 0x0, 0x0, {{0x5, 0x4, 0xda0}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x2, 0x1}, {0x1, 0x3, 0x3}}}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="dfe646f1082c23d81c", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="fc4aa8c5"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="b2d76bffb7b2db37a9", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1be3e6335f027b37da9f"]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x74}, {0x1, 0x1, 0x4}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x0, 0x4, 0xff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x1, 0x2}, {0x400, 0x4, 0x2}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="6b49acfec5dafab3fcab", @TCF_META_TYPE_VAR="8e", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="27a0c150d49ffc2e18"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xca6, 0x10}, {0x5, 0xc7, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0xfffffff5, 0x80000000, 0x3, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0xa3}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x3ff, 0x2, 0x3}, {0x4, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0xfffc}, {{0x3, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x62}, {0xffffffffffffffff, 0x2, 0x5}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x400}, {0x1000, 0x9, 0x0, "601436e64de58932f4"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xef5, 0x7, 0x7}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x800}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x6}, {0x4, 0x8001, 0x5, 0x3, 0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfff6, 0x2, 0x4}, {0x1000, 0x2, 0x1, "4fe7"}}}, @TCF_EM_IPT={0xd0, 0x1, 0x0, 0x0, {{0xfff7, 0x9, 0xc9c6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_DATA={0xb0, 0x5, "ee0f992bb377eed6cf152ba70701a37310204f0d54d03713358166d3a6b52b9a49df1a6a29e3d4d13927b549108640292e21241eb99d48068d8fee6b4e44609ca26f163ff0eb35b4f5658250bc320306bd0ce1245e5e49b45ab9aaa82fd555422089ae8de0453ff965dac8ffa7eaa9b68ff6f9509a09d0eda3541bd8451b7e6ff91e02d8b1394f1210bda0dd4f80a665315a3a49b052a174ce167860b436f320deb286797fa458df8a9eb042"}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x626, 0x7, 0x9}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xe4ce}, @TCA_FLOW_ACT={0xc8, 0x9, 0x0, 0x1, [@m_skbmod={0xc4, 0x8, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x14}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80f, 0x6, 0xffffffffffffffff, 0x2, 0x7}, 0xf}}]}, {0x45, 0x6, "47b4e0ced5d1cce2f4974df14983e0725f2e640ed04cc40a628d2941a948cd689b24b4db7b4c35f86921b439ee1cd77480287873af90383e59e283b312e6f86c4c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0xc2}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x200}, @TCA_FLOW_ACT={0x16d8, 0x9, 0x0, 0x1, [@m_mirred={0x1b0, 0x6, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x80000001, 0x10000000, 0x3d, 0xcb67}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x3, 0x5}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x10000000, 0x0, 0x6}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x20000000, 0x10001, 0xffffffff}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x3, 0x81, 0x800}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0xb, 0x6bb7}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xb6f5, 0x9, 0x6, 0x7f}, 0x1, r2}}]}, {0xa2, 0x6, "e2bab4a7d73ea1c3bd603091a3ca685f9055b27a834ec7a3d877cc927983144e953702f23df89e9c6d119d1131c4c39743e69f7d95adeeaf26c94e6ac5eee60f47aee548038df2b8ca5d1d08c985dd94c327380f8be08970b49897c4e7364276445134fbde37cdcaf0aac0f867cfb304aa9c82588343ecbdad01065f339e7490986e122a5f614f13c1e353fb8f6d0f08886ade280b8565cafc60bc0be58b"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x11d4, 0x10, 0x0, 0x0, {{0xb}, {0x10c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x8000, 0x2, 0xf70, {0x70, 0x1, 0xa8, 0x401, 0x2, 0xd}, {0x81, 0x1, 0xc4, 0x1, 0x3, 0x7}, 0x96b1, 0xb, 0x1000000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x8, 0xfffffffa, 0x0, 0x80000001, {0xa, 0x3, 0x7, 0xa4bd, 0x5, 0x3}, {0x4, 0x0, 0x41, 0x1ff, 0x0, 0xfcec}, 0x4, 0x101, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x8, 0xe9c8, 0x2, 0xc8d5, 0x4, 0x6, 0x81, 0x9, 0x7, 0xffffff1b, 0x10001, 0x401, 0x8, 0xbc, 0xffffffff, 0xd878, 0xfff, 0x137, 0x1, 0x0, 0x1, 0xb, 0xae7, 0x0, 0xfff, 0x2, 0x6, 0x5, 0x1, 0x2, 0x9, 0x5, 0x8, 0x0, 0xff, 0x0, 0xd2, 0xffff, 0x9, 0x1ff, 0x40, 0x4d, 0x5, 0x1000, 0x8000, 0x5, 0x6, 0x8, 0x8, 0xfffffffa, 0x5, 0x7, 0x40, 0x0, 0x7fffffff, 0x80000000, 0x7fffffff, 0x4, 0xffffffff, 0x81, 0xa54a, 0xc, 0x4aa, 0x4, 0x3, 0x7, 0x81, 0x6, 0x2d2, 0x7f, 0x0, 0x8000, 0x3, 0x80d, 0x3, 0x6, 0x1, 0x6, 0x5, 0x101, 0x8, 0x4, 0x8, 0x9, 0x0, 0x3, 0x4, 0x80, 0x0, 0x0, 0xfffffff7, 0x2, 0x8, 0x5, 0x80, 0xfffffffd, 0x7, 0x7, 0x92, 0x0, 0x6, 0x4, 0x6, 0x3ff, 0x1, 0x0, 0x42, 0xae, 0xb, 0x6, 0x400, 0x2, 0xf373, 0x4, 0x10, 0xff, 0x2, 0xb7a5, 0x4, 0x2, 0x5, 0x1, 0x2, 0x2, 0xc, 0x5, 0x227, 0x497, 0xfffff000, 0x86, 0xfffffc01, 0x0, 0x2, 0xfffffffc, 0x8, 0x3, 0x800, 0xfff, 0x5, 0x9, 0xfff, 0x4, 0x5, 0x2, 0x1000, 0x8, 0x7, 0x6, 0x6, 0x7, 0x0, 0xffffffff, 0x7, 0x80000000, 0xce39, 0x2, 0x205bd63d, 0x4, 0x0, 0x4, 0x7, 0x426, 0xffff4083, 0x1, 0x6, 0x5, 0xffffffff, 0x1, 0x5, 0x0, 0x6, 0x10000, 0x28, 0x80, 0x7, 0x63, 0x1, 0x400000, 0xfffffa69, 0x1, 0x7, 0x9, 0xffff, 0xca8, 0x81, 0x8, 0x4, 0x8224, 0x7, 0xfff, 0x1, 0x4, 0x0, 0x0, 0x8, 0x1, 0xffffff7b, 0x3876660f, 0x0, 0x6cf94636, 0x8, 0x6, 0x5, 0x200, 0xd, 0xffffffff, 0x0, 0x6, 0x0, 0x4, 0x9668, 0x2, 0x80000000, 0x1, 0x5, 0x2, 0x6, 0x8, 0x80, 0x7, 0x7, 0x4, 0x4, 0xbf1, 0x8, 0x1000, 0x85, 0x4, 0x6, 0x3b18, 0x0, 0xfffffffb, 0x7c4104fd, 0xfff, 0x397, 0x8, 0x5, 0x5a8c, 0x3, 0x400000, 0x7fffffff, 0x4, 0x80000001, 0x4, 0xaf6d, 0xe, 0x4, 0x7, 0x8, 0x6, 0x1, 0x3, 0xffff, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x2, 0x1, 0x1c000, 0x3, 0x40, 0x6b1, 0x5, 0x0, 0x0, 0x28, 0x7, 0x0, 0xfffffff6, 0xffff7fff, 0x8, 0x1, 0x7, 0xcb, 0x2, 0xff, 0xfa8f, 0x1, 0x2, 0xfff, 0x0, 0x80000000, 0x6, 0x5, 0x80000001, 0x40000000, 0x0, 0x5, 0xffffffff, 0x7, 0x3, 0x5, 0x1, 0xe, 0x2, 0x8, 0x6, 0xfffffff8, 0xff, 0x0, 0x8, 0x5, 0x1f7, 0x0, 0x9, 0x1800000, 0x3, 0x6, 0x53c6, 0x5, 0x713, 0x3, 0xd, 0xfffffc00, 0x7191, 0xffffff75, 0x6, 0x0, 0x4, 0x7187, 0x0, 0x3ff, 0x1, 0x1, 0xffffffff, 0x7, 0x8, 0x6e, 0x6, 0x1, 0x8e, 0xad, 0x2e1, 0x1, 0x81, 0x4, 0x7ff, 0xc, 0xbfd9, 0x2, 0x47, 0x8001, 0x3, 0xfff, 0x0, 0x7, 0x7ff, 0xfffffcbe, 0x7, 0x4, 0xc3, 0x6, 0x7, 0x3, 0x6, 0x1000, 0x7, 0x0, 0x8, 0x4, 0x9, 0x3, 0x200, 0x8, 0xfffffffd, 0xffffffff, 0x7, 0x7, 0xfffffffb, 0x4, 0x101, 0x8, 0x4d, 0x9, 0x2, 0x2, 0xff, 0xc2c, 0x2, 0x80, 0x60, 0x400000, 0x9, 0x5, 0xc00, 0x1, 0x800, 0x80000001, 0xe, 0x7a, 0x3ff, 0x7, 0x7ff, 0x375, 0xfffff152, 0xabc, 0x9, 0x9, 0x5, 0x0, 0x7, 0x6, 0x81, 0x9, 0x5, 0x70fb, 0x6, 0x1, 0xa8b, 0x8, 0x4, 0x8, 0x6, 0x1200, 0x54, 0x4, 0x79, 0x4, 0x2, 0x40, 0x8, 0x3a, 0x7, 0x7f3, 0x80000001, 0x10001, 0x0, 0x1, 0x5, 0x3, 0x7, 0x10000, 0xef, 0xda, 0xaa, 0x6, 0xfffffff7, 0x401, 0xfffffffb, 0x7, 0x101, 0x1, 0x3, 0x2, 0xd, 0x6, 0x1, 0x0, 0x7, 0x7, 0x6, 0x1, 0x9, 0x7ff, 0xfffffff9, 0x3, 0x40, 0xf, 0x4, 0x9, 0x329, 0x5, 0x2, 0x40000000, 0x8, 0xf5, 0x5, 0xb21, 0x9, 0xff, 0xff, 0x1000, 0xb2, 0xa2d4c42, 0xed0, 0x9, 0x7ff, 0x6, 0x5, 0x9, 0xaa6f, 0x3, 0x10000, 0x0, 0x0, 0xf7, 0x8, 0x6, 0x7, 0x5, 0x6, 0x7, 0x7d, 0x9, 0xb, 0x5, 0x0, 0x8000, 0xfffffff8, 0x9, 0x5, 0x3, 0x7a4545c5, 0x3, 0x7, 0x20, 0xe, 0x8, 0x0, 0x96, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa5, 0x5, 0x7, 0x1, 0x10000, 0xc, 0xf9, 0x1, 0x9, 0x400, 0x4, 0x8, 0x5, 0x8, 0x4, 0x8, 0xd, 0x3800000, 0x40, 0x3ff, 0x7, 0x51a, 0x8, 0x5, 0x7ff, 0x0, 0x40, 0xd, 0xf3, 0xcc, 0x3, 0xf, 0x0, 0x1, 0x6, 0x4, 0x9, 0x7, 0x3, 0xd, 0x2000, 0x8, 0x9, 0x2, 0x3, 0x97, 0x5, 0x1113, 0x40, 0x0, 0x3, 0x3, 0x5, 0x8, 0x5, 0x3, 0x3, 0x8000, 0xb67e, 0x5, 0x6, 0x40, 0x3, 0x1, 0x6, 0xfffffff8, 0x8, 0x6, 0xd, 0xff, 0x9, 0x7, 0x1, 0x6, 0x5, 0x8001, 0x7, 0x7, 0x4, 0xc, 0x5, 0x7, 0x1, 0x9, 0x1, 0x0, 0x8, 0xa9, 0x5, 0x9, 0x401, 0x8, 0x4, 0x6, 0xc, 0xb, 0x10, 0x95, 0x7f, 0x7ff, 0xfffffff8, 0xe, 0x56e6, 0xfffffffd, 0x5, 0x800, 0x5, 0xf, 0x2, 0x4, 0x3, 0x18400000, 0xf, 0xfffffffb, 0x98e8, 0x0, 0x7, 0xb, 0x8, 0x1, 0x9, 0x1, 0x8001, 0x5, 0x6adf, 0x3, 0x3, 0x7, 0xfff, 0x1, 0x3, 0x8000, 0x9, 0x104e, 0x9, 0xf, 0x1000, 0xa, 0x9, 0xfffffffa, 0xb63, 0x8, 0x55, 0x3, 0x3, 0x6, 0x9, 0x2, 0x92bc, 0x0, 0x800, 0xa, 0x1, 0x3, 0x5, 0x4, 0x6, 0xd, 0x3, 0x8, 0x0, 0xffff, 0x6, 0x7fffffff, 0x200, 0x8, 0x80, 0x1ff, 0x10000, 0xfdae, 0xa4, 0x9, 0xfffffffa, 0x5, 0x80000001, 0x5, 0x8, 0x2, 0xfa2, 0x80, 0x1, 0xfffffff9, 0xc, 0xbe21, 0x80, 0xeabe, 0x6, 0x2, 0x2, 0x3, 0x1, 0x8, 0x101, 0x4, 0x4, 0x2, 0x9, 0x4, 0x2, 0x5, 0x7, 0x8, 0x9, 0x9, 0x1, 0xffffff00, 0x8001, 0x0, 0x101, 0xddfb, 0x8, 0x7, 0x6, 0x1, 0x9, 0x0, 0x7, 0x800, 0x8, 0x1, 0x8, 0x0, 0x4, 0x2, 0x4, 0x7, 0x9699, 0x7, 0xe79d, 0xc, 0x785, 0x0, 0x7fff, 0xf9, 0x90, 0xc35, 0xc13e, 0x0, 0x5, 0x9, 0x0, 0xe, 0x6, 0x0, 0xffff, 0x1, 0xe25a, 0x3ff, 0x624, 0x4, 0x9, 0x0, 0x6, 0x1, 0x9, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0xa22d, 0xe7b, 0x1000, 0x0, 0x8001, 0x8, 0x8, 0x4, 0x6, 0x5, 0x3, 0xbd2a, 0x4b34, 0x9, 0x8, 0xfffffff8, 0xffff, 0x7, 0xff, 0x200, 0x3, 0x2, 0x3, 0xffff, 0xb, 0x8, 0x8, 0x8000, 0x0, 0x7, 0xa, 0x3, 0x1, 0x6963, 0x8, 0xae7, 0x6, 0x8, 0x9, 0x80, 0x9, 0x1, 0x8, 0x4, 0x7, 0x0, 0x4, 0x2, 0x9, 0x8001, 0x200, 0x7fffffff, 0x2, 0x40, 0x3, 0x3ff, 0x10001, 0x6, 0x8, 0xfff, 0x8, 0x5, 0x4, 0x2, 0x6, 0x443f, 0xfffffff8, 0x3, 0x2, 0x2cd1, 0x2, 0x3ff, 0x1, 0x1fa5, 0xac, 0x7, 0x4, 0x6, 0x0, 0x9, 0x9, 0x2, 0x2, 0x55, 0x10, 0x3, 0x5, 0x7fff, 0x4c, 0x10, 0x920, 0x7, 0x8, 0x3e, 0x2, 0x3, 0xff, 0x8001, 0xa, 0x10001, 0x6, 0x589d4af0, 0x200, 0x401, 0x8, 0x3, 0xdff1, 0x5, 0x5, 0x5, 0x3, 0x5, 0x2, 0xd6fe, 0xff, 0x9943, 0x81, 0x0, 0x6, 0x0, 0x1, 0x3ff, 0x2, 0x6, 0x7c, 0x3, 0xfffffff5, 0xfff, 0x7ff, 0x6, 0xffffffff, 0x100, 0x9, 0x80, 0x6d, 0x0, 0x1, 0x6, 0x4, 0x58b, 0x8, 0x7, 0x28, 0x7, 0x8, 0xffff2d33, 0xb, 0xffffff7f, 0xb, 0x0, 0x2, 0x9, 0x7c2, 0x8, 0x4, 0x1, 0xffff, 0xd96, 0x15a4, 0x5, 0x2, 0x2, 0xa82, 0x8, 0x9, 0x5, 0x7fffffff, 0xd, 0x101, 0x6, 0x4800000, 0x6, 0x7, 0xa879, 0x2, 0x0, 0x5, 0xb, 0x6, 0x80, 0x28, 0x8, 0x1000, 0x7, 0x400, 0x5, 0x5, 0x5c18, 0xad, 0x8942, 0x9, 0x7ae9, 0x7fff, 0xd876, 0xfffffff7, 0x8001, 0x8, 0x81, 0x1, 0xfffffffb, 0x0, 0x6, 0x6, 0x8, 0xd, 0x8, 0x3, 0x3b, 0x3, 0x3, 0x3f, 0x7, 0x96, 0x8, 0x6, 0x0, 0x40, 0x2, 0x9, 0x4, 0x8, 0x8, 0x4, 0x800, 0x6, 0x1, 0x7, 0x100, 0x40, 0x1, 0x400, 0x8, 0x10000, 0x3, 0x40, 0x9, 0x7ff, 0x2, 0x80000000, 0x5, 0x10000, 0x4, 0xf31, 0x4, 0x8, 0x7d946742, 0x3, 0x8, 0x6, 0x5e, 0xeef, 0x4, 0x3, 0x8, 0x6ea2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0xe4, 0x6, "17ff94be0349685b225293ae64478e6c8ce2660836d25ec45775c456352e69d2ea385bcd1460fcd8b968bd031297772e717a4e08f50c71e64fdc7ff7eb9f5aba3a4a6904b55042a90fe2a90f0e4b46255eaa11f73959e70b30477a8f5418ae937c2ebef0c71d9c27869833c20c34af18074f3542c4c5d8f724c719390222143f7f3d24599109082ea5983fe3477671b9774ffccf0e0ee057ab40148ea42438c8dbf32edced316e63ce143a0d312958d68334f83a010145e26fc04b2dcad1913d5ef0e2f1ce7b3de78c2b8e8214365245fe318be5be14a07f45b2715687a2955f"}, {0xc}, {0xc}}}, @m_connmark={0x190, 0x4, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x20000000, 0xff, 0x4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x800, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x21fd, 0x0, 0xa3d, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x65, 0x10000000, 0x7, 0xf1}, 0x9}}]}, {0xed, 0x6, "96db00bb45b11c8167bb4eb8967fb891e33b3186e8b3cb5e6a0b5d420c18a656a3a314679628bfb4604cc47a57617b740474a7363487eb375edd4db9178056f0fae31a66c3b7da035c648df76dc2a4f2cfacfe3d3fdc8c151c9385ba5979d0ab3f23b635d2cc1cfdb72b089bfcfb68ca74d140f0db49c5fb6953fed5ef90342f55832352c6ce3eacf301c8c9b35ce4da831239ee676c1b3297ce436a212422ebe54aa3db0863cec8c5bed96e94388e56457bdfe4b97b14ab24b025d61102d3305f7767c15c2c787573e2ac16b2d70e9eba7690bf76ae13d2650a7ab1cc9fd36fe059c472c3b1f5c649"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x148, 0x4, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x630, 0xffffffff, 0x3, 0xe}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xb2, 0x5, 0xb, 0x8, 0xfffffff7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x6, 0x3, 0xe66}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xc8fe, 0x7, 0x3, 0x400}}]}, {0xa4, 0x6, "e27c709ae42ba1aa2cc629e0b6a90d7a2a4f8d6842848966ea2eb5132e2d4bbb860e3e832f2db647e23022049cd87c01cc82ed7c0b68f25c329329282b591cf647ea76375f7158908a2a9051c1821751c1164fa4799a02e74698882081024809389ea62b5db60433055aae4615c52248bc9f89f87b3c6766439b8ccb2fe00353d1fb2d399a774b8cb785dbcc1bb9ce5a84cf932bb360c69885aae991e69f737d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x78, 0x1f, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xa9}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0xe, 0x6, "a8e36aba84bcbec6a8dc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}]}}]}, 0x1b6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x40000) 2.434103837s ago: executing program 1 (id=5641): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000000)='}\x00', 0xa200, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x586]}, {0x0, 0x8, 0x2, 0x5}}, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x5}, {[0xdb2, 0x2, 0x9, 0xd]}, 0x9, 0x9b, &(0x7f0000000180)=""/155}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000b00)={{r0}, 0x0, 0x4, @inherit={0x70, &(0x7f00000002c0)={0x0, 0x5, 0x4, 0xb, {0x2, 0x80, 0x1, 0x0, 0x7ff}, [0xffff, 0x7, 0x54f7f996, 0x82, 0x100]}}, @subvolid=0xa9}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000ac0)='./file0\x00', 0x81, &(0x7f0000002280)={{'fd', 0x3d, r1}}, 0x0, 0x0, 0x0) 2.432771117s ago: executing program 1 (id=5642): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x200) socket$kcm(0x10, 0x2, 0x0) r6 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r6) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r8, 0x2205, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x10, &(0x7f0000000280)=[@cr4={0x1, 0x310049}], 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009, 0x10851, r0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) 2.302444593s ago: executing program 1 (id=5643): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f00000001c0)=@fd={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x82, ';\'S;'}}) (async) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xcf, &(0x7f0000000380)=@generic={0x1, 0x0, 0xc7, "39e0fb51", "a17f0be9fa239af3d8523f6f4c12e95e3fd7748d40b9f48d6b34438a96e2685a2d12d6797ab966ddc39fddd0e99245d4ee7f09ce79e6c97d59108761ade8433181926b8f2e282a3b93c09cba061b5300d1840bc67c30009ed52b9894bee29b6ba0c27e6924e730a2be2d345968af186e7a83f96bddd5b7b5ed396fd2ea2896262e0743b623a6fbcf26553d7377b0e9081cb81aab092507b58e780f2a42115df67682196b6115c1e32880a656919d8b65e55dd65d49870c023d8a9f276a29d9a538e32bf538fb92"}) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x4, 0xdb, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x1, 0x1, 0x9, 0xe0, 0x8, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xde, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x9, 0x9ce6, 0xf}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x5, 0x9, 0x7, 0x4, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x3ff, 0xc15b, 0x1, 0x56, 0x101, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xc, 0x8, 0x7f}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x22}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x40, 0x4}, @mdlm_detail={0x61, 0x24, 0x13, 0x4, "544d4df07912898ae7e7e664c409df05fb9ac32ea1134e1493a667054effe290f81204e76eb89cb1f72b26da8d0f16547b3365f6022e873e4f349a37e6a093adc1345956b8878ba9dec4f7d4f83a53a700048e308708a93e05d39b9836"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x97, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x1, 0x10}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x8, 0x7, 0x9, 0x20, 0x64}, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="050f050000d9fbfb287763ae8fe2ceb5f54ad73647d16cb63fbfcc3117f5a9f8af4548370224b66f081f87a47f1eecdb861b53bd886980008f4f7ac0004efd26b38cb73debc4b1633cc0f46a59084a3885705d172e886f3d339e8c77d554d23169469530c1b59c422b226486ae78e10b4d3041950f752643db0060703978f0a01da0fe3354b9399c7e527e2083102989451a30782f472ea0b3dae76769bf558488ac8afef79fadaf31a86af4f262b7c6db33fd0b39cf000200"], 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x415}}, {0xaa, &(0x7f0000000240)=@string={0xaa, 0x3, "94c8091e947f14e0b2781dae8d1bfd090d92a24a045be9914a7bd725a651d12eab2accc4c2657e1350556c784e3ac44b89af19eb365b802aa4266efa490e0467ddef24d603236c65ac16f20381dfbff407313e09f44020bf36226c7294703b67260c2e6f969188fe8c1df61d4c3e766181e6c03ba517daa299844ac388b4a8f8766fa0e5d1c8cb42141ba0115fee2586cf049a51bd6bca6f0317229c72b7f045c2a362b280aecf99"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3409}}]}) (async, rerun: 32) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x1ed1, 0x80000, 0xffffffffffffffff}) (async) r3 = getpgrp(0x0) ptrace$getregset(0x4204, r3, 0x200, &(0x7f00000006c0)={&(0x7f0000000500)=""/61, 0x3d}) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x63}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4) 2.061133382s ago: executing program 0 (id=5644): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x5277c0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) readv(r5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000c80)=ANY=[], 0x40}}, 0x8000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) dup2(r9, r9) 1.558431443s ago: executing program 4 (id=5645): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000001020000000000730143000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.49213673s ago: executing program 5 (id=5646): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x60200, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) close(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xfff, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffb}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x3, 0x1, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) sendfile(r0, r1, 0x0, 0x1020000023892) process_mrelease(r1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$TIOCSERGETLSR(r5, 0x5459, 0x0) connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) 1.480745946s ago: executing program 4 (id=5647): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x24, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44050}, 0x2004c080) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r2, &(0x7f0000000c40)={0x8000203d}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r7, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00aa00000006000e00b7"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.317869605s ago: executing program 5 (id=5648): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x9, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0xfffc, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x20000008, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.154016548s ago: executing program 5 (id=5649): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="030700"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 1.073821493s ago: executing program 4 (id=5650): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x200c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xbffe, 0xc000, 0x0, 0x40000392}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x6145, 0x7721, 0x17, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000021c0)=[{{&(0x7f0000000380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000003c0)='N', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000a00)="c254461bfd25473eee5b61913b564cdcf3fc05cad84cdc2e0e123dea868f491a", 0x20}, {&(0x7f0000000a40)="45d60a2af4ceebbbb0b905c3e3ec647309f06ea1f8a89ee77bf293d1fb17c292a0a8ad7c6048706979e31e34cb729d79b0c5922b1e4d15b01e416b0b8d45f536c0460f4f38fa59598d648d55588ffbb9445e04f42cbc355be3c8ca4bf35abf78d530cab42890e606ccf7c0", 0x6b}, {&(0x7f0000000ac0)="bb0ea6f4d904d60d9c41af2274bb4567bceacb6c8f163c85259c74dbf577037de161da08f6d3ca1f1f2bef6bd20c37f019814d9f1375e3721e8d9b29f2193c057291126d57bba883e5365b463f7729e5ed8c3ada5fac8a498eb6f81311cc44cc29e93c7e3349da4b21a9262de06106933632bc0a0e817d179c54aca4204d3b3a61bab706aec3f0ef65ca24b9ae21d36d5db6ef0fc89993", 0x97}, {&(0x7f0000000b80)="f6988d617ebb8742c84bcc8fc168d37493e4e29065b63277ecd74be3b825f1288ef88e8ea4bee48ac705e8c6b2bc1c4dab8d975fe6ffb444928cdf4d337b56305ffcd3d120056ed8a2fee025dcb42c99e3ec7bb5341ebe28f3745287a918393446bd19f3c1a1ba5bc72be2a56b70f73f82acb3c00aa09858e1728b7f7c26a30b515b045f6474515bc440c1f3874ec142ef0464f49b345118827e6454ff7dcdd5bf5a8abe5661da56fe5e6ccc7b2b00874922aa7fefff3786bfb96201a2418abba01bd8e055f48669161c59aa3d7442cc2c8d7a7d48400e0094009c506f7092f2b50c618064f5f9da85aff1097abd224f1862137b40fd6e12fb06a9cebe2b54023ba17b45027f1d3a99c02c3d9a78902cfa9f2c8624f7ba7f01f28628b3b3436c3109bf355b7a9b3ed89e1974307dc8857d440baf51f905ff88ed4d27b50e1eae8801da7352e3047e1cdf680e5b46b841b7ee45ed676170b3aead28d4f4c76fdd52e8af5ea19892c81861154b304700b426da8f150a84335a0375a843eedcda7123a0e07e33a71a491d749da9cd92d6c24dbc6692a45aaa12a1d390f9eee0a74fa77d5abd8396ee96778772901035d8b09e89a67e1815daaf87c813945c6231cc7f0a396c16ab0edd7a99bd380e3f823ade14d61e4812de52d5a532962f6311b6a721057efb29a1e9098ad466708e9b825e871999717e7747799925d57c994bbe780a7c4f80b28f808052c25152a461b0497a18a42bef0c5714f96db686282f893f0c6c70534de1f7fd343b6074d45c6999116bc5c991ac5748e71f978cccd1742a9d9147e9b2b3bc0537b03d171bd942683722ade1b09af38ee478fcadbbdaaeda4550c4a9efa338ff7b3de93dc73b03c135781414d30f7ea06345cd70226f8facb56834d3ee0ffa60ec3b5aff0b2a85febaffc77de7ebacd5fdc1d12524c235be208d879713334c1182f86cad1b7a8a3b22328edc41bee10ac90f1ba94a691f6eb77c681fd271a2db696e7f0454a2b37932cb430daf03f05006193a5eb14bd495e3743b929a6ea3929799b9e4f1a500ba0b16a0b34c4124676dded3e33d645bdce8456ffa4bd575a6e666a1007c2194e122896c4fb7384f39e2536593dd6001cb215a6e98b25922736ea3ab2ac8f45b16ba89b4b1614e75f89985aad006c71176fb92d0bbc26b32073af19a55ae1be9d73d19d14557c5afc2af066f696b1d14e4e37d242dfeea33b4ba2213753de8d54e06cc74bb646ea52a85a4f09d80346d0c806ad48eaf12e81dbad8754a39a8ecd3b864ba2dd8ee98e7ad14f0691db9b386d82e52ab8266078b3e0b1d18dd657a24030ef5e908c6e1fa3957ed341df8cd73ea80d3276e0ad6431f144063aafe8ff9fdcc87ec522d751783ac5c5bdec5c5535ab0feea27f82164eeb0e6cc35739890fc7518953cac10762391879a8b414c7d15c99936a1e3b9acd9feef08bced02e583665e85d4fa5c3eb97ac3033248a09f1a8fa0175d95b3e9f71b62a415173e16a240a38176042ec8a604d30e3c7f9b7d1b3884de534a57ffccfff5386c8826998f94034f320ae5cb2c106d34a06d93f4548d9984d5d8450185005813ca1c668ffd87a9143956ff2d2271a93ba4c627e2ba771fc29c5b6bd966e5", 0x48b}], 0x4}}], 0x2, 0x40) 1.051089505s ago: executing program 5 (id=5651): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (rerun: 64) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x551d0d4a) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) (rerun: 64) pipe(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r3, 0x4b52, &(0x7f00000000c0)=""/110) (async) close(0x3) (async, rerun: 32) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r4, 0x0, 0x0) (async) syz_usb_connect$uac3(0x0, 0x89, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201100100000040410e00304000010203010902770003017c0006080b0006010030220904000000010130000a2401100a000b0000000904010000010230000904010101010230000905010900020423050a252503040000050000090402000001023000090402010101023000092402010f090d090a09058209"], 0x0) (async) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[], 0x119) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900010073797a3100000000040004801c00048008000240000002600000000c05000300210000002c000480080007400000000b080004400000000b08000b40000000000008000b400000000800"/116], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) 917.042283ms ago: executing program 1 (id=5652): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x18, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)={0x208, 0x24, 0x300, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xbf, 0x2e, 0x0, 0x1, [@typed={0x4, 0x5b}, @generic="52e18e947bea4b495e40d375c475e693a1082b5025a36c2aaac6b8764eb74b2defa8506a432b1ae1269b59e67b548f5a0f9e7432670e382dfc1c2561a86aff6b3980d0c71f8e8fc16bfded6b1f43ea142d232c476c3a9f7019a57cb608f5466db0c7fc80eac29ea9d2aa64f391cfd8e6f37fcb8689ffd90f88ec135e8df43620056f3af92f22a2b5261655d0f86061f4a2a1c4c56e05764ef8e51e9fb09487ba5a51acfa49b7522d0225c58adc3f798796fdcc27cebfe5"]}, @nested={0x132, 0x69, 0x0, 0x1, [@generic="9bf221c9a57cd486754431125309ce564113e4d05a2d05eac7dbe20c20f4617cbb75e0da2ff5d66424771b31f89cfd120f983aeef9911e365dde09e444748604a1c44b3323967b7d74e3bd000975b2b83d", @typed={0x8, 0x23, 0x0, 0x0, @uid}, @generic="c6ed49aad41dceab3f0943a613366790a4ae2f065dafdc6c9f1b040ad34c9502645b2d74a1bd5a659e48902b490cdae55c77ed3da6d089ce2e85d1454f2e5f2d529a892d75cba47921498295b7a5d9ccc982e85066486dec9984ac65d4440a21fc3699573f804dce182a5e7d2e594688d3298f30c8dd6b574c2e3327c71b54851cff5f807db7904f3da906c3a586d43ba0063ec6783da7bf20bc2fa588debcf936529e1af07d0cc078a47a8e1660d51262861361a83e55d86b1205999a83ce331f3e2bcb420bdf03b8669ceba135253dc40522be3b"]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000011) gettid() socket$inet_sctp(0x2, 0x1, 0x84) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 914.826866ms ago: executing program 0 (id=5653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp', 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x70}}, 0x804c844) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) fsopen(&(0x7f0000000000)='smb3\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 825.900608ms ago: executing program 5 (id=5654): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x61, &(0x7f0000000040)={0x5, 0xd, 0x18, 0xdfa1}, 0x8, 0x28, 0x4, 0x0, 0x4bf, 0x5, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e22, 0x9, 0x2, 0xa0, 0x0, 0x6c, 0x0, r5}, {0x8, 0x526e, 0x800, 0x7, 0x9, 0x67, 0x6, 0x8000000000000001}, {0x345, 0x6c, 0x9bf, 0x3}, 0x7, 0x6e6bb6, 0x1, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3504, 0x0, 0x2, 0x51, 0x6f, 0x1, 0x5}}, 0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xfffffdef}}, 0x8000) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x2}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000300)={r10}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={r10}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000900}, 0x8000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) 817.291201ms ago: executing program 0 (id=5655): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0f02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x2) r1 = gettid() r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000240)={0x0, 0x0, 0x0, r3}) close_range(r2, 0xffffffffffffffff, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/time_for_children\x00') ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0], 0x50) r5 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000040), &(0x7f0000000480), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) close(r0) 751.016904ms ago: executing program 1 (id=5656): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x503401, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x2080) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000100)='./file1\x00', 0x130001fb) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x5000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 668.256063ms ago: executing program 4 (id=5657): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000001030000000000730143000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 598.026834ms ago: executing program 4 (id=5658): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, r2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@rand_addr, @remote, 0x0}, &(0x7f0000000340)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c0}, 0x24040880) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), 0xffffffffffffffff) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r8, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x1000000000000000) fcntl$setpipe(r8, 0x407, 0x100000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902"], 0x0) ioctl$EVIOCRMFF(r9, 0x83c0550b, &(0x7f0000000400)=0x1) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003680)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 206.805335ms ago: executing program 6 (id=5659): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100, 0x2) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @pix_mp={0x6, 0xe565, 0x38415261, 0x4, 0xb, [{0x9, 0x4}, {0xf82, 0x1}, {0x2, 0x8}, {0x7, 0xfffffffd}, {0xc0}, {0xa, 0x7fff}, {0xffffffff, 0x5a32}, {0x1, 0x7}], 0x1, 0x0, 0x1, 0x2}}) 107.809269ms ago: executing program 6 (id=5660): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x100000000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r1, 0x1000000, 0xfffffffe) 19.348013ms ago: executing program 6 (id=5661): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="030700"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 0s ago: executing program 6 (id=5662): syz_usb_connect$midi(0x0, 0x4b, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x1, 0xff, 0xa0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x0, [], [{{0x9, 0x5, 0xf, 0x4, 0x10, 0x2, 0x2, 0x4, {0x4}}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xc2, 0x80, 0x9e, {0x4}}}, {{0x9, 0x5, 0x89, 0x4, 0x200, 0x0, 0x3, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x69, 0x202, 0x9, 0x3, r2}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getpeername$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={r5, 0x7}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e20, 0x9, @loopback, 0x1}}, 0x4, 0x5}, &(0x7f0000000300)=0x90) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="023ebd8cc4b15d121c2db494a6182efd750743501963bc864f38bf676bba9edc4e4142b349cdcfb0d1256a", 0x2b}], 0x1) kernel console output (not intermixed with test programs): uct=0, SerialNumber=0 [ 982.481563][T26240] usb 5-1: config 0 descriptor?? [ 982.705592][T26240] ath6kl: Failed to submit usb control message: -71 [ 982.721724][T26240] ath6kl: unable to send the bmi data to the device: -71 [ 982.729033][T26240] ath6kl: Unable to send get target info: -71 [ 982.735922][T26240] ath6kl: Failed to init ath6kl core: -71 [ 982.743172][T26240] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 982.762046][T26240] usb 5-1: USB disconnect, device number 55 [ 982.807582][T26238] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 982.899233][T30874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.958103][T26238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.970306][T26238] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 982.980177][T26239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.988446][T26238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.996600][T26238] usb 6-1: Product: syz [ 983.000769][T26238] usb 6-1: Manufacturer: syz [ 983.005341][T26238] usb 6-1: SerialNumber: syz [ 983.013283][T26238] usb 6-1: config 0 descriptor?? [ 983.025033][T26238] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 983.036772][T26221] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 983.186996][T26221] usb 2-1: Using ep0 maxpacket: 32 [ 983.195476][T26221] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 983.204962][T26221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.213081][T26221] usb 2-1: Product: syz [ 983.217850][T26221] usb 2-1: Manufacturer: syz [ 983.222483][T26221] usb 2-1: SerialNumber: syz [ 983.239922][T26221] usb 2-1: config 0 descriptor?? [ 983.253558][T26221] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 983.381952][T15822] loop5: detected capacity change from 0 to 7 [ 983.389605][T15822] Dev loop5: unable to read RDB block 7 [ 983.395326][T15822] loop5: unable to read partition table [ 983.402397][T15822] loop5: partition table beyond EOD, truncated [ 983.408733][T15822] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 983.493342][T26221] gspca_ov534_9: reg_w failed -71 [ 983.539300][T15834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5168'. [ 983.570167][T15834] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 983.736864][T26238] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 983.758782][T26238] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 983.799971][T15852] veth0_vlan: entered allmulticast mode [ 983.891268][T15852] veth0_vlan: left allmulticast mode [ 983.926865][T26221] gspca_ov534_9: Unknown sensor 0000 [ 983.926958][T26221] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 983.959792][T26221] usb 2-1: USB disconnect, device number 53 [ 984.010206][T12022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.117424][ T5761] usb 6-1: USB disconnect, device number 119 [ 984.181963][T15856] netlink: 'syz.1.5173': attribute type 11 has an invalid length. [ 984.213802][T15856] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.5173'. [ 984.459973][T15901] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 984.459973][T15901] Please contact the netfilter-devel mailing list or update your nftables rules. [ 984.485585][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5175'. [ 984.496803][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5175'. [ 984.536567][ T5761] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 984.644589][T15905] netlink: 'syz.4.5177': attribute type 30 has an invalid length. [ 984.699278][ T5761] usb 6-1: config 0 has no interfaces? [ 984.706445][ T5761] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.717931][T15905] netlink: 'syz.4.5177': attribute type 30 has an invalid length. [ 984.725796][ T5761] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.745278][ T5761] usb 6-1: Manufacturer: syz [ 984.767111][ T5761] usb 6-1: config 0 descriptor?? [ 984.901861][T15923] loop5: detected capacity change from 0 to 7 [ 984.918344][T15923] Dev loop5: unable to read RDB block 7 [ 984.932289][T15923] loop5: unable to read partition table [ 984.944041][T15923] loop5: partition table beyond EOD, truncated [ 984.958900][T15923] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 985.137289][T12022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.307469][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5174'. [ 985.380801][T15948] binder: 15943:15948 ioctl 4018620d 0 returned -22 [ 985.408583][T26226] usb 6-1: USB disconnect, device number 120 [ 985.757854][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5188'. [ 985.891231][T15973] ipvlan0: entered allmulticast mode [ 985.898672][T15973] erspan0: entered allmulticast mode [ 986.251868][T16001] loop5: detected capacity change from 0 to 7 [ 986.262354][T16001] Dev loop5: unable to read RDB block 7 [ 986.269975][T16001] loop5: unable to read partition table [ 986.281697][T16001] loop5: partition table beyond EOD, truncated [ 986.288971][T16004] netlink: 'syz.4.5189': attribute type 11 has an invalid length. [ 986.298877][T16001] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 986.306991][T16004] netlink: 'syz.4.5189': attribute type 4 has an invalid length. [ 986.337989][T30870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.358209][T16004] netlink: 199780 bytes leftover after parsing attributes in process `syz.4.5189'. [ 986.563178][T16021] xt_socket: unknown flags 0xc [ 987.457137][ T9470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.836558][T26240] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 987.936569][T26238] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 987.941626][T16088] loop5: detected capacity change from 0 to 7 [ 987.955494][T16088] Dev loop5: unable to read RDB block 7 [ 987.972533][T16088] loop5: unable to read partition table [ 987.978945][T16088] loop5: partition table beyond EOD, truncated [ 987.990063][T16088] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 988.012205][T26240] usb 6-1: config 0 has no interfaces? [ 988.019868][T26240] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 988.030305][T26240] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 988.040037][T26240] usb 6-1: Manufacturer: syz [ 988.052374][T26240] usb 6-1: config 0 descriptor?? [ 988.101122][T26238] usb 2-1: unable to get BOS descriptor or descriptor too short [ 988.111842][T26238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 988.128157][T26238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 988.140353][T26238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 988.158451][T26238] usb 2-1: string descriptor 0 read error: -22 [ 988.158579][T26238] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 988.158599][T26238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.176238][T26238] usb 2-1: low speed audio streaming not supported [ 988.176259][T26238] usb 2-1: low speed audio streaming not supported [ 988.193593][T16108] binder: 16095:16108 ioctl 4018620d 0 returned -22 [ 988.375648][T26238] usb 2-1: 6:0: failed to get current value for ch 0 (-22) [ 988.412526][T26238] usb 2-1: 6:0: cannot get min/max values for control 4 (id 6) [ 988.578080][T10713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.605667][T26238] usb 2-1: USB disconnect, device number 54 [ 988.754343][T16050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5200'. [ 988.783067][T26240] usb 6-1: USB disconnect, device number 121 [ 989.707332][T12022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.776059][T16186] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.783490][T16186] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.872729][T16186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.885315][T16186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.092138][ T73] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.105309][ T73] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.120253][ T73] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.316811][T26221] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 990.402447][T16201] binder: 16198:16201 ioctl 4018620d 0 returned -22 [ 990.496838][T26221] usb 5-1: Using ep0 maxpacket: 32 [ 990.506365][T26221] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 990.522202][T26221] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 990.538975][T26221] usb 5-1: config 0 interface 0 has no altsetting 0 [ 990.559917][T26221] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 990.570149][T26221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.586563][T26221] usb 5-1: Product: syz [ 990.609233][T26221] usb 5-1: Manufacturer: syz [ 990.620880][T26221] usb 5-1: SerialNumber: syz [ 990.656145][T26221] usb 5-1: config 0 descriptor?? [ 991.077466][T26221] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 991.481829][T26221] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 991.796816][T26221] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 991.908201][ T5761] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 991.983372][T26226] usb 5-1: USB disconnect, device number 56 [ 991.991858][T26221] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 992.015721][T26221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.035830][T26221] usb 6-1: Product: syz [ 992.044438][T26221] usb 6-1: Manufacturer: syz [ 992.049556][T26221] usb 6-1: SerialNumber: syz [ 992.081365][ T5761] usb 2-1: config 0 has no interfaces? [ 992.091236][T26221] usb 6-1: config 0 descriptor?? [ 992.099382][ T5761] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 992.111525][ T5761] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 992.129395][ T5761] usb 2-1: Manufacturer: syz [ 992.141311][ T5761] usb 2-1: config 0 descriptor?? [ 992.313336][T26221] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 992.814476][T26240] usb 2-1: USB disconnect, device number 55 [ 992.845393][T16301] loop5: detected capacity change from 0 to 7 [ 992.849628][T16301] Dev loop5: unable to read RDB block 7 [ 992.849679][T16301] loop5: unable to read partition table [ 992.849861][T16301] loop5: partition table beyond EOD, truncated [ 992.849877][T16301] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 992.863154][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 992.863180][ T29] audit: type=1326 audit(1780418886.081:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16291 comm="syz.0.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6239ce59 code=0x0 [ 992.873748][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.873798][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.048387][T16310] xt_hashlimit: size too large, truncated to 1048576 [ 993.722039][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5231'. [ 993.821930][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5223'. [ 994.019327][T26221] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 994.050362][T16350] veth0: Caught tx_queue_len zero misconfig [ 994.074581][T26221] usb 6-1: USB disconnect, device number 122 [ 994.462150][T16337] EXT4-fs: Conflicting test_dummy_encryption options [ 994.536542][ T5761] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 994.558623][T16367] support for cryptoloop has been removed. Use dm-crypt instead. [ 994.710819][ T5761] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 994.755686][ T5761] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 994.802008][ T5761] usb 2-1: config 0 interface 0 has no altsetting 0 [ 994.833907][ T5761] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 994.844704][T16377] loop5: detected capacity change from 0 to 7 [ 994.865935][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 994.883275][T16377] Dev loop5: unable to read RDB block 7 [ 994.903466][ T5761] usb 2-1: Product: syz [ 994.908236][T16377] loop5: unable to read partition table [ 994.925215][ T5761] usb 2-1: Manufacturer: syz [ 994.933383][T16377] loop5: partition table beyond EOD, truncated [ 994.947168][ T5761] usb 2-1: SerialNumber: syz [ 994.958138][T16377] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 994.987958][ T5761] usb 2-1: config 0 descriptor?? [ 995.018892][ T5761] usb 2-1: selecting invalid altsetting 0 [ 995.236160][T16411] loop8: detected capacity change from 0 to 8 [ 995.271053][T16411] Dev loop8: unable to read RDB block 8 [ 995.288053][T16359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.298445][T16411] loop8: unable to read partition table [ 995.308973][T16411] loop8: partition table beyond EOD, truncated [ 995.320650][T16359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.329693][T16411] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 995.374987][T26226] usb 2-1: USB disconnect, device number 56 [ 995.468947][T26238] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 995.514741][T16449] CUSE: info not properly terminated [ 995.638212][T26238] usb 6-1: config 0 has no interfaces? [ 995.647648][T26238] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 995.667010][T26238] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 995.686540][T26238] usb 6-1: Manufacturer: syz [ 995.693018][T26238] usb 6-1: config 0 descriptor?? [ 996.029008][T26240] usb 6-1: USB disconnect, device number 123 [ 996.036585][T26238] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 996.196573][T26238] usb 5-1: Using ep0 maxpacket: 16 [ 996.204456][T26238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.216375][T26238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.226381][T26238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 996.266800][T26238] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 996.266828][T26238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.277222][T26238] usb 5-1: config 0 descriptor?? [ 996.656806][T26226] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 996.709679][T26238] hid_parser_main: 30 callbacks suppressed [ 996.709694][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.723858][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.731213][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.739667][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.747687][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.755110][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.762465][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.776792][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.785538][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.798260][T16486] binder: 16482:16486 ioctl 4018620d 0 returned -22 [ 996.804935][T26238] microsoft 0003:045E:07DA.0057: unknown main item tag 0x0 [ 996.824024][T26238] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0057/input/input137 [ 996.844226][T26226] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 996.844507][T26238] microsoft 0003:045E:07DA.0057: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 996.891789][T26226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.930186][T26226] usb 2-1: Product: syz [ 996.941793][T26226] usb 2-1: Manufacturer: syz [ 996.953988][T26226] usb 2-1: SerialNumber: syz [ 997.368396][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.380647][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.451459][T26238] usb 5-1: USB disconnect, device number 57 [ 997.692061][T26226] rtl8150 2-1:1.0: couldn't reset the device [ 997.710239][T26226] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 997.743456][T16526] loop5: detected capacity change from 0 to 7 [ 997.748709][T26226] usb 2-1: USB disconnect, device number 57 [ 997.775998][T16526] Dev loop5: unable to read RDB block 7 [ 997.792871][T16526] loop5: unable to read partition table [ 997.806304][T16526] loop5: partition table beyond EOD, truncated [ 997.826949][T16526] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 998.232713][T16555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.247614][T16555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.277773][T26226] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 998.350504][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.449993][T26226] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 998.467818][T26226] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 998.493811][T26226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 998.515155][T26226] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 998.530942][T26226] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 998.545797][T26226] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 998.562709][T26226] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 998.572668][T26226] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 998.581606][T26226] usb 2-1: Product: syz [ 998.585994][T26226] usb 2-1: Manufacturer: syz [ 998.604639][T16542] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 998.620186][T26226] cdc_wdm 2-1:1.0: skipping garbage [ 998.625675][T26226] cdc_wdm 2-1:1.0: skipping garbage [ 998.642634][T26226] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 998.651435][T26226] cdc_wdm 2-1:1.0: Unknown control protocol [ 998.718074][ T24] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 998.831803][ C1] wdm_int_callback: 314 callbacks suppressed [ 998.831890][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.844479][ C1] wdm_int_callback: 314 callbacks suppressed [ 998.844498][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.856792][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.863387][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.869839][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.876444][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.882884][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.889483][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.896810][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.900875][T16610] syzkaller0: entered promiscuous mode [ 998.903412][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.903836][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.921491][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.930396][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.931518][T16610] syzkaller0: entered allmulticast mode [ 998.937003][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.946612][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.955849][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.962352][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.968953][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.975211][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 998.981805][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 998.999887][ T24] usb 5-1: config 0 has no interfaces? [ 999.007122][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 999.018686][T16616] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5264'. [ 999.028097][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 999.036171][ T24] usb 5-1: Manufacturer: syz [ 999.065944][ T5761] usb 2-1: USB disconnect, device number 58 [ 999.071908][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 999.084389][ T24] usb 5-1: config 0 descriptor?? [ 999.392459][T16641] netlink: 'syz.6.5266': attribute type 58 has an invalid length. [ 999.423028][T16641] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5266'. [ 999.457088][T26238] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 999.531407][ T5761] usb 5-1: USB disconnect, device number 58 [ 999.616716][T26238] usb 6-1: Using ep0 maxpacket: 32 [ 999.626934][T26238] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 999.640177][T26238] usb 6-1: config 0 has no interface number 0 [ 999.649362][T26238] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 999.666863][T26238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.681235][T26238] usb 6-1: Product: syz [ 999.687388][T26238] usb 6-1: Manufacturer: syz [ 999.692824][T26238] usb 6-1: SerialNumber: syz [ 999.707667][T26238] usb 6-1: config 0 descriptor?? [ 999.716726][T26238] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 999.727631][T26238] usb 6-1: selecting invalid altsetting 1 [ 999.733364][T26238] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 999.748749][T26238] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 999.759662][T26238] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 999.769441][T26238] usb 6-1: media controller created [ 999.808838][T26238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 999.974207][T26238] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 999.983814][T26238] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1000.616558][ T5761] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1000.776561][ T5761] usb 5-1: Using ep0 maxpacket: 16 [ 1000.794395][ T5761] usb 5-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 1000.809817][ T5761] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1000.823695][ T5761] usb 5-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 1000.833064][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.843803][ T5761] usb 5-1: Product: syz [ 1000.848094][ T5761] usb 5-1: Manufacturer: syz [ 1000.852762][ T5761] usb 5-1: SerialNumber: syz [ 1001.027094][T16608] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1001.221517][T16701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.232804][T16701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.276707][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1001.437893][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1001.446209][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1001.455875][ T24] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1001.464278][ T24] usb 2-1: config 0 has no interface number 0 [ 1001.470617][ T24] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1001.482597][ T24] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1001.492720][ T24] usb 2-1: config 0 interface 88 has no altsetting 0 [ 1001.500283][ T24] usb 2-1: language id specifier not provided by device, defaulting to English [ 1001.513268][ T24] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1001.522931][ T24] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1001.531088][ T24] usb 2-1: Product: syz [ 1001.535592][ T24] usb 2-1: SerialNumber: syz [ 1001.548235][ T24] usb 2-1: config 0 descriptor?? [ 1001.768563][ T24] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input138 [ 1001.794203][ T24] usb 2-1: USB disconnect, device number 59 [ 1002.082828][T26238] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1002.132872][T26238] usb 6-1: USB disconnect, device number 124 [ 1002.314034][ T29] audit: type=1326 audit(1780418895.531:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16738 comm="syz.1.5277" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f16b9ce59 code=0x0 [ 1002.526113][T16753] veth0_vlan: entered allmulticast mode [ 1002.569086][T16753] veth0_vlan: left allmulticast mode [ 1002.609940][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5277'. [ 1002.653344][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5277'. [ 1002.664476][T12022] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.674473][T12022] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.684813][T12022] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1002.702255][ T29] audit: type=1326 audit(1780418895.921:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1002.726884][ T29] audit: type=1326 audit(1780418895.921:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1002.751886][ T29] audit: type=1326 audit(1780418895.921:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1002.776530][ T29] audit: type=1326 audit(1780418895.921:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd793f5d68e code=0x7ffc0000 [ 1002.800993][ T29] audit: type=1326 audit(1780418895.921:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1002.826246][ T29] audit: type=1326 audit(1780418895.921:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1002.836559][T26238] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1002.850643][ T29] audit: type=1326 audit(1780418895.921:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1002.850682][ T29] audit: type=1326 audit(1780418895.921:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1002.850719][ T29] audit: type=1326 audit(1780418895.921:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.6.5281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1003.078264][T26238] usb 6-1: config 0 has no interfaces? [ 1003.084689][T26238] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1003.094307][T26238] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1003.102366][T26238] usb 6-1: Manufacturer: syz [ 1003.115386][T26238] usb 6-1: config 0 descriptor?? [ 1003.415659][ T5761] usb 5-1: USB disconnect, device number 59 [ 1003.677736][T26238] usb 6-1: USB disconnect, device number 125 [ 1003.810953][T16834] fuse: Bad value for 'fd' [ 1003.997335][ T5761] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1004.156597][ T5761] usb 5-1: Using ep0 maxpacket: 16 [ 1004.167423][ T5761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.178590][ T5761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.189010][ T5761] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1004.202758][ T5761] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1004.212310][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.226144][ T5761] usb 5-1: config 0 descriptor?? [ 1004.448086][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.464866][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.495248][T16851] veth0_vlan: entered allmulticast mode [ 1004.511059][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.527737][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.541493][T16851] veth0_vlan: left allmulticast mode [ 1004.544906][ T5761] usbhid 5-1:0.0: can't add hid device: -71 [ 1004.559867][ T5761] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1004.588270][ T5761] usb 5-1: USB disconnect, device number 60 [ 1004.876553][ T24] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1004.926585][T26226] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1005.028794][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1005.040200][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1005.050422][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.062962][ T24] usb 6-1: Product: syz [ 1005.072409][ T24] usb 6-1: Manufacturer: syz [ 1005.082834][ T24] usb 6-1: SerialNumber: syz [ 1005.089292][T26226] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1005.101728][ T24] usb 6-1: config 0 descriptor?? [ 1005.110029][T26226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.123998][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1005.137765][T26226] usb 2-1: config 0 descriptor?? [ 1005.356205][T16869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.365782][T16869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.384032][T26226] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1005.431936][T26226] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1005.439478][T26226] [drm] Initialized udl on minor 2 [ 1005.602260][T26226] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1005.649868][T26226] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1005.678017][T26221] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1005.693730][T26226] usb 2-1: USB disconnect, device number 60 [ 1005.712561][T26221] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1006.106581][T26240] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1006.163507][ T24] usb 6-1: USB disconnect, device number 126 [ 1006.256586][T26240] usb 5-1: device descriptor read/64, error -71 [ 1006.506804][T26240] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1006.657039][T26240] usb 5-1: device descriptor read/64, error -71 [ 1006.752890][T16959] veth0_vlan: entered allmulticast mode [ 1006.769047][T26240] usb usb5-port1: attempt power cycle [ 1006.801566][T16959] veth0_vlan: left allmulticast mode [ 1007.126706][T26240] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1007.180937][T26240] usb 5-1: device descriptor read/8, error -71 [ 1007.446561][T26240] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1007.488458][T26240] usb 5-1: device descriptor read/8, error -71 [ 1007.558215][T17002] tipc: Failed to remove unknown binding: 66,1,1/0:3536441057/3536441059 [ 1007.616894][T26240] usb usb5-port1: unable to enumerate USB device [ 1008.755632][T17022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5311'. [ 1008.902354][T17032] x_tables: duplicate underflow at hook 3 [ 1009.001017][T17043] veth0_vlan: entered allmulticast mode [ 1009.041675][T17043] veth0_vlan: left allmulticast mode [ 1009.088570][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1009.155399][T17058] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5318'. [ 1009.265574][T17064] loop5: detected capacity change from 0 to 7 [ 1009.290417][T17064] Dev loop5: unable to read RDB block 7 [ 1009.302689][T17064] loop5: unable to read partition table [ 1009.309312][T17064] loop5: partition table beyond EOD, truncated [ 1009.325900][T17064] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1009.357411][ T24] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1009.527583][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1009.541306][ T24] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1009.550534][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.558698][ T24] usb 6-1: Product: syz [ 1009.562858][ T24] usb 6-1: Manufacturer: syz [ 1009.567528][ T24] usb 6-1: SerialNumber: syz [ 1009.656803][T26238] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1009.756209][T17081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1009.780460][ T24] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1009.799221][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1009.809451][T17089] bridge0: port 3(macvlan2) entered blocking state [ 1009.809588][T17089] bridge0: port 3(macvlan2) entered disabled state [ 1009.819808][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1009.822835][T26238] usb 5-1: Using ep0 maxpacket: 8 [ 1009.834612][ T24] usb 6-1: media controller created [ 1009.837715][T17089] macvlan2: entered allmulticast mode [ 1009.847441][T17089] bridge0: entered allmulticast mode [ 1009.853110][T17089] bridge0: entered promiscuous mode [ 1009.854527][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1009.871769][T26238] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1009.884900][T17089] macvlan2: left allmulticast mode [ 1009.891443][T17089] bridge0: left allmulticast mode [ 1009.896938][T26238] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1009.908421][T26238] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=22.d5 [ 1009.917724][T26238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.929888][T26238] usb 5-1: Product: syz [ 1009.935097][T26238] usb 5-1: Manufacturer: syz [ 1009.942980][T26239] bridge0: left promiscuous mode [ 1009.948877][T26238] usb 5-1: SerialNumber: syz [ 1009.958273][T26238] usb 5-1: config 0 descriptor?? [ 1009.971789][ T24] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1010.096189][T26239] usb 6-1: USB disconnect, device number 127 [ 1010.178573][T26238] pwc: Logitech ViewPort AV 100 webcam detected. [ 1010.186363][T26238] pwc: Failed to set LED on/off time (-71) [ 1010.192831][T26238] pwc: send_video_command error -71 [ 1010.199115][T26238] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1010.207354][T26238] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1010.219930][T26238] usb 5-1: USB disconnect, device number 65 [ 1010.295019][T17131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5325'. [ 1010.417818][T17136] veth0_vlan: entered allmulticast mode [ 1010.433855][T17136] veth0_vlan: left allmulticast mode [ 1010.499847][T17133] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.5326'. [ 1010.514039][T17133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5326'. [ 1011.036694][T26238] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1011.066566][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1011.186689][T26238] usb 5-1: Using ep0 maxpacket: 16 [ 1011.193411][T26238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.204711][T26238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.214928][T26238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1011.228674][T26238] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1011.241992][T26238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.242254][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1011.258234][T26238] usb 5-1: config 0 descriptor?? [ 1011.267790][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1011.279530][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.291397][ T24] usb 6-1: config 0 descriptor?? [ 1011.501069][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1011.514458][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1011.524873][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1011.534700][ T24] usb 6-1: media controller created [ 1011.555625][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1011.670839][T17193] kvm: kvm [17192]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x80cd [ 1011.684300][T17160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.698890][T17160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.713950][ T24] az6027: usb out operation failed. (-71) [ 1011.724689][ T24] az6027: usb out operation failed. (-71) [ 1011.730996][ T24] stb0899_attach: Driver disabled by Kconfig [ 1011.739282][ T24] az6027: no front-end attached [ 1011.739282][ T24] [ 1011.747173][ T24] az6027: usb out operation failed. (-71) [ 1011.753330][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1011.763837][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input140 [ 1011.781453][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1011.794422][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1011.820367][ T24] usb 6-1: USB disconnect, device number 2 [ 1011.926886][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1011.948815][T26238] usbhid 5-1:0.0: can't add hid device: -71 [ 1011.960287][T26238] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1011.978533][T26238] usb 5-1: USB disconnect, device number 66 [ 1012.136698][T26239] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1012.287000][T26239] usb 2-1: too many configurations: 15, using maximum allowed: 8 [ 1012.302110][T26239] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1012.311681][T26239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.323737][T26239] usb 2-1: config 0 descriptor?? [ 1012.332215][T26239] hub 2-1:0.0: Invalid hub with more than one config or interface [ 1012.340889][T26239] hub 2-1:0.0: probe with driver hub failed with error -22 [ 1012.349430][T26239] sierra 2-1:0.0: Sierra USB modem converter detected [ 1012.956563][T26238] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1013.086758][T26238] usb 6-1: device descriptor read/64, error -71 [ 1013.326782][T26238] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1013.456591][T26238] usb 6-1: device descriptor read/64, error -71 [ 1013.567425][T26238] usb usb6-port1: attempt power cycle [ 1013.916824][T26238] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1013.947431][T26238] usb 6-1: device descriptor read/8, error -71 [ 1014.160413][T17301] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.5349'. [ 1014.196800][T26238] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1014.237148][T26238] usb 6-1: device descriptor read/8, error -71 [ 1014.367138][T26238] usb usb6-port1: unable to enumerate USB device [ 1014.606555][ T24] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1014.751005][T17343] binder: 17342:17343 ioctl 4018620d 0 returned -22 [ 1014.788191][ T24] usb 5-1: config 0 has no interfaces? [ 1014.795691][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1014.805315][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1014.826583][ T24] usb 5-1: Manufacturer: syz [ 1014.833824][ T24] usb 5-1: config 0 descriptor?? [ 1014.865602][T17350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5356'. [ 1014.968947][T26239] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1014.990580][T26239] usb 2-1: USB disconnect, device number 61 [ 1015.003637][T26239] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1015.016433][T26239] sierra 2-1:0.0: device disconnected [ 1015.044288][T17367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.493029][T26226] usb 5-1: USB disconnect, device number 67 [ 1016.360005][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1016.379581][T17433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1016.526570][T26239] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1016.688795][T26239] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1016.708142][T26239] usb 5-1: can't read configurations, error -61 [ 1016.805995][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1016.823922][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1016.838223][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1016.851554][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1016.863892][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1016.877105][T26239] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1016.923756][T23006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1016.941039][T23006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1016.949814][T23006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1016.962916][T23006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1016.979123][T23006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1017.038155][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 1017.038171][ T29] audit: type=1326 audit(1780418910.261:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17489 comm="syz.5.5372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7190d9ce59 code=0x0 [ 1017.040301][T26239] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1017.077607][T26239] usb 5-1: can't read configurations, error -61 [ 1017.085090][T26239] usb usb5-port1: attempt power cycle [ 1017.375230][T30869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.427251][T26239] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1017.449891][T26239] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1017.458163][T26239] usb 5-1: can't read configurations, error -61 [ 1017.553762][T30869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.596589][T26239] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1017.631084][T26239] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1017.644345][T26239] usb 5-1: can't read configurations, error -61 [ 1017.666371][T26239] usb usb5-port1: unable to enumerate USB device [ 1017.738945][T30869] team0: Port device netdevsim1 removed [ 1017.752492][T30869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.814476][T17496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.822609][T17496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.853029][T17496] bridge_slave_0: entered allmulticast mode [ 1017.865418][T17496] bridge_slave_0: entered promiscuous mode [ 1017.993507][T17625] fuse: Bad value for 'fd' [ 1018.082580][T17496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.094805][T17496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.121752][T17496] bridge_slave_1: entered allmulticast mode [ 1018.152946][T17496] bridge_slave_1: entered promiscuous mode [ 1018.362315][T17496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.401505][T17496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.644702][T17663] binder: 17654:17663 ioctl 4018620d 0 returned -22 [ 1018.776734][T17496] team0: Port device team_slave_0 added [ 1018.924862][T17496] team0: Port device team_slave_1 added [ 1019.028718][T23006] Bluetooth: hci4: command tx timeout [ 1019.143070][T17496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.166003][T17496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.200792][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1019.211297][T17496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.226883][T30869] bridge_slave_1: left allmulticast mode [ 1019.233891][T30869] bridge_slave_1: left promiscuous mode [ 1019.243331][T30869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.254567][T30869] bridge_slave_0: left allmulticast mode [ 1019.260529][T30869] bridge_slave_0: left promiscuous mode [ 1019.273779][T30869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.393695][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.414591][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1019.447417][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1019.481806][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.503632][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.540436][ T24] usb 6-1: Product: syz [ 1019.544642][ T24] usb 6-1: Manufacturer: syz [ 1019.549354][ T24] usb 6-1: SerialNumber: syz [ 1019.562160][ T24] cdc_ncm 6-1:1.0: invalid descriptor buffer length [ 1019.594599][ T24] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1019.625732][ T24] cdc_ncm 6-1:1.0: bind() failure [ 1019.733419][T30869] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1019.746052][T30869] geneve3 (unregistering): left allmulticast mode [ 1019.767431][ T24] usb 6-1: USB disconnect, device number 7 [ 1019.793611][T30869] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1019.807502][T30869] bond0 (unregistering): (slave geneve2): the permanent HWaddr of slave - 2a:e8:75:e1:aa:18 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1019.876629][T26239] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1020.036756][T26239] usb 5-1: Using ep0 maxpacket: 8 [ 1020.052976][T26239] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1020.074811][T26239] usb 5-1: config 0 has no interface number 0 [ 1020.097561][T26239] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1020.115012][T26239] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1020.131660][T17749] loop5: detected capacity change from 0 to 7 [ 1020.143749][T30869] bond0 (unregistering): (slave bond2): Releasing active interface [ 1020.155457][T26239] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1020.168713][T26239] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1020.183009][T26239] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1020.192738][T17749] Dev loop5: unable to read RDB block 7 [ 1020.199099][T17749] loop5: unable to read partition table [ 1020.205005][T17749] loop5: partition table beyond EOD, truncated [ 1020.211717][T26239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.222272][T17749] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1020.234194][T30869] bond0 (unregistering): Released all slaves [ 1020.241563][T26239] usb 5-1: config 0 descriptor?? [ 1020.254880][T26239] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1020.366294][T30869] bond1 (unregistering): Released all slaves [ 1020.411381][T30869] bond2 (unregistering): Released all slaves [ 1020.443417][T17496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.461301][T17496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.462776][T26238] usb 5-1: USB disconnect, device number 72 [ 1020.487621][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1020.515028][T17496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.599682][T26238] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1020.656717][T26239] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1020.800079][T26239] usb 6-1: device descriptor read/64, error -71 [ 1020.814100][T30869] tipc: Left network mode [ 1021.058719][T17496] hsr_slave_0: entered promiscuous mode [ 1021.064480][T26239] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 1021.081323][T17496] hsr_slave_1: entered promiscuous mode [ 1021.093009][T17804] loop2: detected capacity change from 0 to 7 [ 1021.116942][T23006] Bluetooth: hci4: command tx timeout [ 1021.150815][T17804] Dev loop2: unable to read RDB block 7 [ 1021.209750][T17804] loop2: unable to read partition table [ 1021.217350][T26239] usb 6-1: device descriptor read/64, error -71 [ 1021.250757][T17804] loop2: partition table beyond EOD, truncated [ 1021.281172][T17804] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1021.347306][T26239] usb usb6-port1: attempt power cycle [ 1021.739843][T26239] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 1021.797685][T26239] usb 6-1: device descriptor read/8, error -71 [ 1021.959518][T17883] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1022.058536][T26239] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1022.107635][T26239] usb 6-1: device descriptor read/8, error -71 [ 1022.150760][T17903] fuse: Bad value for 'fd' [ 1022.157607][T17903] fuse: Bad value for 'fd' [ 1022.220121][T26239] usb usb6-port1: unable to enumerate USB device [ 1022.604438][T30869] hsr_slave_0: left promiscuous mode [ 1022.605696][T17927] binder: 17926:17927 ioctl 3b82 200000000140 returned -22 [ 1022.623825][T30869] hsr_slave_1: left promiscuous mode [ 1022.644169][T30869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.680160][T30869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.692424][T17935] loop5: detected capacity change from 0 to 7 [ 1022.702394][T17935] Dev loop5: unable to read RDB block 7 [ 1022.710258][T17935] loop5: unable to read partition table [ 1022.717950][T17935] loop5: partition table beyond EOD, truncated [ 1022.727254][T17935] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1022.766229][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5393'. [ 1023.060320][T30869] team0 (unregistering): Port device team_slave_1 removed [ 1023.095115][T30869] team0 (unregistering): Port device  removed [ 1023.187160][T23006] Bluetooth: hci4: command tx timeout [ 1023.290775][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1023.306652][T17946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5396'. [ 1023.616137][T17965] loop8: detected capacity change from 0 to 8 [ 1023.653678][T17965] Dev loop8: unable to read RDB block 8 [ 1023.695876][T17965] loop8: unable to read partition table [ 1023.718398][T17965] loop8: partition table beyond EOD, truncated [ 1023.745573][T17965] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1023.802399][T17974] loop5: detected capacity change from 0 to 7 [ 1023.888663][T17974] Dev loop5: unable to read RDB block 7 [ 1023.908947][T17974] loop5: unable to read partition table [ 1023.946874][T17974] loop5: partition table beyond EOD, truncated [ 1023.976116][T17974] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1024.098129][T17987] netlink: 'syz.0.5401': attribute type 2 has an invalid length. [ 1024.151730][T17987] netlink: 'syz.0.5401': attribute type 5 has an invalid length. [ 1024.195024][T17987] netlink: 'syz.0.5401': attribute type 2 has an invalid length. [ 1024.226086][T17987] netlink: 'syz.0.5401': attribute type 5 has an invalid length. [ 1024.253113][T30869] IPVS: stop unused estimator thread 0... [ 1024.717564][T26226] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1024.854920][T17496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1024.910966][T26226] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1024.921443][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1024.937214][T26226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.948132][T17496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1024.976831][T26226] usb 5-1: Product: syz [ 1024.984348][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1024.992238][T26226] usb 5-1: Manufacturer: syz [ 1025.000140][T26226] usb 5-1: SerialNumber: syz [ 1025.015688][T18023] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1025.025261][T17496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1025.051099][T18023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.063267][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.083883][T17496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1025.108619][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1025.266862][T23006] Bluetooth: hci4: command tx timeout [ 1025.343303][T26226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1025.425777][T26226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1025.446201][T17496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.480065][T26226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1025.555900][T17496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.565622][T26226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1025.592330][T26226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1025.617280][T26226] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1025.634395][T10713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.643089][T10713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.648201][T26226] usb 5-1: USB disconnect, device number 73 [ 1025.703830][T10713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.712203][T10713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.930981][T17496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.990650][T17496] veth0_vlan: entered promiscuous mode [ 1026.013157][T17496] veth1_vlan: entered promiscuous mode [ 1026.053485][T17496] veth0_macvtap: entered promiscuous mode [ 1026.065085][T17496] veth1_macvtap: entered promiscuous mode [ 1026.115169][T17496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.138864][T17496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.161733][T30874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.171561][T30874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.199446][T30874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.214046][T30874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.410493][T30869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.433804][T30869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.474119][T30869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.490518][T30869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.878862][T18105] loop8: detected capacity change from 0 to 8 [ 1026.901835][T18105] Dev loop8: unable to read RDB block 8 [ 1026.920990][T18105] loop8: unable to read partition table [ 1026.934947][T18105] loop8: partition table beyond EOD, truncated [ 1026.941499][T18105] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1027.054732][T26238] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1027.090070][T18114] loop5: detected capacity change from 0 to 7 [ 1027.115066][T18114] Dev loop5: unable to read RDB block 7 [ 1027.140179][T18114] loop5: unable to read partition table [ 1027.152424][T18114] loop5: partition table beyond EOD, truncated [ 1027.169321][T18114] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1027.260559][T26238] usb 2-1: Using ep0 maxpacket: 16 [ 1027.282792][T26238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.301562][T26238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.314173][T26238] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1027.327741][T26238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.357799][T26238] usb 2-1: config 0 descriptor?? [ 1027.809632][T26238] hid-multitouch 0003:1FD2:6007.0058: reserved main item tag 0xe [ 1027.839504][T26238] hid-multitouch 0003:1FD2:6007.0058: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1028.012804][ T24] usb 2-1: USB disconnect, device number 62 [ 1028.162828][T18156] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 1028.162828][T18156] program syz.5.5416 not setting count and/or reply_len properly [ 1028.199387][T18156] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1028.209259][T18156] batadv1: entered promiscuous mode [ 1028.219124][T18156] team0: Port device batadv1 added [ 1028.415007][T18168] set match dimension is over the limit! [ 1028.473048][T18167] EXT4-fs: Conflicting test_dummy_encryption options [ 1028.698438][T18192] loop8: detected capacity change from 0 to 8 [ 1028.712032][T18192] Dev loop8: unable to read RDB block 8 [ 1028.721166][T18192] loop8: unable to read partition table [ 1028.728228][T18192] loop8: partition table beyond EOD, truncated [ 1028.735267][T18192] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1028.867582][ T24] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1029.040208][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1029.054887][ T24] usb 2-1: config 0 has no interface number 0 [ 1029.068838][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1029.093337][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.124700][ T24] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.18 [ 1029.146323][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.179906][ T24] usb 2-1: config 0 descriptor?? [ 1029.477755][T18222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.489847][T18222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.633724][T18186] Set syz1 is full, maxelem 2 reached [ 1029.710599][T26238] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1029.866295][T18186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.914255][T18186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.983459][ T24] usbhid 2-1:0.1: can't add hid device: -71 [ 1030.018496][ T24] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1030.055652][ T24] usb 2-1: USB disconnect, device number 63 [ 1030.209037][T18258] sctp: [Deprecated]: syz.1.5432 (pid 18258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1030.209037][T18258] Use struct sctp_sack_info instead [ 1030.319352][ T29] audit: type=1326 audit(1780418923.541:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18255 comm="syz.6.5433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7fc00000 [ 1030.320313][ T29] audit: type=1326 audit(1780418923.541:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18255 comm="syz.6.5433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7fc00000 [ 1030.937361][T26240] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1030.977662][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1031.116561][ T24] usb 2-1: device descriptor read/64, error -71 [ 1031.117262][T26240] usb 6-1: Using ep0 maxpacket: 32 [ 1031.156931][T26240] usb 6-1: config index 0 descriptor too short (expected 8192, got 36) [ 1031.184840][T26240] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.198014][T26240] usb 6-1: config 0 has no interfaces? [ 1031.213226][T26240] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1031.224363][T26240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.234262][T26240] usb 6-1: Product: syz [ 1031.240468][T26240] usb 6-1: Manufacturer: syz [ 1031.246052][T26240] usb 6-1: SerialNumber: syz [ 1031.260844][T26240] usb 6-1: config 0 descriptor?? [ 1031.361870][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1031.507890][ T24] usb 2-1: device descriptor read/64, error -71 [ 1031.628977][ T24] usb usb2-port1: attempt power cycle [ 1031.771357][T26240] usb 6-1: USB disconnect, device number 12 [ 1031.987161][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1032.017593][ T24] usb 2-1: device descriptor read/8, error -71 [ 1032.267276][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1032.297360][ T24] usb 2-1: device descriptor read/8, error -71 [ 1032.427790][ T24] usb usb2-port1: unable to enumerate USB device [ 1032.722071][T18335] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5443'. [ 1032.837055][T26240] IPVS: starting estimator thread 0... [ 1032.843645][T18335] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1032.889554][T18340] FAULT_INJECTION: forcing a failure. [ 1032.889554][T18340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.927891][T18340] CPU: 0 UID: 0 PID: 18340 Comm: syz.5.5445 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.927911][T18340] Tainted: [L]=SOFTLOCKUP [ 1032.927914][T18340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1032.927921][T18340] Call Trace: [ 1032.927925][T18340] [ 1032.927930][T18340] dump_stack_lvl+0xe8/0x150 [ 1032.927949][T18340] should_fail_ex+0x412/0x560 [ 1032.927963][T18340] _copy_from_user+0x2d/0xb0 [ 1032.927977][T18340] packet_setsockopt+0x9d1/0x1510 [ 1032.927994][T18340] ? __pfx_packet_setsockopt+0x10/0x10 [ 1032.928011][T18340] ? aa_sk_perm+0x6d5/0x900 [ 1032.928025][T18340] ? fd_install+0x94/0x3d0 [ 1032.928039][T18340] ? __pfx_aa_sk_perm+0x10/0x10 [ 1032.928052][T18340] ? aa_sock_opt_perm+0xff/0x1a0 [ 1032.928067][T18340] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1032.928081][T18340] ? __pfx_packet_setsockopt+0x10/0x10 [ 1032.928100][T18340] do_sock_setsockopt+0x17c/0x1b0 [ 1032.928118][T18340] __x64_sys_setsockopt+0x13d/0x1b0 [ 1032.928132][T18340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.928143][T18340] do_syscall_64+0x174/0x580 [ 1032.928154][T18340] ? trace_irq_disable+0x3b/0x140 [ 1032.928168][T18340] ? clear_bhb_loop+0x40/0x90 [ 1032.928180][T18340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.928189][T18340] RIP: 0033:0x7f7190d9ce59 [ 1032.928199][T18340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.928207][T18340] RSP: 002b:00007f7191c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1032.928218][T18340] RAX: ffffffffffffffda RBX: 00007f7191015fa0 RCX: 00007f7190d9ce59 [ 1032.928225][T18340] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 1032.928231][T18340] RBP: 00007f7191c7e090 R08: 0000000000000010 R09: 0000000000000000 [ 1032.928237][T18340] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1032.928243][T18340] R13: 00007f7191016038 R14: 00007f7191015fa0 R15: 00007f719113fa48 [ 1032.928258][T18340] [ 1033.269923][T18337] IPVS: using max 31 ests per chain, 74400 per kthread [ 1033.337201][T18343] veth0_vlan: entered allmulticast mode [ 1033.497016][T18343] ALSA: mixer_oss: invalid OSS volume 'yl,Tj~2~G[' [ 1033.519982][T18343] veth0_vlan: left allmulticast mode [ 1033.754563][T18357] loop9: detected capacity change from 0 to 524287999 [ 1033.898682][T18369] loop8: detected capacity change from 0 to 8 [ 1033.907736][T18369] Dev loop8: unable to read RDB block 8 [ 1033.918364][T18369] loop8: unable to read partition table [ 1033.996778][T18369] loop8: partition table beyond EOD, truncated [ 1034.026739][T18369] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1034.229390][ T5652] buffer_io_error: 325 callbacks suppressed [ 1034.229404][ T5652] Buffer I/O error on dev loop9, logical block 65535999, async page read [ 1034.566559][T26221] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1034.659499][T18400] loop5: detected capacity change from 0 to 7 [ 1034.677653][T18400] Dev loop5: unable to read RDB block 7 [ 1034.683252][T18400] loop5: unable to read partition table [ 1034.689058][T18400] loop5: partition table beyond EOD, truncated [ 1034.689611][T18403] netlink: 'syz.4.5456': attribute type 3 has an invalid length. [ 1034.695215][T18400] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1034.748143][T26221] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.761605][T18403] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5456'. [ 1034.773195][T26221] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1034.807948][T26221] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1034.858236][T26221] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1034.888016][T26221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1034.898338][T26221] usb 2-1: SerialNumber: syz [ 1034.944693][T18417] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5460'. [ 1034.966532][T18414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5460'. [ 1035.087224][T18414] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20000 [ 1035.117897][T18417] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20000 [ 1035.128895][T18423] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5458'. [ 1035.329425][T18431] erspan0: entered allmulticast mode [ 1035.404444][T18433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.429742][T18436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.462657][T18436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.663360][T26221] usb 2-1: USB disconnect, device number 68 [ 1036.096536][T26221] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1036.303917][T26221] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.329039][T26221] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1036.345950][T26221] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1036.384662][T26221] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1036.442711][T26221] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1036.460951][T26221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1036.472996][T26221] usb 2-1: SerialNumber: syz [ 1036.524208][T18477] netlink: 'syz.5.5468': attribute type 15 has an invalid length. [ 1036.548699][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5468'. [ 1036.647491][T18477] netlink: 'syz.5.5468': attribute type 15 has an invalid length. [ 1036.648343][ T73] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1036.655317][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5468'. [ 1036.673961][T18479] input: syz0 as /devices/virtual/input/input142 [ 1036.745103][T18460] netlink: 408 bytes leftover after parsing attributes in process `syz.1.5465'. [ 1036.759357][ T73] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1036.798262][ T73] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1036.861468][T18460] vxcan3: entered promiscuous mode [ 1036.866640][T18460] vxcan3: entered allmulticast mode [ 1036.874352][ T73] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1036.998570][T26221] usb 2-1: 0:2 : does not exist [ 1037.020156][T26221] usb 2-1: unit 5 not found! [ 1037.105796][T18511] FAULT_INJECTION: forcing a failure. [ 1037.105796][T18511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.133627][T18511] CPU: 0 UID: 0 PID: 18511 Comm: syz.4.5475 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.133650][T18511] Tainted: [L]=SOFTLOCKUP [ 1037.133654][T18511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1037.133660][T18511] Call Trace: [ 1037.133664][T18511] [ 1037.133669][T18511] dump_stack_lvl+0xe8/0x150 [ 1037.133685][T18511] should_fail_ex+0x412/0x560 [ 1037.133699][T18511] _copy_from_user+0x2d/0xb0 [ 1037.133711][T18511] ___sys_sendmsg+0x1c6/0x360 [ 1037.133721][T18511] ? __lock_acquire+0x6b5/0x2cf0 [ 1037.133735][T18511] ? __pfx____sys_sendmsg+0x10/0x10 [ 1037.133760][T18511] ? __fget_files+0x2a/0x420 [ 1037.133773][T18511] ? __fget_files+0x3a0/0x420 [ 1037.133788][T18511] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1037.133798][T18511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1037.133811][T18511] ? __pfx_ksys_write+0x10/0x10 [ 1037.133828][T18511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.133838][T18511] do_syscall_64+0x174/0x580 [ 1037.133848][T18511] ? trace_irq_disable+0x3b/0x140 [ 1037.133862][T18511] ? clear_bhb_loop+0x40/0x90 [ 1037.133873][T18511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.133882][T18511] RIP: 0033:0x7f383739ce59 [ 1037.133891][T18511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.133899][T18511] RSP: 002b:00007f38381e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.133910][T18511] RAX: ffffffffffffffda RBX: 00007f3837615fa0 RCX: 00007f383739ce59 [ 1037.133917][T18511] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000003 [ 1037.133923][T18511] RBP: 00007f38381e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.133928][T18511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.133934][T18511] R13: 00007f3837616038 R14: 00007f3837615fa0 R15: 00007f383773fa48 [ 1037.133948][T18511] [ 1037.517614][T26221] usb 2-1: USB disconnect, device number 69 [ 1037.786195][T18539] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1037.792712][T18539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1037.808770][T18539] vhci_hcd vhci_hcd.0: Device attached [ 1037.825164][T26238] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1037.871662][T18539] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 1037.878169][T18539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1037.894462][T18539] vhci_hcd vhci_hcd.0: Device attached [ 1037.917250][T18539] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 1037.923763][T18539] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1037.934071][T18539] vhci_hcd vhci_hcd.0: Device attached [ 1037.959724][T18539] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 1037.966337][T18539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1037.977298][T18539] vhci_hcd vhci_hcd.0: Device attached [ 1038.023491][T18539] IPVS: length: 125 != 24 [ 1038.046827][T26221] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 1038.104519][T18544] vhci_hcd: connection closed [ 1038.104829][T30869] vhci_hcd vhci_hcd.0: stop threads [ 1038.116006][T18540] vhci_hcd: connection reset by peer [ 1038.145250][T18547] vhci_hcd: connection closed [ 1038.146377][T18542] vhci_hcd: connection closed [ 1038.163515][T30869] vhci_hcd vhci_hcd.0: release socket [ 1038.222315][T30869] vhci_hcd vhci_hcd.0: disconnect device [ 1038.319766][T30869] vhci_hcd vhci_hcd.0: stop threads [ 1038.325027][T30869] vhci_hcd vhci_hcd.0: release socket [ 1038.340872][T30869] vhci_hcd vhci_hcd.0: disconnect device [ 1038.352141][T30869] vhci_hcd vhci_hcd.0: stop threads [ 1038.376653][T30869] vhci_hcd vhci_hcd.0: release socket [ 1038.395481][T30869] vhci_hcd vhci_hcd.0: disconnect device [ 1038.401759][T30869] vhci_hcd vhci_hcd.0: stop threads [ 1038.408973][T30869] vhci_hcd vhci_hcd.0: release socket [ 1038.429232][T30869] vhci_hcd vhci_hcd.0: disconnect device [ 1039.023945][T18571] FAULT_INJECTION: forcing a failure. [ 1039.023945][T18571] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.036671][T18571] CPU: 0 UID: 0 PID: 18571 Comm: syz.4.5486 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.036694][T18571] Tainted: [L]=SOFTLOCKUP [ 1039.036700][T18571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.036709][T18571] Call Trace: [ 1039.036717][T18571] [ 1039.036724][T18571] dump_stack_lvl+0xe8/0x150 [ 1039.036747][T18571] should_fail_ex+0x412/0x560 [ 1039.036769][T18571] should_failslab+0xa8/0x100 [ 1039.036788][T18571] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1039.036808][T18571] ? __alloc_skb+0x186/0x7d0 [ 1039.036828][T18571] ? __alloc_skb+0x1d0/0x7d0 [ 1039.036846][T18571] ? __local_bh_enable_ip+0xd0/0x130 [ 1039.036866][T18571] __alloc_skb+0x1d0/0x7d0 [ 1039.036890][T18571] netlink_sendmsg+0x5d4/0xb40 [ 1039.036919][T18571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.036940][T18571] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1039.036963][T18571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1039.036986][T18571] ____sys_sendmsg+0x972/0x9f0 [ 1039.037001][T18571] ? __might_fault+0xaf/0x130 [ 1039.037024][T18571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.037047][T18571] ? import_iovec+0x73/0xa0 [ 1039.037067][T18571] ___sys_sendmsg+0x2a5/0x360 [ 1039.037080][T18571] ? __lock_acquire+0x6b5/0x2cf0 [ 1039.037101][T18571] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.037143][T18571] ? __fget_files+0x2a/0x420 [ 1039.037160][T18571] ? __fget_files+0x3a0/0x420 [ 1039.037184][T18571] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1039.037203][T18571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.037226][T18571] ? __pfx_ksys_write+0x10/0x10 [ 1039.037252][T18571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.037270][T18571] do_syscall_64+0x174/0x580 [ 1039.037286][T18571] ? trace_irq_disable+0x3b/0x140 [ 1039.037307][T18571] ? clear_bhb_loop+0x40/0x90 [ 1039.037326][T18571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.037341][T18571] RIP: 0033:0x7f383739ce59 [ 1039.037357][T18571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.037370][T18571] RSP: 002b:00007f38381e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.037387][T18571] RAX: ffffffffffffffda RBX: 00007f3837615fa0 RCX: 00007f383739ce59 [ 1039.037398][T18571] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000003 [ 1039.037408][T18571] RBP: 00007f38381e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.037417][T18571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.037426][T18571] R13: 00007f3837616038 R14: 00007f3837615fa0 R15: 00007f383773fa48 [ 1039.037452][T18571] [ 1040.199686][T18617] IPVS: set_ctl: invalid protocol: 255 172.20.20.60:20001 [ 1040.306547][ T24] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1040.383664][T26238] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1040.392733][T26238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.400731][T26238] usb 6-1: Product: syz [ 1040.404891][T26238] usb 6-1: Manufacturer: syz [ 1040.409481][T26238] usb 6-1: SerialNumber: syz [ 1040.456527][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 1040.586539][ T24] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1040.618437][T26240] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1040.626960][T26238] usb 6-1: can't set config #1, error -71 [ 1040.638715][T26238] usb 6-1: USB disconnect, device number 13 [ 1040.786580][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 1040.798195][ T24] usb usb2-port1: attempt power cycle [ 1041.156512][ T24] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 1041.204678][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 1041.346510][ T24] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 1041.376951][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 1041.383752][ T24] usb usb2-port1: unable to enumerate USB device [ 1041.592394][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5504'. [ 1041.936851][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1041.980499][T26240] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1041.991966][T26240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1042.008140][T26240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1042.102729][ T24] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1042.117821][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1042.135679][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1042.151002][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.165094][ T24] usb 6-1: Product: syz [ 1042.172587][ T24] usb 6-1: Manufacturer: syz [ 1042.180790][ T24] usb 6-1: SerialNumber: syz [ 1042.210702][ T24] usb 6-1: config 0 descriptor?? [ 1042.224091][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1042.881242][T26240] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1042.890304][T26240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.898295][T26240] usb 5-1: Product: syz [ 1042.902456][T26240] usb 5-1: Manufacturer: syz [ 1042.907043][T26240] usb 5-1: SerialNumber: syz [ 1042.914261][T26240] usb 5-1: config 0 descriptor?? [ 1042.993290][T18617] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1043.224316][T26240] rc_core: IR keymap rc-streamzap not found [ 1043.230248][T26240] Registered IR keymap rc-empty [ 1043.236522][T26240] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1043.249939][T26240] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input143 [ 1043.276779][T26221] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1043.291011][T26240] usb 5-1: USB disconnect, device number 75 [ 1043.310171][ T24] gspca_sunplus: reg_r err -71 [ 1043.322743][ T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1043.344507][ T24] usb 6-1: USB disconnect, device number 14 [ 1043.429232][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5510'. [ 1043.760572][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5516'. [ 1043.816564][T26238] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1043.977042][T26238] usb 2-1: Using ep0 maxpacket: 32 [ 1043.993366][T26238] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1044.001915][T26238] usb 2-1: config 0 has no interface number 0 [ 1044.014100][T26238] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1044.030874][T26238] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1044.041261][T26238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.050973][T26238] usb 2-1: Product: syz [ 1044.055375][T26238] usb 2-1: Manufacturer: syz [ 1044.057073][ T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1044.061339][T26238] usb 2-1: SerialNumber: syz [ 1044.092963][T26238] usb 2-1: config 0 descriptor?? [ 1044.227026][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1044.238359][T26226] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1044.247126][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1044.257271][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.267450][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1044.279263][ T24] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1044.288689][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.297206][ T24] usb 5-1: Product: syz [ 1044.301395][ T24] usb 5-1: Manufacturer: syz [ 1044.305992][ T24] usb 5-1: SerialNumber: syz [ 1044.319386][ T24] usb 5-1: config 0 descriptor?? [ 1044.408133][T26226] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.419079][T26226] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1044.433487][T26226] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.442673][T26226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1044.450887][T26226] usb 6-1: SerialNumber: syz [ 1044.463675][T26226] cdc_ether 6-1:1.0: GUID doesn't match [ 1044.654071][ T29] audit: type=1326 audit(1780418937.871:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1044.690396][ T29] audit: type=1326 audit(1780418937.871:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1044.720424][ T29] audit: type=1326 audit(1780418937.911:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1044.746810][ T29] audit: type=1326 audit(1780418937.911:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1044.776617][T18767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.785366][T18767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.798533][ T29] audit: type=1326 audit(1780418937.911:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1044.843342][T26241] usb 6-1: USB disconnect, device number 15 [ 1044.890363][ T29] audit: type=1326 audit(1780418937.941:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1044.920674][ T29] audit: type=1326 audit(1780418937.941:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1044.977738][ T29] audit: type=1326 audit(1780418937.941:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1044.981608][T18766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.003125][ T29] audit: type=1326 audit(1780418937.971:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1045.037427][ T29] audit: type=1326 audit(1780418937.971:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.6.5520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd793f9ce59 code=0x7ffc0000 [ 1045.071235][T18766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.354039][T26238] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 68 failed: -71 [ 1045.365354][T26238] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1045.377183][T26238] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1045.386363][T26238] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1045.433527][T26238] usb 2-1: USB disconnect, device number 74 [ 1045.991542][T18863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1046.003159][T18864] netlink: 'syz.5.5530': attribute type 4 has an invalid length. [ 1046.015474][T18864] netlink: 'syz.5.5530': attribute type 4 has an invalid length. [ 1046.377519][T18887] kvm: requested 97219 ns i8254 timer period limited to 200000 ns [ 1046.387402][T18887] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 1046.396702][T18887] kvm: requested 46095 ns i8254 timer period limited to 200000 ns [ 1046.408328][T18887] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 1046.420454][T18887] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 1046.506547][T26226] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1046.668351][T26226] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1046.678174][T26226] usb 2-1: not running at top speed; connect to a high speed hub [ 1046.689330][T26226] usb 2-1: config 2 has an invalid interface number: 222 but max is 0 [ 1046.697912][T26226] usb 2-1: config 2 has no interface number 0 [ 1046.704160][T26226] usb 2-1: config 2 interface 222 has no altsetting 0 [ 1046.719818][T26226] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 1046.729250][T26226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.737607][T26226] usb 2-1: Product: syz [ 1046.741923][T26226] usb 2-1: Manufacturer: syz [ 1046.747748][T26226] usb 2-1: SerialNumber: syz [ 1046.784748][ T24] usb 5-1: USB disconnect, device number 76 [ 1047.071522][T26226] usb-storage 2-1:2.222: USB Mass Storage device detected [ 1047.106136][T26226] usb-storage 2-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 1047.116858][T26226] usb-storage 2-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 1047.116858][T26226] Please send a copy of this message to and [ 1047.180871][T26226] usb 2-1: USB disconnect, device number 75 [ 1047.216910][T26225] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1047.381084][T26225] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1047.401049][T26225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.416374][T26225] usb 6-1: Product: syz [ 1047.426522][T26225] usb 6-1: Manufacturer: syz [ 1047.432700][T26225] usb 6-1: SerialNumber: syz [ 1047.651680][T26225] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1047.676534][T26225] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1047.695772][T26225] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1047.720411][T26225] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1047.739626][T26225] usb 6-1: USB disconnect, device number 16 [ 1048.051406][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5548'. [ 1048.133292][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1048.166651][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1048.185481][T18978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1048.257899][T18982] loop5: detected capacity change from 0 to 7 [ 1048.283301][T18982] Dev loop5: unable to read RDB block 7 [ 1048.292452][T18982] loop5: unable to read partition table [ 1048.303093][T18982] loop5: partition table beyond EOD, truncated [ 1048.323165][T18982] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1048.335169][T18987] netlink: 'syz.0.5551': attribute type 10 has an invalid length. [ 1048.348196][T18988] fuse: Bad value for 'group_id' [ 1048.356406][T18988] fuse: Bad value for 'group_id' [ 1048.364265][T18987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.370551][T18989] sctp: [Deprecated]: syz.5.5550 (pid 18989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1048.370551][T18989] Use struct sctp_sack_info instead [ 1048.380735][T18987] bond0: (slave team0): Enslaving as an active interface with an up link [ 1048.577466][T18998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1048.587491][T19000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1048.846621][T26226] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1048.916560][T26241] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1048.998234][T26226] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 1049.009440][T26226] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1049.019214][T26226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.029484][T26226] usb 2-1: Product: syz [ 1049.033767][T26226] usb 2-1: Manufacturer: syz [ 1049.038755][T26226] usb 2-1: SerialNumber: syz [ 1049.062501][T26226] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1049.078824][T26225] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1049.086788][T26241] usb 5-1: Using ep0 maxpacket: 16 [ 1049.104080][T26241] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1049.132966][T26241] usb 5-1: config 0 has no interface number 0 [ 1049.155391][T26241] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.190313][T26241] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.220584][T26241] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1049.240585][T26241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.283589][T26241] usb 5-1: config 0 descriptor?? [ 1049.302339][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.343434][T19000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.387663][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.416747][T19000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.432190][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.460943][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.489311][T19000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.513709][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.528552][T19000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.540675][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.563418][ T24] usb 2-1: USB disconnect, device number 76 [ 1049.677654][T26226] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1049.841375][T26226] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1049.861516][T26226] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1049.886503][T26226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.896044][T26226] usb 6-1: Product: syz [ 1049.906625][T26226] usb 6-1: Manufacturer: syz [ 1049.914397][T26226] usb 6-1: SerialNumber: syz [ 1049.921496][T26241] uclogic 0003:28BD:0071.0059: pen parameters not found [ 1049.933339][T26241] uclogic 0003:28BD:0071.0059: interface is invalid, ignoring [ 1049.941491][T26226] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1050.132775][T26221] usb 5-1: USB disconnect, device number 77 [ 1050.152663][T26225] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1050.174853][T26225] ath9k_htc: Failed to initialize the device [ 1050.192009][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 1050.226687][T26226] usb 6-1: USB disconnect, device number 17 [ 1050.696156][T19110] syzkaller1: entered promiscuous mode [ 1050.706338][T19110] syzkaller1: entered allmulticast mode [ 1050.726663][ T24] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1050.909720][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1050.924522][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1050.936050][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1050.946558][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1050.957547][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.965608][ T24] usb 2-1: Product: syz [ 1050.970626][ T24] usb 2-1: Manufacturer: syz [ 1050.975294][ T24] usb 2-1: SerialNumber: syz [ 1050.982870][ T24] usb 2-1: config 0 descriptor?? [ 1051.203228][T19104] program syz.1.5561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1051.433166][T19104] loop5: detected capacity change from 0 to 7 [ 1051.441118][T19104] Dev loop5: unable to read RDB block 7 [ 1051.446904][T19104] loop5: unable to read partition table [ 1051.452812][T19104] loop5: partition table beyond EOD, truncated [ 1051.459192][T19104] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1051.730043][T19155] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1051.805176][ T5003] Dev loop5: unable to read RDB block 7 [ 1051.814709][ T5003] loop5: unable to read partition table [ 1051.824901][ T5003] loop5: partition table beyond EOD, truncated [ 1051.887091][T19164] netlink: 'syz.4.5574': attribute type 1 has an invalid length. [ 1051.927786][T19164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.943049][T19164] gretap2: entered promiscuous mode [ 1051.955444][T19164] bond0: (slave gretap2): making interface the new active one [ 1051.964309][T19164] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 1051.983317][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5574'. [ 1052.000004][T19164] batman_adv: batadv0: Adding interface: ipvlan2 [ 1052.006484][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.017083][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.027009][T19164] batman_adv: batadv0: Interface activated: ipvlan2 [ 1052.063386][T19208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5575'. [ 1052.137090][T26241] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1052.211370][T19215] netlink: 'syz.0.5577': attribute type 1 has an invalid length. [ 1052.253715][T19215] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1052.264478][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5577'. [ 1052.277737][T19215] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1052.290817][T26241] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.304914][T19215] bond1 (unregistering): Released all slaves [ 1052.312693][T26241] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1052.329558][T26241] usb 6-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.40 [ 1052.346597][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1052.348392][T26241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.369113][T26241] usb 6-1: Product: 橕棢쌗ⷷ강睭뷼榵厴⅋贚䬑䎩ꧦႏ襊켩蹱潪嫉뺭ⴠ븃쀱福螻㐟⌁裩봙釲癥쿒糇隂賋闟攟䄹ឍ룔荚鷺ꚶ漨竤裊ᓑΏ摩 [ 1052.388449][T26241] usb 6-1: Manufacturer: ї [ 1052.392974][T26241] usb 6-1: SerialNumber: ݃䦭娋涚똼煻颇븈쾖흜࣯뭪웍鮅嘟葖ﱥ逇탴잾茀䋂溵虂ꢃ鋻蟹瘢㕅笡䛡鰡ﭓ蓬ߐ頧뒊쵭ᴽ뼢儶疜㭧盧೵ꕯ敊Ꮥ죊庐幛⁷썂 [ 1052.509380][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.521187][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.532102][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1052.542518][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.556140][ T24] usb 5-1: config 0 descriptor?? [ 1052.560902][T19287] FAULT_INJECTION: forcing a failure. [ 1052.560902][T19287] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.574557][T19287] CPU: 0 UID: 0 PID: 19287 Comm: syz.0.5579 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.574581][T19287] Tainted: [L]=SOFTLOCKUP [ 1052.574587][T19287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1052.574597][T19287] Call Trace: [ 1052.574606][T19287] [ 1052.574622][T19287] dump_stack_lvl+0xe8/0x150 [ 1052.574648][T19287] should_fail_ex+0x412/0x560 [ 1052.574671][T19287] should_failslab+0xa8/0x100 [ 1052.574691][T19287] __kmalloc_noprof+0xe8/0x760 [ 1052.574713][T19287] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1052.574735][T19287] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1052.574753][T19287] ? tomoyo_domain+0xd7/0x130 [ 1052.574775][T19287] ? tomoyo_path_number_perm+0x219/0x630 [ 1052.574797][T19287] tomoyo_path_number_perm+0x246/0x630 [ 1052.574820][T19287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1052.574839][T19287] ? __lock_acquire+0x6b5/0x2cf0 [ 1052.574872][T19287] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1052.574909][T19287] ? __fget_files+0x2a/0x420 [ 1052.574931][T19287] ? __fget_files+0x2a/0x420 [ 1052.574948][T19287] ? __fget_files+0x3a0/0x420 [ 1052.574966][T19287] ? __fget_files+0x2a/0x420 [ 1052.574989][T19287] security_file_ioctl+0xc3/0x2a0 [ 1052.575012][T19287] __se_sys_ioctl+0x47/0x170 [ 1052.575033][T19287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.575052][T19287] do_syscall_64+0x174/0x580 [ 1052.575067][T19287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.575083][T19287] ? clear_bhb_loop+0x40/0x90 [ 1052.575102][T19287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.575116][T19287] RIP: 0033:0x7fbc6239ce59 [ 1052.575133][T19287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.575145][T19287] RSP: 002b:00007fbc632e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.575162][T19287] RAX: ffffffffffffffda RBX: 00007fbc62615fa0 RCX: 00007fbc6239ce59 [ 1052.575173][T19287] RDX: 0000200000000440 RSI: 0000000000008955 RDI: 0000000000000008 [ 1052.575184][T19287] RBP: 00007fbc632e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.575195][T19287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.575205][T19287] R13: 00007fbc62616038 R14: 00007fbc62615fa0 R15: 00007fbc6273fa48 [ 1052.575231][T19287] [ 1052.575259][T19287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1052.624974][T19165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.822729][T19165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.883304][T19296] FAULT_INJECTION: forcing a failure. [ 1052.883304][T19296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.896848][T19296] CPU: 1 UID: 0 PID: 19296 Comm: syz.6.5580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.896873][T19296] Tainted: [L]=SOFTLOCKUP [ 1052.896879][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1052.896888][T19296] Call Trace: [ 1052.896899][T19296] [ 1052.896906][T19296] dump_stack_lvl+0xe8/0x150 [ 1052.896931][T19296] should_fail_ex+0x412/0x560 [ 1052.896954][T19296] _copy_from_user+0x2d/0xb0 [ 1052.896975][T19296] kstrtouint_from_user+0xd6/0x180 [ 1052.896994][T19296] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1052.897025][T19296] proc_fail_nth_write+0x8e/0x210 [ 1052.897046][T19296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1052.897070][T19296] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1052.897100][T19296] vfs_write+0x29a/0xb90 [ 1052.897129][T19296] ? __pfx_vfs_write+0x10/0x10 [ 1052.897152][T19296] ? __fget_files+0x2a/0x420 [ 1052.897174][T19296] ? __fget_files+0x3a0/0x420 [ 1052.897191][T19296] ? __fget_files+0x2a/0x420 [ 1052.897216][T19296] ksys_write+0x150/0x270 [ 1052.897239][T19296] ? __pfx_ksys_write+0x10/0x10 [ 1052.897257][T19296] ? handle_softirqs+0x715/0x840 [ 1052.897281][T19296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.897298][T19296] do_syscall_64+0x174/0x580 [ 1052.897317][T19296] ? clear_bhb_loop+0x40/0x90 [ 1052.897336][T19296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.897351][T19296] RIP: 0033:0x7fd793f5d68e [ 1052.897367][T19296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1052.897380][T19296] RSP: 002b:00007fd794e91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1052.897397][T19296] RAX: ffffffffffffffda RBX: 00007fd794e926c0 RCX: 00007fd793f5d68e [ 1052.897408][T19296] RDX: 0000000000000001 RSI: 00007fd794e920a0 RDI: 0000000000000004 [ 1052.897418][T19296] RBP: 00007fd794e92090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.897427][T19296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.897437][T19296] R13: 00007fd794216038 R14: 00007fd794215fa0 R15: 00007fd79433fa48 [ 1052.897463][T19296] [ 1053.134230][ T24] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1053.141313][ T24] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1053.148350][ T24] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1053.155339][ T24] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1053.162328][ T24] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1053.169313][ T24] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1053.176269][ T24] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1053.197511][ T24] cp2112 0003:10C4:EA90.005A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1053.332665][ T24] cp2112 0003:10C4:EA90.005A: Part Number: 0x00 Device Version: 0x00 [ 1053.403639][T26239] usb 2-1: USB disconnect, device number 77 [ 1053.534919][ T24] cp2112 0003:10C4:EA90.005A: error requesting SMBus config [ 1053.551833][T26241] usbhid 6-1:1.0: can't add hid device: -71 [ 1053.573305][ T24] cp2112 0003:10C4:EA90.005A: probe with driver cp2112 failed with error -5 [ 1053.576813][T26241] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1053.623006][T26241] usb 6-1: USB disconnect, device number 18 [ 1053.741723][T26239] usb 5-1: USB disconnect, device number 78 [ 1054.028065][T26241] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1054.200414][T26241] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1054.216140][T26241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.225137][T26241] usb 6-1: Product: syz [ 1054.226427][T19346] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5585'. [ 1054.238708][T26241] usb 6-1: Manufacturer: syz [ 1054.243471][T26241] usb 6-1: SerialNumber: syz [ 1054.251097][T26241] usb 6-1: config 0 descriptor?? [ 1054.316553][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.322959][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.362448][T19354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.380191][T19354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.484400][T26241] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1054.657151][T25317] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1054.688173][T19333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.703984][T19333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.796538][T26239] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1054.826578][T25317] usb 2-1: Using ep0 maxpacket: 32 [ 1054.834882][T25317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.846100][T25317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.856205][T25317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 1054.869984][T25317] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1054.885496][T25317] usb 2-1: New USB device found, idVendor=05ac, idProduct=0280, bcdDevice= 0.00 [ 1054.900924][T25317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.928763][T25317] usb 2-1: config 0 descriptor?? [ 1054.960322][T26239] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1054.974361][T26239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1054.989000][T26239] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1055.003323][T26239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.022367][T26239] usb 5-1: Product: syz [ 1055.029916][T26239] usb 5-1: Manufacturer: syz [ 1055.038385][T26239] usb 5-1: SerialNumber: syz [ 1055.050501][T26239] usb 5-1: config 0 descriptor?? [ 1055.137905][T26241] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1055.150088][T25317] usb 2-1: string descriptor 0 read error: -71 [ 1055.171277][T25317] usbhid 2-1:0.0: can't add hid device: -22 [ 1055.178913][T25317] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1055.209073][T25317] usb 2-1: USB disconnect, device number 78 [ 1055.479695][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1055.479710][ T29] audit: type=1326 audit(1780418948.701:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.526379][ T29] audit: type=1326 audit(1780418948.701:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.531824][T19376] dvmrp0: entered allmulticast mode [ 1055.551306][ T29] audit: type=1326 audit(1780418948.741:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.570557][ T24] usb 5-1: USB disconnect, device number 79 [ 1055.581351][ T29] audit: type=1326 audit(1780418948.741:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.620063][ T29] audit: type=1326 audit(1780418948.741:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.648701][ T29] audit: type=1326 audit(1780418948.741:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.674175][ T29] audit: type=1326 audit(1780418948.741:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.699329][ T29] audit: type=1326 audit(1780418948.741:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f383735d68e code=0x7ffc0000 [ 1055.735557][ T29] audit: type=1326 audit(1780418948.741:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.766316][ T29] audit: type=1326 audit(1780418948.741:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19375 comm="syz.4.5591" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f383739ce59 code=0x7ffc0000 [ 1055.996556][T26225] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1056.126569][T26225] usb 2-1: device descriptor read/64, error -71 [ 1056.175160][T19434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5596'. [ 1056.376521][T26225] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1056.476326][T19461] qrtr: Invalid version 0 [ 1056.506557][T26225] usb 2-1: device descriptor read/64, error -71 [ 1056.546607][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1056.617520][T26225] usb usb2-port1: attempt power cycle [ 1056.706682][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1056.713401][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1056.726142][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1056.745930][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.766658][ T24] usb 5-1: Product: syz [ 1056.771132][ T24] usb 5-1: Manufacturer: syz [ 1056.775752][ T24] usb 5-1: SerialNumber: syz [ 1056.784672][ T24] usb 5-1: config 0 descriptor?? [ 1056.798840][T26241] usb 6-1: USB disconnect, device number 19 [ 1056.801735][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1056.827099][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1056.956645][T26225] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1056.978075][T26225] usb 2-1: device descriptor read/8, error -71 [ 1057.186646][T26241] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1057.226549][T26225] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1057.257397][T26225] usb 2-1: device descriptor read/8, error -71 [ 1057.337731][T26241] usb 6-1: not running at top speed; connect to a high speed hub [ 1057.353338][T26241] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1057.372468][T26241] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1057.393873][T26225] usb usb2-port1: unable to enumerate USB device [ 1057.402957][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1057.411192][T26241] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1057.429494][T26241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.441951][T26241] usb 6-1: Product: ࠐ [ 1057.451024][T26241] usb 6-1: Manufacturer: ﳿ [ 1057.457838][T26241] usb 6-1: SerialNumber: 䦗瘁ᢡ갏刾홭ಊ쥡᳀泼캞끈䴯㖎ꔕ蔘练펐篂埁㼐驵☗膍䃆㋈딅ބෳ谜⊡㝊᧭뚳ዙக㏬茐圓瓡☫迎໔蒷剬쑸旰忄쒷즎ᕾ胟 [ 1057.496363][T19489] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1057.731758][T26241] cdc_ncm 6-1:1.0: bind() failure [ 1057.768025][T26241] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1057.782655][T26241] cdc_ncm 6-1:1.1: bind() failure [ 1057.810380][T26241] usb 6-1: USB disconnect, device number 20 [ 1057.875538][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1057.898366][ T24] em28xx 5-1:0.0: board has no eeprom [ 1058.146862][T26241] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1058.246537][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1058.254756][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 1058.260598][T26225] em28xx 5-1:0.0: Binding DVB extension [ 1058.300578][T26241] usb 6-1: device descriptor read/64, error -71 [ 1058.556969][T26241] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1058.697056][T26241] usb 6-1: device descriptor read/64, error -71 [ 1058.791441][T19524] loop5: detected capacity change from 0 to 7 [ 1058.817222][T26241] usb usb6-port1: attempt power cycle [ 1058.827523][T19524] Dev loop5: unable to read RDB block 7 [ 1058.846957][T19524] loop5: unable to read partition table [ 1058.866867][T19524] loop5: partition table beyond EOD, truncated [ 1058.876749][T19524] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1059.036101][T19540] qrtr: Invalid version 0 [ 1059.178204][T26241] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1059.197319][ T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1059.208632][T19446] em28xx 5-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1059.219612][T26241] usb 6-1: device descriptor read/8, error -71 [ 1059.229477][T26226] usb 5-1: USB disconnect, device number 80 [ 1059.256919][T26226] em28xx 5-1:0.0: Disconnecting em28xx [ 1059.293122][T26225] em28xx 5-1:0.0: Registering input extension [ 1059.313910][T26226] em28xx 5-1:0.0: Closing input extension [ 1059.374549][T26226] em28xx 5-1:0.0: Freeing device [ 1059.388698][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1059.395576][T19559] loop5: detected capacity change from 0 to 7 [ 1059.400538][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1059.414387][T19559] Dev loop5: unable to read RDB block 7 [ 1059.423925][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.426719][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1059.435422][ T24] usb 2-1: Product: syz [ 1059.445538][ T24] usb 2-1: Manufacturer: syz [ 1059.451032][T19559] loop5: unable to read partition table [ 1059.453017][ T24] usb 2-1: SerialNumber: syz [ 1059.468797][T19559] loop5: partition table beyond EOD, truncated [ 1059.468990][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1059.476687][T26241] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1059.484040][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 1059.497087][T19559] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1059.527414][T26241] usb 6-1: device descriptor read/8, error -71 [ 1059.657264][T26241] usb usb6-port1: unable to enumerate USB device [ 1059.711704][T19570] could not allocate digest TFM handle digest_null-generic [ 1059.723470][ T24] r8152-cfgselector 2-1: Needed 1 retries to read version [ 1059.743751][ T24] r8152-cfgselector 2-1: Unknown version 0x7070 [ 1059.776147][ T24] r8152-cfgselector 2-1: No union descriptors [ 1059.886141][ T24] r8152-cfgselector 2-1: USB disconnect, device number 83 [ 1060.033258][T19597] loop5: detected capacity change from 0 to 7 [ 1060.081737][T19597] Dev loop5: unable to read RDB block 7 [ 1060.096619][T19597] loop5: unable to read partition table [ 1060.112115][T19597] loop5: partition table beyond EOD, truncated [ 1060.123777][T19597] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1060.216906][T26239] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1060.276887][T19611] qrtr: Invalid version 0 [ 1060.356544][T26226] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1060.390285][T26239] usb 5-1: config 0 has no interfaces? [ 1060.405269][T26239] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1060.418324][T26239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.426955][T26239] usb 5-1: Product: syz [ 1060.432319][T26239] usb 5-1: Manufacturer: syz [ 1060.437867][T26239] usb 5-1: SerialNumber: syz [ 1060.450822][T26239] usb 5-1: config 0 descriptor?? [ 1060.506580][T26226] usb 6-1: device descriptor read/64, error -71 [ 1060.756550][T26226] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1060.766612][ T24] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1060.875969][T19630] fuse: Bad value for 'fd' [ 1060.916688][T26226] usb 6-1: device descriptor read/64, error -71 [ 1060.938612][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 1060.957368][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1060.983994][ T24] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1061.007335][ T24] usb 2-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 1061.035279][ T24] usb 2-1: Product: syz [ 1061.040536][T26226] usb usb6-port1: attempt power cycle [ 1061.052625][ T24] usb 2-1: Manufacturer: syz [ 1061.067392][ T24] usb 2-1: SerialNumber: syz [ 1061.088073][ T24] usb 2-1: config 0 descriptor?? [ 1061.103205][T19621] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1061.207836][T19644] input: syz1 as /devices/virtual/input/input146 [ 1061.320764][T25317] usb 2-1: USB disconnect, device number 84 [ 1061.396595][T26226] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1061.416983][T26226] usb 6-1: device descriptor read/8, error -71 [ 1061.656584][T26226] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1061.678171][T26226] usb 6-1: device descriptor read/8, error -71 [ 1061.797118][T26226] usb usb6-port1: unable to enumerate USB device [ 1061.857674][T19663] loop5: detected capacity change from 0 to 7 [ 1061.868269][T19663] Dev loop5: unable to read RDB block 7 [ 1061.882198][T19663] loop5: unable to read partition table [ 1061.890867][T19663] loop5: partition table beyond EOD, truncated [ 1061.900366][T19663] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1062.046145][T25317] IPVS: starting estimator thread 0... [ 1062.115162][T19681] fuse: Bad value for 'fd' [ 1062.146535][T19677] IPVS: using max 32 ests per chain, 76800 per kthread [ 1062.536617][T25317] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1062.688547][T25317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.698977][T25317] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1062.710934][T25317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1062.720935][T25317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1062.743472][T25317] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1062.759784][T25317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.773538][T25317] usb 2-1: Product: syz [ 1062.783082][T25317] usb 2-1: Manufacturer: syz [ 1062.789557][T25317] usb 2-1: SerialNumber: syz [ 1062.802593][T25317] usb 2-1: config 0 descriptor?? [ 1062.815899][T25317] xbox_remote_probe: Unexpected endpoint_in [ 1062.953237][T26238] usb 5-1: USB disconnect, device number 81 [ 1063.115254][T26241] usb 2-1: USB disconnect, device number 85 [ 1063.269446][T19725] loop5: detected capacity change from 0 to 7 [ 1063.301774][T19725] Dev loop5: unable to read RDB block 7 [ 1063.322531][T19725] loop5: unable to read partition table [ 1063.339645][T19725] loop5: partition table beyond EOD, truncated [ 1063.364019][T19725] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1063.609352][T19736] tipc: Enabled bearer , priority 0 [ 1063.644534][T19736] syzkaller0: entered promiscuous mode [ 1063.666677][T19736] syzkaller0: entered allmulticast mode [ 1063.762757][T19752] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1063.771156][T19752] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1063.795998][T19735] tipc: Resetting bearer [ 1063.824554][T19735] tipc: Disabling bearer [ 1063.842120][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1063.842134][ T29] audit: type=1326 audit(1780418957.061:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19756 comm="syz.0.5655" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6239ce59 code=0x0 [ 1063.950803][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5658'. [ 1064.016939][T26226] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1064.086741][T26241] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1064.176534][T26226] usb 6-1: Using ep0 maxpacket: 32 [ 1064.183415][T26226] usb 6-1: config index 0 descriptor too short (expected 8192, got 36) [ 1064.191769][T26226] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.201880][T26226] usb 6-1: config 0 has no interfaces? [ 1064.206815][T26239] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1064.207442][T26226] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1064.223931][T26226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.237168][T26226] usb 6-1: config 0 descriptor?? [ 1064.241132][T26241] usb 2-1: Using ep0 maxpacket: 16 [ 1064.252884][T26241] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.264349][T26241] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1064.277941][T26241] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1064.284602][T26241] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1064.295611][T26241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.306332][T26241] usb 2-1: config 0 descriptor?? [ 1064.316185][T26241] usbhid 2-1:0.0: can't add hid device: -22 [ 1064.322919][T26241] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1064.367341][T26239] usb 5-1: Using ep0 maxpacket: 8 [ 1064.380068][T26239] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1064.396318][T26239] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.408268][T26239] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1064.420165][T26239] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1064.430449][T26239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.450544][T26239] usb 5-1: Product: syz [ 1064.451875][T26226] usb 6-1: string descriptor 0 read error: -71 [ 1064.460183][T26239] usb 5-1: Manufacturer: syz [ 1064.476321][T26239] usb 5-1: SerialNumber: syz [ 1064.488194][T26239] usb 5-1: config 0 descriptor?? [ 1064.489686][T26226] usb 6-1: USB disconnect, device number 29 [ 1064.590725][T19797] [ 1064.593080][T19797] ============================================ [ 1064.599303][T19797] WARNING: possible recursive locking detected [ 1064.605516][T19797] syzkaller #0 Tainted: G L [ 1064.611470][T19797] -------------------------------------------- [ 1064.617642][T19797] syz.1.5656/19797 is trying to acquire lock: [ 1064.623705][T19797] ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1064.633987][T19797] [ 1064.633987][T19797] but task is already holding lock: [ 1064.641339][T19797] ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1064.651488][T19797] [ 1064.651488][T19797] other info that might help us debug this: [ 1064.659536][T19797] Possible unsafe locking scenario: [ 1064.659536][T19797] [ 1064.667013][T19797] CPU0 [ 1064.670282][T19797] ---- [ 1064.673580][T19797] lock(qp_broker_list.mutex); [ 1064.678431][T19797] lock(qp_broker_list.mutex); [ 1064.683262][T19797] [ 1064.683262][T19797] *** DEADLOCK *** [ 1064.683262][T19797] [ 1064.691423][T19797] May be due to missing lock nesting notation [ 1064.691423][T19797] [ 1064.699759][T19797] 1 lock held by syz.1.5656/19797: [ 1064.704844][T19797] #0: ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1064.715442][T19797] [ 1064.715442][T19797] stack backtrace: [ 1064.721312][T19797] CPU: 1 UID: 0 PID: 19797 Comm: syz.1.5656 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.721331][T19797] Tainted: [L]=SOFTLOCKUP [ 1064.721336][T19797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.721345][T19797] Call Trace: [ 1064.721351][T19797] [ 1064.721357][T19797] dump_stack_lvl+0xe8/0x150 [ 1064.721374][T19797] print_deadlock_bug+0x279/0x290 [ 1064.721392][T19797] __lock_acquire+0x253f/0x2cf0 [ 1064.721406][T19797] ? is_bpf_text_address+0x292/0x2b0 [ 1064.721419][T19797] ? is_bpf_text_address+0x26/0x2b0 [ 1064.721432][T19797] ? kernel_text_address+0xa5/0xe0 [ 1064.721447][T19797] ? __kernel_text_address+0xd/0x30 [ 1064.721464][T19797] ? vmci_qp_broker_detach+0x117/0xf20 [ 1064.721478][T19797] lock_acquire+0x106/0x350 [ 1064.721489][T19797] ? vmci_qp_broker_detach+0x117/0xf20 [ 1064.721506][T19797] __mutex_lock+0x1a3/0x1550 [ 1064.721521][T19797] ? vmci_qp_broker_detach+0x117/0xf20 [ 1064.721536][T19797] ? kasan_save_track+0x4f/0x80 [ 1064.721550][T19797] ? kasan_save_track+0x3e/0x80 [ 1064.721563][T19797] ? kasan_save_free_info+0x46/0x50 [ 1064.721576][T19797] ? __kasan_slab_free+0x5c/0x80 [ 1064.721591][T19797] ? kfree+0x1c5/0x640 [ 1064.721604][T19797] ? vmci_ctx_put+0x5ef/0xc40 [ 1064.721614][T19797] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1064.721625][T19797] ? vmci_datagram_dispatch+0x450/0xc60 [ 1064.721636][T19797] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 1064.721649][T19797] ? vmci_host_close+0x98/0x160 [ 1064.721662][T19797] ? vmci_qp_broker_detach+0x117/0xf20 [ 1064.721676][T19797] ? exit_to_user_mode_loop+0x193/0x680 [ 1064.721687][T19797] ? __pfx___mutex_lock+0x10/0x10 [ 1064.721703][T19797] vmci_qp_broker_detach+0x117/0xf20 [ 1064.721721][T19797] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1064.721734][T19797] ? kasan_quarantine_put+0xbb/0x1f0 [ 1064.721748][T19797] ? lockdep_hardirqs_on+0x7a/0x110 [ 1064.721760][T19797] ? kfree+0x1c5/0x640 [ 1064.721772][T19797] ? vmci_ctx_put+0x5ef/0xc40 [ 1064.721781][T19797] ? vmci_ctx_put+0x141/0xc40 [ 1064.721792][T19797] vmci_ctx_put+0x64e/0xc40 [ 1064.721803][T19797] ? __pfx___schedule+0x10/0x10 [ 1064.721818][T19797] ? vmci_ctx_put+0x141/0xc40 [ 1064.721829][T19797] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1064.721840][T19797] ? preempt_schedule_thunk+0x16/0x30 [ 1064.721855][T19797] ? preempt_schedule_common+0x82/0xd0 [ 1064.721873][T19797] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1064.721887][T19797] vmci_datagram_dispatch+0x450/0xc60 [ 1064.721901][T19797] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1064.721916][T19797] vmci_qp_broker_detach+0x8dd/0xf20 [ 1064.721933][T19797] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1064.721946][T19797] ? kasan_quarantine_put+0xbb/0x1f0 [ 1064.721962][T19797] ? kfree+0x1c5/0x640 [ 1064.721974][T19797] ? vmci_ctx_put+0x5ef/0xc40 [ 1064.721986][T19797] vmci_ctx_put+0x64e/0xc40 [ 1064.721997][T19797] ? vmci_ctx_put+0x141/0xc40 [ 1064.722008][T19797] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1064.722024][T19797] vmci_host_close+0x98/0x160 [ 1064.722037][T19797] ? __pfx_vmci_host_close+0x10/0x10 [ 1064.722051][T19797] __fput+0x44f/0xa60 [ 1064.722067][T19797] task_work_run+0x1d9/0x270 [ 1064.722088][T19797] ? __pfx_task_work_run+0x10/0x10 [ 1064.722106][T19797] exit_to_user_mode_loop+0x193/0x680 [ 1064.722117][T19797] ? rcu_is_watching+0x15/0xb0 [ 1064.722131][T19797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.722144][T19797] do_syscall_64+0x353/0x580 [ 1064.722155][T19797] ? trace_irq_disable+0x3b/0x140 [ 1064.722170][T19797] ? clear_bhb_loop+0x40/0x90 [ 1064.722183][T19797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.722194][T19797] RIP: 0033:0x7f9784b9ce59 [ 1064.722206][T19797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.722216][T19797] RSP: 002b:00007f9785a1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1064.722230][T19797] RAX: 0000000000000000 RBX: 00007f9784e16090 RCX: 00007f9784b9ce59 [ 1064.722239][T19797] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 1064.722247][T19797] RBP: 00007f9784c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1064.722255][T19797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.722263][T19797] R13: 00007f9784e16128 R14: 00007f9784e16090 R15: 00007f9784f3fa48 [ 1064.722277][T19797] [ 1065.469879][T19808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.480363][T19808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.606591][T26226] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1065.757721][T26226] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1065.765874][T26226] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.780472][T26226] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1065.789749][T26226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.797783][T26226] usb 6-1: Product: syz [ 1065.802257][T26226] usb 6-1: Manufacturer: syz [ 1065.807658][T26226] usb 6-1: SerialNumber: syz [ 1065.819578][T26226] rtl8150 6-1:1.0: couldn't find required endpoints [ 1065.827161][T26226] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1066.961662][T26226] usb 5-1: USB disconnect, device number 82 [ 1067.190250][T26226] usb 6-1: USB disconnect, device number 30