last executing test programs: 17m52.267137126s ago: executing program 1 (id=1173): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xee}, 0x8) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x8000004, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 17m51.304655446s ago: executing program 1 (id=1179): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x89e0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = mq_open(&(0x7f0000000000)='/dev/dri/card#\x00', 0x40, 0x30, &(0x7f0000000040)={0x5, 0x1, 0x200, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) mq_notify(r2, &(0x7f0000000180)={0x0, 0x1, 0x4, @tid=r3}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r6, r4, 0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x24, r9, 0x2, 0x0, 0xffffffff, {0x2a}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004015}, 0x20000081) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x50, r9, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 17m48.047472076s ago: executing program 1 (id=1189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0xa8}}, 0x24040084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e65742c706f72749edde65f97b65ab39fa8ba46b2240af61203e324c8"], 0x60}}, 0x26040084) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, 0x0, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000000340)=""/174, 0xae}], 0x3, &(0x7f0000000400)=""/99, 0x63}, 0x40000000) fchmod(r5, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [{0x8, 0x4}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x7}, {0x8, 0x1}], {0x10, 0x6}}, 0x1c, 0x0) r8 = dup(r4) mmap(&(0x7f000024e000/0x1000)=nil, 0x1000, 0x2000005, 0x28011, r8, 0x77aa000) socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2b, &(0x7f00000004c0)="400077e2d32f48a81d73d7c831fc82da4acdb2be7f4526c65c85871858b773c2") sendfile(r8, r8, &(0x7f0000000000)=0x8, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 17m46.511392322s ago: executing program 1 (id=1199): socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x8022, r2}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0x22020400) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x11, &(0x7f0000000000)="11106e00", 0x4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000ff}]}) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000ff}]}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r7], 0x0) (async) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r7], 0x0) 17m45.064529443s ago: executing program 1 (id=1208): connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1, 0xa564b9656ba61cef}, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x58fa8f3331d10616, 0x8000}, 0xc) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4000, 0x4) r3 = inotify_init1(0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x7ff, 0x200, 0xf, 0x8, 0x0}, &(0x7f0000000100)=0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x4e, 0xffffffff, 0x7, 0x8, 0x8000, 0x0}) r7 = epoll_create(0xe) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r2, &(0x7f0000000200)={r7, r2, 0x8}) ptrace$ARCH_SHSTK_STATUS(0x1e, r6, &(0x7f0000000240), 0x5005) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000280)={r0, 0x4, 0x1, 0x7}) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000002c0)={{0x5000, 0x7000, 0xb, 0x7, 0x91, 0x40, 0xe, 0x3, 0x9, 0xc, 0x4, 0xfe}, {0x50000, 0xb000, 0x10, 0x2, 0x7, 0x1, 0x2, 0xb, 0x5, 0x0, 0x5, 0x9}, {0x7000, 0xeeee8000, 0xc, 0x5, 0x1, 0x2, 0xc, 0x6, 0x1, 0x0, 0x9, 0x6}, {0x30000, 0x9000, 0xf, 0x4, 0x6, 0x5, 0x4, 0x10, 0x0, 0x9, 0x5}, {0x8080000, 0x41000, 0x4, 0x2, 0x77, 0x7a, 0x9, 0xf8, 0x6, 0xe4, 0x1, 0xfd}, {0x9a30375ee9950eb3, 0x9000, 0xb, 0xfd, 0xff, 0x9, 0x9, 0xf1, 0x2, 0x8, 0x9a, 0x4}, {0x8080000, 0x4, 0xb, 0xfe, 0x7, 0x8, 0x0, 0x4, 0x40, 0x4, 0x3, 0x4}, {0xb000, 0x80a0000, 0xe, 0x5, 0x2, 0x6, 0xf, 0xf0, 0x9d, 0x10, 0xe, 0xbe}, {0x7000, 0x2b53}, {0x3000, 0xfe01}, 0x0, 0x0, 0x4000, 0x10054, 0xd, 0x4100, 0xffff1000, 0x1, [0x4, 0x100000000, 0x88, 0x6]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000440)={r4, 0x1, 0x7, [0x101, 0x14, 0x80, 0x6, 0x2, 0x4, 0x3]}, 0x16) readv(r3, &(0x7f0000001880)=[{&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/35, 0x23}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/129, 0x81}, {&(0x7f0000001600)=""/165, 0xa5}, {&(0x7f00000016c0)=""/17, 0x11}, {&(0x7f0000001700)=""/42, 0x2a}, {&(0x7f0000001740)=""/82, 0x52}, {&(0x7f00000017c0)=""/131, 0x83}], 0x9) ioctl$KDSKBSENT(r8, 0x4b49, &(0x7f0000001940)={0xfd, "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"}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001b80)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)=@ipv6_newaddrlabel={0x98, 0x48, 0x2, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, r10}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000001d40)) syz_open_pts(r8, 0x6080) socket$alg(0x26, 0x5, 0x0) r11 = dup(r7) lseek(r11, 0x76, 0x1) recvmsg$can_bcm(r9, &(0x7f0000001f00)={&(0x7f0000001d80)=@in, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001e00)=""/36, 0x24}], 0x1, &(0x7f0000001e80)=""/71, 0x47}, 0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000001f40)={r4, @in6={{0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}}}, &(0x7f0000002000)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000002040)={r4, 0xfffffff7, 0x9, 0x1, 0x3, 0xba, 0xf13c, 0xfffffff8, {r12, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x6}}, 0x3, 0x4, 0x5, 0x0, 0x5}}, &(0x7f0000002100)=0xb0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002140)={0x1, 'ip6gretap0\x00', {}, 0x1d2}) 17m44.154593253s ago: executing program 1 (id=1209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = syz_io_uring_setup(0x4026, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x0, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000580)={0x0}) 17m29.090889297s ago: executing program 32 (id=1209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = syz_io_uring_setup(0x4026, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x0, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000580)={0x0}) 8.948024936s ago: executing program 5 (id=5381): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.731173402s ago: executing program 0 (id=5384): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2b00008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x806}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 8.717216755s ago: executing program 5 (id=5385): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) r0 = syz_io_uring_setup(0x499, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) openat(0xffffffffffffffff, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x942, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b3c359", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f84bd7", 0x0, 0x2c, 0x0, @private1, @private2, [@hopopts={0x33}]}}}}}}}, 0x0) 8.531669406s ago: executing program 5 (id=5386): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x5, "43dca19e"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x33, {0x33, 0x1, "0a00e2965cced6d4dbd1ebd5b91ec8e48e55d83dcd4f1b433aba340800805ff9f1db2724ac7a7660c11d2d5a6f4449ac86"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000140)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d14f9100aefd2041307dbd7f64886eb2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7b, 0x1, 0x3d6a}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x80, 0x6, 0x4, 0xf3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x6, 0x4, "2d25f31b", "2a06c397"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x7, 0x4, 0xc6, 0x2, 0xb050}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x40, 0x1, 0x90, "f85bd4e513e5cece9f5f25b85807898c00d486c8b3b57179e238c556bcce858fef4ed7ea74893f2ec0e4374a547f5bdb0cb606fba5d4cffe864244e5f29e19ca33d853b5d8339e3b5b3c753042e60d7d80c8181f26c29ef0211103c02ee6a106a069a17e6da8b3e199899de9f49d4765d4b02f8fc267d1b9d5408f3cce4c413c1915fb2d3a9272d0e64a6cdfe55b5a19"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'z|'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f20a"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x5794}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xc8}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x76}}) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000100)={'sit0\x00', 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x5, "43dca19e"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x33, {0x33, 0x1, "0a00e2965cced6d4dbd1ebd5b91ec8e48e55d83dcd4f1b433aba340800805ff9f1db2724ac7a7660c11d2d5a6f4449ac86"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000140)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d14f9100aefd2041307dbd7f64886eb2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7b, 0x1, 0x3d6a}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x80, 0x6, 0x4, 0xf3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x6, 0x4, "2d25f31b", "2a06c397"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x7, 0x4, 0xc6, 0x2, 0xb050}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x40, 0x1, 0x90, "f85bd4e513e5cece9f5f25b85807898c00d486c8b3b57179e238c556bcce858fef4ed7ea74893f2ec0e4374a547f5bdb0cb606fba5d4cffe864244e5f29e19ca33d853b5d8339e3b5b3c753042e60d7d80c8181f26c29ef0211103c02ee6a106a069a17e6da8b3e199899de9f49d4765d4b02f8fc267d1b9d5408f3cce4c413c1915fb2d3a9272d0e64a6cdfe55b5a19"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x20}}, &(0x7f0000000400)={0x40, 0x7, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000480)={0x40, 0xb, 0x2, 'z|'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f20a"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x5794}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xc8}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x76}}) (async) socket(0x1e, 0x4, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000100)={'sit0\x00', 0x0}) (async) 7.686272358s ago: executing program 4 (id=5389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x38d000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x5, 0xba34}}}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x6, 0x7, 0x10, 0x11, 0xc, 0x6, 0x7f, {0x6, 0x407c, 0x7, 0x4, 0x2b52, 0xe122}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0xd6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x200400dc}, 0x20000000) 7.079190656s ago: executing program 4 (id=5390): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x40000000}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0004300000003007a7ea3163fd3bc518194b120c1e72d54cfc4ad2841ef4f6a3fd7c59ccff85025f2e7b3504ff87cbfd10f3c080b733"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0xa4d, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x3000300) r5 = dup(0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)={@fallback, 0xffffffffffffffff, 0x11, 0x1}, 0x20) futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0xea60}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000100)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$cgroup_int(r5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.069203938s ago: executing program 0 (id=5391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@remote, @remote, 0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x400) r1 = timerfd_create(0x1, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, 0x0) r2 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104b35716e67da422221d32860d4b13014bf9cabfec7430777c646ebc9300e0590be6a84abaccb05e82ee330d123771e0cc0c9368b55648d963864232b7bdd621975af674b10d42de3941d75591da43b6ff6424dc7fc1865667d662ea9dbcb8523cc733be2ecdc8094f963f3993c367f8", 0x72, 0x20000814, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) 6.703820628s ago: executing program 5 (id=5392): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae085986aca5061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff0000000000", 0x89}], 0x1}, 0x888) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = dup(r3) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000080)={0x9, 0x8, [0x8, 0x3]}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) renameat(r4, &(0x7f0000000280)='./file0\x00', r10, &(0x7f0000000300)='./file0\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r10) sendmsg$TIPC_NL_SOCK_GET(r11, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xec, r12, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fe39cddee5a352da2461301326496decad101a01ce34"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c68b1ac0da74329ad3ab001d85a33275555bc72f2ca69e4a90332f6cf2ce3f2177"}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff42}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9aaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xec}}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close_range(r13, r0, 0x0) syz_usb_connect(0x3, 0x20, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x68, 0xff, 0x37, 0x10, 0x85a, 0x9, 0xff6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x1, 0x6, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x1, 0x9b, 0x96, 0x6e, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "c7c474"}, {0x5, 0x24, 0x0, 0x1e}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8000, 0xd8, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xff, 0x3, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xf4c7, 0xfbff, 0x1, 0xa, 0xe9, 0x7}]}, @cdc_ecm={{0x5, 0x24, 0x6, 0x0, 0x0, "284d05000000"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2e46, 0x5, 0x0, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x3e, 0x6, 0x52, 0x3, 0xffff, 0x80}]}], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0xf, 0xc}}]}}]}}]}}, 0x0) 6.386913882s ago: executing program 0 (id=5393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0xa, 0x8, 0xa, 0x80000000009, 0x8, 0x3, 0x1041, 0x80004, 0x0, 0xfc1a, 0x3, 0x100000002, 0x49, 0x9, 0x2, 0x6b], 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r0], 0x24}}, 0x24008000) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0xa, 0x8, 0xa, 0x80000000009, 0x8, 0x3, 0x1041, 0x80004, 0x0, 0xfc1a, 0x3, 0x100000002, 0x49, 0x9, 0x2, 0x6b], 0x1000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r0], 0x24}}, 0x24008000) (async) 6.117975271s ago: executing program 0 (id=5394): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) r1 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x7, 0x2, @thr={&(0x7f0000000200)="5928706121f92768a7aa301816501dbf2039bdeb873bf4de702551baad6cf32e9eeaead72d0eb89f61780c44980dde84ef0e89233fc945024a5f19e2d2d92dfd03d2953dd89bb441c8f8eafdba", &(0x7f0000001340)="41d9572e292fb5e49a8cd867eea61d8275a48f87b88a95c87d8e55292b845719152740d7f627104c478215852a187acff89f3244d7703d571af81c0b9aa1918314ab3ec36bf0d842db1b509c0322b8f1cf024532f3febbc526e4e394fac9da183c187603a305cef144f06a882bd0efcf367ae96345f238850bfd869713dc36109b0eab56374fff826b6adf9f117373cc011006ce258ab74f3b5e007a8fd3975fd49f2ba8d372ad15300fe72fc4fd70719fddb02b51ddf291455e01da6563cfbab8b76df3b3b09a75ad23c4bb27729f2f59d22718f889f8637524e8c5f3c88736ae4d3e0295b25ae9c3dd46290093c0ed738fa7ad4699a2"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x60d2, 0x5, r1}) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f00000003c0)={0x7, @output={0x0, 0x0, {0xc4b, 0x80000000}, 0xfffffffa, 0xfffff800}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x24000804) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x24000804) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00001a0000/0x2000)=nil, 0x2000, 0x2, 0x810, 0xffffffffffffffff, 0x8000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x2, 0x11}, 0x18) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r7, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000680)=""/72, 0x48}], 0x2, 0x14002, 0x8001, 0x2) 5.877597053s ago: executing program 3 (id=5396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x4d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x109260) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000003600)=0x5) fchdir(r2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10200, 0x1aa) getdents64(r4, &(0x7f00000000c0)=""/43, 0x2b) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r6 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = dup(r1) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSETATTR(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000048000000090a010400000800000000000700000008000a40000000000900010073797a300000000008000540000000210900020073797a32000000000c000980080001405fffffff140000001000010000000000000000000084000a"], 0x90}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') read$sequencer(r9, &(0x7f0000000180)=""/186, 0xba) preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/33, 0x21}], 0x2, 0xc5, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r10 = socket(0xa, 0x3, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCGETSGCNT(r10, 0x89e1, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r11 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}], 0x1, 0x8040) fcntl$setstatus(r11, 0x4, 0x2000) 4.94066446s ago: executing program 5 (id=5400): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) r3 = io_uring_setup(0x3eaa, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) syz_usb_disconnect(r7) read$char_usb(r8, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) 4.894172307s ago: executing program 3 (id=5401): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2b00008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x806}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 4.232214565s ago: executing program 2 (id=5404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES16, @ANYRES16=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x140008, 0x0, 0xfffe, 0x1, 0xe67b, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f26709130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1faffffff6a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da701fa05bd8be730e4aa010494641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1001000000081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2a284d9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d77310410a77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000001, {0xc, 0x7, 0x0, {0x2, 0xa, 0x9, 0x6c, 0x7, 0x40000000000a, 0x3, 0xfffff2dc, 0x101, 0x4000, 0xffffff7e, 0xee00, 0xffffffffffffffff, 0x81, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010007000000000004000000001000060000000000200004000000000038646a0eadf706dbda13b2f69a3c32a6282a3852298e524723ace8c5713ebbe4df10e4265fa65ec1894073b6b655ea77bb14faca327db9b0bedc3263f589ee9aaccada355692146310a11a2811e737dc0c857b73cbe69d9df6030d52b44ca6c308f66113f63320aeb44c760ac2578abdb2ef6e0406712f82e4a7efed0c1f91061b05de42d1210d374342d57f36f16b6af3eae4dd28031c50af88639dcca2b4e4742cea5323195246e3f460bbb9732007595333aa19f293c128183e5d54cec7d883e954153fa3e4e7a818"], 0x4, 0x3) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009218000000122070009058103000000000066bbcef0cc6e5b14f2ac0027de1bbdeaacae28c432584744204f9471dadb0c36a1c7760008d42400e19c3dbb0c35ecc49e53"], 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x1, 0x1, 0x7fffffff}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0031198c03da7ebcd8faec6830a02c561a358689a3c104dbc33414ee877eac"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x8d03000) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000a00)={r5}) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f0000000040)={0xcc, 0xffffffec, 0x0, 0x2000, 0x0, 0xfffffffd}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r7, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)=""/137, 0x89}], 0x2, 0x0, 0x0, 0x8000}, 0x48004) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000180)=0x5a4f, 0x23) sendto(r6, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x441, 0x0, 0x0) r8 = socket(0x2a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00001600000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xf}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x40}}, 0x0) 4.036350365s ago: executing program 4 (id=5405): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x101, 0x3, {{0x38, 0x4, 0x3, 0xd, 0xe0, 0x67, 0x0, 0x6, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2e}, {[@cipso={0x86, 0x16, 0x3, [{0x5, 0x10, "4de927aa5a2d0d3e6de60472bc13"}]}, @timestamp_prespec={0x44, 0x3c, 0x8e, 0x3, 0x3, [{@loopback, 0x6}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}, {@multicast2, 0x6}, {@multicast1, 0xb15d}, {@loopback, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @cipso={0x86, 0x24, 0x3, [{0x5, 0x9, "2d481790dfc45d"}, {0x5, 0x7, "fc7ea91d79"}, {0x0, 0xb, "f8114906483124c69a"}, {0x3, 0x3, '1'}]}, @generic={0x44, 0x8, "99c11599115d"}, @end, @timestamp_prespec={0x44, 0x4c, 0xf0, 0x3, 0x1, [{@broadcast, 0x5}, {@remote, 0x6}, {@remote, 0x3}, {@loopback, 0x8}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@broadcast, 0x2}, {@private=0xa010101, 0x94b}, {@empty, 0x80}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x8, &(0x7f0000000340)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', r0, @fallback=0xb}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/80) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x69) close(r4) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 3.843566401s ago: executing program 4 (id=5406): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000dabe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.601354928s ago: executing program 4 (id=5407): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000008cb06a781000000000001090224000100003000090400000203000200092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000240)={0x14, &(0x7f00000002c0)={0x0, 0x3, 0x5c, {0x5c, 0x10, "8f6a29ce87649b3a6a258bd55509f5101c1ecd8770e8c8316ae2182614972b08780dba0f09b0ab6a1c33b795bd74c90fd3df29bbbd5634760e8e417c2426bff7ef1d430f7f9fe6cb36926a5f02376afc27a1f0cf7b72cd18172d"}}, &(0x7f0000000640)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000500)={0x0, 0x18, 0xa4, "f6f0258656ba1e59045def1c6af9ea7d958b29475f3abb51901ec19636d1f2c838b1c9c96efe88bfabc6beeabcedb3e37ec900946b0814f9117d9e2673619f28a6cc6d0e28bba5f1eb0769db6c3bbadd3cf5f6616afd4ce5a8e0a19353dd0e7bee26e93b05bc56086b14f6c20edc7c877cd09f72b48be5ad94fb6cadb9269db7979b517610d41947260be4a54b78fe91f25dce063fd2bc0cc6a168ce7321a20593f03827"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x445}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000780)={0xc0, 0xa2, 0x2f, "a217c9b66e3f7e17b7df45dae8c26f71945a671170b61a1c47cb17236df2594b3739186cc52f29f6e243900ec7a804"}}) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) r4 = syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x497c, 0x0, 0x0, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) sendmsg$sock(r7, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0xfffffffffffffef8, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)='F', 0x1}], 0x10000000000001a9}, 0x4000040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x38, r10, 0x5, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}}, 0x40c4800) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) 3.383117924s ago: executing program 3 (id=5408): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x414fe000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfed, &(0x7f0000001840)=""/4077, 0x0, 0x0, '\x00', 0x0, 0xa00}, 0x94) 3.250894752s ago: executing program 3 (id=5409): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r2, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, r5, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107}) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) 3.250461378s ago: executing program 0 (id=5410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a, 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000740)={0x11, @broadcast, 0x4e20, 0x4, 'wrr\x00', 0x15, 0x7ff, 0x22}, 0x2c) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gmoup_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00']) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/custom0\x00', 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r5, 0x0, 0x119) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x88c8}, 0x40000) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)=ANY=[@ANYBLOB="e00000001000bb2429bd7000fddbdf25647262675f70725f6374725f61657332353646523ffd7267db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002400000024000000"], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) read(r1, 0x0, 0x0) r9 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) close_range(r10, 0xffffffffffffffff, 0x0) 2.191716796s ago: executing program 2 (id=5411): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) get_mempolicy(&(0x7f0000000000), &(0x7f00000000c0), 0x3, &(0x7f0000000000/0x4000)=nil, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) io_setup(0x12, &(0x7f0000000140)=0x0) r7 = eventfd2(0xfffffff7, 0x80001) r8 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r6, 0x7, &(0x7f00000017c0)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x7, 0x9, r4, &(0x7f00000001c0)="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", 0x1000, 0x2000000, 0x0, 0x1}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x5, 0x7fff, r0, &(0x7f0000001200)="f95140b314758371e5783c73c57f3dcfadc4217fc83439f20f18aeefa42e26dc8890c3bde167c7e090b0c28fd5f769db3d44e19e507ec6359289b290daaa9262b004e46aad4e2bd114c1c7669a9292672ad96fc56f07969a28dcbb0294b91b10239563d6d315f85551726eda76ad3e5a6420d07323bd6960d1f702833001228d7710a7ac064b6789ae9ad208259d841a85fa44fa6a6550c6bd5f4eb22942", 0x9e, 0xfffffffffffffffb, 0x0, 0x1, r5}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x5, r4, &(0x7f0000001300)="16947a6982050005ad10cf2b4d7036cd31b580d53f3e28bca1f0aa8944f5ba1f4d9d730639cca458e00c6f26d37208454021dbbd019187ebd943483064f1e2c82ba8fcddf9ebee34f20085f61783b9623569e5edca4a48460ce8c7851a8f16cb0f23b6d9f64efb7e631c", 0x6a, 0x81, 0x0, 0x2, r5}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f00000013c0)="04410d13968cc5df3e32125f0a12cddbbb7378320f2189c12cfffb2e8dbc40af17d4b0f015c5af7969fa4324d7a5174067ab193e0669eba932c8b43bf1a7fd16851e16fee9c9ff173aeb46ba969ea0e0877e02f3d6677716032f23f91cbc23b012c7d7a628fb57fb6e9edd9e086fd8b9ef6ff448a4935c67b6858534c64f42bc3bd4f08083528509dd217ae0dcc49d52413ea930f3faaed1482408f2c5bdc0946c8cc262b7314f25045dd854739563af2051f2c8d5dd249eb3b3cf4f64179e09ff663aef999518f6008d8be1e7b0abb874d064057834ba531d8860e5ef00031c57e95ae1e6570c88cfc26bf07db08e1652c1", 0xf2, 0xc269, 0x0, 0x3, r5}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x2, 0x400, r4, &(0x7f0000001500)="d3244eb576f0bfd93ff3348db7404c1a59aa3761f4f9305cc795cb57e59f0bb2d2fa134318752e5bb1c962dc17aca991cfa12f3a934c9fd22c3341972c0479178dc5d96713a6da9bd36c8ff5f11f4054b235554fb7cfa75e47d6278b38db77fd57748a7943e98ec7cd064b439414026cff1435bd9c52acd1de39229d3b15f1333eab1e3458855035ec01e710b1420abe93a822b6b4af3799e1b291d5ae6910d11937e5", 0xa3, 0x9, 0x0, 0x0, r7}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000001600)="a805b320e1a271df7d6ae998b327200f3146e88615fdcd9f2b48feb06b8770f38798a1d7e3e7b9f0314ed56f99a84525a9222a3212176f828d4f27d88729554ae92cf1fbd3de18691a1233e0bbc3f34d711a09f85d15aefae8d62fecfbbba543f3790c8f979fadd3dcb4c5c6582bde053f934ba9", 0x74, 0x9, 0x0, 0x0, r5}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0xa7, r8, &(0x7f00000016c0)="90e22f92c18f81423cea912b878b16121e879b6ae7bd25f3b83cdbf579b2409ff59bd09c53640ffa04ccd4f31c866b4f4ab10caba637be509a458623ff410e7f8a008ebe99ab28958aeebd6fc3aac8b29f0d4ae2b1632d815afa087ee8a481f262d2ba834983b4f05a8ecc58e09824fac267ee0decf14dfd78488490c2c3d1463fc7bd51dbd4de80aa00241ffd33da1ae293c96288fe7e688052829b5b8a5536c6092aedc6ce858f122b362e6e59dc6e367fe5", 0xb3, 0x9, 0x0, 0x0, r5}]) r9 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 1.472005825s ago: executing program 5 (id=5412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "dfa200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xac9, {[@fastopen={0x22, 0x3, "dd"}]}}}}}}}}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024392d5204c05c3067aeb0142030109022d0001088770150904cb01034f3eafb509059302000409052e09058b02ff0307"], 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) 1.410739742s ago: executing program 0 (id=5413): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60a20000", @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25030000004c00018038000400200001000a00000000000000fe8000000000000000000000000000aa000000001400020002004e22ac14141e00000000000000000d0001007564703a73797a3000000000"], 0x60}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x14}, &(0x7f00000001c0)=0x9c) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$video(0x0, 0xa7, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="040000000000000002004e217f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e23ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5e5cf749ae16e80a6d4c69c4c5d1bceb25561c77f4e9710d85e31fb07c413903e21401a24fd4603e9db18d9cc78bc18fc2918a79af5a5e91f6741d82c25c95b35efe86413b1e4bafbe3979f61df791ac3102f66fe29e30e8133e923f5ba89b7cffd377089de47"], 0x210) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)=0x40000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fcntl$getflags(r9, 0xb) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000180)={0x0, "836d11bf7cf92543da0cbdf188dede83ee00", 0x2, 0x10, 0x7fffffff, 0x7fff, 0x10, 0x1, 0x0, 0x4}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000070000000000000023610000000109022d00011000000009040300000000000000cd8d1f00020000000905050200000000100905a3cf80c11262efd73a4bd83927d54dc289fb8585e46cad03afff5b146efde259b9a4c7a27cb4783ae17a6bd1ba37a18c9dff127c711efa3fe13184dcc54ee8c4ed6322602ed27ace2f3f8be38d3080d5d0b2b1eab912f29bc054c0baf3d4bb4460dc23fae0fdc9c17f20355823beb84ee3b77f103ad95e6bc03c337d64f826db5f35af385d6db40e08bc34ea07b8014830bf72439d918d870858a6e90c1a7561afc62ec2d381b1864030b37d94b83c1a30", @ANYRES64=r5], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.333736763s ago: executing program 3 (id=5414): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') socket$igmp(0x2, 0x3, 0x2) (async) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd2b, 0xffffffff, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x4, 0x0, 0x0, 0x82, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010100, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904000a017e63abff09050a"], 0x0) 739.185195ms ago: executing program 4 (id=5415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000000000000000d7b19cde000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32d8a59aa5e2e1a9bb6b2430b9fc0000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x7ffc, 0x2, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000180)={0x3, r3, 0xfffff26a, 0x4, 0xb, 0x1fd, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd1400000000075f601020301090224000201005004090400f701c873b808090504105802030d5809042b"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) fcntl$setstatus(r4, 0x4, 0x42000) r5 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a00000000000500030005000000050008000100000004000600050009"], 0x6c}}, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) close(0x3) 528.325424ms ago: executing program 2 (id=5416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="000000000000001ed3d672000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'bond0\x00', {0x2}, 0xf}) 454.55302ms ago: executing program 2 (id=5417): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000beda00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 363.473725ms ago: executing program 3 (id=5418): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2b00008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x806}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 720.868µs ago: executing program 2 (id=5419): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x414fe000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfed, &(0x7f0000001840)=""/4077, 0x0, 0x0, '\x00', 0x0, 0xb00}, 0x94) 0s ago: executing program 2 (id=5420): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) lremovexattr(0x0, &(0x7f0000000100)=@known='system.posix_acl_access\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "7851d844fd8c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0xfff}, [@country_functional={0x6, 0x24, 0x7, 0x80, 0xc}, @mbim_extended={0x5, 0x24, 0x1c, 0xefbe, 0x2, 0x6}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0xd9}}}}}]}}]}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) kernel console output (not intermixed with test programs): SerialNumber=3 [ 1368.708996][T31623] usb 1-1: Product: syz [ 1368.723807][T31623] usb 1-1: Manufacturer: syz [ 1368.740262][T31623] usb 1-1: SerialNumber: syz [ 1368.794214][T31623] usb 1-1: config 0 descriptor?? [ 1368.809742][T31623] usb 1-1: selecting invalid altsetting 1 [ 1368.823217][T31623] usb 1-1: Can not set alternate setting to 1, error: -22 [ 1368.913989][T31623] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -22 [ 1368.918802][T31611] usb 6-1: USB disconnect, device number 122 [ 1369.015510][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 1369.015527][ T30] audit: type=1326 audit(1765470331.891:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.0.5081" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90f0b8f749 code=0x0 [ 1369.139968][ T1865] fuse: Bad value for 'fd' [ 1369.187340][ T1866] loop5: detected capacity change from 0 to 583 [ 1369.229439][ T1866] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1369.339461][ T1868] netlink: 'syz.3.5084': attribute type 4 has an invalid length. [ 1369.982892][T31623] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1370.153392][T31623] usb 4-1: Using ep0 maxpacket: 16 [ 1370.167661][T31623] usb 4-1: config 0 has no interfaces? [ 1370.196170][T31623] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1370.231258][T31623] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1370.253323][T31623] usb 4-1: Manufacturer: syz [ 1370.299600][T31623] usb 4-1: config 0 descriptor?? [ 1370.867879][ T5907] usb 1-1: USB disconnect, device number 55 [ 1371.042633][T31611] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1371.093669][T31623] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1371.213014][T31611] usb 5-1: Using ep0 maxpacket: 16 [ 1371.220672][T31611] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.234268][T31611] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1371.335290][T31623] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1371.348340][T31623] usb 3-1: too many endpoints for config 0 interface 0 altsetting 34: 181, using maximum allowed: 30 [ 1371.377245][T31611] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1371.395680][T31623] usb 3-1: config 0 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 1371.434126][T31623] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1371.448897][T31623] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1371.490291][T31623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.490296][T31611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.559703][T31611] usb 5-1: config 0 descriptor?? [ 1371.626451][T31623] usb 3-1: config 0 descriptor?? [ 1371.998267][T31611] nzxt-smart2 0003:1E71:2009.004C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1372.170331][ T1898] libceph: resolve '0.' (ret=-3): failed [ 1372.194569][ T5907] usb 5-1: USB disconnect, device number 64 [ 1372.476132][ T5892] usb 4-1: USB disconnect, device number 19 [ 1373.007833][ T1907] fido_id[1907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1373.026812][ T1918] loop5: detected capacity change from 0 to 623 [ 1373.151578][ T1918] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1373.334564][ T1922] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5097'. [ 1373.436851][ T1921] tipc: Started in network mode [ 1373.472797][ T1921] tipc: Node identity ac1414aa, cluster identity 4711 [ 1373.562411][ T1921] tipc: Enabled bearer , priority 10 [ 1373.599580][ T1924] tipc: Enabled bearer , priority 0 [ 1373.639596][ T1920] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(40) [ 1373.646202][ T1920] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1373.681615][ T1922] IPv6: NLM_F_CREATE should be specified when creating new route [ 1373.771435][ T1920] vhci_hcd vhci_hcd.0: Device attached [ 1373.863699][ T1926] vhci_hcd: connection closed [ 1373.864177][T26067] vhci_hcd vhci_hcd.4: stop threads [ 1373.933261][T26067] vhci_hcd vhci_hcd.4: release socket [ 1373.983645][T26067] vhci_hcd vhci_hcd.4: disconnect device [ 1374.058312][ T5907] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1374.393334][ T5892] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1374.574254][ T5892] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1374.592765][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.609811][T31623] usb 3-1: string descriptor 0 read error: -71 [ 1374.627982][T31623] usb 3-1: USB disconnect, device number 33 [ 1374.640490][ T5892] usb 5-1: config 0 descriptor?? [ 1374.669327][ T5892] cp210x 5-1:0.0: cp210x converter detected [ 1374.677126][ T5917] tipc: Node number set to 2886997162 [ 1374.868160][ T1935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.878340][ T1935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.532570][ T6010] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1375.663024][ T6010] usb 6-1: device descriptor read/64, error -71 [ 1375.881567][T31611] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1375.902630][ T6010] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1376.045916][T31611] usb 1-1: config 0 has an invalid interface number: 210 but max is 0 [ 1376.054856][ T6010] usb 6-1: device descriptor read/64, error -71 [ 1376.071602][T31611] usb 1-1: config 0 has no interface number 0 [ 1376.084566][T31611] usb 1-1: config 0 interface 210 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1376.116656][T31611] usb 1-1: config 0 interface 210 has no altsetting 0 [ 1376.124477][ T1972] loop5: detected capacity change from 0 to 3063 [ 1376.142327][T31611] usb 1-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=4d.c4 [ 1376.154027][ T1972] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1376.159411][T31611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.233156][ T6010] usb usb6-port1: attempt power cycle [ 1376.238973][T31611] usb 1-1: Product: syz [ 1376.244517][T31611] usb 1-1: Manufacturer: syz [ 1376.248781][ T5826] Buffer I/O error on dev loop5, logical block 382, async page read [ 1376.249177][T31611] usb 1-1: SerialNumber: syz [ 1376.510071][T31611] usb 1-1: config 0 descriptor?? [ 1376.535246][ T1963] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1376.560887][T31611] em28xx 1-1:0.210: New device syz syz @ 12 Mbps (2013:8461, interface 210, class 210) [ 1376.590876][T31611] em28xx 1-1:0.210: Device initialization failed. [ 1376.602781][T31611] em28xx 1-1:0.210: Device must be connected to a high-speed USB 2.0 port. [ 1376.712533][ T6010] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1376.743219][ T6010] usb 6-1: device descriptor read/8, error -71 [ 1376.762759][T31611] usb 1-1: USB disconnect, device number 56 [ 1376.903580][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1376.992627][ T6010] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1377.023312][ T6010] usb 6-1: device descriptor read/8, error -71 [ 1377.143745][ T6010] usb usb6-port1: unable to enumerate USB device [ 1377.182118][ T5892] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1377.206652][ T5892] cp210x 5-1:0.0: querying part number failed [ 1377.237579][ T5892] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1377.273477][ T5892] usb 5-1: USB disconnect, device number 65 [ 1377.317894][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1377.347562][ T5892] cp210x 5-1:0.0: device disconnected [ 1377.682849][ T5892] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1377.858735][ T5892] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1377.894951][ T5892] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1377.912765][ T6010] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1377.936148][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.962205][ T5892] usb 5-1: Product: syz [ 1377.972592][ T5892] usb 5-1: Manufacturer: syz [ 1377.991131][ T5892] usb 5-1: SerialNumber: syz [ 1378.006449][ T5892] usb 5-1: config 0 descriptor?? [ 1378.282161][ T6010] usb 1-1: config 0 has an invalid interface number: 65 but max is 3 [ 1378.326569][ T6010] usb 1-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 1378.349074][ T6010] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1378.367063][ T6010] usb 1-1: config 0 has no interface number 0 [ 1378.453862][ T6010] usb 1-1: too many endpoints for config 0 interface 65 altsetting 18: 248, using maximum allowed: 30 [ 1378.475127][ T6010] usb 1-1: config 0 interface 65 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 1378.505728][ T6010] usb 1-1: config 0 interface 65 has no altsetting 0 [ 1378.716360][ T6010] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 1378.732137][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.746655][ T6010] usb 1-1: Product: syz [ 1378.794290][ T6010] usb 1-1: Manufacturer: syz [ 1378.856193][ T2013] netlink: 'syz.4.5114': attribute type 4 has an invalid length. [ 1378.887234][ T30] audit: type=1326 audit(1765470341.761:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1378.914423][ T2014] syz.2.5121(2014): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1378.966581][ T30] audit: type=1326 audit(1765470341.791:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1378.997681][ T6010] usb 1-1: SerialNumber: syz [ 1379.056318][ T6010] usb 1-1: config 0 descriptor?? [ 1379.094807][ T30] audit: type=1326 audit(1765470341.791:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1379.120074][ T2018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5121'. [ 1379.219850][ T30] audit: type=1326 audit(1765470341.821:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1379.270792][ T2021] loop5: detected capacity change from 0 to 1879 [ 1379.279475][ T30] audit: type=1326 audit(1765470341.821:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1379.331024][ T2021] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1379.535477][ T30] audit: type=1326 audit(1765470341.821:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1379.641492][ T30] audit: type=1326 audit(1765470341.821:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1379.750465][ T30] audit: type=1326 audit(1765470341.821:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1379.843937][ T30] audit: type=1326 audit(1765470341.821:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1379.907993][ T30] audit: type=1326 audit(1765470341.821:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2010 comm="syz.2.5121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1379.947487][ T5200] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1380.221943][ T5892] usb 5-1: USB disconnect, device number 66 [ 1380.577905][ T1995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1380.619253][ T1995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1380.797804][ T1995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1380.828101][ T1995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1380.844286][ T1995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1380.870861][ T1995] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1381.114070][T31613] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1381.132389][ T6010] flexcop_usb: set interface failed. [ 1381.160543][ T6010] b2c2_flexcop_usb 1-1:0.65: probe with driver b2c2_flexcop_usb failed with error -22 [ 1381.211114][ T6010] usb 1-1: USB disconnect, device number 57 [ 1381.212300][ T2043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1381.226642][ T2043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1381.305421][T31613] usb 5-1: Using ep0 maxpacket: 32 [ 1381.331754][T31613] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.370285][T31613] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1381.379677][T31611] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1381.433526][T31613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.478115][T31613] usb 5-1: config 0 descriptor?? [ 1381.504992][T31613] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1381.552906][ T2023] Bluetooth: hci2: command 0x0406 tx timeout [ 1381.581790][T31611] usb 4-1: config 0 has no interfaces? [ 1381.605445][T31611] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1381.614920][T31611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.625461][T31611] usb 4-1: Product: syz [ 1381.629649][T31611] usb 4-1: Manufacturer: syz [ 1381.634337][T31611] usb 4-1: SerialNumber: syz [ 1381.659243][T31611] usb 4-1: config 0 descriptor?? [ 1381.682544][ T5892] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1381.917094][ T5892] usb 3-1: config index 0 descriptor too short (expected 8475, got 27) [ 1381.926309][ T5892] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 1381.962019][ T5892] usb 3-1: config 0 has no interface number 0 [ 1381.980146][ T5892] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1382.000495][ T5892] usb 3-1: config 0 interface 200 has no altsetting 0 [ 1382.030795][ T5892] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 1382.047685][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.074271][ T5892] usb 3-1: Product: syz [ 1382.081869][ T5892] usb 3-1: Manufacturer: syz [ 1382.098242][ T5892] usb 3-1: SerialNumber: syz [ 1382.109760][ T5892] usb 3-1: config 0 descriptor?? [ 1382.148618][T31613] gspca_spca501: reg write: error -71 [ 1382.231326][T31613] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1382.242760][ T2045] syz.0.5128 (2045) used obsolete PPPIOCDETACH ioctl [ 1382.253523][T31613] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 1382.282264][T31613] usb 5-1: USB disconnect, device number 67 [ 1382.333694][ T2048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.346408][ T2048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.384937][ T5892] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input127 [ 1382.439184][ T5892] usb 3-1: USB disconnect, device number 34 [ 1382.662711][ T2023] Bluetooth: hci4: command 0x0c1a tx timeout [ 1382.713027][ T2055] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1382.773644][ T2055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1382.811281][ T2060] binder_alloc: binder_alloc_mmap_handler: 2058 200000ffd000-200001000000 already mapped failed -16 [ 1382.824777][ T2023] Bluetooth: hci3: command 0x0406 tx timeout [ 1382.902629][ T2023] Bluetooth: hci0: command 0x0406 tx timeout [ 1382.902637][T28126] Bluetooth: hci1: command 0x0406 tx timeout [ 1383.053674][ T2069] netlink: zone id is out of range [ 1383.491072][ T2081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5136'. [ 1383.852631][T31613] usb 4-1: USB disconnect, device number 20 [ 1383.952575][ T6010] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1384.115686][ T6010] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.232573][ T6010] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1384.324589][ T6010] usb 5-1: config 1 has no interface number 1 [ 1384.331038][ T6010] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1384.369949][ T6010] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1384.417718][ T6010] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1384.429072][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.437411][ T6010] usb 5-1: Product: syz [ 1384.441646][ T6010] usb 5-1: Manufacturer: syz [ 1384.447099][ T6010] usb 5-1: SerialNumber: syz [ 1384.457065][ T2086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1384.510016][ T2097] netlink: 'syz.0.5144': attribute type 12 has an invalid length. [ 1384.532955][ T2097] input: syz1 as /devices/virtual/input/input128 [ 1384.545772][ T2097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1384.983003][ T2023] Bluetooth: hci0: command 0x0406 tx timeout [ 1385.545641][ T2107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5145'. [ 1386.138909][ T2120] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1387.315910][ T6010] usb 5-1: USB disconnect, device number 68 [ 1387.363400][T31605] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1387.379285][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1387.543741][T31605] usb 6-1: Using ep0 maxpacket: 16 [ 1387.550658][T31605] usb 6-1: config 0 has no interfaces? [ 1387.571712][T31605] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1387.589911][T31605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.608710][T31605] usb 6-1: Product: syz [ 1387.618835][T31605] usb 6-1: Manufacturer: syz [ 1387.628858][T31605] usb 6-1: SerialNumber: syz [ 1387.650831][T31605] usb 6-1: config 0 descriptor?? [ 1387.695242][ T2133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.730918][ T2133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.828666][ T2136] input: syz0 as /devices/virtual/input/input129 [ 1387.902604][ T5907] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1387.975525][T31605] usb 6-1: USB disconnect, device number 127 [ 1388.062884][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 1388.074236][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1388.097151][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1388.190425][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1388.253124][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1388.266029][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.319889][ T5907] usb 3-1: config 0 descriptor?? [ 1388.355811][ T2134] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1388.429896][ T5907] hub 3-1:0.0: USB hub found [ 1388.587905][ T2153] FAULT_INJECTION: forcing a failure. [ 1388.587905][ T2153] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.607380][ T5907] hub 3-1:0.0: 2 ports detected [ 1388.637497][ T2153] CPU: 0 UID: 0 PID: 2153 Comm: syz.5.5156 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.637524][ T2153] Tainted: [L]=SOFTLOCKUP [ 1388.637535][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1388.637546][ T2153] Call Trace: [ 1388.637555][ T2153] [ 1388.637563][ T2153] dump_stack_lvl+0x189/0x250 [ 1388.637590][ T2153] ? __pfx____ratelimit+0x10/0x10 [ 1388.637614][ T2153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1388.637634][ T2153] ? __pfx__printk+0x10/0x10 [ 1388.637663][ T2153] ? __pfx___might_resched+0x10/0x10 [ 1388.637681][ T2153] ? fs_reclaim_acquire+0x7d/0x100 [ 1388.637704][ T2153] should_fail_ex+0x414/0x560 [ 1388.637732][ T2153] should_failslab+0xa8/0x100 [ 1388.637754][ T2153] __kmalloc_noprof+0xdf/0x800 [ 1388.637770][ T2153] ? percpu_ref_get_many+0x18c/0x1e0 [ 1388.637795][ T2153] ? io_cache_alloc_new+0x40/0x100 [ 1388.637824][ T2153] io_cache_alloc_new+0x40/0x100 [ 1388.637849][ T2153] io_msg_alloc_async+0x1b2/0x2d0 [ 1388.637877][ T2153] io_sendmsg_prep+0x344/0x5f0 [ 1388.637908][ T2153] io_submit_sqes+0xad3/0x2140 [ 1388.637960][ T2153] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 1388.637978][ T2153] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1388.638011][ T2153] ? vfs_write+0x956/0xb30 [ 1388.638038][ T2153] ? ksys_write+0x1cb/0x250 [ 1388.638056][ T2153] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1388.638073][ T2153] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1388.638097][ T2153] ? __pfx_vfs_write+0x10/0x10 [ 1388.638117][ T2153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1388.638146][ T2153] ? __fget_files+0x3a0/0x420 [ 1388.638177][ T2153] ? fput+0xa0/0xd0 [ 1388.638201][ T2153] ? ksys_write+0x22a/0x250 [ 1388.638221][ T2153] ? __pfx_ksys_write+0x10/0x10 [ 1388.638241][ T2153] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1388.638272][ T2153] do_syscall_64+0xfa/0xf80 [ 1388.638296][ T2153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.638313][ T2153] ? clear_bhb_loop+0x60/0xb0 [ 1388.638332][ T2153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.638348][ T2153] RIP: 0033:0x7f8f88d8f749 [ 1388.638364][ T2153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1388.638378][ T2153] RSP: 002b:00007f8f89bfe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1388.638397][ T2153] RAX: ffffffffffffffda RBX: 00007f8f88fe5fa0 RCX: 00007f8f88d8f749 [ 1388.638410][ T2153] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 1388.638420][ T2153] RBP: 00007f8f89bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.638432][ T2153] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 1388.638443][ T2153] R13: 00007f8f88fe6038 R14: 00007f8f88fe5fa0 R15: 00007f8f8910fa28 [ 1388.638473][ T2153] [ 1388.916639][ T2134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.925359][ T2134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.049015][ T5907] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1389.112771][ T5907] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1389.270939][ T5907] usbhid 3-1:0.0: can't add hid device: -71 [ 1389.289288][ T5907] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1389.402902][ T5907] usb 3-1: USB disconnect, device number 35 [ 1390.730090][ T2193] syzkaller0: entered promiscuous mode [ 1390.754456][ T2193] syzkaller0: entered allmulticast mode [ 1391.008910][ T1142] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1391.432584][ T6010] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1391.472835][T31605] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1391.592528][ T6010] usb 6-1: Using ep0 maxpacket: 8 [ 1391.610089][ T6010] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1391.636389][T31605] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1391.648174][ T6010] usb 6-1: config 179 has no interface number 0 [ 1391.712649][T31605] usb 3-1: can't read configurations, error -22 [ 1391.719439][ T6010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1391.767927][ T6010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1391.800080][ T6010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1391.819865][ T6010] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1391.831380][ T6010] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1391.872605][T31605] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1391.883422][ T6010] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1391.893274][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.972210][ T2196] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1392.039133][T31605] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1392.050939][T31605] usb 3-1: can't read configurations, error -22 [ 1392.080309][T31605] usb usb3-port1: attempt power cycle [ 1392.214308][ T6010] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input130 [ 1392.236643][ T2209] loop5: detected capacity change from 0 to 2087 [ 1392.295968][ T2209] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1392.391872][ T5907] usb 6-1: USB disconnect, device number 2 [ 1392.391872][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1392.392018][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1392.415015][T31611] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1392.442572][T31605] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1392.456115][ T5841] Buffer I/O error on dev loop5, logical block 260, async page read [ 1392.545301][ T5826] Buffer I/O error on dev loop5, logical block 260, async page read [ 1392.577409][T31605] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1392.593136][T31611] usb 1-1: Using ep0 maxpacket: 8 [ 1392.602290][T31611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.614243][T31605] usb 3-1: can't read configurations, error -22 [ 1392.707061][T31611] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1392.724269][T31611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.743630][T31611] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1392.759720][T31611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.822255][T31611] hub 1-1:1.0: bad descriptor, ignoring hub [ 1392.839740][T31611] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1392.853348][T31611] cdc_wdm 1-1:1.0: skipping garbage [ 1392.859172][T31611] cdc_wdm 1-1:1.0: skipping garbage [ 1392.865289][T31605] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1392.873407][T31611] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1392.959880][T31605] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1392.967915][T31605] usb 3-1: can't read configurations, error -22 [ 1392.975834][T31605] usb usb3-port1: unable to enumerate USB device [ 1393.204265][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1393.204282][ T30] audit: type=1326 audit(1765470356.081:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2210 comm="syz.5.5170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f88d8f749 code=0x0 [ 1393.532103][ T2224] kvm: pic: non byte read [ 1393.538804][ T2224] kvm: pic: non byte read [ 1393.544519][ T2224] kvm: pic: non byte read [ 1393.549811][ T2224] kvm: pic: non byte read [ 1393.575978][ T2224] kvm: pic: non byte read [ 1393.586685][ T2224] kvm: pic: non byte read [ 1393.592656][ T2224] kvm: pic: non byte read [ 1393.598626][ T2224] kvm: pic: non byte read [ 1393.604242][ T2224] kvm: pic: non byte read [ 1393.609982][ T2224] kvm: pic: non byte read [ 1393.655736][T31605] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1393.818034][T31605] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 1393.833321][T31605] usb 5-1: config 2 has no interface number 0 [ 1393.854290][T31605] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1393.874999][T31605] usb 5-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 1393.886454][T31605] usb 5-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1393.910765][T31605] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1393.924247][T31605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.065126][T31605] usb 5-1: Product: syz [ 1394.069894][T31605] usb 5-1: Manufacturer: syz [ 1394.074928][T31605] usb 5-1: SerialNumber: syz [ 1394.103977][ T2222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1394.316787][ T2227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.327627][ T2227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.339364][T31605] usb 5-1: probing VID:PID(0424:012C) [ 1394.347223][T31605] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 1394.404601][T31605] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 1394.431943][T31605] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1394.480003][T31605] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 1394.535694][T31605] usb 5-1: USB disconnect, device number 69 [ 1394.658063][ T6010] usb 1-1: reset high-speed USB device number 58 using dummy_hcd [ 1394.677399][ T6010] usb 1-1: device reset changed ep0 maxpacket size! [ 1394.689189][ T6010] usb 1-1: USB disconnect, device number 58 [ 1394.902590][ T5907] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1395.025880][ T6010] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1395.352601][ T6010] usb 1-1: Using ep0 maxpacket: 16 [ 1395.389621][ T2235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.522423][ T2235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.554631][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.598761][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.618339][ T6010] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1395.682414][ T6010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.696539][ T5907] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1395.738752][ T5907] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1395.753724][ T5907] usb 6-1: can't read configurations, error -71 [ 1395.829518][ T6010] usb 1-1: config 0 descriptor?? [ 1396.598253][ T2252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.607010][ T2252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.628361][ T30] audit: type=1326 audit(1765470359.501:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1396.708076][ T30] audit: type=1326 audit(1765470359.501:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1396.774823][ T30] audit: type=1326 audit(1765470359.501:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1396.821227][ T30] audit: type=1326 audit(1765470359.501:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1396.974360][ T30] audit: type=1326 audit(1765470359.771:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1397.178931][ T30] audit: type=1326 audit(1765470359.771:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1397.553526][ T30] audit: type=1326 audit(1765470359.781:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2260 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf813c2005 code=0x7ffc0000 [ 1397.578282][ T5917] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1397.625773][ T2270] loop5: detected capacity change from 0 to 7 [ 1397.642572][T31611] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1397.642613][ T30] audit: type=1326 audit(1765470359.801:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1397.674478][ T2270] Dev loop5: unable to read RDB block 7 [ 1397.680035][ T2270] loop5: unable to read partition table [ 1397.734557][ T6010] usb 1-1: USB disconnect, device number 59 [ 1397.764719][ T2270] loop5: partition table beyond EOD, truncated [ 1397.774645][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.786709][ T5917] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1397.799442][ T30] audit: type=1326 audit(1765470359.801:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1397.841463][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.859943][ T2270] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1397.886630][ T5917] usb 4-1: config 0 descriptor?? [ 1397.980968][T31611] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1398.004519][T31611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.029993][T31611] usb 3-1: Product: syz [ 1398.040118][T31611] usb 3-1: Manufacturer: syz [ 1398.050239][T31611] usb 3-1: SerialNumber: syz [ 1398.138661][T31611] usb 3-1: config 0 descriptor?? [ 1398.154328][ T2274] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5184'. [ 1398.220426][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1398.220443][ T30] audit: type=1326 audit(1765470361.091:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf8138f34b code=0x7ffc0000 [ 1398.260550][T31611] ch341 3-1:0.0: ch341-uart converter detected [ 1398.262789][ T5907] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1398.267248][ T2274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5184'. [ 1398.286088][ T30] audit: type=1326 audit(1765470361.161:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf813c2005 code=0x7ffc0000 [ 1398.357555][ T2278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5186'. [ 1398.370304][ T2278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1398.432948][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 1398.440377][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1398.452226][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1398.466774][ T5907] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1398.476062][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.510776][ T30] audit: type=1326 audit(1765470361.381:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1398.558671][ T30] audit: type=1326 audit(1765470361.411:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1398.581750][ T5907] usb 1-1: Product: syz [ 1398.586963][ T5907] usb 1-1: Manufacturer: syz [ 1398.611305][ T5907] usb 1-1: SerialNumber: syz [ 1398.692104][ T5907] usb 1-1: config 0 descriptor?? [ 1398.700722][ T30] audit: type=1326 audit(1765470361.501:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1398.732252][ T2263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5180'. [ 1398.784457][ T5907] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1398.855538][ T5907] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1398.890085][ T30] audit: type=1326 audit(1765470361.501:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1398.959605][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 1398.969322][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1398.998078][ T5917] usb 4-1: USB disconnect, device number 21 [ 1399.045089][ T5907] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1399.053050][ T5907] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1399.071933][ T30] audit: type=1326 audit(1765470361.501:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1399.138500][ T30] audit: type=1326 audit(1765470361.501:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1399.172267][ T2292] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1399.182003][ T2292] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1399.208378][ T30] audit: type=1326 audit(1765470361.501:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1399.232994][ T30] audit: type=1326 audit(1765470361.501:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2247 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbf8138f749 code=0x7ffc0000 [ 1399.333355][ T5907] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1399.354382][ T5907] em28xx 1-1:0.0: No AC97 audio processor [ 1399.383597][T31611] usb 3-1: failed to receive control message: -110 [ 1399.390296][T31611] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1399.410019][ T5907] usb 1-1: USB disconnect, device number 60 [ 1399.429757][ T5907] em28xx 1-1:0.0: Disconnecting em28xx [ 1399.455282][ T5907] em28xx 1-1:0.0: Freeing device [ 1399.750775][ T2299] sg_write: data in/out 2008678009/157 bytes for SCSI command 0xdb-- guessing data in; [ 1399.750775][ T2299] program syz.0.5192 not setting count and/or reply_len properly [ 1400.144115][ T5917] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1400.172548][T31611] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1400.199645][ T2312] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1400.235486][ T2314] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5197'. [ 1400.246693][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5197'. [ 1400.314401][ T5917] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 1400.323522][ T5917] usb 4-1: config 7 has no interface number 0 [ 1400.331843][ T5917] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1400.334229][T31611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.351358][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.352926][T31611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1400.360382][ T5917] usb 4-1: Product: syz [ 1400.366315][T31611] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1400.371506][ T5917] usb 4-1: Manufacturer: syz [ 1400.379981][T31611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.433141][ T5917] usb 4-1: SerialNumber: syz [ 1400.446272][T31611] usb 1-1: config 0 descriptor?? [ 1400.462867][ T5907] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1400.622616][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 1400.637659][ T5892] usb 3-1: USB disconnect, device number 40 [ 1400.645747][ T5907] usb 6-1: config 0 has an invalid interface number: 194 but max is 0 [ 1400.655332][ T5892] ch341 3-1:0.0: device disconnected [ 1400.663360][ T5907] usb 6-1: config 0 has no interface number 0 [ 1400.678428][ T5907] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.03 [ 1400.693509][ T2307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.701952][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.710405][ T5907] usb 6-1: Product: syz [ 1400.715018][ T5907] usb 6-1: Manufacturer: syz [ 1400.719665][ T5907] usb 6-1: SerialNumber: syz [ 1400.725294][ T2307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.773740][ T5907] usb 6-1: config 0 descriptor?? [ 1400.784286][ T5907] cypress_cy7c63 6-1:0.194: Cypress CY7C63xxx device now attached [ 1400.857641][ T2320] vlan0: entered allmulticast mode [ 1400.863384][ T2320] veth0_to_bond: entered allmulticast mode [ 1401.057355][ T2323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.089722][ T2323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.203334][ T2311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.261739][ T2311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.243979][ T2333] ip_vti0: Caught tx_queue_len zero misconfig [ 1402.798488][ T6010] usb 6-1: USB disconnect, device number 5 [ 1402.806331][ T6010] cypress_cy7c63 6-1:0.194: Cypress CY7C63xxx device now disconnected [ 1402.913576][ T5917] as10x_usb: device has been detected [ 1402.926227][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1402.989399][ T5917] usb 4-1: DVB: registering adapter 3 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1403.037858][ T5917] as10x_usb: error during firmware upload part1 [ 1403.047862][ T5917] Registered device Elgato EyeTV DTT Deluxe [ 1403.086338][ T5917] usb 4-1: USB disconnect, device number 22 [ 1403.166822][ T5917] Unregistered device Elgato EyeTV DTT Deluxe [ 1403.171887][ T5917] as10x_usb: device has been disconnected [ 1403.450370][T31611] usbhid 1-1:0.0: can't add hid device: -71 [ 1403.462583][T31605] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1403.488387][T31611] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1403.539231][T31611] usb 1-1: USB disconnect, device number 61 [ 1403.612830][ T5917] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1403.663829][T31605] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 1403.671962][T31605] usb 5-1: config 0 has no interface number 0 [ 1403.692634][T31605] usb 5-1: config 0 interface 98 has no altsetting 0 [ 1403.704637][T31605] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1403.721829][T31605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.733707][T31605] usb 5-1: Product: syz [ 1403.737880][T31605] usb 5-1: Manufacturer: syz [ 1403.742550][T31605] usb 5-1: SerialNumber: syz [ 1403.749819][T31605] usb 5-1: config 0 descriptor?? [ 1403.773294][ T5917] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 1403.805884][ T5917] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1403.827886][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.846275][ T5917] usb 4-1: Product: syz [ 1403.855009][ T5917] usb 4-1: Manufacturer: syz [ 1403.859624][ T5917] usb 4-1: SerialNumber: syz [ 1403.889760][ T5917] usb 4-1: config 0 descriptor?? [ 1403.904687][ T5917] go7007-loader 4-1:0.0: can't handle multiple config [ 1403.927892][ T5917] go7007-loader 4-1:0.0: probe failed [ 1404.010956][T31605] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1404.165119][ T2342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.191540][ T2342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.247974][ T2342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.262277][ T2361] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5208'. [ 1404.289427][ T2342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.326846][ T5917] usb 4-1: USB disconnect, device number 23 [ 1404.642941][ T2370] vlan2: entered allmulticast mode [ 1404.648091][ T2370] veth0_to_bond: entered allmulticast mode [ 1405.125703][T31605] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1405.198747][T31605] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1405.199416][T31611] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1405.232350][T31611] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1405.249928][T31605] usb 5-1: USB disconnect, device number 70 [ 1405.364748][ T2382] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1405.547227][ T2385] picdev_read: 77 callbacks suppressed [ 1405.547284][ T2385] kvm: pic: non byte read [ 1405.564207][ T2385] kvm: pic: non byte read [ 1405.569185][ T2385] kvm: pic: non byte read [ 1405.574452][ T2385] kvm: pic: non byte read [ 1405.580148][ T2385] kvm: pic: non byte read [ 1405.585133][ T2385] kvm: pic: non byte read [ 1405.591282][ T2385] kvm: pic: non byte read [ 1405.597144][ T2385] kvm: pic: non byte read [ 1405.602900][ T2385] kvm: pic: non byte read [ 1405.609727][ T2385] kvm: pic: non byte read [ 1406.496887][ T5892] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1406.668994][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.712063][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1406.759837][ T2401] netlink: 'syz.2.5217': attribute type 33 has an invalid length. [ 1406.767968][ T2401] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5217'. [ 1406.841052][ T5892] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1406.859412][ T2402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5217'. [ 1406.886829][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.924897][ T2404] FAULT_INJECTION: forcing a failure. [ 1406.924897][ T2404] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.927417][ T5892] usb 4-1: Product: syz [ 1406.970718][ T2404] CPU: 0 UID: 0 PID: 2404 Comm: syz.4.5218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.970738][ T2404] Tainted: [L]=SOFTLOCKUP [ 1406.970742][ T2404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1406.970749][ T2404] Call Trace: [ 1406.970759][ T2404] [ 1406.970765][ T2404] dump_stack_lvl+0x189/0x250 [ 1406.970783][ T2404] ? __pfx____ratelimit+0x10/0x10 [ 1406.970797][ T2404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.970809][ T2404] ? __pfx__printk+0x10/0x10 [ 1406.970824][ T2404] ? __pfx___might_resched+0x10/0x10 [ 1406.970835][ T2404] ? fs_reclaim_acquire+0x7d/0x100 [ 1406.970849][ T2404] should_fail_ex+0x414/0x560 [ 1406.970869][ T2404] should_failslab+0xa8/0x100 [ 1406.970883][ T2404] kmem_cache_alloc_noprof+0x88/0x710 [ 1406.970898][ T2404] ? fpu_clone+0x331/0x940 [ 1406.970910][ T2404] ? alloc_pid+0x9d/0xc90 [ 1406.970921][ T2404] ? copy_thread+0x4c6/0x9a0 [ 1406.970932][ T2404] alloc_pid+0x9d/0xc90 [ 1406.970943][ T2404] ? copy_thread+0x74e/0x9a0 [ 1406.970957][ T2404] copy_process+0x18e1/0x3950 [ 1406.970975][ T2404] ? copy_process+0x915/0x3950 [ 1406.970990][ T2404] ? __pfx_copy_process+0x10/0x10 [ 1406.971004][ T2404] ? __pfx_io_wq_worker+0x10/0x10 [ 1406.971016][ T2404] ? __pfx_io_wq_worker+0x10/0x10 [ 1406.971027][ T2404] create_io_thread+0xca/0x120 [ 1406.971039][ T2404] ? __pfx_create_io_thread+0x10/0x10 [ 1406.971054][ T2404] ? __pfx_io_wq_worker+0x10/0x10 [ 1406.971069][ T2404] ? __raw_spin_lock_init+0x45/0x100 [ 1406.971084][ T2404] ? __init_swait_queue_head+0xa9/0x150 [ 1406.971097][ T2404] ? create_io_worker+0x27/0x5c0 [ 1406.971108][ T2404] create_io_worker+0x182/0x5c0 [ 1406.971121][ T2404] io_wq_enqueue+0x62c/0x850 [ 1406.971132][ T2404] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1406.971146][ T2404] io_submit_sqes+0x13a1/0x2140 [ 1406.971173][ T2404] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 1406.971184][ T2404] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1406.971199][ T2404] ? vfs_write+0x956/0xb30 [ 1406.971215][ T2404] ? ksys_write+0x1cb/0x250 [ 1406.971226][ T2404] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1406.971235][ T2404] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1406.971250][ T2404] ? __pfx_vfs_write+0x10/0x10 [ 1406.971261][ T2404] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1406.971278][ T2404] ? __fget_files+0x3a0/0x420 [ 1406.971294][ T2404] ? fput+0xa0/0xd0 [ 1406.971306][ T2404] ? ksys_write+0x22a/0x250 [ 1406.971317][ T2404] ? __pfx_ksys_write+0x10/0x10 [ 1406.971329][ T2404] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1406.971341][ T2404] do_syscall_64+0xfa/0xf80 [ 1406.971356][ T2404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.971366][ T2404] ? clear_bhb_loop+0x60/0xb0 [ 1406.971379][ T2404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.971388][ T2404] RIP: 0033:0x7f1abe38f749 [ 1406.971398][ T2404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.971407][ T2404] RSP: 002b:00007f1abf181038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1406.971419][ T2404] RAX: ffffffffffffffda RBX: 00007f1abe5e5fa0 RCX: 00007f1abe38f749 [ 1406.971427][ T2404] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 1406.971433][ T2404] RBP: 00007f1abf181090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.971440][ T2404] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 1406.971446][ T2404] R13: 00007f1abe5e6038 R14: 00007f1abe5e5fa0 R15: 00007f1abe70fa28 [ 1406.971463][ T2404] [ 1406.971564][ T5892] usb 4-1: Manufacturer: syz [ 1407.330593][ T5892] usb 4-1: SerialNumber: syz [ 1407.340440][ T5892] usb 4-1: config 0 descriptor?? [ 1407.351601][ T5892] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1407.389792][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1407.404524][ T5892] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1407.415408][ T5892] usb 4-1: media controller created [ 1407.425945][ T2409] netlink: 'syz.5.5219': attribute type 12 has an invalid length. [ 1407.461323][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1407.641022][ T2416] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5220'. [ 1407.680738][ T5892] DVB: Unable to find symbol tda10046_attach() [ 1407.700025][ T5892] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1407.753759][ T5892] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1407.784279][ T5892] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1407.832565][ T5892] usb 4-1: USB disconnect, device number 24 [ 1407.951937][ T2420] ip6tnl0: Caught tx_queue_len zero misconfig [ 1407.999607][ T2421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5222'. [ 1408.304979][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1408.304996][ T30] audit: type=1326 audit(1765470371.171:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2426 comm="syz.3.5225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc9298f749 code=0x0 [ 1409.424145][ T2449] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5228'. [ 1410.544475][ T2465] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5231'. [ 1410.822860][ T3755] wlan0: Trigger new scan to find an IBSS to join [ 1412.211205][ T2507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5239'. [ 1412.242325][ T2507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5239'. [ 1412.707322][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5242'. [ 1412.718495][ T2521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5242'. [ 1413.698966][ T2545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5248'. [ 1413.747292][ T2545] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5248' sets config #1 [ 1414.032577][T31613] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1414.112612][ T5892] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1414.233838][T31613] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1414.262598][T31613] usb 5-1: config 0 has no interface number 0 [ 1414.270752][T31613] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d [ 1414.283060][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 1414.283110][T31613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.296509][ T5892] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1414.304148][T31613] usb 5-1: Product: syz [ 1414.319539][T31613] usb 5-1: Manufacturer: syz [ 1414.326452][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.334008][T31613] usb 5-1: SerialNumber: syz [ 1414.342750][ T5892] usb 4-1: Product: syz [ 1414.342769][ T5892] usb 4-1: Manufacturer: syz [ 1414.342783][ T5892] usb 4-1: SerialNumber: syz [ 1414.354135][ T5892] usb 4-1: config 0 descriptor?? [ 1414.363362][T31613] usb 5-1: config 0 descriptor?? [ 1414.383978][T31613] usbtest 5-1:0.85: Linux gadget zero [ 1414.388960][ T5892] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1414.389376][T31613] usbtest 5-1:0.85: high-speed {control in/out int-out} tests (+alt) [ 1414.572862][ T2567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5252'. [ 1414.685613][ T6010] usb 5-1: USB disconnect, device number 71 [ 1414.793486][ T74] wlan0: Trigger new scan to find an IBSS to join [ 1414.799997][T31613] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1415.033307][ T5892] gspca_sonixj: reg_r err -71 [ 1415.044544][ T5892] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1415.116958][ T5892] usb 4-1: USB disconnect, device number 25 [ 1415.153856][T31613] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1415.200901][T31623] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1415.214908][T31623] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1415.249900][T31613] usb 6-1: config 0 interface 0 has no altsetting 1 [ 1415.354210][T31613] usb 6-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1415.402545][T31613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1415.467738][T31613] usb 6-1: Product: syz [ 1415.528417][T31613] usb 6-1: Manufacturer: syz [ 1415.562475][T31613] usb 6-1: SerialNumber: syz [ 1415.580758][T31613] usb 6-1: config 0 descriptor?? [ 1415.792612][T31623] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1415.881375][ T5892] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1415.893424][T26736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.953499][T31623] usb 5-1: Using ep0 maxpacket: 16 [ 1415.972720][T31623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1415.985341][T31623] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1416.025193][T31623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1416.036113][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 1416.056705][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.079589][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.101166][T31623] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1416.140679][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1416.156739][T31623] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1416.165968][T31623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.181632][ T5892] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1416.191701][T31623] usb 5-1: Product: syz [ 1416.196242][T31623] usb 5-1: Manufacturer: syz [ 1416.211487][T31623] usb 5-1: SerialNumber: syz [ 1416.221558][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.238549][T31623] usb 5-1: config 0 descriptor?? [ 1416.252107][ T5892] usb 3-1: config 0 descriptor?? [ 1416.268901][ T2580] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1416.298035][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 1416.318837][T31623] port100 5-1:0.0: NFC: Could not get supported command types [ 1416.702129][ T5892] input: HID 0955:7214 Haptics as /devices/virtual/input/input131 [ 1416.899515][ T5892] shield 0003:0955:7214.004F: Registered Thunderstrike controller [ 1416.936832][ T5892] shield 0003:0955:7214.004F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1416.990980][ T2596] random: crng reseeded on system resumption [ 1417.015092][T31605] usb 5-1: USB disconnect, device number 72 [ 1417.250622][ T5907] shield 0003:0955:7214.004F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1417.263577][T31623] usb 3-1: USB disconnect, device number 41 [ 1417.291280][ T5907] shield 0003:0955:7214.004F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1417.304464][ T5907] shield 0003:0955:7214.004F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1417.319399][ T5907] shield 0003:0955:7214.004F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1417.661483][T31613] usb 6-1: USB disconnect, device number 6 [ 1417.684776][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1417.772645][T31605] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1417.775357][ T2610] kvm_intel: kvm [2609]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9149000000000001 [ 1417.943913][T31605] usb 4-1: Using ep0 maxpacket: 32 [ 1417.961981][T31605] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1417.977331][T31605] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1418.010054][T31605] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1418.059643][T31605] usb 4-1: config 1 has no interface number 0 [ 1418.066541][T31605] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1418.107384][ T2618] loop5: detected capacity change from 0 to 7 [ 1418.111788][T31605] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1418.128311][T31605] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1418.131306][ T2618] Dev loop5: unable to read RDB block 7 [ 1418.142505][T31605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.167047][ T2618] loop5: unable to read partition table [ 1418.183178][ T2618] loop5: partition table beyond EOD, truncated [ 1418.207989][T31605] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1418.210999][ T2618] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1418.396659][T31605] snd_usb_pod 4-1:1.1: invalid control EP [ 1418.416886][T31605] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1418.432772][T31605] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1418.474012][T31605] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1418.607165][T31605] usb 4-1: USB disconnect, device number 26 [ 1418.772690][T31613] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1418.923995][T31613] usb 1-1: Using ep0 maxpacket: 16 [ 1418.931505][T31613] usb 1-1: config 194 has an invalid interface number: 102 but max is 2 [ 1418.940486][T31613] usb 1-1: config 194 has 2 interfaces, different from the descriptor's value: 3 [ 1418.952914][T31613] usb 1-1: config 194 has no interface number 1 [ 1418.960431][T31613] usb 1-1: config 194 interface 0 has no altsetting 1 [ 1418.992959][T31613] usb 1-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 1419.010957][T31613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.026157][T31613] usb 1-1: Product: syz [ 1419.034753][T31613] usb 1-1: Manufacturer: syz [ 1419.042633][T31613] usb 1-1: SerialNumber: syz [ 1419.471288][ T2641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.481968][ T2641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.505461][T31613] qmi_wwan 1-1:194.0: probe with driver qmi_wwan failed with error -22 [ 1419.520450][T31613] usb 1-1: unknown number of interfaces: 2 [ 1419.706520][T31623] usb 1-1: USB disconnect, device number 62 [ 1419.842538][T31613] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1419.988451][ T2665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5276'. [ 1420.024790][T31613] usb 4-1: too many configurations: 229, using maximum allowed: 8 [ 1420.061397][T31613] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1420.083748][T31613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.105159][T31613] usb 4-1: Product: syz [ 1420.109349][T31613] usb 4-1: Manufacturer: syz [ 1420.379598][ T2679] loop5: detected capacity change from 0 to 7 [ 1420.407955][ T2679] Dev loop5: unable to read RDB block 7 [ 1420.423181][T31613] usb 4-1: SerialNumber: syz [ 1420.454553][ T2679] loop5: unable to read partition table [ 1420.457339][T31613] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1420.469998][ T2679] loop5: partition table beyond EOD, truncated [ 1420.484390][T31605] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1420.488433][ T2679] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1420.682604][T31613] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1420.852524][T31613] usb 6-1: Using ep0 maxpacket: 8 [ 1420.863541][T31613] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1420.873002][T31613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.881436][T31613] usb 6-1: Product: syz [ 1420.886195][T31613] usb 6-1: Manufacturer: syz [ 1420.939354][T31613] usb 6-1: SerialNumber: syz [ 1421.091062][T31613] usb 6-1: config 0 descriptor?? [ 1421.104542][T31613] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1421.192763][ T5907] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1421.307469][ T2682] loop9: detected capacity change from 0 to 7 [ 1421.316894][ T2682] Dev loop9: unable to read RDB block 7 [ 1421.333361][ T5892] usb 4-1: USB disconnect, device number 27 [ 1421.352946][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 1421.371191][ T2682] loop9: unable to read partition table [ 1421.381718][ T5907] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1421.393063][ T2682] loop9: partition table beyond EOD, truncated [ 1421.399445][ T5907] usb 5-1: config 0 has no interface number 0 [ 1421.405843][ T2682] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1421.419868][ T5907] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1421.429136][T31623] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1421.438272][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.441430][T31613] gspca_vc032x: reg_r err -71 [ 1421.457597][ T5907] usb 5-1: Product: syz [ 1421.461770][ T5907] usb 5-1: Manufacturer: syz [ 1421.467395][ T5907] usb 5-1: SerialNumber: syz [ 1421.484043][T31613] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 1421.486143][ T5907] usb 5-1: config 0 descriptor?? [ 1421.495233][T31613] usb 6-1: USB disconnect, device number 7 [ 1421.594867][T31623] usb 1-1: config 0 has no interfaces? [ 1421.605046][T31623] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1421.622860][T31623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.630889][T31623] usb 1-1: Product: syz [ 1421.651251][T31623] usb 1-1: Manufacturer: syz [ 1421.657440][T31623] usb 1-1: SerialNumber: syz [ 1421.674198][T31623] usb 1-1: config 0 descriptor?? [ 1421.723918][ T2694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.737266][ T2694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.074959][ T2706] bond1: option all_slaves_active: invalid value (9) [ 1422.093893][ T2706] bond1 (unregistering): Released all slaves [ 1422.183695][T31605] usb 4-1: Service connection timeout for: 258 [ 1422.183720][T31605] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1422.184311][T31605] ath9k_htc: Failed to initialize the device [ 1422.191469][ T5892] usb 4-1: ath9k_htc: USB layer deinitialized [ 1422.336776][ T2714] [U]  [ 1422.348212][ T2714] [U] K{ [ 1422.355151][ T2714] [U] T 1ŠFFˊ`GJǘGO/MC [ 1422.367290][ T2714] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1422.410038][ T2714] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1422.471285][ T2714] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1422.539856][ T2714] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1422.583473][ T2714] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1422.596411][ T2714] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1422.615942][ T2714] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1422.843320][ T2714] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1422.863066][ T2714] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1422.884689][ T2714] [U] 22Ʃ۩X?0;3U [ 1422.894737][T31605] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1422.911431][T31605] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.913975][ T2714] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1422.924891][T31605] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1422.964461][T31605] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1422.973153][T31605] usb 6-1: Manufacturer: syz [ 1422.986654][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.999754][T27712] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1423.010592][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.025501][T31605] usb 6-1: config 0 descriptor?? [ 1423.026590][ T2714] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1423.067751][ T2714] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1423.104818][ T2714] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1423.106974][T31605] rc_core: IR keymap rc-hauppauge not found [ 1423.118410][ T2714] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1423.125566][T31605] Registered IR keymap rc-empty [ 1423.142197][T31605] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1423.159674][T31605] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input132 [ 1423.186014][ T2714] [U] EC [ 1423.201604][ T2714] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1423.446175][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1423.469055][T31623] usb 6-1: USB disconnect, device number 8 [ 1423.477619][ T2713] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1423.643390][T31605] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1423.714057][ T5917] usb 1-1: USB disconnect, device number 63 [ 1423.802712][T31605] usb 3-1: Using ep0 maxpacket: 32 [ 1423.810854][T31605] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.832721][T31605] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1423.855101][T31605] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1423.871580][T31605] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1423.879569][ T5907] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1423.887601][T31605] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1423.896555][ T5907] uvcvideo 5-1:0.31: No valid video chain found. [ 1423.905176][T31605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.933057][ T5907] usb 5-1: USB disconnect, device number 73 [ 1423.956069][T31605] usb 3-1: Product: syz [ 1423.967171][T31605] usb 3-1: Manufacturer: syz [ 1423.973447][T31605] usb 3-1: SerialNumber: syz [ 1423.989544][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1423.996847][T31612] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1424.042684][T31605] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input133 [ 1424.180653][T30522] vivid-000: reconnect [ 1424.192690][T31612] usb 4-1: Using ep0 maxpacket: 16 [ 1424.199522][ T2740] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5293'. [ 1424.218543][T31612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.259651][T31612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1424.273657][T31605] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1424.281960][T31605] (id 0x00) [ 1424.303495][T31612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1424.342708][T31612] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1424.356116][ T2760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1424.368108][ T2761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5298'. [ 1424.372523][T31612] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1424.400145][T28126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1424.410764][T28126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1424.416154][T31612] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1424.419516][T28126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1424.427158][T31605] rc_core: IR keymap rc-imon-pad not found [ 1424.435456][T28126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1424.447924][T31605] Registered IR keymap rc-empty [ 1424.449014][T28126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1424.463460][T31612] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1424.492757][T31605] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1424.506194][T31612] usb 4-1: Manufacturer: syz [ 1424.525968][T31612] usb 4-1: config 0 descriptor?? [ 1424.568011][T31605] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1424.586985][ T2769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5299'. [ 1424.644357][T31605] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1424.684531][T31605] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input134 [ 1424.737993][T31605] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:42> initialized [ 1424.815011][ T5892] usb 3-1: USB disconnect, device number 42 [ 1425.098308][ T2768] chnl_net:caif_netlink_parms(): no params data found [ 1425.157899][ T2777] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1425.497297][ T2786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5301'. [ 1425.551173][T27712] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 1425.652195][ T2768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.701002][ T2768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.710411][ T2768] bridge_slave_0: entered allmulticast mode [ 1425.725855][ T2768] bridge_slave_0: entered promiscuous mode [ 1425.823539][T31613] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1425.860021][ T2768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.875434][ T2768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.887904][ T2768] bridge_slave_1: entered allmulticast mode [ 1425.906646][ T2768] bridge_slave_1: entered promiscuous mode [ 1425.973276][T31613] usb 3-1: Using ep0 maxpacket: 8 [ 1425.979920][T31613] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1425.993918][T31613] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1426.001642][T31613] usb 3-1: can't read configurations, error -61 [ 1426.154166][T31613] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1426.187287][ T2768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.261501][ T2768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.312616][T31613] usb 3-1: Using ep0 maxpacket: 8 [ 1426.319841][T31613] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1426.353807][T31613] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1426.372805][T31613] usb 3-1: can't read configurations, error -61 [ 1426.380730][T31613] usb usb3-port1: attempt power cycle [ 1426.503229][T28126] Bluetooth: hci5: command tx timeout [ 1426.742646][T31613] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1426.764058][T31613] usb 3-1: Using ep0 maxpacket: 8 [ 1426.778639][T31613] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1426.805090][T31613] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1426.834891][ T5907] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1426.843520][T31613] usb 3-1: can't read configurations, error -61 [ 1426.972729][T31613] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1426.992653][T31612] rc_core: IR keymap rc-hauppauge not found [ 1426.998625][T31612] Registered IR keymap rc-empty [ 1427.004923][T31613] usb 3-1: Using ep0 maxpacket: 8 [ 1427.011151][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.025024][T31613] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 1427.096600][T31613] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1427.105940][T31613] usb 3-1: can't read configurations, error -61 [ 1427.112844][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.126208][T31613] usb usb3-port1: unable to enumerate USB device [ 1427.134036][T31612] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1427.155450][T31612] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input135 [ 1427.177360][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.216818][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.242685][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.262665][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.282644][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.313620][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.343570][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.382963][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.416619][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.453472][T31612] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.485031][T31612] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1427.494156][T31612] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1427.505188][ T5907] usb 6-1: device descriptor read/64, error -71 [ 1427.527266][T31612] usb 4-1: USB disconnect, device number 28 [ 1427.626207][ T3755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.678082][ T5892] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 1427.689217][ T5892] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1427.704849][ T3755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.734550][ T3755] bond0 (unregistering): Released all slaves [ 1427.742604][ T5907] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1427.893037][T31612] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1427.895242][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 1427.922884][ T5907] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 1427.931330][ T5907] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.944335][ T5907] usb 6-1: config 135 has no interface number 0 [ 1427.950631][ T5907] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1427.994121][ T5907] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1428.020254][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.029184][ T5907] usb 6-1: Product: syz [ 1428.048683][ T5907] usb 6-1: Manufacturer: syz [ 1428.058500][ T5907] usb 6-1: SerialNumber: syz [ 1428.109813][ T5907] uvcvideo 6-1:135.230: Found Unit with invalid ID 0 [ 1428.151022][ T5907] uvcvideo 6-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 1428.168344][ T5907] uvcvideo 6-1:135.230: No valid video chain found. [ 1428.169080][T31612] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1428.213246][T31612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.221514][T31612] usb 4-1: Product: syz [ 1428.226244][T31612] usb 4-1: Manufacturer: syz [ 1428.230868][T31612] usb 4-1: SerialNumber: syz [ 1428.245202][ T3755] bond1 (unregistering): Released all slaves [ 1428.408236][ T2832] create_pit_timer: 3 callbacks suppressed [ 1428.408254][ T2832] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1428.527555][ T3755] bond2 (unregistering): Released all slaves [ 1428.583016][T28126] Bluetooth: hci5: command tx timeout [ 1428.827757][ T3755] bond3 (unregistering): Released all slaves [ 1428.846117][ T3755] bond4 (unregistering): Released all slaves [ 1429.002007][T31612] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1429.022844][T31612] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1429.045680][T31612] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1429.057560][T31612] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1429.068035][ T3755] bond5 (unregistering): Released all slaves [ 1429.076113][T31612] usb 4-1: USB disconnect, device number 29 [ 1429.243063][ T3755] bond6 (unregistering): Released all slaves [ 1429.275774][ T2768] team0: Port device team_slave_0 added [ 1429.288207][ T2845] geneve0: Caught tx_queue_len zero misconfig [ 1429.309451][ T2768] team0: Port device team_slave_1 added [ 1429.361524][ T2768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.369534][ T2768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.410034][ T2768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.436634][ T2768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.461730][ T2768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.490826][ T2768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.507769][ T3755] tipc: Disabling bearer [ 1429.525386][ T3755] tipc: Left network mode [ 1429.890259][ T30] audit: type=1326 audit(1765470392.761:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1429.996531][ T30] audit: type=1326 audit(1765470392.861:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1430.059417][ T2768] hsr_slave_0: entered promiscuous mode [ 1430.095027][ T2768] hsr_slave_1: entered promiscuous mode [ 1430.101511][ T2768] debugfs: 'hsr0' already exists in 'hsr' [ 1430.114369][ T2768] Cannot create hsr debugfs directory [ 1430.120083][ T30] audit: type=1326 audit(1765470392.861:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1430.174471][ T30] audit: type=1326 audit(1765470392.861:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1430.432954][T31605] usb 6-1: USB disconnect, device number 10 [ 1430.480210][ T30] audit: type=1326 audit(1765470392.861:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1430.621527][ T30] audit: type=1326 audit(1765470392.861:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1430.795275][T28126] Bluetooth: hci5: command tx timeout [ 1430.942165][ T30] audit: type=1326 audit(1765470392.861:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1431.021097][ T30] audit: type=1326 audit(1765470392.861:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1431.087064][ T30] audit: type=1326 audit(1765470392.861:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1431.163763][ T30] audit: type=1326 audit(1765470392.861:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2850 comm="syz.3.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1431.894765][ T3755] team0 (unregistering): Port device team_slave_1 removed [ 1431.946164][ T3755] team0 (unregistering): Port device team_slave_0 removed [ 1432.716780][ T2891] netlink: 'syz.3.5314': attribute type 2 has an invalid length. [ 1432.796239][T31612] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1432.823201][T28126] Bluetooth: hci5: command tx timeout [ 1432.968891][T31612] usb 1-1: device descriptor read/64, error -71 [ 1433.228059][T31612] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1433.372682][T31612] usb 1-1: device descriptor read/64, error -71 [ 1433.441019][ T3755] IPVS: stop unused estimator thread 0... [ 1433.513009][T31612] usb usb1-port1: attempt power cycle [ 1433.852866][T31612] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1433.926452][T31612] usb 1-1: device descriptor read/8, error -71 [ 1433.964862][ T2768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1433.999327][ T2768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1434.078619][ T2768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1434.125078][ T2768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1434.193722][T31612] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1434.233730][T31612] usb 1-1: device descriptor read/8, error -71 [ 1434.352925][ T5892] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1434.356406][T31612] usb usb1-port1: unable to enumerate USB device [ 1434.533676][ T5892] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1434.547445][ T2768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.556634][ T5892] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1434.595350][ T5892] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1434.610934][ T2768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.630213][ T5892] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1434.667013][T26813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.673141][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.674184][T26813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.707235][ T2956] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1435.048056][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.055290][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.600185][ T2989] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1435.774088][ T2989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1435.863567][ T2768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1435.897771][ T2768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1436.020610][ T2996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.032637][ T2989] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1436.054732][ T2996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.234011][ T2768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.389754][ T2768] veth0_vlan: entered promiscuous mode [ 1436.410516][ T2768] veth1_vlan: entered promiscuous mode [ 1436.448294][ T2768] veth0_macvtap: entered promiscuous mode [ 1436.462193][ T2768] veth1_macvtap: entered promiscuous mode [ 1436.525361][ T2768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.555866][ T2768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.582390][T26668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.600726][T26668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.630078][T26668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.649028][T26668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.695979][ T5892] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1436.706948][ T5892] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input136 [ 1436.872299][ T5892] usb 6-1: USB disconnect, device number 11 [ 1436.878330][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1436.923491][ T3755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.943050][ T3755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.148850][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.182511][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.503052][ T5892] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1437.646846][ T3034] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5334'. [ 1437.723935][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 1437.736467][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1437.746808][ T5892] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 1437.765695][ T5892] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.806498][ T5892] usb 1-1: config 4 has no interface number 0 [ 1437.847647][ T5892] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1437.906287][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.925077][ T3042] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5334'. [ 1437.942372][ T5892] usb 1-1: Product: syz [ 1437.960059][ T5892] usb 1-1: Manufacturer: syz [ 1437.965460][ T5892] usb 1-1: SerialNumber: syz [ 1438.230825][ T5892] uvcvideo 1-1:4.147: probe with driver uvcvideo failed with error -22 [ 1438.265291][ T5892] usb 1-1: USB disconnect, device number 68 [ 1438.290311][T29552] udevd[29552]: setting owner of /dev/bus/usb/001/068 to uid=0, gid=0 failed: No such file or directory [ 1438.422962][ T3028] loop6: detected capacity change from 0 to 524288000 [ 1438.450885][ T3028] loop6: unable to read partition table [ 1438.527531][ T3028] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 1440.267117][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1440.267129][ T30] audit: type=1326 audit(1765470403.141:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3074 comm="syz.2.5341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8138f749 code=0x0 [ 1440.447829][ T30] audit: type=1326 audit(1765470403.311:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3076 comm="syz.3.5342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc9298f749 code=0x0 [ 1440.725073][ T3093] loop6: detected capacity change from 0 to 524288000 [ 1440.754720][ T3094] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5343'. [ 1440.863100][ T3096] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5344'. [ 1441.180229][ T3094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5343'. [ 1441.207914][ T3094] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1441.692568][ T5892] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1441.703090][T31612] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1441.882820][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 1441.883275][T31612] usb 4-1: Using ep0 maxpacket: 32 [ 1441.893400][ T5892] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1441.914694][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.920653][T31612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.958933][T31612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1442.072565][T31612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1442.083454][ T5892] usb 5-1: Product: syz [ 1442.087702][ T5892] usb 5-1: Manufacturer: syz [ 1442.098135][T31612] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1442.122526][T31612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1442.133980][T31612] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1442.149266][T31612] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1442.162970][T31612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1442.172416][ T5892] usb 5-1: SerialNumber: syz [ 1442.183108][T31612] usb 4-1: Product: syz [ 1442.191397][T31612] usb 4-1: Manufacturer: syz [ 1442.196525][T31612] usb 4-1: SerialNumber: syz [ 1442.202592][ T5917] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1442.205561][T31612] usb 4-1: config 0 descriptor?? [ 1442.218940][T31612] usb 4-1: no audio or video endpoints found [ 1442.280702][ T5892] usb 5-1: config 0 descriptor?? [ 1442.314497][ T3112] loop5: detected capacity change from 0 to 2063 [ 1442.314889][ T5892] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1442.322402][T29552] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1442.373611][ T3112] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1442.382898][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1442.392596][ T5917] usb 6-1: config 0 has no interfaces? [ 1442.401186][ T5917] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1442.413516][ T5917] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1442.442348][T29552] Buffer I/O error on dev loop5, logical block 257, async page read [ 1442.442386][ T5917] usb 6-1: Manufacturer: syz [ 1442.465570][T31612] usb 4-1: USB disconnect, device number 30 [ 1442.556504][ T5917] usb 6-1: config 0 descriptor?? [ 1442.579279][ T3103] loop9: detected capacity change from 0 to 7 [ 1442.593990][ T3103] Dev loop9: unable to read RDB block 7 [ 1442.599648][ T3103] loop9: unable to read partition table [ 1442.625671][ T3103] loop9: partition table beyond EOD, truncated [ 1442.636884][T29552] Buffer I/O error on dev loop5, logical block 257, async page read [ 1442.661032][ T3103] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1442.711768][ T5892] gspca_vc032x: reg_r err -71 [ 1442.725436][ T5892] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1442.738459][T29552] Buffer I/O error on dev loop5, logical block 257, async page read [ 1442.752400][ T3114] FAULT_INJECTION: forcing a failure. [ 1442.752400][ T3114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1442.774229][ T5892] usb 5-1: USB disconnect, device number 74 [ 1442.786105][ T3114] CPU: 1 UID: 0 PID: 3114 Comm: syz.0.5350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.786130][ T3114] Tainted: [L]=SOFTLOCKUP [ 1442.786134][ T3114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1442.786141][ T3114] Call Trace: [ 1442.786147][ T3114] [ 1442.786152][ T3114] dump_stack_lvl+0x189/0x250 [ 1442.786170][ T3114] ? __pfx____ratelimit+0x10/0x10 [ 1442.786184][ T3114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.786196][ T3114] ? __pfx__printk+0x10/0x10 [ 1442.786211][ T3114] ? __might_fault+0xb0/0x130 [ 1442.786231][ T3114] should_fail_ex+0x414/0x560 [ 1442.786256][ T3114] _copy_from_iter+0x1cd/0x1630 [ 1442.786270][ T3114] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1442.786287][ T3114] ? policy_nodemask+0x27c/0x720 [ 1442.786298][ T3114] ? __pfx__copy_from_iter+0x10/0x10 [ 1442.786321][ T3114] ? set_page_refcounted+0xa0/0x1e0 [ 1442.786332][ T3114] ? page_copy_sane+0x4e/0x280 [ 1442.786347][ T3114] copy_page_from_iter+0xdd/0x170 [ 1442.786363][ T3114] tun_get_user+0x1d40/0x3dc0 [ 1442.786376][ T3114] ? tun_get_user+0x6fc/0x3dc0 [ 1442.786392][ T3114] ? aa_file_perm+0x44c/0x1530 [ 1442.786404][ T3114] ? __pfx_tun_get_user+0x10/0x10 [ 1442.786415][ T3114] ? __lock_acquire+0x6b6/0x2cf0 [ 1442.786428][ T3114] ? kstrtoull+0x12f/0x1d0 [ 1442.786444][ T3114] ? ref_tracker_alloc+0x318/0x460 [ 1442.786459][ T3114] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1442.786475][ T3114] ? tun_get+0x1c/0x2f0 [ 1442.786488][ T3114] ? tun_get+0x1c/0x2f0 [ 1442.786497][ T3114] ? tun_get+0x1c/0x2f0 [ 1442.786509][ T3114] tun_chr_write_iter+0x113/0x200 [ 1442.786521][ T3114] vfs_write+0x5c9/0xb30 [ 1442.786533][ T3114] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1442.786544][ T3114] ? __pfx_vfs_write+0x10/0x10 [ 1442.786559][ T3114] ? __fget_files+0x2a/0x420 [ 1442.786575][ T3114] ksys_write+0x145/0x250 [ 1442.786586][ T3114] ? __pfx_ksys_write+0x10/0x10 [ 1442.786598][ T3114] ? do_syscall_64+0xbe/0xf80 [ 1442.786614][ T3114] do_syscall_64+0xfa/0xf80 [ 1442.786629][ T3114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.786639][ T3114] ? clear_bhb_loop+0x60/0xb0 [ 1442.786650][ T3114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.786660][ T3114] RIP: 0033:0x7f90f0b8e1ff [ 1442.786671][ T3114] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1442.786680][ T3114] RSP: 002b:00007f90eedf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1442.786692][ T3114] RAX: ffffffffffffffda RBX: 00007f90f0de5fa0 RCX: 00007f90f0b8e1ff [ 1442.786699][ T3114] RDX: 000000000000007e RSI: 0000200000000680 RDI: 00000000000000c8 [ 1442.786706][ T3114] RBP: 00007f90eedf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.786716][ T3114] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 1442.786722][ T3114] R13: 00007f90f0de6038 R14: 00007f90f0de5fa0 R15: 00007f90f0f0fa28 [ 1442.786738][ T3114] [ 1443.460949][ T5200] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1443.589536][ T30] audit: type=1326 audit(1765470406.461:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1443.653547][ T30] audit: type=1326 audit(1765470406.461:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1443.766346][ T30] audit: type=1326 audit(1765470406.491:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1443.853269][ T30] audit: type=1326 audit(1765470406.491:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1443.897901][ T30] audit: type=1326 audit(1765470406.491:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1443.981355][ T30] audit: type=1326 audit(1765470406.491:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1444.075987][ T3135] loop5: detected capacity change from 0 to 7 [ 1444.084368][ T3135] Dev loop5: unable to read RDB block 7 [ 1444.097528][ T3135] loop5: unable to read partition table [ 1444.116640][ T3135] loop5: partition table beyond EOD, truncated [ 1444.131121][ T3135] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1444.147145][ T30] audit: type=1326 audit(1765470406.491:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9298f749 code=0x7ffc0000 [ 1444.230575][ T30] audit: type=1326 audit(1765470406.491:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc92991667 code=0x7ffc0000 [ 1444.614979][ T3145] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5360'. [ 1444.905894][ T3152] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1445.492542][T31613] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1445.603622][ T5917] usb 6-1: USB disconnect, device number 12 [ 1445.652517][T31613] usb 5-1: Using ep0 maxpacket: 8 [ 1445.679864][T31613] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1445.694467][T31613] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1445.755269][T31613] usb 5-1: config 1 has no interface number 1 [ 1445.762874][T31613] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1445.777322][T31613] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 1445.867433][T31613] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1445.930671][T31613] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1445.949807][T31613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.973199][T31613] usb 5-1: Product: syz [ 1445.982490][T31613] usb 5-1: Manufacturer: syz [ 1445.993037][T31613] usb 5-1: SerialNumber: syz [ 1445.995441][ T3166] netlink: 'syz.5.5365': attribute type 10 has an invalid length. [ 1446.015950][ T3166] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1446.239535][T31613] usb 5-1: 0:8 : does not exist [ 1446.281519][T31613] usb 5-1: USB disconnect, device number 75 [ 1446.345283][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1446.663058][ T5892] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1446.789088][ T3179] loop5: detected capacity change from 0 to 7 [ 1446.806618][ T3179] Dev loop5: unable to read RDB block 7 [ 1446.816779][ T3179] loop5: unable to read partition table [ 1446.822566][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 1446.823824][ T3179] loop5: partition table beyond EOD, truncated [ 1446.866003][ T3179] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1446.924714][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1446.949174][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.958412][ T5892] usb 3-1: Product: syz [ 1446.963002][ T5892] usb 3-1: Manufacturer: syz [ 1446.968816][ T5892] usb 3-1: SerialNumber: syz [ 1447.123325][ T5892] usb 3-1: config 0 descriptor?? [ 1447.140988][ T5892] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1447.356120][ T3189] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1447.364397][ T3189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1447.372926][ T3189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1447.379903][ T3189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1447.382620][T31605] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1447.405049][ T3168] loop9: detected capacity change from 0 to 7 [ 1447.411565][ T3189] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1447.418701][ T3194] Dev loop9: unable to read RDB block 7 [ 1447.434851][ T3189] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1447.447016][ T3194] loop9: unable to read partition table [ 1447.489731][ T3194] loop9: partition table beyond EOD, truncated [ 1447.523419][ T3168] Dev loop9: unable to read RDB block 7 [ 1447.532837][ T3168] loop9: unable to read partition table [ 1447.539316][ T3189] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1447.565489][ T3168] loop9: partition table beyond EOD, truncated [ 1447.580665][ T3168] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1447.600135][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1447.600159][ T30] audit: type=1326 audit(1765470410.451:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3192 comm="syz.4.5371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd233b8f749 code=0x0 [ 1447.653395][ T5892] gspca_vc032x: reg_r err -110 [ 1447.687680][T31605] usb 4-1: config 252 has an invalid interface number: 191 but max is 0 [ 1447.696320][T31605] usb 4-1: config 252 has no interface number 0 [ 1447.715707][ T5892] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 1447.744619][T31605] usb 4-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 1447.758942][T31605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.767910][ T5892] usb 3-1: USB disconnect, device number 47 [ 1447.782870][T31605] usb 4-1: Product: syz [ 1447.794108][T31605] usb 4-1: Manufacturer: syz [ 1447.804558][T31605] usb 4-1: SerialNumber: syz [ 1447.827287][T31605] usb-storage 4-1:252.191: USB Mass Storage device detected [ 1447.847062][T31605] usb-storage 4-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 1447.944046][ T3786] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1449.303321][T28126] Bluetooth: hci4: command 0x0c1a tx timeout [ 1449.383382][ T2023] Bluetooth: hci3: command 0x0406 tx timeout [ 1449.389477][T28126] Bluetooth: hci0: command 0x0406 tx timeout [ 1449.395671][ T2023] Bluetooth: hci1: command 0x0406 tx timeout [ 1449.472832][T29631] Bluetooth: hci5: command 0x0c1a tx timeout [ 1449.514353][ T5917] usb 4-1: USB disconnect, device number 31 [ 1449.632896][ T5907] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1449.652979][ T5892] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1449.849153][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.866935][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.878320][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.902001][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.989231][ T5907] usb 3-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 1450.002497][ T5892] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1450.023042][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.034970][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.063702][ T5907] usb 3-1: config 0 descriptor?? [ 1450.085994][ T5892] usb 5-1: config 0 descriptor?? [ 1450.297284][ T3218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.309774][ T3218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.498873][ T5907] usbhid 3-1:0.0: can't add hid device: -71 [ 1450.524286][ T5892] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1450.549324][ T5907] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1450.563263][ T5892] cp2112 0003:10C4:EA90.0051: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1450.600591][ T5907] usb 3-1: USB disconnect, device number 48 [ 1450.718997][ T5892] cp2112 0003:10C4:EA90.0051: Part Number: 0x00 Device Version: 0x00 [ 1450.963393][ T3237] loop5: detected capacity change from 0 to 7 [ 1450.971205][ T3237] Dev loop5: unable to read RDB block 7 [ 1450.977192][ T3237] loop5: unable to read partition table [ 1450.987285][ T3237] loop5: partition table beyond EOD, truncated [ 1451.002828][ T5907] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1451.012630][ T3237] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1451.173688][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 1451.196717][ T5907] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1451.216712][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1451.243108][ T5907] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1451.273789][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1451.295112][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1451.321976][ T5907] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1451.343564][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1451.356922][ T5892] cp2112 0003:10C4:EA90.0051: error reading lock byte: -71 [ 1451.386349][ T5892] usb 5-1: USB disconnect, device number 76 [ 1451.396512][ T5907] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1451.408604][T31621] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1451.445270][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1451.511268][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1451.536635][ T5907] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1451.542856][T29631] Bluetooth: hci5: command 0x0c1a tx timeout [ 1451.561147][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1451.586953][ T5907] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1451.598875][T31621] usb 1-1: Using ep0 maxpacket: 8 [ 1451.614605][T31621] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1451.630965][T31621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.642158][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1451.665781][T31621] usb 1-1: Product: syz [ 1451.672204][ T5907] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1451.682711][T31623] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1451.692544][T31621] usb 1-1: Manufacturer: syz [ 1451.703135][T31621] usb 1-1: SerialNumber: syz [ 1451.714289][ T5907] usb 4-1: string descriptor 0 read error: -22 [ 1451.722062][T31621] usb 1-1: config 0 descriptor?? [ 1451.727697][ T5907] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1451.741600][T31621] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1451.748733][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.775999][ T5907] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1451.853420][T31623] usb 6-1: Using ep0 maxpacket: 16 [ 1451.862292][T31623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.874966][T31623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1451.907784][T31623] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1451.920069][T31623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.931885][T31623] usb 6-1: config 0 descriptor?? [ 1451.941303][ T3241] loop9: detected capacity change from 0 to 7 [ 1451.957972][ T3241] Dev loop9: unable to read RDB block 7 [ 1451.972760][ T3241] loop9: unable to read partition table [ 1451.978629][ T3241] loop9: partition table beyond EOD, truncated [ 1452.003306][ T3235] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5380'. [ 1452.072797][ T3241] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1452.129908][T31621] gspca_vc032x: reg_r err -71 [ 1452.148549][T31621] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 1452.188253][T31621] usb 1-1: USB disconnect, device number 69 [ 1452.368001][T31623] lua 0003:1E7D:2C2E.0052: item fetching failed at offset 1/5 [ 1452.393667][T31623] lua 0003:1E7D:2C2E.0052: parse failed [ 1452.412535][T31623] lua 0003:1E7D:2C2E.0052: probe with driver lua failed with error -22 [ 1452.491076][ C1] hrtimer: interrupt took 13985 ns [ 1452.708075][T31623] usb 4-1: USB disconnect, device number 32 [ 1452.909043][ T3271] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5388'. [ 1453.032843][ T5892] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1453.080283][ T3273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.108941][ T3273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.126877][T31623] usb 6-1: USB disconnect, device number 13 [ 1453.223417][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.233751][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1453.248606][ T5892] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1453.278022][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.294475][ T3277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1453.303122][ T3277] bridge0: port 3(bond1) entered blocking state [ 1453.312685][ T3277] bridge0: port 3(bond1) entered disabled state [ 1453.321481][ T3277] bond1: entered allmulticast mode [ 1453.335201][ T3277] bond1: entered promiscuous mode [ 1453.343858][ T3277] bridge0: port 3(bond1) entered blocking state [ 1453.350619][ T3277] bridge0: port 3(bond1) entered forwarding state [ 1453.381837][ T5892] usb 5-1: config 0 descriptor?? [ 1453.442005][T27712] bridge0: port 3(bond1) entered disabled state [ 1453.625468][T29631] Bluetooth: hci5: command 0x0c1a tx timeout [ 1453.703370][T31612] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1453.812787][ T3288] loop5: detected capacity change from 0 to 7 [ 1453.819762][ T3288] Dev loop5: unable to read RDB block 7 [ 1453.830872][ T5892] ortek 0003:1223:3F07.0053: unknown main item tag 0x3 [ 1453.837872][ T3288] loop5: unable to read partition table [ 1453.847976][ T5892] ortek 0003:1223:3F07.0053: item fetching failed at offset 1/5 [ 1453.858247][ T3288] loop5: partition table beyond EOD, truncated [ 1453.868777][ T5892] ortek 0003:1223:3F07.0053: probe with driver ortek failed with error -22 [ 1453.872579][T31612] usb 6-1: Using ep0 maxpacket: 16 [ 1453.882486][ T3288] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1453.894668][T31612] usb 6-1: config index 0 descriptor too short (expected 119, got 14) [ 1453.907425][T31612] usb 6-1: config 6 has an invalid descriptor of length 9, skipping remainder of the config [ 1453.922908][T31612] usb 6-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 1453.938292][T31612] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=ff.6d [ 1453.947990][T31612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.978297][T31612] usb 6-1: Product: syz [ 1453.988401][T31612] usb 6-1: Manufacturer: syz [ 1453.998137][T31612] usb 6-1: SerialNumber: syz [ 1454.034202][T31623] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1454.193591][T31623] usb 1-1: Using ep0 maxpacket: 16 [ 1454.226734][T31623] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.251736][T31612] usb 6-1: USB disconnect, device number 14 [ 1454.319166][T31623] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.343339][T27712] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1454.386019][T31623] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1454.433736][T31623] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1454.460117][T31623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.503675][T31623] usb 1-1: config 0 descriptor?? [ 1454.528136][ T30] audit: type=1804 audit(1765470417.401:5906): pid=3301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5398" name="/newroot/564/file1" dev="fuse" ino=1 res=1 errno=0 [ 1454.570748][ T3298] loop5: detected capacity change from 0 to 7 [ 1454.603956][ T3298] Dev loop5: unable to read RDB block 7 [ 1454.609622][ T3298] loop5: unable to read partition table [ 1454.622245][ T3298] loop5: partition table beyond EOD, truncated [ 1454.640261][ T3298] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1454.777106][ T3302] veth0_to_batadv: entered promiscuous mode [ 1454.783764][ T3302] macvtap1: entered allmulticast mode [ 1454.792482][ T3302] veth0_to_batadv: entered allmulticast mode [ 1454.808352][ T3290] macvtap2: entered allmulticast mode [ 1454.893159][ T3305] netlink: 'syz.2.5399': attribute type 21 has an invalid length. [ 1454.924342][ T3305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5399'. [ 1455.282859][ T5907] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1455.382883][T31623] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1455.415369][ T3318] bond5: entered allmulticast mode [ 1455.423211][ T3318] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1455.432982][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 1455.442288][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1455.453245][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.462153][ T5907] usb 4-1: Product: syz [ 1455.534757][T31623] usb 6-1: Using ep0 maxpacket: 8 [ 1455.544044][T31623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1455.556579][T31623] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1455.568537][ T5907] usb 4-1: Manufacturer: syz [ 1455.576262][T31623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.590381][ T5907] usb 4-1: SerialNumber: syz [ 1455.604869][ T5907] usb 4-1: config 0 descriptor?? [ 1455.622710][ T5907] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1455.630213][T31623] usb 6-1: config 0 descriptor?? [ 1455.717364][ T3325] fuse: Bad value for 'fd' [ 1455.826383][ T3313] loop9: detected capacity change from 0 to 7 [ 1455.835988][ T3313] Dev loop9: unable to read RDB block 7 [ 1455.840949][T31605] usb 5-1: USB disconnect, device number 77 [ 1455.842093][ T3313] loop9: unable to read partition table [ 1455.859608][T31623] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1455.892043][ T3313] loop9: partition table beyond EOD, truncated [ 1455.898541][ T3313] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1455.923550][ T5907] gspca_vc032x: reg_r err -71 [ 1455.931282][ T5907] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1455.966457][ T5907] usb 4-1: USB disconnect, device number 33 [ 1456.010136][T31613] usb 1-1: USB disconnect, device number 70 [ 1456.016242][T31612] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1456.070101][ T5892] usb 6-1: USB disconnect, device number 15 [ 1456.070149][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1456.101793][ T3329] loop5: detected capacity change from 0 to 7 [ 1456.110619][ T3329] Dev loop5: unable to read RDB block 7 [ 1456.120796][ T3329] loop5: unable to read partition table [ 1456.130289][ T3329] loop5: partition table beyond EOD, truncated [ 1456.138506][ T3329] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1456.174369][T31612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.223972][T31612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.254199][T31612] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1456.284988][T31612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.298092][T31612] usb 3-1: config 0 descriptor?? [ 1456.512836][ T5892] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1456.672608][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 1456.679933][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.691362][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.712016][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1456.787214][ T3340] fuse: Bad value for 'fd' [ 1456.837499][ T5892] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1456.878437][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.927336][ T5892] usb 5-1: config 0 descriptor?? [ 1456.928173][T31612] usbhid 3-1:0.0: can't add hid device: -71 [ 1456.986964][T31612] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1457.025584][T31612] usb 3-1: USB disconnect, device number 49 [ 1457.381973][ T3331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.393630][ T3331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.243639][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 1458.250818][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1458.275535][ T5892] usb 5-1: USB disconnect, device number 78 [ 1458.834586][T31612] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1459.012553][T31612] usb 6-1: device descriptor read/64, error -71 [ 1459.212531][T31605] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1459.262601][T31612] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1459.345302][T31605] usb 1-1: device descriptor read/64, error -71 [ 1459.414244][T31612] usb 6-1: device descriptor read/64, error -71 [ 1459.422830][ T5892] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1459.452163][ T3372] loop5: detected capacity change from 0 to 7 [ 1459.461542][ T3372] Dev loop5: unable to read RDB block 7 [ 1459.483288][ T3372] loop5: unable to read partition table [ 1459.491620][ T3372] loop5: partition table beyond EOD, truncated [ 1459.501427][ T3372] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1459.553921][T31612] usb usb6-port1: attempt power cycle [ 1459.575492][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1459.595061][ T5892] usb 5-1: config 1 has an invalid interface number: 43 but max is 1 [ 1459.606995][ T5892] usb 5-1: config 1 has no interface number 1 [ 1459.612528][T31605] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1459.613791][ T5892] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 1459.638226][ T5892] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1459.664334][ T5892] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 1459.673829][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.681936][ T5892] usb 5-1: Product: syz [ 1459.686733][ T5892] usb 5-1: Manufacturer: syz [ 1459.697649][ T5892] usb 5-1: SerialNumber: syz [ 1459.788638][T31605] usb 1-1: device descriptor read/64, error -71 [ 1459.795106][T31613] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1459.829695][ T3378] [ 1459.832045][ T3378] ===================================================== [ 1459.838976][ T3378] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1459.846443][ T3378] syzkaller #0 Tainted: G L [ 1459.852418][ T3378] ----------------------------------------------------- [ 1459.859344][ T3378] syz.2.5420/3378 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1459.866980][ T3378] ffff8880776886a8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1459.875702][ T3378] [ 1459.875702][ T3378] and this task is already holding: [ 1459.883065][ T3378] ffff88807743e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1459.892838][ T3378] which would create a new lock dependency: [ 1459.898722][ T3378] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1459.906838][ T3378] [ 1459.906838][ T3378] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1459.916287][ T3378] (&dev->event_lock#2){..-.}-{3:3} [ 1459.916328][ T3378] [ 1459.916328][ T3378] ... which became SOFTIRQ-irq-safe at: [ 1459.929209][ T3378] lock_acquire+0x117/0x340 [ 1459.933792][ T3378] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1459.939067][ T3378] input_inject_event+0xa5/0x340 [ 1459.944089][ T3378] led_trigger_event+0x138/0x210 [ 1459.949117][ T3378] kbd_bh+0x1f3/0x300 [ 1459.953189][ T3378] tasklet_action_common+0x358/0x550 [ 1459.958551][ T3378] handle_softirqs+0x27d/0x850 [ 1459.963386][ T3378] __irq_exit_rcu+0xca/0x1f0 [ 1459.968059][ T3378] irq_exit_rcu+0x9/0x30 [ 1459.972386][ T3378] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1459.978190][ T3378] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1459.984335][ T3378] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1459.990190][ T3378] do_con_write+0x417a/0x5210 [ 1459.994972][ T3378] con_write+0x24/0x40 [ 1459.999151][ T3378] n_tty_write+0xd78/0x12a0 [ 1460.003735][ T3378] file_tty_write+0x559/0xa20 [ 1460.008496][ T3378] vfs_write+0x5c9/0xb30 [ 1460.012821][ T3378] ksys_write+0x145/0x250 [ 1460.017233][ T3378] do_syscall_64+0xfa/0xf80 [ 1460.021820][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.027805][ T3378] [ 1460.027805][ T3378] to a SOFTIRQ-irq-unsafe lock: [ 1460.034818][ T3378] (tasklist_lock){.+.+}-{3:3} [ 1460.034850][ T3378] [ 1460.034850][ T3378] ... which became SOFTIRQ-irq-unsafe at: [ 1460.047442][ T3378] ... [ 1460.047449][ T3378] lock_acquire+0x117/0x340 [ 1460.054588][ T3378] _raw_read_lock+0x36/0x50 [ 1460.059180][ T3378] __do_wait+0xde/0x740 [ 1460.063421][ T3378] do_wait+0x1e8/0x4f0 [ 1460.067563][ T3378] kernel_wait+0xab/0x170 [ 1460.071989][ T3378] call_usermodehelper_exec_work+0xbe/0x230 [ 1460.077971][ T3378] process_scheduled_works+0xad1/0x1770 [ 1460.083605][ T3378] worker_thread+0x8a0/0xda0 [ 1460.088281][ T3378] kthread+0x711/0x8a0 [ 1460.092428][ T3378] ret_from_fork+0x599/0xb30 [ 1460.097098][ T3378] ret_from_fork_asm+0x1a/0x30 [ 1460.101955][ T3378] [ 1460.101955][ T3378] other info that might help us debug this: [ 1460.101955][ T3378] [ 1460.112171][ T3378] Chain exists of: [ 1460.112171][ T3378] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1460.112171][ T3378] [ 1460.125720][ T3378] Possible interrupt unsafe locking scenario: [ 1460.125720][ T3378] [ 1460.134030][ T3378] CPU0 CPU1 [ 1460.139442][ T3378] ---- ---- [ 1460.144829][ T3378] lock(tasklist_lock); [ 1460.149069][ T3378] local_irq_disable(); [ 1460.155814][ T3378] lock(&dev->event_lock#2); [ 1460.163033][ T3378] lock(&client->buffer_lock); [ 1460.170393][ T3378] [ 1460.173836][ T3378] lock(&dev->event_lock#2); [ 1460.178678][ T3378] [ 1460.178678][ T3378] *** DEADLOCK *** [ 1460.178678][ T3378] [ 1460.186801][ T3378] 7 locks held by syz.2.5420/3378: [ 1460.191887][ T3378] #0: ffff888029e0e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1460.200999][ T3378] #1: ffff88801c344230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1460.211076][ T3378] #2: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1460.220714][ T3378] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1460.230272][ T3378] #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1460.239412][ T3378] #5: ffff88807743e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1460.249594][ T3378] #6: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1460.258645][ T3378] [ 1460.258645][ T3378] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1460.269039][ T3378] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1460.274669][ T3378] IN-SOFTIRQ-W at: [ 1460.278735][ T3378] lock_acquire+0x117/0x340 [ 1460.285065][ T3378] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1460.292086][ T3378] input_inject_event+0xa5/0x340 [ 1460.298837][ T3378] led_trigger_event+0x138/0x210 [ 1460.305585][ T3378] kbd_bh+0x1f3/0x300 [ 1460.311378][ T3378] tasklet_action_common+0x358/0x550 [ 1460.318474][ T3378] handle_softirqs+0x27d/0x850 [ 1460.325042][ T3378] __irq_exit_rcu+0xca/0x1f0 [ 1460.331457][ T3378] irq_exit_rcu+0x9/0x30 [ 1460.337525][ T3378] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1460.344969][ T3378] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1460.352782][ T3378] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1460.360341][ T3378] do_con_write+0x417a/0x5210 [ 1460.366841][ T3378] con_write+0x24/0x40 [ 1460.372732][ T3378] n_tty_write+0xd78/0x12a0 [ 1460.379046][ T3378] file_tty_write+0x559/0xa20 [ 1460.385535][ T3378] vfs_write+0x5c9/0xb30 [ 1460.391595][ T3378] ksys_write+0x145/0x250 [ 1460.397748][ T3378] do_syscall_64+0xfa/0xf80 [ 1460.404069][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.411772][ T3378] INITIAL USE at: [ 1460.415746][ T3378] lock_acquire+0x117/0x340 [ 1460.421974][ T3378] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1460.428903][ T3378] input_inject_event+0xa5/0x340 [ 1460.435567][ T3378] kbd_led_trigger_activate+0xbc/0x100 [ 1460.442753][ T3378] led_trigger_set+0x52d/0x950 [ 1460.449245][ T3378] led_trigger_set_default+0x260/0x2a0 [ 1460.456433][ T3378] led_classdev_register_ext+0x73d/0x960 [ 1460.463809][ T3378] input_leds_connect+0x517/0x790 [ 1460.470581][ T3378] input_register_device+0xd00/0x1170 [ 1460.477691][ T3378] atkbd_connect+0x73b/0xa50 [ 1460.484012][ T3378] serio_driver_probe+0x82/0xd0 [ 1460.490580][ T3378] really_probe+0x26d/0xad0 [ 1460.496814][ T3378] __driver_probe_device+0x18c/0x320 [ 1460.503841][ T3378] driver_probe_device+0x4f/0x240 [ 1460.510599][ T3378] __driver_attach+0x349/0x650 [ 1460.517090][ T3378] bus_for_each_dev+0x233/0x2b0 [ 1460.523669][ T3378] serio_handle_event+0x1f9/0x8d0 [ 1460.530434][ T3378] process_scheduled_works+0xad1/0x1770 [ 1460.537700][ T3378] worker_thread+0x8a0/0xda0 [ 1460.544025][ T3378] kthread+0x711/0x8a0 [ 1460.549815][ T3378] ret_from_fork+0x599/0xb30 [ 1460.556122][ T3378] ret_from_fork_asm+0x1a/0x30 [ 1460.562614][ T3378] } [ 1460.565192][ T3378] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1460.574300][ T3378] -> (&client->buffer_lock){....}-{3:3} { [ 1460.580016][ T3378] INITIAL USE at: [ 1460.583903][ T3378] lock_acquire+0x117/0x340 [ 1460.589966][ T3378] _raw_spin_lock+0x2e/0x40 [ 1460.596014][ T3378] evdev_pass_values+0xb9/0xbd0 [ 1460.602412][ T3378] evdev_events+0x1e6/0x340 [ 1460.608474][ T3378] input_pass_values+0x288/0x890 [ 1460.614975][ T3378] input_event_dispose+0x330/0x6b0 [ 1460.621646][ T3378] input_inject_event+0x1dd/0x340 [ 1460.628229][ T3378] evdev_write+0x2fc/0x480 [ 1460.634257][ T3378] vfs_write+0x27e/0xb30 [ 1460.640075][ T3378] ksys_write+0x145/0x250 [ 1460.645970][ T3378] do_syscall_64+0xfa/0xf80 [ 1460.652030][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.659483][ T3378] } [ 1460.661965][ T3378] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1460.670101][ T3378] ... acquired at: [ 1460.673893][ T3378] _raw_spin_lock+0x2e/0x40 [ 1460.678570][ T3378] evdev_pass_values+0xb9/0xbd0 [ 1460.683601][ T3378] evdev_events+0x1e6/0x340 [ 1460.688279][ T3378] input_pass_values+0x288/0x890 [ 1460.693381][ T3378] input_event_dispose+0x330/0x6b0 [ 1460.698649][ T3378] input_inject_event+0x1dd/0x340 [ 1460.703828][ T3378] evdev_write+0x2fc/0x480 [ 1460.708411][ T3378] vfs_write+0x27e/0xb30 [ 1460.712821][ T3378] ksys_write+0x145/0x250 [ 1460.717302][ T3378] do_syscall_64+0xfa/0xf80 [ 1460.721962][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.728013][ T3378] [ 1460.730334][ T3378] [ 1460.730334][ T3378] the dependencies between the lock to be acquired [ 1460.730346][ T3378] and SOFTIRQ-irq-unsafe lock: [ 1460.743830][ T3378] -> (tasklist_lock){.+.+}-{3:3} { [ 1460.749138][ T3378] HARDIRQ-ON-R at: [ 1460.753269][ T3378] lock_acquire+0x117/0x340 [ 1460.759769][ T3378] _raw_read_lock+0x36/0x50 [ 1460.766252][ T3378] __do_wait+0xde/0x740 [ 1460.772404][ T3378] do_wait+0x1e8/0x4f0 [ 1460.778460][ T3378] kernel_wait+0xab/0x170 [ 1460.784777][ T3378] call_usermodehelper_exec_work+0xbe/0x230 [ 1460.792660][ T3378] process_scheduled_works+0xad1/0x1770 [ 1460.800196][ T3378] worker_thread+0x8a0/0xda0 [ 1460.806771][ T3378] kthread+0x711/0x8a0 [ 1460.812839][ T3378] ret_from_fork+0x599/0xb30 [ 1460.819419][ T3378] ret_from_fork_asm+0x1a/0x30 [ 1460.826162][ T3378] SOFTIRQ-ON-R at: [ 1460.830308][ T3378] lock_acquire+0x117/0x340 [ 1460.836803][ T3378] _raw_read_lock+0x36/0x50 [ 1460.843297][ T3378] __do_wait+0xde/0x740 [ 1460.849430][ T3378] do_wait+0x1e8/0x4f0 [ 1460.855497][ T3378] kernel_wait+0xab/0x170 [ 1460.861842][ T3378] call_usermodehelper_exec_work+0xbe/0x230 [ 1460.869737][ T3378] process_scheduled_works+0xad1/0x1770 [ 1460.877276][ T3378] worker_thread+0x8a0/0xda0 [ 1460.883849][ T3378] kthread+0x711/0x8a0 [ 1460.889902][ T3378] ret_from_fork+0x599/0xb30 [ 1460.896482][ T3378] ret_from_fork_asm+0x1a/0x30 [ 1460.903250][ T3378] INITIAL USE at: [ 1460.907316][ T3378] lock_acquire+0x117/0x340 [ 1460.913716][ T3378] _raw_write_lock_irq+0xa2/0xf0 [ 1460.920550][ T3378] copy_process+0x2185/0x3950 [ 1460.927122][ T3378] kernel_clone+0x21e/0x820 [ 1460.933535][ T3378] user_mode_thread+0xdd/0x140 [ 1460.940203][ T3378] rest_init+0x23/0x300 [ 1460.946268][ T3378] start_kernel+0x3a7/0x400 [ 1460.952662][ T3378] x86_64_start_reservations+0x24/0x30 [ 1460.960042][ T3378] x86_64_start_kernel+0x143/0x1c0 [ 1460.967070][ T3378] common_startup_64+0x13e/0x147 [ 1460.973919][ T3378] INITIAL READ USE at: [ 1460.978412][ T3378] lock_acquire+0x117/0x340 [ 1460.985249][ T3378] _raw_read_lock+0x36/0x50 [ 1460.992085][ T3378] __do_wait+0xde/0x740 [ 1460.998577][ T3378] do_wait+0x1e8/0x4f0 [ 1461.004996][ T3378] kernel_wait+0xab/0x170 [ 1461.011678][ T3378] call_usermodehelper_exec_work+0xbe/0x230 [ 1461.019905][ T3378] process_scheduled_works+0xad1/0x1770 [ 1461.027798][ T3378] worker_thread+0x8a0/0xda0 [ 1461.034815][ T3378] kthread+0x711/0x8a0 [ 1461.041235][ T3378] ret_from_fork+0x599/0xb30 [ 1461.048169][ T3378] ret_from_fork_asm+0x1a/0x30 [ 1461.055275][ T3378] } [ 1461.057936][ T3378] ... key at: [] tasklist_lock+0x18/0x40 [ 1461.065817][ T3378] ... acquired at: [ 1461.069789][ T3378] _raw_read_lock+0x36/0x50 [ 1461.074447][ T3378] send_sigurg+0x12b/0x420 [ 1461.079040][ T3378] sk_send_sigurg+0x6c/0x2e0 [ 1461.083795][ T3378] queue_oob+0x420/0x4f0 [ 1461.088208][ T3378] unix_stream_sendmsg+0xc32/0xde0 [ 1461.093482][ T3378] __sock_sendmsg+0x21c/0x270 [ 1461.098328][ T3378] ____sys_sendmsg+0x52d/0x820 [ 1461.103243][ T3378] ___sys_sendmsg+0x21f/0x2a0 [ 1461.108073][ T3378] __sys_sendmmsg+0x227/0x430 [ 1461.112923][ T3378] __x64_sys_sendmmsg+0xa0/0xc0 [ 1461.117930][ T3378] do_syscall_64+0xfa/0xf80 [ 1461.122625][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.128710][ T3378] [ 1461.131025][ T3378] -> (&f_owner->lock){....}-{3:3} { [ 1461.136316][ T3378] INITIAL USE at: [ 1461.140294][ T3378] lock_acquire+0x117/0x340 [ 1461.146513][ T3378] _raw_write_lock_irq+0xa2/0xf0 [ 1461.153172][ T3378] __f_setown+0x67/0x370 [ 1461.159133][ T3378] do_fcntl+0x173f/0x1a50 [ 1461.165280][ T3378] __se_sys_fcntl+0xc8/0x150 [ 1461.171587][ T3378] do_syscall_64+0xfa/0xf80 [ 1461.177820][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.185449][ T3378] INITIAL READ USE at: [ 1461.189845][ T3378] lock_acquire+0x117/0x340 [ 1461.196515][ T3378] _raw_read_lock_irqsave+0xaf/0x100 [ 1461.203969][ T3378] send_sigurg+0x55/0x420 [ 1461.210466][ T3378] sk_send_sigurg+0x6c/0x2e0 [ 1461.217223][ T3378] queue_oob+0x420/0x4f0 [ 1461.223642][ T3378] unix_stream_sendmsg+0xc32/0xde0 [ 1461.230917][ T3378] __sock_sendmsg+0x21c/0x270 [ 1461.237741][ T3378] ____sys_sendmsg+0x52d/0x820 [ 1461.244660][ T3378] ___sys_sendmsg+0x21f/0x2a0 [ 1461.251494][ T3378] __sys_sendmmsg+0x227/0x430 [ 1461.258318][ T3378] __x64_sys_sendmmsg+0xa0/0xc0 [ 1461.265333][ T3378] do_syscall_64+0xfa/0xf80 [ 1461.271996][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.280043][ T3378] } [ 1461.282622][ T3378] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1461.291552][ T3378] ... acquired at: [ 1461.295435][ T3378] _raw_read_lock_irqsave+0xaf/0x100 [ 1461.300877][ T3378] send_sigio+0x38/0x370 [ 1461.305294][ T3378] kill_fasync+0x24d/0x4d0 [ 1461.309864][ T3378] sock_wake_async+0x137/0x160 [ 1461.314811][ T3378] sock_def_readable+0x3c1/0x530 [ 1461.319912][ T3378] queue_oob+0x452/0x4f0 [ 1461.324312][ T3378] unix_stream_sendmsg+0xc32/0xde0 [ 1461.329580][ T3378] __sock_sendmsg+0x21c/0x270 [ 1461.334424][ T3378] ____sys_sendmsg+0x52d/0x820 [ 1461.339350][ T3378] ___sys_sendmsg+0x21f/0x2a0 [ 1461.344187][ T3378] __sys_sendmmsg+0x227/0x430 [ 1461.349032][ T3378] __x64_sys_sendmmsg+0xa0/0xc0 [ 1461.354030][ T3378] do_syscall_64+0xfa/0xf80 [ 1461.358709][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.364765][ T3378] [ 1461.367068][ T3378] -> (&new->fa_lock){....}-{3:3} { [ 1461.372172][ T3378] INITIAL USE at: [ 1461.376041][ T3378] lock_acquire+0x117/0x340 [ 1461.382092][ T3378] _raw_write_lock_irq+0xa2/0xf0 [ 1461.388594][ T3378] fasync_remove_entry+0xf1/0x1c0 [ 1461.395176][ T3378] sock_fasync+0x85/0xf0 [ 1461.400966][ T3378] __fput+0x8a2/0xa70 [ 1461.406508][ T3378] task_work_run+0x1d4/0x260 [ 1461.412668][ T3378] exit_to_user_mode_loop+0xff/0x4f0 [ 1461.419524][ T3378] do_syscall_64+0x2e3/0xf80 [ 1461.425680][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.433116][ T3378] INITIAL READ USE at: [ 1461.437434][ T3378] lock_acquire+0x117/0x340 [ 1461.443925][ T3378] _raw_read_lock_irqsave+0xaf/0x100 [ 1461.451214][ T3378] kill_fasync+0x199/0x4d0 [ 1461.457631][ T3378] sock_wake_async+0x137/0x160 [ 1461.464392][ T3378] sk_send_sigurg+0x1f1/0x2e0 [ 1461.471053][ T3378] queue_oob+0x420/0x4f0 [ 1461.477288][ T3378] unix_stream_sendmsg+0xc32/0xde0 [ 1461.484399][ T3378] __sock_sendmsg+0x21c/0x270 [ 1461.491071][ T3378] ____sys_sendmsg+0x52d/0x820 [ 1461.497825][ T3378] ___sys_sendmsg+0x21f/0x2a0 [ 1461.504489][ T3378] __sys_sendmmsg+0x227/0x430 [ 1461.511154][ T3378] __x64_sys_sendmmsg+0xa0/0xc0 [ 1461.517979][ T3378] do_syscall_64+0xfa/0xf80 [ 1461.524466][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.532352][ T3378] } [ 1461.534852][ T3378] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1461.543514][ T3378] ... acquired at: [ 1461.547305][ T3378] _raw_read_lock_irqsave+0xaf/0x100 [ 1461.552753][ T3378] kill_fasync+0x199/0x4d0 [ 1461.557333][ T3378] evdev_pass_values+0x627/0xbd0 [ 1461.562449][ T3378] evdev_events+0x1e6/0x340 [ 1461.567123][ T3378] input_pass_values+0x288/0x890 [ 1461.572220][ T3378] input_event_dispose+0x330/0x6b0 [ 1461.577499][ T3378] input_inject_event+0x1dd/0x340 [ 1461.582676][ T3378] evdev_write+0x2fc/0x480 [ 1461.587274][ T3378] vfs_write+0x27e/0xb30 [ 1461.591669][ T3378] ksys_write+0x145/0x250 [ 1461.596233][ T3378] do_syscall_64+0xfa/0xf80 [ 1461.600919][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.606979][ T3378] [ 1461.609293][ T3378] [ 1461.609293][ T3378] stack backtrace: [ 1461.615171][ T3378] CPU: 0 UID: 0 PID: 3378 Comm: syz.2.5420 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.615192][ T3378] Tainted: [L]=SOFTLOCKUP [ 1461.615199][ T3378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1461.615212][ T3378] Call Trace: [ 1461.615223][ T3378] [ 1461.615231][ T3378] dump_stack_lvl+0x189/0x250 [ 1461.615256][ T3378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1461.615272][ T3378] ? __pfx__printk+0x10/0x10 [ 1461.615288][ T3378] __lock_acquire+0x2a95/0x2cf0 [ 1461.615303][ T3378] ? kill_fasync+0x199/0x4d0 [ 1461.615318][ T3378] lock_acquire+0x117/0x340 [ 1461.615327][ T3378] ? kill_fasync+0x199/0x4d0 [ 1461.615357][ T3378] _raw_read_lock_irqsave+0xaf/0x100 [ 1461.615381][ T3378] ? kill_fasync+0x199/0x4d0 [ 1461.615405][ T3378] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1461.615421][ T3378] ? do_raw_spin_lock+0x121/0x290 [ 1461.615435][ T3378] kill_fasync+0x199/0x4d0 [ 1461.615449][ T3378] ? kill_fasync+0x53/0x4d0 [ 1461.615463][ T3378] evdev_pass_values+0x627/0xbd0 [ 1461.615485][ T3378] ? evdev_pass_values+0x5a1/0xbd0 [ 1461.615512][ T3378] evdev_events+0x1e6/0x340 [ 1461.615535][ T3378] ? evdev_events+0x79/0x340 [ 1461.615558][ T3378] ? input_pass_values+0x8d/0x890 [ 1461.615571][ T3378] input_pass_values+0x288/0x890 [ 1461.615585][ T3378] ? input_handle_event+0x70c/0xf30 [ 1461.615596][ T3378] input_event_dispose+0x330/0x6b0 [ 1461.615608][ T3378] input_inject_event+0x1dd/0x340 [ 1461.615622][ T3378] ? input_inject_event+0xb6/0x340 [ 1461.615643][ T3378] evdev_write+0x2fc/0x480 [ 1461.615687][ T3378] ? __pfx_evdev_write+0x10/0x10 [ 1461.615708][ T3378] ? bpf_lsm_file_permission+0x9/0x20 [ 1461.615720][ T3378] ? security_file_permission+0x75/0x290 [ 1461.615735][ T3378] ? rw_verify_area+0x255/0x4d0 [ 1461.615744][ T3378] ? __pfx_evdev_write+0x10/0x10 [ 1461.615758][ T3378] vfs_write+0x27e/0xb30 [ 1461.615774][ T3378] ? __pfx_vfs_write+0x10/0x10 [ 1461.615792][ T3378] ? __fget_files+0x2a/0x420 [ 1461.615816][ T3378] ? __fget_files+0x2a/0x420 [ 1461.615837][ T3378] ? __fget_files+0x3a0/0x420 [ 1461.615854][ T3378] ? __fget_files+0x2a/0x420 [ 1461.615867][ T3378] ksys_write+0x145/0x250 [ 1461.615877][ T3378] ? __pfx_ksys_write+0x10/0x10 [ 1461.615887][ T3378] ? do_syscall_64+0xbe/0xf80 [ 1461.615902][ T3378] do_syscall_64+0xfa/0xf80 [ 1461.615920][ T3378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.615939][ T3378] ? clear_bhb_loop+0x60/0xb0 [ 1461.615959][ T3378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.615978][ T3378] RIP: 0033:0x7fbf8138f749 [ 1461.615995][ T3378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1461.616007][ T3378] RSP: 002b:00007fbf82155038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1461.616018][ T3378] RAX: ffffffffffffffda RBX: 00007fbf815e5fa0 RCX: 00007fbf8138f749 [ 1461.616026][ T3378] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000004 [ 1461.616033][ T3378] RBP: 00007fbf81413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1461.616040][ T3378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1461.616046][ T3378] R13: 00007fbf815e6038 R14: 00007fbf815e5fa0 R15: 00007fbf8170fa28 [ 1461.616058][ T3378] [ 1461.930919][ T3368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5415'. [ 1461.941336][T31605] usb usb1-port1: attempt power cycle [ 1461.958195][ T3368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5415'. [ 1461.986492][ T5892] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1461.993109][ T5892] gspca_spca501: reg write: error -71 [ 1462.003174][T31612] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1462.017214][ T5892] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1462.026378][ T5892] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 1462.042810][T31613] usb 4-1: Using ep0 maxpacket: 8 [ 1462.048381][T31612] usb 6-1: device descriptor read/8, error -71 [ 1462.058169][T31613] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1462.067241][T31613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.075308][T31613] usb 4-1: Product: syz [ 1462.079511][T31613] usb 4-1: Manufacturer: syz [ 1462.084147][T31613] usb 4-1: SerialNumber: syz [ 1462.089994][T31613] usb 4-1: config 0 descriptor?? [ 1462.106541][T31613] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1462.117450][ T5892] usb 5-1: USB disconnect, device number 79 [ 1462.212693][T23508] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1462.302751][T31612] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1462.314510][ T3374] loop9: detected capacity change from 0 to 7 [ 1462.321252][ T3374] Dev loop9: unable to read RDB block 7 [ 1462.327010][ T3374] loop9: unable to read partition table [ 1462.332931][T31612] usb 6-1: device descriptor read/8, error -71 [ 1462.339159][ T3374] loop9: partition table beyond EOD, truncated [ 1462.345443][ T3374] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1462.355666][T31613] gspca_vc032x: reg_r err -71 [ 1462.362533][T31613] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1462.364862][T23508] usb 3-1: Using ep0 maxpacket: 8 [ 1462.373909][T31613] usb 4-1: USB disconnect, device number 34 [ 1462.396657][T23508] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.409233][T23508] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.425352][T23508] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1462.434778][T23508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.442831][T23508] usb 3-1: Product: syz [ 1462.447135][T23508] usb 3-1: Manufacturer: syz [ 1462.451707][T23508] usb 3-1: SerialNumber: syz [ 1462.452796][T31612] usb usb6-port1: unable to enumerate USB device [ 1462.465385][T23508] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 1462.472370][T23508] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1462.671656][T31613] usb 3-1: USB disconnect, device number 50 [ 1469.066755][T31611] usb 5-1: [UEAGLE-ATM] firmware is not available