last executing test programs: 5m25.580807735s ago: executing program 2 (id=4765): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x40, 0x0, 0x0) 5m25.360099827s ago: executing program 2 (id=4766): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x11) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/56, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000400)={0x18, 0x0, 0x3}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) 5m21.089243945s ago: executing program 2 (id=4779): r0 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$addseals(r0, 0x409, 0xb1c25ce47c749b08) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8e}, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, r4}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x1, {0xd, 0x0, "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", 0x3a, 0x2, 0x6, 0xff, 0x4, 0xff, 0x5}, r4}}, 0x128) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x3, 0x60000000, {"74aef34021156aa3cd1eaaea2914b7d7"}, 0x6243, 0x80000000, 0x2}}}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x20000804) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {}, 0xa, 0x0, 0x4}}, 0x26) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400710019000100fcfffffffeffffff7f000001000000000000000000000000fe8000000000000000000000000000aa4e2300004e2300800a0000602b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000303000000000a0010000100000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b937600000000000000000000000000000000000000000002000000000000000100"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r8, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=r12], 0x98}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 5m19.166000321s ago: executing program 2 (id=4789): futex_waitv(&(0x7f0000000e00)=[{0x4, &(0x7f00000001c0), 0x2}, {0x5, &(0x7f0000000240)=0x9, 0x82}, {0x244, &(0x7f0000000340)=0x80000000, 0x2}, {0x4, &(0x7f0000000480)=0xec73, 0x2}, {0x0, &(0x7f00000004c0)=0x7, 0x2}, {0x8, &(0x7f0000000500)=0x4, 0x2}, {0xc, &(0x7f0000000540)=0x2}, {0x7fff, &(0x7f0000000580)=0xb287801a0, 0x2}, {0x99e, &(0x7f00000005c0)=0x641, 0x2}, {0x4, &(0x7f0000000600)=0x1000, 0x2}, {0x0, &(0x7f0000000640)=0x8, 0x82}, {0x5, &(0x7f0000000780)=0x7, 0x2}, {0x3, &(0x7f0000000800)=0x88}, {0x9, &(0x7f0000000840)=0x9, 0x2}, {0x100, &(0x7f0000000880)=0x80000001, 0x82}, {0x7, &(0x7f00000008c0)=0x7, 0x82}, {0x2, &(0x7f0000000900)=0x1000, 0x2}, {0xff, &(0x7f0000000940)=0x7, 0x82}, {0x8, &(0x7f0000000980)=0x64e8, 0x2}, {0x9, &(0x7f00000009c0), 0x2}, {0x6794, &(0x7f0000000a00)=0xee, 0x2}, {0x8, &(0x7f0000000a40)=0x7fffffffffffffff, 0x82}, {0x6, &(0x7f0000000a80)=0x7, 0x82}, {0x0, &(0x7f0000000ac0)=0x10001, 0x82}, {0x0, &(0x7f0000000b00)=0xab43, 0x2}, {0x8000001, &(0x7f0000000b40)=0xc47, 0x82}, {0x3d5, &(0x7f0000000b80)=0x5, 0x82}, {0xf, &(0x7f0000000bc0)=0x80000003, 0x2}, {0xb948, &(0x7f0000000c00), 0x82}, {0x0, &(0x7f0000000c40)=0x1, 0x2}, {0x0, &(0x7f0000000c80)=0x4, 0x82}, {0xc2e, &(0x7f0000000cc0)=0xe13a, 0x2}, {0x7, &(0x7f0000000d00)=0x7fffffff, 0x2}, {0x0, &(0x7f0000000d40), 0x82}, {0x401, &(0x7f0000000d80)=0x3, 0x82}, {0x8001, &(0x7f0000000dc0)=0x100000000, 0x82}], 0x24, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x200040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)=ANY=[]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xc000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000001180)={0x0, 0x2, 0x9}, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220b000000660cbb925000930ad94de7"], 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8102}, {{0x0, 0x0, 0x0}, 0x10006}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/232, 0xe8}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000380)=""/238, 0xee}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = dup(r7) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000097000040"]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a919733469"], 0x28}}, 0xc000) r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r11) 5m17.328194604s ago: executing program 2 (id=4798): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newsa={0x150, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x1000, 0xfffffffffffffffd, 0x8, 0x88, 0x81}, {0xfffffffffffffffd, 0x5, 0xcc, 0x6}, {0x0, 0x7}, 0x0, 0x0, 0x2, 0x4, 0xb}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000380), &(0x7f0000001500)=0x60) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x1e) r5 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r5, r2, r3, 0x0) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newsa={0x150, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x1000, 0xfffffffffffffffd, 0x8, 0x88, 0x81}, {0xfffffffffffffffd, 0x5, 0xcc, 0x6}, {0x0, 0x7}, 0x0, 0x0, 0x2, 0x4, 0xb}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000380), &(0x7f0000001500)=0x60) (async) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) (async) pipe2$watch_queue(&(0x7f00000003c0), 0x80) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x1e) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r2) (async) keyctl$KEYCTL_MOVE(0x1e, r5, r2, r3, 0x0) (async) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) (async) 5m15.892688135s ago: executing program 2 (id=4803): syz_open_dev$usbmon(&(0x7f0000000140), 0x5a2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = epoll_create(0x1) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000001c0)={0x3000000c}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r5 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m0.37282819s ago: executing program 32 (id=4803): syz_open_dev$usbmon(&(0x7f0000000140), 0x5a2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = epoll_create(0x1) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000001c0)={0x3000000c}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r5 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.272472627s ago: executing program 1 (id=5960): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 8.691626427s ago: executing program 1 (id=5961): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2d8, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1d4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0xa7, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f211d89ed361cbb7c46ecddefc91fd84"}]}, {0x3c, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0xc8, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2d8}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000380)={0x28, 0x4000, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="10000000175401002dfd700000000000"], 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x34, 0x9, 0x0, 0x0, {0x3}, [@typed={0x6, 0x8, 0x0, 0x0, @binary="e5e6"}]}, 0x1c}}, 0x4000010) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0", 0x46}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="300000000406010200000000000000000a0000214d7f9cb94734a14f178089289569c9c06225b673797a31000000000500010000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20041844) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1}, 0x2000) 8.399362516s ago: executing program 4 (id=5962): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xff, 0x2436a74d8e8cd2b7) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000000c0)={0x9, 0x1}) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 8.143876004s ago: executing program 4 (id=5963): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x360, 0x188, 0x290, 0x0, 0x290, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x160, 0x188, 0x0, {0x7a00000000000000}, [@common=@srh1={{0x90}, {0x88, 0xff, 0x2, 0x6, 0x101, @remote, @empty, @private0, [0xffffffff, 0xff, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xff0000ff, 0xff000000], [0xff000000, 0xffffffff, 0xff], 0x188, 0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x30, 0xb, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) (fail_nth: 4) 7.148743715s ago: executing program 4 (id=5965): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x8, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000280)='\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000006c0)='cbc(cast6)\x00') ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000300)={0x41, 0x3, 0x2, "444900cb30faa901000000000000000000f789981008d7b15b5700e46b8be100", 0x31363553}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) (async) mlock2(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x1) pipe2$watch_queue(&(0x7f00000002c0), 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 7.048580975s ago: executing program 5 (id=5966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000080)={0x1, 0x1, 0x1000, 0x35, &(0x7f0000000000)="d4d7b1184c5fdf6b13f2eba535171aa707ee37cf520d5e8e621206b00409e3d831dee95f2a5abbec5a39995b9ed72f4d0fba6d1c0b", 0xd, 0x0, &(0x7f0000000040)="cdc779a443557fc6fa420e8619"}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x180a40, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2b, 0x8, 0x5, 0x1, 0x1c, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x28, 0x0, 0xfffffffa}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000500)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6096}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffffd}], &(0x7f0000000540)='syzkaller\x00', 0xc82, 0x66, &(0x7f0000000580)=""/102, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xa, 0x1ff, 0x8000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x1, 0x1], &(0x7f00000006c0)=[{0x1, 0x4, 0xf, 0x1}, {0x5, 0x4, 0xb, 0xa}, {0x1, 0x2, 0xc}], 0x10, 0x6, @void, @value}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x0, 0x260e8927ec84d5de, 0x4, 0x100, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x1, 0xa, 0x5, 0x100, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x9, 0x6, 0x0, 0xffffffffffffffe0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x47, 0xc3, &(0x7f00000002c0)=""/195, 0x41100, 0x6b7f48edc759e1a5, '\x00', r2, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x3, 0x2}, 0x10, 0xd209, r3, 0x4, 0x0, &(0x7f00000007c0)=[{0x0, 0x1, 0x7, 0x4}, {0x5, 0x2, 0x1, 0x9}, {0x1, 0x1, 0xe, 0x6}, {0x0, 0x3, 0x7}], 0x10, 0xa83, @value}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, 0xfffffff6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48811) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r3}, 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x246a}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xc1}]}, &(0x7f0000000b00)='syzkaller\x00', 0x4, 0xb2, &(0x7f0000000b40)=""/178, 0x41000, 0x19, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000c00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0xf, 0xa17, 0x9}, 0x10, 0x20fcc, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c80)=[{0x5, 0x2, 0x1, 0x4}, {0x4, 0x3, 0x8, 0xa}], 0x10, 0x9, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r1) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000dc0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000e00)={0xc, r7}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000e40)={0x3, 'bond_slave_0\x00', {0xffffffff}, 0x6}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0x800, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_ext={0x1c, 0x4, &(0x7f0000000ec0)=@raw=[@jmp={0x5, 0x1, 0x1, 0x0, 0x5, 0xffffffffffffffe0, 0xfffffffffffffff0}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @generic={0x23, 0x6, 0x9, 0xb}], &(0x7f0000000f00)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000f40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x1, 0xa, 0x8, 0x1}, 0x10, 0x1f2fb, r4, 0x0, &(0x7f0000000fc0)=[r1], 0x0, 0x10, 0xc809, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000010c0)=r1) r9 = fcntl$getown(r1, 0x9) ptrace$getregset(0x4204, r9, 0x1, &(0x7f0000002100)={&(0x7f0000001100)=""/4096, 0x1000}) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x0) symlinkat(&(0x7f0000002140)='./file0\x00', r1, &(0x7f0000002180)='./file0\x00') sendmsg$inet(r0, &(0x7f00000023c0)={&(0x7f00000021c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002200), 0x0, &(0x7f0000002240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x33b}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x63, 0x0, 0x9, [0xfffffff8, 0x1, 0x7520, 0x6, 0xf5d, 0x7, 0x8c93, 0xff]}, @lsrr={0x83, 0x7, 0xa, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x98, 0x3, 0x2, [{@loopback, 0x8}, {@multicast2, 0xc69}, {@local, 0x3}, {@empty, 0xae4e}, {@empty, 0xfff}, {@local, 0x8}]}, @timestamp={0x44, 0x14, 0x65, 0x0, 0xb, [0x1, 0x8001, 0x3, 0x7]}, @rr={0x7, 0x1b, 0xa6, [@rand_addr=0x64010102, @rand_addr=0x64010100, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x2c, 0xb8, 0x0, 0x3, [0x4, 0x3, 0xd, 0x1, 0x3, 0x7, 0x7, 0x4, 0x0, 0x401]}, @timestamp={0x44, 0x18, 0xfd, 0x0, 0xe, [0x5, 0xfffffff9, 0x81, 0x80c7, 0x100]}]}}}], 0x168}, 0x4008040) syz_open_dev$sndctrl(&(0x7f0000002400), 0x1, 0x400) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000024c0)={{r5, 0xffffffffffffffff}, &(0x7f0000002440), &(0x7f0000002480)=r6}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002940)={r1, 0x20, &(0x7f0000002900)={&(0x7f0000002740)=""/234, 0xea, 0x0, &(0x7f0000002840)=""/159, 0x9f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0xa, 0xa, &(0x7f0000002500)=@raw=[@jmp={0x5, 0x1, 0xc, 0x8, 0x1, 0x4, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000002580)='GPL\x00', 0x4, 0xcf, &(0x7f00000025c0)=""/207, 0x0, 0x31, '\x00', 0x0, @fallback=0x9, r1, 0x8, &(0x7f00000026c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002700)={0x5, 0xe, 0x5, 0x6}, 0x10, r11, r4, 0x0, &(0x7f0000002980)=[r5, r5, r1, r1], 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002a80), 0x8302, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000002ac0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r12, 0xc01064c4, &(0x7f0000002b80)={&(0x7f0000002b40)=[r13, 0x0], 0x2}) 6.543972138s ago: executing program 5 (id=5967): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="aa1e216699066bda24668c703b141b5716e494772557fd2e57d5351d0ffb5b842539672118449cd5dec59f1b97d6f17cd96b62bae4a953e7e924533252813b211e67cad83cb149c234d9fbec631edac2f4462fe939964f265b6bafcca51ec91f63c7c1519ef115660eb46f1a110ee079a3922e09cb2bde0c35fe40b39b0a43cdb7864b8cb08097ff2b43029f9764452d3f3e4f2b73826d92ef0479bb", 0x9c}], 0x1}, 0x4000) (async) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) close(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.088004748s ago: executing program 5 (id=5968): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0xb, 0x400008, 0x3002, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x5, 0xd60, 0x80000004, 0x4, 0x1, 0xeb]}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xfffffffffffffee2, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x2, 0x83, 0x6, 0xb, 0x14, 0x6}}]}}]}, 0x150}}, 0x4008010) 5.740452082s ago: executing program 5 (id=5969): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0xffffffff) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x400, 0x400) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0x4, 0x8, 0x4}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x12, 0xb, 0x4, "c408f581050ac18a6c509101b6f7a72268197fa1ca7097f66f7055bd08b13a339e941396d28e4dabc4fb26ca41eb0a011e7d87f9f5b49f0cac7c9ef88972d048", "176f2a6e22776929ed44dce02943fbf1d7fe163be3fef6618de0e27ed57da1b4b918e0da96da2a45ae34059be84615498f524084a73bdc7f92b8b356872579a1", "49cc24e89792fb1111c16b05645290019d9392f6880c3ba5704d26642e3440a3", [0x5, 0x9]}}) r4 = syz_clone(0xe00, &(0x7f0000000280)="0b8629413747dc05a521e26be1a10feff4e459df7000d2da0c91bbd6502f1458b9baaaf321ad4a83f9d46caca5c80031c027707130e333e5e019a143905f9783c29ce613322de958ce37d552c1e76ebe8386b4e93a301510b14f4317020f805403146e0bf232d4e618ba7a9c366debda48d0b66665a94c2dab236085b1f6b6f50a8869244dc748276940440f2e5d6606ffc95df3e33a5c0d2c82722659f2ff8e490666c6950e75ae3b09cca8f6f216029b3ff91cd2d165f4b75e323a5f5cbcfe6ddb1aa1f064", 0xc6, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="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") syz_open_procfs$namespace(r4, &(0x7f0000001400)='ns/pid_for_children\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001480), 0xffffffffffffffff) r7 = syz_open_procfs(r4, &(0x7f00000014c0)='net/hci\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x58, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001880) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001600), r7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001840)={0x5, 0x0}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x13, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x3c0}, @jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0x40, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001940)='GPL\x00', 0x80000001, 0x77, &(0x7f0000001980)=""/119, 0x40f00, 0xc, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001a00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0x6, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001a80)=[{0x1, 0x3, 0x7, 0x1c}, {0x1, 0x5, 0x1, 0x8}], 0x10, 0x930, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x13, 0x8, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffe5a, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4}, @exit, @exit]}, &(0x7f0000001680)='syzkaller\x00', 0x7, 0xfd, &(0x7f00000016c0)=""/253, 0x41100, 0x15, '\x00', 0x0, @fallback=0x1d, r7, 0x8, &(0x7f00000017c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001800)={0x4, 0x1, 0x2, 0x8}, 0x10, r9, r10, 0x2, 0x0, &(0x7f0000001b80)=[{0x0, 0x5, 0xb}, {0x1, 0x3, 0x8, 0x7}], 0x10, 0x200, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001d00)={'syztnl2\x00', &(0x7f0000001c80)={'gre0\x00', 0x0, 0x10, 0x7828, 0x8, 0x5, {{0xa, 0x4, 0x0, 0x12, 0x28, 0x64, 0x0, 0x9b, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@lsrr={0x83, 0xb, 0x82, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001dc0)={'ip6tnl0\x00', &(0x7f0000001d40)={'syztnl2\x00', r11, 0x29, 0xd, 0x4, 0x100, 0x8, @remote, @local, 0x20, 0x20, 0x6d25462c, 0x4}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) bind$isdn(r7, &(0x7f0000001e40)={0x22, 0x3, 0xf3, 0x4, 0x7f}, 0x6) getsockname$packet(r7, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001ec0)=0x14) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000001f00)=0x4460, 0x4) accept4$packet(r7, 0x0, &(0x7f0000001f40), 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000002140)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002100)={&(0x7f0000001fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x114, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xee, 0x7, 0x1, 0x0, "108ced8fe2890b0d00ec8eccce0aa2dc3c559d23eb217548bbba66e2081eada6a7590b5f1c8810fce005cfbfee93eab882c3d6cc43aacabc9d85e9725f53d7ae9108ee7c63ee3173c4af3cfa2dc11f5ef97468939b1ca7f9f3701253a435a1ab61f1eb6812a62d1f6e68c2a0a0205f0420c6d9cf287b5e9288ee711b910b21874800a14ec90aff6946830b5d6db61859561b6af639aad348d743f975dd14dc7ffed8e946d328d983c22027cfaf86b891935edfb555ceeef8535944279b6158360a276721253f74b6c3c80553e716f7da8536ea771e71b81563ee1e3f715378114320c2fe120728f5cd20"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) syz_open_dev$sg(&(0x7f0000002180), 0x0, 0x204000) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000003500)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000034c0)={&(0x7f0000002200)={0x12b4, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb7, 0xa8, @random="706b665c4723d95eeced8c47ced872347be61eb84422cc258cc5bf81b60c19a4b9a54fca3ab6b5712345d72b0f1887084018063f82a7cb90a29e2c04aba674f205844119b3c788944093af464b508708b4caabda3b2bc4716914451cc599b52d7aeff40c496e465fcdd5abafcbe040041bd29a91edc061b3853cd0d5e437e1cdca9bfc68a309e42ce7ee2e0d9f1194c3e4f19228f5b9aa8c816d2a86621773c8683bbe57b8e740170d19097d12aa81c84c53da"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5c, 0xa9, @random="bb55d86dcefd1ca0209905b1d16929fc13cfb3d3b6f650badc42f5d466f8ea1f099f685a14869efb1fdde36e25c37776ed63e1229d43bdf070172c20b38358f7bdd27eac6f25d718cc2abd6f2bd1486566d1800645f9eb64"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe2, 0xa9, @random="a7d70d85a74f9c8bc461d7d6413f8fc2298d8e63022b34548efe49faccef54016d44c72a8a1707c0a0c74d6ee6759794bde86934f6327f1758f17ea7761c8c4c7b5c8ac89230ee154541f748b56961109e5490cda8ce77fa78d6e0a94b9fdef8fea3d9bb09a1a6c70f8f0b29a50e947145b7e6632bbfd775e0c8ea1785041861d77c713c20df4cdfdc30056c1bc280e5f3193f772134812ba2521f378c14592d6bfe69fc1ffd30c3dd1abe05720e7a36afab33661b8e90fc2fa7498ed2d22f89414454895a660c0eb180ec5149a22668da0ede891fa5d20b55b07c69b261"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x54, 0xa9, @random="cab8349914b06a3f0ed0a082ee67c2356a2baaf850b88d6a696e680e8cba7986d2c7425ee681c96d271776f23e167327e7f075748377d25ca814c555a29fa0b9303a1b5fad1d10ef591808310fb3e1b2"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7ff}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffb}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000003540)='westwood\x00', 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000003580)={0x10001, 0x1, 0xeeef0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000035c0), 0x10080, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000003600)={@hyper, 0x2}) 5.526730822s ago: executing program 1 (id=5971): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r11, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="500100000000000005000000000800000000000000000000fdffffffffffffff7f000000000000000600000000000000080000040800000004000000000000000c00000000000000060000000000000004000000000000007f00000000000000ff0300000000000008000000070000000000008000e0000008000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="040000008000000000000000050000000000000032050000000000000100000007000000000000000000000000000000000000000200000000000000230c000000000000020000000000000007000000020000000600000000000000030000000000000002000000000000002b00000000000000000000000000000000000000000000000000000004000000000100000060000005000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="08000000cb520000000000000400000000000000810000000000000007000000f8ffffff757365725f69640005dd61adb9457f5c6bfefef4058f9ec853e9609eb7d8db4b7276ce74550032ae8b92968995e61999f6b93086e4a856157af2e73c93ff8f1ef6"], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r6, @ANYBLOB="01082cbd700000", @ANYBLOB="28005080110001004abee339084eeef16f162471f4"], 0x50}, 0x1, 0x0, 0x0, 0x40905}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000, 0x0) pipe2$watch_queue(&(0x7f00000003c0), 0x80) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) 5.403796753s ago: executing program 5 (id=5973): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x18, 0x4, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'veth0_to_batadv\x00', @ifru_hwaddr=@remote}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x88800) r5 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffffffffffffb, 0x101000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000240)={@my=0x1, 0x3b1}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x8, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x99dd, 0x9, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x0, 0x0, 0x3, 0x29, 0x0, @remote, @loopback, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x83, 0x2}, @lsrr={0x83, 0xb, 0x90, [@empty, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}}, {@rand_addr=0x64010102, 0xd}]}]}}}}}) 4.439002432s ago: executing program 3 (id=5976): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc982, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.299017117s ago: executing program 5 (id=5977): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507"], 0x0) 4.297316111s ago: executing program 3 (id=5978): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='memory.events.local\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022f92374a3bbcce99dc6628bd7000ffdbdf250de7000008000400800000000c000380080005007f0000010800040002000000080004000e00"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x8804) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000003c0)={0x0, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x91715c268f6bc8ea, 0x94, 0x3f}, 0x18) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0xa1, 0xf3}) ioctl$TCSETSW2(r7, 0x5434, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000000)={r10, 0x1a, 0x5, 0x200}, &(0x7f0000000480)=0x10) 4.289397088s ago: executing program 1 (id=5979): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0xfffffffffffffffd, 0xe3003) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x44050}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x8000, "43a5d33fc396096b1e0d3edb763adb3ec8615fff1adbea1dbdd5f71c08279d05"}) 4.207696934s ago: executing program 4 (id=5980): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000009d1d020000002400048020000180070001006374000014000280080002400000000c08000140000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, "2111e96f"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "ab38b0f0"}]}}, 0x0}, 0x0) 4.149081833s ago: executing program 0 (id=5981): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8, 0x8000, 0x8, 0x0, {{0x26, 0x4, 0x1, 0x3, 0x98, 0x64, 0x0, 0x7, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x72, 0x1, 0x1, [{@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7fffffff}, {@multicast2, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010100, 0x63e9}, {@rand_addr=0x64010101, 0xffffffdf}, {@rand_addr=0x64010102, 0xb1cb}]}, @timestamp={0x44, 0x1c, 0xc9, 0x0, 0x3, [0xfffffffc, 0x6, 0x1, 0x3, 0x3, 0x5]}, @timestamp_addr={0x44, 0x2c, 0xf1, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3d}}, {@broadcast, 0x2}, {@broadcast, 0x98b3}, {@broadcast, 0x5}, {@empty, 0x7}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x400, 0x2000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x4124, 0x43004}}, 0x20}, 0x1, 0x0, 0x0, 0x48818}, 0x0) 3.002050492s ago: executing program 1 (id=5982): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000600b500c9020000060012000000fb8c0a000600ffffffffffff00001c0081"], 0x60}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f00000000c0)={0x0, 0x7, 0x8000000000000001, 0x0, 0x9}) unshare(0x46011400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r6}) r7 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20280, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x20, 0x72, 0x333, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x15, 0x0) 1.647086779s ago: executing program 3 (id=5983): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2, 0x400000}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2a, 0x0, 0x0) 1.532037625s ago: executing program 1 (id=5984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x44044) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x44044) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x1b, 0x4, 0x71, 0x20, 0x45b, 0x212, 0x1836, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc, 0x80, 0xfa, [{{0x9, 0x4, 0xc4, 0xc8, 0x0, 0x84, 0x40, 0xa0, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 1.169739045s ago: executing program 0 (id=5985): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x300, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0xffffffff}, {0x0, 0x1000000}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 1.061926145s ago: executing program 0 (id=5986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x8, 0x91dd, 0x34324152, 0x0, 0xa, [{0x1ff, 0x6}, {0x14000, 0x1}, {0x100, 0x82}, {0x6, 0x7f}, {0xffffffff, 0x4}, {0x10000009}, {0x7, 0x6}, {0xf, 0x9}], 0x3, 0x73, 0x1, 0x0, 0x5}}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x44, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x22c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) write$tcp_mem(r3, &(0x7f0000000100)={0x0, 0x20, 0x4, 0x20, 0x800}, 0x48) 1.009935002s ago: executing program 3 (id=5987): r0 = fsmount(0xffffffffffffffff, 0x0, 0x84) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000080)={r1}, 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x21f6dd, 0x48661}) write$P9_RREAD(r0, &(0x7f0000000140)={0x3f, 0x75, 0x1, {0x34, "34050d1a8751ab2014e8eea87d4ecef4de71f613f934b7c90ee6e3a7dc5b88165886359b4c139380126f7ca18d906a4a5358c2a3"}}, 0x3f) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) fchdir(r2) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000240)={r0, 0x0, 0x20, 0x0, &(0x7f00000001c0)="5c336c9c2019eb7b68e331383b0fbbfe45f1804953fbc29bee7b04baa88e69d8", 0x0, 0x3, 0x0, 0x11, 0x0, &(0x7f0000000200)="fd574fcfd23df9c62bdf186bbf774449fb"}, 0x50) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={{r2}, 0x3, 0x2, 0x4}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x2, 0x9, [0x3, 0x6, 0x6, 0x2, 0x1000, 0x8, 0x8, 0x8, 0x9]}, &(0x7f0000000340)=0x1a) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={r4, 0x3e6, 0x200}, &(0x7f00000003c0)=0x8) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r2, &(0x7f0000002440)={0x28, 0xffffffffffffffda, r6, {{0x3ff, 0x8000000000000001}}}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x76, &(0x7f0000002480)={0x0, 0xeb99, 0x4, 0x1, 0x2ee, 0x0, r0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000002500)={0xffffffff, 0xfffffff2, 0x100, 0x3}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002580), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002680)={&(0x7f00000025c0)={0xa0, r8, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x432}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002700)={'\x00', 0xd25d, 0xfffffff7, 0x6, 0x7963c75d, 0x0, r7}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002780)={r5, 0x4}, 0x8) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000027c0)=""/158, 0x9e}, {&(0x7f0000002880)=""/181, 0xb5}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002980)=""/198, 0xc6}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/159, 0x9f}, {&(0x7f0000003b40)=""/173, 0xad}], 0x4, &(0x7f0000003c40)}, 0x8}, {{&(0x7f0000003c80)=@tipc, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003d00)=""/169, 0xa9}], 0x1, &(0x7f0000003e00)=""/209, 0xd1}, 0x80}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003f00)=""/120, 0x78}, {&(0x7f0000003f80)=""/253, 0xfd}], 0x2, &(0x7f00000040c0)=""/178, 0xb2}, 0x9}, {{&(0x7f0000004180)=@isdn, 0x80, &(0x7f0000004700)=[{&(0x7f0000004200)=""/24, 0x18}, {&(0x7f0000004240)=""/89, 0x59}, {&(0x7f00000042c0)=""/216, 0xd8}, {&(0x7f00000043c0)=""/135, 0x87}, {&(0x7f0000004480)=""/229, 0xe5}, {&(0x7f0000004580)=""/157, 0x9d}, {&(0x7f0000004640)=""/188, 0xbc}], 0x7, &(0x7f0000004780)}, 0xac}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f00000047c0)=""/146, 0x92}, {&(0x7f0000004880)=""/106, 0x6a}, {&(0x7f0000004900)=""/168, 0xa8}, {&(0x7f00000049c0)=""/186, 0xba}, {&(0x7f0000004a80)=""/122, 0x7a}, {&(0x7f0000004b00)=""/111, 0x6f}, {&(0x7f0000004b80)=""/91, 0x5b}, {&(0x7f0000004c00)=""/149, 0x95}], 0x8, &(0x7f0000004d40)=""/4, 0x4}, 0x3}, {{&(0x7f0000004d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000004e00)=""/88, 0x58}, {&(0x7f0000004e80)=""/22, 0x16}, {&(0x7f0000004ec0)=""/231, 0xe7}, {&(0x7f0000004fc0)=""/226, 0xe2}, {&(0x7f00000050c0)=""/96, 0x60}, {&(0x7f0000005140)=""/107, 0x6b}, {&(0x7f00000051c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006240)=""/142, 0x8e}, 0x1}, {{&(0x7f0000006300)=@pppol2tpv3, 0x80, &(0x7f0000007480)=[{&(0x7f0000006380)=""/3, 0x3}, {&(0x7f00000063c0)=""/90, 0x5a}, {&(0x7f0000006440)=""/4096, 0x1000}, {&(0x7f0000007440)}], 0x4, &(0x7f00000074c0)=""/206, 0xce}, 0xffffffff}], 0x8, 0x100, &(0x7f00000077c0)={0x0, 0x3938700}) syz_open_dev$media(&(0x7f0000007800), 0xffffffffffff5ed2, 0x22002) r9 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000007880)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000007840), 0x2, 0x3c376e6711e8908d}}, 0x20) write$proc_mixer(r3, &(0x7f00000078c0)=[{'VIDEO', @val={' \'', 'Mic'}}, {'IMIX', @val={' \'', 'Master Playback Switch'}}, {'OGAIN', @void}, {'DIGITAL3', @val={' \'', 'Mic Capture'}}, {'PCM', @val={' \'', 'Capture Volume'}}], 0xb0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000007980)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r11 = syz_create_resource$binfmt(&(0x7f00000079c0)='./file0\x00') execveat$binfmt(r10, r11, &(0x7f0000007c00)={[&(0x7f0000007a00)='\x00', &(0x7f0000007a40)='!\x00', &(0x7f0000007a80)='!:\x00', &(0x7f0000007ac0)='DIGITAL3', &(0x7f0000007b00)='\x00', &(0x7f0000007b40)='Master Playback Switch', &(0x7f0000007b80)='Mic Capture', &(0x7f0000007bc0)='eth\x00']}, &(0x7f0000007cc0)={[&(0x7f0000007c80)='TIPCv2\x00']}, 0x400) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000007d00)=@assoc_value={r4, 0x2}, 0x8) 867.735905ms ago: executing program 0 (id=5988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) (async) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000180)={r5, 0x0, 0x0, 0x1, 0xc, 0x0, 0x100, 0x80000001, 0x5, 0x5, 0xfffbfff9, 0x80000003}) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r7, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) 754.998123ms ago: executing program 4 (id=5989): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc982, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 669.504297ms ago: executing program 0 (id=5990): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x40, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r10, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r11, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r7, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1c}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x78}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xa040}, 0x84) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x170, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x150, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x23}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8, 0x21}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_BRIDGE={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x170}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x2, "864f68aaed9cacc30d7c1bfc80df244b107ca9b0f6c8d86390ee02f410657021", "fa38ea84605aff5f089a6e597e45c0e7735ada59895d29eb99bf830aa32397f6", "066701cfcad7f65e6ebf2bfbff322a2a64cd1172cca8ed7ec965ecd4c1aba3c3", "d71c08a554818b88681d8dac9b10bb33bd0e3519640f6c882942720a817cee78", "c3eb6db8fb26889b48687e664e2f7729f5cebacd51f8458d2223c1c0fd9fbf70", "ddaf0a726b2edd4d72f7adac"}}) 587.843548ms ago: executing program 3 (id=5991): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x360, 0x188, 0x290, 0x0, 0x290, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x160, 0x188, 0x0, {0x7a00000000000000}, [@common=@srh1={{0x90}, {0x88, 0xff, 0x2, 0x6, 0x101, @remote, @empty, @private0, [0xffffffff, 0xff, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xff0000ff, 0xff000000], [0xff000000, 0xffffffff, 0xff], 0x188, 0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x30, 0xb, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) (fail_nth: 6) 536.73125ms ago: executing program 0 (id=5992): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x40180, 0x0) read$FUSE(r1, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x5, 0x3, 0x0, {0x0, 0xfff9}, {0xa}, @cond=[{0x0, 0x0, 0x0, 0x80, 0x0, 0x2}, {0x0, 0x0, 0xd22, 0x1, 0x80}]}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_usb_connect(0x6, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 53.605755ms ago: executing program 4 (id=5993): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x10800, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000001c0)={{0x4, 0x1}, {0x16, 0xc}, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xfdef) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRESDEC], 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xd8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x4, 0xe, 0x0, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x10001, 0x5, 0x6, 0x8, 0x4, 0x1, 0x8f0], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0xd, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x3, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x9f8c, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x6, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x9, 0x408, 0x1000, 0x5, 0xfffffffe, 0x4100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x40000, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xe, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x0, 0xbcf2, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x47, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x1, 0x8, 0x9, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x6, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000200)=0x2, 0x4) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r5) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69fe0000000002000000180000000200861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x8040}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x58840}, 0x0) 0s ago: executing program 3 (id=5994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680)) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(r4, 0x10, &(0x7f0000001880)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r5 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x3c, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x7f}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x756}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) close(r5) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040026bd7000fedbdf251000000008004e41b64b1651b2050300a82a5f77e4cb5757619b86f07558c2f1530366a9849b19688d335a859e5cd5d98c2ebc0e85c90a8f4644b39e17033f4d7b9a7de0fe044e3bd2ece804b713eaeb3c5e0587bfb8871553b8e00d408d052a874eb93db6b0c4b9bd97a3e9dbb39307eb61e1fa6fdbc10b82b3b5ac16932111bc66bcc917cab93fe4a4c10b0b876ef579fa2a815b75b214842900790b5a09039b1536609b86c65c8fb86c", @ANYRES32=r9, @ANYBLOB="0c009900ae00000022000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r10 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000005c0)=r6, 0x12) r11 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r11, &(0x7f00000000c0)='THAWED\x00', 0x7) kernel console output (not intermixed with test programs): fffffffb [ 1688.929251][T28010] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1688.981259][T28010] em28xx 2-1:0.0: No AC97 audio processor [ 1689.037819][T28010] usb 2-1: USB disconnect, device number 112 [ 1689.070210][T28010] em28xx 2-1:0.0: Disconnecting em28xx [ 1689.098302][T28010] em28xx 2-1:0.0: Freeing device [ 1689.530655][T28010] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1689.814065][T28097] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1689.826543][T28010] usb 2-1: Using ep0 maxpacket: 16 [ 1690.526460][ T5849] Bluetooth: hci1: unexpected event 0x20 length: 19 > 7 [ 1690.780743][ T7303] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1690.960813][ T7303] usb 4-1: Using ep0 maxpacket: 16 [ 1690.973706][ T7303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.018859][ T7303] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1691.057324][ T7303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.113490][ T7303] usb 4-1: config 0 descriptor?? [ 1691.342073][ T7303] usbhid 4-1:0.0: can't add hid device: -71 [ 1691.372818][ T7303] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1691.420268][ T7303] usb 4-1: USB disconnect, device number 126 [ 1691.841665][ T5825] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1692.000789][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 1692.568053][T28010] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1692.602695][T28010] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1692.649447][T28010] usb 2-1: can't read configurations, error -71 [ 1692.672706][ T7303] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1692.830952][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5589'. [ 1692.854477][ T7303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.885409][ T7303] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1692.940854][ T7303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.016282][ T7303] usb 6-1: config 0 descriptor?? [ 1693.383118][T28137] kvm: pic: non byte write [ 1693.510733][ T7294] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1693.526174][ T7303] kye 0003:0458:0087.006D: unbalanced collection at end of report description [ 1693.563458][ T7303] kye 0003:0458:0087.006D: parse failed [ 1693.609847][ T7303] kye 0003:0458:0087.006D: probe with driver kye failed with error -22 [ 1693.706724][ T7294] usb 5-1: Using ep0 maxpacket: 8 [ 1693.717446][ T7294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.736195][ T7294] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1693.761841][ T7303] usb 6-1: USB disconnect, device number 42 [ 1693.791184][ T7294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.839315][ T7294] usb 5-1: config 0 descriptor?? [ 1694.303665][ T7294] hid-multitouch 0003:0EEF:72C4.006E: unknown main item tag 0x0 [ 1694.360469][ T7294] hid-multitouch 0003:0EEF:72C4.006E: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 1694.478446][ T7303] usb 5-1: USB disconnect, device number 52 [ 1694.567149][T28146] fido_id[28146]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1694.660723][T18102] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1694.810803][T18102] usb 6-1: Using ep0 maxpacket: 16 [ 1694.828466][T18102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.857608][T18102] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.869653][T18102] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1694.881205][T18102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.895434][T18102] usb 6-1: config 0 descriptor?? [ 1694.924413][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1694.952645][ T5825] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1694.971423][ T5825] usb 1-1: can't read configurations, error -71 [ 1695.385354][T18102] usbhid 6-1:0.0: can't add hid device: -71 [ 1695.468711][T18102] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1695.497613][T18102] usb 6-1: USB disconnect, device number 43 [ 1695.698490][T14013] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 1695.757876][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.789423][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.801812][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.810809][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.829813][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.860049][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.879806][T14013] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 1695.891468][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.893017][T14013] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 1695.938241][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.946355][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.958688][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.973699][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1695.991393][T14013] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 224, changing to 4 [ 1696.016897][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1696.071084][T18102] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1696.071096][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1696.071412][T14013] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 1696.079226][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1696.115196][ T7294] hid-generic 00A0:0006:0003.006F: unknown main item tag 0x0 [ 1696.149926][T14013] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1696.159916][ T7294] hid-generic 00A0:0006:0003.006F: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1696.162078][T14013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.250900][T18102] usb 6-1: Using ep0 maxpacket: 16 [ 1696.260856][T14013] usb 4-1: Product: 썮씓尲頣쭮獔误㥧㞌珜ᢔ牟㭛돩딩宸혣﷼ﻥ苽囥ꇩ铇Əꍓ뾚㦉㕞ୱ簤㱪㤚걿ᨽ鼊廿퓅ᇠ啶浼羙뷀렑瑇ᩧ⑊뷢讵Ḑᤩ㏁錼焫๻镄㫟湍柝㟁│╠䷢㳛魷ᅃᘄ⩩뭠榑럼❁血裘㙂垵룝ྩ㵵䯺洳ᾍ홏壇正縫膔弾漋ꁁ窏⧋쯬ⵚ⽨᭟姳覼桓⑯쌌裘嚀 [ 1696.299332][T18102] usb 6-1: config 0 has no interfaces? [ 1696.341950][T18102] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1696.360694][T18102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.377707][T20152] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1696.411608][T18102] usb 6-1: Product: syz [ 1696.418834][T18102] usb 6-1: Manufacturer: syz [ 1696.426264][T14013] usb 4-1: Manufacturer: 獡聳ͼ歆⽟캧軣䠌诃ꓳ퍥ꪈ䊕岩梑횯맻꫑纭茛鷫矬΋潭⡛ﷸ壧겒❊⼲兜诱첚殤үꤼ鱕䠊툏♏ᤉ㔭⒵᛫⮙❖뿰ਃņ㰴돠᜜曉섘犛Ꮪ믈쀁㯵ꉓ▢妟첺졗ᦠ쉍顟㍿哔뭦참떷ᨮ庥ᇔΆ㲑ꌴළ [ 1696.456697][T18102] usb 6-1: SerialNumber: syz [ 1696.497722][T18102] usb 6-1: config 0 descriptor?? [ 1696.563546][T20152] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1696.576049][T20152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1696.594724][T20152] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1696.600620][T14013] usb 4-1: SerialNumber: 㙘 [ 1696.626762][T20152] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1696.639617][T20152] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1696.654780][T20152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.664336][T20152] usb 2-1: Product: syz [ 1696.669579][T20152] usb 2-1: Manufacturer: syz [ 1696.678784][T20152] usb 2-1: SerialNumber: syz [ 1696.741545][T18102] usb 6-1: USB disconnect, device number 44 [ 1696.742282][T20152] smsusb:smsusb_probe: board id=8, interface number 0 [ 1696.908872][T14013] usb 4-1: low speed audio streaming not supported [ 1696.921860][T28172] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1696.948817][T20152] smsusb:smsusb_probe: Device initialized with return code -19 [ 1697.106841][T14013] usb 4-1: USB disconnect, device number 127 [ 1697.160048][T22727] udevd[22727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1697.530930][ T5825] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1697.670650][ T5825] usb 1-1: device descriptor read/64, error -71 [ 1697.695235][T28185] kvm: pic: non byte write [ 1697.921502][ T5825] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1698.060666][ T5825] usb 1-1: device descriptor read/64, error -71 [ 1698.110655][T18102] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1698.171155][ T5825] usb usb1-port1: attempt power cycle [ 1698.241934][T18102] usb 4-1: device descriptor read/64, error -71 [ 1698.480978][T18102] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1698.510781][ T5825] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1698.523047][T28192] loop2: detected capacity change from 0 to 7 [ 1698.530418][T28192] Dev loop2: unable to read RDB block 7 [ 1698.536243][T28192] loop2: unable to read partition table [ 1698.542879][ T5825] usb 1-1: device descriptor read/8, error -71 [ 1698.551295][T28192] loop2: partition table beyond EOD, truncated [ 1698.557902][T28192] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1698.621143][T18102] usb 4-1: device descriptor read/64, error -71 [ 1698.732236][T18102] usb usb4-port1: attempt power cycle [ 1698.791034][ T5825] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1698.825338][ T5825] usb 1-1: device descriptor read/8, error -71 [ 1698.941338][ T5825] usb usb1-port1: unable to enumerate USB device [ 1699.091051][T18102] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1699.123256][T18102] usb 4-1: device descriptor read/8, error -71 [ 1699.149606][ T5825] usb 2-1: USB disconnect, device number 115 [ 1699.363587][T18102] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1699.411323][T18102] usb 4-1: device descriptor read/8, error -71 [ 1699.528182][T18102] usb usb4-port1: unable to enumerate USB device [ 1700.107236][T28227] kvm: pic: non byte write [ 1700.519984][T28237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5620'. [ 1700.791842][T20152] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1700.952289][T20152] usb 1-1: Using ep0 maxpacket: 32 [ 1700.973884][T28243] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 1700.984448][T20152] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 1701.001673][T20152] usb 1-1: config 0 has no interface number 0 [ 1701.015792][T20152] usb 1-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1701.045435][T20152] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1701.060595][T20152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.077508][T20152] usb 1-1: Product: syz [ 1701.090576][T20152] usb 1-1: Manufacturer: syz [ 1701.120149][T20152] usb 1-1: SerialNumber: syz [ 1701.161257][T20152] usb 1-1: config 0 descriptor?? [ 1701.171558][T28239] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1701.274992][T28251] netlink: 304 bytes leftover after parsing attributes in process `syz.1.5625'. [ 1701.378027][T28258] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5626'. [ 1701.442810][T20152] net1080 1-1:0.183: probe with driver net1080 failed with error -71 [ 1701.562918][T20152] usb 1-1: USB disconnect, device number 54 [ 1701.679893][T28263] syz.1.5625 (28263): drop_caches: 2 [ 1701.884892][T28251] syz.1.5625 (28251): drop_caches: 2 [ 1701.892853][T28251] syz.1.5625 (28251): drop_caches: 2 [ 1702.110699][ T5825] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1702.213042][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 1702.226984][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5629'. [ 1702.280651][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 1702.289955][T28274] input: syz1 as /devices/virtual/input/input163 [ 1702.293720][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.352993][ T5825] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1702.404416][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.426612][ T5825] usb 6-1: config 0 descriptor?? [ 1702.448192][ T5825] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1702.757254][T28288] xt_HMARK: spi-set and port-set can't be combined [ 1702.765219][T28287] xt_HMARK: spi-set and port-set can't be combined [ 1702.770681][T18102] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1702.940700][T18102] usb 2-1: Using ep0 maxpacket: 8 [ 1702.948700][T18102] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1702.958168][T18102] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 1702.968248][T18102] usb 2-1: config 8 has no interface number 0 [ 1702.983982][T18102] usb 2-1: config 8 interface 255 has no altsetting 0 [ 1703.011139][T18102] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1703.038600][T18102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.058877][T18102] usb 2-1: Product: syz [ 1703.063328][T18102] usb 2-1: Manufacturer: syz [ 1703.068083][T18102] usb 2-1: SerialNumber: syz [ 1703.273604][T20152] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1703.305876][T28283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.316690][T28283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.335833][T18102] catc 2-1:8.255: Can't set altsetting 1. [ 1703.342262][T18102] catc 2-1:8.255: probe with driver catc failed with error -5 [ 1703.360185][T18102] usb 2-1: USB disconnect, device number 116 [ 1703.441914][T20152] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1703.473648][T20152] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1703.504046][T20152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.530189][T20152] usb 1-1: Product: syz [ 1703.544946][T20152] usb 1-1: Manufacturer: syz [ 1703.555451][T20152] usb 1-1: SerialNumber: syz [ 1703.634331][T28302] fuse: Invalid uid '00000000000007100110513' [ 1703.811764][T20152] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1703.828319][T20152] usb 1-1: 2:1 : sample bitwidth 232 in over sample bytes 4 [ 1703.840116][T20152] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1703.878671][T20152] usb 1-1: USB disconnect, device number 55 [ 1704.104358][T28309] SET target dimension over the limit! [ 1704.171831][ T5825] gspca_vc032x: reg_w err -110 [ 1704.190087][ T5825] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 1704.485213][T28316] fuse: Bad value for 'user_id' [ 1704.527692][T28316] fuse: Bad value for 'user_id' [ 1704.932395][ T5825] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1705.143325][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 1705.152992][ T5825] usb 4-1: config 0 has an invalid interface number: 78 but max is 0 [ 1705.181063][ T5825] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1705.189832][ T5825] usb 4-1: config 0 has no interface number 0 [ 1705.217855][ T7303] usb 6-1: USB disconnect, device number 45 [ 1705.225703][ T5825] usb 4-1: config 0 interface 78 altsetting 222 has a duplicate endpoint with address 0x9, skipping [ 1705.236871][ T5825] usb 4-1: config 0 interface 78 altsetting 222 endpoint 0xB has invalid maxpacket 1007, setting to 64 [ 1705.250344][ T5825] usb 4-1: config 0 interface 78 altsetting 222 has a duplicate endpoint with address 0x9, skipping [ 1705.330917][ T5825] usb 4-1: config 0 interface 78 altsetting 222 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1705.376781][ T5825] usb 4-1: config 0 interface 78 altsetting 222 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1705.409802][ T5825] usb 4-1: config 0 interface 78 altsetting 222 has an invalid descriptor for endpoint zero, skipping [ 1705.418829][T28333] sctp: [Deprecated]: syz.4.5647 (pid 28333) Use of int in maxseg socket option. [ 1705.418829][T28333] Use struct sctp_assoc_value instead [ 1705.445319][T28337] hsr0: entered promiscuous mode [ 1705.449429][ T5825] usb 4-1: config 0 interface 78 altsetting 222 endpoint 0x6 has invalid maxpacket 959, setting to 64 [ 1705.480801][ T5825] usb 4-1: config 0 interface 78 altsetting 222 has an invalid descriptor for endpoint zero, skipping [ 1705.495040][ T5825] usb 4-1: config 0 interface 78 altsetting 222 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1705.517471][ T5825] usb 4-1: config 0 interface 78 altsetting 222 endpoint 0x8A has an invalid bInterval 22, changing to 8 [ 1705.579603][ T5825] usb 4-1: config 0 interface 78 altsetting 222 endpoint 0x8A has invalid maxpacket 49174, setting to 1024 [ 1705.648636][T28342] pimreg: left allmulticast mode [ 1705.707540][ T5825] usb 4-1: config 0 interface 78 altsetting 222 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1705.753062][ T5825] usb 4-1: config 0 interface 78 has no altsetting 0 [ 1705.792386][ T5825] usb 4-1: New USB device found, idVendor=12d1, idProduct=19d6, bcdDevice=d0.49 [ 1705.832717][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.880422][ T5825] usb 4-1: Product: syz [ 1705.888501][ T5825] usb 4-1: Manufacturer: syz [ 1705.896787][ T5825] usb 4-1: SerialNumber: syz [ 1705.920467][ T5825] usb 4-1: config 0 descriptor?? [ 1705.949245][T28324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1705.961278][T28324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1705.976769][ T5825] option 4-1:0.78: GSM modem (1-port) converter detected [ 1706.006321][T28346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1706.276932][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1706.276952][ T31] audit: type=1326 audit(1749897765.290:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28345 comm="syz.4.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341d8e929 code=0x7fc00000 [ 1706.331267][ T5825] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1706.500908][T14013] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1706.530883][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 1706.559887][ T5825] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 1706.591789][ T5825] usb 6-1: config 0 has no interface number 0 [ 1706.598000][ T5825] usb 6-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1706.632182][ T5825] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1706.642934][T14013] usb 5-1: device descriptor read/64, error -71 [ 1706.673292][ T5825] usb 6-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1706.710572][ T5825] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1706.744328][ T5825] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1706.783941][ T5825] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1706.821198][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.861590][ T5825] usb 6-1: config 0 descriptor?? [ 1706.889990][ T5825] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1706.897542][T14013] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1706.917340][ T7294] usb 4-1: USB disconnect, device number 6 [ 1706.955525][ T7294] option 4-1:0.78: device disconnected [ 1707.052082][T14013] usb 5-1: device descriptor read/64, error -71 [ 1707.151841][T22728] udevd[22728]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1707.186875][T14013] usb usb5-port1: attempt power cycle [ 1707.383954][T28349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5652'. [ 1707.561989][T14013] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1707.571540][ T5825] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 1707.611722][T14013] usb 5-1: device descriptor read/8, error -71 [ 1707.780607][ T5825] usb 1-1: Invalid ep0 maxpacket: 64 [ 1707.891325][T14013] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1707.911009][ T5825] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 1707.930656][T14013] usb 5-1: device descriptor read/8, error -71 [ 1708.051319][T14013] usb usb5-port1: unable to enumerate USB device [ 1708.085363][ T5825] usb 1-1: Invalid ep0 maxpacket: 64 [ 1708.092457][ T5825] usb usb1-port1: attempt power cycle [ 1708.463330][ T5825] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 1708.531362][ T5825] usb 1-1: Invalid ep0 maxpacket: 64 [ 1708.671499][ T5825] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 1708.721404][ T5825] usb 1-1: Invalid ep0 maxpacket: 64 [ 1708.740711][ T5825] usb usb1-port1: unable to enumerate USB device [ 1708.946940][ T31] audit: type=1326 audit(1749897767.970:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28345 comm="syz.4.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9341d8e929 code=0x7fc00000 [ 1709.211386][ T7303] usb 6-1: USB disconnect, device number 46 [ 1709.363107][T28380] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5661'. [ 1709.691061][T28385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5662'. [ 1710.213401][T28396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.222169][T20152] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1710.242138][T28396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.410775][T20152] usb 5-1: Using ep0 maxpacket: 32 [ 1710.459265][T20152] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1710.517752][T20152] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1710.560686][T20152] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1710.592794][T20152] usb 5-1: Product: syz [ 1710.641063][T20152] usb 5-1: Manufacturer: syz [ 1710.659043][T20152] usb 5-1: SerialNumber: syz [ 1710.674719][T20152] usb 5-1: config 0 descriptor?? [ 1710.685238][T28395] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1710.706376][T20152] hub 5-1:0.0: bad descriptor, ignoring hub [ 1710.785481][T20152] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1710.830643][ T7294] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1710.941768][T20152] usb 5-1: USB disconnect, device number 57 [ 1711.012815][ T7294] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1711.023363][ T7294] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1711.039440][ T7294] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1711.058719][ T7294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.069482][ T7294] usb 4-1: Product: syz [ 1711.074087][ T7294] usb 4-1: Manufacturer: syz [ 1711.084501][ T7294] usb 4-1: SerialNumber: syz [ 1711.281874][ T31] audit: type=1326 audit(1749897770.310:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.5.5671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c2c18e929 code=0x0 [ 1711.322823][ T7294] cdc_ncm 4-1:1.0: bind() failure [ 1711.324362][T28420] fuse: Bad value for 'fd' [ 1711.359247][ T7294] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1711.378021][ T7294] cdc_ncm 4-1:1.1: bind() failure [ 1711.421321][ T7294] usb 4-1: USB disconnect, device number 7 [ 1711.584570][T28424] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1711.591155][T28424] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1711.601091][T28424] vhci_hcd vhci_hcd.0: Device attached [ 1711.703264][T28427] pim6reg: entered allmulticast mode [ 1711.711405][T28427] pim6reg: left allmulticast mode [ 1711.781137][T14013] vhci_hcd: vhci_device speed not set [ 1711.841183][T14013] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1711.850605][ T7303] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1712.023005][ T7303] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1712.032017][ T7303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.043461][ T7303] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1712.052910][ T7303] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1712.061265][ T7303] usb 6-1: Manufacturer: syz [ 1712.069933][ T7303] usb 6-1: config 0 descriptor?? [ 1712.160724][ T7303] rc_core: IR keymap rc-hauppauge not found [ 1712.174224][ T7303] Registered IR keymap rc-empty [ 1712.183960][ T7303] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1712.200801][T20152] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1712.205327][ T7303] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input164 [ 1712.297167][T28425] vhci_hcd: connection reset by peer [ 1712.302925][ T7303] usb 6-1: USB disconnect, device number 47 [ 1712.312244][T23905] vhci_hcd: stop threads [ 1712.326382][T23905] vhci_hcd: release socket [ 1712.347137][T23905] vhci_hcd: disconnect device [ 1712.391074][T20152] usb 4-1: Using ep0 maxpacket: 16 [ 1712.414561][T20152] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 1712.446145][T20152] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.465269][T20152] usb 4-1: config 4 has no interface number 0 [ 1712.471857][T20152] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1712.486067][T20152] usb 4-1: config 4 interface 51 has no altsetting 0 [ 1712.496163][T20152] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1712.524306][T20152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.549171][T20152] usb 4-1: Product: syz [ 1712.559342][T20152] usb 4-1: Manufacturer: syz [ 1712.572401][T20152] usb 4-1: SerialNumber: syz [ 1712.599764][T20152] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 1713.051160][ T7303] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1713.180577][T28454] program syz.5.5681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1713.199638][T28454] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1713.240669][ T7303] usb 5-1: Using ep0 maxpacket: 32 [ 1713.247859][ T7303] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1713.257738][ T7303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.269571][ T7303] usb 5-1: config 0 descriptor?? [ 1713.283150][ T7303] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1713.440875][T18102] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1713.611266][T18102] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1713.622984][T18102] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.638761][T18102] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1713.651632][T18102] usb 6-1: config 1 has no interface number 1 [ 1713.675583][T18102] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1713.692309][T18102] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1713.707644][T18102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.720757][T18102] usb 6-1: Product: syz [ 1713.725149][T18102] usb 6-1: Manufacturer: syz [ 1713.729921][T18102] usb 6-1: SerialNumber: syz [ 1713.870742][ T5825] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1713.953409][T18102] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1713.969497][T18102] usb 6-1: MIDIStreaming interface descriptor not found [ 1713.999637][ T7303] gspca_vc032x: reg_w err -110 [ 1714.012195][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.017559][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.041617][T18102] usb 6-1: USB disconnect, device number 48 [ 1714.053742][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 1714.058977][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.072999][ T5825] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1714.087021][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.111473][ T5825] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1714.123252][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.134006][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.143585][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.155103][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.160578][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.169059][ T5825] usb 2-1: Product: syz [ 1714.173830][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.179407][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.185451][ T5825] usb 2-1: Manufacturer: syz [ 1714.192266][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.198725][ T5825] usb 2-1: SerialNumber: syz [ 1714.204272][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.220881][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.226531][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.236646][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.244010][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.249488][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.252773][T22730] udevd[22730]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1714.262405][ T7303] gspca_vc032x: I2c Bus Busy Wait 00 [ 1714.279305][ T5825] usb 2-1: config 0 descriptor?? [ 1714.304339][ T7303] gspca_vc032x: Unknown sensor... [ 1714.317563][ T7303] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1714.544729][T18102] usb 2-1: USB disconnect, device number 117 [ 1714.733196][T28470] fuse: Bad value for 'fd' [ 1714.968689][T18102] usb 4-1: USB disconnect, device number 8 [ 1715.321352][T18102] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1715.482230][T20152] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1715.484278][T18102] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.513486][T18102] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1715.528850][T18102] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1715.545782][T18102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1715.554423][T18102] usb 4-1: SerialNumber: syz [ 1715.715843][T20152] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 1715.850672][T20152] usb 2-1: config 0 has no interfaces? [ 1715.879316][ T5825] usb 5-1: USB disconnect, device number 58 [ 1715.918873][T18102] usb 4-1: 0:2 : does not exist [ 1716.021655][T20152] usb 2-1: config 0 has no interfaces? [ 1716.042737][T18102] usb 4-1: USB disconnect, device number 9 [ 1716.069098][T20152] usb 2-1: config 0 has no interfaces? [ 1716.083026][T20152] usb 2-1: config 0 has no interfaces? [ 1716.110544][T20152] usb 2-1: config 0 has no interfaces? [ 1716.132098][T20152] usb 2-1: config 0 has no interfaces? [ 1716.139544][T20152] usb 2-1: config 0 has no interfaces? [ 1716.146776][T20152] usb 2-1: config 0 has no interfaces? [ 1716.156118][T20152] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1716.168536][T20152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.177488][T20152] usb 2-1: Product: syz [ 1716.219173][T20152] usb 2-1: Manufacturer: syz [ 1716.232704][T20152] usb 2-1: SerialNumber: syz [ 1716.243007][T22727] udevd[22727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1716.275952][T20152] usb 2-1: config 0 descriptor?? [ 1716.378498][ T5825] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1716.513914][T20152] usb 2-1: USB disconnect, device number 118 [ 1716.671326][ T5825] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1716.688271][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1716.698059][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1716.713025][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1716.894933][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1716.907732][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1716.919250][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1716.945570][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1716.954865][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1716.966304][T14013] vhci_hcd: vhci_device speed not set [ 1717.010708][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1717.033175][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1717.059524][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1717.104935][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1717.170643][ T7302] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1717.190809][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1717.200726][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1717.267688][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1717.340914][ T7302] usb 2-1: Using ep0 maxpacket: 32 [ 1717.348708][ T7302] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1717.360229][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1717.372796][ T7302] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1717.409283][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1717.425202][ T7302] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1717.510809][ T7302] usb 2-1: Product: syz [ 1717.515059][ T7302] usb 2-1: Manufacturer: syz [ 1717.519694][ T7302] usb 2-1: SerialNumber: syz [ 1717.524945][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1717.552871][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1717.566843][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1717.583032][ T7302] usb 2-1: config 0 descriptor?? [ 1717.608773][T28480] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1717.617193][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1717.662506][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1717.679757][T28512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5696'. [ 1717.692731][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1717.729700][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1717.759195][ T5825] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1717.777200][ T5825] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1717.807687][ T5825] usb 5-1: Product: syz [ 1717.817821][ T5825] usb 5-1: Manufacturer: syz [ 1717.827929][ T5825] usb 5-1: SerialNumber: syz [ 1717.876840][ T5825] usb 5-1: config 0 descriptor?? [ 1717.908667][ T5825] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 1718.116267][T14013] usb 5-1: USB disconnect, device number 59 [ 1718.129763][T14013] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 1718.677066][T28524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1718.693554][T28525] fuse: Bad value for 'fd' [ 1718.819366][T28527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5701'. [ 1719.232685][T14013] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1719.480637][T14013] usb 1-1: Using ep0 maxpacket: 16 [ 1719.494448][T14013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1719.542512][T14013] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1719.607187][T14013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.647719][T14013] usb 1-1: config 0 descriptor?? [ 1720.181430][ T5825] usb 2-1: USB disconnect, device number 119 [ 1721.602994][T14013] usbhid 1-1:0.0: can't add hid device: -71 [ 1721.625040][T14013] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1721.652310][T14013] usb 1-1: USB disconnect, device number 60 [ 1721.780931][ T5825] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1721.972948][T18102] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1721.992486][ T5825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1722.027717][ T5825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1722.052377][ T5825] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1722.069752][ T5825] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1722.085797][ T5825] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1722.105643][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.115776][ T5825] usb 4-1: Product: syz [ 1722.121267][ T5825] usb 4-1: Manufacturer: syz [ 1722.126993][ T5825] usb 4-1: SerialNumber: syz [ 1722.140776][T18102] usb 2-1: Using ep0 maxpacket: 32 [ 1722.155951][ T5825] smsusb:smsusb_probe: board id=8, interface number 0 [ 1722.172092][T18102] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 1722.184713][T18102] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1722.194532][T18102] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.205147][T18102] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1722.216670][T18102] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1722.226773][T18102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.022115][T28593] syz.4.5716: attempt to access beyond end of device [ 1723.022115][T28593] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1723.431776][T28010] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1723.615260][T28010] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1723.645080][T28010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.762418][T28010] usb 1-1: Product: syz [ 1723.892824][T28010] usb 1-1: Manufacturer: syz [ 1723.897528][T28010] usb 1-1: SerialNumber: syz [ 1724.429603][T28010] usb 1-1: config 0 descriptor?? [ 1724.656790][T28572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.683171][T28572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.716203][T28010] hso 1-1:0.0: Can't find BULK IN endpoint [ 1724.727568][T28010] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1724.745036][ T5825] smsusb:smsusb_probe: Device initialized with return code -19 [ 1724.762562][T28574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.899170][T14013] usb 2-1: USB disconnect, device number 120 [ 1724.952783][T28572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.025805][T28010] usb 1-1: USB disconnect, device number 61 [ 1725.034574][T28572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.365183][T28010] usb 4-1: USB disconnect, device number 10 [ 1726.210793][T28010] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1726.470568][T28010] usb 6-1: Using ep0 maxpacket: 32 [ 1726.487052][T28010] usb 6-1: config 0 has no interfaces? [ 1726.549034][T28010] usb 6-1: New USB device found, idVendor=3340, idProduct=0326, bcdDevice=70.c9 [ 1726.579187][T28010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.607046][T28010] usb 6-1: Product: syz [ 1726.612270][T28010] usb 6-1: Manufacturer: syz [ 1726.618028][T28010] usb 6-1: SerialNumber: syz [ 1726.628321][T28010] usb 6-1: config 0 descriptor?? [ 1727.586321][ T31] audit: type=1326 audit(1749897786.610:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1727.669754][T28667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1727.680886][T14013] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1727.696729][T28667] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1727.706108][ T31] audit: type=1326 audit(1749897786.610:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1727.731438][ T31] audit: type=1326 audit(1749897786.610:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1727.767531][ T31] audit: type=1326 audit(1749897786.610:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1727.799114][T28671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1727.816114][ T31] audit: type=1326 audit(1749897786.610:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1727.849381][ T31] audit: type=1326 audit(1749897786.610:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1727.898697][ T31] audit: type=1326 audit(1749897786.610:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1728.109890][ T31] audit: type=1326 audit(1749897786.610:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1728.258363][ T31] audit: type=1326 audit(1749897786.610:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1728.320148][T28677] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5735'. [ 1728.330193][ T31] audit: type=1326 audit(1749897786.610:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28664 comm="syz.4.5733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9341d8e929 code=0x7ffc0000 [ 1728.931506][T28010] usb 6-1: USB disconnect, device number 49 [ 1729.780597][T20152] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1729.990939][T20152] usb 5-1: Using ep0 maxpacket: 32 [ 1730.002544][T20152] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 1730.019229][T20152] usb 5-1: config 0 has no interface number 0 [ 1730.031156][T20152] usb 5-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1730.058888][T20152] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1730.103950][T20152] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1730.360966][T20152] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1730.372442][T20152] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1730.382615][T20152] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1730.392398][T20152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.411234][T20152] usb 5-1: config 0 descriptor?? [ 1730.427368][T20152] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1730.989761][T14013] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1731.011731][T14013] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1731.019443][T14013] usb 1-1: can't read configurations, error -71 [ 1731.039534][T28709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5742'. [ 1731.184925][T28713] xt_CT: No such helper "snmp" [ 1731.222263][T28713] loop2: detected capacity change from 0 to 7 [ 1731.232945][T28713] Dev loop2: unable to read RDB block 7 [ 1731.238684][T28713] loop2: AHDI p2 p3 [ 1731.281870][T28727] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1731.293061][T28713] loop2: partition table partially beyond EOD, truncated [ 1731.332799][T28713] loop2: p2 size 150995456 extends beyond EOD, truncated [ 1731.579675][T22727] udevd[22727]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1731.664957][T28740] syzkaller0: entered promiscuous mode [ 1731.670630][T28740] syzkaller0: entered allmulticast mode [ 1731.720920][T20152] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1731.905000][T20152] usb 4-1: config index 0 descriptor too short (expected 7061, got 27) [ 1731.925828][T20152] usb 4-1: config 10 has too many interfaces: 224, using maximum allowed: 32 [ 1731.948367][T20152] usb 4-1: config 10 has an invalid descriptor of length 73, skipping remainder of the config [ 1732.000628][T20152] usb 4-1: config 10 has 0 interfaces, different from the descriptor's value: 224 [ 1732.016565][T20152] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 1732.029188][T28751] : entered promiscuous mode [ 1732.035917][T20152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.051160][T20152] usb 4-1: Product: syz [ 1732.055392][T20152] usb 4-1: Manufacturer: syz [ 1732.080872][T20152] usb 4-1: SerialNumber: syz [ 1732.328504][T20152] usb 4-1: USB disconnect, device number 11 [ 1732.425130][T28762] loop8: detected capacity change from 16320 to 0 [ 1732.446679][ C0] I/O error, dev loop8, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 1732.504649][T28765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1732.540331][T28765] kvm: pic: non byte read [ 1732.555962][T14013] usb 5-1: USB disconnect, device number 60 [ 1732.571850][T28765] kvm: pic: level sensitive irq not supported [ 1732.571982][T28765] kvm: pic: non byte read [ 1732.595319][T28765] kvm: pic: level sensitive irq not supported [ 1732.595397][T28765] kvm: pic: non byte read [ 1732.606474][T28769] netlink: 'syz.5.5759': attribute type 5 has an invalid length. [ 1732.649086][T28765] kvm: pic: level sensitive irq not supported [ 1732.650431][T28765] kvm: pic: non byte read [ 1732.681383][T28765] kvm: pic: level sensitive irq not supported [ 1732.681463][T28765] kvm: pic: non byte read [ 1732.704785][T28765] kvm: pic: level sensitive irq not supported [ 1732.704868][T28765] kvm: pic: non byte read [ 1732.731583][T28765] kvm: pic: level sensitive irq not supported [ 1732.731664][T28765] kvm: pic: non byte read [ 1732.760929][T28765] kvm: pic: level sensitive irq not supported [ 1732.761009][T28765] kvm: pic: non byte read [ 1732.782865][T28765] kvm: pic: level sensitive irq not supported [ 1732.783025][T28765] kvm: pic: non byte read [ 1732.864838][T28765] kvm: pic: level sensitive irq not supported [ 1732.864933][T28765] kvm: pic: non byte read [ 1732.887613][T28765] kvm: pic: level sensitive irq not supported [ 1733.000874][ T7294] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1733.147934][T14013] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1733.238769][ T7294] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1733.256568][ T7294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.302653][ T7294] usb 2-1: config 0 descriptor?? [ 1733.309911][T28782] loop2: detected capacity change from 0 to 7 [ 1733.326394][T14013] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.327272][T28782] Dev loop2: unable to read RDB block 7 [ 1733.350870][T14013] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1733.375680][T28782] loop2: unable to read partition table [ 1733.394966][T14013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1733.401113][T28782] loop2: partition table beyond EOD, truncated [ 1733.431034][T14013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1733.442550][T28782] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1733.451336][T14013] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1733.509928][T14013] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1733.541022][T14013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1733.559408][T14013] usb 5-1: Product: syz [ 1733.601306][T14013] usb 5-1: Manufacturer: syz [ 1733.614701][T14013] usb 5-1: SerialNumber: syz [ 1733.628380][T14013] usb 5-1: config 0 descriptor?? [ 1733.677815][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 1733.677860][ T31] audit: type=1326 audit(1749897792.700:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1733.683546][T28788] batadv_slave_1: entered promiscuous mode [ 1733.690994][ T31] audit: type=1326 audit(1749897792.700:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1733.734957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1733.737402][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5767'. [ 1733.742083][ T7302] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1733.830839][ T31] audit: type=1326 audit(1749897792.700:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1733.853742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1733.868268][T14013] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1733.884388][T14013] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1733.911796][ T31] audit: type=1326 audit(1749897792.700:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1733.934262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.017356][ T7302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.027932][ T7302] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1734.067625][ T31] audit: type=1326 audit(1749897792.700:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1734.091111][T14013] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1734.098735][T14013] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1734.111147][ T7302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.140576][ T7302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.150425][ T7302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1734.168817][T14013] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1734.191151][ T31] audit: type=1326 audit(1749897792.700:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1734.234278][ T7302] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1734.243914][ T7302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.260685][ T31] audit: type=1326 audit(1749897792.700:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1734.283247][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.300208][ T7302] usb 4-1: Product: syz [ 1734.310978][T14013] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1734.320760][ T7302] usb 4-1: Manufacturer: syz [ 1734.332515][ T7302] usb 4-1: SerialNumber: syz [ 1734.345922][ T7302] usb 4-1: config 0 descriptor?? [ 1734.359418][ T31] audit: type=1326 audit(1749897792.700:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1734.411171][ T31] audit: type=1326 audit(1749897792.700:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1734.433713][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.494165][ T31] audit: type=1326 audit(1749897792.700:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28786 comm="syz.0.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f85f8e929 code=0x7ffc0000 [ 1734.516714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.535271][T28786] batadv_slave_1: left promiscuous mode [ 1734.551426][T14013] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1734.560443][T14013] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1734.579080][T14013] usb 5-1: USB disconnect, device number 61 [ 1734.589036][T28784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.621553][T28784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.696776][ T7302] usb 4-1: ucan: probing device on interface #0 [ 1734.704223][ T7302] usb 4-1: ucan: invalid endpoint configuration [ 1734.721716][ T7302] usb 4-1: ucan: probe failed; try to update the device firmware [ 1734.742813][ T7302] usb 4-1: USB disconnect, device number 12 [ 1734.807409][ T7294] pegasus 2-1:0.0: can't reset MAC [ 1734.812937][ T7294] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1734.843569][ T7294] usb 2-1: USB disconnect, device number 121 [ 1735.139151][T28816] delete_channel: no stack [ 1735.280629][T20152] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1735.353741][ T7302] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1735.431062][T28820] loop2: detected capacity change from 0 to 7 [ 1735.449499][T22727] Dev loop2: unable to read RDB block 7 [ 1735.465841][T14013] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1735.485616][T22727] loop2: unable to read partition table [ 1735.495377][T22727] loop2: partition table beyond EOD, truncated [ 1735.516017][T28820] Dev loop2: unable to read RDB block 7 [ 1735.523165][T28820] loop2: unable to read partition table [ 1735.550780][ T7302] usb 6-1: Using ep0 maxpacket: 16 [ 1735.571936][ T7302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1735.583627][T28820] loop2: partition table beyond EOD, truncated [ 1735.591928][T28820] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1735.618192][T20152] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1735.639043][T20152] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1735.647142][ T7302] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1735.656312][T20152] usb 1-1: can't read configurations, error -71 [ 1735.735186][T14013] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.785128][T14013] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1735.795196][ T7302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.860900][ T7302] usb 6-1: Product: syz [ 1735.865152][ T7302] usb 6-1: Manufacturer: syz [ 1735.869810][ T7302] usb 6-1: SerialNumber: syz [ 1735.900643][T14013] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1735.959354][T14013] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1735.961647][T28829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5778'. [ 1735.991640][ T7302] usb 6-1: config 0 descriptor?? [ 1736.005221][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.011303][T14013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.011802][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.029334][ T7302] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1736.184410][T14013] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1736.206660][ T7302] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1736.294769][T14013] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1736.396435][T28832] netlink: 'syz.3.5779': attribute type 13 has an invalid length. [ 1736.433442][ T7302] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1736.539451][ T7302] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1736.568030][T22728] udevd[22728]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1736.588021][ T7302] em28xx 6-1:0.0: board has no eeprom [ 1736.600255][T28816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.619630][T28816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.669553][T28845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1736.680643][ T7302] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1736.756630][ T7302] em28xx 6-1:0.0: dvb set to bulk mode. [ 1736.843740][T14013] em28xx 6-1:0.0: Binding DVB extension [ 1736.913774][ T7302] usb 6-1: USB disconnect, device number 50 [ 1736.976940][ T7302] em28xx 6-1:0.0: Disconnecting em28xx [ 1737.090025][T28852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5783'. [ 1737.221780][T20152] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1737.245771][T28832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1737.422389][T20152] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.439647][T20152] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1737.466380][T14013] em28xx 6-1:0.0: Registering input extension [ 1737.488567][ T7302] em28xx 6-1:0.0: Closing input extension [ 1737.520815][T18102] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1737.569766][T20152] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1737.629317][T20152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.672316][T18102] usb 1-1: device descriptor read/64, error -71 [ 1737.679432][ T7302] em28xx 6-1:0.0: Freeing device [ 1737.745328][T20152] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1737.948181][T18102] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1737.954942][T20152] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1737.997098][T28846] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5780'. [ 1738.161722][T18102] usb 1-1: device descriptor read/64, error -71 [ 1738.286193][T18102] usb usb1-port1: attempt power cycle [ 1738.640694][T18102] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1738.661500][T18102] usb 1-1: device descriptor read/8, error -71 [ 1738.900624][T18102] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1738.921752][T18102] usb 1-1: device descriptor read/8, error -71 [ 1739.151424][T18102] usb usb1-port1: unable to enumerate USB device [ 1739.390265][T18102] usb 2-1: USB disconnect, device number 122 [ 1739.530660][T20152] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1739.692150][T20152] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.768201][T20152] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1739.832460][T20152] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1739.920601][T18102] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1739.921151][T20152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.937616][T20152] usb 4-1: Product: syz [ 1739.941938][T20152] usb 4-1: Manufacturer: syz [ 1739.946995][T20152] usb 4-1: SerialNumber: syz [ 1740.043917][ T7294] usb 5-1: USB disconnect, device number 62 [ 1740.187495][T28871] loop2: detected capacity change from 0 to 7 [ 1740.201747][T28871] Dev loop2: unable to read RDB block 7 [ 1740.207597][T28871] loop2: unable to read partition table [ 1740.215133][T28871] loop2: partition table beyond EOD, truncated [ 1740.234278][T18102] usb 2-1: config 0 has no interfaces? [ 1740.247645][T28871] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1740.273314][T18102] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1740.307017][T18102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.347543][T18102] usb 2-1: Product: syz [ 1740.387869][T18102] usb 2-1: Manufacturer: syz [ 1740.389119][T20152] usb 4-1: cannot find UAC_HEADER [ 1740.439737][T18102] usb 2-1: SerialNumber: syz [ 1740.457987][T20152] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1740.462351][T18102] usb 2-1: config 0 descriptor?? [ 1740.516399][T22727] udevd[22727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1740.666416][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5791'. [ 1741.230336][T20152] usb 4-1: USB disconnect, device number 13 [ 1741.262569][T18102] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1741.845103][T18102] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.855954][T18102] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1741.901894][T18102] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1741.950015][T18102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.149012][T18102] usb 5-1: config 0 descriptor?? [ 1742.192907][T18102] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1742.217489][T18102] dvb-usb: bulk message failed: -22 (3/0) [ 1742.272702][T18102] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1742.356604][T18102] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1742.412361][T18102] usb 5-1: media controller created [ 1742.492125][T18102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1742.679482][T18102] dvb-usb: bulk message failed: -22 (6/0) [ 1742.687768][T18102] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1742.707210][T18102] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input166 [ 1742.730234][T18102] dvb-usb: schedule remote query interval to 150 msecs. [ 1742.740236][T18102] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1742.901987][T14013] dvb-usb: bulk message failed: -22 (1/0) [ 1742.907971][T18102] usb 2-1: USB disconnect, device number 123 [ 1742.914133][T14013] dvb-usb: error while querying for an remote control event. [ 1743.100659][T18102] dvb-usb: bulk message failed: -22 (1/0) [ 1743.106569][T18102] dvb-usb: error while querying for an remote control event. [ 1743.200544][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5798'. [ 1743.271065][T18102] dvb-usb: bulk message failed: -22 (1/0) [ 1743.283356][T18102] dvb-usb: error while querying for an remote control event. [ 1743.560973][T18102] dvb-usb: bulk message failed: -22 (1/0) [ 1743.574919][T18102] dvb-usb: error while querying for an remote control event. [ 1743.750986][ T7302] dvb-usb: bulk message failed: -22 (1/0) [ 1743.757048][ T7302] dvb-usb: error while querying for an remote control event. [ 1743.920612][ T7302] dvb-usb: bulk message failed: -22 (1/0) [ 1743.926566][ T7302] dvb-usb: error while querying for an remote control event. [ 1744.005211][T20152] usb 5-1: USB disconnect, device number 63 [ 1744.149390][T20152] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1744.311850][T28922] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x32314142, 4, 0, 0, 0) [ 1744.627808][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5804'. [ 1745.546394][T28951] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5810'. [ 1745.555985][ T7302] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1745.720594][ T7302] usb 4-1: Using ep0 maxpacket: 8 [ 1745.735954][ T7302] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.759053][ T7302] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1745.801960][ T7302] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1745.823125][ T7302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.108680][ T7302] usb 4-1: Product: syz [ 1746.135706][ T7302] usb 4-1: Manufacturer: syz [ 1746.160645][ T7302] usb 4-1: SerialNumber: syz [ 1746.364470][T28959] netlink: 'syz.0.5813': attribute type 2 has an invalid length. [ 1746.383700][T28956] futex_wake_op: syz.5.5809 tries to shift op by -33; fix this program [ 1746.393905][T28959] : entered promiscuous mode [ 1746.489969][T28956] netdevsim netdevsim5: Direct firmware load for . [ 1746.489969][T28956] failed with error -2 [ 1746.520761][T28956] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1746.520761][T28956] [ 1746.597246][ T7302] usb 4-1: cannot find UAC_HEADER [ 1746.675443][ T7302] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1746.795895][T28943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.805366][T28943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.827127][T18102] usb 4-1: USB disconnect, device number 14 [ 1746.843965][T28938] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1746.910341][T22727] udevd[22727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1747.016734][T28968] syzkaller1: entered promiscuous mode [ 1747.022472][T28968] syzkaller1: entered allmulticast mode [ 1747.228726][T28974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5815'. [ 1748.600630][ T7302] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1748.609358][T28981] netlink: 'syz.1.5818': attribute type 10 has an invalid length. [ 1748.620273][T28981] bridge0: port 1(netdevsim0) entered blocking state [ 1748.627311][T28981] bridge0: port 1(netdevsim0) entered listening state [ 1748.659655][T28982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5818'. [ 1748.703927][T28981] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1748.744461][T28982] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1748.762859][ T7302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.770306][T28982] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1748.781020][T28982] bridge0: port 1(netdevsim0) entered disabled state [ 1748.789975][ T7302] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1748.818309][ T7302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.860375][ T7302] usb 4-1: config 0 descriptor?? [ 1748.947890][T28982] bond0: (slave bridge0): Releasing backup interface [ 1749.002748][ T7302] pwc: Askey VC010 type 2 USB webcam detected. [ 1749.404303][T28979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.414237][T28979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.435241][ T7302] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1749.602413][T18102] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1749.763285][T18102] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1749.858282][T18102] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1750.120620][T20152] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1750.220968][ T7302] pwc: recv_control_msg error -71 req 02 val 2700 [ 1750.238430][T18102] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1750.251220][T18102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1750.260561][ T7302] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1750.267092][T18102] usb 5-1: SerialNumber: syz [ 1750.287792][ T7302] pwc: recv_control_msg error -71 req 04 val 1000 [ 1750.297264][T20152] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1750.311418][T20152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.319806][T20152] usb 1-1: Product: syz [ 1750.343457][T20152] usb 1-1: Manufacturer: syz [ 1750.358329][T20152] usb 1-1: SerialNumber: syz [ 1750.371224][ T7302] pwc: recv_control_msg error -71 req 04 val 1300 [ 1750.386514][T18102] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1750.395371][ T7302] pwc: recv_control_msg error -71 req 04 val 1400 [ 1750.414978][T20152] usb 1-1: config 0 descriptor?? [ 1750.595202][T20152] ch341 1-1:0.0: ch341-uart converter detected [ 1750.655174][T18102] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1750.666484][ T7302] pwc: recv_control_msg error -71 req 02 val 2000 [ 1750.678393][ T7302] pwc: recv_control_msg error -71 req 02 val 2100 [ 1750.687312][T18102] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1750.729278][ T7302] pwc: recv_control_msg error -71 req 04 val 1500 [ 1750.745432][T18102] scsi host1: usb-storage 5-1:1.0 [ 1750.755212][ T7302] pwc: recv_control_msg error -71 req 02 val 2500 [ 1750.786313][ T7302] pwc: recv_control_msg error -71 req 02 val 2400 [ 1750.868453][ T7302] pwc: recv_control_msg error -71 req 02 val 2600 [ 1750.915386][ T7302] pwc: recv_control_msg error -71 req 02 val 2900 [ 1750.923866][ T7302] pwc: recv_control_msg error -71 req 02 val 2800 [ 1750.945351][ T7302] pwc: recv_control_msg error -71 req 04 val 1100 [ 1750.957191][ T7302] pwc: recv_control_msg error -71 req 04 val 1200 [ 1750.976815][ T7302] pwc: Registered as video103. [ 1751.016065][T20152] usb 1-1: failed to send control message: -71 [ 1751.022525][T20152] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1751.055980][ T7302] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input167 [ 1751.074437][T20152] usb 1-1: USB disconnect, device number 70 [ 1751.150029][ T7302] usb 4-1: USB disconnect, device number 15 [ 1751.209078][T20152] ch341 1-1:0.0: device disconnected [ 1751.591893][ T7302] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1751.764385][ T7302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.775227][ T7302] usb 4-1: config 0 has no interfaces? [ 1751.790011][ T7302] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1751.827627][ T7302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.843380][T29011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1751.898675][ T7302] usb 4-1: config 0 descriptor?? [ 1752.080735][T20152] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1752.200705][ T977] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1752.248380][T20152] usb 6-1: config 1 has an invalid interface number: 228 but max is 0 [ 1752.256861][T20152] usb 6-1: config 1 has no interface number 0 [ 1752.263687][T20152] usb 6-1: too many endpoints for config 1 interface 228 altsetting 186: 214, using maximum allowed: 30 [ 1752.275304][T20152] usb 6-1: config 1 interface 228 altsetting 186 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1752.286472][T20152] usb 6-1: config 1 interface 228 altsetting 186 bulk endpoint 0x1 has invalid maxpacket 0 [ 1752.296576][T20152] usb 6-1: config 1 interface 228 altsetting 186 has 1 endpoint descriptor, different from the interface descriptor's value: 214 [ 1752.309983][T20152] usb 6-1: config 1 interface 228 has no altsetting 0 [ 1752.319246][T20152] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1752.328471][T20152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.336762][T20152] usb 6-1: Product: syz [ 1752.341173][T20152] usb 6-1: Manufacturer: syz [ 1752.346000][T20152] usb 6-1: SerialNumber: syz [ 1752.363183][ T977] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1752.373269][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.391408][ T977] usb 2-1: config 0 descriptor?? [ 1752.564092][T20152] usb 6-1: unknown interface protocol 0x1, assuming v1 [ 1752.582907][T20152] usb 6-1: cannot find UAC_HEADER [ 1752.600218][T29015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.629932][T29015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.642270][T20152] snd-usb-audio 6-1:1.228: probe with driver snd-usb-audio failed with error -22 [ 1752.661945][ T977] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e [ 1752.669149][ T977] hackrf 2-1:0.0: Could not detect board [ 1752.689274][T20152] usb 6-1: USB disconnect, device number 51 [ 1752.704435][ T977] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 1752.733958][T22727] udevd[22727]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1752.734436][T29021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5830'. [ 1752.758480][ T977] usb 2-1: USB disconnect, device number 124 [ 1752.777161][T29021] xt_TCPMSS: Only works on TCP SYN packets [ 1752.835168][ T7294] usb 5-1: USB disconnect, device number 64 [ 1752.964911][T29026] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5824'. [ 1752.987037][T29026] bridge0: port 3(macsec0) entered blocking state [ 1752.998230][T29026] bridge0: port 3(macsec0) entered disabled state [ 1753.090161][T29026] macsec0: entered allmulticast mode [ 1753.097255][T29026] veth1_macvtap: entered allmulticast mode [ 1753.212209][T29026] macsec0: entered promiscuous mode [ 1753.249817][T29026] bridge0: port 3(macsec0) entered blocking state [ 1753.257500][T29026] bridge0: port 3(macsec0) entered forwarding state [ 1753.327880][T29039] xt_HMARK: spi-set and port-set can't be combined [ 1753.410616][ T7294] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1753.586844][ T7294] usb 5-1: Using ep0 maxpacket: 32 [ 1753.650959][ T7294] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1753.701218][ T7294] usb 5-1: config 5 has an invalid interface number: 4 but max is 0 [ 1753.739285][ T7294] usb 5-1: config 5 has no interface number 0 [ 1753.792602][ T7294] usb 5-1: config 5 interface 4 has no altsetting 0 [ 1753.814285][ T7294] usb 5-1: New USB device found, idVendor=1199, idProduct=6809, bcdDevice=61.47 [ 1753.834730][ T7294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.858024][ T7294] usb 5-1: Product: syz [ 1753.870012][ T7294] usb 5-1: Manufacturer: syz [ 1753.888565][ T7294] usb 5-1: SerialNumber: syz [ 1753.957570][ T7302] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1753.965737][T18102] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1754.150824][ T7302] usb 1-1: Using ep0 maxpacket: 8 [ 1754.159881][T18102] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 1754.241281][ T7302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.251762][T18102] usb 6-1: config 0 has no interface number 0 [ 1754.273628][ T7302] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1754.286707][T18102] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1754.303926][ T7302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.326426][ T7302] usb 1-1: Product: syz [ 1754.326630][T18102] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1754.478223][ T7302] usb 1-1: Manufacturer: syz [ 1754.531039][ T7302] usb 1-1: SerialNumber: syz [ 1754.537677][T18102] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.548218][ T7302] usb 1-1: config 0 descriptor?? [ 1754.574176][T18102] usb 6-1: Product: syz [ 1754.583259][ T7302] cdc_phonet 1-1:0.0: skipping garbage [ 1754.594302][ T7302] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1754.614066][T18102] usb 6-1: Manufacturer: syz [ 1754.626809][T18102] usb 6-1: SerialNumber: syz [ 1754.666980][T18102] usb 6-1: config 0 descriptor?? [ 1754.707399][T29047] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1755.406380][ T7302] usb 1-1: USB disconnect, device number 71 [ 1755.543905][T29056] Cannot find map_set index 0 as target [ 1755.893735][ T7302] usb 4-1: USB disconnect, device number 16 [ 1756.000814][ T7294] sierra 5-1:5.4: Sierra USB modem converter detected [ 1756.089510][ T7294] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1756.177382][ T7294] usb 5-1: USB disconnect, device number 65 [ 1756.255890][ T7294] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1756.322841][ T7294] sierra 5-1:5.4: device disconnected [ 1758.168989][T18102] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1758.198982][T18102] usb 6-1: MIDIStreaming interface descriptor not found [ 1758.379280][T18102] usb 6-1: USB disconnect, device number 52 [ 1758.505261][T22730] udevd[22730]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1758.581320][ T7302] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1758.790192][ T7302] usb 2-1: Using ep0 maxpacket: 32 [ 1758.886888][ T7302] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1758.984660][ T7302] usb 2-1: can't read configurations, error -61 [ 1759.086610][T29097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1759.170988][ T7302] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1759.278371][T29104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1759.293077][ T7294] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1759.340602][ T7302] usb 2-1: Using ep0 maxpacket: 32 [ 1759.383532][ T7302] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1759.413173][ T7302] usb 2-1: can't read configurations, error -61 [ 1759.434360][ T7302] usb usb2-port1: attempt power cycle [ 1759.490812][ T7294] usb 5-1: Using ep0 maxpacket: 16 [ 1759.498395][ T7294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1759.506665][T29111] loop2: detected capacity change from 0 to 7 [ 1759.528162][ T7294] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1759.550744][ T7294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.551111][T29111] Dev loop2: unable to read RDB block 7 [ 1759.576681][T29111] loop2: unable to read partition table [ 1759.594782][T29111] loop2: partition table beyond EOD, truncated [ 1759.598586][ T7294] usb 5-1: config 0 descriptor?? [ 1759.635361][T29111] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1759.636181][ T7294] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input168 [ 1759.800987][ T7302] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1759.832300][ T7302] usb 2-1: Using ep0 maxpacket: 32 [ 1759.842503][ T7302] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1759.855255][ T7302] usb 2-1: can't read configurations, error -61 [ 1760.000867][ T7302] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1760.021560][ T7302] usb 2-1: Using ep0 maxpacket: 32 [ 1760.029334][ T7302] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1760.042539][ T7302] usb 2-1: can't read configurations, error -61 [ 1760.049597][ T7302] usb usb2-port1: unable to enumerate USB device [ 1760.120799][T20152] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1760.310880][T20152] usb 1-1: Using ep0 maxpacket: 32 [ 1760.323805][T20152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.335277][T20152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.345175][T20152] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1760.354503][T20152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.365849][T20152] usb 1-1: config 0 descriptor?? [ 1760.378724][T20152] hub 1-1:0.0: USB hub found [ 1760.576412][T20152] hub 1-1:0.0: 1 port detected [ 1760.673703][T29121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5856'. [ 1761.206540][T29119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.215754][T29119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.257804][ T977] usb 1-1: USB disconnect, device number 72 [ 1761.263943][T20152] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 1761.997816][T29131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5859'. [ 1762.145425][ T5192] bcm5974 5-1:0.0: could not read from device [ 1762.187044][ T7294] bcm5974 5-1:0.0: could not read from device [ 1762.212520][ T5192] bcm5974 5-1:0.0: could not read from device [ 1762.230347][T29131] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 1762.240047][ T7294] input: failed to attach handler mousedev to device input168, error: -5 [ 1762.258816][T29131] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 1762.277259][ T5192] bcm5974 5-1:0.0: could not read from device [ 1762.291259][ T7294] usb 5-1: USB disconnect, device number 66 [ 1764.289575][T29160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1764.353928][T29160] sctp: [Deprecated]: syz.4.5864 (pid 29160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1764.353928][T29160] Use struct sctp_sack_info instead [ 1765.530828][ T7294] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1765.703097][ T7294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1765.712113][ T7294] usb 4-1: not running at top speed; connect to a high speed hub [ 1765.788256][ T7294] usb 4-1: config 8 has an invalid interface number: 253 but max is 0 [ 1765.840349][ T7294] usb 4-1: config 8 has no interface number 0 [ 1765.890894][ T7294] usb 4-1: config 8 interface 253 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1765.966425][ T7294] usb 4-1: config 8 interface 253 has no altsetting 0 [ 1765.993973][ T7294] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=1d.a7 [ 1766.010571][ T7294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.029370][ T7294] usb 4-1: Product: syz [ 1766.033751][ T7294] usb 4-1: Manufacturer: syz [ 1766.044291][ T7294] usb 4-1: SerialNumber: syz [ 1766.335260][ T7294] usb 4-1: USB disconnect, device number 17 [ 1767.038957][T29186] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1767.091612][T29186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1767.562864][T29203] fuse: Bad value for 'fd' [ 1767.881146][T18102] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1768.233541][ T977] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1768.403158][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 1768.467461][ T977] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1768.480607][ T977] usb 4-1: config 0 has no interface number 0 [ 1768.519414][T18102] usb 2-1: config 0 has no interfaces? [ 1768.540959][T18102] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1768.554327][T18102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.562699][T18102] usb 2-1: Product: syz [ 1768.566877][T18102] usb 2-1: Manufacturer: syz [ 1768.575933][T18102] usb 2-1: SerialNumber: syz [ 1768.590062][T18102] usb 2-1: config 0 descriptor?? [ 1768.643616][ T977] usb 4-1: config 0 interface 214 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1768.750568][ T977] usb 4-1: config 0 interface 214 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1768.853514][ T977] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1768.867172][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.945775][ T977] usb 4-1: Product: syz [ 1768.957815][ T977] usb 4-1: Manufacturer: syz [ 1768.967047][ T977] usb 4-1: SerialNumber: syz [ 1769.016325][ T977] usb 4-1: config 0 descriptor?? [ 1769.044617][T29210] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1769.052306][T29210] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1769.182824][ T977] plusb 4-1:0.214 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f2:a9:d7:75:a5:d7 [ 1769.310412][T29213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.320306][T29213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.351430][ T977] usb 4-1: USB disconnect, device number 18 [ 1769.365806][ T977] plusb 4-1:0.214 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1769.783538][ T7294] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1769.870649][ T977] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1770.020650][ T977] usb 4-1: device descriptor read/64, error -71 [ 1770.053567][ T7294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.083603][ T7294] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1770.144158][ T7294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1770.180186][ T7294] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1770.245667][ T7294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.280780][ T977] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1770.415977][ T7294] usb 5-1: config 0 descriptor?? [ 1770.462422][T18102] usb 2-1: USB disconnect, device number 3 [ 1770.497102][T29235] input: syz0 as /devices/virtual/input/input169 [ 1770.521342][ T977] usb 4-1: device descriptor read/64, error -71 [ 1770.548301][T29235] input: failed to attach handler leds to device input169, error: -6 [ 1770.651254][ T977] usb usb4-port1: attempt power cycle [ 1770.698898][ T7294] usb 5-1: string descriptor 0 read error: -71 [ 1770.737309][ T7294] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1770.757622][ T7294] usb 5-1: USB disconnect, device number 67 [ 1771.021054][ T977] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1771.050704][T28010] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1771.067382][ T977] usb 4-1: device descriptor read/8, error -71 [ 1771.102079][ T7294] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1771.280357][T28010] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1771.292837][T28010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.303609][T28010] usb 6-1: Product: syz [ 1771.307920][T28010] usb 6-1: Manufacturer: syz [ 1771.319288][ T7294] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1771.332245][ T7294] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1771.349006][T28010] usb 6-1: SerialNumber: syz [ 1771.359849][ T7294] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1771.372929][ T7294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.396549][ T7294] usb 5-1: Product: ᯋ♯࿒榭ꏿ듍ਘ拓茵蚗Ⅶ䠆鞼ᷤ㮴뺂উ㰄羯쒐毲ⴃƲ淅ꛂ睑ﳞ⡣讀㺡妗핿㤂쁾⃔⏢槾顒꧄㣔矹䋺殖❑ꁫ帢לȀˬ궺䳝 [ 1771.416359][ T977] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1771.430357][T28010] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1771.446040][ T7294] usb 5-1: Manufacturer:   [ 1771.453098][ T977] usb 4-1: device descriptor read/8, error -71 [ 1771.468418][ T7294] usb 5-1: SerialNumber: Г [ 1771.514875][ T5908] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1771.582777][ T977] usb usb4-port1: unable to enumerate USB device [ 1771.825921][ T5849] Bluetooth: hci2: Unknown advertising packet type: 0x75 [ 1771.826096][ T5849] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1772.122016][T14013] usb 6-1: USB disconnect, device number 53 [ 1772.274486][T29267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5889'. [ 1772.358531][ T7294] cdc_ncm 5-1:1.0: bind() failure [ 1772.451828][ T7294] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1772.488855][ T7294] cdc_ncm 5-1:1.1: bind() failure [ 1772.560803][ T5908] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1772.571352][ T7294] usb 5-1: USB disconnect, device number 68 [ 1772.597801][ T5908] ath9k_htc: Failed to initialize the device [ 1772.629407][T14013] usb 6-1: ath9k_htc: USB layer deinitialized [ 1772.866179][T29282] xt_CT: No such helper "snmp" [ 1772.918292][T29282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5891'. [ 1772.920609][ T7302] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1773.008412][T29288] program syz.0.5891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1773.240736][ T7302] usb 2-1: Using ep0 maxpacket: 32 [ 1773.248028][ T7302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.266526][ T7302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1773.276700][ T7302] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1773.286613][ T7302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.310591][ T7302] usb 2-1: config 0 descriptor?? [ 1773.590777][ T5908] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1773.621051][T14013] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1773.752493][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 1773.757146][ T7302] usbhid 2-1:0.0: can't add hid device: -71 [ 1773.785893][ T5908] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1773.794523][ T7302] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1773.819132][T14013] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1773.846611][ T7302] usb 2-1: USB disconnect, device number 4 [ 1773.847036][ T5908] usb 4-1: config 179 has no interface number 0 [ 1773.870639][T14013] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1773.895848][T14013] usb 6-1: can't read configurations, error -71 [ 1773.924345][ T5908] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1773.965776][ T5908] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1773.986338][ T5908] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1773.986995][T29304] bond0: (slave bond_slave_0): Releasing backup interface [ 1774.015620][ T5908] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1774.046950][ T5908] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1774.078959][ T5908] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1774.107686][T29304] bond0: (slave bond_slave_1): Releasing backup interface [ 1774.120102][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.159288][T29304] team0: Port device team_slave_0 removed [ 1774.159342][T29297] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1774.175074][T29304] team0: Port device team_slave_1 removed [ 1774.182634][T29304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.194647][T29304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.304286][T29304] team0: Port device batadv1 removed [ 1774.426048][ T5908] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input170 [ 1774.484042][T29312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1774.635044][ T7302] usb 4-1: USB disconnect, device number 23 [ 1774.635055][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1774.635194][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1774.744693][ T7302] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1775.091672][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5903'. [ 1775.325006][T29337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5905'. [ 1775.610687][ T5908] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1775.804614][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 1775.813025][ T5908] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1775.831606][ T5908] usb 4-1: config 0 has no interface number 0 [ 1775.837830][ T5908] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1775.868901][ T5908] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1775.880566][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.895372][ T5908] usb 4-1: Product: syz [ 1775.920571][ T5908] usb 4-1: Manufacturer: syz [ 1775.938824][ T5908] usb 4-1: SerialNumber: syz [ 1775.961300][ T5908] usb 4-1: config 0 descriptor?? [ 1775.980950][ T5825] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1776.146148][ T5825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.158932][ T5825] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1776.186220][ T5825] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1776.209028][ T5825] usb 5-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 1776.238309][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.275208][ T5825] usb 5-1: Product: syz [ 1776.288536][ T5825] usb 5-1: Manufacturer: syz [ 1776.308087][ T5825] usb 5-1: SerialNumber: syz [ 1776.419568][T29348] sctp: [Deprecated]: syz.0.5909 (pid 29348) Use of int in maxseg socket option. [ 1776.419568][T29348] Use struct sctp_assoc_value instead [ 1776.444867][ T5825] cdc_ncm 5-1:1.0: skipping garbage [ 1777.412112][T29357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1777.508204][ T5825] cdc_ncm 5-1:1.0: bind() failure [ 1777.528324][ T5825] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1777.540582][ T5825] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1777.554150][ T5825] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1777.601616][ T5825] usb 5-1: USB disconnect, device number 69 [ 1777.721018][ T7302] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1777.903164][ T7302] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.914165][ T7302] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1777.927556][ T7302] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1777.943814][ T7302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.162208][ T7302] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1778.273102][ T7302] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1778.358908][T29357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5911'. [ 1778.368951][T29357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5911'. [ 1778.389800][ T5825] usb 1-1: USB disconnect, device number 73 [ 1778.403655][ T5908] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1778.437077][ T5908] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 1778.486098][ T5908] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1778.519700][ T5908] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 1778.582852][T29369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.637358][T29369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.651933][T29369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.664175][T29369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.675632][ T5908] usb 4-1: USB disconnect, device number 24 [ 1778.780693][ T7302] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1778.921345][ T7302] usb 6-1: device descriptor read/64, error -71 [ 1779.090622][ T5908] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1779.192618][ T7302] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1779.226908][T29379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.236386][T29379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.245744][T29379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.255905][T29379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.263823][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 1779.271582][ T5908] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1779.281974][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.292204][T29379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.304008][ T5908] usb 4-1: config 0 descriptor?? [ 1779.311587][T29379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.334045][T29379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.346901][T29379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.362105][ T7302] usb 6-1: device descriptor read/64, error -71 [ 1779.460654][ T7294] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1779.481141][ T7302] usb usb6-port1: attempt power cycle [ 1779.528152][ T5908] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1779.547424][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1779.570847][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1779.586278][ T5908] usb 4-1: media controller created [ 1779.597273][T29386] openvswitch: netlink: IP tunnel dst address not specified [ 1779.647019][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1779.850605][ T5908] az6027: usb out operation failed. (-71) [ 1779.862693][ T7302] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1779.871660][ T5908] az6027: usb out operation failed. (-71) [ 1779.875940][ T5825] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1779.885453][ T5908] stb0899_attach: Driver disabled by Kconfig [ 1779.900521][ T5908] az6027: no front-end attached [ 1779.900521][ T5908] [ 1779.911672][ T7302] usb 6-1: device descriptor read/8, error -71 [ 1779.918324][ T5908] az6027: usb out operation failed. (-71) [ 1779.920647][T14013] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1779.930690][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1779.955151][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input171 [ 1779.990816][ T5908] dvb-usb: schedule remote query interval to 400 msecs. [ 1780.012971][ T5908] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1780.028470][ T5908] usb 4-1: USB disconnect, device number 25 [ 1780.040612][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 1780.082228][ T5825] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1780.091548][T14013] usb 5-1: Using ep0 maxpacket: 16 [ 1780.114469][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.126707][ T5825] usb 1-1: config 0 descriptor?? [ 1780.150613][ T7302] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1780.155197][ T5908] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1780.171830][T14013] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1780.186800][ T7302] usb 6-1: device descriptor read/8, error -71 [ 1780.219323][T14013] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1780.301262][ T7302] usb usb6-port1: unable to enumerate USB device [ 1780.417090][T14013] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1780.647741][T14013] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 1780.684698][T14013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.740023][T14013] usb 5-1: Product: syz [ 1780.758274][T14013] usb 5-1: Manufacturer: syz [ 1780.772493][T14013] usb 5-1: SerialNumber: syz [ 1781.330761][ T7303] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1781.507462][ T7303] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1781.551125][ T7303] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1781.599927][ T7303] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1781.623836][ T7303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.668531][T29410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1781.686987][T29417] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1781.702997][ T7303] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1781.909320][ T7303] usb 2-1: USB disconnect, device number 6 [ 1782.786185][T14013] usbhid 5-1:1.0: can't add hid device: -71 [ 1782.794000][T14013] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1782.817427][T14013] usb 5-1: USB disconnect, device number 70 [ 1782.826372][T29441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5929'. [ 1782.841973][ T5825] usbhid 1-1:0.0: can't add hid device: -71 [ 1782.849560][ T5825] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1782.942860][T29444] syzkaller1: entered promiscuous mode [ 1782.952696][T29444] syzkaller1: entered allmulticast mode [ 1782.964250][ T5825] usb 1-1: USB disconnect, device number 74 [ 1783.213363][T29447] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1784.026509][T29479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5939'. [ 1784.044525][T29479] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 1784.067491][T29479] PKCS7: Only support pkcs7_signedData type [ 1784.450792][ T5825] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1784.600608][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 1784.611524][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.674900][ T5825] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1784.738868][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.817760][ T5825] usb 6-1: config 0 descriptor?? [ 1784.876648][ T5825] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1784.981655][T29488] binder: 29486:29488 ioctl c0306201 0 returned -14 [ 1785.668440][T29498] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5946'. [ 1786.001425][T29503] binder: BINDER_SET_CONTEXT_MGR already set [ 1786.007832][T29503] binder: 29502:29503 ioctl 4018620d 200000000040 returned -16 [ 1786.122468][ T7303] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1786.222393][ T5825] gspca_vc032x: reg_w err -71 [ 1786.227227][ T5825] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 1786.227999][T29507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1786.242459][ T5825] usb 6-1: USB disconnect, device number 60 [ 1786.300707][ T7303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1786.325122][ T7303] usb 1-1: not running at top speed; connect to a high speed hub [ 1786.370124][ T7303] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64 [ 1786.398815][ T7303] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1786.423123][T29507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1786.423771][ T7303] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1786.455877][ T7303] usb 1-1: New USB device found, idVendor=05a4, idProduct=025a, bcdDevice= 0.40 [ 1786.479773][ T7303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.493990][ T7303] usb 1-1: Product: syz [ 1786.500097][ T7303] usb 1-1: Manufacturer: syz [ 1786.507357][ T7303] usb 1-1: SerialNumber: syz [ 1786.530236][T29501] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1786.732461][T29515] FAULT_INJECTION: forcing a failure. [ 1786.732461][T29515] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.773113][T29515] CPU: 0 UID: 0 PID: 29515 Comm: syz.1.5952 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1786.773146][T29515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1786.773160][T29515] Call Trace: [ 1786.773169][T29515] [ 1786.773179][T29515] dump_stack_lvl+0x189/0x250 [ 1786.773219][T29515] ? __pfx____ratelimit+0x10/0x10 [ 1786.773254][T29515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1786.773288][T29515] ? __pfx__printk+0x10/0x10 [ 1786.773317][T29515] ? __pfx___might_resched+0x10/0x10 [ 1786.773348][T29515] ? fs_reclaim_acquire+0x7d/0x100 [ 1786.773377][T29515] should_fail_ex+0x414/0x560 [ 1786.773410][T29515] ? xt_alloc_table_info+0x3b/0xa0 [ 1786.773439][T29515] should_failslab+0xa8/0x100 [ 1786.773465][T29515] __kvmalloc_node_noprof+0x161/0x5f0 [ 1786.773488][T29515] ? xt_alloc_table_info+0x3b/0xa0 [ 1786.773526][T29515] xt_alloc_table_info+0x3b/0xa0 [ 1786.773558][T29515] do_ip6t_set_ctl+0x88a/0xce0 [ 1786.773594][T29515] ? rcu_is_watching+0x15/0xb0 [ 1786.773637][T29515] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1786.773686][T29515] ? __pfx___mutex_lock+0x10/0x10 [ 1786.773708][T29515] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1786.773727][T29515] ? aa_sk_perm+0x81e/0x950 [ 1786.773758][T29515] ? __pfx_aa_sk_perm+0x10/0x10 [ 1786.773790][T29515] nf_setsockopt+0x26f/0x290 [ 1786.773822][T29515] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1786.773848][T29515] do_sock_setsockopt+0x257/0x3e0 [ 1786.773877][T29515] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1786.773911][T29515] ? __fget_files+0x2a/0x420 [ 1786.773943][T29515] __x64_sys_setsockopt+0x18b/0x220 [ 1786.773977][T29515] do_syscall_64+0xfa/0x3b0 [ 1786.773998][T29515] ? lockdep_hardirqs_on+0x9c/0x150 [ 1786.774031][T29515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.774053][T29515] ? clear_bhb_loop+0x60/0xb0 [ 1786.774080][T29515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.774102][T29515] RIP: 0033:0x7f1c02b8e929 [ 1786.774122][T29515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1786.774142][T29515] RSP: 002b:00007f1c03947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1786.774166][T29515] RAX: ffffffffffffffda RBX: 00007f1c02db5fa0 RCX: 00007f1c02b8e929 [ 1786.774184][T29515] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1786.774197][T29515] RBP: 00007f1c03947090 R08: 0000000000000698 R09: 0000000000000000 [ 1786.774213][T29515] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001 [ 1786.774227][T29515] R13: 0000000000000000 R14: 00007f1c02db5fa0 R15: 00007f1c02edfa28 [ 1786.774259][T29515] [ 1786.900868][ T5825] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1786.903726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1787.049601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1787.083427][ T7303] usbhid 1-1:1.0: can't add hid device: -71 [ 1787.089512][ T7303] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1787.132427][ T7303] usb 1-1: USB disconnect, device number 75 [ 1787.137076][T29517] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1787.148821][T29517] syzkaller1: linktype set to 1 [ 1787.155666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1787.162892][T29517] loop3: detected capacity change from 0 to 1 [ 1787.203958][T29517] Dev loop3: unable to read RDB block 1 [ 1787.261700][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 1787.270882][T29517] loop3: unable to read partition table [ 1787.285064][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.290870][T29517] loop3: partition table beyond EOD, truncated [ 1787.302426][T29517] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1787.377345][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.431117][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1787.471026][ T5825] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1787.480310][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.544380][ T5825] usb 5-1: config 0 descriptor?? [ 1787.963963][ T5825] microsoft 0003:045E:07DA.0070: No inputs registered, leaving [ 1788.011676][ T5825] microsoft 0003:045E:07DA.0070: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1788.052373][ T5825] microsoft 0003:045E:07DA.0070: no inputs found [ 1788.058804][ T5825] microsoft 0003:045E:07DA.0070: could not initialize ff, continuing anyway [ 1788.341770][ T7294] usb 5-1: USB disconnect, device number 71 [ 1788.748559][T29540] ptrace attach of "./syz-executor exec"[18321] was attempted by " "[29540] [ 1789.383207][T29544] FAULT_INJECTION: forcing a failure. [ 1789.383207][T29544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.495540][T29544] CPU: 1 UID: 0 PID: 29544 Comm: syz.4.5963 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1789.495577][T29544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1789.495593][T29544] Call Trace: [ 1789.495604][T29544] [ 1789.495615][T29544] dump_stack_lvl+0x189/0x250 [ 1789.495660][T29544] ? __pfx____ratelimit+0x10/0x10 [ 1789.495699][T29544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1789.495737][T29544] ? __pfx__printk+0x10/0x10 [ 1789.495780][T29544] should_fail_ex+0x414/0x560 [ 1789.495819][T29544] _copy_from_user+0x2d/0xb0 [ 1789.495846][T29544] copy_from_sockptr_offset+0x66/0xa0 [ 1789.495885][T29544] do_ip6t_set_ctl+0x8b7/0xce0 [ 1789.495928][T29544] ? rcu_is_watching+0x15/0xb0 [ 1789.495967][T29544] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1789.496024][T29544] ? __pfx___mutex_lock+0x10/0x10 [ 1789.496048][T29544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1789.496072][T29544] ? aa_sk_perm+0x81e/0x950 [ 1789.496108][T29544] ? __pfx_aa_sk_perm+0x10/0x10 [ 1789.496145][T29544] nf_setsockopt+0x26f/0x290 [ 1789.496183][T29544] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1789.496213][T29544] do_sock_setsockopt+0x257/0x3e0 [ 1789.496248][T29544] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1789.496294][T29544] ? __fget_files+0x2a/0x420 [ 1789.496332][T29544] __x64_sys_setsockopt+0x18b/0x220 [ 1789.496370][T29544] do_syscall_64+0xfa/0x3b0 [ 1789.496393][T29544] ? lockdep_hardirqs_on+0x9c/0x150 [ 1789.496430][T29544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.496455][T29544] ? clear_bhb_loop+0x60/0xb0 [ 1789.496485][T29544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.496509][T29544] RIP: 0033:0x7f9341d8e929 [ 1789.496532][T29544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1789.496554][T29544] RSP: 002b:00007f9342cc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1789.496580][T29544] RAX: ffffffffffffffda RBX: 00007f9341fb5fa0 RCX: 00007f9341d8e929 [ 1789.496599][T29544] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1789.496615][T29544] RBP: 00007f9342cc6090 R08: 0000000000000698 R09: 0000000000000000 [ 1789.496631][T29544] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001 [ 1789.496648][T29544] R13: 0000000000000000 R14: 00007f9341fb5fa0 R15: 00007f93420dfa28 [ 1789.496685][T29544] [ 1790.240722][T29549] openvswitch: netlink: Flow key attr not present in new flow. [ 1790.545166][T29552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1791.532186][T29563] netlink: 292 bytes leftover after parsing attributes in process `syz.5.5968'. [ 1792.200230][T29569] loop2: detected capacity change from 0 to 7 [ 1792.239564][T29575] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5973'. [ 1792.254734][T29569] Dev loop2: unable to read RDB block 7 [ 1792.282180][T29569] loop2: unable to read partition table [ 1792.321932][T29569] loop2: partition table beyond EOD, truncated [ 1792.341062][T29569] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1792.599486][T29583] FAULT_INJECTION: forcing a failure. [ 1792.599486][T29583] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.662139][T29583] CPU: 1 UID: 0 PID: 29583 Comm: syz.0.5975 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1792.662174][T29583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1792.662189][T29583] Call Trace: [ 1792.662198][T29583] [ 1792.662208][T29583] dump_stack_lvl+0x189/0x250 [ 1792.662249][T29583] ? __pfx____ratelimit+0x10/0x10 [ 1792.662283][T29583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1792.662318][T29583] ? __pfx__printk+0x10/0x10 [ 1792.662349][T29583] ? __pfx___might_resched+0x10/0x10 [ 1792.662389][T29583] should_fail_ex+0x414/0x560 [ 1792.662423][T29583] ? translate_table+0x19b/0x2040 [ 1792.662451][T29583] should_failslab+0xa8/0x100 [ 1792.662477][T29583] __kvmalloc_node_noprof+0x161/0x5f0 [ 1792.662501][T29583] ? translate_table+0x19b/0x2040 [ 1792.662540][T29583] translate_table+0x19b/0x2040 [ 1792.662585][T29583] ? __lock_acquire+0xab9/0xd20 [ 1792.662622][T29583] ? __pfx_translate_table+0x10/0x10 [ 1792.662653][T29583] ? __might_fault+0xb0/0x130 [ 1792.662695][T29583] ? _copy_from_user+0x94/0xb0 [ 1792.662724][T29583] do_ip6t_set_ctl+0x970/0xce0 [ 1792.662762][T29583] ? rcu_is_watching+0x15/0xb0 [ 1792.662796][T29583] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1792.662846][T29583] ? __pfx___mutex_lock+0x10/0x10 [ 1792.662869][T29583] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1792.662890][T29583] ? aa_sk_perm+0x81e/0x950 [ 1792.662922][T29583] ? __pfx_aa_sk_perm+0x10/0x10 [ 1792.662956][T29583] nf_setsockopt+0x26f/0x290 [ 1792.662995][T29583] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1792.663022][T29583] do_sock_setsockopt+0x257/0x3e0 [ 1792.663053][T29583] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1792.663086][T29583] ? __fget_files+0x2a/0x420 [ 1792.663120][T29583] __x64_sys_setsockopt+0x18b/0x220 [ 1792.663155][T29583] do_syscall_64+0xfa/0x3b0 [ 1792.663175][T29583] ? lockdep_hardirqs_on+0x9c/0x150 [ 1792.663208][T29583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.663230][T29583] ? clear_bhb_loop+0x60/0xb0 [ 1792.663257][T29583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.663279][T29583] RIP: 0033:0x7f3f85f8e929 [ 1792.663298][T29583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1792.663318][T29583] RSP: 002b:00007f3f86e06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1792.663341][T29583] RAX: ffffffffffffffda RBX: 00007f3f861b5fa0 RCX: 00007f3f85f8e929 [ 1792.663358][T29583] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1792.663372][T29583] RBP: 00007f3f86e06090 R08: 0000000000000698 R09: 0000000000000000 [ 1792.663386][T29583] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001 [ 1792.663401][T29583] R13: 0000000000000000 R14: 00007f3f861b5fa0 R15: 00007f3f862dfa28 [ 1792.663435][T29583] [ 1793.411477][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1793.463046][T29598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5979'. [ 1793.511030][T29598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5979'. [ 1793.592481][ T31] audit: type=1326 audit(1749897852.430:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29590 comm="syz.1.5979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c02b8e929 code=0x0 [ 1794.160659][T14013] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1794.260637][ T7294] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1794.410965][T14013] usb 5-1: Using ep0 maxpacket: 8 [ 1794.820617][T14013] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.855649][ T7294] usb 6-1: Using ep0 maxpacket: 32 [ 1794.906715][ T7294] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1794.918534][ T7294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1795.136164][T14013] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.166949][ T7294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1795.189151][T14013] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1795.197627][ T7294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1795.202484][T29612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1795.216510][T14013] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1795.227523][ T7294] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1795.247563][T14013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.268429][T29612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1795.280794][T14013] usb 5-1: config 0 descriptor?? [ 1795.294229][ T7294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.328534][ T7294] usb 6-1: Product: syz [ 1795.392024][ T7294] usb 6-1: Manufacturer: syz [ 1795.561194][ T7294] usb 6-1: SerialNumber: syz [ 1795.631663][ T7294] usb 6-1: config 0 descriptor?? [ 1795.775516][T14013] smartjoyplus 0003:0B43:0003.0071: ignoring exceeding usage max [ 1795.794556][T14013] smartjoyplus 0003:0B43:0003.0071: unbalanced collection at end of report description [ 1795.837167][T14013] smartjoyplus 0003:0B43:0003.0071: parse failed [ 1795.880628][T14013] smartjoyplus 0003:0B43:0003.0071: probe with driver smartjoyplus failed with error -22 [ 1796.001955][ T5908] usb 5-1: USB disconnect, device number 72 [ 1796.232524][ T7294] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1796.415071][ T7294] usb 2-1: Using ep0 maxpacket: 32 [ 1796.437539][ T7294] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1796.456359][ T7294] usb 2-1: config 5 has an invalid interface number: 196 but max is 0 [ 1796.480802][ T7294] usb 2-1: config 5 has no interface number 0 [ 1796.488275][ T7294] usb 2-1: config 5 interface 196 has no altsetting 0 [ 1796.514664][ T7294] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=18.36 [ 1796.529912][ T7294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.547188][ T7294] usb 2-1: Product: syz [ 1796.555600][ T7294] usb 2-1: Manufacturer: syz [ 1796.560351][ T7294] usb 2-1: SerialNumber: syz [ 1796.779047][T29640] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5990'. [ 1796.825652][ T7294] upd78f0730 2-1:5.196: upd78f0730 converter detected [ 1796.891718][T29643] FAULT_INJECTION: forcing a failure. [ 1796.891718][T29643] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.914687][ T7294] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 1796.972934][ T7294] usb 2-1: USB disconnect, device number 7 [ 1796.975154][T29643] CPU: 1 UID: 0 PID: 29643 Comm: syz.3.5991 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1796.975187][T29643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1796.975203][T29643] Call Trace: [ 1796.975213][T29643] [ 1796.975224][T29643] dump_stack_lvl+0x189/0x250 [ 1796.975271][T29643] ? __pfx____ratelimit+0x10/0x10 [ 1796.975309][T29643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1796.975346][T29643] ? __pfx__printk+0x10/0x10 [ 1796.975380][T29643] ? __pfx___might_resched+0x10/0x10 [ 1796.975416][T29643] ? fs_reclaim_acquire+0x7d/0x100 [ 1796.975451][T29643] should_fail_ex+0x414/0x560 [ 1796.975488][T29643] should_failslab+0xa8/0x100 [ 1796.975516][T29643] __kmalloc_cache_noprof+0x70/0x3d0 [ 1796.975558][T29643] ? __request_module+0x2b5/0x5e0 [ 1796.975598][T29643] __request_module+0x2b5/0x5e0 [ 1796.975672][T29643] ? __pfx___mutex_lock+0x10/0x10 [ 1796.975704][T29643] ? __pfx___request_module+0x10/0x10 [ 1796.975742][T29643] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 1796.975779][T29643] ? xt_find_match+0x1fe/0x250 [ 1796.975816][T29643] xt_request_find_match+0xc1/0x140 [ 1796.975854][T29643] translate_table+0x1449/0x2040 [ 1796.975914][T29643] ? __pfx_translate_table+0x10/0x10 [ 1796.975951][T29643] ? __might_fault+0xb0/0x130 [ 1796.975998][T29643] ? _copy_from_user+0x94/0xb0 [ 1796.976031][T29643] do_ip6t_set_ctl+0x970/0xce0 [ 1796.976072][T29643] ? rcu_is_watching+0x15/0xb0 [ 1796.976110][T29643] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1796.976170][T29643] ? __pfx___mutex_lock+0x10/0x10 [ 1796.976195][T29643] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1796.976217][T29643] ? aa_sk_perm+0x81e/0x950 [ 1796.976253][T29643] ? __pfx_aa_sk_perm+0x10/0x10 [ 1796.976291][T29643] nf_setsockopt+0x26f/0x290 [ 1796.976327][T29643] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1796.976356][T29643] do_sock_setsockopt+0x257/0x3e0 [ 1796.976391][T29643] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1796.976428][T29643] ? __fget_files+0x2a/0x420 [ 1796.976465][T29643] __x64_sys_setsockopt+0x18b/0x220 [ 1796.976501][T29643] do_syscall_64+0xfa/0x3b0 [ 1796.976524][T29643] ? lockdep_hardirqs_on+0x9c/0x150 [ 1796.976561][T29643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.976586][T29643] ? clear_bhb_loop+0x60/0xb0 [ 1796.976616][T29643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.976649][T29643] RIP: 0033:0x7fb9de58e929 [ 1796.976671][T29643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.976694][T29643] RSP: 002b:00007fb9df3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1796.976721][T29643] RAX: ffffffffffffffda RBX: 00007fb9de7b5fa0 RCX: 00007fb9de58e929 [ 1796.976740][T29643] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1796.976756][T29643] RBP: 00007fb9df3f3090 R08: 0000000000000698 R09: 0000000000000000 [ 1796.976771][T29643] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001 [ 1796.976787][T29643] R13: 0000000000000000 R14: 00007fb9de7b5fa0 R15: 00007fb9de8dfa28 [ 1796.976824][T29643] [ 1797.466407][T29645] netlink: 'syz.0.5992': attribute type 2 has an invalid length. [ 1797.516538][ T32] INFO: task kworker/1:1:25293 blocked for more than 143 seconds. [ 1797.525075][ T32] Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 [ 1797.564032][ T5908] usb 6-1: USB disconnect, device number 61 [ 1797.570751][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1797.570946][T29645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1797.579460][ T32] task:kworker/1:1 state:D stack:19944 pid:25293 tgid:25293 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1797.603256][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.609732][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.645863][ T7294] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1797.659351][ T7294] upd78f0730 2-1:5.196: device disconnected [ 1797.703990][ T32] Workqueue: usb_hub_wq hub_event [ 1797.729472][ T32] Call Trace: [ 1797.733594][ T32] [ 1797.736587][ T32] __schedule+0x16f5/0x4d00 [ 1797.755098][ T32] ? schedule+0x165/0x360 [ 1797.759535][ T32] ? __pfx___schedule+0x10/0x10 [ 1797.770551][T20152] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1797.780596][ T32] ? schedule+0x91/0x360 [ 1797.791105][ T32] schedule+0x165/0x360 [ 1797.796552][ T32] schedule_preempt_disabled+0x13/0x30 [ 1797.807894][ T32] __mutex_lock+0x724/0xe80 [ 1797.818244][ T32] ? __mutex_lock+0x51b/0xe80 [ 1797.829088][ T32] ? hub_event+0x21cb/0x4a00 [ 1797.838508][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1797.849581][ T32] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1797.862885][ T32] hub_event+0x21cb/0x4a00 [ 1797.871997][ T32] ? do_raw_spin_lock+0x121/0x290 [ 1797.883180][ T32] ? __pfx_hub_event+0x10/0x10 [ 1797.893657][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 1797.909674][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1797.917300][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 1797.922873][T20152] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1797.928055][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 1797.937301][T20152] usb 5-1: config 6 has no interface number 0 [ 1797.940357][ T32] process_scheduled_works+0xae1/0x17b0 [ 1797.951861][T20152] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1797.963215][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1797.969293][ T32] worker_thread+0x8a0/0xda0 [ 1797.975913][T20152] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1797.987922][T20152] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1797.999071][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1798.004747][T20152] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1798.010505][ T32] ? __kthread_parkme+0x7b/0x200 [ 1798.014821][T20152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.020237][ T32] kthread+0x70e/0x8a0 [ 1798.028459][T20152] usb 5-1: Product: syz [ 1798.036651][T20152] usb 5-1: Manufacturer: syz [ 1798.037893][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1798.041744][T20152] usb 5-1: SerialNumber: syz [ 1798.059341][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.062554][T20152] hso 5-1:6.2: Failed to find INT IN ep [ 1798.064205][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1798.080026][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 1798.086436][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.095857][ T32] ret_from_fork+0x3fc/0x770 [ 1798.101903][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1798.107161][ T32] ? __switch_to_asm+0x39/0x70 [ 1798.116639][ T32] ? __switch_to_asm+0x33/0x70 [ 1798.121607][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.126313][ T32] ret_from_fork_asm+0x1a/0x30 [ 1798.134886][ T32] [ 1798.258132][T29649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.271538][ T32] [ 1798.271538][ T32] Showing all locks held in the system: [ 1798.279422][ T32] 1 lock held by khungtaskd/32: [ 1798.284915][ T32] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1798.300777][T29649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.308822][ T32] 2 locks held by getty/5603: [ 1798.314168][ T32] #0: ffff888034f6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1798.326724][ T32] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1798.338384][ T32] 3 locks held by kworker/u9:4/5849: [ 1798.344340][ T32] #0: ffff8880269f7148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1798.373399][ T32] #1: ffffc900048afbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1798.404881][ T32] #2: ffff88806a90cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1798.415598][ T32] 5 locks held by kworker/0:6/5928: [ 1798.421073][ T32] #0: ffff8880206d8d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1798.433056][ T32] #1: ffffc90004d27bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1798.447803][ T32] #2: ffff888029248198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1798.456801][ T32] #3: ffff88802924c510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1798.467344][ T32] #4: ffff888028f85c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1798.477210][ T32] 5 locks held by kworker/1:1/25293: [ 1798.482689][ T32] #0: ffff8880206d8d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1798.494625][ T32] #1: ffffc90004577bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1798.513716][ T32] #2: ffff888029267198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1798.523145][ T32] #3: ffff88802927a510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1798.533219][ T32] #4: ffff888028f85c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1798.543006][ T32] 2 locks held by syz.0.5992/29645: [ 1798.548238][ T32] #0: ffffffff8f510548 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1798.557671][ T32] #1: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1798.568881][ T32] [ 1798.571311][ T32] ============================================= [ 1798.571311][ T32] [ 1798.579787][ T32] NMI backtrace for cpu 1 [ 1798.579805][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1798.579829][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1798.579843][ T32] Call Trace: [ 1798.579853][ T32] [ 1798.579862][ T32] dump_stack_lvl+0x189/0x250 [ 1798.579897][ T32] ? __wake_up_klogd+0xd9/0x110 [ 1798.579924][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1798.579956][ T32] ? __pfx__printk+0x10/0x10 [ 1798.579991][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 1798.580021][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1798.580054][ T32] ? _printk+0xcf/0x120 [ 1798.580079][ T32] ? __pfx__printk+0x10/0x10 [ 1798.580103][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1798.580133][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1798.580163][ T32] watchdog+0xfee/0x1030 [ 1798.580205][ T32] ? watchdog+0x1de/0x1030 [ 1798.580239][ T32] kthread+0x70e/0x8a0 [ 1798.580264][ T32] ? __pfx_watchdog+0x10/0x10 [ 1798.580290][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.580314][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1798.580341][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 1798.580369][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.580392][ T32] ret_from_fork+0x3fc/0x770 [ 1798.580423][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1798.580461][ T32] ? __switch_to_asm+0x39/0x70 [ 1798.580481][ T32] ? __switch_to_asm+0x33/0x70 [ 1798.580500][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.580523][ T32] ret_from_fork_asm+0x1a/0x30 [ 1798.580559][ T32] [ 1798.732709][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1798.737981][ C0] NMI backtrace for cpu 0 [ 1798.737998][ C0] CPU: 0 UID: 0 PID: 20152 Comm: kworker/0:1 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1798.738021][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1798.738035][ C0] Workqueue: events free_obj_work [ 1798.738061][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 1798.738094][ C0] Code: e8 8b 3b bf 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 60 6c ba 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 2c b0 7c 00 48 c7 c3 58 0f 9e 92 49 03 1e 48 89 [ 1798.738111][ C0] RSP: 0018:ffffc9000b5c74b8 EFLAGS: 00000246 [ 1798.738127][ C0] RAX: 1ffffffff1b74d8c RBX: 0000000000000000 RCX: e40952b103232700 [ 1798.738141][ C0] RDX: ffffc9000b5c7501 RSI: ffffffff8be286e0 RDI: ffffffff8be286a0 [ 1798.738156][ C0] RBP: dffffc0000000000 R08: ffffc9000b5c7918 R09: 0000000000000000 [ 1798.738169][ C0] R10: ffffc9000b5c75f8 R11: fffff520016b8ec1 R12: ffffc9000b5c7928 [ 1798.738184][ C0] R13: ffffc9000b5c0000 R14: ffffffff8dba6c60 R15: dffffc0000000000 [ 1798.738199][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 1798.738215][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1798.738228][ C0] CR2: 00005555826945c8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1798.738245][ C0] Call Trace: [ 1798.738253][ C0] [ 1798.738262][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1798.738292][ C0] unwind_next_frame+0x1965/0x2390 [ 1798.738323][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1798.738351][ C0] ? kasan_save_track+0x3e/0x80 [ 1798.738381][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1798.738403][ C0] arch_stack_walk+0x11c/0x150 [ 1798.738424][ C0] ? kasan_save_free_info+0x46/0x50 [ 1798.738450][ C0] stack_trace_save+0x9c/0xe0 [ 1798.738470][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1798.738506][ C0] kasan_save_track+0x3e/0x80 [ 1798.738533][ C0] ? kasan_save_track+0x3e/0x80 [ 1798.738587][ C0] ? free_obj_work+0x342/0x480 [ 1798.738609][ C0] kasan_save_free_info+0x46/0x50 [ 1798.738633][ C0] __kasan_slab_free+0x62/0x70 [ 1798.738650][ C0] kmem_cache_free+0x18f/0x400 [ 1798.738672][ C0] free_obj_work+0x342/0x480 [ 1798.738698][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 1798.738722][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1798.738749][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1798.738778][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1798.738807][ C0] process_scheduled_works+0xae1/0x17b0 [ 1798.738851][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1798.738889][ C0] worker_thread+0x8a0/0xda0 [ 1798.738906][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1798.738938][ C0] ? __kthread_parkme+0x7b/0x200 [ 1798.738960][ C0] kthread+0x70e/0x8a0 [ 1798.738983][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1798.739011][ C0] ? __pfx_kthread+0x10/0x10 [ 1798.739033][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1798.739059][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1798.739086][ C0] ? __pfx_kthread+0x10/0x10 [ 1798.739106][ C0] ret_from_fork+0x3fc/0x770 [ 1798.739135][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1798.739164][ C0] ? __switch_to_asm+0x39/0x70 [ 1798.739184][ C0] ? __switch_to_asm+0x33/0x70 [ 1798.739202][ C0] ? __pfx_kthread+0x10/0x10 [ 1798.739223][ C0] ret_from_fork_asm+0x1a/0x30 [ 1798.739251][ C0] [ 1798.769949][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1798.769980][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1798.770013][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1798.770032][ T32] Call Trace: [ 1798.770048][ T32] [ 1798.770062][ T32] dump_stack_lvl+0x99/0x250 [ 1798.770109][ T32] ? __asan_memcpy+0x40/0x70 [ 1798.770146][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1798.770186][ T32] ? __pfx__printk+0x10/0x10 [ 1798.770230][ T32] panic+0x2db/0x790 [ 1798.770274][ T32] ? __pfx_panic+0x10/0x10 [ 1798.770312][ T32] ? nmi_backtrace_stall_check+0x433/0x440 [ 1798.770342][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1798.770377][ T32] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1798.770421][ T32] watchdog+0x102d/0x1030 [ 1798.770458][ T32] ? watchdog+0x1de/0x1030 [ 1798.770501][ T32] kthread+0x70e/0x8a0 [ 1798.770535][ T32] ? __pfx_watchdog+0x10/0x10 [ 1798.770569][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.770599][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1798.770637][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 1798.770673][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.770705][ T32] ret_from_fork+0x3fc/0x770 [ 1798.770751][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1798.770795][ T32] ? __switch_to_asm+0x39/0x70 [ 1798.770820][ T32] ? __switch_to_asm+0x33/0x70 [ 1798.770846][ T32] ? __pfx_kthread+0x10/0x10 [ 1798.770878][ T32] ret_from_fork_asm+0x1a/0x30 [ 1798.770923][ T32] [ 1799.209590][ T32] Kernel Offset: disabled [ 1799.213928][ T32] Rebooting in 86400 seconds..