last executing test programs: 15.835113409s ago: executing program 3 (id=4165): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0xfffb, 0x6, {"63546a28dbe8c6af770dbd6f9fab16a4"}, 0x0, 0x1, 0xc}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x118) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000002c0)={0x1, 0xff, 0xa, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="04000000000000"], 0x44, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000fc0)={&(0x7f0000000e40)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000e80)="0fa5e4b103", 0x5}, {&(0x7f00000020c0)="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", 0xd98}], 0x2, 0x0, 0x0, 0x4000070}, 0x0) 15.381684245s ago: executing program 3 (id=4166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) r3 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) shutdown(r0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x20000400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 14.383232448s ago: executing program 3 (id=4169): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x200020000) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000040)) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x6) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0xb9f, 0x0, 0x7}, {0x188, 0x0, 0xff}, {0x879, 0x0, 0x100000000000000}, {0x2c9, 0x0, 0xffffffffffff7fff}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@flushsa={0x38, 0x1c, 0x300, 0x70bd28, 0x25dfdbfc, {0x33}, [@lifetime_val={0x24, 0x9, {0xe, 0x5, 0x36, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x10001, @mcast1, 0x1}, {0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}, r2, 0x7f}}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newtclass={0x50, 0x28, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc, 0x6}, {0x1, 0xffff}, {0x4, 0xb}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004000}, 0x20000030) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000500)=@attr_other={0x0, 0xfffffff8, 0x2, &(0x7f00000004c0)=0x1}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3e8, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x940}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f80c707}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffec}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffffe, @empty, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65d212d6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x54a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffff801}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000a40)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000b00)={0x20, r5, &(0x7f0000000ac0)=[{0x1}, {0x0, 0x3}, {0x1, 0x1}], 0xdeadbeef, 0x8, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf6d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r6) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000e40)={0x2c, 0x1}) fchdir(r1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r6) sendmsg$NL80211_CMD_SET_PMKSA(r10, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r11, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "fcc82c3bca20afc156cfdf3537488662"}, @NL80211_ATTR_PMK={0x14, 0xfe, "eef59b062f31423e1a1005d62c1ddfb3"}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) fcntl$setlease(r10, 0x400, 0x2) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000001000)=0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001040), 0x240200, 0x0) 14.111623712s ago: executing program 3 (id=4171): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f00000201c0)={0x18, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) 13.203114867s ago: executing program 3 (id=4174): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x81}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c04) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000001811", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0x4d3f, &(0x7f0000000d80)={0x0, 0xca6a, 0x40, 0x2003, 0x2f8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000480), 0x66) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'gre0\x00', 0x1}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2]}]}}}}}}}, 0x0) 12.783980887s ago: executing program 3 (id=4175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbf9, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x38}}, 0x0) 12.107387614s ago: executing program 32 (id=4175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbf9, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0x38}}, 0x0) 8.723056065s ago: executing program 2 (id=4191): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x0, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0xfffffffe}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb46, 0x200000000002, 0x9, 0x8, 0x4}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00080001030000000014000100450000280067000000849078640100fdac1414aa02000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="544000019078001c"], 0x36) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x23, 0x4}, &(0x7f0000bbdffc)) sched_setattr(r5, &(0x7f0000000040)={0x38, 0x0, 0x3c, 0xffffffff, 0x1, 0x6, 0xffffffff00000000, 0xd, 0xf22, 0xda}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/50, 0x32}, {&(0x7f0000000380)=""/139, 0x8b}], 0x2, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10000) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='a', 0x1, 0x9004) lseek(r7, 0x2, 0x4) recvmmsg(r6, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) 7.422296787s ago: executing program 1 (id=4192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) r3 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) unshare(0x20000400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 6.396558073s ago: executing program 1 (id=4196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@allocspi={0x118, 0x16, 0x1, 0x70bd26, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@empty, 0x4e24, 0x8, 0x4e21, 0x4e, 0x2, 0x30, 0x80, 0x2b, 0x0, 0xee00}, {@in6=@remote, 0x4d4, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x3, 0x1, 0x25, 0x4, 0x1f, 0x8000000000000000, 0x2994, 0x7fff}, {0x1, 0x9, 0x0, 0x716}, {0x0, 0xffffffff, 0x5}, 0x70bd27, 0x3501, 0x0, 0x3, 0x3d, 0x8f760a40680832a5}, 0x3a, 0x971}, [@policy_type={0xa, 0x10, {0x1}}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x118}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x938, 0xffffffff}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) 6.285614823s ago: executing program 1 (id=4197): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0x0, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0xa4000021) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4a0001, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) gettid() timer_create(0x5, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r5, &(0x7f00000000c0)=0x58, 0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000180)={r9}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 6.082748084s ago: executing program 0 (id=4198): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800007eaaf54d00000000000000000089013c00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.012583348s ago: executing program 0 (id=4199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x80, 0x6}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 5.854810236s ago: executing program 0 (id=4200): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000100)={0x9, 0x0, 0xfffffffc, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000080), 0x0) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000000)={&(0x7f00000002c0)=""/174, 0xae}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) 5.682104396s ago: executing program 4 (id=4201): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @mark={0xc}]}, 0x48}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r3, 0x100000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r6 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsmount(r6, 0x0, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x4, 0x6, 0x800002, 0x0, 0xffffffff, 0x40}) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000300)='\x00\x00\x16\x00', &(0x7f0000000340)='^', 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) 4.916676627s ago: executing program 1 (id=4202): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_io_uring_setup(0x1fe4, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x88, 0x0, @fd=r0, 0x0, 0x0, 0x2c, 0x6, 0x1, {0x0, r4, r1}}) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r5}, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000a00)="1387b23d700311b7397ac852e8695af1c848518d4b80afc8bffe1c2ae0383823b8825ac983935e98b850e0663fbd9870f0c36f1b95d2d3c16d914f97fb519620135e7eed0735bfe08d6edf30ef42946b3e90fb7c91d8bbc27d50dd5abc3f569c09bcf5794010ee61d86b8e17d03dfe5c9d359db6d9f8fd786dd7eb290ed7155a359199ae284014d1450aa333413738425538662f5d91055952631716a678f8bc8361995c818a9bfb7a0fb9eec7bc5fbf55185c177eedaeb13621b09efde6d0b9e209598756597a99a7ef7560e0d12053d0c6685361e9f8d2feb2c3c9a19058e88a9861739990a784e0b6da4635ac648fa2427f97f4d31c36448767cde3c4687fa1d77e864aeea38f06b541302f2a0a2a034213a692b5e9eddcd430ff68de626b05020421facb354a2d609c638ab25bbb1cf08653feadfde19f4f17bfc0d2d48118a9f5ded4fe2468f197f2af6758051b264ab2ce504fc294d08bc05df286916cbeb5580f5b178cdb582d006bb12380e37f2dbd58f0db742c92954c3d653da8c0096947dc54cdf479d593dd6439cb4880b98aa0d7ccb5ff6ceb635b61c933aba137730dd80f08d81b3135748907bfaddfebb22aa11a88b85910d8c3ce2b94f031872366da5d748759a8e58e3baef0495f1364b5a5f8ab5b576cecdfc9d7755672b6a59f45e4224dfb6cd28923daf29c790f69fbf0431c4dfb94e94b81f88ac8ce5df4598e1b62f8daa422e6369006ba884a5cf72068d40a258c2f868b6a268a03618f6200161402d0d3940f5e4b07b0312a5048216881e7adb03e02ded383370f901755b1c1e3d370b70898470f63475a685780fe0ac02ff0823469b002021619a3d88722d16206fc0f99dda9c74c7859b50f43a3900be04bd97457e0a3e9463865d9f641ec4f732c7d72fb8bfafdae99847984dcaf288e620b252ad8b6d0eb5cdf3877a80d8b968ddacb944ba35d9eea3233ef9eb1caca556b0e8f31c85e5bb79ce12c6ab108e990c59fef930c2af18d6725da3fd35becf431930e9d13c34b7ef1ac12dee60c7da0620f1f21000fb8abaa1cd4fcd7e97c9f5e83e92f9bd3af1fdba9c67c7bde18c70b4ed8123e574a1de6ba0bd87bc9132efb54c0e41c60c09d91a4e44e79e36db1150290665c8a7a5ac9cae2c4e90fe60182975db1eea3f03ac98bc3e1b21006c7648a85388a3712d9520fae4984de1917f81ed67b0c78e3e932e7decbecae4f36a5c36599da0c2c195cb77f1ad7ba4fe3d1409845882ab87d5cb9303d6ec5550dab76d8e292fea56229ec2cf5efe931127c9531bb5ecf7fc6427a5859dbd39180fafdd59131bcec12a69106c8f7d02066189b2986d135ca5ca08a424bb63da523836b7940544941dbe45a391d4526357b2611dc55d1b5ebfbf6af022e0dc8d5c2870ef848685c4304089284df94e6786803bd71e854acb1ef1eb8f5e305b004add5d20df0ee49b29ad2054ae004343829a0ce1d04a72e89d1414c95694c0223bc138a906fd465c0d3014749dcf9d43ada9df5cc67dcb2fd30ff680fc6e7370a52d30cba38a38b1d00a4c57c06feff0c9bb1af0b7dc3520670ceab9dcaac7db8bd3ade546682c7012d462a07479ff6d3dc652c4ecfc065108ea9beb8952eda8b2377e19ee34d385be2cda4db99bf5573054cae54ab65c90d357a7f9deed8c25ae81b14dd411ea629e71ec37862190ac413b564add89447d690eb2eb3d72afdcc3000f645f0d3498f7f6be32ed35696897f98da4c1d2a9a81a6b5db9c256cb852b3ee219dd7537f4f6f747b8bb1579c2ae0e8b2e7ae1854b8223d803a926b2a73533497091446f296e3230e57a6aecf0670bc6403d54e4a004f7bfe6ffce9eec5fec990622a2e99bcf1f71b8c68c539f7554f2227a43220e4b180142530e976759deabc16cd76945ea84dd465e7b063d769d5bc3b560b52aaf8a96a41f7e517c617ea8ac24ad50d70ec2ad9841894c0abb412fbc371c7426492d12a78812a0da7e9dff693ab5a3abfda588c83a1a414db0ebad5928d873d73256d91858daac51cd88fd1e6dee377a35f4529c922ccf1da5207f18fe9ba028f5ccffd8e641069416ad61afd88e4c16132476a488b927ae09e71983ccd1a8bc6eb399c219d99aca435f571bddf1ccffdab93e2d18b0f9ecbcf4920dcfba6d24691e9ccd56685e81d24ddbd44196b04665fb3434932628b918cef5e1eda4a104f376e665a0de454f389dc36a5581f8f25e5a9b51bb5221f69eb0fa6e533e01994b2a0f94a99319afb7e63476a90007625ed4405f3b91662df795b5ba56a7a28847d6142b76a97b411ac3be3ad2a9fbeec7dfef44b462b1e4067e6078e69785fdfb139c043d11bb87cbf3ea36a98d6871665da1b07715565e845deac5d6f5e586bbf4368536ad9af67af1a750d3519a43d18eaea98848cb661ce879b4faa31e9e7710be2f4759f85af14315c5812b0bb2fd586d6442e5be446a69625eabeedf54f0bf1ff0076651d9d587f107c8905766e948f1436e0f30db1f0e4491d22a92a04782a30d0a94e6986e7e32661fba1d0ba6555612fef7149fbd2898b96d8604294518d671b742f2ebc9182344ff223d990bb1a9d39b1a46ed38b642853cff3a136dac145da886e75d2580cac7d39b32f89092e2caba1365b7ae4314bf682e4b999626d7e975ee389b513106470eb5d100ba78cb8e8663a9d25cd113fb8fb75a00d687b6ef13534f11c0af74932bd023450d6ccc528080a120dcbe165479db8bb39967aff4bf0e8ca02d202f47ad404bd00b893a84f03cdb0183d6b56cb1888c49de7832be17d9b53ce4b5849e524b7a1d6124b90fb89354b39c110f4cd1f54144e0100fe586e3c03cd269d2ad144f8adcfa89774a1a58b412b582d119d03c7799bdb2515a2e0a610e541c1cb27009a4c894aa2f4529d9b29bb8ed873101cfd312c8962e4c63f59b2b3d2ed87137a99c274dcbcd5f2adee10cc2e2abe016a7deac4c9573c3ad25d48a4c8fc2107709ff04cc9bc92d1e92739441c78e9a8230cf9c173d60493318a538058a2756462874b184da5b7b0f9ea7415a5722f3ebafcac477a0de6c6cdba2d270104b698d88b9a85b71d972313549edc2cb0dd7c12d796e7f1d0175f5aa2069171134cf54813dda87d9c6eb96153c7435e2ea75ef4fc883a61fa4b13e7b8df5c542019806bd675419bdcce720d9cdcbbb452e6b35e8397520fd28f611641b10a77647a8ca4a66b7a281c0770add32548abd3fa9a2f9c636c1210eadf7a54f2f046cd3a47b6a8059185c6bd9a2e9607de6ddd107559ea82be952c9669f1224a3decea3085c1d72d07b260a6122124a0594af8d7450170e9cd65dcbd4b57cb8c694c3ea64807e0eb7e54de8d1d2ddf0e3988121a43b09aa46977fa8d3b1f53ae212743dae549f3c65e16d405f3047a852609e3384dc5a41c9da5b4c02be028a70698d9c12162938d67621746976a3b8eb98b2a58868b79c27547fdf820918827f6e9d82d17304160a0161d7bb996b51deac2bd0acfda02ac3f16fc33cd9deb09db54c29e93bb050830c61ae3b14d85ddac6e94d914f60ce4ddbd09cd04a6feb9e6b2fd85a4b593d46d1fd5fb976b294f7decddac17445fe002f52867f85878d6f74b9f4dcf9eec9d1bffbb5fedad2b6c2f5c9c9953cf7a45ec14b1a73b3582655336b6c2352dfac1940a2628209f3c5c0b4de0b850dad6252e07b1b8154f25f1c6f675c91b3dae3f9164d97d62d699f7e4975ddbaa10807bc7a46a806ec43dc44ffb533a1bdefd24ee0b6b4d2ad6480e3cf99b53f6e37b2050c0fa9b454db72e581390f6b2e78718f85a7ba66e1af1f5d53057da2c9f4c5856be9f5219f4b3df57b6ac32c8257cc68c31d9cee247cbcd446ed38150232902d3761ab0ad43ea36758c37216c56261af9e5cdad2db71201ae4d84015890674d833dade0b16b7aacdfb1242cb1a090929bfb542ce05845dbe596907a977b4c7bc63e3734553a72bac19038d3f42a22085e9e63e1c94b1fbc3425f2fe41cc2727fe164ace47a68c88c150751d052a45bce0c8e323b5d8123e19a51d6a21b9c44cd06799873e615147d36fc86d5cf645514e4b0f2266e9746e9c99f10ff8b8a11b52a14fb8f8b7c98a3db1d2a592531512018d6204af05cb1b322c0cc9930560bcb91ba2d53f4d2086fb272a2115cd1082d3b0670dbd69ed107950ead6f823d0547ed417c7fe3aa65b4113d7a0e10c8bcbad354cbc7ff803ed6869d0f0e262c9e53d86bf15ee35f5ecf58748b8cb44e98819a87c0eb527c9104058c484e71073c3c0ada5f88e555f1899870fa663ec1dcfaf9b84454becfa34370909abb72a6206d998f375bd69803bc4bec4a7abd9dcec92e3baf0ca0b585c7c7f9a07adf6d7611e5bd1307eb554fa11f7c486ba46d557ed19fafc1bcc8339f655298a13110e2279e996e7cab491f8f0172ac11fb48e326ca56231f367b1ce34b01bdfb2bcd7484676b2077adec06cb93ce7c0aee555bd1b0d013c652324f9e7d94b25740d980227b3359e3a326a1e52e8ef41f68dc6f5c6e043c2747ca92cd4dcdf7afcebf33e8a84697d5de25ab407ee1a0613a76262b95852799d97318af29eef82b06288536f17b5bb80bdbd53e8bca3ebcee086b7f1a9d4e9eb374432e690db3f9b46643a491444c15c6c562124d14f776c6e296b1e3b541412804a3448f1613b45af44748d4eed9d39ffcc51eae43bd1d033f0ef37b266d5bd8836c4aa973f15cad4dcaf63ac946733b442cde8b3a1075ed411d146eb09fee890b6024895f81c16229458959bf9ab68967863ea1b81db2ba3a3a91dcd1676400f8f778f8192c23c6c305470a3dab86c6522735f6c84100ad4c436e6aa587c539a9bf592ab3b298dd50c54d366dc49e2f2ace5495df6514fbac978cb0ad6eb764c7084c46f5211fbbada975c60678224c5c37d9b9d493c71423c428999a7cf66d250f74ef8fe12beb4c3b50408114a3067216f3cc44482d5c67589e1d21c64c04cd9ef80f48536f02f9d40d2937e13360cbe3f5910b2f00cabc937eab122012b497dd0720fa7489a3dc3a8403502524eb8db8b4820914347d07af1a9da0b6d963dec34babad41e3399192e76f6c7550ab2752b4bf3500a59b45df558dfbb4a8ffdc58226ad388817d198d27fece3985447a9508a573b5b0834f143f319e0459762cbb06df3c639068da97d421143d4e0c14b543553283d9b1859c2382b93a5c3c4c29ef2fa743207e236e291b8dbd631a795acec5632f570622dfa6dce62f815662ba33a73e709625edc426261f2a19f0845619bef3072c689ed473dbf925be9d694f82db77cfcf8498a83b93ca121ae273e0a3435b9acf71472dec30645776e5560094887e9b98f6dc99c3c167056962a6b2bd870367cc4b72464201656f38fdf38921c388baedb00ea53bc532e7fe485fe84bf8c16bbeffd9f7c0092afa0ea8043cd2a38a242a6d024ea095f968b2a5490d4f05da5a3ffb9510ad84ae0b38c4ee45bbc2632eb51bdeea60a9da017b6e61fea547624a5f6413db60ed301f6189e7cf141eb93810b4da97f92e0b61a4464b3b595a8c4966cf67ce12fa9e6005c1785f6eb7568f31278c8bc6fcd92c75a0592aa529301d20618b37dce9bb7c367e8aadd41e573491704bac2956779cb8e8ec915bebc4e12ad0608fa1079d832b12f7fd4e22eb26cdff6dd5dea1778fec10c49f364b2c887d0bd7f702d11b9f4bc491cd1b66f5e4681046946459f4f28691b3aa9663fd8397359e694a61302e7a306ae309a2b8131369e4f81c488", 0x1000, 0xfffffffffffffffa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{0x9, 0x9, 0x89, 0x4}, {0x113, 0xf0, 0xa9, 0x5}, {0xe, 0x8, 0xf9, 0x1000}, {0x4, 0x4, 0x6, 0x5}, {0x8000, 0x5, 0x9d, 0x7679}, {0x3, 0xc, 0x0, 0x5}, {0x7, 0x4, 0x1, 0x38000}, {0xfff, 0x63, 0x6, 0x4}, {0x0, 0x1, 0x84, 0x9}]}) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) newfstatat(0xffffffffffffff9c, &(0x7f00000040c0)='./file1\x00', &(0x7f0000004100), 0x100) keyctl$update(0x2, r7, &(0x7f0000000180)="0eda", 0x2) keyctl$instantiate_iov(0x14, r5, &(0x7f00000001c0)=[{&(0x7f0000000440)="9c0475ce5ed3450b836f131417c9fe37a1d5d970bd249e519d667497334f79c94e7f4283a3f6518bd85d68f3b8c39a7b25b3a9fc5355b914f787fb0f7d07cd6dd70be89b1a8330b20293dd4aa00e58c7aa83faad5e289ffc3aee86a4bf0f", 0x5e}, {&(0x7f00000004c0)="649d2c51f9f7184428423c708c20902f0e8de863b3cb4d7f8e449d4f0fe5782a716cd09444f29dd10523a06d79e8abcf6af2e703909d85028dd66c3d2baf1a0077602d2339bfb8eeee28a2622d3be00c033e07956a2896bf3a58d1960ab88f0eb3b5", 0x62}, {&(0x7f0000000540)="db0b373be5594b83f47658a47be42a80315f8156802c82a9d3960203dbc4f818e65382811753d4d08dc9dbfa4a1a6133f5079554d492e4d26093e54a67873b6879eba9b5b0e8edd46a171e5226b9966dbc57f7f6ec4618083ed81e3fd88e489ab7c56fef658cf4bef05abe5d297949547f76cceba24659e439eb62274a0b90e95a740fd669100a84966f75e4d577fd7f7971d20c3bd345a6369969f4dbb274a488e62badab7308c50fa11639d82ff5a072b97b3967a6f1f37cc35f98fc501d7a6473ff80ec6430c2141f589e77ca538c63812b95f5ef2ceeee162c4814cf9f31", 0xe0}], 0x3, r6) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, &(0x7f0000000340)=""/207, 0xcf, &(0x7f0000000180)={&(0x7f0000000140)={'michael_mic-generic\x00'}, &(0x7f0000000240)="005d1f92720439df74065d83f71e8e8dc3f0cb8c80752d8179a9ddb72e76cbe3b361d24baab03a7effa47f09c09b0cdd107095c70e64c6b90385c1db4e4690874ce425ac06ee7429b9a5e7f6f4561de53e26ad4ce9be13b78716ff2f74139dff2cea69671e2551aba3cc58f9ae132fdc31df20e25f64ac6d324979d4d897f6176ff1ca9239d24c98953ed832c5cc27c5b658c3a59781a8a0df33aa6bcd791a58eb463440037d816a5c7a1794cb6e590c7a", 0xb1}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 4.782621362s ago: executing program 1 (id=4203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="fb2c54d949e9002f37dd75c13bdb4e060b738722f773d9623a70c5d8fe95afa2d1493da77b", 0x25) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x800000000008, 0x0, 0x3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000000)={0xa, @pix_mp={0x9, 0x3, 0x32315659, 0x4, 0x1, [{0x400, 0x10}, {0x5, 0xc}, {0x2, 0xffffffff}, {0x2, 0x3532}, {0x7fff, 0x7}, {0x9, 0x8}, {0x2, 0x40000000}, {0x7, 0x401}], 0x0, 0x63, 0x1, 0x0, 0x3}}) shutdown(r0, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB="2c726f6f74bb66b92b3d30303abd177c0dce0d6630303030303030313002309ad779ebeffb46490338f95966fb3030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r7, &(0x7f0000008340)={0x2020}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x7ff, 0xadf, 0x804, 0xee01, 0x0, 0x1000, '\x00', 0x6, 0x83, 0x1, 0x6, {0x8, 0x6}, {0x4000000000006, 0x9}, {0x1, 0xd}, {0x0, 0xa00}, 0xfffffff7, 0xd, 0x3ff, 0x7}}}}) 4.090940692s ago: executing program 2 (id=4204): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x10fe8, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x11000}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0) 3.743803719s ago: executing program 0 (id=4205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) r3 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) unshare(0x20000400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 3.680518812s ago: executing program 2 (id=4206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xa00, 0x6, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x700, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x10) 3.51160007s ago: executing program 2 (id=4207): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xcc1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x7}, "1c57810a948561ef", "7e797a7133b64de59270b9f9c7ef7cc6", "c5dd39a3", "a0839b090a8df25f"}, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x8}}]}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)={0x18, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x4f}]}]}, 0x18}], 0x1}, 0x0) socket(0x2b, 0x1, 0x1) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xcc1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x7}, "1c57810a948561ef", "7e797a7133b64de59270b9f9c7ef7cc6", "c5dd39a3", "a0839b090a8df25f"}, 0x28) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x8}}]}) (async) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)={0x18, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x4f}]}]}, 0x18}], 0x1}, 0x0) (async) 3.462873233s ago: executing program 4 (id=4208): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x1, 0x0, 0x10}, 0x50) (async, rerun: 64) r0 = socket(0x2a, 0x3, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2f, 0xdf, 0x2b, 0x7, 0x13, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x8000, 0x7800, 0x0, 0x401}}) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@ipv6_getaddrlabel={0x48, 0x4a, 0x4, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, r1, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000005}, 0xc045) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$alg(0x26, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x3, 0xffff}}, './file0\x00'}) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x2, 0x20, 0x8, 0x3}, &(0x7f00000002c0)=0x18) (async, rerun: 64) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 64) sendmmsg$unix(r7, &(0x7f0000009c40)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000440)="3072e547b873d67bee9b87071641c0730295ac126fff4e1b9b898ef66d739b26d9269f41defd66547afcbe113ce1a03776816686933256d808aafa7e41720f15e6d7295be4c593dd93677f38b7063db0bf8d85f20abe0d9fecc1782cb9b400235dccf51d467291a89f92973a6d90e32f22875c2cdc7272fc07334dfec5fcacacdf4bbac697a2d3cea0e03eb98dc35071b2d35bea41fc05c3f6bef059f6668de9665241757fa71af9df1c9e7fc20b4f0e907b6b9256a3ecc6275140931a0539dfdc99e07d18ce6313647b7d45d68981ba5b550cb53c3276ce380b10cb591421b6477db03ecabf693a3d", 0xe9}, {&(0x7f0000000540)="f671dae48c278c8872d97d596bf879d932ae3b06da53e015e136585cf146931819b6e8d8a7e90315179a1e5089c5989da64fb66c62f3c23e9d63865f65e5c1463fb4bdcd3fc3fdc0182446e4522a4b89b2be4de8370c9bf36145c6cf7a4b57b98e6b4361c6975b143babe215bb9666f08ea0f2a76471cd4b62687484870aef97b203aae9a85a72fbcf0ebe2524e40512101a5aad0710b2cc287f29d34fd0fb22918667e9ba619984c73084b38a03110f1bc768760d74e76d82", 0xb9}, {&(0x7f0000000600)="829de5a1ef409df007d4d422a374a2e16f837b2ef224de77aa61b90a690c63f57aa15f8fc144c5c08541c9e28de35a74d2fc97b324b1e2e773296cc0b490812c8a1d748ddbd6733220dff630ff03f46119702f5047d4f48cd41112f57253a80a664012a0273c5efcd4125e6701e9ef5273c3173ebd16e4a4610b7655530138177d810bfb837db367983cb2055a80a9d7acf414811af044bd7c60724133a26ecfaae98e5dabc4a963065424bbf3fac1320f046c7309aa5474d4acde13871127d1b1429d7d314f13f43c11833d4ab184100e16015c0a4d29830f479b50f935623922e3f541f3b152d12f6e9745ff7e57317e4a4f3d95a0", 0xf6}, {&(0x7f0000000700)="e3bd7e495a0e171b0a3cc916587728049367f12b8ff174b7faca9f56f064fbbcfdf21b94351d427306bee8bed65401fe078e4f2ca04fd2077633ac957cdb086a29c89f258b6ef0a40c3f08618460b2fb5410b52576752395bace14adbcb95477ea7a766bf368c0d985625576d81afcd47eb8eff25c96e284073fa468995e1acf5ba6d42da6601b3a96b58f773565fd54cef008edc73fd040f96ec0b388c9d070228e4d6510a533fae5497b7cc5c4bbe6368eae0bf2f5d4d1e409e8e41ab1fcda", 0xc0}, {&(0x7f00000009c0)="f14b57b279a3", 0x6}, {&(0x7f0000000a00)="f283fb5ed8c2f6aea661b19749e044cce7bb75e8fe4f21a0d111e9f6d05c4011c81b69470d07b4753f", 0x29}, {&(0x7f0000000a40)="6d6da80041998addca61f88ac54ed17dd504dda8d80263e51bf7f82a2c70c9ae82faca6908ffdb99d1deca5aa014797fa6917ca300d90c552ef9c229535a42277919ce0319845c11b1d4b614a6ae583b24ea30acf258ab06a6c4cf9209143dfe6520d1", 0x63}], 0x7, &(0x7f0000002300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x40040}}, {{&(0x7f00000083c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000085c0)=[{&(0x7f0000008440)="27fc75baac9538b089bf2b5f307a4ef06142d414a89699fbbdb302ce9156196f7b2c0a94bc3e0b59d7923acf88592b5f09eb3d45a5dd43ef69c3b1e6f0345e", 0x3f}, {&(0x7f0000008480)="3caf813d6641b8a39f13122b12770ed5bf1eaff6b085b66916159cb9042c09cfa177fdf4b22aa834842d176f58eae723d048e316a3994d10", 0x38}, {&(0x7f00000084c0)="fd50c356f389cf52478b195c778538452041df222a5458c7b2ced685188a2d20cd5a6c2a962800301a4ad0ab81147aa476ecad057e6ef21d265f3104f59c5507d7566f233c35fbf0c9650d8006621a9be81ae6ff39af7ae495f820f9bc457ee019b5407f3f4fe71d3e5e78e3e881a8100d7688bae9427a6c6553af0b62e9dc12c1295c9fc09cf458a8d594fbdee0fab7b0adb64a3b11532f97f7a69905d59b71975148707e88f260ca05896945efebb6d2a67c7bf5e9354cd0f1ff925a7b74fd42f986f7e18a3805b7405b15dec2ac41e966ccb3a827d7cfb09c4b0a54a36df98c3647c9528c0cbeeec180e8f7b8f39b6df880f403f2e899", 0xf8}], 0x3, &(0x7f00000086c0)=[@cred={{0x1c}}], 0x20, 0x8010}}, {{&(0x7f0000008700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009940)=[{&(0x7f0000008780)}, {&(0x7f00000087c0)="044fef5f7b69203a05ee1006d4e747c2b7afbe72e5dd0da590235047c59a7b109504b9f6141882a340299031623cc38c0473fca40d905147885e29224f2fd0dabaec82d6c4e5e15e9b92116f787ef786996d0585e98c866bbbc4e3d9e3eadd8cd53629f0f863de054c8ec018ef465dedc87dca371d39607560dae9090614f63fdee139d9999dc5510e8da3f8a37ab3700673be370ab67f9a026b288dc92962d46c0861260b35b4d3e8487d978a9d6635a357ea7e33eac6494ab4dd74acff97af27a5a1a1c8f3977a2d9926b4ab5410da074ef22a6d51011f59eaf777ab5462b46e9c2e0e", 0xe4}, {&(0x7f00000088c0)="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", 0x1000}, {&(0x7f00000098c0)="8af02475c20bf63f353b8f2c4d545654898cac638a2662b9e42764755246ad9fc633462e3c684d211412fb6c6b34317dfdfad16d31ec8bdbae776b42e84ceb26c9866e48e57cd5092f6e6cfc", 0x4c}], 0x4, &(0x7f0000009b40)=[@rights={{0x1c, 0x1, 0x1, [r7, r5, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r7, r8]}}], 0x100}}], 0x3, 0x51) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xf0, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c000280080007400000000008000340000000160800014000ff00120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x24008014) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) sendfile(r6, 0xffffffffffffffff, 0x0, 0x4000000000010046) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r10) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000019200)=[@in={0x2, 0x4e26, @empty}], 0x10) (rerun: 32) 3.202907497s ago: executing program 2 (id=4209): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000080000000000000000000000000200000000000200"/72], 0x48) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000240)={0x18, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x40010) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r8, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r10, 0x1}}, 0x18) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec300059191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) r11 = socket$kcm(0x10, 0x2, 0x0) tee(0xffffffffffffffff, r7, 0x3, 0x8) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d800000018007b18e00212ba0d8105040a871100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c59c266cd3e72d30901a8040098007f6f94007100a007a290452f230ade91838812126b0079afd7e9947f0189b316277ce06bbace8017cbec4c2ee5a7cef4090080001fb791643a5ee4b11602b2a10c11ce1b14d6d130dfe1d9d322fe04fba8cae8c9010000734d7a50f4fa61ee8362969ad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cdd40dd60105e9f16e9cb58000000000000000000000000000bef1c66b74396c06c1218f6167024b5ea2eb21656cae5c895b9810f8837ec82cefa1b09239de98b263b6dd6b55dd4dd1142a02", 0x11a}], 0x1, 0x0, 0x0, 0x2663}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 3.202486334s ago: executing program 4 (id=4210): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4000055) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffeffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x105000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@empty, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 'bond_slave_0\x00', 'team_slave_1\x00', {0xff}, {}, 0x1, 0x3, 0x40}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x93, 0x2, 0xaa78, 'syz1\x00', 'syz0\x00', {0x4}}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0xffffff00, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x8, 0x2}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x1, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'veth1_vlan\x00', {0x5911}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000b80)={'macvlan0\x00', &(0x7f0000000680)=@ethtool_rxfh={0x46, 0x1000, 0x200, 0x0, 0x4, "2722ed", 0x80000005, [0x8, 0x8, 0x3, 0x2, 0xffff0000, 0x7, 0xe, 0xab9, 0x622b]}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x0, 0x71, 0x5, 0x9, 0x3, 0x548, 0x8, 0xc022, 0x386}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) unshare(0x2a020480) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r1, 0x0, 0x10000, 0x0, 0x3, 0x2ca584, 0x27158b}) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 2.827757241s ago: executing program 2 (id=4211): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) accept4(r1, &(0x7f00000003c0)=@qipcrtr, &(0x7f0000000440)=0x80, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xb4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xe, 0x5, 0x9, 0x40, 0x5}, 0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="050f270004071002024a02000a1003000a00f60200710a10030005000703000007100216670500"], 0x9, [{0x9e, &(0x7f0000000180)=@string={0x9e, 0x3, "95ccd87bc8e2c08e6cce99886f415ced182c454c6beef720979ad2998d346d0612a45a0b0654443360538abc2da7d32b94b37f1f587f9d14419ddb98b1dd920469a34a9766172d6acdebb63019f876a4e09744ee4a4b7d1f055092b641509d8b650cec93d168c11c8d08c0e6be7301913340035fd5f910eb93172c28d02fc924bc207645867daf8c9b5dfec86cc73fcdedb95ea7c344bdf85f1c9258"}}, {0x45, &(0x7f0000000240)=ANY=[@ANYBLOB="4503c00263741de8f1ba617606c15598db1ffb8df37495353a2bebd463cd30c257b373afd3bd63645c8e21e7e8695363519b6049a9d18603b850950d0000ab22f6b87cdfd2"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="05ad610000"]}, {0x6f, &(0x7f0000000340)=@string={0x6f, 0x3, "8db5620091542e09d8987ae4b10c8b620aa3d119800a436802e84fda8afd6f0bf575d4c41f687b36369c4c9a7f6e850d51883e5be8ca2d88d92be6fbbbc67f2d9c24441b2fa0dbf03ae1aa99c8088c3231b268a8693a136c508c8e947eb9e5c661ba9971df7f3c2ea66c4d809d"}}, {0x99, &(0x7f0000000640)=ANY=[@ANYBLOB="99033f780a4e602212064a15fcf77915b6756c0df2c6d372ed2e8732b568b746e1a80ba66d9e2f498e9962448d47ae55d24a3a922b9aa7c1959d0891f7a9dba2cd7c385d2831462fb94c289c3c0fa59b5d7e207f4fde511ca73e55cd45de2b8ad3032950920d5fdafc2b3a7080f6cab922c3174f03421b6d2ab6f0fcffe897939f67e02c852b197088bc27ee46f71051c83c0da64ec1de09fcc202ca3eb2"]}, {0x10, &(0x7f0000000480)=@string={0x10, 0x3, "ab2b1b6a23f2eedb49acbbe41df3"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000820c0019800800010002000000300001802c0001"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, 0x0, 0x0) r6 = syz_io_uring_setup(0x7285, &(0x7f0000000640)={0x0, 0xec25, 0x20, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r10 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20043e, 0x0) unshare(0x22020600) r11 = inotify_init() inotify_add_watch(r11, &(0x7f00000000c0)='./file0\x00', 0xe400000e) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$sequencer(r12, &(0x7f0000000140)=ANY=[@ANYBLOB="ff0a"], 0x8) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) mknodat(r2, &(0x7f0000000700)='./file0\x00', 0x90, 0xffff) 2.777205205s ago: executing program 0 (id=4212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0x40e042715a266ed0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={r8, 0x1, 0x10, 0xea, 0x8}, &(0x7f0000000200)=0x18) 2.403209979s ago: executing program 0 (id=4213): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="802405"], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0x4}, 0x8) 2.257656601s ago: executing program 4 (id=4214): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r5 = mq_open(&(0x7f0000000200)='\xbaM\x00\xdc\x98\x8aY\xa4\xec\xe7\xf8\xaa\xcf\xc8\xec\xc11\x18\x10\x98\xf8f\x85N\x8f\xben\xf6\f\xc7o\x8d\xb9\xaeG(\xc3u1pd\xfa\xda\x96\x97\r\xdbu0\x13\xaf\x16o\xc2\x91\x16\x00\x00\x00\x00N\xe3\x13\xad!,\xad{l\xc5\x19\xfa\xc0\xcb\x11=\xc9\xde\x8eJ\xbb\x97\xc4\aW\xbb\xff2\x9d\x12\xde3\"\x9b\xb0Ce\'\xec,it\x83\xc5\xfd\xbe\x10\"n\xa1\x1b\xd7\xc1\x02m\xb7\xad\x80\x1c\xff\xb8M\x15\xe8\x8c\xe6\x00\x03\x00D\x83\xc7[H\x1b\xd4\x00(\xa7\x90e\x8d\xc9\x88;i\x04x\x90\xa5\n\xaa\xf8p\xb7t\xc0\xc9\xbf~z\x84\xdcX\n\xc9\xea\xf94\xb5\xc6nV\x94\xac\xcf\x01\x83\x88\xfb`\xa8u%k\xed\x91\xaf>\xb3\xb5\a^\x90\xec\xe6:@\xc2\xbb\xbf\x03S\x06\xde\x0e\xd1\xd9\x1c/9\xce\x9d?\xad\x96\x8dSv\xb5%z\xbb\x06E\x96\xdf\"\xe0\xa1z\xac\xc0\x8e\x19\xdew\x10\xb9\xe2N7\x95\xd7\x88\xb4ut\x84MfV\x9d\xc0\x00L\'\xe25\x00\x00\x00\x00\x80\xd15.\x15VJ\xf2-\x83H\x80\x1a9\xd9Z\xbf\b\x93\xd2\x18\x1d\xee\xfb \xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\xea\xa5\x1e\xdd\xde3\xd3\xe1g\x9aw\xc5)\x84\xed)W\x8a\xc5\xa4I\x12\xaf\xfc\xd5[2\x90\xb7/\xd8\x00\x05\x82\x87\x1e\x9eN;\x97\xaf+\xee2i\xd1\x85\xe8\xe5)\xcd \xa5#\n\xcc\xae\\\xfb\xcbT\x16\xfa\xde\x9b\xfb\xb4s\xb7}\x02?\xd0\xb7\xc1\xd1\xbb\xb7\xb1\xf5\xa6I\x8d\xda', 0x7101779cc4dbb6e, 0x1e0, 0x0) pread64(r5, 0x0, 0x0, 0x9bfc) (async) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000480)={0x53, 0x4, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a023bcd80ab8", 0x0, 0x2, 0x10002, 0xfffffffd, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x24008001) (async) r8 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f00000014c0)={0x0, 0x5000, 0xfb7f0000, r8}) 1.347156649s ago: executing program 1 (id=4215): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x35, &(0x7f0000000240)='uR\x83+Du\xbbK/\xf8\x00~L\x9a\xf9\xc0hO\xa2\x8a\xf02\xdf\xfe\t\x1f9j\xc2aa\x7f)\xdb\xfd\xd5\xec\x9b\xd0\xf3$C\xd3\xe4s\xb1&\x04\x8f8\ts\xcf'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x8, 0xe, 0x200, 0x80, 0x0, 0x4, 0x9, 0x41, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0x10, 0x2, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220", @ANYRES32=r1], 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000540)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0xffffffffffffff2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4016020000000e98b99ddca0233d423034e63eeab1209e480298f6794b"], 0x0, 0x0, 0x0, 0x0}) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x341100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r8, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x3b) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom1\x00', 0x0, 0x0) 654.744861ms ago: executing program 5 (id=4176): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x2cf680) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e1f, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000240), 0x4) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x0, 0x0, 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e23, 0x81, @empty, 0x80000000}}}, 0x90) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x101) socket$inet6(0xa, 0x2, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) 386.881293ms ago: executing program 4 (id=4216): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x7}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000680)={0x9, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b324c078b089b34313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd736d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25987969a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e89198f595dc4d470e01002a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d0db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x40}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x8082, r7}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x9) recvmmsg(r3, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x7}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) dup(r5) (async) write$UHID_INPUT(r6, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x40}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) (async) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x8082, r7}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x9) (async) recvmmsg(r3, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) 0s ago: executing program 4 (id=4217): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @mark={0xc}]}, 0x48}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r3, 0x100000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r6 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsmount(r6, 0x0, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x4, 0x6, 0x800002, 0x0, 0xffffffff, 0x40}) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000300)='\x00\x00\x16\x00', &(0x7f0000000340)='^', 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): 1 has 1 interface, different from the descriptor's value: 66 [ 1041.324571][ T6519] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.409242][ T6519] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1041.429035][ T6519] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1041.454967][ T6519] usb 4-1: Product: syz [ 1041.479833][T22395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.488484][ T6519] usb 4-1: Manufacturer: syz [ 1041.545257][ T6519] cdc_wdm 4-1:1.0: skipping garbage [ 1041.550793][T22395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.562433][ T6519] cdc_wdm 4-1:1.0: skipping garbage [ 1041.580630][T22395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.594344][ T6519] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1041.625394][T22400] __nla_validate_parse: 2 callbacks suppressed [ 1041.625416][T22400] netlink: 63 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1041.661803][T22395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.682825][T22395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3765'. [ 1041.704980][ T6519] usb 5-1: USB disconnect, device number 72 [ 1041.728570][ T5916] usb 4-1: USB disconnect, device number 10 [ 1041.752372][T22400] netlink: 752 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1042.369695][T22427] netlink: 'syz.4.3776': attribute type 10 has an invalid length. [ 1042.387010][T22427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.400311][T22427] bond0: (slave team0): Enslaving as an active interface with an up link [ 1042.494351][ T6519] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1042.876268][ T6519] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1042.894854][ T6519] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1042.904985][T21776] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1042.910081][ T6519] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1043.260293][ T6519] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1043.269985][ T6519] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1043.284016][ T6519] usb 3-1: Product: syz [ 1043.294669][ T6519] usb 3-1: Manufacturer: syz [ 1043.299593][ T6519] usb 3-1: SerialNumber: syz [ 1043.367074][ T6519] usb 3-1: config 0 descriptor?? [ 1043.374348][T19537] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1043.393509][ T6519] hub 3-1:0.0: bad descriptor, ignoring hub [ 1043.423582][ T6519] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1043.437116][ T6519] usb 3-1: selecting invalid altsetting 0 [ 1043.555157][T19537] usb 2-1: Using ep0 maxpacket: 16 [ 1043.656942][T19537] usb 2-1: config 0 has no interfaces? [ 1043.689421][T19537] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1043.719773][T19537] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1043.765108][T19537] usb 2-1: Manufacturer: syz [ 1043.775263][ T10] usb 3-1: USB disconnect, device number 4 [ 1043.831752][T19537] usb 2-1: config 0 descriptor?? [ 1043.994028][T22458] FAULT_INJECTION: forcing a failure. [ 1043.994028][T22458] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.087894][T22459] loop6: detected capacity change from 0 to 524288000 [ 1044.335159][T22458] CPU: 0 UID: 0 PID: 22458 Comm: syz.4.3783 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.335185][T22458] Tainted: [L]=SOFTLOCKUP [ 1044.335191][T22458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1044.335202][T22458] Call Trace: [ 1044.335209][T22458] [ 1044.335216][T22458] dump_stack_lvl+0x189/0x250 [ 1044.335242][T22458] ? __pfx____ratelimit+0x10/0x10 [ 1044.335262][T22458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.335282][T22458] ? __pfx__printk+0x10/0x10 [ 1044.335307][T22458] ? __pfx___might_resched+0x10/0x10 [ 1044.335324][T22458] ? fs_reclaim_acquire+0x7d/0x100 [ 1044.335346][T22458] should_fail_ex+0x414/0x560 [ 1044.335370][T22458] should_failslab+0xa8/0x100 [ 1044.335401][T22458] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1044.335437][T22458] ? __alloc_skb+0x255/0x430 [ 1044.335462][T22458] ? napi_skb_cache_get+0x4a5/0x780 [ 1044.335482][T22458] ? napi_skb_cache_get+0x151/0x780 [ 1044.335506][T22458] __alloc_skb+0x255/0x430 [ 1044.335529][T22458] ? __pfx___alloc_skb+0x10/0x10 [ 1044.335552][T22458] ? netlink_autobind+0xdb/0x300 [ 1044.335567][T22458] ? netlink_autobind+0x2c2/0x300 [ 1044.335586][T22458] netlink_sendmsg+0x5c6/0xb30 [ 1044.335608][T22458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.335627][T22458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1044.335643][T22458] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1044.335665][T22458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.335681][T22458] __sock_sendmsg+0x21c/0x270 [ 1044.335701][T22458] ____sys_sendmsg+0x505/0x820 [ 1044.335729][T22458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1044.335759][T22458] ? import_iovec+0x74/0xa0 [ 1044.335786][T22458] ___sys_sendmsg+0x21f/0x2a0 [ 1044.335812][T22458] ? __pfx____sys_sendmsg+0x10/0x10 [ 1044.335840][T22458] ? rcu_read_lock_any_held+0xb3/0x120 [ 1044.335879][T22458] ? __fget_files+0x2a/0x420 [ 1044.335899][T22458] ? __fget_files+0x3a0/0x420 [ 1044.335926][T22458] __x64_sys_sendmsg+0x19b/0x260 [ 1044.335952][T22458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1044.335983][T22458] ? __pfx_ksys_write+0x10/0x10 [ 1044.336001][T22458] ? do_syscall_64+0xbe/0xf80 [ 1044.336025][T22458] do_syscall_64+0xfa/0xf80 [ 1044.336045][T22458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.336060][T22458] ? clear_bhb_loop+0x60/0xb0 [ 1044.336078][T22458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.336093][T22458] RIP: 0033:0x7f22cab8f749 [ 1044.336107][T22458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.336121][T22458] RSP: 002b:00007f22cb9c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1044.336137][T22458] RAX: ffffffffffffffda RBX: 00007f22cade5fa0 RCX: 00007f22cab8f749 [ 1044.336149][T22458] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1044.336159][T22458] RBP: 00007f22cb9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.336168][T22458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.336178][T22458] R13: 00007f22cade6038 R14: 00007f22cade5fa0 R15: 00007f22caf0fa28 [ 1044.336201][T22458] [ 1044.764977][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1045.101016][ T10] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1045.109482][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1045.256775][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1045.270403][ T10] usb 3-1: string descriptor 0 read error: -71 [ 1045.282324][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1045.292433][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1045.308265][ T10] usb 3-1: config 0 descriptor?? [ 1045.313992][ T10] usb 3-1: can't set config #0, error -71 [ 1045.323812][ T10] usb 3-1: USB disconnect, device number 5 [ 1045.745070][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1045.908992][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.963504][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1045.990682][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1046.041157][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1046.070793][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.098295][T22466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1046.123574][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 1046.150234][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1046.173788][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1046.204885][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1046.260709][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1046.273528][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 1046.338944][T22466] input: syz1 as /devices/virtual/input/input113 [ 1046.358175][T21776] usb 2-1: USB disconnect, device number 104 [ 1046.969048][T22466] usb 3-1: reset full-speed USB device number 6 using dummy_hcd [ 1047.170504][T22471] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1047.189157][T22483] kvm: MWAIT instruction emulated as NOP! [ 1047.350831][ C1] wdm_int_callback: 8959 callbacks suppressed [ 1047.350866][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1047.363622][ C1] wdm_int_callback: 8959 callbacks suppressed [ 1047.363649][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1047.375888][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1048.065868][T21627] usb 3-1: USB disconnect, device number 6 [ 1048.094972][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1048.144473][T21776] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1048.266833][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1048.275634][T21776] usb 5-1: device descriptor read/64, error -71 [ 1048.284148][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1048.307039][ T10] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 1048.324871][ T10] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1048.344619][ T10] usb 4-1: config 17 has no interface number 0 [ 1048.350896][ T10] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1048.382411][ T10] usb 4-1: config 17 interface 8 has no altsetting 0 [ 1048.414109][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1048.443619][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.462679][ T10] usb 4-1: Product: syz [ 1048.467939][ T10] usb 4-1: Manufacturer: syz [ 1048.472575][ T10] usb 4-1: SerialNumber: syz [ 1048.515046][T21776] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1048.633539][T22499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3795'. [ 1048.644932][T21776] usb 5-1: device descriptor read/64, error -71 [ 1048.783322][T21776] usb usb5-port1: attempt power cycle [ 1048.939448][ T10] usb 4-1: selecting invalid altsetting 0 [ 1048.957256][ T10] usb 4-1: 8:6 : no UAC_FORMAT_TYPE desc [ 1048.985678][ T10] usb 4-1: selecting invalid altsetting 0 [ 1049.024139][ T10] usb 4-1: USB disconnect, device number 11 [ 1049.059560][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.224313][T19537] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1049.265033][T21776] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1049.285129][T21776] usb 5-1: device descriptor read/8, error -71 [ 1049.377917][T19537] usb 3-1: Using ep0 maxpacket: 8 [ 1049.386208][T19537] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1049.399934][T19537] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1049.448557][T19537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1049.486804][T19537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1049.518210][T19537] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1049.534749][T21776] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1049.555011][T19537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.573757][T21776] usb 5-1: device descriptor read/8, error -71 [ 1049.580919][T19537] usb 3-1: Product: syz [ 1049.597794][T19537] usb 3-1: Manufacturer: syz [ 1049.626969][T19537] usb 3-1: SerialNumber: syz [ 1049.663002][T19537] usb 3-1: config 0 descriptor?? [ 1049.687123][T19537] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 1049.695661][T21776] usb usb5-port1: unable to enumerate USB device [ 1050.235040][ T6519] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1050.398830][ T5894] usb 3-1: USB disconnect, device number 7 [ 1050.436497][ T6519] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1050.461238][ T6519] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.493451][ T6519] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1050.522527][ T6519] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1050.542896][ T6519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.583208][ T6519] usb 2-1: config 0 descriptor?? [ 1050.889873][ T30] audit: type=1326 audit(1765279560.482:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1050.962633][T22529] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 1051.032183][T22529] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 1051.044974][ T30] audit: type=1326 audit(1765279560.512:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.095351][ T30] audit: type=1326 audit(1765279560.512:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.138510][ T30] audit: type=1326 audit(1765279560.512:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.163237][ T30] audit: type=1326 audit(1765279560.512:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.187300][ T30] audit: type=1326 audit(1765279560.532:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.227059][ T30] audit: type=1326 audit(1765279560.532:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.255879][ T30] audit: type=1326 audit(1765279560.532:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.350826][ T30] audit: type=1326 audit(1765279560.532:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.355578][T22547] netlink: 182 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1051.403622][ T30] audit: type=1326 audit(1765279560.672:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.3802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609218f749 code=0x7ffc0000 [ 1051.559239][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1051.909554][ T6519] usbhid 2-1:0.0: can't add hid device: -71 [ 1051.920993][ T6519] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1052.005638][ T6519] usb 2-1: USB disconnect, device number 105 [ 1052.127372][T22561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1052.351761][T22565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1053.247747][T22577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3813'. [ 1053.694423][ T6519] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1053.874364][ T6519] usb 2-1: Using ep0 maxpacket: 16 [ 1053.881581][ T6519] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1053.976444][ T6519] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1054.067099][ T6519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.092171][ T6519] usb 2-1: Product: syz [ 1054.163205][ T6519] usb 2-1: Manufacturer: syz [ 1054.199409][ T6519] usb 2-1: SerialNumber: syz [ 1054.225000][ T6519] usb 2-1: config 0 descriptor?? [ 1054.265529][ T6519] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1054.295564][ T6519] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1054.326111][T22596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3819'. [ 1054.452150][T22602] pim6reg: entered allmulticast mode [ 1054.679823][T22608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1054.746213][T22611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3826'. [ 1054.843096][ T6519] em28xx 2-1:0.0: chip ID is em2874 [ 1054.864419][ T5864] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1054.886648][T22618] binder: 22616:22618 unknown command 1077961494 [ 1054.893219][T22618] binder: 22616:22618 ioctl c0306201 200000000100 returned -22 [ 1055.046672][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 1055.056182][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1055.077843][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1055.119850][ T5864] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1055.132485][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.146360][ T5864] usb 5-1: Product: syz [ 1055.151755][ T5864] usb 5-1: Manufacturer: syz [ 1055.157150][ T5864] usb 5-1: SerialNumber: syz [ 1055.179620][ T5864] usb 5-1: config 0 descriptor?? [ 1055.218993][ T5864] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1055.230103][ T5864] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1055.450873][T22587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.466823][T22587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.505634][ T6519] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1055.516314][ T6519] em28xx 2-1:0.0: board has no eeprom [ 1055.669383][T22624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3829'. [ 1055.683163][T22624] misc userio: Begin command sent, but we're already running [ 1055.692274][T22624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3829'. [ 1055.746984][T22624] bridge1: port 1(erspan0) entered blocking state [ 1055.756112][T22624] bridge1: port 1(erspan0) entered disabled state [ 1055.762807][T22624] erspan0: entered allmulticast mode [ 1055.787603][T22624] erspan0: entered promiscuous mode [ 1055.804441][ T6519] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1055.811684][T22625] vlan2: entered allmulticast mode [ 1055.821102][ T5864] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1055.833908][ T6519] em28xx 2-1:0.0: dvb set to bulk mode. [ 1055.850544][T19800] em28xx 2-1:0.0: Binding DVB extension [ 1055.860830][ T5864] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1055.882506][ T6519] usb 2-1: USB disconnect, device number 106 [ 1055.923817][ T6519] em28xx 2-1:0.0: Disconnecting em28xx [ 1055.974505][T19800] em28xx 2-1:0.0: Registering input extension [ 1056.084371][T19800] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1056.091239][T19800] Registered IR keymap rc-empty [ 1056.100076][ T5864] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1056.107791][T19800] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1056.119842][ T5864] em28xx 5-1:0.0: No AC97 audio processor [ 1056.130637][T19800] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input114 [ 1056.145720][T19800] em28xx 2-1:0.0: Input extension successfully initialized [ 1056.158965][ T6519] em28xx 2-1:0.0: Closing input extension [ 1056.205304][ T6519] em28xx 2-1:0.0: Freeing device [ 1056.273659][T22635] ALSA: mixer_oss: invalid OSS volume 'CDĶ’' [ 1056.311586][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3832'. [ 1056.364837][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1056.578740][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1056.800516][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1056.824049][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1056.838706][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1056.849472][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.858123][ T10] usb 3-1: Product: syz [ 1056.862518][ T10] usb 3-1: Manufacturer: syz [ 1056.867591][ T10] usb 3-1: SerialNumber: syz [ 1056.877914][ T10] usb 3-1: config 0 descriptor?? [ 1057.197938][ T5894] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1057.383810][ T5894] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1057.459471][ T5894] usb 4-1: config 1 has no interface number 0 [ 1057.487757][ T5894] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1057.498756][ T5894] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1057.541136][ T5894] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1057.551049][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.560560][ T5894] usb 4-1: Product: syz [ 1057.567294][ T5894] usb 4-1: Manufacturer: syz [ 1057.575746][ T5894] usb 4-1: SerialNumber: syz [ 1057.870510][ T5894] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 1057.884628][ T5864] usb 5-1: USB disconnect, device number 78 [ 1057.907614][ T5864] em28xx 5-1:0.0: Disconnecting em28xx [ 1057.945725][ T5864] em28xx 5-1:0.0: Freeing device [ 1058.065454][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.077002][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.146198][ T5894] usb 4-1: USB disconnect, device number 12 [ 1059.127803][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1059.127823][ T30] audit: type=1326 audit(1765279568.702:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1059.242016][ T30] audit: type=1326 audit(1765279568.702:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1059.378309][ T30] audit: type=1326 audit(1765279568.712:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1059.670789][ T30] audit: type=1326 audit(1765279568.712:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1059.704372][ T5864] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1059.793701][ T30] audit: type=1326 audit(1765279568.722:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1059.919360][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.964519][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.977963][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1060.042962][ T5864] usb 4-1: not running at top speed; connect to a high speed hub [ 1060.131790][ T30] audit: type=1326 audit(1765279568.722:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1060.203391][ T30] audit: type=1326 audit(1765279568.722:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1060.347605][ T5864] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1060.381389][ T5864] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1060.402393][ T5864] usb 4-1: config 1 has no interface number 1 [ 1060.426721][ T5864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1060.436091][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.444156][ T5864] usb 4-1: Product: syz [ 1060.464262][ T5864] usb 4-1: Manufacturer: syz [ 1060.486300][ T5864] usb 4-1: SerialNumber: syz [ 1060.521518][ T30] audit: type=1326 audit(1765279568.722:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1060.616219][ T30] audit: type=1326 audit(1765279568.722:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1060.760872][ T30] audit: type=1326 audit(1765279568.722:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.3.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe34158f749 code=0x7ffc0000 [ 1062.693377][T19800] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1062.917953][T19800] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 1063.526808][T19800] usb 2-1: config 0 has no interface number 0 [ 1063.533003][T19800] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1063.599707][T19800] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1063.657527][ T5864] usb 4-1: 2:1 : unsupported format bits 0x80 [ 1063.684333][T19800] usb 2-1: config 0 interface 48 has no altsetting 0 [ 1063.715103][ T5894] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1063.751405][T19800] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1063.772460][ T5864] usb 4-1: USB disconnect, device number 13 [ 1063.800574][T19800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.845021][T19800] usb 2-1: Product: syz [ 1063.849256][T19800] usb 2-1: Manufacturer: syz [ 1063.856190][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1063.884351][T19800] usb 2-1: SerialNumber: syz [ 1063.892048][T19800] usb 2-1: config 0 descriptor?? [ 1063.904557][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 1063.941586][ T5894] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1063.965308][ T5894] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1064.010285][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.055231][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1064.105277][ T5894] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1064.124394][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.142943][ T5894] usb 5-1: Product: syz [ 1064.173536][ T5894] usb 5-1: Manufacturer: syz [ 1064.200916][ T5894] usb 5-1: SerialNumber: syz [ 1064.244092][ T5894] usb 5-1: config 0 descriptor?? [ 1064.277102][ T5894] hub 5-1:0.0: bad descriptor, ignoring hub [ 1064.298710][ T5894] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1064.402493][T19800] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1064.431345][T19800] sonixb 2-1:0.48: Error reading register 00: -71 [ 1064.453544][T19800] usb 2-1: USB disconnect, device number 107 [ 1065.157440][T21776] usb 5-1: USB disconnect, device number 79 [ 1065.288093][T22710] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3853'. [ 1065.562427][T22717] netlink: 'syz.1.3855': attribute type 5 has an invalid length. [ 1065.583728][T22717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3855'. [ 1065.866151][T22721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3856'. [ 1066.089018][T22726] netlink: 'syz.1.3857': attribute type 11 has an invalid length. [ 1067.597613][ T10] iguanair 3-1:0.0: failed to get version [ 1067.614496][ T10] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 1067.665827][ T10] usb 3-1: USB disconnect, device number 8 [ 1067.840408][T22739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3861'. [ 1067.904833][T22739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3861'. [ 1068.027600][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1068.224957][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1068.232267][ T10] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1068.255320][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.293009][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1068.316115][T22754] program syz.0.3867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1068.392343][ T10] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1068.415741][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.423846][ T10] usb 3-1: Product: syz [ 1068.424343][T19537] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1068.437073][ T10] usb 3-1: config 0 descriptor?? [ 1068.467511][ T10] usb 3-1: can't set config #0, error -71 [ 1068.490051][ T10] usb 3-1: USB disconnect, device number 9 [ 1068.571419][T22765] binder: 22762:22765 ioctl 40044591 0 returned -22 [ 1068.596799][T19537] usb 2-1: device descriptor read/64, error -71 [ 1068.639994][T22764] binder: 22762:22764 ioctl c0306201 200000000040 returned -14 [ 1068.854391][T19537] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1068.865041][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1069.034306][T19537] usb 2-1: device descriptor read/64, error -71 [ 1069.088246][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1069.103118][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.125112][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1069.174046][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.185403][ T10] usb 5-1: config 0 descriptor?? [ 1069.196373][T19537] usb usb2-port1: attempt power cycle [ 1069.202715][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1069.584613][T19537] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1069.609856][T19537] usb 2-1: device descriptor read/8, error -71 [ 1069.886262][T19537] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1069.915345][T19537] usb 2-1: device descriptor read/8, error -71 [ 1070.035016][T19537] usb usb2-port1: unable to enumerate USB device [ 1070.696399][T22760] bridge2: entered promiscuous mode [ 1070.709825][T19800] usb 5-1: USB disconnect, device number 80 [ 1070.944241][T22802] input: syz1 as /devices/virtual/input/input116 [ 1071.121541][T22802] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3879'. [ 1071.210321][T22809] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1071.356892][T22815] x_tables: duplicate underflow at hook 1 [ 1071.646479][T22825] netlink: 'syz.3.3886': attribute type 1 has an invalid length. [ 1071.719711][T22827] usb usb8: usbfs: process 22827 (syz.3.3886) did not claim interface 0 before use [ 1071.856016][T22825] bond1: entered promiscuous mode [ 1071.875666][T22825] bond1: entered allmulticast mode [ 1071.913143][T22825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1071.920223][ T5864] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1072.099031][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1072.119961][ T5864] usb 5-1: not running at top speed; connect to a high speed hub [ 1072.147297][ T5864] usb 5-1: config 9 has an invalid interface number: 207 but max is 0 [ 1072.164392][ T5864] usb 5-1: config 9 has no interface number 0 [ 1072.171253][ T5864] usb 5-1: config 9 interface 207 has no altsetting 0 [ 1072.176566][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1072.200842][ T5864] usb 5-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 1072.210610][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.219381][ T5864] usb 5-1: Product: syz [ 1072.280493][ T5864] usb 5-1: Manufacturer: syz [ 1072.286330][ T5864] usb 5-1: SerialNumber: syz [ 1072.749089][ T5864] usb 5-1: USB disconnect, device number 81 [ 1073.326309][T22854] netlink: get zone limit has 4 unknown bytes [ 1073.885026][ T5894] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1074.058370][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 1074.087755][ T5894] usb 4-1: config 3 has an invalid interface number: 155 but max is 0 [ 1074.105026][ T5894] usb 4-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 1074.126289][ T5894] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.160855][ T5894] usb 4-1: config 3 has no interface number 0 [ 1074.180451][ T5894] usb 4-1: config 3 interface 155 has no altsetting 0 [ 1074.213104][ T5894] usb 4-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 1074.243987][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.275613][ T5894] usb 4-1: Product: syz [ 1074.279842][ T5894] usb 4-1: Manufacturer: syz [ 1074.305092][ T5894] usb 4-1: SerialNumber: syz [ 1074.557130][ T5894] uvcvideo 4-1:3.155: probe with driver uvcvideo failed with error -22 [ 1074.577907][ T5894] usb 4-1: USB disconnect, device number 15 [ 1075.075126][T22868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1075.154267][ T5864] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1075.337868][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1075.358296][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.379343][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1075.530684][ T5864] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1075.554858][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.572905][ T5864] usb 2-1: config 0 descriptor?? [ 1076.071254][ T5864] ntrig 0003:1B96:0009.0046: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.1-1/input0 [ 1076.459560][ T5864] usb 2-1: USB disconnect, device number 113 [ 1076.469046][T22886] loop9: detected capacity change from 0 to 7 [ 1076.488760][T22886] Dev loop9: unable to read RDB block 7 [ 1076.530248][T22886] loop9: unable to read partition table [ 1076.530404][T22882] fido_id[22882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1076.618979][T22886] loop9: partition table beyond EOD, truncated [ 1076.664696][T22886] loop_reread_partitions: partition scan of loop9 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1076.675372][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3906'. [ 1076.698605][T22888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.883557][T22888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.984332][T19800] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1077.090670][T22898] input: syz1 as /devices/virtual/input/input117 [ 1077.154657][T19800] usb 4-1: Using ep0 maxpacket: 32 [ 1077.182504][T19800] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1077.207054][T19800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.245692][T19800] usb 4-1: config 0 descriptor?? [ 1077.281069][T19800] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1077.434615][ T5864] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1077.487437][T22890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.629469][T22890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.917734][T19800] gspca_sunplus: reg_w_riv err -110 [ 1077.923052][T19800] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1078.386416][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1078.911993][ T5864] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1078.973663][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.073460][ T5864] usb 5-1: config 0 descriptor?? [ 1079.221117][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 1079.527764][ T5864] aquacomputer_d5next 0003:0C70:F00B.0047: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.4-1/input0 [ 1079.721151][T22900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.738156][T22900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.791573][ T5864] usb 5-1: USB disconnect, device number 82 [ 1079.876999][T22919] fido_id[22919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1080.741715][ T5864] usb 4-1: USB disconnect, device number 16 [ 1081.240473][T22936] loop9: detected capacity change from 0 to 7 [ 1081.250523][T22936] Dev loop9: unable to read RDB block 7 [ 1081.265812][T22936] loop9: unable to read partition table [ 1081.416735][T22936] loop9: partition table beyond EOD, truncated [ 1081.478546][T22936] loop_reread_partitions: partition scan of loop9 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1081.864298][ T5864] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1082.054297][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 1082.068198][ T5864] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1082.093595][ T5864] usb 5-1: config 0 has no interface number 0 [ 1082.125691][ T5864] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1082.232107][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3920'. [ 1082.251947][T22943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3920'. [ 1082.296826][ T5864] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1082.331374][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.360647][ T5864] usb 5-1: Product: syz [ 1082.370918][ T5864] usb 5-1: Manufacturer: syz [ 1082.381777][ T5864] usb 5-1: SerialNumber: syz [ 1082.403817][ T5864] usb 5-1: config 0 descriptor?? [ 1082.460642][ T5864] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1082.483105][ T5864] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1082.661127][ T5864] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1082.691518][ T5864] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 1082.722242][ T5864] usb 5-1: USB disconnect, device number 83 [ 1084.413313][T22970] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1084.492545][T22972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1084.511339][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1085.394294][ T5864] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1085.497896][T22984] netlink: 'syz.1.3931': attribute type 10 has an invalid length. [ 1085.534860][T22984] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1085.564251][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 1085.574309][ T5864] usb 3-1: config 0 has no interfaces? [ 1085.582364][ T5864] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1085.592730][ T5864] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1085.684497][ T5864] usb 3-1: Manufacturer: syz [ 1085.727810][ T5864] usb 3-1: config 0 descriptor?? [ 1086.164738][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1086.429444][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1086.449907][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1086.469704][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1086.515511][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1086.547375][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1086.559884][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1086.612724][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1086.641922][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.772762][T22998] veth1_to_bond: entered allmulticast mode [ 1086.786376][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3934'. [ 1087.000487][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 1087.006619][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1087.144328][ T5864] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1087.184257][T19537] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1087.209430][T22989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.221616][T22989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.262087][ T10] usb 2-1: USB disconnect, device number 114 [ 1087.274426][ T5864] usb 4-1: device descriptor read/64, error -71 [ 1087.349887][T19537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.362470][T19537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.384026][T19537] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1087.402119][T19537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.430313][T19537] usb 5-1: config 0 descriptor?? [ 1087.524450][ T5864] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1087.654353][ T5864] usb 4-1: device descriptor read/64, error -71 [ 1087.930762][ T5864] usb usb4-port1: attempt power cycle [ 1088.026446][T19537] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 1088.039492][T19537] cp2112 0003:10C4:EA90.0048: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1088.108000][T19537] cp2112 0003:10C4:EA90.0048: Part Number: 0x82 Device Version: 0xFE [ 1088.294101][ T10] usb 3-1: USB disconnect, device number 10 [ 1088.394341][ T5864] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1088.414988][ T5864] usb 4-1: device descriptor read/8, error -71 [ 1088.475156][ T5894] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1088.647240][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 1088.678710][ T5894] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 1088.684580][ T5864] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1088.693126][ T5894] usb 2-1: config 6 has no interface number 0 [ 1088.725040][ T5894] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1088.725897][T23004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.745300][ T5864] usb 4-1: device descriptor read/8, error -71 [ 1088.752160][T23004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.755520][ T5894] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1088.844956][ T5894] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1088.873544][ T5864] usb usb4-port1: unable to enumerate USB device [ 1088.897726][ T5894] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1088.942604][ T5894] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1088.953122][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.978659][ T5894] usb 2-1: Product: syz [ 1088.983034][ T5894] usb 2-1: Manufacturer: syz [ 1088.992994][ T5894] usb 2-1: SerialNumber: syz [ 1089.056077][ T5894] hso 2-1:6.2: Failed to find BULK IN ep [ 1089.281859][T19537] cp2112 0003:10C4:EA90.0048: error reading lock byte: -71 [ 1089.314137][T19537] usb 5-1: USB disconnect, device number 84 [ 1089.724645][T22998] veth1_to_bond: left allmulticast mode [ 1089.934760][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1090.098312][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1090.108662][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1090.125432][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.136846][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.150502][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1090.161454][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.186292][ T10] usb 3-1: Product: ģ®³ē¾’ęæ„ģ†ˆé•£ē»šźžļ·±ę€„å„˜ģ«„ź°čƒćŗ­ć… āŠ¦ā’™ćž£ē²·åˆ²č§”å§›å„¶ė«“ļƒ®ć‡•ß‚ļ¢“ä„ęŽä¾Ÿėž«ī•‰ę†½ēŗ¾ą®ä‹…å¾µģ²ƒŚ»ā Šč…ä¹”ć¼ˆå†žź„¾é»¬īš¤ėø¦äŖŖī‹ÆģÆ§ģˆ·ģƒą±’ļ² å¹²ėŒ§é”®ē€”ī£±ć“Šéŗ£ä¦žī†ėŽļ™™Ķ’ą„Šė›³ķŽøč‰”ć”“č”¹ė¢„čé›•ć˜®ź¢”ć–ē”ē…ˆģ˜ą„Øė¶”éŽį‰•å°œć„‰į£®ąŗå—¼ć·¬åˆ§ģ—æé‹äŖ ć¦½ļ““å¦”Ū‘ā”· [ 1090.238279][ T10] usb 3-1: Manufacturer: ą ‰ [ 1090.246939][ T10] usb 3-1: SerialNumber: Š [ 1090.295782][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3946'. [ 1090.305018][ T5894] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1090.491584][ T5894] usb 5-1: not running at top speed; connect to a high speed hub [ 1090.502843][ T5894] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1090.515823][ T10] usb 3-1: 0:2 : does not exist [ 1090.542951][ T5894] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1090.562346][ T10] usb 3-1: USB disconnect, device number 11 [ 1090.570512][ T5894] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1090.592620][ T5894] usb 5-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.40 [ 1090.603365][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.613055][ T5894] usb 5-1: Manufacturer: ą “ [ 1090.620217][ T5894] usb 5-1: SerialNumber: ć–Æļ±•ēØ‰ė»½ė˜ć…¾ę€¼é…‡å¹¬ę–ģ“±ėšę«§źˆī€»ļƒį³čœ„ę˜”ē±ė™šą£“é…œķƒ™ć½ē±™ļ¦¼ģ“¼ī¹‹ć¢æė£·ę¾žī·„ļ‡Æļ·Ŗė»½åÆšć¬½č¹¹ā”ƒķ”°ģ›Šģ§›å®±ē–„ä©Œé¾īŠ»å³„ķ˜§ä˜Æļ­•ą®é„€äŒćŠ€ä­¶å”ė„¢Ź“ķ—·ā«ė˜ØāØØć—Ę»ģŗŖē¤æā“™ā’®é¦žćžÆé¹Ÿ [ 1090.657606][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1090.664158][T23035] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1090.759480][T23039] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 1091.004994][ T5864] usb 2-1: USB disconnect, device number 115 [ 1091.111914][ T5894] usbhid 5-1:1.0: can't add hid device: -71 [ 1091.160311][ T5894] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1091.238604][ T5894] usb 5-1: USB disconnect, device number 85 [ 1091.732187][ T30] audit: type=1326 audit(1765279601.322:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1091.786493][ T30] audit: type=1326 audit(1765279601.352:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1091.845397][ T30] audit: type=1326 audit(1765279601.432:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1091.884541][ T30] audit: type=1326 audit(1765279601.442:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1091.955171][ T30] audit: type=1326 audit(1765279601.442:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1091.983559][ T30] audit: type=1326 audit(1765279601.442:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1092.011369][ T30] audit: type=1326 audit(1765279601.442:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1092.039825][ T30] audit: type=1326 audit(1765279601.442:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1092.075057][ T30] audit: type=1326 audit(1765279601.442:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1092.103463][ T30] audit: type=1326 audit(1765279601.442:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23054 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1092.227592][ T5864] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1092.396791][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 1092.418189][ T5864] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1092.436790][ T5864] usb 3-1: config 0 has no interface number 0 [ 1092.454899][ T5864] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1092.477835][ T5864] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1092.491090][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.511213][ T5864] usb 3-1: Product: syz [ 1092.515630][ T5864] usb 3-1: Manufacturer: syz [ 1092.520328][ T5864] usb 3-1: SerialNumber: syz [ 1092.609289][ T5864] usb 3-1: config 0 descriptor?? [ 1092.639134][ T5864] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1092.653536][ T5864] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1092.744921][ T5894] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1092.838107][T23062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.859838][T23062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.871283][ T5864] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1092.885521][ T5864] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 1092.895327][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 1092.902661][ T5894] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1092.912471][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.947681][ T5894] usb 5-1: config 0 descriptor?? [ 1092.962922][ T5894] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1093.064290][ T5864] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1093.077340][T23062] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1093.090942][T23062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.143155][T23062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.152715][T23062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.234290][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 1093.242581][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.258260][ T5864] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1093.313903][ T5864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.394778][ T5894] gspca_sonixj: reg_r err -32 [ 1093.397580][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1093.404355][ T5894] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 1093.427392][ T5894] usb 5-1: USB disconnect, device number 86 [ 1093.442048][ T5864] usb 4-1: SerialNumber: syz [ 1093.455332][ T5864] hub 4-1:1.0: bad descriptor, ignoring hub [ 1093.467438][ T5864] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1093.485742][ T5864] cdc_ether 4-1:1.0: skipping garbage [ 1093.606373][ T5864] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1093.676044][T23091] sctp: [Deprecated]: syz.3.3961 (pid 23091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1093.676044][T23091] Use struct sctp_sack_info instead [ 1094.255135][ T5864] usb 4-1: USB disconnect, device number 21 [ 1094.614291][ T5864] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1094.856268][ T5864] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1094.865114][ T5864] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1094.891013][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1094.908945][ T5864] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1094.916363][T23118] fuse: Unknown parameter 'grd' [ 1094.919728][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1094.931465][T23118] Cannot find del_set index 286 as target [ 1094.949715][ T5864] usb 2-1: Product: syz [ 1094.981010][ T5864] usb 2-1: Manufacturer: syz [ 1094.999299][ T5864] usb 2-1: SerialNumber: syz [ 1095.024451][ T5864] usb 2-1: config 0 descriptor?? [ 1095.060226][ T5864] hub 2-1:0.0: bad descriptor, ignoring hub [ 1095.073081][ T5864] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1095.103693][ T5916] usb 3-1: USB disconnect, device number 12 [ 1095.122287][ T5864] usb 2-1: selecting invalid altsetting 0 [ 1095.368460][T23125] input: syz1 as /devices/virtual/input/input118 [ 1095.484956][ T5916] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1095.666894][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.684675][ T796] usb 2-1: USB disconnect, device number 116 [ 1095.689316][ T5916] usb 4-1: config 0 has no interfaces? [ 1095.698769][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1095.699767][T23133] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 1095.708987][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1095.718785][ T5864] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1095.729209][ T5916] usb 4-1: SerialNumber: syz [ 1095.776929][ T5916] usb 4-1: config 0 descriptor?? [ 1095.787818][T23135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3976'. [ 1095.841311][T23138] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1095.850757][T23135] binder: 23134:23135 unknown command 0 [ 1095.908101][T23140] binder: 23134:23140 ioctl c0306201 2000000003c0 returned -14 [ 1095.915645][T23135] binder: 23134:23135 ioctl c0306201 200000000080 returned -22 [ 1095.915935][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 1095.930862][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1095.947593][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1095.962584][T23135] xt_recent: Unsupported userspace flags (000000de) [ 1095.974514][ T5864] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1095.984663][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.024289][ T5864] usb 3-1: Product: syz [ 1096.028840][ T5864] usb 3-1: Manufacturer: syz [ 1096.033474][ T5864] usb 3-1: SerialNumber: syz [ 1096.046413][ T5864] usb 3-1: config 0 descriptor?? [ 1096.061589][ T5864] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1096.072037][ T5864] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1096.095518][ T796] usb 4-1: USB disconnect, device number 22 [ 1096.543092][T23154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'. [ 1096.670558][ T5864] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1096.686414][ T5864] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1096.774429][ T6519] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1096.976821][ T6519] usb 5-1: Using ep0 maxpacket: 16 [ 1097.128414][ T6519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.141257][ T6519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.155646][ T6519] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1097.172760][T23176] input: syz1 as /devices/virtual/input/input119 [ 1097.196644][ T6519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.293098][ T5881] udevd[5881]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 1097.310626][ T6519] usb 5-1: config 0 descriptor?? [ 1097.344988][ T5864] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 1097.358733][ T5864] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1097.377582][ T5881] udevd[5881]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1097.528142][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1097.540665][ T6519] usbhid 5-1:0.0: can't add hid device: -71 [ 1097.582873][ T6519] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1097.590879][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1097.639326][T23178] pim6reg: entered allmulticast mode [ 1097.668364][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1097.682815][ T6519] usb 5-1: USB disconnect, device number 87 [ 1097.699855][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1097.965436][ T5864] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1099.042443][ T5864] usb 3-1: USB disconnect, device number 13 [ 1099.259864][T23211] input: syz1 as /devices/virtual/input/input120 [ 1099.378372][ T5894] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1099.795741][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 1099.808898][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1099.932780][ T5894] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 1099.959571][ T5894] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.996086][ T5894] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1100.041750][ T5894] usb 2-1: config 128 has no interface number 0 [ 1100.065362][ T5894] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.091174][ T5894] usb 2-1: config 128 interface 127 has no altsetting 0 [ 1100.115163][ T5894] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1100.126109][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.150244][ T5894] usb 2-1: Product: syz [ 1100.164938][ T5894] usb 2-1: Manufacturer: syz [ 1100.179287][ T5894] usb 2-1: SerialNumber: syz [ 1100.187343][T23222] pim6reg: entered allmulticast mode [ 1100.304760][ T5864] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1100.444380][ T5864] usb 4-1: device descriptor read/64, error -71 [ 1100.454687][T23205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.478456][T23205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.486402][ T6519] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1100.556274][T23229] binder: 23227:23229 ioctl 4610 200000000300 returned -22 [ 1100.577081][ T5894] usb 2-1: USB disconnect, device number 117 [ 1100.634098][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1100.664344][ T6519] usb 3-1: Using ep0 maxpacket: 32 [ 1100.673410][ T6519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1100.706539][ T5864] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1100.714482][ T6519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1100.730900][ T6519] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1100.733848][T23231] loop9: detected capacity change from 0 to 7 [ 1100.740574][ T6519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.740602][ T6519] usb 3-1: Product: syz [ 1100.740627][ T6519] usb 3-1: Manufacturer: syz [ 1100.740645][ T6519] usb 3-1: SerialNumber: syz [ 1100.743895][ T6519] usb 3-1: config 0 descriptor?? [ 1100.777153][ T5881] Dev loop9: unable to read RDB block 7 [ 1100.783280][ T5881] loop9: unable to read partition table [ 1100.791014][ T5881] loop9: partition table beyond EOD, truncated [ 1100.820591][T23231] Dev loop9: unable to read RDB block 7 [ 1100.830005][ T6519] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1100.839843][T23231] loop9: unable to read partition table [ 1100.849143][T23231] loop9: partition table beyond EOD, truncated [ 1100.855825][T23231] loop_reread_partitions: partition scan of loop9 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1100.866046][ T5864] usb 4-1: device descriptor read/64, error -71 [ 1100.975685][ T5864] usb usb4-port1: attempt power cycle [ 1100.989409][ T13] usb 3-1: Failed to submit usb control message: -71 [ 1100.989599][ T6519] usb 3-1: USB disconnect, device number 14 [ 1101.004509][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 1101.017993][ T13] usb 3-1: unable to get target info from device [ 1101.036574][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1101.036594][ T30] audit: type=1326 audit(1765279610.632:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.042064][ T13] usb 3-1: could not get target info (-71) [ 1101.042811][ T30] audit: type=1326 audit(1765279610.632:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.086298][ T13] usb 3-1: could not probe fw (-71) [ 1101.134721][ T30] audit: type=1326 audit(1765279610.632:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.324861][ T30] audit: type=1326 audit(1765279610.632:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.348451][ T30] audit: type=1326 audit(1765279610.632:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.371408][ T5864] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1101.384549][ T30] audit: type=1326 audit(1765279610.632:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.420675][ T5864] usb 4-1: device descriptor read/8, error -71 [ 1101.460540][ T30] audit: type=1326 audit(1765279610.632:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.503924][ T30] audit: type=1326 audit(1765279610.632:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.528933][ T30] audit: type=1326 audit(1765279610.632:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.630820][ T30] audit: type=1326 audit(1765279610.632:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.0.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451d78f749 code=0x7ffc0000 [ 1101.674354][ T5864] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1101.782437][ T5864] usb 4-1: device descriptor read/8, error -71 [ 1101.913335][ T5864] usb usb4-port1: unable to enumerate USB device [ 1101.921266][T23254] input: syz1 as /devices/virtual/input/input121 [ 1102.086241][T23259] fuse: Bad value for 'fd' [ 1102.361559][T23264] netlink: 'syz.3.4011': attribute type 2 has an invalid length. [ 1102.369604][T23262] netlink: 'syz.3.4011': attribute type 2 has an invalid length. [ 1102.710080][T23278] loop9: detected capacity change from 0 to 7 [ 1102.724393][ T5864] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1102.736481][ T6191] Dev loop9: unable to read RDB block 7 [ 1102.742345][ T6191] loop9: unable to read partition table [ 1102.750155][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 1102.760572][ T6191] loop9: partition table beyond EOD, truncated [ 1102.771493][T23278] Dev loop9: unable to read RDB block 7 [ 1102.779469][T23278] loop9: unable to read partition table [ 1102.795411][T23278] loop9: partition table beyond EOD, truncated [ 1102.809877][T23278] loop_reread_partitions: partition scan of loop9 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1102.885260][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 1102.896566][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.929517][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1102.966415][ T5864] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1102.983357][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.036353][ T5864] usb 2-1: Product: syz [ 1103.049339][ T5864] usb 2-1: Manufacturer: syz [ 1103.071661][ T5864] usb 2-1: SerialNumber: syz [ 1103.098463][ T5864] usb 2-1: config 0 descriptor?? [ 1103.286542][ T5864] rc_core: IR keymap rc-streamzap not found [ 1103.302005][ T5864] Registered IR keymap rc-empty [ 1103.317627][ T5864] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1103.336587][T23271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.352476][T23299] overlayfs: missing 'lowerdir' [ 1103.368713][ T5864] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input122 [ 1103.381871][T23271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.599292][T23304] ipvlan1: entered promiscuous mode [ 1103.605370][T23304] ipvlan1: entered allmulticast mode [ 1103.611376][T23304] veth0_vlan: entered allmulticast mode [ 1104.652535][T23323] input: syz1 as /devices/virtual/input/input123 [ 1104.666391][T21627] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1104.824427][T21627] usb 5-1: Invalid ep0 maxpacket: 32 [ 1104.842189][T23327] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1104.842189][T23327] The task syz.2.4024 (23327) triggered the difference, watch for misbehavior. [ 1104.935983][T23327] binder: 23325:23327 ioctl 400c620e 200000000100 returned -22 [ 1104.965097][T21627] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 1105.124947][T21627] usb 5-1: Invalid ep0 maxpacket: 32 [ 1105.131132][T21627] usb usb5-port1: attempt power cycle [ 1105.485083][T21627] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 1105.509313][T21627] usb 5-1: Invalid ep0 maxpacket: 32 [ 1105.550515][T23335] fuse: Bad value for 'fd' [ 1105.578826][T23336] fuse: Bad value for 'fd' [ 1105.645198][T21627] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 1105.665825][T21627] usb 5-1: Invalid ep0 maxpacket: 32 [ 1105.671610][T21627] usb usb5-port1: unable to enumerate USB device [ 1105.764098][T21627] usb 2-1: USB disconnect, device number 118 [ 1105.906985][T23343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4028'. [ 1105.957470][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1106.354301][ T6519] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1106.485805][ T6519] usb 4-1: device descriptor read/64, error -71 [ 1106.734401][ T6519] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1106.864306][ T6519] usb 4-1: device descriptor read/64, error -71 [ 1106.978846][ T6519] usb usb4-port1: attempt power cycle [ 1107.075373][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 1107.174895][T23375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'. [ 1107.354426][ T6519] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1107.517688][T23377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1107.539627][ T6519] usb 4-1: device descriptor read/8, error -71 [ 1107.705249][T21627] IPVS: starting estimator thread 0... [ 1107.765156][T23380] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1107.814364][T23379] IPVS: using max 26 ests per chain, 62400 per kthread [ 1107.884341][ T6519] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1107.906656][ T6519] usb 4-1: device descriptor read/8, error -71 [ 1108.015443][ T6519] usb usb4-port1: unable to enumerate USB device [ 1108.168486][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4041'. [ 1108.744334][ T6519] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1108.935373][ T6519] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1108.950012][ T6519] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.974832][ T6519] usb 2-1: config 0 has no interface number 0 [ 1108.988133][ T6519] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1108.999475][ T5864] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1109.022436][ T6519] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1109.059017][ T6519] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1109.072363][ T6519] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1109.105707][ T6519] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1109.124224][ T6519] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1109.149686][ T6519] usb 2-1: Manufacturer: syz [ 1109.168431][ T5864] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1109.185059][ T5864] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.206311][ T5864] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1109.367065][ T6519] usb 2-1: config 0 descriptor?? [ 1109.424718][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.450990][ T5864] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1109.462352][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1109.474863][ T5864] usb 3-1: Product: syz [ 1109.481172][ T5864] usb 3-1: Manufacturer: syz [ 1109.505496][ T5864] cdc_wdm 3-1:1.0: skipping garbage [ 1109.510789][ T5864] cdc_wdm 3-1:1.0: skipping garbage [ 1109.565355][ T5864] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1109.571514][ T5864] cdc_wdm 3-1:1.0: Unknown control protocol [ 1109.634879][T21627] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1109.643876][T23391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.670655][T23391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.688525][ T6519] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1109.706760][T23398] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4045'. [ 1109.723698][ T6519] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1109.773989][T21627] usb 4-1: device descriptor read/64, error -71 [ 1109.789058][T23399] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4045'. [ 1109.890337][T23391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1109.910727][ T6519] usb 2-1: USB disconnect, device number 119 [ 1109.912389][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1110.014818][T21627] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1110.144378][T21627] usb 4-1: device descriptor read/64, error -71 [ 1110.255350][T21627] usb usb4-port1: attempt power cycle [ 1110.595702][T21627] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1110.615542][T21627] usb 4-1: device descriptor read/8, error -71 [ 1110.855329][T21627] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1110.876690][T21627] usb 4-1: device descriptor read/8, error -71 [ 1110.986998][T21627] usb usb4-port1: unable to enumerate USB device [ 1111.605383][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1111.606518][ T6519] usb 3-1: USB disconnect, device number 15 [ 1111.612061][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1111.624479][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1111.774426][ T5864] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1111.940192][ T5864] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1111.955414][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1111.974303][ T5864] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.986890][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1111.993611][ T5864] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 1112.003828][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.015066][ T5864] usb 5-1: config 0 descriptor?? [ 1112.283257][T23439] netlink: zone id is out of range [ 1112.289250][T23439] netlink: zone id is out of range [ 1112.295506][T23439] netlink: get zone limit has 4 unknown bytes [ 1112.404886][T21627] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1112.509602][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.521515][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.528965][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.546391][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.553701][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.561582][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.568803][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.576791][T21627] usb 2-1: config 8 has an invalid interface number: 95 but max is 0 [ 1112.577049][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.587998][T21627] usb 2-1: config 8 has no interface number 0 [ 1112.592007][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.602527][T21627] usb 2-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78 [ 1112.606945][ T5864] apple 0003:05AC:0262.0049: unknown main item tag 0x0 [ 1112.618357][T21627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.631120][T21627] usb 2-1: Product: syz [ 1112.632039][ T5864] apple 0003:05AC:0262.0049: unexpected long global item [ 1112.635967][T21627] usb 2-1: Manufacturer: syz [ 1112.643537][ T5864] apple 0003:05AC:0262.0049: parse failed [ 1112.647984][T21627] usb 2-1: SerialNumber: syz [ 1112.653262][ T5864] apple 0003:05AC:0262.0049: probe with driver apple failed with error -22 [ 1112.767643][ T5864] usb 5-1: USB disconnect, device number 92 [ 1112.834386][T19537] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1112.899223][T21627] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.95/input/input125 [ 1112.915823][ T5180] bcm5974 2-1:8.95: could not read from device [ 1112.923916][ T5180] bcm5974 2-1:8.95: could not read from device [ 1112.938625][T21627] usb 2-1: USB disconnect, device number 120 [ 1112.946644][ T5180] bcm5974 2-1:8.95: could not read from device [ 1113.016496][T19537] usb 4-1: config 3 has an invalid interface number: 161 but max is 0 [ 1113.028453][T19537] usb 4-1: config 3 has no interface number 0 [ 1113.038418][T19537] usb 4-1: config 3 interface 161 has no altsetting 0 [ 1113.056523][T19537] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 1113.074251][T19537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.082305][T19537] usb 4-1: Product: syz [ 1113.087882][T19537] usb 4-1: Manufacturer: syz [ 1113.092542][T19537] usb 4-1: SerialNumber: syz [ 1113.314080][T23460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.333299][T23460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.355486][T19537] go7007 4-1:3.161: probe with driver go7007 failed with error -12 [ 1113.375732][T19537] usb 4-1: USB disconnect, device number 35 [ 1113.569995][T23483] program syz.4.4073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1113.589318][T23480] veth0: entered promiscuous mode [ 1113.596225][T23480] veth0: entered allmulticast mode [ 1113.825290][T19537] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1113.858524][T23495] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1114.051610][T19537] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1114.060863][T19537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.069093][T19537] usb 3-1: Product: syz [ 1114.073444][T19537] usb 3-1: Manufacturer: syz [ 1114.081183][T19537] usb 3-1: SerialNumber: syz [ 1114.096849][T19537] usb 3-1: config 0 descriptor?? [ 1114.133301][T19537] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1114.163073][T19537] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1114.174537][T19537] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1114.189959][T19537] usb 3-1: media controller created [ 1114.241751][T19537] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1114.356852][T19537] DVB: Unable to find symbol mt352_attach() [ 1114.428051][T19537] DVB: Unable to find symbol nxt6000_attach() [ 1114.435903][T19537] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1114.451865][T19537] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input127 [ 1114.481980][T19537] dvb-usb: schedule remote query interval to 1000 msecs. [ 1114.490210][T19537] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1114.500641][ T5864] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1114.508714][T19537] dvb-usb: bulk message failed: -22 (7/0) [ 1114.517757][T19537] dvb-usb: bulk message failed: -22 (7/0) [ 1114.674511][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 1114.681636][ T5864] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 1114.691792][ T5864] usb 4-1: config 0 has no interface number 0 [ 1114.698255][ T5864] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1114.725572][ T5864] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 1114.741263][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.756986][ T5864] usb 4-1: config 0 descriptor?? [ 1114.988632][T23499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.001291][T23499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.013134][ T5864] usb 4-1: USB disconnect, device number 36 [ 1115.244788][ T5916] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1115.396282][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 1115.408134][ T5916] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1115.418022][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.427205][ T5916] usb 5-1: Product: syz [ 1115.431568][ T5916] usb 5-1: Manufacturer: syz [ 1115.437203][ T5916] usb 5-1: SerialNumber: syz [ 1115.445909][ T5916] usb 5-1: config 0 descriptor?? [ 1115.520529][ T5864] dvb-usb: bulk message failed: -22 (7/0) [ 1115.530398][ T5864] dvb-usb: error while querying for an remote control event. [ 1115.911214][ T5916] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 1115.933121][ T5916] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1115.993728][ T5916] usb 5-1: USB disconnect, device number 93 [ 1116.256677][T23527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1116.459556][T23535] pim6reg: left allmulticast mode [ 1116.634401][ T5864] dvb-usb: bulk message failed: -22 (7/0) [ 1116.640337][ T5864] dvb-usb: error while querying for an remote control event. [ 1116.789486][ T5916] usb 3-1: USB disconnect, device number 16 [ 1117.023625][ T5916] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1117.191194][T23549] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 1117.613924][T23554] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4089'. [ 1117.964566][T19537] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1118.085597][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4094'. [ 1118.168390][T19537] usb 5-1: Using ep0 maxpacket: 32 [ 1118.195884][T19537] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1118.204028][T19537] usb 5-1: config 0 has no interface number 0 [ 1118.253033][T19537] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1118.262731][T19537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.271629][T19537] usb 5-1: Product: syz [ 1118.277201][T19537] usb 5-1: Manufacturer: syz [ 1118.282023][T19537] usb 5-1: SerialNumber: syz [ 1118.306248][T19537] usb 5-1: config 0 descriptor?? [ 1118.324829][T19537] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1118.560088][T23583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4098'. [ 1118.625769][T23583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'. [ 1118.672224][T19537] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1119.158946][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 1119.476653][T23583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'. [ 1119.493512][T19537] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1120.719601][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1120.720893][ T5916] usb 5-1: USB disconnect, device number 94 [ 1120.755552][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1120.792232][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1120.832843][ T5916] quatech2 5-1:0.51: device disconnected [ 1121.359862][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.368492][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1167.435096][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1172.556862][ T5917] kworker/1:6 (5917) used greatest stack depth: 15768 bytes left [ 1182.798061][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.807810][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.585063][ T5864] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1183.704585][T19537] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1183.747465][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1183.756220][ T5864] usb 2-1: not running at top speed; connect to a high speed hub [ 1183.765483][ T5864] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 1183.773945][ T5864] usb 2-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 1183.785677][ T5864] usb 2-1: config 1 has no interface number 0 [ 1183.791918][ T5864] usb 2-1: config 1 interface 138 altsetting 252 has an endpoint descriptor with address 0x6F, changing to 0xF [ 1183.803972][ T5864] usb 2-1: config 1 interface 138 altsetting 252 endpoint 0xF has an invalid bInterval 91, changing to 4 [ 1183.815458][ T5864] usb 2-1: config 1 interface 138 altsetting 252 endpoint 0xF has invalid maxpacket 52651, setting to 1023 [ 1183.827113][ T5864] usb 2-1: config 1 interface 138 has no altsetting 0 [ 1183.836100][ T5864] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1183.846029][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.854059][ T5864] usb 2-1: Product: syz [ 1183.859345][ T5864] usb 2-1: Manufacturer: syz [ 1183.863967][ T5864] usb 2-1: SerialNumber: syz [ 1183.870597][T19537] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.881611][T19537] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.892772][T19537] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1183.903364][T19537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.922749][T19537] usb 4-1: config 0 descriptor?? [ 1183.934823][T19537] usbhid 4-1:0.0: can't add hid device: -22 [ 1183.941204][T19537] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1184.117568][T23599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.126717][T23599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.139825][T21627] usb 4-1: USB disconnect, device number 37 [ 1184.142526][ T5864] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1184.254068][ T5864] usb 2-1: USB disconnect, device number 121 [ 1184.378548][T23615] udevd[23615]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1185.457194][T23645] binder: BINDER_SET_CONTEXT_MGR already set [ 1185.528748][T23645] binder: 23643:23645 ioctl 4018620d 2000000000c0 returned -16 [ 1185.608659][T23647] binder_alloc: binder_alloc_mmap_handler: 23643 200000ffd000-200001000000 already mapped failed -16 [ 1185.656043][T23644] binder_alloc: 23643: binder_alloc_buf, no vma [ 1185.666247][T23641] ptrace attach of "./syz-executor exec"[23648] was attempted by "./syz-executor exec"[23641] [ 1185.700633][T23645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.726400][T23645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.882748][T23654] loop2: detected capacity change from 0 to 7 [ 1185.899868][T23602] Dev loop2: unable to read RDB block 7 [ 1185.914328][T23602] loop2: AHDI p1 p2 p3 [ 1185.919531][T23602] loop2: partition table partially beyond EOD, truncated [ 1185.941215][T23602] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1185.948846][ T5864] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1185.957732][T23602] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1185.994347][T19537] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1186.014999][T23657] netlink: 'syz.1.4116': attribute type 3 has an invalid length. [ 1186.029170][T23658] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4117'. [ 1186.136633][ T5864] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 1186.154243][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.167703][T19537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1186.181302][T19537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.191331][ T5864] usb 3-1: config 0 has no interface number 0 [ 1186.198478][ T5864] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1186.211809][T19537] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1186.221923][T19537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.232349][ T5864] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1186.242880][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.252126][T19537] usb 5-1: config 0 descriptor?? [ 1186.279066][ T5864] usb 3-1: config 0 descriptor?? [ 1186.331139][ T5864] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1186.341638][T19800] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1186.377935][T23654] Dev loop2: unable to read RDB block 7 [ 1186.430297][T23654] loop2: AHDI p1 p2 p3 [ 1186.437446][T23667] program syz.3.4119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1186.453765][T23654] loop2: partition table partially beyond EOD, truncated [ 1186.484934][T23654] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1186.506395][T21627] usb 3-1: USB disconnect, device number 17 [ 1186.515382][T15547] usb 3-1: Failed to submit usb control message: -71 [ 1186.543606][T15547] usb 3-1: unable to send the bmi data to the device: -71 [ 1186.548942][T23654] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1186.559448][T15547] usb 3-1: unable to get target info from device [ 1186.578194][T19800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.585008][T15547] usb 3-1: could not get target info (-71) [ 1186.617660][T19800] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1186.633607][T19800] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1186.643302][T15547] usb 3-1: could not probe fw (-71) [ 1186.650802][T19800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.670558][T23651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.707061][T19800] usb 2-1: config 0 descriptor?? [ 1186.758199][T23651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.773099][T19800] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1186.780837][T19800] dvb-usb: bulk message failed: -22 (3/0) [ 1186.790658][T23651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.799807][T23651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.817450][T19537] isku 0003:1E7D:319C.004A: item fetching failed at offset 5/7 [ 1186.825535][T16193] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 1186.835776][T19537] isku 0003:1E7D:319C.004A: parse failed [ 1186.843089][T19537] isku 0003:1E7D:319C.004A: probe with driver isku failed with error -22 [ 1186.856345][T19800] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1186.866535][T19800] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1186.875862][T19800] usb 2-1: media controller created [ 1186.885298][T19800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1186.906548][T19800] dvb-usb: bulk message failed: -22 (6/0) [ 1186.912395][T19800] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1186.933317][T19800] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input128 [ 1186.964317][T16193] usb 4-1: device descriptor read/64, error -71 [ 1186.971380][T19800] dvb-usb: schedule remote query interval to 150 msecs. [ 1186.978677][T19800] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1187.025439][T19800] usb 5-1: USB disconnect, device number 95 [ 1187.095344][ T5195] Dev loop2: unable to read RDB block 7 [ 1187.102651][ T5195] loop2: AHDI p1 p2 p3 [ 1187.107092][ T5195] loop2: partition table partially beyond EOD, truncated [ 1187.117791][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1187.127944][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1187.135624][ T5864] dvb-usb: bulk message failed: -22 (1/0) [ 1187.144759][ T5864] dvb-usb: error while querying for an remote control event. [ 1187.204803][T16193] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 1187.217871][T23671] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4120'. [ 1187.315377][T19800] dvb-usb: bulk message failed: -22 (1/0) [ 1187.321636][T19800] dvb-usb: error while querying for an remote control event. [ 1187.341000][ T5195] Dev loop2: unable to read RDB block 7 [ 1187.364012][ T5195] loop2: AHDI p1 p2 p3 [ 1187.371893][ T5195] loop2: partition table partially beyond EOD, truncated [ 1187.387541][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1187.394621][T16193] usb 4-1: device descriptor read/64, error -71 [ 1187.402804][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1187.485071][T19800] dvb-usb: bulk message failed: -22 (1/0) [ 1187.491122][T19800] dvb-usb: error while querying for an remote control event. [ 1187.505235][T16193] usb usb4-port1: attempt power cycle [ 1187.659165][ T5195] Dev loop2: unable to read RDB block 7 [ 1187.667815][ T5195] loop2: AHDI p1 p2 p3 [ 1187.673892][ T5195] loop2: partition table partially beyond EOD, truncated [ 1187.681665][T19800] dvb-usb: bulk message failed: -22 (1/0) [ 1187.688804][T19800] dvb-usb: error while querying for an remote control event. [ 1187.697576][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1187.859611][T16193] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 1187.877840][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1187.917334][T23684] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1187.924299][T16193] usb 4-1: device descriptor read/8, error -71 [ 1187.989066][T23684] team0: Port device batadv2 added [ 1188.035700][T19800] dvb-usb: bulk message failed: -22 (1/0) [ 1188.041819][T19800] dvb-usb: error while querying for an remote control event. [ 1188.227193][T19800] dvb-usb: bulk message failed: -22 (1/0) [ 1188.233136][T19800] dvb-usb: error while querying for an remote control event. [ 1188.254487][T16193] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 1188.544437][T19800] dvb-usb: bulk message failed: -22 (1/0) [ 1188.550259][T19800] dvb-usb: error while querying for an remote control event. [ 1188.709478][T16193] usb 4-1: device descriptor read/8, error -71 [ 1188.916901][T16193] usb usb4-port1: unable to enumerate USB device [ 1188.929557][T16193] dvb-usb: bulk message failed: -22 (1/0) [ 1188.936647][T16193] dvb-usb: error while querying for an remote control event. [ 1189.104361][T16193] dvb-usb: bulk message failed: -22 (1/0) [ 1189.110327][T16193] dvb-usb: error while querying for an remote control event. [ 1189.177835][ T5916] usb 2-1: USB disconnect, device number 122 [ 1189.473904][ T5916] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1190.020243][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1190.230706][T23699] x_tables: duplicate underflow at hook 3 [ 1190.300462][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1190.365754][ T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1190.395886][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.416024][ T10] usb 3-1: config 220 has no interface number 2 [ 1190.422616][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1190.426068][T23699] hsr0: entered promiscuous mode [ 1190.441894][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1190.457098][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1190.471623][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1190.512578][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4128'. [ 1190.522327][T23704] hsr_slave_0: left promiscuous mode [ 1190.531081][T23704] hsr_slave_1: left promiscuous mode [ 1190.579761][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1190.589777][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.598837][ T10] usb 3-1: Product: syz [ 1190.606062][ T10] usb 3-1: Manufacturer: syz [ 1190.635861][T23704] hsr0 (unregistering): left promiscuous mode [ 1190.642194][ T10] usb 3-1: SerialNumber: syz [ 1190.895011][ T6377] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1191.055025][ T6377] usb 4-1: device descriptor read/64, error -71 [ 1191.062875][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1191.094841][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1191.293517][T23724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1191.294833][ T6377] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1191.338780][T23727] syzkaller1: entered promiscuous mode [ 1191.358287][T23727] syzkaller1: entered allmulticast mode [ 1191.384588][T19800] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1191.445106][ T6377] usb 4-1: device descriptor read/64, error -71 [ 1191.545581][T19800] usb 2-1: Using ep0 maxpacket: 16 [ 1191.556863][T19800] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1191.565527][ T6377] usb usb4-port1: attempt power cycle [ 1191.568114][T19800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.579962][T19800] usb 2-1: Product: syz [ 1191.584554][T19800] usb 2-1: Manufacturer: syz [ 1191.589358][T19800] usb 2-1: SerialNumber: syz [ 1191.609282][T19800] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1191.618870][T19800] r8152-cfgselector 2-1: config 0 descriptor?? [ 1191.657594][T23736] netlink: 'syz.0.4137': attribute type 2 has an invalid length. [ 1191.678653][T23736] !: entered promiscuous mode [ 1191.689265][T23736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4137'. [ 1191.829142][T19800] r8152-cfgselector 2-1: Needed 1 retries to read version [ 1191.905342][ T6377] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1191.935519][ T6377] usb 4-1: device descriptor read/8, error -71 [ 1192.030911][T19800] r8152-cfgselector 2-1: USB disconnect, device number 123 [ 1192.110765][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1192.119797][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 1192.129663][ T10] usb 3-1: selecting invalid altsetting 0 [ 1192.167565][ T10] usb 3-1: selecting invalid altsetting 0 [ 1192.173337][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1192.183372][ T6377] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1192.205380][ T10] usb 3-1: USB disconnect, device number 18 [ 1192.217323][ T6377] usb 4-1: device descriptor read/8, error -71 [ 1192.334766][ T6377] usb usb4-port1: unable to enumerate USB device [ 1192.490207][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4138'. [ 1193.995025][ T6377] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1194.264682][ T6377] usb 3-1: Using ep0 maxpacket: 32 [ 1194.393292][ T6377] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1194.466540][ T6377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.527435][ T6377] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1195.185261][T23797] usb usb8: usbfs: process 23797 (syz.0.4153) did not claim interface 0 before use [ 1195.269196][T23801] netlink: 'syz.1.4154': attribute type 1 has an invalid length. [ 1195.284949][T23799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.293981][T23799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.346792][T23801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1195.450646][T23803] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1195.481919][T23801] bond2: (slave veth0_to_bond): making interface the new active one [ 1195.492373][T23801] veth0_to_bond: entered promiscuous mode [ 1195.498722][T23801] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1195.531766][T23806] vlan2: entered allmulticast mode [ 1195.537467][T23806] veth0_to_bond: entered allmulticast mode [ 1195.546432][T23806] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1196.017431][ T5864] usb 3-1: USB disconnect, device number 19 [ 1196.157714][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1196.642320][T23834] vlan3: entered promiscuous mode [ 1196.650531][T23834] bond0: entered promiscuous mode [ 1196.784755][ T6377] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1196.829923][T23840] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 1196.971973][T23840] bond2: entered promiscuous mode [ 1196.978771][T23840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1197.018129][T23843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1197.028354][T23843] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1197.038690][ T6377] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 1197.038722][ T6377] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 1197.057124][T23843] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1197.057557][ T6377] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.088236][ T6377] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1197.109595][ T6377] usb 2-1: config 0 has no interface number 0 [ 1197.123849][ T6377] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1197.139293][ T6377] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1197.151049][ T6377] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1197.161436][ T6377] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1197.187142][ T6377] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1197.263812][ T6377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.290883][T23843] bond2: (slave gre1): making interface the new active one [ 1197.315200][ T6377] usb 2-1: config 0 descriptor?? [ 1197.329198][ T6377] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1197.336494][T23843] gre1: entered promiscuous mode [ 1197.401756][T23843] bond2: (slave gre1): Enslaving as an active interface with an up link [ 1197.534601][T23832] netlink: 'syz.1.4162': attribute type 13 has an invalid length. [ 1197.599011][T23832] gretap0: refused to change device tx_queue_len [ 1197.605773][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1197.605793][ T30] audit: type=1326 audit(1765279707.202:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1197.678245][ T30] audit: type=1326 audit(1765279707.202:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1197.718733][T23832] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1197.736042][ T30] audit: type=1326 audit(1765279707.202:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1197.763974][ T30] audit: type=1326 audit(1765279707.202:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f22cab8e1ff code=0x7ffc0000 [ 1197.800420][ T6377] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 1197.830367][ T30] audit: type=1326 audit(1765279707.202:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1197.830914][ T6377] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1197.925670][ T30] audit: type=1326 audit(1765279707.232:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1197.956295][ T6377] usb 2-1: MIDIStreaming interface descriptor not found [ 1198.011153][ T30] audit: type=1326 audit(1765279707.232:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1198.155862][ T6377] usb 2-1: USB disconnect, device number 124 [ 1198.485718][ T30] audit: type=1326 audit(1765279707.232:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1198.638400][T23862] FAULT_INJECTION: forcing a failure. [ 1198.638400][T23862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.656420][ T30] audit: type=1326 audit(1765279707.232:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1198.689529][T23862] CPU: 1 UID: 0 PID: 23862 Comm: syz.1.4172 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.689564][T23862] Tainted: [L]=SOFTLOCKUP [ 1198.689573][T23862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1198.689587][T23862] Call Trace: [ 1198.689596][T23862] [ 1198.689607][T23862] dump_stack_lvl+0x189/0x250 [ 1198.689640][T23862] ? __pfx____ratelimit+0x10/0x10 [ 1198.689669][T23862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1198.689695][T23862] ? __pfx__printk+0x10/0x10 [ 1198.689727][T23862] ? __might_fault+0xb0/0x130 [ 1198.689772][T23862] should_fail_ex+0x414/0x560 [ 1198.689805][T23862] _copy_from_iter+0x1cd/0x1630 [ 1198.689841][T23862] ? __build_skb_around+0x22d/0x3c0 [ 1198.689877][T23862] ? __pfx__copy_from_iter+0x10/0x10 [ 1198.689904][T23862] ? __alloc_skb+0x2f1/0x430 [ 1198.689936][T23862] ? __pfx___alloc_skb+0x10/0x10 [ 1198.689968][T23862] ? netlink_sendmsg+0x642/0xb30 [ 1198.689989][T23862] ? skb_put+0x11b/0x210 [ 1198.690031][T23862] netlink_sendmsg+0x6b2/0xb30 [ 1198.690063][T23862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.690088][T23862] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1198.690112][T23862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1198.690133][T23862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.690157][T23862] __sock_sendmsg+0x21c/0x270 [ 1198.690185][T23862] ____sys_sendmsg+0x505/0x820 [ 1198.690224][T23862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1198.690267][T23862] ? import_iovec+0x74/0xa0 [ 1198.690304][T23862] ___sys_sendmsg+0x21f/0x2a0 [ 1198.690341][T23862] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.690383][T23862] ? rcu_read_lock_any_held+0xb3/0x120 [ 1198.690439][T23862] ? __fget_files+0x2a/0x420 [ 1198.690467][T23862] ? __fget_files+0x3a0/0x420 [ 1198.690504][T23862] __x64_sys_sendmsg+0x19b/0x260 [ 1198.690539][T23862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1198.690589][T23862] ? __pfx_ksys_write+0x10/0x10 [ 1198.690615][T23862] ? do_syscall_64+0xbe/0xf80 [ 1198.690650][T23862] do_syscall_64+0xfa/0xf80 [ 1198.690680][T23862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.690702][T23862] ? clear_bhb_loop+0x60/0xb0 [ 1198.690729][T23862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.690749][T23862] RIP: 0033:0x7f609218f749 [ 1198.690770][T23862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.690791][T23862] RSP: 002b:00007f6093048038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.690815][T23862] RAX: ffffffffffffffda RBX: 00007f60923e5fa0 RCX: 00007f609218f749 [ 1198.690832][T23862] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000004 [ 1198.690846][T23862] RBP: 00007f6093048090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.690860][T23862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.690872][T23862] R13: 00007f60923e6038 R14: 00007f60923e5fa0 R15: 00007f609250fa28 [ 1198.690907][T23862] [ 1199.027156][ T30] audit: type=1326 audit(1765279707.232:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.4.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22cab8f749 code=0x7ffc0000 [ 1200.135150][T15543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.174190][T15543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.387318][T15543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.450368][T15543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.614105][T15543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.634834][T15543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.821466][T15543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.853115][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1200.856561][T15543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.883265][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1200.893890][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1200.902882][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1200.911305][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1200.949793][T18046] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1200.957363][T18046] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1200.966506][T18046] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1200.975411][T18046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1200.983773][T18046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1201.398947][T15543] bridge_slave_1: left allmulticast mode [ 1201.407027][T15543] bridge_slave_1: left promiscuous mode [ 1201.413020][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.423811][T15543] : left allmulticast mode [ 1201.428555][T15543] : left promiscuous mode [ 1201.433598][T15543] bridge0: port 1() entered disabled state [ 1201.554846][ T5916] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1201.704361][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 1201.719224][ T5916] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1201.743496][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.766799][ T5916] usb 2-1: Product: syz [ 1201.771043][ T5916] usb 2-1: Manufacturer: syz [ 1201.807256][ T5916] usb 2-1: SerialNumber: syz [ 1201.825584][ T5916] usb 2-1: config 0 descriptor?? [ 1201.859247][ T5916] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1202.140980][ T5916] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1202.255177][ T5916] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1202.271875][ T5916] usb 2-1: USB disconnect, device number 125 [ 1202.385143][T15543] bond0 (unregistering): Released all slaves [ 1202.677037][T23907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'. [ 1202.702689][T15543] bond1 (unregistering): Released all slaves [ 1203.040674][T18046] Bluetooth: hci0: command tx timeout [ 1203.601400][T23877] chnl_net:caif_netlink_parms(): no params data found [ 1204.064876][ T5916] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1204.224890][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 1204.237319][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1204.255367][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1204.269361][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1204.282077][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1204.292912][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1204.303672][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1204.344925][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1204.386351][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1204.441378][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1204.481486][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 32767, setting to 64 [ 1204.570447][ T5916] usb 5-1: string descriptor 0 read error: -22 [ 1204.579712][ T5916] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1204.638966][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.669656][ T5916] usb 5-1: config 0 descriptor?? [ 1204.692330][ T5916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1204.702224][T23877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.735522][T23877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.783968][T23877] bridge_slave_0: entered allmulticast mode [ 1204.839898][T23877] bridge_slave_0: entered promiscuous mode [ 1204.917636][ T5916] usb 5-1: USB disconnect, device number 96 [ 1205.093096][T23877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.123351][T18046] Bluetooth: hci0: command tx timeout [ 1205.163973][T23877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.184891][T23877] bridge_slave_1: entered allmulticast mode [ 1205.192241][T23877] bridge_slave_1: entered promiscuous mode [ 1205.288760][T15543] hsr_slave_0: left promiscuous mode [ 1205.300120][T15543] hsr_slave_1: left promiscuous mode [ 1205.310604][T15543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.320283][T15543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.337939][T23957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1205.371101][T15543] veth1_macvtap: left promiscuous mode [ 1205.379093][T15543] veth0_macvtap: left promiscuous mode [ 1205.390540][T15543] veth1_vlan: left promiscuous mode [ 1205.396731][T15543] veth0_vlan: left promiscuous mode [ 1205.583096][T23963] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4195'. [ 1205.754282][T16193] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1205.941834][T16193] usb 5-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1205.952609][T16193] usb 5-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 1205.964971][T16193] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1205.976496][T16193] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 1205.989194][T16193] usb 5-1: config 48 interface 0 has no altsetting 0 [ 1206.000093][T16193] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 1206.010099][T16193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.020580][T16193] usb 5-1: Product: syz [ 1206.025232][T16193] usb 5-1: Manufacturer: syz [ 1206.029869][T16193] usb 5-1: SerialNumber: syz [ 1206.043087][T23961] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1206.082042][T15543] team0 (unregistering): Port device team_slave_1 removed [ 1206.153827][T15543] team0 (unregistering): Port device team_slave_0 removed [ 1206.274731][T23961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.293759][T23961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.344973][T16193] usb 5-1: USB disconnect, device number 97 [ 1206.541581][T23972] netlink: 'syz.1.4197': attribute type 39 has an invalid length. [ 1207.200877][T18046] Bluetooth: hci0: command tx timeout [ 1207.438300][T23877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.720122][T23877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.995181][T23877] team0: Port device team_slave_0 added [ 1208.029459][T23877] team0: Port device team_slave_1 added [ 1208.244593][ T5864] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1208.329496][T15547] veth0_to_bond: left promiscuous mode [ 1208.348171][T23877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.390548][T23877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.451963][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1208.484513][ T5864] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1208.502522][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.512665][T23877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.521048][ T5864] usb 2-1: Product: syz [ 1208.568802][ T5864] usb 2-1: Manufacturer: syz [ 1208.570153][T23877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.573540][ T5864] usb 2-1: SerialNumber: syz [ 1208.624739][T23877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.704715][ T5864] usb 2-1: config 0 descriptor?? [ 1208.713227][T23877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.102031][T23877] hsr_slave_0: entered promiscuous mode [ 1209.126323][T23877] hsr_slave_1: entered promiscuous mode [ 1209.146921][T23989] fuse: Unknown parameter 'root»f¹+' [ 1209.146984][T23877] debugfs: 'hsr0' already exists in 'hsr' [ 1209.169204][T23877] Cannot create hsr debugfs directory [ 1209.274413][T18046] Bluetooth: hci0: command tx timeout [ 1209.553571][T24024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4210'. [ 1209.637944][T24024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4210'. [ 1209.876816][T23877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1209.900198][T23877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1209.921267][T23877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1209.935129][T23877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1210.008832][T15543] IPVS: stop unused estimator thread 0... [ 1210.075513][ T184] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1210.209505][T23877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.244988][ T184] usb 3-1: Using ep0 maxpacket: 16 [ 1210.260786][ T184] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1210.293287][ T184] usb 3-1: config 0 has no interface number 0 [ 1210.327177][T23877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.341527][ T184] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1210.348645][T17043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.359930][T17043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.391469][ T184] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1210.398939][T17043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.407777][T17043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.430206][ T184] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1210.455004][ T184] usb 3-1: Product: syz [ 1210.477108][ T184] usb 3-1: SerialNumber: syz [ 1210.503224][ T184] usb 3-1: config 0 descriptor?? [ 1210.527453][ T184] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 1210.549298][ T184] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input129 [ 1210.616961][T23877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.786277][T23877] veth0_vlan: entered promiscuous mode [ 1210.836480][T24055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.838713][T23877] veth1_vlan: entered promiscuous mode [ 1210.863962][T24055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.958442][T23877] veth0_macvtap: entered promiscuous mode [ 1211.056032][T23877] veth1_macvtap: entered promiscuous mode [ 1211.081551][T24055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4211'. [ 1211.173216][ T5916] usb 2-1: USB disconnect, device number 126 [ 1211.190747][T23877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.237837][T23877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.333684][T15543] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.373381][T15543] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.402264][T15543] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.452688][T15543] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.646897][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.682574][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.685010][ T5916] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1211.769659][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.789907][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.886988][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.926383][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1211.959731][ T5916] usb 2-1: config 1 has no interface number 0 [ 1211.994984][ T5916] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1212.035451][ T5916] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1212.048010][ T5916] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1212.063766][ T5916] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1212.095372][ T5916] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1212.147862][ T5916] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1212.167269][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.178229][ T5916] usb 2-1: Product: syz [ 1212.182471][ T5916] usb 2-1: Manufacturer: syz [ 1212.230936][T24068] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 1212.239489][T24068] PKCS7: Only support pkcs7_signedData type [ 1212.302254][ T5916] usb 2-1: SerialNumber: syz [ 1212.331352][T24060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1212.536797][T24060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1212.753273][T24060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1213.105919][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1213.112979][ C0] ------------[ cut here ]------------ [ 1213.119939][ C0] URB ffff8880854eb300 submitted while active [ 1213.120820][T16193] usb 3-1: USB disconnect, device number 20 [ 1213.126411][ C0] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#0: swapper/0/0 [ 1213.140145][ C0] Modules linked in: [ 1213.145056][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.155619][ C0] Tainted: [L]=SOFTLOCKUP [ 1213.159975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.170067][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 1213.175592][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 47 e5 28 fb 49 83 3e 00 74 40 e8 7c 93 c2 fa 48 8d 3d 35 13 8f 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 61 93 c2 fa eb 05 e8 5a 93 [ 1213.195311][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010087 [ 1213.201490][ C0] RAX: ffffffff86ff1d74 RBX: ffff8880854eb300 RCX: 0000000000040000 [ 1213.209481][ C0] RDX: ffffc900021b1000 RSI: ffff8880854eb300 RDI: ffffffff8f8e30b0 [ 1213.217656][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 1213.225666][ C0] R10: dffffc0000000000 R11: fffff52000000f00 R12: 0000000000000820 [ 1213.233722][ C0] R13: ffff888028872830 R14: ffff8880854eb308 R15: dffffc0000000000 [ 1213.241786][ C0] FS: 0000000000000000(0000) GS:ffff888125e44000(0000) knlGS:0000000000000000 [ 1213.250744][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1213.257366][ C0] CR2: 00007fca32850286 CR3: 000000002f954000 CR4: 00000000003526f0 [ 1213.265480][ C0] Call Trace: [ 1213.268803][ C0] [ 1213.271771][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1213.277209][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1213.283160][ C0] ? kcov_remote_start+0x97/0x7f0 [ 1213.288362][ C0] cm109_urb_irq_callback+0x709/0xcd0 [ 1213.293820][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 1213.299265][ C0] dummy_timer+0x85f/0x45b0 [ 1213.303845][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1213.309271][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1213.314234][ C0] ? debug_object_deactivate+0x6d/0x360 [ 1213.320267][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1213.325248][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1213.330224][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 1213.335475][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1213.341513][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1213.347480][ C0] ? read_tsc+0x9/0x20 [ 1213.351586][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1213.357423][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1213.362753][ C0] handle_softirqs+0x27d/0x850 [ 1213.367659][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1213.372466][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1213.377794][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1213.383032][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1213.387644][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1213.392870][ C0] irq_exit_rcu+0x9/0x30 [ 1213.397141][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1213.402936][ C0] [ 1213.405891][ C0] [ 1213.408839][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1213.414848][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1213.420871][ C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 90 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1213.441880][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1213.448156][ C0] RAX: 7fc0aaf435792a00 RBX: ffffffff81978eba RCX: 7fc0aaf435792a00 [ 1213.456147][ C0] RDX: 0000000000000001 RSI: ffffffff8d786800 RDI: ffffffff8bc02360 [ 1213.464224][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1213.472217][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f817670 [ 1213.480216][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 1213.488252][ C0] ? do_idle+0x1ea/0x520 [ 1213.492537][ C0] default_idle+0x13/0x20 [ 1213.497000][ C0] default_idle_call+0x73/0xb0 [ 1213.501778][ C0] do_idle+0x1ea/0x520 [ 1213.505870][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1213.512065][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1213.517325][ C0] ? __pfx_do_idle+0x10/0x10 [ 1213.521950][ C0] ? do_idle+0x5/0x520 [ 1213.526059][ C0] cpu_startup_entry+0x44/0x60 [ 1213.530858][ C0] rest_init+0x2de/0x300 [ 1213.535129][ C0] start_kernel+0x3a7/0x400 [ 1213.539748][ C0] x86_64_start_reservations+0x24/0x30 [ 1213.545235][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1213.550369][ C0] common_startup_64+0x13e/0x147 [ 1213.555341][ C0] [ 1213.558376][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1213.565672][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.576189][ C0] Tainted: [L]=SOFTLOCKUP [ 1213.580530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.590618][ C0] Call Trace: [ 1213.593920][ C0] [ 1213.596778][ C0] dump_stack_lvl+0x99/0x250 [ 1213.601398][ C0] ? __asan_memcpy+0x40/0x70 [ 1213.606018][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1213.611234][ C0] ? __pfx__printk+0x10/0x10 [ 1213.615871][ C0] vpanic+0x237/0x6d0 [ 1213.619875][ C0] ? __pfx_vpanic+0x10/0x10 [ 1213.624403][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1213.629725][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1213.634963][ C0] panic+0xb9/0xc0 [ 1213.638737][ C0] ? __pfx_panic+0x10/0x10 [ 1213.643237][ C0] ? common_startup_64+0x13e/0x147 [ 1213.648388][ C0] __warn+0x317/0x4b0 [ 1213.652417][ C0] __report_bug+0x288/0x500 [ 1213.656954][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1213.662366][ C0] ? __pfx___report_bug+0x10/0x10 [ 1213.667420][ C0] ? dev_printk_emit+0xe0/0x130 [ 1213.672313][ C0] report_bug_entry+0x16a/0x220 [ 1213.677231][ C0] ? usb_submit_urb+0x7e/0x18d0 [ 1213.682118][ C0] ? usb_submit_urb+0x83/0x18d0 [ 1213.686994][ C0] handle_bug+0xca/0x200 [ 1213.691321][ C0] exc_invalid_op+0x1a/0x50 [ 1213.695854][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1213.700719][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 1213.706197][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 47 e5 28 fb 49 83 3e 00 74 40 e8 7c 93 c2 fa 48 8d 3d 35 13 8f 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 61 93 c2 fa eb 05 e8 5a 93 [ 1213.725831][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010087 [ 1213.732040][ C0] RAX: ffffffff86ff1d74 RBX: ffff8880854eb300 RCX: 0000000000040000 [ 1213.740060][ C0] RDX: ffffc900021b1000 RSI: ffff8880854eb300 RDI: ffffffff8f8e30b0 [ 1213.748053][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 1213.756036][ C0] R10: dffffc0000000000 R11: fffff52000000f00 R12: 0000000000000820 [ 1213.764019][ C0] R13: ffff888028872830 R14: ffff8880854eb308 R15: dffffc0000000000 [ 1213.772013][ C0] ? usb_submit_urb+0x74/0x18d0 [ 1213.776896][ C0] ? usb_submit_urb+0x74/0x18d0 [ 1213.781766][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1213.787168][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1213.793101][ C0] ? kcov_remote_start+0x97/0x7f0 [ 1213.798165][ C0] cm109_urb_irq_callback+0x709/0xcd0 [ 1213.803577][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 1213.808981][ C0] dummy_timer+0x85f/0x45b0 [ 1213.813524][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1213.819056][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1213.824105][ C0] ? debug_object_deactivate+0x6d/0x360 [ 1213.829677][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1213.834644][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1213.839600][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 1213.844830][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1213.850859][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1213.856630][ C0] ? read_tsc+0x9/0x20 [ 1213.860784][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1213.866643][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1213.871794][ C0] handle_softirqs+0x27d/0x850 [ 1213.876579][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1213.881363][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1213.886671][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1213.891909][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1213.896539][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1213.901785][ C0] irq_exit_rcu+0x9/0x30 [ 1213.906046][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1213.911705][ C0] [ 1213.914656][ C0] [ 1213.917609][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1213.923621][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1213.929474][ C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 90 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1213.949199][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1213.955405][ C0] RAX: 7fc0aaf435792a00 RBX: ffffffff81978eba RCX: 7fc0aaf435792a00 [ 1213.963394][ C0] RDX: 0000000000000001 RSI: ffffffff8d786800 RDI: ffffffff8bc02360 [ 1213.971379][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1213.979372][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f817670 [ 1213.987458][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 1213.995542][ C0] ? do_idle+0x1ea/0x520 [ 1213.999907][ C0] default_idle+0x13/0x20 [ 1214.004270][ C0] default_idle_call+0x73/0xb0 [ 1214.009072][ C0] do_idle+0x1ea/0x520 [ 1214.013159][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1214.019506][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1214.024729][ C0] ? __pfx_do_idle+0x10/0x10 [ 1214.029377][ C0] ? do_idle+0x5/0x520 [ 1214.033479][ C0] cpu_startup_entry+0x44/0x60 [ 1214.038285][ C0] rest_init+0x2de/0x300 [ 1214.042738][ C0] start_kernel+0x3a7/0x400 [ 1214.047274][ C0] x86_64_start_reservations+0x24/0x30 [ 1214.052765][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1214.057982][ C0] common_startup_64+0x13e/0x147 [ 1214.062980][ C0] [ 1214.066296][ C0] Kernel Offset: disabled [ 1214.070635][ C0] Rebooting in 86400 seconds..