last executing test programs: 6m55.485430195s ago: executing program 3 (id=4): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xffff19f5, 0x0, {}, {0x0}, 0x4, 0x7883}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@md0, r1, &(0x7f0000000080)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='f_=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x2b8bc2, 0x102) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xe, 0x4000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 6m54.73304578s ago: executing program 3 (id=7): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x60002016}) fcntl$setpipe(r0, 0x407, 0x10005) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 6m54.189071025s ago: executing program 3 (id=10): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 6m53.314109604s ago: executing program 32 (id=10): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 6m4.608812172s ago: executing program 5 (id=152): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x100, &(0x7f0000000240)=ANY=[@ANYBLOB="050f00010320100a0d79a6c8c440b4c905d32e211d2ef71d28d3cc3ea822855c1aa49322c703100bd81002f48b87e68ffdaa09448f7ad5dc769f016ed15c3667bb32437dd191a1bbf19bc50fe00fdb419f2c6e9c946f1cb501e3dbc8823927a25512727263c89bac2653802f23ce71e735131728db285cccdd79a13bdeb2ba937e33691c5074f01fed29383b4ee98739ea935c5dd1ad083af5d40a2eec9178106251e135e67af5e50878938c6f53045455da03664efdd216c2d06a8b51b997397647a3f09111294d0a43421e122d594ec9bda417e04cdb170ac13d80cb80b131eed59f9a00a75bbfeb93637e20611044b04c95133dd614"]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000380)='g', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @remote}, 0x14) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x130, 0x1c8, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220508928ea6cb03005cb413ea57d838389a7fec6df173bd0637"], 0x0}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) read$alg(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x3, &(0x7f0000000000)) 6m1.753265356s ago: executing program 5 (id=161): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001000ff05000000000000000009003c8004c937b184"], 0x1c}], 0x1}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000bc0)=@newtaction={0x950, 0x30, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{0x93c, 0x1, [@m_ife={0x110, 0x8, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0xd9, 0x6, "7a80e1d0a5306efdca07f783d4b599cd188ab930baa98d0f986a887d5f6d607513f1b22c24263b6bcf3fd3b68bdee41b554b658d25b305699e673d4d269df4790db875b7098917f62a2a79180018ea894b25d794fbabdaa80bd3b6e38b20af9fe026237841bfeedae805bc934b91de08b8ba99fffaa3c4e47b6a949d0f51ab000945b5859d53bf8a175104a95707294a22248246e83f67375a6ab597cf88fbeef86a3e07b87723dbf4f7941d1775c95f245a8e9f038bb23b6d951fc2ca1f519b694d012e2644d29553815d45bbfc660fe67e5047aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x148, 0x12, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x0, 0x100, 0xd3a}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1b, 0x3, 0xac28, 0x8001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xa7c, 0x6, 0x4, 0x400}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xe, 0x6, 0x3, 0x5}, 0x1}}]}, {0xa6, 0x6, "5d1566725ec4e7b50c43c7cec23ea79a073e3ded8597abb37949aa0d5f240a2f65fb11133f4638d3c7acbc2be753cb717c2c681d8e0924d4df0fffa3eff11c39f1c887919d29c292ef1bcf5b7c5557ecc4133266832024a557bdfa6aa92b51177f67b9522ebcfe3bbc573c2e4af53bba16745bb963bb541316367710aa28b3a2b4162a6ede4016bce26b50bf4762d8acaae5e42422e3ea36ce11c74accbd04450706"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xd4, 0x1, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x8, 0xc, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xed}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3ff, 0x20000000, 0x4, 0x800}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffff}]}, {0x40, 0x6, "2745f659a1958f1e38dfdd2e23b39359d4cd058e6f4fc95919ff0df5d05173d5e055c9ab1476b4d1db5afc0431c273019e67b7cf2de028f35419183d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x1b4, 0x13, 0x0, 0x0, {{0x7}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xe4, 0x6, {0x63, 'filter\x00', 0x1, 0x800, "3bdbb72d8a08d6a981ce973f83c2d6f8d7503b3d49ecb7759e15f2c2d73bbaa836e22669c0f508417cdb302c8789d5c3ac566252dbcb72186e302f24a1b5546b784ca2f2a6eaf62490f16bfa7d8a8420bec1f381c99b8a3f04e0fda738d373153fbc3039d2dc645d2c9d4f9dab62d7db499c95e725007a0c036a870a0415e4364d388118719ad9314a910323e734a51b63d1fb8a304b1e2467f67a3f16ffb55959e1cbf6c1368d1719a43082d48445bbc74d677d596df826c6c4"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x51, 0x6, {0x8, 'raw\x00', 0x0, 0x6, "bbdf91a53cb5857899b47ede2f6199dc83680abab82fa20d3c164a3957fd64acc1b601304ab48b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x31, 0x6, "2d3fa70a96f03475a1e4ed27b83dd1c97d898594f15b8680025f2ea0ca653da68bf80b8dc7ca826be6a2d94df8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x16c, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x95}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf65}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0xfd, 0x6, "68de832a02ceb26c5bc934fe3e40baf67937e3d6c11ec5a666f81c8db4a4b7eb4683288c83ed1ed8ee66aca72d99b699dd742e074c83be9ae3aae36f73c034bf46d046ebf1931f756885e394460f34f02533781423440e72c96841658046a4e55663683252518ed6be5e0314c0b8acb29b9a3fb0b12676f297e5e0021b266eca79297325c205daf59efcb325b6d3c7f9bcd7342a87d949ba21e53e3cbe0e6ff8aec05b08a6a69312629fa75914443dd0703e276e049561f2c7731197f7251f2a4b6435db70c282bb5a72da888132f614ad8c172798050e9500edba0718beec69f1a30dc7602b7d38901077e39fc88e34eea941eab20179bf14"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x140, 0x1e, 0x0, 0x0, {{0x7}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe4, 0x6, {0x4, 'nat\x00', 0x81, 0x8, "7124e180fcd17735a61ebcc93ed0cf36234b090a6c70ad7fa276a50588e923246cacd224fd6dfe2386c72fbaab86bc519182293b212f300b38a77852c686ab6858ccf9c385b73bef4571c1987749aca8709df30a7742906e25e77620cf37fbd9cdba51934ad229d4a66c19c63b2216190e6a39fa2e2d76a93c8410f0a3247710b95eccc240fab42c919dd2181ed7d18408d55f18a8ef50bbfdbb7b879ab9228c1b481cd38e5035d0ed6d5e1ef6a3f185e5f9c77b5f069d7730b3"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xe, 0x6, "57c0bca32d699c6818fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x98, 0x4, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1000}]}, {0x5a, 0x6, "4d8af0ec425fb5956653b356082b609e69287cb4c9d28a233635fa6b9c1812c90971a9ce0fbad9467c0c8fbbdc60c326828b65d47c97b1df6135b8417db210b4fb7d257b627d2b78c94fe2cec6c106d33adedf9d1f2f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x95cdbeba1499c877, 0x1}}}}, @m_skbmod={0x114, 0x5, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10001, 0x9d, 0x7, 0x40, 0x5}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x7, 0x7, 0x400, 0x31}, 0x7}}]}, {0x96, 0x6, "f98114a4202b8a5ca30e86b2238bbb6239dfa80e7e8bfc6ad877730d48489f7ff267713d0f41c80f48da3f81bafe176c1c53295fd8d2587af12942899b49a61d52e8f8da95a9851852fc6b8f7d990f9b80a74fedcb8417174b42b307e66b3097300b084b229c39c9855a24ed4fd70e22faa1ab429237d7fe86a17450effd27026aea18449882e17c7c0d986b77475dad7156"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x950}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffd64, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fed380930fa10a0076000600142603600e1208000f007f370301a8001600a40002400f000108035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409001459676439b7968520fe7c9f8775730d83a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0xc0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x149000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) close(r0) 6m1.022024274s ago: executing program 5 (id=162): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000200)=0xfffffdfa, 0x4) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102386, 0xffffffffffffff56}, {&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000280)=""/36, 0x24}], 0x3, 0x4, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x800000, 0x200000000000, 0xb4, 0xffffffffffeffffe, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000240)=ANY=[@ANYBLOB="00009f75020301090200"/25], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x51, 0x8002) openat$mixer(0xffffffffffffff9c, 0x0, 0x4400, 0x0) r1 = socket(0x1e, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x7fff, @local, 0x7fffc}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffffc}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e23, 0x40, @ipv4={'\x00', '\xff\xff', @remote}, 0x679b3a76}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000140)}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/467], 0x1d8}, 0x4000810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 5m59.484961982s ago: executing program 5 (id=163): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd29, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) dup(r1) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000001500)) rt_sigtimedwait(0x0, &(0x7f0000001580), &(0x7f00000005c0), 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = semget$private(0x0, 0x4000000009, 0x0) semop(r8, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) unshare(0x2040400) semtimedop(r8, &(0x7f00000000c0)=[{0x4, 0x40, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(r8, 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x7, 0x51, @rand_addr=' \x01\x00', @loopback={0x0, 0x460c6}, 0x7, 0x7, 0x1}}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r10, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50) 5m58.316462082s ago: executing program 5 (id=168): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020e000000000000000000000005000800e8000000041f6255dd400d223296421054f011855ace0800000047b5a703e12c5800000005000600000000000a00000000000000fe800000000000000000000000000000000000000000000002000100000000000000090000000000"], 0x70}, 0x1, 0x7}, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flock(0xffffffffffffffff, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000240), 0x6, 0x149103) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000080)=@multiplanar_overlay={0x2, 0xa, 0x4, 0x100, 0x0, {}, {0x1, 0x2, 0xd, 0x0, 0x9, 0xf7, "bf77f298"}, 0x1, 0x3, {&(0x7f0000000100)=[{0x10000, 0x6, {0x2e32}, 0x10000}, {0x7fffffff, 0x1f, {0xfffffffa}, 0x10001}]}, 0x1, 0x0, r6}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0xa41e, 0x1000) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x1, 0x3000, 0x2, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000080)={0x61, 0x3000, 0x2, r9}) r10 = socket$inet(0x2, 0xa, 0x5) setsockopt$inet_opts(r10, 0x0, 0x80040000, 0x0, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1, 0x3, 0x1, 0x0) 5m55.519852131s ago: executing program 5 (id=177): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc2141, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x8e95, 0x7f, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180080021000000000020000a80050008"], 0x68}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000c80)={{0x0, 0x7, 0x5, 0x81, 0x80000000, 0x5, 0x9, 0x1, 0x5, 0x101, 0x8, 0x7, 0x4, 0x9, 0x4}}) 5m38.687016281s ago: executing program 33 (id=177): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc2141, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x8e95, 0x7f, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180080021000000000020000a80050008"], 0x68}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000c80)={{0x0, 0x7, 0x5, 0x81, 0x80000000, 0x5, 0x9, 0x1, 0x5, 0x101, 0x8, 0x7, 0x4, 0x9, 0x4}}) 6.652194051s ago: executing program 4 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000280)=0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8001, 0x2, 0x7fffffff, 0x1, 0x3ff}, 0x9c) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x10, 0x5, 0x1, 0x84, @mcast1, @private2, 0x7800, 0x8, 0xfffffffb, 0xf838}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xf, &(0x7f00000003c0)={@loopback, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x46dbd66c8c585685}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000740)=""/1, 0x1}, {&(0x7f0000000780)=""/222, 0xde}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000980)=""/29, 0x1d}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x6, &(0x7f0000000b40)=""/252, 0xfc}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/8, 0x8}, {&(0x7f0000000c80)=""/92, 0x5c}, {&(0x7f0000000d00)=""/42, 0x2a}], 0x3, &(0x7f0000000d80)=""/118, 0x76}, 0x9}, {{&(0x7f0000000e00)=@hci, 0x80, &(0x7f0000002000)=[{&(0x7f0000000e80)=""/157, 0x9d}, {&(0x7f0000000f40)=""/156, 0x9c}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x3, &(0x7f0000002040)=""/200, 0xc8}, 0x4}, {{&(0x7f0000002140)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/15, 0xf}, {&(0x7f0000002200)=""/156, 0x9c}, {&(0x7f00000022c0)=""/64, 0x40}, {&(0x7f0000002300)=""/85, 0x55}, {&(0x7f0000002380)=""/48, 0x30}], 0x5, &(0x7f0000002440)=""/97, 0x61}, 0x2}], 0x4, 0x10000, &(0x7f00000025c0)={0x0, 0x3938700}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6.416976957s ago: executing program 4 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@fadd={0x58, 0x114, 0x6, {{0x6a, 0x2}, &(0x7f0000000000)=0x4, 0x0, 0x4000, 0x800, 0x8000000000000000, 0x10000, 0x10, 0x10001}}], 0x58, 0x40014}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xe}, {0x1, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}}, 0x20000000) socket$inet(0x2, 0x3, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r6, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x73, 0xff7ef001) 6.055614109s ago: executing program 4 (id=1638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00005b1000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00002000000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00005b1000/0x4000)=nil, 0x4000}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00002000000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) (async) 5.910922989s ago: executing program 4 (id=1639): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x41) 5.765086593s ago: executing program 2 (id=1641): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x64, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.706354021s ago: executing program 4 (id=1642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000000000000c0015000000000004000000dea6149caea377fca8fa9bb02a61d8ad91498cac0a3417f47980b671e0"], 0x48}}, 0x0) r1 = socket(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000400000000000000fd006a0000207a000e0095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usbip_server_init(0x1) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="bf2bc428e601ab594454ef510000000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x20000010) 5.615622511s ago: executing program 2 (id=1643): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) (fail_nth: 1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r4, &(0x7f0000000400)={0x8, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000019080)={0x1, [0x0]}, 0x0) lseek(r3, 0x0, 0x4) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e20005e8d545bfe264878000000000000000000e100000000000000000000000000000000000000c7dd00"/71], 0x110) r6 = syz_usb_connect$uac1(0x6, 0xf0, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x0, 0x80, 0x4b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0xa}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x5, 0x6, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x3, 0x3, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x4, 0x10, 0x0, 0x20, 0x81}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x1, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7, 0x9, "2c190809a204998a"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0xf, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0xc5, "3974dd7c0d59dc736c"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x5487, 0xff, "84"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x56, 0x1, 0x8, {0x7, 0x25, 0x1, 0x80, 0xc, 0xf65}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x81, 0x5, "8d", "f57328"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x80, 0x1, 0x3d, {0x7, 0x25, 0x1, 0x1, 0x9, 0x8001}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x64, 0x5, 0xe, 0xff, 0xf9}, 0x37, &(0x7f0000000040)={0x5, 0xf, 0x37, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0x0, 0x9, [0xc000, 0xff0f, 0xc0, 0xc000, 0xf, 0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x7f, 0x3, 0xc5ad, 0x6}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x340a}}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_ep_write(r6, 0x9, 0x3e, &(0x7f0000000240)="29446e3697ce7f8ed96a588cb4ad0f16d6eae6b3aad9ea46336f07f8122f28ff59566d791b459567c9d80a9b9016e1e249f95b79f49d9f4a86d6b149b5ba") io_setup(0xa, &(0x7f0000000080)=0x0) io_destroy(r7) io_destroy(r7) 4.029225911s ago: executing program 2 (id=1644): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x20181, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 3.955691265s ago: executing program 2 (id=1645): socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 3.589091485s ago: executing program 1 (id=1647): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff000000007110bf000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.475041755s ago: executing program 6 (id=1648): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="27050200d40f00000600002f88a89b1981a8", 0x12}], 0x1}, 0x4004844) 3.441538782s ago: executing program 4 (id=1649): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r2, 0x1, 0x3c, 0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x1000000}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1, 0x700}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}}, 0x0) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r9 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x9}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000800)={'sit0\x00', r7, 0x7, 0x7800, 0x10000, 0x4000, {{0x6, 0x4, 0x2, 0x23, 0x18, 0x67, 0x0, 0x64, 0x29, 0x0, @multicast1, @remote, {[@end]}}}}}) sendmmsg$inet6(r3, &(0x7f0000003ac0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="c63f1ebd373771a6c3fd276a6877e24c7a7c72a9dbe261296ba9a0265168acb03134a3b753caeea2303d3f4b712d901416b5372d90f3947cc31a991dcbb9629513e7146b9ebb02cde19511182a5c9426689f250b3b1a81f3a2389668772562720c80", 0x62}, {&(0x7f0000000140)="b6668121ffb940796a78cb09bd", 0xd}], 0x2}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x200, @mcast1, 0xfffffc01}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000400)="d0b08ec613ee28e57d460f67d81f60bf1b735a141114c20a39bcf7256192f3ef54435a5128a8a37dc342c57c0799ff7e1411f6e2bdcb03abc6ee1ed8428734bcbdfc7d90b4722c9637e5bb7e5da6e3961b823e0da9c0d883aba72de3a671f7b053578da9208e168037c27153954145fd9b06cb6b62c6a85814d114148522f2629be8203a6a297cb00d59a9c4b0afab4192bbe872aaa02db4e3629ce6f8be216ce067498dc619076b4840d695a35aa124fcce317342091682db5315afb6ccd77418cb30f78570bfb7682c65c38b5526", 0xcf}, {&(0x7f0000000500)="b16d7243ae1f1b1c0f2eb093967afc3f3e97e7f0c435e8ca5298e1c1688b9c8b5107908280ab7627759a4a94504dec20e810f6054ef8fa6969626a7f9bfc9d8e41929940e65111f8d12306dd0ae7", 0x4e}, {&(0x7f0000000600)="0db2b14175450ecb7ab9b22295d2dd124709e33a7cd4e474835eb7821b0e3999165c9c9968413546fec16059d83750af6b3d84a69af936d63d9c35a0bc8c5bb4db279e22a84b1a2b7fe11b91d2bcbc7a0eaff6ed2a09cf8c2a8176237128c174af3189589066cdc8010ed3bf34d9b457e1845e60cd68238d40fbc7ac4f1d1b01a1a362fd2d68e3c9238a56deffbf177e3113c9f4f9219bfff743f123937de436c69ae92aea6a1069fc117d0bf6324f03a29e486ee722d1a4481006d1998f58311397dded4e466c84bbdee2c739324f092c39172d", 0xd4}, {&(0x7f0000000700)="f7e3adf7779fb92c7fe684549c19c942e1d8305e7b64b98bdbebded79b5f1024c6fe88d21fc108d8a8c3853c787cba881d3495125d9399c5203b8ed4b1fbb6be794346c27003f694ec79bc6841eaca03dad79b474b98c3ca60", 0x59}, {&(0x7f0000000580)="5ed7c29c872db27c2f2989c616c35a656923c0089eae5dfc65433f8d11d50be51600"/43, 0x2b}], 0x5, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x34}, r11}}}], 0x58}}, {{&(0x7f0000000900)={0xa, 0x4e22, 0x37, @local}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000980)="c1f09ad6776ddef198a407d2942fe983605b9d8f048c75e85153afb89b0fb9461b07335b9499c9b6cec72c8d5ad2d75d072b520a99c508575a05af4e0c8e479c7dfc3c13b812409d256bec9437b8acda56f0982359412bfef2ac4e79cdb8ca58b00340b77b1bb32ba48c68e3ac2504f42378325fef6a30bdf840346addc3285e1886f0cf4895e152ab4b469b03711c3500ce149d7654c583676be31bc7cde0c2", 0xa0}, {&(0x7f0000000a40)="4aeecf88613e1f869bea2386375049842432c30015a88b2654c2efd05c7096ac5454fb48bd700b5bfa16800df88122e5d4a80c848033c2de39b95c36330ecb2ce8629fce0c911ca30b647f551a6e3eb0f2fbb47a06ddd258ff0fbf20adf0993a3ba412434e328c60e39958a4b03bab1a844188d6db0315affd04e3328b21a9ca84b1d530bef857254848f340cdddf9f482a2001d8595b18f66bfaadc04961e59568af3bdeb05517c4e08390e2e20d19856ddfbf418cd83e7504ec39397b82e8bf8337d082a87c5cb0f81a5608ddeed7cbd710339e7c1b7e9fb7c72453f82f72a2d16ade37404bbb0376072afa21a80c8db9a4b70b8eef296df", 0xf9}, {&(0x7f0000000b40)="067f2b2deb5f12dcf235e39b0da48ee4a41ce7fa1d2bf66d37bf3b1442cbd1934d283bf3df8975028d267d970c6adafd7312c40a5dc02347dc81f1ff947d35243f72b55805532db28f0a76525b6a10a04287bec0c49a8542b9f3707a6bddc1a8007cea2459c7907cea9b5fd98b565d80c06d1ae365f73701d887bb7b1e7de2a83d3e7eed5940c0aec5fa07f657dc566da0573ca247c57c6a86b5b49f899cc0be1c80a28bc53385539aff950037073b87ab4bd8a1d09ae2e25828556cf0bcf2d9cf1ebaa810c3bcec8cbcd5557b803747f4f3", 0xd2}, {&(0x7f0000000c40)="84a9665a7d367e661f3feb7b94124810563aba08aeed4443ceb3594f3a9e993cc74b4054cf4c6bd501c4f21e053e79b30abdc6a80f2d9f579480eddae99523da87ce980ba829f6184e862d8b11ce9f835d68c56fe695a85c9f7538df2212c3271ec167cfc5b6c65a9be249ba33fbcd5be875cf933816f9039353f3a176f328c88d0305996b240d8753ce5918b119fbed", 0x90}, {&(0x7f0000000d00)="81d8790c648e63f9f84a000e561dc7a62476c2b39b7a26b9f1571a6f376140f471e3e3b5919e8adb2a6024529665c440e187d840afb3128a7b6c842504e79389fca259c00408f2da2c5a3194877aae8b316d58940ff628e97845861446e2dd3115e58938054861a3157a393fe9999a97f0a26cd3595fb3c3689dbdda6e65b5675eb2a37ec65a5f08c9758994eb1173c04fb93d5304edaa59666bc52b8cb7b00a0b8ff60212f6d4d630fe37ad727be2f3b7180a2bd5922ba260578210820435b599936a92de0e25fcc582241a107872c6e3c9ad229b33ad0f47aef087b1902d2f37b77e9349e87f", 0xe7}, {&(0x7f0000000e00)="c1df2e9e635a64e6bfa7ecd0d89feb4f3a72b2e1350be6fd97fa37a80defef0acc9e35a5015aa6bcedbcd83522cf21343ee098cb2055cca20ece1d76779accb56177305aa81c7663e37732c7c3ca4ee0b829a6c418544b58da34abc05454113a2c49bf8a294c7c6c1cc49dc5b0f357167f8b5b18f699279046e3eb6c76e9569328eb0c7ee3b6b8d160a8b5e8f19ee19468927faa4760", 0x96}, {&(0x7f0000000ec0)="c4afb0cc531ba54004a0ebd03b1d13512c1b87187c896b004ec870650ebfe4b9755b3f7556a43f0d96c56f9a093360fce7bf05d0a4f5eba748712e686eaf8c6e86ab0dd92095b71512952c6a8f33cf11d1b119faa191d7cb35704b337a74d10df1f0f003f97b1db0b47acf966ba9ebc13b59f2f7add5aa2b42cc0888f97d3f6d8d3ff7780196039ec0a03df304aa695affc0a68fa2974ca9", 0x98}, {&(0x7f0000000f80)="c7131ecddaae24a7fad9787bcf212a53fe1c2327", 0x14}, {&(0x7f0000000fc0)="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", 0x1000}], 0x9}}, {{&(0x7f0000002080)={0xa, 0x4e22, 0x9, @loopback}, 0x1c, &(0x7f0000002200)=[{&(0x7f00000020c0)="acb19386ffb6300ccb8719275ca3b9d01c76356b5c1bf62233ab97ae", 0x1c}, {&(0x7f0000002100)="969c25ed845eb883bb9f9af8a67120d28f8c5e2014ccdd14d4de8aea7b084e556ff49b8a4790415ce8ee0fc8d2d726b86b4528", 0x33}, {&(0x7f0000002140)="46747f4e3543a0f7f0392cc93d80570bf825cd0ad5dd3a839681c39d821b31d2863db5d3056e28572b00ec68726cf5bea0e56dfdd84ba108671ba13348cc9fb82f6f72d891be717fc886681ce749979c85cc9003db47175a33f4541c576b7187dfa16dc2f7129dfec5fea70a71e63b87f0da1dd9b1c8ee2f754d41874a90e06087d308334a", 0x85}], 0x3}}, {{&(0x7f0000002240)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x55}, 0x1c, &(0x7f0000003280)=[{&(0x7f0000002280)="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", 0x1000}], 0x1, &(0x7f00000032c0)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x89, 0x8, 0x2, 0xb, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @mcast2]}}}, @dontfrag={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x32, 0x2, 0x0, 0x1, 0x0, [@mcast2]}}}], 0x98}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003380)="9e071b6703e7d748d7e155c7d292435d521f8a5dda8a24ccd1bb846204ae174373a3439ad18456b69e2f26d7fa062fc5dc7560e68c88e906674593eea193c5c0edd0fcf4a7e818b8f08b1ad177b1967b34e7feeb010585bdb97c28cbde4f3e3a", 0x60}, {&(0x7f0000003400)}], 0x2, &(0x7f0000003480)=[@rthdrdstopts={{0x190, 0x29, 0x37, {0x33, 0x2e, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0xfa, 0xf3, "23affe003d7e60ac15ad86a098a551596bf964c90134229944ad3fbad68a4e3477e98d4ec52e137788555d82c8d4d4553c5675bfd7b97133874c45f45114e52b49f2541238b2d1f27b5e63de93966e51027dabeb6c13d22c42c4f349774f66984f6c8a9b90a326dd31391c64ef84602e60963e4c87befaa97489282dacedc18565932421e1819f91749bb0da03647224181eb8a37e71f3110664e0698c457ea03c290b44a46b859a6932d42c6de453ebe17c47d12c9baf3791a4dae8b474f40340175e0fd345c711bef34544cb8d84a7cff0c57f76f0e159b34d4b501bd36c92f3ade5dafeb79d33874422abb9f9f89ebe3ba0"}, @pad1, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x50, {0x0, 0x12, 0x5, 0x7fff, [0x3, 0x7f, 0x9, 0x9b28, 0x0, 0xd5d, 0x9, 0x2, 0x8]}}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe34}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r11}}}, @rthdr={{0x98, 0x29, 0x39, {0x33, 0x10, 0x1, 0x9, 0x0, [@private1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3c}, @empty, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast2]}}}], 0x268}}, {{&(0x7f0000003700)={0xa, 0x4e20, 0xffffffff, @mcast2, 0xb3}, 0x1c, &(0x7f0000003a40)=[{&(0x7f0000003740)="b0e9d605e64fde4538c4b52521706dfd174dbf68f77512a92f8fcd9addf3c830fc252da5e2a5ffd5500005645b9128585416de2f1bfea6b601af435576ad24875b8cbcbba40215a03f737ea6a2d1aefc82dda80811b4286839927a322e0f177ef2d115cf93d7374d149686ea9ca00a035ececa8abe5530248bf9c0bfc00277013828a9343d8194124f6a366b1c3e6cfa7d1d181de5", 0x95}, {&(0x7f0000003800)="cd0f0105d441c39f3599760dbc3c6cf77257ac50df470ede5a1065d5bddc656f6cfde9fb0fc4d499f2927ec12cd524b06820956713d40ca2d212f41e17806fe92221144cdf569bcb4149f3fd4a2a8224af0ad1d6ef43c8eec5f4d0c1e1c757", 0x5f}, {&(0x7f0000003c80)="9a5cbadea312dc47eeb7902ef8e3747f697ecaee6c04bede96c4c66cb572695aa537c5b2e409adf25023da1b8e3061d30d3e8eeffa2d1065b2722483e228e195a570eaf6fb5b2c8184c28306e023fdd3dbdf05ad3ec861434130afa8422dff4f46c36eb38fa2", 0x66}, {&(0x7f0000003900)="368cb983192eb9086a1387c365ca42ede83c25cae533ee953d87d0274f250987c3835d146cc49cd49c5ef1a7658fcef5b143aefa2b1a95257a9130b9e35ef2402ab3894d070903486a34397ba428ea5ad69373d5ce965e084b555ce8232bbd03dbb6a32ce949ca070659b86876c9ceba7c092374de5b4ad791130d463e3196d7d45ec84e7eada995a9f9d10593a9a9b5d6fe483810cfcac77fa0215e1e7d0f6377af67a706260062e7", 0xa9}, {&(0x7f00000039c0)="b2c8c99f6e9fea2159a022210a03207c8aa7c811ebeabd3ac54e026809573291506a14cd29a3821fad9523f024c4b8c1a48583e0e179ba2cad329a28a6e1c3b6dd5a5fb0845acf3d1205bda321d88043efb2374827808ded7af2b4746734dcb0a7f0012ea0ab9f62b2a8fc54e65edcb7bf8af7", 0x73}], 0x5}}], 0x7, 0x0) 3.244551495s ago: executing program 1 (id=1651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r7, 0x0, 0x725e65a6, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() 3.236194409s ago: executing program 6 (id=1652): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$sequencer(r0, 0x0, 0x0) 2.565013636s ago: executing program 6 (id=1653): r0 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000140)=""/198, 0xc6}, {&(0x7f0000000280)=""/79, 0x4f}], 0x3, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/33, 0x21}, {&(0x7f00000005c0)=""/225, 0xe1}], 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_io_uring_setup(0x818, &(0x7f0000000780)={0x0, 0xe295, 0x4000, 0x2, 0x2c1}, &(0x7f0000000700), &(0x7f0000000800)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000008, 0x4000010, r2, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x9e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x2, 0x7, 0x8001}}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x6, 0x4) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r4, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)="db01", 0x2}, {0x0, 0x300}], 0x2}}], 0x1, 0x801) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000a00)={'sit0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x26, 0x40009, 0x0, 0x401, 0x2, 0x0, 0x8, 0xfe, 0x1, 0x9, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x48, [0xfff, 0x2]}}) 2.085137644s ago: executing program 0 (id=1655): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 1.990102015s ago: executing program 1 (id=1656): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x80000) sendmmsg$unix(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="b5bfa1a57012502c23fd8fc1516e5a87cf2946305dcb75f81dfc68978a0bb0f04c4888cedada9aa0c4deb0252f39fb9416cd81af07fdc3fc8b7e4172d69e68e0d990125e1cf48a85bd3faa31538404a711a585e4566c7b9c708ed495d446e742d9c35c045dc6909fbec07552dc73acc0d5c36f70a09a13e7526343bdd14d7515bbe665a7a57c1a77090ec34abf014b7c1be8d8dfc5828288b242bbb4917f75dc58f19ef151ee2cdae51d56e10c58f6db4be81a01a14aa6061702a4e4a3ce3a8f1fbcd1b91b93ac67464f2d7236bd93603940f8234015ef6db012f3b3bbf6d3aca66a0cafdcfd0bc61b18f3", 0xeb}, {&(0x7f0000000340)="e4d4a43cfbe315b9ea247f4d658ecb04bb8f3c9a7162f7e5829b7b10049922543695a0052ec04cd00c7933e448f1c92b49b04635e21bb376346a4883823af3d0fb03b1ee2dcf05df8844a853ed8c067358bb6561f1996b13d876309e681a4a560935ccff681a675512a41bb8ac2bf71cbe21d46581523bcd1a5d8115cacf087c4b013175a2f781b8ce6c524906f10a55acca7640df4422d59ce7f5a3d0798cbb1702b32888031e5adb96ebe67bcea2d9116f2336aa06ed631cd127bdd3a71193acb8a154f1cdc1ae9ab91422967088b9593440696fd1d7e32e0f74fab9c51b", 0xdf}, {&(0x7f0000000440)="6e7e5dcd0489acdfc44fe125dac18b74889710e9528bb2a7d92ebcc3fe661dc940006088e9e233988cacdb2783b5ddd0be84ec5feafe68b669581c6d63908ec40622d4a6ba5c37cfb0fc5bc381d839ee725a39db966de7dfee05be5816f7d52d71bb790b1bbe760ae37645d9e957ffe74f84eebfb14eac4c455e7e4fd409af4977f8", 0x82}, {&(0x7f00000001c0)="7112d50ad41e24cb8e42bff56da5d8", 0xf}, {&(0x7f0000000500)="35a1ab7afd9952a38d4a1a96df1db0c6375ae9ac54dab86d9849ba437cd21b58934b036f352b05e9c298f8f0e642e5d127663616a718f59cf192c687a4f7a8df98d59617cf53a6802314a81b017369ff8c5ffc53a7edf8d6867cfd594f93524d59798a7572e334792ff7afda106bebca8173b7b78a129122ef69d426024a1e00b5ee", 0x82}, {&(0x7f00000005c0)="27253da75c6176d56cd51365ea95e34e43734375bbdef2b17615bc18b5e38ee880799029b8d9858da9910580b80e3cbf3b9e20ae81d7dcef3a66c47d1ede6f91801439732f6b7e79f186db98f1e2b8794fe9a47c987d6b560827849223d76992b8cd2ca3234a6804789c732b9aaaec4a538f98ece3e95a589f920c8ee50f6e40780223e3c5232ef1a93a31b519ea9c4429e303eac22d364955521a0ebbdd24a0", 0xa0}, {&(0x7f0000000680)="1e87778a495b5a6000e7398f76a984c14f2489925bfa1a5c02c6cf5061fe212b68f0fbe1effa0a4dfb5182c10fec11c7558996fb56ce8ec781a229cb5b2439f908fb1ef4da0762bea0a2807c7fc890fff070d7f3fce608d3bf25443144462a93d518f1d7445d25b5ec9b6a553c7a389460dd0767643988a63b22be3cf5e1ef2be4caacabb46011cfd13b4c5316a1d9aed09228ab5d70d8a1797a71d358cc70208e2ddfa5e079e64688ccff0449520c88c10b3f54d105a32eb5c6ae", 0xbb}, {&(0x7f0000000740)="6cb3e47cf80654383bbf113efffeec47969eeb280faa5203e052dd84b61850dae2549e0eb79015b4d661bd8a40d2ef19b2f0963dfeffc55f901a20bad843b23bff1175a63c385107cb5dfd8501b60df824bd0aa275363c9708a7a55e6688637f59cd38478543a1cc0def67d6e5f31bef40e020d696d30ea77c3fefa6cb7f5b62909e12701f75180695c6216b4f7ea51491d143c23f9ac7f65ff509a311b6a785b15298e960be35e2b73039f63ceb4939e21b269ca096ceed3cbd8b82b339a9e2fb5ca909f909dbcd3914063775662aedb876a7e123fb3e06ae6a485cb0bf374b", 0xe0}], 0x8, 0x0, 0x0, 0x40}}], 0x1, 0x40040) 1.969122801s ago: executing program 0 (id=1657): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x490882, 0x6, 0x30}, 0x18) write$cgroup_int(r1, &(0x7f0000000100)=0x8, 0x12) 1.729001847s ago: executing program 0 (id=1658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x20) 1.569754856s ago: executing program 1 (id=1659): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async, rerun: 32) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) (async, rerun: 32) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) (async) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket(0x29, 0x3, 0x10001) (async, rerun: 64) r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'caif0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) (rerun: 32) fallocate(r2, 0x2, 0x3, 0x80000004) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50) (async) socket$key(0xf, 0x3, 0x2) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000340)={{0xf}, 0x0, 0x0, 0xcf, {0x8, 0x80}, 0x1e, 0x7}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x0, 0x80, 0xff, 0xa}]}) 1.374639495s ago: executing program 1 (id=1660): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x8, 0x1d45, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400003, 0x51) writev(r3, &(0x7f0000000280)=[{&(0x7f00000049c0)="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", 0x1001}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80}, {}, {0x0, 0x0, 0x2000000000}, 0xffffffff}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close(r1) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) listen(0xffffffffffffffff, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r11, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.124572043s ago: executing program 0 (id=1661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0x57c68000) r1 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x2402) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x8, @vbi={0x4, 0x9, 0x4, 0x71746a73, [0x3, 0x7], [0x2, 0x9], 0x2}}) syz_usb_connect(0x3, 0x146, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002a4b4b708b40402005ce2010203010902340102050930020904340a0395f125000a2401060052020102052404040907240501c3451d072408039c0d0109050a0808000008f809050e01ff03030208090505"], 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x67fe3c50e7bdeb94, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}, {@blksize}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@obj_user={'obj_user', 0x3d, '/dev/vcs#\x00'}}]}}, 0x0, 0x0, &(0x7f0000000400)="7a9daef0caa60c4b77e19255493fe542c794ab16aa9042a0eb2e668f212e320bad790ee015c1956d42d9c5131e98513376542543e92c38e49f99fc21a0f9e96111b1a7fe13d3d805e2016024f3f791895758b94339c59776c1f62de2b63bb157a4564f5531f15af19606d301b361b9ce2d62d4a9bc1d91230ae0316eb5d821afa7521c") open_tree(r2, &(0x7f00000004c0)='./file0\x00', 0x80000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r6, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x16, {{0x1, 0x0, 0x4, 0x5, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0x100000008, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x0, r6, 0xee01, 0xfffffff9, 0x4}}, {0x0, 0x2}}}, 0x0, 0x0}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0xfe0, 0x208c80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x14, 0x43, 0x101, 0x70bd2d, 0x25dfdbfb, {0xa}}, 0x14}}, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r3, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) 1.023725519s ago: executing program 2 (id=1662): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="27050200d40f00000600002f88a89b1981a8", 0x12}], 0x1}, 0x4004844) 826.153634ms ago: executing program 2 (id=1663): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2b, 0x801, 0x0) splice(r2, 0x0, r1, 0x0, 0x39000, 0x9) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x5, &(0x7f0000000080)=[{0x2, 0x3, 0x6, 0x3}, {0x3ff, 0x13, 0x6, 0x777}, {0x7, 0xff, 0x12, 0x9}, {0x0, 0x0, 0x4}, {0x3a, 0x4, 0xc, 0x407}]}) brk(0x689d80000000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="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", 0x999) recvmmsg(r3, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000004c0)="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", 0x2d0}], 0x1, 0x0, 0x0, 0x20004005}}], 0x1, 0x40000) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) r6 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) lseek(r6, 0x8000000, 0x2) 497.072712ms ago: executing program 6 (id=1664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @loopback}, 0x224, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='hsr0\x00', 0x4, 0x5, 0xf}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000cf48b2900000000020000000000a010800000000000000000a0001000000000000797a310000000034000000140a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0xb0}}, 0x0) 448.083192ms ago: executing program 6 (id=1665): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 383.806587ms ago: executing program 6 (id=1666): r0 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x15, 0x20000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x4, 0x2009, 0x1}) add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000006c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x3, '\x00', @p_u8=&(0x7f0000000280)=0x3}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xf}}, 0xfffffff7, 0x200, 0x0, 0x126, 0xbc0}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000500)) syz_open_dev$media(&(0x7f0000000240), 0x2, 0x60c580) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x48005) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r6, 0xc1e}, &(0x7f00000005c0)=0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x20, @loopback}, 0x1c) 129.019863ms ago: executing program 0 (id=1667): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 17.507727ms ago: executing program 0 (id=1668): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) read$dsp(r5, &(0x7f0000000300)=""/79, 0x4f) 0s ago: executing program 1 (id=1669): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setitimer(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f000000010000007921c107ecb97f8d50357a8e1a9e"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x56d, 0x2, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x30, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008051}, 0x400c0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000b80)="648678210790aef789014d2950e053689eccf789ca22d52f003429a35ee198865ddbc79fdf08b2803880dca70ebfbb08514bb5107c999f3c3ec9cdd8bfa6d977863f4278649f9b9433d8879fd6c523b4817ff160"}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000000000000000000000000001a95f5eb0ef4d32f53844aaec2e5e148cd7b29de90a402f362dc76e896dfb17e6ba412d773e86a8a0ae58b8e3190b90c0eda81e118551d96bd386d8ec2daa26af1a42c769418e7340c3fa1a42da7e202abf0c5446041fba1939ed0ab194eabf9966d05b7be12c2b159f46ac2f461e588f6e61fed1a9d8f3fb1be65a2ae3"], 0x48}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000007000100000000fe000000000000dfff00000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/243, 0xf3) r6 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20004, 0x3}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x20, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000010000104fcffedff0000000000000000", @ANYRES32=r1, @ANYBLOB="0025000000000000340012800b000100697036746e6c00002400028006000f000300000008000700f5ffffff06001000020000000800070002000000"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socket$qrtr(0x2a, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) kernel console output (not intermixed with test programs): ' registered. [ 363.457539][ T3582] usb 7-1: USB disconnect, device number 11 [ 363.684665][ T9787] loop8: detected capacity change from 0 to 7 [ 363.747112][ T9787] Dev loop8: unable to read RDB block 7 [ 363.758616][ T5926] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 363.785554][ T9787] loop8: unable to read partition table [ 363.807189][ T9787] loop8: partition table beyond EOD, truncated [ 363.836117][ T9787] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 364.138353][ T5928] IPVS: starting estimator thread 0... [ 364.258195][ T9792] IPVS: using max 36 ests per chain, 86400 per kthread [ 364.588602][ T9797] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 364.957626][ T9801] fuse: Bad value for 'fd' [ 366.312766][ T9813] openvswitch: netlink: Duplicate or invalid key (type 0). [ 366.327109][ T9813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.138156][ T5928] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 367.401937][ T5928] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 367.497697][ T5928] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 367.601552][ T5928] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 367.690673][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.787636][ T9821] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1079'. [ 368.086748][ T9819] kAFS: unable to lookup cell '.,' [ 368.417365][ T5928] usb 7-1: USB disconnect, device number 12 [ 369.280409][ T9833] C: renamed from team_slave_0 (while UP) [ 369.319739][ T9833] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1082'. [ 369.661144][ T9838] fuse: Bad value for 'fd' [ 369.680318][ T9837] futex_wake_op: syz.1.1085 tries to shift op by 32; fix this program [ 370.146570][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 370.178103][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 370.211867][ T9846] capability: warning: `syz.1.1087' uses deprecated v2 capabilities in a way that may be insecure [ 370.401946][ T9849] openvswitch: netlink: Duplicate or invalid key (type 0). [ 370.428334][ T9849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.889500][ T9883] fuse: Bad value for 'fd' [ 374.337087][ T9897] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1101'. [ 374.583468][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.899405][ T9902] batadv_slave_0: entered promiscuous mode [ 375.716765][ T9913] program syz.0.1104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.996570][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 376.045286][ T9915] bridge1: entered promiscuous mode [ 376.428080][ T5928] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 376.624569][ T5928] usb 7-1: unable to get BOS descriptor or descriptor too short [ 376.633850][ T5928] usb 7-1: no configurations [ 376.648157][ T5928] usb 7-1: can't read configurations, error -22 [ 377.174658][ T9925] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1107'. [ 377.283458][ T9927] fuse: Bad value for 'fd' [ 377.368816][ T9929] loop8: detected capacity change from 0 to 7 [ 377.423244][ T9929] Dev loop8: unable to read RDB block 7 [ 377.429830][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 377.523993][ T9929] loop8: unable to read partition table [ 377.537807][ T9929] loop8: partition table beyond EOD, truncated [ 377.547400][ T9929] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 377.772716][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 377.787500][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.893760][ T10] usb 3-1: config 0 descriptor?? [ 377.984688][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 378.762669][ T10] gspca_sn9c20x: Write register 1001 failed -110 [ 378.794069][ T10] gspca_sn9c20x: Device initialization failed [ 378.816398][ T10] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 380.138073][ T5928] usb 3-1: USB disconnect, device number 14 [ 382.401447][ T9969] fuse: Bad value for 'fd' [ 382.422395][ T9967] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[9967] [ 383.024983][ T9982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.295352][ T9985] x_tables: duplicate underflow at hook 2 [ 383.847396][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.853904][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.184200][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.194043][ T5912] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 384.200741][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.218248][ T9996] loop8: detected capacity change from 0 to 7 [ 384.235793][ T6068] Dev loop8: unable to read RDB block 7 [ 384.242725][ T6068] loop8: unable to read partition table [ 384.259686][ T6068] loop8: partition table beyond EOD, truncated [ 384.296326][ T9996] Dev loop8: unable to read RDB block 7 [ 384.302380][ T9996] loop8: unable to read partition table [ 384.311506][ T9996] loop8: partition table beyond EOD, truncated [ 384.318978][ T9996] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 384.388208][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 384.421645][ T5912] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 384.438839][ T5912] usb 7-1: config 0 has no interface number 0 [ 384.476090][ T5912] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 384.568066][ T5912] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 384.593474][ T5912] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 384.615312][ T5912] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 384.666208][ T5912] usb 7-1: Product: syz [ 384.670999][ T5912] usb 7-1: Manufacturer: syz [ 384.675861][ T5912] usb 7-1: SerialNumber: syz [ 384.692188][ T5912] usb 7-1: config 0 descriptor?? [ 384.706052][ T5912] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 384.825366][ T5912] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 384.967367][ T5912] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 384.982890][ T5912] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 384.998747][ T5912] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 385.117636][ T5912] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 385.133742][ T5912] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 385.183562][ T5912] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 385.219600][ T5912] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 385.391111][ T5912] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 385.612821][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.645431][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.027444][ T5912] usb 7-1: USB disconnect, device number 15 [ 387.124559][ T5912] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 387.186427][ T5912] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 387.256383][ T5912] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 387.379478][ T5912] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 387.446714][ T5912] keyspan 7-1:0.107: device disconnected [ 387.775856][T10025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1136'. [ 388.405555][ T5912] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 388.438423][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.514311][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.547064][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.598430][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 388.617479][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.745391][ T5912] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 388.777316][ T5912] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 388.888122][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 388.938528][ T5912] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.961668][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.083918][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.130656][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.228987][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 389.276991][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.315728][ T10] usb 5-1: config 0 descriptor?? [ 389.467136][T10027] kAFS: unable to lookup cell '.,' [ 389.875822][ T10] corsair-psu 0003:1B1C:1C03.0009: unbalanced collection at end of report description [ 390.296744][ T10] corsair-psu 0003:1B1C:1C03.0009: probe with driver corsair-psu failed with error -22 [ 390.602876][ T10] usb 5-1: USB disconnect, device number 24 [ 391.408190][ T5928] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 391.656522][ T5928] usb 3-1: config 0 has no interfaces? [ 391.734761][ T5928] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 391.834588][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.941287][ T5928] usb 3-1: Product: syz [ 391.997748][ T5928] usb 3-1: Manufacturer: syz [ 392.107602][ T5928] usb 3-1: SerialNumber: syz [ 392.139007][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.168795][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.226865][ T10] usb 7-1: USB disconnect, device number 16 [ 392.227473][ T5928] usb 3-1: config 0 descriptor?? [ 392.523630][T10065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.994343][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.060486][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.124291][T10085] fuse: Unknown parameter ''0x0000000000000005' [ 393.946729][T10102] loop8: detected capacity change from 0 to 7 [ 394.078849][ T6068] Dev loop8: unable to read RDB block 7 [ 394.093241][ T6068] loop8: unable to read partition table [ 394.102553][ T6068] loop8: partition table beyond EOD, truncated [ 394.148322][T10102] Dev loop8: unable to read RDB block 7 [ 394.154181][T10102] loop8: unable to read partition table [ 394.182607][T10102] loop8: partition table beyond EOD, truncated [ 394.198125][T10102] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 394.669632][T10110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.681948][T10110] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20002 [ 394.977456][T10114] futex_wake_op: syz.1.1162 tries to shift op by 32; fix this program [ 395.310947][T10121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.440572][ T5927] usb 3-1: USB disconnect, device number 15 [ 396.748112][ T5928] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 397.048162][ T5928] usb 7-1: Using ep0 maxpacket: 32 [ 397.068558][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.116085][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.159319][ T5928] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 397.228828][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.371604][ T5928] usb 7-1: config 0 descriptor?? [ 398.841709][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1174'. [ 399.205600][ T5928] usbhid 7-1:0.0: can't add hid device: -71 [ 399.266230][ T5928] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 399.528528][ T5928] usb 7-1: USB disconnect, device number 17 [ 399.691121][T10171] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.434061][T10189] batadv_slave_1: entered promiscuous mode [ 400.453752][T10189] batadv_slave_1: left promiscuous mode [ 400.470995][ T5890] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 400.555554][T10191] netlink: 'syz.4.1182': attribute type 6 has an invalid length. [ 400.648226][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 400.681386][ T5890] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 400.724780][ T5890] usb 2-1: config 0 has no interface number 0 [ 400.757791][ T5890] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 400.781064][ T5890] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 400.822076][ T5890] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 400.852770][ T5890] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 400.887192][ T5890] usb 2-1: Product: syz [ 400.902575][ T5890] usb 2-1: Manufacturer: syz [ 400.925970][ T5890] usb 2-1: SerialNumber: syz [ 400.957469][ T5890] usb 2-1: config 0 descriptor?? [ 400.974351][ T5890] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 401.793917][ T5890] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 401.817513][ T5890] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 401.848635][ T5890] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 401.883713][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.893187][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.910316][ T5890] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 401.947410][ T5890] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 401.959805][T10210] futex_wake_op: syz.4.1185 tries to shift op by 32; fix this program [ 401.976321][ T5890] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 402.030820][ T5890] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 402.065576][ T5890] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 402.135803][ T5890] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 402.221889][ T5890] usb 2-1: USB disconnect, device number 21 [ 402.289777][ T5890] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 402.359588][T10214] loop8: detected capacity change from 0 to 7 [ 402.366365][ T5890] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 402.409449][T10214] Dev loop8: unable to read RDB block 7 [ 402.438474][ T5890] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 402.451387][T10214] loop8: unable to read partition table [ 402.476802][T10214] loop8: partition table beyond EOD, truncated [ 402.544882][ T5890] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 402.555520][T10214] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 402.609370][ T5890] keyspan 2-1:0.107: device disconnected [ 403.261584][T10248] loop8: detected capacity change from 0 to 7 [ 403.317491][T10248] Dev loop8: unable to read RDB block 7 [ 403.349024][T10248] loop8: unable to read partition table [ 403.363631][T10248] loop8: partition table beyond EOD, truncated [ 403.369825][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1190'. [ 403.418096][T10248] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 403.625261][T10260] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1193'. [ 403.737236][T10265] trusted_key: encrypted_key: insufficient parameters specified [ 404.048761][ T5912] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 404.221951][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 404.272180][ T5912] usb 2-1: config 0 has no interfaces? [ 404.285867][ T5912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 404.360427][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 404.405738][T10272] futex_wake_op: syz.2.1196 tries to shift op by 32; fix this program [ 404.407638][ T5912] usb 2-1: SerialNumber: syz [ 404.587530][ T5912] usb 2-1: config 0 descriptor?? [ 404.845151][T10238] tipc: Subscription rejected, illegal request [ 404.888208][ T5890] usb 2-1: USB disconnect, device number 22 [ 405.673753][T10288] : entered promiscuous mode [ 406.274159][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.393294][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.650606][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1206'. [ 408.166955][T10320] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 408.166955][T10320] The task syz.0.1207 (10320) triggered the difference, watch for misbehavior. [ 408.579208][T10326] futex_wake_op: syz.1.1208 tries to shift op by 32; fix this program [ 409.289963][T10337] FAULT_INJECTION: forcing a failure. [ 409.289963][T10337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.343890][T10337] CPU: 1 UID: 0 PID: 10337 Comm: syz.4.1213 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 409.343924][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.343937][T10337] Call Trace: [ 409.343945][T10337] [ 409.343955][T10337] dump_stack_lvl+0x189/0x250 [ 409.343995][T10337] ? __pfx____ratelimit+0x10/0x10 [ 409.344029][T10337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.344062][T10337] ? __pfx__printk+0x10/0x10 [ 409.344098][T10337] should_fail_ex+0x414/0x560 [ 409.344129][T10337] _copy_to_user+0x31/0xb0 [ 409.344153][T10337] simple_read_from_buffer+0xe1/0x170 [ 409.344180][T10337] proc_fail_nth_read+0x1df/0x250 [ 409.344211][T10337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.344242][T10337] ? rw_verify_area+0x258/0x650 [ 409.344275][T10337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.344304][T10337] vfs_read+0x1fd/0x980 [ 409.344343][T10337] ? __pfx___mutex_lock+0x10/0x10 [ 409.344367][T10337] ? __pfx_vfs_read+0x10/0x10 [ 409.344403][T10337] ? __fget_files+0x2a/0x420 [ 409.344433][T10337] ? __fget_files+0x3a0/0x420 [ 409.344462][T10337] ? __fget_files+0x2a/0x420 [ 409.344497][T10337] ksys_read+0x145/0x250 [ 409.344515][T10337] ? __fget_files+0x2a/0x420 [ 409.344541][T10337] ? __pfx_ksys_read+0x10/0x10 [ 409.344580][T10337] ? do_syscall_64+0xbe/0x3b0 [ 409.344603][T10337] do_syscall_64+0xfa/0x3b0 [ 409.344622][T10337] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.344654][T10337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.344676][T10337] ? clear_bhb_loop+0x60/0xb0 [ 409.344703][T10337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.344725][T10337] RIP: 0033:0x7f80fa78d33c [ 409.344746][T10337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 409.344775][T10337] RSP: 002b:00007f80fb5d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.344798][T10337] RAX: ffffffffffffffda RBX: 00007f80fa9b5fa0 RCX: 00007f80fa78d33c [ 409.344815][T10337] RDX: 000000000000000f RSI: 00007f80fb5d10a0 RDI: 0000000000000004 [ 409.344839][T10337] RBP: 00007f80fb5d1090 R08: 0000000000000000 R09: 0000000000000000 [ 409.344854][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.344872][T10337] R13: 0000000000000000 R14: 00007f80fa9b5fa0 R15: 00007f80faadfa28 [ 409.344906][T10337] [ 410.106386][T10347] FAULT_INJECTION: forcing a failure. [ 410.106386][T10347] name failslab, interval 1, probability 0, space 0, times 0 [ 410.273022][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.4.1216 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 410.273056][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.273071][T10347] Call Trace: [ 410.273080][T10347] [ 410.273090][T10347] dump_stack_lvl+0x189/0x250 [ 410.273134][T10347] ? __pfx____ratelimit+0x10/0x10 [ 410.273167][T10347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.273202][T10347] ? __pfx__printk+0x10/0x10 [ 410.273233][T10347] ? __pfx___might_resched+0x10/0x10 [ 410.273266][T10347] ? fs_reclaim_acquire+0x7d/0x100 [ 410.273298][T10347] should_fail_ex+0x414/0x560 [ 410.273331][T10347] should_failslab+0xa8/0x100 [ 410.273356][T10347] kmem_cache_alloc_noprof+0x73/0x3c0 [ 410.273391][T10347] ? security_inode_alloc+0x39/0x330 [ 410.273428][T10347] security_inode_alloc+0x39/0x330 [ 410.273462][T10347] inode_init_always_gfp+0x9ed/0xdc0 [ 410.273493][T10347] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 410.273516][T10347] alloc_inode+0x82/0x1b0 [ 410.273541][T10347] new_inode+0x22/0x170 [ 410.273570][T10347] shmem_get_inode+0x346/0xe90 [ 410.273604][T10347] __shmem_file_setup+0x163/0x300 [ 410.273636][T10347] ? drm_gem_private_object_init+0x249/0x320 [ 410.273664][T10347] drm_gem_object_init_with_mnt+0x66/0xc0 [ 410.273691][T10347] __drm_gem_shmem_create+0x195/0x2f0 [ 410.273729][T10347] drm_gem_shmem_dumb_create+0x224/0x3c0 [ 410.273762][T10347] ? drm_mode_create_dumb_ioctl+0x24a/0x310 [ 410.273790][T10347] drm_ioctl_kernel+0x2cc/0x390 [ 410.273820][T10347] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 410.273842][T10347] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 410.273884][T10347] drm_ioctl+0x67f/0xb10 [ 410.273924][T10347] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 410.273952][T10347] ? __pfx_drm_ioctl+0x10/0x10 [ 410.273995][T10347] ? __fget_files+0x2a/0x420 [ 410.274024][T10347] ? bpf_lsm_file_ioctl+0x9/0x20 [ 410.274056][T10347] ? __pfx_drm_ioctl+0x10/0x10 [ 410.274084][T10347] __se_sys_ioctl+0xf9/0x170 [ 410.274120][T10347] do_syscall_64+0xfa/0x3b0 [ 410.274139][T10347] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.274169][T10347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.274191][T10347] ? clear_bhb_loop+0x60/0xb0 [ 410.274218][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.274239][T10347] RIP: 0033:0x7f80fa78e929 [ 410.274258][T10347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.274278][T10347] RSP: 002b:00007f80fb5d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.274301][T10347] RAX: ffffffffffffffda RBX: 00007f80fa9b5fa0 RCX: 00007f80fa78e929 [ 410.274318][T10347] RDX: 00002000000004c0 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 410.274333][T10347] RBP: 00007f80fb5d1090 R08: 0000000000000000 R09: 0000000000000000 [ 410.274346][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.274359][T10347] R13: 0000000000000000 R14: 00007f80fa9b5fa0 R15: 00007f80faadfa28 [ 410.274392][T10347] [ 411.399096][T10369] futex_wake_op: syz.2.1222 tries to shift op by 32; fix this program [ 411.511665][T10373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1221'. [ 411.628014][ T3582] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 412.122509][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 412.615228][T10385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 412.793936][ T3582] usb 5-1: config 0 has no interfaces? [ 412.888147][ T3582] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 412.913995][ T3582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.925470][ T3582] usb 5-1: Product: syz [ 412.937582][ T3582] usb 5-1: Manufacturer: syz [ 412.955388][ T3582] usb 5-1: SerialNumber: syz [ 412.981383][ T3582] usb 5-1: config 0 descriptor?? [ 413.017557][T10395] syz_tun: entered allmulticast mode [ 413.069956][T10395] binder: BINDER_SET_CONTEXT_MGR already set [ 413.083689][T10395] binder: 10394:10395 ioctl 4018620d 200000000040 returned -16 [ 413.110848][T10395] binder: 10394:10395 ioctl c018620c 200000000100 returned -1 [ 413.173685][T10395] syz_tun: left allmulticast mode [ 413.222189][T10367] pimreg: entered allmulticast mode [ 413.259038][T10367] pimreg: left allmulticast mode [ 414.623445][T10437] fuse: Bad value for 'fd' [ 414.682967][ T5890] usb 5-1: USB disconnect, device number 25 [ 415.028905][ T3582] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 415.236006][ T3582] usb 3-1: unable to get BOS descriptor or descriptor too short [ 415.245680][ T3582] usb 3-1: too many configurations: 67, using maximum allowed: 8 [ 415.255518][ T3582] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 415.270269][ T3582] usb 3-1: can't read configurations, error -61 [ 415.398077][ T3582] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 415.562898][ T3582] usb 3-1: unable to get BOS descriptor or descriptor too short [ 415.591983][ T3582] usb 3-1: too many configurations: 67, using maximum allowed: 8 [ 415.606808][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 415.646242][ T3582] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 415.654926][ T3582] usb 3-1: can't read configurations, error -61 [ 415.681232][ T3582] usb usb3-port1: attempt power cycle [ 415.954961][ T5890] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 416.022993][T10474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.048409][ T3582] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 416.116534][ T3582] usb 3-1: unable to get BOS descriptor or descriptor too short [ 416.125785][ T5890] usb 5-1: config 0 has no interfaces? [ 416.128047][ T3582] usb 3-1: too many configurations: 67, using maximum allowed: 8 [ 416.142151][ T5890] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 416.169627][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.185268][ T3582] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 416.201885][ T3582] usb 3-1: can't read configurations, error -61 [ 416.226076][T10472] kvm: kvm [10471]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 416.237871][ T5890] usb 5-1: Product: syz [ 416.248197][ T5890] usb 5-1: Manufacturer: syz [ 416.253196][ T5890] usb 5-1: SerialNumber: syz [ 416.286156][ T5890] usb 5-1: config 0 descriptor?? [ 416.294367][T10481] fuse: Bad value for 'fd' [ 416.368675][ T3582] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 416.380178][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1255'. [ 416.418271][ T3582] usb 3-1: unable to get BOS descriptor or descriptor too short [ 416.438277][ T3582] usb 3-1: too many configurations: 67, using maximum allowed: 8 [ 416.455430][ T3582] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 416.463406][ T3582] usb 3-1: can't read configurations, error -61 [ 416.480541][ T3582] usb usb3-port1: unable to enumerate USB device [ 416.516918][ T3582] usb 5-1: USB disconnect, device number 26 [ 417.090079][T10487] fuse: Bad value for 'fd' [ 417.843349][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 418.208145][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 418.225320][ T10] usb 2-1: config index 0 descriptor too short (expected 213, got 92) [ 418.234298][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 418.234336][ T30] audit: type=1326 audit(1749926551.150:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6e78e929 code=0x7ffc0000 [ 418.448322][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.752140][ T10] usb 2-1: config 0 has no interfaces? [ 419.055184][ T30] audit: type=1326 audit(1749926551.150:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.0.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6e78e929 code=0x7ffc0000 [ 419.135179][T10522] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 419.498968][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.820244][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.058782][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1267'. [ 420.083425][T10532] netlink: 'syz.4.1267': attribute type 15 has an invalid length. [ 420.214107][T10532] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.223664][T10532] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.232990][T10532] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.242413][T10532] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.288108][T10532] vxlan0: entered promiscuous mode [ 421.248274][ T5890] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 421.398195][ T5890] usb 3-1: device descriptor read/64, error -71 [ 421.648220][ T5890] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 421.798210][ T5890] usb 3-1: device descriptor read/64, error -71 [ 422.000996][ T5890] usb usb3-port1: attempt power cycle [ 422.098820][ T5912] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 422.271302][ T5912] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 422.292479][ T5912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.333664][ T5912] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 422.359969][ T5890] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 422.378113][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.400766][ T5912] usb 5-1: Product: syz [ 422.414752][ T5912] usb 5-1: Manufacturer: syz [ 422.422280][ T5890] usb 3-1: device descriptor read/8, error -71 [ 422.436689][ T5912] usb 5-1: SerialNumber: syz [ 422.483746][ T5912] usb 5-1: config 0 descriptor?? [ 422.516399][ T5912] usb 5-1: selecting invalid altsetting 0 [ 422.638436][ T10] usb 2-1: string descriptor 0 read error: -71 [ 422.660445][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 422.698397][ T5890] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 422.706504][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.728409][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.748887][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.780683][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.797609][ T5890] usb 3-1: device descriptor read/8, error -71 [ 422.826533][T10552] FAULT_INJECTION: forcing a failure. [ 422.826533][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 422.843444][T10552] CPU: 1 UID: 0 PID: 10552 Comm: syz.0.1273 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 422.843476][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.843491][T10552] Call Trace: [ 422.843499][T10552] [ 422.843508][T10552] dump_stack_lvl+0x189/0x250 [ 422.843547][T10552] ? __pfx____ratelimit+0x10/0x10 [ 422.843579][T10552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.843620][T10552] ? __pfx__printk+0x10/0x10 [ 422.843650][T10552] ? __pfx___might_resched+0x10/0x10 [ 422.843682][T10552] ? fs_reclaim_acquire+0x7d/0x100 [ 422.843712][T10552] should_fail_ex+0x414/0x560 [ 422.843745][T10552] should_failslab+0xa8/0x100 [ 422.843769][T10552] kmem_cache_alloc_noprof+0x73/0x3c0 [ 422.843803][T10552] ? security_inode_alloc+0x39/0x330 [ 422.843837][T10552] security_inode_alloc+0x39/0x330 [ 422.843871][T10552] inode_init_always_gfp+0x9ed/0xdc0 [ 422.843900][T10552] ? __pfx_sock_alloc_inode+0x10/0x10 [ 422.843934][T10552] alloc_inode+0x82/0x1b0 [ 422.843957][T10552] __sock_create+0x12d/0x9f0 [ 422.843976][T10552] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 422.844016][T10552] mptcp_subflow_create_socket+0xfd/0xb40 [ 422.844042][T10552] ? snprintf+0xda/0x120 [ 422.844075][T10552] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 422.844099][T10552] ? aa_label_sk_perm+0x413/0x560 [ 422.844133][T10552] __mptcp_nmpc_sk+0x148/0x750 [ 422.844159][T10552] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 422.844189][T10552] ? look_up_lock_class+0x74/0x170 [ 422.844226][T10552] mptcp_connect+0x70/0xc10 [ 422.844265][T10552] __inet_stream_connect+0x298/0xf10 [ 422.844296][T10552] ? __local_bh_enable_ip+0x12d/0x1c0 [ 422.844330][T10552] ? __pfx___inet_stream_connect+0x10/0x10 [ 422.844351][T10552] ? __local_bh_enable_ip+0x12d/0x1c0 [ 422.844383][T10552] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 422.844426][T10552] inet_stream_connect+0x66/0xa0 [ 422.844452][T10552] __sys_connect+0x316/0x440 [ 422.844474][T10552] ? __fget_files+0x3a0/0x420 [ 422.844498][T10552] ? __pfx___sys_connect+0x10/0x10 [ 422.844535][T10552] ? __pfx_ksys_write+0x10/0x10 [ 422.844552][T10552] ? rcu_is_watching+0x15/0xb0 [ 422.844600][T10552] __x64_sys_connect+0x7a/0x90 [ 422.844624][T10552] do_syscall_64+0xfa/0x3b0 [ 422.844646][T10552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.844667][T10552] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.844688][T10552] ? clear_bhb_loop+0x60/0xb0 [ 422.844715][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.844735][T10552] RIP: 0033:0x7fcd6e78e929 [ 422.844754][T10552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.844774][T10552] RSP: 002b:00007fcd6f653038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 422.844802][T10552] RAX: ffffffffffffffda RBX: 00007fcd6e9b6080 RCX: 00007fcd6e78e929 [ 422.844817][T10552] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000a [ 422.844831][T10552] RBP: 00007fcd6f653090 R08: 0000000000000000 R09: 0000000000000000 [ 422.844845][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.844858][T10552] R13: 0000000000000000 R14: 00007fcd6e9b6080 R15: 00007fcd6eadfa28 [ 422.844893][T10552] [ 422.846066][T10552] socket: no more sockets [ 422.887853][ T10] usb 2-1: config 0 descriptor?? [ 422.906083][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.923748][ T10] usb 2-1: can't set config #0, error -71 [ 422.926470][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.223407][ T5890] usb usb3-port1: unable to enumerate USB device [ 423.270822][ T10] usb 2-1: USB disconnect, device number 23 [ 423.311268][ T5890] usb 5-1: USB disconnect, device number 27 [ 423.750259][T10560] sctp: [Deprecated]: syz.6.1275 (pid 10560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.750259][T10560] Use struct sctp_sack_info instead [ 424.590400][T10571] fuse: Bad value for 'fd' [ 425.139483][T10580] loop8: detected capacity change from 0 to 7 [ 425.389009][T10580] Dev loop8: unable to read RDB block 7 [ 425.394677][T10580] loop8: unable to read partition table [ 425.448328][T10580] loop8: partition table beyond EOD, truncated [ 425.464932][T10580] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 425.595641][T10583] ptrace attach of "./syz-executor exec"[7083] was attempted by "./syz-executor exec"[10583] [ 425.938034][ T3582] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 426.008139][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 426.108186][ T3582] usb 5-1: Using ep0 maxpacket: 8 [ 426.119133][ T3582] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 426.168045][ T3582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.189616][ T10] usb 2-1: device descriptor read/64, error -71 [ 426.216824][ T3582] usb 5-1: Product: syz [ 426.226227][ T3582] usb 5-1: Manufacturer: syz [ 426.241532][ T3582] usb 5-1: SerialNumber: syz [ 426.265789][ T3582] usb 5-1: config 0 descriptor?? [ 426.428156][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 426.507467][T10585] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 426.574201][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.583687][ T10] usb 2-1: device descriptor read/64, error -71 [ 426.589832][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.708529][ T10] usb usb2-port1: attempt power cycle [ 427.058282][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 427.100695][ T10] usb 2-1: device descriptor read/8, error -71 [ 427.121703][ T3582] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 427.131908][T10615] fuse: Bad value for 'fd' [ 427.147591][ T3582] gspca_sunplus: reg_w_riv err -71 [ 427.185765][ T3582] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 427.231598][ T3582] usb 5-1: USB disconnect, device number 28 [ 427.368202][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 427.411136][ T10] usb 2-1: device descriptor read/8, error -71 [ 427.538787][ T10] usb usb2-port1: unable to enumerate USB device [ 428.639099][ T5928] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 428.828009][ T5928] usb 7-1: Using ep0 maxpacket: 16 [ 429.061165][T10640] program syz.1.1301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.744307][T10646] program syz.4.1300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.057042][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'. [ 430.226381][T10651] bridge5: entered promiscuous mode [ 432.308093][ T3582] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 432.985880][ T3582] usb 3-1: Using ep0 maxpacket: 8 [ 433.001182][ T3582] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 433.036329][ T3582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.098028][ T3582] usb 3-1: Product: syz [ 433.102297][ T3582] usb 3-1: Manufacturer: syz [ 433.148917][ T3582] usb 3-1: SerialNumber: syz [ 433.206113][ T3582] usb 3-1: config 0 descriptor?? [ 433.433492][T10654] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 433.465603][ T5928] usb 7-1: unable to get BOS descriptor or descriptor too short [ 433.526866][ T5928] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 433.576564][ T5928] usb 7-1: can't read configurations, error -71 [ 433.748153][T10659] fuse: Bad value for 'fd' [ 434.130829][ T3582] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 434.148801][ T3582] gspca_sunplus: reg_w_riv err -71 [ 434.154071][ T3582] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 434.258429][ T3582] usb 3-1: USB disconnect, device number 24 [ 434.458086][ T5927] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 434.618069][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 434.636162][ T5927] usb 5-1: config 32 has an invalid interface number: 64 but max is 0 [ 434.655909][ T5927] usb 5-1: config 32 has no interface number 0 [ 434.679351][ T5927] usb 5-1: New USB device found, idVendor=0727, idProduct=0306, bcdDevice= 1.00 [ 434.698038][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.717576][ T5927] usb 5-1: Product: syz [ 434.730297][ T5927] usb 5-1: Manufacturer: syz [ 434.739007][ T5927] usb 5-1: SerialNumber: syz [ 434.762919][ T5927] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 434.802409][ T5927] usb 5-1: no configuration chosen from 1 choice [ 436.316175][T10691] loop8: detected capacity change from 0 to 7 [ 436.357183][ T6068] Dev loop8: unable to read RDB block 7 [ 436.365431][ T6068] loop8: unable to read partition table [ 436.378314][ T6068] loop8: partition table beyond EOD, truncated [ 436.385710][T10691] Dev loop8: unable to read RDB block 7 [ 436.402836][T10691] loop8: unable to read partition table [ 436.439471][T10691] loop8: partition table beyond EOD, truncated [ 436.460769][T10691] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 436.690798][T10693] fuse: Bad value for 'fd' [ 436.953597][T10698] program syz.1.1316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.238965][ T5890] usb 5-1: USB disconnect, device number 29 [ 437.526750][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 437.644199][T10703] bridge2: entered promiscuous mode [ 438.078932][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 438.203762][T10720] openvswitch: netlink: Unknown nsh attribute 0 [ 438.258370][T10720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.797505][T10723] loop8: detected capacity change from 0 to 7 [ 438.805033][T10723] Dev loop8: unable to read RDB block 7 [ 438.811142][T10723] loop8: unable to read partition table [ 438.817831][T10723] loop8: partition table beyond EOD, truncated [ 438.827821][T10723] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 439.322550][T10727] loop8: detected capacity change from 0 to 7 [ 439.417128][T10727] Dev loop8: unable to read RDB block 7 [ 439.479605][T10727] loop8: unable to read partition table [ 439.588664][T10727] loop8: partition table beyond EOD, truncated [ 439.713483][T10727] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 439.905852][T10736] fuse: Bad value for 'fd' [ 440.242841][T10738] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 440.249610][T10738] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 440.354840][T10738] vhci_hcd vhci_hcd.0: Device attached [ 440.462250][T10741] vhci_hcd vhci_hcd.0: port 0 already used [ 440.644345][ T5890] usb 38-1: SetAddress Request (2) to port 0 [ 440.662465][ T5890] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 440.972127][T10739] vhci_hcd: connection reset by peer [ 440.983875][ T1025] vhci_hcd: stop threads [ 441.008130][ T1025] vhci_hcd: release socket [ 441.034345][ T1025] vhci_hcd: disconnect device [ 441.335045][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1334'. [ 441.931685][T10772] loop8: detected capacity change from 0 to 7 [ 442.005618][T10772] Dev loop8: unable to read RDB block 7 [ 442.085016][T10772] loop8: unable to read partition table [ 442.189094][T10772] loop8: partition table beyond EOD, truncated [ 442.213979][T10772] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 443.208025][ T5927] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 443.368740][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 443.395404][ T5927] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 443.424269][ T5927] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 443.464066][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 443.514684][ T5927] usb 7-1: Product: syz [ 443.534978][ T5927] usb 7-1: Manufacturer: syz [ 443.558662][ T5927] usb 7-1: SerialNumber: syz [ 443.582108][ T5927] usb 7-1: config 0 descriptor?? [ 443.603900][T10784] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 443.792992][T10797] program syz.1.1346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.929626][ T5927] usb 7-1: USB disconnect, device number 21 [ 444.020020][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 444.056212][T10800] bridge3: entered promiscuous mode [ 444.410303][T10805] netlink: 'syz.2.1348': attribute type 27 has an invalid length. [ 444.702272][T10803] kvm: kvm [10802]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 444.835433][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.842931][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.110843][T10805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.125477][T10805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.175473][T10805] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.185138][T10805] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.196751][T10805] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.239129][T10805] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.282889][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.297183][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.391204][T10805] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 445.406183][T10805] bond1: left promiscuous mode [ 445.758416][ T5890] usb 38-1: device descriptor read/8, error -110 [ 446.135529][T10818] futex_wake_op: syz.6.1352 tries to shift op by 32; fix this program [ 446.152001][T10817] loop8: detected capacity change from 0 to 7 [ 446.203015][T10817] Dev loop8: unable to read RDB block 7 [ 446.215841][T10817] loop8: unable to read partition table [ 446.222354][T10817] loop8: partition table beyond EOD, truncated [ 446.256488][T10817] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 446.319735][ T5890] usb usb38-port1: attempt power cycle [ 446.627168][T10824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.636115][T10824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.899163][ T5890] usb usb38-port1: unable to enumerate USB device [ 448.084203][T10846] kvm: kvm [10845]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 448.098367][T10846] kvm: kvm [10845]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 448.143891][T10846] kvm: kvm [10845]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 449.241098][ T5927] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 449.482023][T10877] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1363'. [ 449.519212][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 449.527149][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 449.552709][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 449.870090][ T5927] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 449.898185][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.923320][ T5927] usb 7-1: Product: syz [ 449.937666][ T5927] usb 7-1: Manufacturer: syz [ 449.948734][ T5927] usb 7-1: SerialNumber: syz [ 449.978038][ T5927] usb 7-1: config 0 descriptor?? [ 450.026237][ T5927] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 450.048026][ T5927] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 450.215071][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.240101][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.458953][T10894] program syz.4.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.677278][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.688551][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.697340][ T5927] em28xx 7-1:0.0: chip ID is em2874 [ 450.715781][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 450.753917][T10906] bridge6: entered promiscuous mode [ 450.920332][ T5927] usb 7-1: USB disconnect, device number 22 [ 451.001123][ T5927] em28xx 7-1:0.0: Disconnecting em28xx [ 451.063220][ T5927] em28xx 7-1:0.0: Freeing device [ 451.470220][T10917] PKCS7: Unknown OID: [5] (bad) [ 451.487139][T10917] PKCS7: Only support pkcs7_signedData type [ 451.830309][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.884137][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.130269][T10929] fuse: Bad value for 'fd' [ 452.329292][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 452.488612][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 452.518514][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 452.564396][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 452.575809][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 452.605267][ T10] usb 7-1: Product: syz [ 452.617846][ T10] usb 7-1: Manufacturer: syz [ 452.646265][ T10] usb 7-1: SerialNumber: syz [ 452.664392][ T10] usb 7-1: config 0 descriptor?? [ 452.671305][T10927] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 452.681106][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 452.702492][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 453.051416][ T10] usb 7-1: USB disconnect, device number 23 [ 453.169388][T10939] loop8: detected capacity change from 0 to 7 [ 453.201974][T10939] Dev loop8: unable to read RDB block 7 [ 453.220853][T10939] loop8: unable to read partition table [ 453.258348][T10939] loop8: partition table beyond EOD, truncated [ 453.264823][T10939] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 453.996846][T10952] FAULT_INJECTION: forcing a failure. [ 453.996846][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.023093][T10949] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 454.030818][T10949] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 454.038484][ T5890] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 454.056870][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.6.1393 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 454.056899][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.056916][T10952] Call Trace: [ 454.056925][T10952] [ 454.056935][T10952] dump_stack_lvl+0x189/0x250 [ 454.056973][T10952] ? __pfx____ratelimit+0x10/0x10 [ 454.057006][T10952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.057040][T10952] ? __pfx__printk+0x10/0x10 [ 454.057063][T10952] ? __might_fault+0xb0/0x130 [ 454.057097][T10952] should_fail_ex+0x414/0x560 [ 454.057130][T10952] _copy_from_user+0x2d/0xb0 [ 454.057152][T10952] snd_seq_event_dup+0x467/0x780 [ 454.057192][T10952] snd_seq_client_enqueue_event+0x2d4/0x4a0 [ 454.057237][T10952] ? __pfx_snd_seq_client_enqueue_event+0x10/0x10 [ 454.057265][T10952] ? should_fail_usercopy+0x9/0x20 [ 454.057305][T10952] snd_seq_write+0x5c2/0x810 [ 454.057351][T10952] ? __pfx_snd_seq_write+0x10/0x10 [ 454.057386][T10952] ? bpf_lsm_file_permission+0x9/0x20 [ 454.057421][T10952] ? security_file_permission+0x75/0x290 [ 454.057447][T10952] ? rw_verify_area+0x258/0x650 [ 454.057478][T10952] ? __pfx_snd_seq_write+0x10/0x10 [ 454.057513][T10952] vfs_write+0x27b/0xa90 [ 454.057555][T10952] ? __pfx_vfs_write+0x10/0x10 [ 454.057591][T10952] ? __fget_files+0x2a/0x420 [ 454.057618][T10952] ? __fget_files+0x2a/0x420 [ 454.057640][T10952] ? __fget_files+0x3a0/0x420 [ 454.057662][T10952] ? __fget_files+0x2a/0x420 [ 454.057696][T10952] ksys_write+0x145/0x250 [ 454.057719][T10952] ? __pfx_ksys_write+0x10/0x10 [ 454.057736][T10952] ? rcu_is_watching+0x15/0xb0 [ 454.057775][T10952] ? do_syscall_64+0xbe/0x3b0 [ 454.057800][T10952] do_syscall_64+0xfa/0x3b0 [ 454.057818][T10952] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.057850][T10952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.057872][T10952] ? clear_bhb_loop+0x60/0xb0 [ 454.057902][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.057928][T10952] RIP: 0033:0x7fb22318e929 [ 454.057949][T10952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.057969][T10952] RSP: 002b:00007fb224072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 454.057991][T10952] RAX: ffffffffffffffda RBX: 00007fb2233b5fa0 RCX: 00007fb22318e929 [ 454.058008][T10952] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 454.058022][T10952] RBP: 00007fb224072090 R08: 0000000000000000 R09: 0000000000000000 [ 454.058035][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.058048][T10952] R13: 0000000000000000 R14: 00007fb2233b5fa0 R15: 00007fb2234dfa28 [ 454.058081][T10952] [ 454.432312][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 454.440631][ T5890] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 454.449001][ T5890] usb 3-1: config 0 has no interface number 0 [ 454.455588][ T5890] usb 3-1: config 0 interface 68 altsetting 128 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 454.467706][ T5890] usb 3-1: config 0 interface 68 altsetting 128 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 454.480201][ T5890] usb 3-1: config 0 interface 68 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 454.492017][ T5890] usb 3-1: config 0 interface 68 has no altsetting 0 [ 454.503182][ T5890] usb 3-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 454.512369][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.520566][ T5890] usb 3-1: Product: syz [ 454.524827][ T5890] usb 3-1: Manufacturer: syz [ 454.529529][ T5890] usb 3-1: SerialNumber: syz [ 454.538425][ T5890] usb 3-1: config 0 descriptor?? [ 454.713822][T10961] capability: warning: `syz.6.1396' uses 32-bit capabilities (legacy support in use) [ 454.789002][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.852582][ T30] audit: type=1326 audit(1749926587.780:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 454.852870][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.908055][ T30] audit: type=1326 audit(1749926587.780:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 454.972227][ T30] audit: type=1326 audit(1749926587.810:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f80fa72ab19 code=0x7ffc0000 [ 455.020419][ T5927] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 455.048598][ T30] audit: type=1326 audit(1749926587.810:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 455.126917][ T30] audit: type=1326 audit(1749926587.810:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f80fa72ab19 code=0x7ffc0000 [ 455.152566][ T30] audit: type=1326 audit(1749926587.810:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 455.177245][ T30] audit: type=1326 audit(1749926587.810:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 455.205782][ T30] audit: type=1326 audit(1749926587.810:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f80fa72ab19 code=0x7ffc0000 [ 455.216737][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.247272][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.263843][ T5927] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 455.275314][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.292702][ T30] audit: type=1326 audit(1749926587.810:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fa78e929 code=0x7ffc0000 [ 455.321861][ T30] audit: type=1326 audit(1749926587.810:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f80fa72ab19 code=0x7ffc0000 [ 455.344711][ T5927] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 455.365513][ T5927] usb 2-1: no configuration chosen from 1 choice [ 455.512979][T10975] loop8: detected capacity change from 0 to 7 [ 455.530406][T10975] Dev loop8: unable to read RDB block 7 [ 455.536183][T10975] loop8: unable to read partition table [ 455.546627][T10975] loop8: partition table beyond EOD, truncated [ 455.554539][T10975] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 455.667235][ T5890] sisusb 3-1:0.68: Invalid USB2VGA device [ 455.677644][ T5890] sisusb 3-1:0.68: probe with driver sisusb failed with error -22 [ 455.701160][ T5890] usb 3-1: USB disconnect, device number 25 [ 455.858105][ T5928] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 456.041410][ T5928] usb 7-1: too many configurations: 30, using maximum allowed: 8 [ 456.064301][ T5928] usb 7-1: config index 0 descriptor too short (expected 63113, got 90) [ 456.077238][ T5928] usb 7-1: config 207 has too many interfaces: 142, using maximum allowed: 32 [ 456.086350][ T5928] usb 7-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 456.098192][ T5928] usb 7-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 456.108547][ T5928] usb 7-1: config 207 has 0 interfaces, different from the descriptor's value: 142 [ 456.119462][ T5928] usb 7-1: config index 1 descriptor too short (expected 63113, got 90) [ 456.127850][ T5928] usb 7-1: config 207 has too many interfaces: 142, using maximum allowed: 32 [ 456.154984][T10985] loop8: detected capacity change from 0 to 7 [ 456.165621][T10985] Dev loop8: unable to read RDB block 7 [ 456.177796][T10985] loop8: unable to read partition table [ 456.184790][T10985] loop8: partition table beyond EOD, truncated [ 456.198125][T10985] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 456.220861][ T5928] usb 7-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 456.230645][ T5928] usb 7-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 456.244134][ T5928] usb 7-1: config 207 has 0 interfaces, different from the descriptor's value: 142 [ 456.256829][ T5928] usb 7-1: config index 2 descriptor too short (expected 63113, got 90) [ 456.288764][T10988] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1403'. [ 456.364592][ T5928] usb 7-1: config 207 has too many interfaces: 142, using maximum allowed: 32 [ 456.393793][ T5928] usb 7-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 456.462734][ T5928] usb 7-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 456.514419][ T5928] usb 7-1: config 207 has 0 interfaces, different from the descriptor's value: 142 [ 456.534612][ T5928] usb 7-1: config index 3 descriptor too short (expected 63113, got 90) [ 456.543158][ T5928] usb 7-1: config 207 has too many interfaces: 142, using maximum allowed: 32 [ 456.556757][ T5928] usb 7-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 456.572657][ T5928] usb 7-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 456.583153][ T5928] usb 7-1: config 207 has 0 interfaces, different from the descriptor's value: 142 [ 456.597380][ T5928] usb 7-1: config index 4 descriptor too short (expected 63113, got 90) [ 456.607950][ T5928] usb 7-1: config 207 has too many interfaces: 142, using maximum allowed: 32 [ 456.635918][ T5928] usb 7-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 456.659705][ T5928] usb 7-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 456.667742][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 456.696507][ T5928] usb 7-1: config 207 has 0 interfaces, different from the descriptor's value: 142 [ 456.742459][T10993] can: request_module (can-proto-4) failed. [ 456.743265][ T5928] usb 7-1: config index 5 descriptor too short (expected 63113, got 90) [ 456.757130][ T5928] usb 7-1: config 207 has too many interfaces: 142, using maximum allowed: 32 [ 456.766391][ T5928] usb 7-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 456.775633][ T5928] usb 7-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 456.796194][ T5928] usb 7-1: config 207 has 0 interfaces, different from the descriptor's value: 142 [ 456.813297][ T5928] usb 7-1: config index 6 descriptor too short (expected 63113, got 90) [ 456.822231][ T5928] usb 7-1: config 207 has too many interfaces: 142, using maximum allowed: 32 [ 456.831726][ T5928] usb 7-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 456.843453][ T5928] usb 7-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 456.854673][ T5928] usb 7-1: config 207 has 0 interfaces, different from the descriptor's value: 142 [ 456.866177][ T5928] usb 7-1: config index 7 descriptor too short (expected 63113, got 90) [ 456.875127][ T5928] usb 7-1: config 207 has too many interfaces: 142, using maximum allowed: 32 [ 456.884509][ T5928] usb 7-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 456.927080][ T5928] usb 7-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 457.052281][ T5928] usb 7-1: config 207 has 0 interfaces, different from the descriptor's value: 142 [ 457.093560][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 457.107440][ T5928] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 457.138135][ T5928] usb 7-1: New USB device strings: Mfr=149, Product=251, SerialNumber=34 [ 457.146731][ T5928] usb 7-1: Product: syz [ 457.175789][ T5928] usb 7-1: Manufacturer: syz [ 457.190908][ T5928] usb 7-1: SerialNumber: syz [ 457.431470][ T5928] usb 7-1: USB disconnect, device number 24 [ 457.467723][ T5927] usb 2-1: USB disconnect, device number 28 [ 458.012728][T11018] fuse: Unknown parameter '00000000000000000000Ngroup_id' [ 458.031075][T11022] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 458.037676][T11022] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 458.088070][T11022] vhci_hcd vhci_hcd.0: Device attached [ 458.172276][T11028] vhci_hcd vhci_hcd.0: port 0 already used [ 458.278371][ T5928] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 458.370191][ T5927] usb 42-1: SetAddress Request (2) to port 0 [ 458.377179][ T5927] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 458.419170][T11024] vhci_hcd: connection reset by peer [ 458.442059][ T12] vhci_hcd: stop threads [ 458.446384][ T12] vhci_hcd: release socket [ 458.462398][ T12] vhci_hcd: disconnect device [ 458.471845][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.513090][ T5928] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 458.552375][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.591615][ T5928] usb 3-1: config 0 descriptor?? [ 458.828189][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 458.839277][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 458.887096][ T5928] usb 3-1: USB disconnect, device number 26 [ 459.344556][ T5928] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 459.408036][ T24] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 459.498071][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 459.578752][ T24] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 459.633014][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 459.675090][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.731178][ T24] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 459.791910][ T5928] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 459.801192][ T24] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 459.812270][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.820717][ T3582] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 459.833967][ T24] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 459.848922][ T5928] usb 3-1: config 0 descriptor?? [ 459.868139][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.900859][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 459.912226][ T24] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 459.927283][T11063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1422'. [ 459.936781][ T24] usb 5-1: Product: syz [ 459.954600][ T24] usb 5-1: Manufacturer: syz [ 459.979700][ T24] usb 5-1: SerialNumber: syz [ 460.085862][ T24] usb 5-1: config 0 descriptor?? [ 460.094290][T11048] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 460.110478][ T24] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 460.234224][ T24] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 460.389154][ T3582] usb 7-1: config 0 has no interfaces? [ 460.405055][ T3582] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 460.414512][ T3582] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.416272][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 460.428170][ T3582] usb 7-1: Product: syz [ 460.436057][ T3582] usb 7-1: Manufacturer: syz [ 460.470465][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.613938][ T3582] usb 7-1: SerialNumber: syz [ 460.637837][ T3582] usb 7-1: config 0 descriptor?? [ 460.677565][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.683101][T11025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.746808][T11025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.834275][ T3582] usb 5-1: USB disconnect, device number 30 [ 460.847348][ T3582] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 461.004422][T11025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.043202][T11067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.098735][T11025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.190229][T11067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.331565][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 461.337872][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 461.405246][ T5928] usb 3-1: USB disconnect, device number 27 [ 461.898092][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 462.137457][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.151448][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.163518][ T10] usb 3-1: config 0 has no interfaces? [ 462.173971][T11081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.181547][T11081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.196430][T11081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.205126][T11081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.271183][ T5890] usb 7-1: USB disconnect, device number 25 [ 462.446643][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 462.457889][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.467149][ T10] usb 3-1: Product: syz [ 462.475653][ T10] usb 3-1: Manufacturer: syz [ 462.484389][ T10] usb 3-1: SerialNumber: syz [ 462.526017][ T10] usb 3-1: config 0 descriptor?? [ 462.707643][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1428'. [ 463.214958][T11104] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1432'. [ 463.441749][ T5927] usb 42-1: device descriptor read/8, error -110 [ 463.506744][T11110] fuse: Bad value for 'fd' [ 463.534749][ T30] kauditd_printk_skb: 570 callbacks suppressed [ 463.534771][ T30] audit: type=1326 audit(1749926596.450:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 463.594343][ T30] audit: type=1326 audit(1749926596.450:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 463.617544][ T30] audit: type=1326 audit(1749926596.450:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 463.681146][ T30] audit: type=1326 audit(1749926596.450:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 463.765580][ T30] audit: type=1326 audit(1749926596.450:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 463.819080][ T5928] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 463.829036][ T30] audit: type=1326 audit(1749926596.460:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 463.877341][ T30] audit: type=1326 audit(1749926596.460:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 463.914511][ T30] audit: type=1326 audit(1749926596.460:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 463.924651][ T5927] usb usb42-port1: attempt power cycle [ 463.955564][ T30] audit: type=1326 audit(1749926596.470:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 464.007289][ T30] audit: type=1326 audit(1749926596.470:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcc7492ab19 code=0x7ffc0000 [ 464.028023][ T5928] usb 5-1: device descriptor read/64, error -71 [ 464.065393][T11114] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1435'. [ 464.278341][ T5928] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 464.418013][ T5928] usb 5-1: device descriptor read/64, error -71 [ 464.541188][ T5927] usb usb42-port1: unable to enumerate USB device [ 464.554856][ T5928] usb usb5-port1: attempt power cycle [ 464.898041][ T5928] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 464.951440][ T5928] usb 5-1: device descriptor read/8, error -71 [ 464.987276][ T5927] usb 3-1: USB disconnect, device number 28 [ 465.208294][ T5928] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 465.258280][ T5928] usb 5-1: device descriptor read/8, error -71 [ 465.390923][ T5928] usb usb5-port1: unable to enumerate USB device [ 465.542515][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'. [ 465.552550][T11144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.559866][T11144] IPv6: NLM_F_CREATE should be set when creating new route [ 466.131771][T11160] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.328070][ T5928] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 466.458037][ T5928] usb 2-1: device descriptor read/64, error -71 [ 466.708152][ T5928] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 466.848182][ T5928] usb 2-1: device descriptor read/64, error -71 [ 466.978538][ T5928] usb usb2-port1: attempt power cycle [ 467.033427][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1453'. [ 467.062519][T11173] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1453'. [ 467.348366][ T5928] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 467.379088][ T5928] usb 2-1: device descriptor read/8, error -71 [ 467.798360][T11178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.908759][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.987457][ T5928] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 467.996039][T11178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.005843][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.069686][ T5928] usb 2-1: device descriptor read/8, error -71 [ 468.210358][ T5928] usb usb2-port1: unable to enumerate USB device [ 468.509924][T11184] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1457'. [ 468.848003][ T5928] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 469.008022][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 469.027002][ T5928] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 469.055380][ T5928] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 469.074296][ T5928] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.086268][ T5928] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.118730][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.126837][ T5928] usb 7-1: Product: syz [ 469.141200][ T5928] usb 7-1: Manufacturer: syz [ 469.146227][ T5928] usb 7-1: SerialNumber: syz [ 469.437327][ T5928] usb 7-1: 0:2 : does not exist [ 469.474404][ T5928] usb 7-1: USB disconnect, device number 26 [ 470.260285][T11210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.272244][T11210] FAULT_INJECTION: forcing a failure. [ 470.272244][T11210] name failslab, interval 1, probability 0, space 0, times 0 [ 470.285514][T11210] CPU: 0 UID: 0 PID: 11210 Comm: syz.1.1467 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 470.285545][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.285559][T11210] Call Trace: [ 470.285568][T11210] [ 470.285577][T11210] dump_stack_lvl+0x189/0x250 [ 470.285617][T11210] ? __pfx____ratelimit+0x10/0x10 [ 470.285650][T11210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.285683][T11210] ? __pfx__printk+0x10/0x10 [ 470.285713][T11210] ? __pfx___might_resched+0x10/0x10 [ 470.285747][T11210] ? fs_reclaim_acquire+0x7d/0x100 [ 470.285778][T11210] should_fail_ex+0x414/0x560 [ 470.285811][T11210] should_failslab+0xa8/0x100 [ 470.285836][T11210] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 470.285858][T11210] ? __alloc_skb+0x112/0x2d0 [ 470.285889][T11210] __alloc_skb+0x112/0x2d0 [ 470.285918][T11210] netlink_ack+0x146/0xa50 [ 470.285940][T11210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.285969][T11210] ? ref_tracker_free+0x63a/0x7d0 [ 470.286003][T11210] ? __pfx_ref_tracker_free+0x10/0x10 [ 470.286044][T11210] netlink_rcv_skb+0x28c/0x470 [ 470.286071][T11210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.286105][T11210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.286150][T11210] ? down_read+0x1ad/0x2e0 [ 470.286181][T11210] genl_rcv+0x28/0x40 [ 470.286209][T11210] netlink_unicast+0x758/0x8d0 [ 470.286244][T11210] netlink_sendmsg+0x805/0xb30 [ 470.286280][T11210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.286311][T11210] ? aa_sock_msg_perm+0x94/0x160 [ 470.286342][T11210] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.286370][T11210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.286398][T11210] __sock_sendmsg+0x21c/0x270 [ 470.286435][T11210] ____sys_sendmsg+0x505/0x830 [ 470.286475][T11210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.286514][T11210] ? import_iovec+0x74/0xa0 [ 470.286540][T11210] ___sys_sendmsg+0x21f/0x2a0 [ 470.286570][T11210] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.286640][T11210] ? __fget_files+0x2a/0x420 [ 470.286663][T11210] ? __fget_files+0x3a0/0x420 [ 470.286698][T11210] __x64_sys_sendmsg+0x19b/0x260 [ 470.286730][T11210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.286769][T11210] ? __pfx_ksys_write+0x10/0x10 [ 470.286788][T11210] ? rcu_is_watching+0x15/0xb0 [ 470.286828][T11210] ? do_syscall_64+0xbe/0x3b0 [ 470.286853][T11210] do_syscall_64+0xfa/0x3b0 [ 470.286871][T11210] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.286903][T11210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.286925][T11210] ? clear_bhb_loop+0x60/0xb0 [ 470.286951][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.286972][T11210] RIP: 0033:0x7fcc7498e929 [ 470.286991][T11210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.287011][T11210] RSP: 002b:00007fcc757e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.287033][T11210] RAX: ffffffffffffffda RBX: 00007fcc74bb5fa0 RCX: 00007fcc7498e929 [ 470.287049][T11210] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 470.287063][T11210] RBP: 00007fcc757e7090 R08: 0000000000000000 R09: 0000000000000000 [ 470.287077][T11210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.287089][T11210] R13: 0000000000000000 R14: 00007fcc74bb5fa0 R15: 00007fcc74cdfa28 [ 470.287123][T11210] [ 470.609268][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.241134][T11222] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1470'. [ 471.608894][T11227] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.084616][T11238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 473.660156][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 473.674485][T11253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.753989][T11257] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1481'. [ 474.035405][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'. [ 474.450972][T11277] loop8: detected capacity change from 0 to 7 [ 474.500240][T11277] Dev loop8: unable to read RDB block 7 [ 474.534413][T11277] loop8: unable to read partition table [ 474.576303][T11277] loop8: partition table beyond EOD, truncated [ 474.613611][T11277] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 474.779142][T11279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.195396][T11292] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1492'. [ 476.659434][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aef7800: rx timeout, send abort [ 476.670215][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aef7800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 477.236999][T11324] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.441576][T11326] bridge0: port 3(gretap0) entered blocking state [ 477.451376][T11326] bridge0: port 3(gretap0) entered disabled state [ 477.459713][T11326] gretap0: entered allmulticast mode [ 477.467297][T11326] gretap0: entered promiscuous mode [ 477.484485][T11326] bridge0: port 3(gretap0) entered blocking state [ 477.491132][T11326] bridge0: port 3(gretap0) entered forwarding state [ 477.537196][T11329] gretap0: left allmulticast mode [ 477.542631][T11329] gretap0: left promiscuous mode [ 477.633215][T11329] bridge0: port 3(gretap0) entered disabled state [ 477.763592][T11331] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 477.770194][T11331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 477.835696][T11331] vhci_hcd vhci_hcd.0: Device attached [ 477.865412][T11336] vhci_hcd vhci_hcd.0: port 0 already used [ 478.070046][T11332] vhci_hcd: connection closed [ 478.070350][T10238] vhci_hcd: stop threads [ 478.078362][T10549] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 478.118156][ T5928] usb 36-1: SetAddress Request (2) to port 0 [ 478.124354][ T5928] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 478.137836][T10238] vhci_hcd: release socket [ 478.165364][T10238] vhci_hcd: disconnect device [ 478.241180][T10549] usb 3-1: Using ep0 maxpacket: 32 [ 478.257175][T10549] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 478.282945][T10549] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 478.369206][T10549] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 478.390818][T10549] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 478.424627][T10549] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.447604][T10549] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 478.480849][T10549] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 478.505495][T10549] usb 3-1: Product: syz [ 478.509943][T10549] usb 3-1: Manufacturer: syz [ 478.520050][T10549] usb 3-1: SerialNumber: syz [ 478.552473][T10549] usb 3-1: config 0 descriptor?? [ 478.574770][T10549] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 478.601950][T10549] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 478.859781][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 478.882104][T10549] usb 3-1: USB disconnect, device number 29 [ 478.882160][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 478.894995][T11335] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 478.935332][T10549] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 479.168033][ T5890] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 479.348115][ T5890] usb 2-1: device descriptor read/64, error -71 [ 479.588520][ T5890] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 479.726376][T11374] kvm: kvm [11373]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 479.753688][T11374] kvm: kvm [11373]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 479.773982][ T5890] usb 2-1: device descriptor read/64, error -71 [ 479.829899][T11378] FAULT_INJECTION: forcing a failure. [ 479.829899][T11378] name failslab, interval 1, probability 0, space 0, times 0 [ 479.878050][T11378] CPU: 0 UID: 0 PID: 11378 Comm: syz.2.1520 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 479.878083][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.878096][T11378] Call Trace: [ 479.878105][T11378] [ 479.878113][T11378] dump_stack_lvl+0x189/0x250 [ 479.878151][T11378] ? __pfx____ratelimit+0x10/0x10 [ 479.878184][T11378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.878216][T11378] ? __pfx__printk+0x10/0x10 [ 479.878246][T11378] ? __pfx___might_resched+0x10/0x10 [ 479.878278][T11378] ? fs_reclaim_acquire+0x7d/0x100 [ 479.878309][T11378] should_fail_ex+0x414/0x560 [ 479.878340][T11378] should_failslab+0xa8/0x100 [ 479.878365][T11378] __kmalloc_noprof+0xcb/0x4f0 [ 479.878384][T11378] ? ethnl_default_notify+0x184/0x990 [ 479.878416][T11378] ethnl_default_notify+0x184/0x990 [ 479.878442][T11378] ? consume_skb+0xce/0xf0 [ 479.878479][T11378] ? netlink_broadcast_filtered+0x10c6/0x1140 [ 479.878503][T11378] ? __pfx_ethnl_default_notify+0x10/0x10 [ 479.878557][T11378] ? mutex_is_locked+0x17/0x50 [ 479.878575][T11378] ? rtnl_is_locked+0x15/0x20 [ 479.878606][T11378] ethnl_netdev_event+0xe2/0x160 [ 479.878636][T11378] notifier_call_chain+0x1b3/0x3e0 [ 479.878679][T11378] netdev_features_change+0x85/0xc0 [ 479.878702][T11378] ? __pfx_netdev_features_change+0x10/0x10 [ 479.878724][T11378] ? security_capable+0x7e/0x2e0 [ 479.878761][T11378] dev_ethtool+0x1520/0x1990 [ 479.878810][T11378] ? __pfx_dev_ethtool+0x10/0x10 [ 479.878857][T11378] ? dev_load+0x21/0x1f0 [ 479.878880][T11378] dev_ioctl+0x392/0x1150 [ 479.878904][T11378] sock_do_ioctl+0x22c/0x300 [ 479.878940][T11378] ? __pfx_sock_do_ioctl+0x10/0x10 [ 479.878970][T11378] ? __lock_acquire+0xab9/0xd20 [ 479.879017][T11378] sock_ioctl+0x576/0x790 [ 479.879051][T11378] ? __pfx_sock_ioctl+0x10/0x10 [ 479.879082][T11378] ? __fget_files+0x2a/0x420 [ 479.879105][T11378] ? __fget_files+0x3a0/0x420 [ 479.879128][T11378] ? __fget_files+0x2a/0x420 [ 479.879156][T11378] ? bpf_lsm_file_ioctl+0x9/0x20 [ 479.879188][T11378] ? __pfx_sock_ioctl+0x10/0x10 [ 479.879219][T11378] __se_sys_ioctl+0xf9/0x170 [ 479.879253][T11378] do_syscall_64+0xfa/0x3b0 [ 479.879273][T11378] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.879303][T11378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.879324][T11378] ? clear_bhb_loop+0x60/0xb0 [ 479.879351][T11378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.879373][T11378] RIP: 0033:0x7fc382d8e929 [ 479.879392][T11378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.879410][T11378] RSP: 002b:00007fc383cce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.879433][T11378] RAX: ffffffffffffffda RBX: 00007fc382fb5fa0 RCX: 00007fc382d8e929 [ 479.879449][T11378] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000005 [ 479.879470][T11378] RBP: 00007fc383cce090 R08: 0000000000000000 R09: 0000000000000000 [ 479.879483][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.879496][T11378] R13: 0000000000000000 R14: 00007fc382fb5fa0 R15: 00007fc3830dfa28 [ 479.879528][T11378] [ 480.196918][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.232054][ T5890] usb usb2-port1: attempt power cycle [ 480.498025][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 480.578104][ T5890] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 480.655002][ T5890] usb 2-1: device descriptor read/8, error -71 [ 480.712379][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 245, setting to 64 [ 480.761549][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 480.794866][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.797220][T11384] program syz.2.1522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.861990][ T10] usb 5-1: config 0 descriptor?? [ 480.938013][ T5890] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 480.985928][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 481.024168][T11388] bridge2: entered promiscuous mode [ 481.072704][ T5890] usb 2-1: device descriptor read/8, error -71 [ 481.228269][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.237528][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.272536][ T5890] usb usb2-port1: unable to enumerate USB device [ 481.968013][ T10] ath6kl: Failed to submit usb control message: -110 [ 481.989876][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 482.008483][T11398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 482.011685][ T10] ath6kl: Unable to send get target info: -110 [ 482.015070][T11398] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 482.218415][T11398] vhci_hcd vhci_hcd.0: Device attached [ 482.286705][T11401] vhci_hcd vhci_hcd.0: port 0 already used [ 482.316494][ T10] ath6kl: Failed to init ath6kl core: -110 [ 482.627637][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 482.658062][ T5890] usb 34-1: SetAddress Request (2) to port 0 [ 482.664363][ T5890] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 482.711146][T11400] vhci_hcd: connection reset by peer [ 482.731116][ T12] vhci_hcd: stop threads [ 482.774578][ T12] vhci_hcd: release socket [ 482.786233][ T12] vhci_hcd: disconnect device [ 483.115691][T11418] netlink: 'syz.6.1527': attribute type 3 has an invalid length. [ 483.129471][T11415] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 483.136029][T11415] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 483.197414][T11415] vhci_hcd vhci_hcd.0: Device attached [ 483.241589][ T5928] usb 36-1: device descriptor read/8, error -110 [ 483.314223][T11416] vhci_hcd: connection closed [ 483.315221][ T13] vhci_hcd: stop threads [ 483.324958][ T13] vhci_hcd: release socket [ 483.330265][ T13] vhci_hcd: disconnect device [ 483.368073][ T10] vhci_hcd: vhci_device speed not set [ 483.669170][ T5928] usb usb36-port1: attempt power cycle [ 484.240719][ T5928] usb usb36-port1: unable to enumerate USB device [ 484.290761][T10549] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 484.450204][T10549] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 484.458608][T10549] usb 7-1: config 0 has no interface number 0 [ 484.485598][T10549] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 484.500163][T10549] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.525664][T10549] usb 7-1: Product: syz [ 484.545745][T10549] usb 7-1: Manufacturer: syz [ 484.567196][T10549] usb 7-1: SerialNumber: syz [ 484.610492][T10549] usb 7-1: config 0 descriptor?? [ 484.620756][ T10] usb 5-1: USB disconnect, device number 35 [ 484.921038][ T30] kauditd_printk_skb: 568 callbacks suppressed [ 484.921054][ T30] audit: type=1326 audit(1749926617.840:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.056701][ T30] audit: type=1326 audit(1749926617.880:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.080005][T10549] usb 7-1: Firmware version (0.0) predates our first public release. [ 485.094017][T10549] usb 7-1: Please update to version 0.2 or newer [ 485.113358][T10549] usb 7-1: Firmware: build A. [ 485.127706][ T30] audit: type=1326 audit(1749926617.890:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.221309][ T30] audit: type=1326 audit(1749926617.890:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.253946][ T30] audit: type=1326 audit(1749926617.890:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.446913][ T30] audit: type=1326 audit(1749926617.890:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.520839][ T30] audit: type=1326 audit(1749926617.890:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.597756][ T30] audit: type=1326 audit(1749926617.890:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.623995][ T30] audit: type=1326 audit(1749926617.900:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 485.658107][ T30] audit: type=1326 audit(1749926617.900:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.2.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc382d8e929 code=0x7ffc0000 [ 486.417410][T11459] netlink: 'syz.1.1540': attribute type 11 has an invalid length. [ 486.505475][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1540'. [ 486.518116][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1540'. [ 486.669624][T11465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1542'. [ 486.935526][T11470] fuse: Unknown parameter '00000000000000000000Ngroup_id' [ 487.361785][ T5928] usb 7-1: USB disconnect, device number 27 [ 487.758881][ T5890] usb 34-1: device descriptor read/8, error -110 [ 487.799583][ T5928] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 487.827187][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 487.980874][ T5928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.993504][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 488.012835][ T5928] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 488.025619][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.052687][ T5928] usb 7-1: Product: syz [ 488.067101][ T5928] usb 7-1: Manufacturer: syz [ 488.071950][ T5928] usb 7-1: SerialNumber: syz [ 488.083956][ T5928] usb 7-1: config 0 descriptor?? [ 488.158111][ T3582] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 488.162009][ T5890] usb usb34-port1: attempt power cycle [ 488.181390][ T5928] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 488.222134][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.259269][ T5928] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 488.292295][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.305806][ T5928] usb 7-1: media controller created [ 488.311427][ T3582] usb 3-1: device descriptor read/64, error -71 [ 488.333549][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.366396][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.388081][T11494] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1553'. [ 488.490689][ T5928] DVB: Unable to find symbol tda10046_attach() [ 488.499126][ T5928] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 488.508054][ T5928] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 488.528120][ T5928] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 488.578014][ T3582] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 488.593654][ T5928] usb 7-1: USB disconnect, device number 28 [ 488.729126][ T5890] usb usb34-port1: unable to enumerate USB device [ 488.748051][ T3582] usb 3-1: device descriptor read/64, error -71 [ 488.868585][ T3582] usb usb3-port1: attempt power cycle [ 488.978611][ T5927] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 489.058443][T11503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1556'. [ 489.168056][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 489.185398][ T5927] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 489.200510][ T5927] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 489.225619][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 489.236992][ T3582] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 489.295286][ T5927] usb 2-1: config 1 has no interface number 0 [ 489.302686][ T5927] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.302944][ T3582] usb 3-1: device descriptor read/8, error -71 [ 489.321207][ T5927] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 489.355153][ T5927] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 489.387729][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.419248][ T5927] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 489.528177][ T5928] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 489.619979][ T5927] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 489.648044][ T3582] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 489.699534][ T3582] usb 3-1: device descriptor read/8, error -71 [ 489.724182][ T5928] usb 5-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.739404][ T5928] usb 5-1: config 1 interface 0 has no altsetting 0 [ 489.831484][T11513] fuse: Unknown parameter '00000000000000000000Ngroup_id' [ 489.848980][ T3582] usb usb3-port1: unable to enumerate USB device [ 489.856001][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.887151][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.935786][ T5928] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.40 [ 489.946563][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.036392][ T5928] usb 5-1: Product: ⑿ꑙ⥰삶⛈伍嬨繾쾿㼧뿩秇Ｆ࿈暼꿨謲뼞⛬즦鸍躲㽿痵຃य耈﬋腙࿃（圜娸瞀쑐飏㪵ꛂ㥆阬쩆薻髓晣铀뉓ꒄꗁ㵎墋쒗봏콢撂ﳔ裂뤔僖픬糱෶鑹ࣗꪪⱜ輓흓낶臖鴱ꅓ糘䃍셿쌠뉠뎶﬒薐耓ᄹ䬴幄굦㦨瓐劎‬䱩⮩羽ᖍḏ颦쏝儬ޙႢỆ [ 490.135977][ T3582] usb 2-1: USB disconnect, device number 37 [ 490.152178][ T3582] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 490.173003][ T5928] usb 5-1: Manufacturer: 僱이度찬圇ᨳꆰ៕㫱➏鉝줇颙䶌춯곕뤢䠈툦媪ᗘ㛺Ჵ諠琘㻞떅쀆늋䜕ꢍ힁樴摝螓飳켛뉚ꢦ谴剬᥀ᐷ뼱嶝耿ᦇ綈ᭆ뱮ŏ踓椌ᆢﳤ귪ﯤꣻ㜽෗灨⛙ [ 490.197395][ T5928] usb 5-1: SerialNumber: 杜儊尙ℏ㰹뿝錙槃鳗⌰䷝ [ 490.302434][T11517] FAULT_INJECTION: forcing a failure. [ 490.302434][T11517] name failslab, interval 1, probability 0, space 0, times 0 [ 490.315401][T11517] CPU: 0 UID: 0 PID: 11517 Comm: syz.0.1559 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 490.315433][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.315446][T11517] Call Trace: [ 490.315455][T11517] [ 490.315464][T11517] dump_stack_lvl+0x189/0x250 [ 490.315503][T11517] ? __pfx____ratelimit+0x10/0x10 [ 490.315527][T11517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.315557][T11517] ? __pfx__printk+0x10/0x10 [ 490.315587][T11517] ? __pfx___might_resched+0x10/0x10 [ 490.315619][T11517] ? fs_reclaim_acquire+0x7d/0x100 [ 490.315651][T11517] should_fail_ex+0x414/0x560 [ 490.315675][T11517] should_failslab+0xa8/0x100 [ 490.315693][T11517] __kmalloc_noprof+0xcb/0x4f0 [ 490.315706][T11517] ? kfree+0x4d/0x440 [ 490.315738][T11517] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.315773][T11517] tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.315806][T11517] ? tomoyo_domain+0xd9/0x130 [ 490.315833][T11517] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 490.315851][T11517] tomoyo_path_number_perm+0x1e8/0x5a0 [ 490.315878][T11517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.315923][T11517] ? __lock_acquire+0xab9/0xd20 [ 490.315976][T11517] ? __fget_files+0x2a/0x420 [ 490.316005][T11517] ? __fget_files+0x2a/0x420 [ 490.316027][T11517] ? __fget_files+0x3a0/0x420 [ 490.316050][T11517] ? __fget_files+0x2a/0x420 [ 490.316080][T11517] security_file_ioctl+0xcb/0x2d0 [ 490.316106][T11517] __se_sys_ioctl+0x47/0x170 [ 490.316142][T11517] do_syscall_64+0xfa/0x3b0 [ 490.316161][T11517] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.316193][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.316216][T11517] ? clear_bhb_loop+0x60/0xb0 [ 490.316243][T11517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.316264][T11517] RIP: 0033:0x7fcd6e78e929 [ 490.316284][T11517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.316303][T11517] RSP: 002b:00007fcd6f632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.316327][T11517] RAX: ffffffffffffffda RBX: 00007fcd6e9b6160 RCX: 00007fcd6e78e929 [ 490.316343][T11517] RDX: 00002000000000c0 RSI: 00000000c0045627 RDI: 0000000000000005 [ 490.316358][T11517] RBP: 00007fcd6f632090 R08: 0000000000000000 R09: 0000000000000000 [ 490.316372][T11517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.316385][T11517] R13: 0000000000000001 R14: 00007fcd6e9b6160 R15: 00007fcd6eadfa28 [ 490.316428][T11517] [ 490.562321][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.601579][T11508] netlink: 'syz.4.1558': attribute type 2 has an invalid length. [ 490.628385][T11518] netlink: 'syz.4.1558': attribute type 2 has an invalid length. [ 490.735873][T11517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.304037][ T5928] usbhid 5-1:1.0: can't add hid device: -71 [ 491.328149][ T5928] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 491.380373][T11539] kvm: Disabled LAPIC found during irq injection [ 491.384089][ T5928] usb 5-1: USB disconnect, device number 36 [ 491.538182][ T5890] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 491.753201][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.764846][ T5890] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 491.994107][ T5890] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 492.010692][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.101242][ T5890] usb 3-1: config 0 descriptor?? [ 492.185161][ T3582] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 492.391919][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 492.583435][ T3582] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.599882][ T3582] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.655962][ T3582] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 492.668286][T10549] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 492.810159][ T3582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.820531][T10549] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 492.834765][ T3582] usb 5-1: config 0 descriptor?? [ 492.848163][T10549] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.935641][T10549] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 492.959572][T10549] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 493.028198][T10549] usb 7-1: Manufacturer: syz [ 493.051259][T10549] usb 7-1: config 0 descriptor?? [ 493.508611][T10549] rc_core: IR keymap rc-hauppauge not found [ 493.514765][T10549] Registered IR keymap rc-empty [ 493.521464][T10549] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 493.537212][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1571'. [ 493.539443][T10549] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 493.644211][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 493.674348][ C0] igorplugusb 7-1:0.0: Error: urb status = -32 [ 493.767662][T11569] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 493.930904][ T3582] usb 7-1: USB disconnect, device number 29 [ 494.296716][ T5890] usb 3-1: string descriptor 0 read error: -71 [ 494.304830][ T5890] usb 3-1: USB disconnect, device number 34 [ 494.945895][T11582] fuse: Bad value for 'fd' [ 495.889962][T11599] netlink: 'syz.6.1581': attribute type 5 has an invalid length. [ 495.982029][T11576] veth1_to_bond: entered allmulticast mode [ 495.991880][T11578] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 496.127011][T11576] veth1_to_bond: left allmulticast mode [ 496.478365][ T3582] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 496.617263][ T5928] usb 5-1: USB disconnect, device number 37 [ 496.638153][ T3582] usb 3-1: Using ep0 maxpacket: 16 [ 496.646759][ T3582] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=f4.47 [ 496.668460][ T3582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.676518][ T3582] usb 3-1: Product: syz [ 496.727949][ T3582] usb 3-1: Manufacturer: syz [ 496.744427][ T3582] usb 3-1: SerialNumber: syz [ 496.770633][ T3582] usb 3-1: config 0 descriptor?? [ 496.818571][ T3582] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 496.993663][T11612] fuse: Bad value for 'fd' [ 497.031057][T11602] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1583'. [ 497.042516][ T3582] gspca_sn9c2028: read1 error -32 [ 497.054315][ T3582] gspca_sn9c2028: read1 error -32 [ 497.078719][ T3582] gspca_sn9c2028: read1 error -71 [ 497.110374][ T3582] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 497.148287][ T3582] usb 3-1: USB disconnect, device number 35 [ 498.022484][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1592'. [ 499.104806][T11647] netlink: 'syz.6.1595': attribute type 4 has an invalid length. [ 499.862879][T11653] fuse: Bad value for 'fd' [ 499.938192][T10549] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 499.981156][T11654] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.118412][T11661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'. [ 500.148065][T10549] usb 5-1: device descriptor read/64, error -71 [ 500.198026][ T5890] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 500.349958][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.363454][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.388085][T10549] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 500.411224][ T5890] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 500.415967][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1601'. [ 500.457601][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.503875][ T5890] usb 3-1: config 0 descriptor?? [ 500.528348][T10549] usb 5-1: device descriptor read/64, error -71 [ 500.641450][T10549] usb usb5-port1: attempt power cycle [ 500.954573][ T5890] hid-led 0003:04D8:F372.000A: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 501.008202][T10549] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 501.048958][T10549] usb 5-1: device descriptor read/8, error -71 [ 501.058161][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 501.435802][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 501.490215][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.538671][T10549] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 501.550961][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'. [ 501.579485][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.638044][T10549] usb 5-1: device descriptor read/8, error -71 [ 501.659888][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 501.682650][ T5890] hid-led 0003:04D8:F372.000A: Greynut Luxafor initialized [ 501.715979][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 501.716005][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.719872][ T10] usb 7-1: config 0 descriptor?? [ 501.768862][T10549] usb usb5-port1: unable to enumerate USB device [ 501.876304][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 503.275214][ T3582] usb 3-1: USB disconnect, device number 36 [ 503.288036][T10549] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 503.296626][ T13] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 503.332135][T10234] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 503.408141][T10234] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 503.428120][T10238] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 503.449359][T10238] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 503.486365][T10549] usb 2-1: Using ep0 maxpacket: 8 [ 503.493880][T10549] usb 2-1: descriptor type invalid, skip [ 503.500537][T10238] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 503.512171][T10549] usb 2-1: descriptor type invalid, skip [ 503.522381][T10549] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 185, changing to 11 [ 503.534024][T10549] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 503.548059][T10238] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 503.561480][ T13] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 503.574567][T10549] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 503.592569][T10549] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 503.605818][T10238] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 503.643541][T10549] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.652959][T10549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.660117][ T13] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 503.673933][T10549] usb 2-1: Product: syz [ 503.682980][T10549] usb 2-1: Manufacturer: syz [ 503.687846][T10549] usb 2-1: SerialNumber: syz [ 503.698213][T10238] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 503.714863][T10238] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 503.773734][T10238] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 503.821409][T10238] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 503.860420][ T1025] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 503.890636][T10238] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 503.895259][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 503.939592][T10238] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 503.996751][T10234] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 504.164329][T11706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'. [ 504.363742][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 504.412518][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 504.473046][ T3582] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 504.479001][T10549] cdc_ncm 2-1:1.0: bind() failure [ 504.500694][ T10] usb 7-1: USB disconnect, device number 30 [ 504.521307][T10549] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 504.532993][T10549] cdc_ncm 2-1:1.1: bind() failure [ 504.552744][T10549] usb 2-1: USB disconnect, device number 38 [ 504.628518][T11711] binder: 11710:11711 ioctl 400c620e 200000000380 returned -22 [ 504.642430][ T3582] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 504.663860][ T3582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.696110][ T3582] usb 3-1: config 0 descriptor?? [ 504.750192][ T3582] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 505.178245][T10549] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 505.408157][T10549] usb 5-1: Using ep0 maxpacket: 8 [ 505.418534][T10549] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.438572][T10549] usb 5-1: config 0 has no interfaces? [ 505.496927][T10549] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 505.515319][T10549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.535653][T10549] usb 5-1: Product: syz [ 505.544971][T10549] usb 5-1: Manufacturer: syz [ 505.615279][T10549] usb 5-1: SerialNumber: syz [ 505.638838][T10549] usb 5-1: config 0 descriptor?? [ 506.070102][T11738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.090738][T11738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.175670][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1623'. [ 506.355196][T11738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.418673][T11738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.668213][T10549] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 506.728629][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.735333][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.828017][T10549] usb 2-1: Using ep0 maxpacket: 8 [ 506.838425][T10549] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 506.847779][T10549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.855874][T10549] usb 2-1: Product: syz [ 506.862551][T10549] usb 2-1: Manufacturer: syz [ 506.867193][T10549] usb 2-1: SerialNumber: syz [ 506.902102][T10549] usb 2-1: config 0 descriptor?? [ 506.925424][T10549] gspca_main: se401-2.14.0 probing 047d:5003 [ 507.164971][T11430] usb 5-1: USB disconnect, device number 42 [ 507.330812][T10549] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 507.347626][T10549] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 507.425065][T10549] usb 2-1: USB disconnect, device number 39 [ 507.741271][T11756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.769046][T11756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.915650][ T3582] usb 3-1: USB disconnect, device number 37 [ 508.288342][ T3582] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 508.475145][ T3582] usb 3-1: Using ep0 maxpacket: 32 [ 508.492727][ T3582] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 508.525480][ T3582] usb 3-1: config 1 has no interface number 0 [ 508.580671][ T3582] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.609095][ T3582] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.657951][ T3582] usb 3-1: config 1 interface 236 has no altsetting 0 [ 508.676438][ T3582] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 508.685234][ T3582] usb 3-1: config 1 has no interface number 0 [ 508.709723][ T3582] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.750717][ T3582] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.758122][T11430] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 508.784284][ T3582] usb 3-1: config 1 interface 236 has no altsetting 0 [ 508.801711][ T3582] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 508.814224][ T3582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.841376][ T3582] usb 3-1: Product: syz [ 508.865955][ T3582] usb 3-1: Manufacturer: syz [ 508.877113][ T3582] usb 3-1: SerialNumber: syz [ 508.935882][ T3582] ti_usb_3410_5052 3-1:1.236: TI USB 5052 2 port adapter converter detected [ 508.995111][T11430] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.025874][T11430] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.044751][T11430] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 509.059595][T11430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 509.084304][T11430] usb 2-1: SerialNumber: syz [ 509.133980][ T3582] usb 3-1: USB disconnect, device number 38 [ 509.148237][T10549] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 509.209834][T11779] atomic_op ffff888069765198 conn xmit_atomic 0000000000000000 [ 509.306036][T10549] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 509.335391][T10549] usb 7-1: config 1 has no interface number 0 [ 509.344891][T11767] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 509.354472][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1632'. [ 509.374116][T10549] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.393829][T10549] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 509.403137][T10549] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 509.416220][T10549] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.425511][T10549] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.433642][T10549] usb 7-1: Product: syz [ 509.440767][T10549] usb 7-1: Manufacturer: syz [ 509.445541][T10549] usb 7-1: SerialNumber: syz [ 509.675900][T11775] binder: binder_mmap: 11774 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 509.685862][T11786] binder: binder_mmap: 11774 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 509.931935][T10549] cdc_ncm 7-1:1.1: failed GET_NTB_PARAMETERS [ 509.939033][T10549] cdc_ncm 7-1:1.1: bind() failure [ 510.116522][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.136760][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.198244][ T3582] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 510.368054][ T3582] usb 5-1: Using ep0 maxpacket: 8 [ 510.386797][ T3582] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 510.410628][ T3582] usb 5-1: config 179 has no interface number 0 [ 510.427032][ T3582] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 510.455898][ T3582] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 510.490640][ T3582] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.515813][ T3582] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 510.547482][ T3582] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 510.618338][ T3582] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 510.641947][ T3582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.794803][T11793] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 511.104637][T11793] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 511.111236][T11793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 511.219650][T11793] vhci_hcd vhci_hcd.0: Device attached [ 511.335505][T11804] vhci_hcd: connection closed [ 511.337186][ T1025] vhci_hcd: stop threads [ 511.362341][ T10] usb 5-1: USB disconnect, device number 43 [ 511.362359][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 511.376729][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 511.448294][T10549] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 511.538191][ T1025] vhci_hcd: release socket [ 511.570680][ T1025] vhci_hcd: disconnect device [ 511.618273][T11430] usb 2-1: USB disconnect, device number 40 [ 512.024328][ T3582] usb 7-1: USB disconnect, device number 31 [ 512.885943][T11835] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1651'. [ 513.428160][T11430] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 513.588186][T11430] usb 7-1: Using ep0 maxpacket: 8 [ 513.601734][T11430] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 513.627717][T11430] usb 7-1: config 0 has no interface number 1 [ 513.645517][T11430] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.663038][T11430] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 513.794150][T11430] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 513.878758][T11430] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 513.917785][T11430] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.962512][T11430] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 514.008258][T11430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 514.040077][T11430] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 514.088261][T11430] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 514.103746][T11430] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.143430][T11430] usb 7-1: Product: syz [ 514.160635][T11430] usb 7-1: Manufacturer: syz [ 514.177609][T11430] usb 7-1: SerialNumber: syz [ 514.198222][T11430] usb 7-1: config 0 descriptor?? [ 514.213444][T11838] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 514.237135][T11430] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.266013][T11430] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.493764][T11857] fuse: Bad value for 'user_id' [ 514.505247][T11430] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 514.511143][T11857] fuse: Bad value for 'user_id' [ 514.556821][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.581082][T11430] usb 7-1: USB disconnect, device number 32 [ 514.596568][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.979527][ T3582] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 515.024735][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1664'. [ 515.158161][ T3582] usb 3-1: Using ep0 maxpacket: 16 [ 515.171508][ T3582] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 515.182406][ T3582] usb 3-1: config 0 has no interface number 0 [ 515.188742][ T3582] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 515.200523][ T3582] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 515.214839][ T3582] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 515.224479][ T3582] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 515.232760][ T3582] usb 3-1: Product: syz [ 515.237514][ T3582] usb 3-1: Manufacturer: syz [ 515.242358][ T3582] usb 3-1: SerialNumber: syz [ 515.250594][ T3582] usb 3-1: config 0 descriptor?? [ 515.271070][ T3582] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 515.279747][ T3582] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 515.290867][ T3582] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 515.304063][ T3582] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 515.374655][ T3582] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 515.414804][ T3582] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 515.432612][ T3582] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 515.448133][ T3582] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 515.494986][ T3582] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 515.548622][T11877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.562319][ T3582] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 515.576745][T11877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.620368][T11881] binder_alloc: 11879: pid 11879 spamming oneway? 1 buffers allocated for a total size of 4096 [ 515.663153][T11881] binder_alloc: 11879: pid 11879 spamming oneway? 2 buffers allocated for a total size of 5120 [ 515.678313][ T31] INFO: task kworker/0:7:5926 blocked for more than 143 seconds. [ 515.693029][ T31] Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 [ 515.718558][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.749638][ T31] task:kworker/0:7 state:D stack:21208 pid:5926 tgid:5926 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 515.763730][ T31] Workqueue: usb_hub_wq hub_event [ 515.773260][ T31] Call Trace: [ 515.779782][ T31] [ 515.782894][ T31] __schedule+0x16f5/0x4d00 [ 515.788384][ T31] ? schedule+0x165/0x360 [ 515.793215][ T31] ? __pfx___schedule+0x10/0x10 [ 515.798452][ T31] ? schedule+0x91/0x360 [ 515.803377][ T31] schedule+0x165/0x360 [ 515.807759][ T31] schedule_timeout+0x9a/0x270 [ 515.820611][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.828272][ T31] ? wait_for_completion+0x267/0x5d0 [ 515.834981][ T31] wait_for_completion+0x2bf/0x5d0 [ 516.005272][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 516.101788][ T31] i2c_del_adapter+0x581/0x6e0 [ 516.106981][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.118057][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 516.134022][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 516.154603][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 516.161937][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 516.189909][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 516.196617][ T31] usb_probe_interface+0x644/0xbc0 [ 516.202759][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 516.208614][ T31] really_probe+0x26a/0x9a0 [ 516.213228][ T31] __driver_probe_device+0x18c/0x2f0 [ 516.222576][ T31] driver_probe_device+0x4f/0x430 [ 516.228709][ T31] __device_attach_driver+0x2ce/0x530 [ 516.234163][ T31] bus_for_each_drv+0x251/0x2e0 [ 516.239540][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 516.245590][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 516.251312][ T31] __device_attach+0x2b8/0x400 [ 516.257504][ T31] ? __pfx___device_attach+0x10/0x10 [ 516.267118][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 516.274245][ T31] bus_probe_device+0x185/0x260 [ 516.283674][ T31] device_add+0x7b6/0xb50 [ 516.289805][ T31] usb_set_configuration+0x1a87/0x20e0 [ 516.296793][ T31] usb_generic_driver_probe+0x8d/0x150 [ 516.306851][ T31] usb_probe_device+0x1c4/0x390 [ 516.313352][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 516.321237][ T31] really_probe+0x26a/0x9a0 [ 516.326793][ T31] __driver_probe_device+0x18c/0x2f0 [ 516.334385][ T31] driver_probe_device+0x4f/0x430 [ 516.342202][ T31] __device_attach_driver+0x2ce/0x530 [ 516.351922][ T31] bus_for_each_drv+0x251/0x2e0 [ 516.359244][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 516.366598][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 516.376648][ T31] __device_attach+0x2b8/0x400 [ 516.385648][ T31] ? __pfx___device_attach+0x10/0x10 [ 516.394687][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 516.400624][ T31] bus_probe_device+0x185/0x260 [ 516.406034][ T31] device_add+0x7b6/0xb50 [ 516.413938][ T31] usb_new_device+0xa39/0x16c0 [ 516.419145][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 516.424570][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.433690][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.441688][ T31] hub_event+0x2941/0x4a00 [ 516.446712][ T31] ? __pfx_hub_event+0x10/0x10 [ 516.448546][T11878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.456111][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 516.474542][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.481699][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 516.493046][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 516.499857][ T31] process_scheduled_works+0xae1/0x17b0 [ 516.505913][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.516417][ T31] worker_thread+0x8a0/0xda0 [ 516.522251][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.531835][ T31] ? __kthread_parkme+0x7b/0x200 [ 516.536930][ T31] kthread+0x70e/0x8a0 [ 516.542263][ T31] ? __pfx_worker_thread+0x10/0x10 [ 516.547625][ T31] ? __pfx_kthread+0x10/0x10 [ 516.556342][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.564828][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.573234][ T31] ? __pfx_kthread+0x10/0x10 [ 516.579410][ T31] ret_from_fork+0x3fc/0x770 [ 516.584217][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.592766][ T31] ? __switch_to_asm+0x39/0x70 [ 516.600330][ T31] ? __switch_to_asm+0x33/0x70 [ 516.605465][ T31] ? __pfx_kthread+0x10/0x10 [ 516.613354][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.618921][ T31] [ 516.622160][ T31] [ 516.622160][ T31] Showing all locks held in the system: [ 516.630926][T10549] vhci_hcd: vhci_device speed not set [ 516.640571][ T31] 1 lock held by ksoftirqd/1/23: [ 516.645684][ T31] 1 lock held by khungtaskd/31: [ 516.656066][ T31] #0: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 516.682101][ T31] 2 locks held by getty/5593: [ 516.686941][ T31] #0: ffff888030e4c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 516.702900][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 516.715440][ T31] 5 locks held by kworker/0:7/5926: [ 516.725525][ T31] #0: ffff888140acdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.737617][ T31] #1: ffffc90004dcfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.777523][ T31] #2: ffff888143fda198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 516.792185][ T31] #3: ffff88807ca7a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 516.805785][ T31] #4: ffff88804b046160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 516.822115][ T31] 4 locks held by udevd/6111: [ 516.841921][ T31] #0: ffff888077c5db08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 516.852529][ T31] #1: ffff88805c04c088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 516.865032][ T31] #2: ffff88805f72d1e8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 516.895054][ T31] #3: ffff88807ca7a198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 516.913740][ T31] 6 locks held by kworker/0:0/10549: [ 516.925261][ T31] #0: ffff888140acdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.948419][ T31] #1: ffffc9000c7f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.997092][ T31] #2: ffff88823bebe998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 517.034977][ T31] #3: ffff8880296b4510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 517.075392][ T31] #4: ffff8880292a3f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 517.117027][ T31] #5: ffffffff8eddba30 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 517.164410][ T31] 2 locks held by syz.4.1649/11823: [ 517.182727][ T31] #0: ffff88805cb78208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 517.222233][ T31] #1: ffffffff8e144878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 517.265310][ T31] 1 lock held by syz.0.1668/11882: [ 517.285436][ T31] 2 locks held by dhcpcd/11887: [ 517.305557][ T31] #0: ffff888054012258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 517.342821][ T31] #1: ffffffff8e144878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 517.400352][ T31] [ 517.438726][ T31] ============================================= [ 517.438726][ T31] [ 517.494429][ T31] NMI backtrace for cpu 0 [ 517.494453][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 517.494479][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.494493][ T31] Call Trace: [ 517.494501][ T31] [ 517.494511][ T31] dump_stack_lvl+0x189/0x250 [ 517.494562][ T31] ? __wake_up_klogd+0xd9/0x110 [ 517.494591][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.494625][ T31] ? __pfx__printk+0x10/0x10 [ 517.494662][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 517.494694][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 517.494718][ T31] ? _printk+0xcf/0x120 [ 517.494746][ T31] ? __pfx__printk+0x10/0x10 [ 517.494771][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 517.494803][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 517.494835][ T31] watchdog+0xfee/0x1030 [ 517.494867][ T31] ? watchdog+0x1de/0x1030 [ 517.494905][ T31] kthread+0x70e/0x8a0 [ 517.494933][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.494961][ T31] ? __pfx_kthread+0x10/0x10 [ 517.494988][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.495018][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.495048][ T31] ? __pfx_kthread+0x10/0x10 [ 517.495075][ T31] ret_from_fork+0x3fc/0x770 [ 517.495109][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 517.495146][ T31] ? __switch_to_asm+0x39/0x70 [ 517.495167][ T31] ? __switch_to_asm+0x33/0x70 [ 517.495188][ T31] ? __pfx_kthread+0x10/0x10 [ 517.495213][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.495253][ T31] [ 517.495261][ T31] Sending NMI from CPU 0 to CPUs 1: [ 517.654079][ C1] NMI backtrace for cpu 1 [ 517.654098][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 517.654121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.654133][ C1] RIP: 0010:debug_smp_processor_id+0x12/0x20 [ 517.654156][ C1] Code: cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 a0 86 e2 8b 48 c7 c6 e0 86 e2 8b 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 517.654174][ C1] RSP: 0018:ffffc90000197db0 EFLAGS: 00000093 [ 517.654194][ C1] RAX: ffffffff816fdf66 RBX: ffff88801d2cda00 RCX: ffff88801d2cda00 [ 517.654224][ C1] RDX: 0000000000000000 RSI: ffffffff8be286e0 RDI: ffffffff8be286a0 [ 517.654238][ C1] RBP: 0000000000000000 R08: ffffffff8fa108f7 R09: 1ffffffff1f4211e [ 517.654251][ C1] R10: dffffc0000000000 R11: fffffbfff1f4211f R12: ffffffff8fa108f0 [ 517.654266][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a59b40 [ 517.654278][ C1] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 517.654294][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.654306][ C1] CR2: 000056554ba06660 CR3: 0000000030162000 CR4: 00000000003526f0 [ 517.654322][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 517.654333][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 517.654345][ C1] Call Trace: [ 517.654352][ C1] [ 517.654359][ C1] tsc_verify_tsc_adjust+0x1b/0x300 [ 517.654387][ C1] ? arch_cpu_idle_enter+0x9/0x20 [ 517.654416][ C1] arch_cpu_idle_enter+0x10/0x20 [ 517.654442][ C1] do_idle+0x143/0x510 [ 517.654462][ C1] ? __pfx_do_idle+0x10/0x10 [ 517.654487][ C1] cpu_startup_entry+0x44/0x60 [ 517.654503][ C1] start_secondary+0x101/0x110 [ 517.654526][ C1] common_startup_64+0x13e/0x147 [ 517.654553][ C1] [ 517.669582][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 517.669606][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 517.669638][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.669652][ T31] Call Trace: [ 517.669663][ T31] [ 517.669677][ T31] dump_stack_lvl+0x99/0x250 [ 517.669720][ T31] ? __asan_memcpy+0x40/0x70 [ 517.669756][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.669792][ T31] ? __pfx__printk+0x10/0x10 [ 517.669833][ T31] panic+0x2db/0x790 [ 517.669876][ T31] ? __pfx_panic+0x10/0x10 [ 517.669912][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 517.669957][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 517.669990][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 517.670031][ T31] watchdog+0x102d/0x1030 [ 517.670067][ T31] ? watchdog+0x1de/0x1030 [ 517.670108][ T31] kthread+0x70e/0x8a0 [ 517.670141][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.670172][ T31] ? __pfx_kthread+0x10/0x10 [ 517.670202][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.670237][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.670272][ T31] ? __pfx_kthread+0x10/0x10 [ 517.670301][ T31] ret_from_fork+0x3fc/0x770 [ 517.670338][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 517.670379][ T31] ? __switch_to_asm+0x39/0x70 [ 517.670402][ T31] ? __switch_to_asm+0x33/0x70 [ 517.670427][ T31] ? __pfx_kthread+0x10/0x10 [ 517.670456][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.670500][ T31] [ 517.990595][ T31] Kernel Offset: disabled [ 517.995011][ T31] Rebooting in 86400 seconds..