last executing test programs: 15m15.079094856s ago: executing program 0 (id=82): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d8db000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x1012, 0x221e, 0x10000, 0x3, 0xfffffffa, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r4, 0x10000201, 0x0, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x5, 0x8, 0x1}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00070000000000000000000002000000000000000000000000060000c7c40ad4b2e3e856a70b110368e6ec26403fa2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r10, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 15m11.691751458s ago: executing program 0 (id=86): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x10001]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15m9.729201331s ago: executing program 0 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000000)={0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00031d0000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000205"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15m8.995823751s ago: executing program 0 (id=90): socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x80, 0x8, 0x9, {{0xc, 0x4, 0x3, 0x6, 0x30, 0x66, 0x0, 0xc1, 0x4, 0x0, @broadcast, @loopback, {[@end, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xa8, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x40}, @empty, @local]}, @end]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000001c0)=0x8, 0x4) 15m7.956425768s ago: executing program 0 (id=91): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x62) r0 = socket(0x1e, 0x4, 0x0) accept$packet(r0, 0x0, &(0x7f0000000080)) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) pipe2$9p(&(0x7f00000000c0), 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xffffffffffffffbf) fcntl$setsig(r4, 0xa, 0x12) socketpair$unix(0x1, 0x2, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r4, r5) r6 = memfd_create(&(0x7f00000001c0)='\x02\x00\x00\x00\xc5\x97Z1\x8c\xab\x19\x9a<(\xa5\xe6\xa4\xb9\xba\xf4\x81X,e\xb3$\x0e\x8e\fG\x96\x11$\xca\x06\xba\x9e\xd5\x1c\xb0\xb3\xac\xc9\x16\x06u\xd5\xef\xb2\xd6\x8cC|\x91\t\xcd\xe9|\xb8E\xec\xb0\xc2\x95\xb2$\xb4\xf4\x9b\xb4\x8fP{\xc0|\x8e>\x0f.>\xe5\x87Xk\x96 \x1c\f:w\xc9w\\kB\xa0\xcc=/\xdaNk\x1f\xdd\xe3\xcc@d\xaa3{\xd2G', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x13, r6, 0x0) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) 15m6.670230863s ago: executing program 0 (id=93): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000d00)='host1x_syncpt_wait_check\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000040), &(0x7f0000000440)=""/255}, 0x20) setsockopt(r0, 0xff, 0x0, 0x0, 0x0) r3 = eventfd2(0x5, 0x801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='keyring\x00', &(0x7f0000000d40)='\x7f,\xda[^P\xcb\xbc\xdd\x12\xcd\xf7R\xa5J\xf6i\xf7\x9a\xe6d\'\xd9\xc2\xb7\x99L\x89H.\x97\x0e\x1e\xa2V\t)v\x85\x15\xabv\xb3U\x9di*\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\xf47\xd3\xf1\xd1\x89\xef\xfdd\x1d\x1a\x90\x81\x16t\xaf\xce\xa6\xdaA\x9f\xdb\xd1\xe9') write$eventfd(r3, &(0x7f0000000080)=0xffffffff00000000, 0x8) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0xf27, 0x7, 0x1, 0x4, 0x5, 0x7, 0x400, 0x7, 0x54c6cff3, 0x5, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x400, 0x2c7c, 0x101, 0xc5, 0x89, 0x4, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x8, 0x1, 0x10004086, 0xffc, 0xfffffff8]}) write(r6, 0x0, 0x0) read$eventfd(r3, &(0x7f0000000000), 0x8) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000002180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000c40)=ANY=[@ANYBLOB="201e030000863c76aa3a0ddc15cd274ba9962d26434b4a7ece519ac262b79ffcc3d7261261b35d310c97e559a40e801bb899e681673c732021c5a77e2cac0789d2cb0f813d0c539341419b2971e40662cf4deaa34cdfda07c6eac15eac9716194cdc3bd8124b61ea12b42d53e5cd"], 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002540)=@newtaction={0xf3c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0xf28, 0x1, [@m_pedit={0xf24, 0xb, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x3d4, 0x0, 0x2, 0x10, 0x38000}, 0x55, 0x7, [{0x8000007, 0x1, 0x3, 0x8, 0x6, 0x5}, {0x2, 0x9, 0x9, 0x9, 0x3ff, 0xf}]}, [{0x401, 0x8001, 0xfffff939, 0x7, 0x4, 0x1}, {0x80000001, 0x973, 0x1, 0x0, 0x7, 0xfff}, {0x401, 0x3, 0x4, 0x5, 0x2, 0xdac2}, {0x5f6, 0x1, 0x7228, 0x3ab, 0x8001, 0x5}, {0x10001, 0xfffffffa, 0x1, 0x8, 0x4, 0x7f}, {0x1, 0x8, 0x6, 0x101, 0xf7, 0xc0000}, {0x4, 0x2, 0x3ff, 0x2, 0x9, 0x5}, {0x10, 0x3, 0x1, 0x1, 0x0, 0x6}, {0xcd, 0xd6, 0x8, 0x4, 0xffff530f, 0x4}, {0xc, 0x0, 0x8, 0xfffffffc, 0x4, 0x8}, {0x8, 0x6, 0x4, 0x3, 0x14b06848, 0x7}, {0xb3e, 0x7ff, 0x28, 0x80, 0x9, 0x55b}, {0x4, 0x10, 0x1ff, 0xb1, 0x3}, {0x6, 0x0, 0x6, 0xe29, 0x9}, {0x2, 0x5, 0xffffffff, 0xc, 0x7, 0x40}, {0x7, 0x10000, 0xd7, 0xc, 0x1000, 0x4}, {0xd2bc, 0x7, 0x4, 0x86, 0x7}, {0x2, 0xb3, 0x0, 0x9, 0x0, 0x61fa97b2}, {0x25, 0x3, 0x86, 0x9bae, 0x6689, 0x6}, {0x0, 0x40, 0x700, 0x401, 0x885, 0x9}, {0x8, 0xfffffff8, 0x14c9, 0x9, 0x80000003, 0x7}, {0xffffff7f, 0x627, 0x9, 0x8, 0x8, 0x8}, {0x401, 0x7, 0x7, 0x6e07, 0xfffffffb, 0x1000}, {0x381c0000, 0x9, 0x38b, 0x800, 0x2, 0x3}, {0xfffffffd, 0x6, 0x7, 0x4, 0x2, 0x8}, {0xfffffffd, 0x2, 0xf7, 0x9, 0x200, 0x9}, {0x990, 0x5, 0x8, 0x7fff, 0x81, 0x1}, {0xbcbe, 0x2, 0x1e6, 0x4765, 0x9, 0xfffffffb}, {0x3, 0x9, 0x401, 0xf, 0x8, 0x2}, {0x3, 0x7fffffff, 0xc299, 0x7, 0x6, 0x10}, {0x9, 0xa0db, 0x46, 0x54cc3089, 0xa8, 0x2}, {0x4, 0x2, 0x0, 0x2, 0x0, 0xfffffffa}, {0x8, 0x3, 0x7, 0x518, 0x100, 0x4}, {0x0, 0x947, 0x0, 0x7, 0x1, 0x8dfd}, {0x9, 0x8, 0x3, 0x2, 0xd28, 0x7c68}, {0xffffffff, 0x5, 0x672782ea, 0x9, 0x5c}, {0x9ca, 0x5, 0x0, 0x10001, 0x8, 0x3}, {0x45, 0x4, 0x8, 0x1, 0x8, 0x7}, {0x3, 0x4, 0x0, 0x5, 0x4, 0x8}, {0x9, 0xfffffffe, 0x5, 0xee8, 0x7fffffff, 0x80000001}, {0x200, 0x9, 0x0, 0x9, 0x6}, {0x0, 0x10001, 0x3, 0x2, 0x2, 0x5}, {0x4, 0x74, 0x8, 0x5, 0x5, 0x3a4}, {0x0, 0x1db, 0x15d, 0x3, 0x9, 0x5}, {0xfffffffc, 0x6, 0x5, 0x2, 0x2}, {0x6, 0x3, 0x0, 0x5, 0x5, 0x7}, {0x7967, 0x5, 0xfffffff6, 0x3, 0x0, 0xfffffcb0}, {0x647, 0x4, 0x7, 0x800, 0xa, 0xff}, {0x9dc1, 0x8, 0x400, 0x10, 0xa0c, 0x101}, {0x3, 0x8, 0x7, 0x5, 0x7fffffff, 0x7}, {0xc68, 0x4, 0x8, 0x10, 0xf1f, 0x1}, {0x80000001, 0x7, 0xe73e, 0x4, 0x10001, 0xffffffff}, {0x5, 0xc897, 0x5, 0x3, 0x9, 0x4}, {0x9, 0x10000, 0x2, 0xffff28a5, 0x80000000, 0xd}, {0x2bc, 0xa, 0x0, 0x0, 0x6, 0xfe4}, {0x8, 0x28, 0x401, 0xf, 0x8}, {0x6, 0xffffffab, 0xbc3d, 0x3, 0x7, 0x8}, {0x2, 0x3, 0x4, 0x5, 0x6, 0xe05}, {0x5, 0x56, 0xfffff800, 0xa, 0xe, 0x2}, {0x8, 0x80000000, 0x9, 0xd3e1, 0x3, 0x2}, {0xf0c9, 0x8000, 0x4, 0xdc49, 0x6, 0x6}, {0x1, 0x2, 0x2, 0x2, 0xff, 0x5}, {0x5, 0x2, 0x7f, 0x8, 0x80000001, 0x7fff}, {0xffffffff, 0xfff, 0x40, 0x9, 0x5, 0x2}, {0x0, 0x9, 0x10, 0x7, 0x8ef, 0x7fffffff}, {0x3e89, 0x1ff, 0x0, 0x8, 0x5, 0x2}, {0xfffffff7, 0x8, 0x46aef7fa, 0x7, 0x80000001, 0x8}, {0x6fd1a43e, 0x6, 0x7f, 0x7c, 0x0, 0x5}, {0xffffffff, 0x89d2, 0x800000, 0xfffffff8, 0x68, 0xd}, {0x43f7437b, 0x1, 0xd40, 0x120000, 0x7, 0x2}, {0x4, 0x0, 0x5, 0x200, 0x2, 0x9}, {0x7, 0x6, 0x9, 0x100, 0x9, 0x7}, {0x2, 0x4, 0x2, 0x800, 0x0, 0xb4}, {0x516d, 0xb, 0xffffffff, 0xfffffffd, 0x5, 0xca}, {0xb, 0x7f, 0x6, 0x6, 0x7, 0x8}, {0x0, 0x7f, 0x6, 0x6, 0x53}, {0x7fff, 0x7, 0x3, 0x3, 0x0, 0xfffffff8}, {0x3, 0x8, 0xff58, 0x10000, 0xe, 0xb}, {0x3, 0x8, 0x2, 0x10001, 0xc}, {0xffffffff, 0x9, 0x8, 0xb48e, 0xfffffff9, 0xfff}, {0x8000, 0x79, 0x7ffe, 0x2, 0x8, 0xb}, {0x0, 0x6, 0x200, 0x4, 0x7, 0x3}, {0x80, 0xf3c0, 0x43, 0x7, 0x9}, {0x1, 0x4, 0xeb, 0x9, 0xa92a, 0x2}, {0x4, 0x8, 0xe, 0xfff, 0x9, 0xb9e}, {0x1, 0x1, 0x401, 0x0, 0x6, 0x8001}, {0x7, 0x4, 0x4, 0x0, 0xe, 0x60}, {0xfffffff5, 0xfffffff7, 0x4, 0x7f, 0x1, 0x80}, {0x985, 0x1, 0x9f65, 0x5, 0x81, 0x621}, {0x2, 0xffff, 0xfffffff9, 0x86, 0x6}, {0x9770, 0x519c9da6, 0x9, 0xa46, 0x5, 0xf0000000}, {0x3, 0x2, 0x9, 0x4, 0x0, 0x7f}, {0x9, 0xffffffff, 0x9, 0x54, 0x2, 0x8}, {0x682, 0xa, 0x7, 0x523590f7, 0xb6e2, 0x35e5}, {0x8, 0x1, 0x7, 0x8, 0x101, 0x8}, {0x6, 0x2, 0xc, 0x6, 0xffff0000, 0x9}, {0xca, 0x4, 0x6, 0x9, 0x6, 0x81}, {0x1, 0x0, 0xbfa40, 0x1, 0xd, 0x7f00f6b4}, {0x3, 0x664f6357, 0x6, 0x4, 0x6, 0x80}, {0x5, 0x5, 0x9a4d, 0x4, 0xd2, 0x4}, {0x1, 0x4, 0x96, 0xe, 0x101, 0x2da}, {0x5399db0b, 0xffffff01, 0xdda, 0x0, 0x0, 0xfffffff7}, {0x8, 0x600, 0x80000001, 0x5578cc42, 0x2, 0x5}, {0x9, 0x6, 0xe1, 0x1, 0x8, 0x5}, {0x101, 0xd, 0x61ab, 0x10, 0x7ad7, 0x52b}, {0x31cc, 0x1, 0x7f, 0xfffff000, 0xebc, 0x45c}, {0x5, 0x6, 0xc1, 0x4, 0x1, 0x1}, {0xcf22, 0x0, 0x2, 0x8, 0x9e53, 0x2}, {0x2, 0xd, 0x10, 0x0, 0x8, 0xfffffff2}, {0x81, 0xf, 0x100, 0x7f, 0x7, 0x5}, {0xfffffff9, 0x8, 0x9, 0x2, 0x9, 0x4}, {0x1, 0x120000, 0x2, 0xffffffff, 0x0, 0x1}, {0x64, 0xfffffffd, 0x100, 0x8, 0x9, 0x6}, {0x4, 0x1, 0x0, 0x5, 0x6, 0x8}, {0x8, 0xd, 0x6, 0x5, 0xd, 0x3}, {0xc, 0x8, 0x3, 0x9, 0xc, 0x1}, {0x5, 0x9, 0xfffffffc, 0x75bb, 0x5, 0x9}, {0x80, 0xd396, 0x7, 0x4000005, 0x1, 0x1419}, {0x80, 0x2, 0x4, 0x8, 0xc3e, 0x7fffffff}, {0x400, 0xf3e6, 0x7, 0xb3e, 0x2}, {0xd7, 0x2, 0x8000, 0x8, 0x2, 0x2}, {0x400, 0x1, 0x6, 0x0, 0x6, 0x100}, {0xa10, 0x9, 0xffffffc0, 0x9, 0x6, 0x4d57}, {0x800, 0x2059, 0x8, 0x4000000, 0x9, 0x1000}, {0x8001, 0x31, 0xac13, 0x7, 0x9, 0xff}, {0x7, 0xfffffe26, 0x80000000, 0xd, 0x3, 0x400}, {0xfffffffc, 0x61, 0x7, 0x5, 0x3d0c, 0x3}, {0x3, 0x6, 0x5, 0xb, 0xffff, 0x3}], [{}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x3}, {0x3}, {0x4}, {0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0xc}, {}, {0x2}, {0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x3}, {0x5}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0xf, 0x1}, {0x8a127dc5192b3b, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}]}, {0xa6, 0x6, "8819e9759539f78ebf6e044cac811225866c3b5005f0433c5e7ba0e17c668801d6e2fafe3f85ddc6294777660891f5065a86d930ac8d1b9bfce1849673db6a6227f9c8be3d4ecd570c1b0495c1803ac836106ce95b2e118d5dd4a827a98d0f76c735d100ec1adfd53f4eeca9ee0fe7712576d2f5f7b374b3d5b927de03997a2286865101ee4766b14be0a6c49a65410e65fce627b9bb36ed829db6ab7dac7ae42529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2727e4e426eb9383}}}}]}]}, 0xf3c}}, 0x850) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000002500)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@arm64={0x3f, 0x80, 0x2, '\x00', 0xffffffff80000000}) r10 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r10, 0xc0305602, &(0x7f0000000cc0)={0x0, 0x1, 0x3016}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0xffffff43, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003e00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) 14m50.544439833s ago: executing program 32 (id=93): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000d00)='host1x_syncpt_wait_check\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000040), &(0x7f0000000440)=""/255}, 0x20) setsockopt(r0, 0xff, 0x0, 0x0, 0x0) r3 = eventfd2(0x5, 0x801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r4, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='keyring\x00', &(0x7f0000000d40)='\x7f,\xda[^P\xcb\xbc\xdd\x12\xcd\xf7R\xa5J\xf6i\xf7\x9a\xe6d\'\xd9\xc2\xb7\x99L\x89H.\x97\x0e\x1e\xa2V\t)v\x85\x15\xabv\xb3U\x9di*\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\xf47\xd3\xf1\xd1\x89\xef\xfdd\x1d\x1a\x90\x81\x16t\xaf\xce\xa6\xdaA\x9f\xdb\xd1\xe9') write$eventfd(r3, &(0x7f0000000080)=0xffffffff00000000, 0x8) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0xf27, 0x7, 0x1, 0x4, 0x5, 0x7, 0x400, 0x7, 0x54c6cff3, 0x5, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x400, 0x2c7c, 0x101, 0xc5, 0x89, 0x4, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x8, 0x1, 0x10004086, 0xffc, 0xfffffff8]}) write(r6, 0x0, 0x0) read$eventfd(r3, &(0x7f0000000000), 0x8) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000002180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000c40)=ANY=[@ANYBLOB="201e030000863c76aa3a0ddc15cd274ba9962d26434b4a7ece519ac262b79ffcc3d7261261b35d310c97e559a40e801bb899e681673c732021c5a77e2cac0789d2cb0f813d0c539341419b2971e40662cf4deaa34cdfda07c6eac15eac9716194cdc3bd8124b61ea12b42d53e5cd"], 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002540)=@newtaction={0xf3c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0xf28, 0x1, [@m_pedit={0xf24, 0xb, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x3d4, 0x0, 0x2, 0x10, 0x38000}, 0x55, 0x7, [{0x8000007, 0x1, 0x3, 0x8, 0x6, 0x5}, {0x2, 0x9, 0x9, 0x9, 0x3ff, 0xf}]}, [{0x401, 0x8001, 0xfffff939, 0x7, 0x4, 0x1}, {0x80000001, 0x973, 0x1, 0x0, 0x7, 0xfff}, {0x401, 0x3, 0x4, 0x5, 0x2, 0xdac2}, {0x5f6, 0x1, 0x7228, 0x3ab, 0x8001, 0x5}, {0x10001, 0xfffffffa, 0x1, 0x8, 0x4, 0x7f}, {0x1, 0x8, 0x6, 0x101, 0xf7, 0xc0000}, {0x4, 0x2, 0x3ff, 0x2, 0x9, 0x5}, {0x10, 0x3, 0x1, 0x1, 0x0, 0x6}, {0xcd, 0xd6, 0x8, 0x4, 0xffff530f, 0x4}, {0xc, 0x0, 0x8, 0xfffffffc, 0x4, 0x8}, {0x8, 0x6, 0x4, 0x3, 0x14b06848, 0x7}, {0xb3e, 0x7ff, 0x28, 0x80, 0x9, 0x55b}, {0x4, 0x10, 0x1ff, 0xb1, 0x3}, {0x6, 0x0, 0x6, 0xe29, 0x9}, {0x2, 0x5, 0xffffffff, 0xc, 0x7, 0x40}, {0x7, 0x10000, 0xd7, 0xc, 0x1000, 0x4}, {0xd2bc, 0x7, 0x4, 0x86, 0x7}, {0x2, 0xb3, 0x0, 0x9, 0x0, 0x61fa97b2}, {0x25, 0x3, 0x86, 0x9bae, 0x6689, 0x6}, {0x0, 0x40, 0x700, 0x401, 0x885, 0x9}, {0x8, 0xfffffff8, 0x14c9, 0x9, 0x80000003, 0x7}, {0xffffff7f, 0x627, 0x9, 0x8, 0x8, 0x8}, {0x401, 0x7, 0x7, 0x6e07, 0xfffffffb, 0x1000}, {0x381c0000, 0x9, 0x38b, 0x800, 0x2, 0x3}, {0xfffffffd, 0x6, 0x7, 0x4, 0x2, 0x8}, {0xfffffffd, 0x2, 0xf7, 0x9, 0x200, 0x9}, {0x990, 0x5, 0x8, 0x7fff, 0x81, 0x1}, {0xbcbe, 0x2, 0x1e6, 0x4765, 0x9, 0xfffffffb}, {0x3, 0x9, 0x401, 0xf, 0x8, 0x2}, {0x3, 0x7fffffff, 0xc299, 0x7, 0x6, 0x10}, {0x9, 0xa0db, 0x46, 0x54cc3089, 0xa8, 0x2}, {0x4, 0x2, 0x0, 0x2, 0x0, 0xfffffffa}, {0x8, 0x3, 0x7, 0x518, 0x100, 0x4}, {0x0, 0x947, 0x0, 0x7, 0x1, 0x8dfd}, {0x9, 0x8, 0x3, 0x2, 0xd28, 0x7c68}, {0xffffffff, 0x5, 0x672782ea, 0x9, 0x5c}, {0x9ca, 0x5, 0x0, 0x10001, 0x8, 0x3}, {0x45, 0x4, 0x8, 0x1, 0x8, 0x7}, {0x3, 0x4, 0x0, 0x5, 0x4, 0x8}, {0x9, 0xfffffffe, 0x5, 0xee8, 0x7fffffff, 0x80000001}, {0x200, 0x9, 0x0, 0x9, 0x6}, {0x0, 0x10001, 0x3, 0x2, 0x2, 0x5}, {0x4, 0x74, 0x8, 0x5, 0x5, 0x3a4}, {0x0, 0x1db, 0x15d, 0x3, 0x9, 0x5}, {0xfffffffc, 0x6, 0x5, 0x2, 0x2}, {0x6, 0x3, 0x0, 0x5, 0x5, 0x7}, {0x7967, 0x5, 0xfffffff6, 0x3, 0x0, 0xfffffcb0}, {0x647, 0x4, 0x7, 0x800, 0xa, 0xff}, {0x9dc1, 0x8, 0x400, 0x10, 0xa0c, 0x101}, {0x3, 0x8, 0x7, 0x5, 0x7fffffff, 0x7}, {0xc68, 0x4, 0x8, 0x10, 0xf1f, 0x1}, {0x80000001, 0x7, 0xe73e, 0x4, 0x10001, 0xffffffff}, {0x5, 0xc897, 0x5, 0x3, 0x9, 0x4}, {0x9, 0x10000, 0x2, 0xffff28a5, 0x80000000, 0xd}, {0x2bc, 0xa, 0x0, 0x0, 0x6, 0xfe4}, {0x8, 0x28, 0x401, 0xf, 0x8}, {0x6, 0xffffffab, 0xbc3d, 0x3, 0x7, 0x8}, {0x2, 0x3, 0x4, 0x5, 0x6, 0xe05}, {0x5, 0x56, 0xfffff800, 0xa, 0xe, 0x2}, {0x8, 0x80000000, 0x9, 0xd3e1, 0x3, 0x2}, {0xf0c9, 0x8000, 0x4, 0xdc49, 0x6, 0x6}, {0x1, 0x2, 0x2, 0x2, 0xff, 0x5}, {0x5, 0x2, 0x7f, 0x8, 0x80000001, 0x7fff}, {0xffffffff, 0xfff, 0x40, 0x9, 0x5, 0x2}, {0x0, 0x9, 0x10, 0x7, 0x8ef, 0x7fffffff}, {0x3e89, 0x1ff, 0x0, 0x8, 0x5, 0x2}, {0xfffffff7, 0x8, 0x46aef7fa, 0x7, 0x80000001, 0x8}, {0x6fd1a43e, 0x6, 0x7f, 0x7c, 0x0, 0x5}, {0xffffffff, 0x89d2, 0x800000, 0xfffffff8, 0x68, 0xd}, {0x43f7437b, 0x1, 0xd40, 0x120000, 0x7, 0x2}, {0x4, 0x0, 0x5, 0x200, 0x2, 0x9}, {0x7, 0x6, 0x9, 0x100, 0x9, 0x7}, {0x2, 0x4, 0x2, 0x800, 0x0, 0xb4}, {0x516d, 0xb, 0xffffffff, 0xfffffffd, 0x5, 0xca}, {0xb, 0x7f, 0x6, 0x6, 0x7, 0x8}, {0x0, 0x7f, 0x6, 0x6, 0x53}, {0x7fff, 0x7, 0x3, 0x3, 0x0, 0xfffffff8}, {0x3, 0x8, 0xff58, 0x10000, 0xe, 0xb}, {0x3, 0x8, 0x2, 0x10001, 0xc}, {0xffffffff, 0x9, 0x8, 0xb48e, 0xfffffff9, 0xfff}, {0x8000, 0x79, 0x7ffe, 0x2, 0x8, 0xb}, {0x0, 0x6, 0x200, 0x4, 0x7, 0x3}, {0x80, 0xf3c0, 0x43, 0x7, 0x9}, {0x1, 0x4, 0xeb, 0x9, 0xa92a, 0x2}, {0x4, 0x8, 0xe, 0xfff, 0x9, 0xb9e}, {0x1, 0x1, 0x401, 0x0, 0x6, 0x8001}, {0x7, 0x4, 0x4, 0x0, 0xe, 0x60}, {0xfffffff5, 0xfffffff7, 0x4, 0x7f, 0x1, 0x80}, {0x985, 0x1, 0x9f65, 0x5, 0x81, 0x621}, {0x2, 0xffff, 0xfffffff9, 0x86, 0x6}, {0x9770, 0x519c9da6, 0x9, 0xa46, 0x5, 0xf0000000}, {0x3, 0x2, 0x9, 0x4, 0x0, 0x7f}, {0x9, 0xffffffff, 0x9, 0x54, 0x2, 0x8}, {0x682, 0xa, 0x7, 0x523590f7, 0xb6e2, 0x35e5}, {0x8, 0x1, 0x7, 0x8, 0x101, 0x8}, {0x6, 0x2, 0xc, 0x6, 0xffff0000, 0x9}, {0xca, 0x4, 0x6, 0x9, 0x6, 0x81}, {0x1, 0x0, 0xbfa40, 0x1, 0xd, 0x7f00f6b4}, {0x3, 0x664f6357, 0x6, 0x4, 0x6, 0x80}, {0x5, 0x5, 0x9a4d, 0x4, 0xd2, 0x4}, {0x1, 0x4, 0x96, 0xe, 0x101, 0x2da}, {0x5399db0b, 0xffffff01, 0xdda, 0x0, 0x0, 0xfffffff7}, {0x8, 0x600, 0x80000001, 0x5578cc42, 0x2, 0x5}, {0x9, 0x6, 0xe1, 0x1, 0x8, 0x5}, {0x101, 0xd, 0x61ab, 0x10, 0x7ad7, 0x52b}, {0x31cc, 0x1, 0x7f, 0xfffff000, 0xebc, 0x45c}, {0x5, 0x6, 0xc1, 0x4, 0x1, 0x1}, {0xcf22, 0x0, 0x2, 0x8, 0x9e53, 0x2}, {0x2, 0xd, 0x10, 0x0, 0x8, 0xfffffff2}, {0x81, 0xf, 0x100, 0x7f, 0x7, 0x5}, {0xfffffff9, 0x8, 0x9, 0x2, 0x9, 0x4}, {0x1, 0x120000, 0x2, 0xffffffff, 0x0, 0x1}, {0x64, 0xfffffffd, 0x100, 0x8, 0x9, 0x6}, {0x4, 0x1, 0x0, 0x5, 0x6, 0x8}, {0x8, 0xd, 0x6, 0x5, 0xd, 0x3}, {0xc, 0x8, 0x3, 0x9, 0xc, 0x1}, {0x5, 0x9, 0xfffffffc, 0x75bb, 0x5, 0x9}, {0x80, 0xd396, 0x7, 0x4000005, 0x1, 0x1419}, {0x80, 0x2, 0x4, 0x8, 0xc3e, 0x7fffffff}, {0x400, 0xf3e6, 0x7, 0xb3e, 0x2}, {0xd7, 0x2, 0x8000, 0x8, 0x2, 0x2}, {0x400, 0x1, 0x6, 0x0, 0x6, 0x100}, {0xa10, 0x9, 0xffffffc0, 0x9, 0x6, 0x4d57}, {0x800, 0x2059, 0x8, 0x4000000, 0x9, 0x1000}, {0x8001, 0x31, 0xac13, 0x7, 0x9, 0xff}, {0x7, 0xfffffe26, 0x80000000, 0xd, 0x3, 0x400}, {0xfffffffc, 0x61, 0x7, 0x5, 0x3d0c, 0x3}, {0x3, 0x6, 0x5, 0xb, 0xffff, 0x3}], [{}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x3}, {0x3}, {0x4}, {0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0xc}, {}, {0x2}, {0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x3}, {0x5}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0xf, 0x1}, {0x8a127dc5192b3b, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}]}, {0xa6, 0x6, "8819e9759539f78ebf6e044cac811225866c3b5005f0433c5e7ba0e17c668801d6e2fafe3f85ddc6294777660891f5065a86d930ac8d1b9bfce1849673db6a6227f9c8be3d4ecd570c1b0495c1803ac836106ce95b2e118d5dd4a827a98d0f76c735d100ec1adfd53f4eeca9ee0fe7712576d2f5f7b374b3d5b927de03997a2286865101ee4766b14be0a6c49a65410e65fce627b9bb36ed829db6ab7dac7ae42529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2727e4e426eb9383}}}}]}]}, 0xf3c}}, 0x850) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000002500)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@arm64={0x3f, 0x80, 0x2, '\x00', 0xffffffff80000000}) r10 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r10, 0xc0305602, &(0x7f0000000cc0)={0x0, 0x1, 0x3016}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a06fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0xffffff43, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003e00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) 17.184895158s ago: executing program 2 (id=2178): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 12.64814239s ago: executing program 4 (id=2191): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x101d0) syz_open_dev$video4linux(&(0x7f0000001900), 0x6, 0xc0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 12.43120511s ago: executing program 1 (id=2193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000680)="0bcc", 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000940)=ANY=[@ANYRES64=r5, @ANYRES64=r1, @ANYRES64=r6, @ANYBLOB="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"], 0x40}, 0x400c820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="3d66d4af63c1fe4d800ecd3fc7", 0xd}, {&(0x7f0000000280)="b6d6489f8043ece16ec6", 0xa}, {&(0x7f0000000580)="d8dc2b703c32372e49138dad30cfb205812be41784966f80326f45f75002d2154986421d7a33db713e89bed9eb3965bb7414a5db8294a146415eee001c24f4fb8e8d7f26ae151ecd056ea3665906cfad0ae3141d580119cce89dbec4", 0x5c}], 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xe8}, 0x40) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, 0x0, 0x0, 0x2000000022, &(0x7f0000000480)) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x70) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a3200000000b70007"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) 9.489190808s ago: executing program 2 (id=2194): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.479245658s ago: executing program 4 (id=2195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x92a, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x44, 0xea, 0x9a, 0x10, 0x15a4, 0x1003, 0xbfa7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x918, 0x3, 0x80, 0x8, 0x80, 0x8, [{{0x9, 0x4, 0x57, 0x2, 0x9, 0x72, 0x1f, 0xd6, 0xe, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x3, "60d885"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x4, 0xb}]}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0x2, 0xfa, 0x8, [@generic={0xc0, 0x2, "5fddeff117792819df08dac639388622a951968956efe94b6f1047076bc8cfdce6b8185324aaa1a5061004f7161aceba0405bf47a5a3ffb68f4021e89bb46ba6d3ca88b78a2065062548a968798cbd1c2453c4cc9881a3e452d5bc9921e2d7a6564ec1f87858e38d592a7dfd3e4e10d80da71efda733049f9b3b1d2390479741b82e8b34e9df2c51aede3934a2cedebb68b7cf1b965d6a7d14bc3b92ff140aa3ca12c9bf00192366e4fb8250f9e0d314b79fc64b5206551aac29ff98a617"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x45, 0xe8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7, 0xa, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x5}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}, @generic={0x60, 0x21, "1383ed5464e6282b321dbd8aee50bcf0c206b546b25bd95e4141065f91abe306cc86485af403442eab97d6bb07cd67d864ec002982d5ecd79bee1ef73225393c13464d93a8b7b17475bd35125314c6c3b618566b7a94b1871c2032f450c2"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x2, 0x8, 0x0, [@generic={0x8d, 0x24, "8bc14c6179edcf08c0a53e8afae9b6d005267f46759494b6c669cd43f5e89ee710eff479782ec922976c1e9b02ed7696a5c72b901bc9491a847f781778db7de317735889b28c09df74bc44cb740879dfe1a39b074888f979e7582515d36bc3c277499cde665b464a6b52b9031b3f30723b7b375b4b7686e44e6067699e99f725be54eb333fcd7d5518f416"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x7fe, 0x5, 0x5, 0x6, [@generic={0x12, 0x4, "9b90ecec4e7f3dadada73854f3e05a92"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x6, 0x4, 0xf7, [@generic={0x98, 0x23, "e91df507b5b2d51864b874ac7e4d1bd22a7ae065aabae521d8bdf478c0d59502f34a7c567bc8f043f82e84ed6f83698bda70c85ee85158b985129fb2897c1b582cd56122bd944f6d81c8ce27070f7306af1c805128794ba51d4efb9ca551fd8978ac4783c54b7497ddf3e40722350ba3169971f02e2fb6537c5e81131ac9e261a25a9dcdbb383a4691ea34c4325e77b7dd6ace039ed7"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x361cdb57b31f095b, 0x64, 0x6, 0x6, [@generic={0xf7, 0x24, "cf108a576c084754ae9431f88461ef0696b9c65c96eff06ae3dce1da103e736ed6ff307dc1f2cdc38369570764dc902428fa8215598d7d6544fcf38de2e05fb82c7cfad959fab5a3bf8ec114fe67cc704fbc5edcebf6ca1f30cf51e014f3161fc34a2090851aa21b856fe4aad8657cf894c5c2df983a82021ccd51435263de62ef61aa27ac96afd96d18800f5dc716ef9866b4794c3334ae984ff5d345b06fa07618900ff05ac19565e70002a8832bde2d56011611e7dd87bb6bd4e0092e9879004f9fb0adf65705908640f8eed4f5de774837e420ef62a817ef328481a2078a87d3d3ab434e6b305698982635443aa44d81f6a349"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x8, 0x5, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xcd22}]}}]}}, {{0x9, 0x4, 0xf3, 0x7f, 0x3, 0xba, 0xe0, 0xd9, 0x9, [@hid_hid={0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x804}}], [{{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x0, 0x1, 0x46, [@generic={0x71, 0x23, "04ac9157809dd1eb741f5412092011e79826e4c94be1a5273ee2915a6102dab45aebb5be108ce4feb860e73db61c51a49f05a7a95d1527142397de2ac3853c76cb92bae8c95ce9d3a516d6ac13da280312e69dd04d26c7feedbf221939d1c8ceee6f9251a85a077d29d1b400781b37"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc1, 0x8}]}}, {{0x9, 0x5, 0x8, 0x63b1d69f9e55ddfc, 0x200, 0xf, 0xd, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x4, 0xb1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}]}}]}}, {{0x9, 0x4, 0xc2, 0x9, 0x5, 0xff, 0x5d, 0x1, 0xfb, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "f8c10b106ee7"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x40, 0x8}, [@mdlm_detail={0x4}, @country_functional={0xc, 0x24, 0x7, 0x8, 0x3, [0x9, 0x3ff, 0x2]}, @mbim={0xc, 0x24, 0x1b, 0x4cd2, 0x7, 0x3, 0x10, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}]}], [{{0x9, 0x5, 0x2, 0x10, 0xf3ba5509d80b1a63, 0x1, 0x2, 0x6, [@generic={0x66, 0x3, "123f81f3fa0ced3904b560f9fc2fc2b83fe6a36e6426f61186cce2a720c6a3117002c8b8879ea34a5368f54e479cfc14f2649229204bf0381026eaa0bc7ed0982635048e05d6f1a12da47021e984e9fd61d4b2e16787be155e265c4114788725cbdfbc31"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1b}]}}, {{0x9, 0x5, 0x9, 0x0, 0x420, 0x2, 0x6f, 0x6, [@generic={0x6, 0x23, "bba3c799"}]}}, {{0x9, 0x5, 0x5, 0x12, 0x200, 0x0, 0x91, 0xd, [@generic={0xe1, 0x23, "bf5d68ba44e5bbd9f3cd325bd998bf5a5c098a5ee74c029ae5c2618cbd0aa41fef69c228f46dba51496ceda00992e43435dad8550029ecdd7e8ebcff876cf7a7e836980ac5c7a362cfedac200929ac90f697ee1af33bb18ec2fa19d20463bf80cc389be3e13e915bcbdf75e28f859c90800d3e32b8723fde94b0b7ad7a1a5fa064ae56b5b5e7ffffe70c9554824a39e867bcd03eab59a5eff22dc76f1bb617f6962946b97986cf34b6d13aa24443474480d0d70d8955081b675ab49083021aef47cc2828974ed9b525fe4788ef76fa6d47c57fd27d0c3c07b521485dc2edf3"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x81, 0x7, 0x5, [@generic={0xcf, 0x23, "db63019db5c22ca350b5295e9d1c5d78267bf92534b9a54d35cb4e47cb6377433eb1126e4a108c5d06f026a6f362eb2c49a28b641f65bbdf0aa72fe833e46d655833af0b2ebd946afdb217ba083bd6d1b2afd72e281fecd1bec7b792d1b6a3394731e3e15aa0002ae8cac8487009f8f6a458f670758b6e0a6068dc9c72d694366d382ee834f71e7b542611a01171263190fed67c8a106fe9d44ddb21ed843cd0b11f854856b9e156c0f19067a75006bc13e776f757675becd5c9a81a35e8712441f9f70d3e067c3c0d96f70bc1"}, @generic={0x7e, 0xb, "ff8005bb79e2bf85653eda0a6a0f5a775daadff28cc57c3dbeb4e932c20da48b84f7ccc5f71535f5614ed1c012b5dd1f9d70584a2ea247030c515dba1c6290b9efe0b086a58d7e69d78b2b34c94392f1387682338161f916e5444b47c47c66fbf0c7dce97194e327bc4a79ef66f8ba668bf8eed1913563ddab91ba6f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x2, 0xb, 0x0, [@generic={0xdd, 0x6, "7c3f6362b7a5d46d685f72ba1f99c5b0c2bff85bab6afbc1d0a8b06c8b6e621bc5b386da7adb920948f9a7be3b55c579de5afe1c09de7788b1e41c2aeaa55a37d619b4fb29c4544fe87389a29ff42608532247d0ce654e44aab6f6b057f96b36ecd3b634e987b156ab26dea423de513b0fbd0b15593dc31ca8ec220e18b5c3b4496a8b724e0e43dd73d3e8fba3ac49dcd94256316f093b5c79763126df4968bef886f724e8ce31bd374ad97985516b3c46deed2839761b88ecb19c0bfdb2d67f9aa759bfdff66f553931de2df6996b3d3aa0313da84f4e6c53c57d"}, @generic={0x81, 0x22, "f0e4b4c6581d81336d1e709c48de2a75af4fa591453a0b40bebb851bc94cad6822ea7bdf2bda6371fedfaa9ec8f6099d6952dd4cc8cf538bbc5daafde4167d9f0203da522ea53e0d09a03b7a91d8591d838d92969b441ecb596e1284ed99ca2bbce3c170483f551d645ccd87b4d8d7449cc5f20dc459e06a2dfa95659b94c1"}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x39, 0x48, 0x40, 0x3}, 0x37, &(0x7f0000000180)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0xac, 0x3, 0x4, 0x0, 0x3, [0x3f00, 0xffc000, 0x3f30]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e6c0738419cd7a22556564700e6c7093"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000500)={0x14, &(0x7f0000000380)={0x20, 0xc, 0xfc, {0xfc, 0xc, "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"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, &(0x7f0000001200)={0x34, &(0x7f0000001000)={0x20, 0xb1439b8edd018b0e, 0xc3, "88f834c4a55ca5fa8f21b26562121177d64cb34cdc79017237725c7e88488e86c8ffa648570c0460077e712e23fd66b3216b74003cadab77beebdc1d7d883ec8e517c555a4b6b9f1343da7940a780e149f84774f2c3b4dcb8604a7b42dfe57713acdd43b114af0a52640734517d9c14ae467435a542f8178b41bb4d07bb16011f8ccd761da244b67445ef524e25ee85573e84dde241f079842adf60a4431b9cc40cb27a136f80d19ce8831a611533b385f484133ac5bf83aa7cfb505c0b69d42003ba9"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001100)={0x20, 0x0, 0xb7, {0xb5, "d09f449065ec1fd72123f6c991fb2f97eefdb4f47dd33c20634296b086172517f579cfb6690d4c21492a80316fa2c2bf71cb5a68f31880729902e6489629aa4d9928156b116b235af1943c490af4e0800ac43fb1f50ceea70dc2eb26ecde18034cd46093eeb95cc2a98b9afee968b445280430e9e47200853c93a154d952acd80c7dff42d7c9477114687444ba8c71d018f681f032956ef2ab24e96de804ff36487546958c56e51b3157ad96d0f15eef182e8752a7"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000011c0)={0x20, 0x0, 0x1}}) 8.747503633s ago: executing program 3 (id=2197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x24, 0x0, &(0x7f00000002c0)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce000000d49e8", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.637375304s ago: executing program 2 (id=2198): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gretap0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gretap0\x00', 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x3ffffffffffff40, 0x800) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594", @ANYRES16], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000004c0), 0x6, r2, 0x4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000004c0), 0x6, r2, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x13, &(0x7f0000000380)=""/19, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x0, 0x10, 0xfffffffe}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x20, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x20, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r5, &(0x7f00000003c0), &(0x7f0000000400)=0x10) (async) accept$phonet_pipe(r5, &(0x7f00000003c0), &(0x7f0000000400)=0x10) 8.492828181s ago: executing program 3 (id=2199): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000020303000000000000000000010000050800034000000001577954af080001000100000b485a28bb42b8a24daa16ab91cd01d47989bf3aa116733fa1f215534152677655b1e4c656a06de17ab73bced9e670f348e85b3b952a327df5fe619a17ff9030658b2ae34692d44b81b8ff8d1f2b9c8b10c55b419297d8"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8080) ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/62, &(0x7f0000000080)=0x3e) 8.422089645s ago: executing program 1 (id=2200): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000407000001000000000000000018120000ba6181095ddba41ef37ebca45fa5bde0ca538920abfd32c33f86d6d9d92dd2d127", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000003b000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 7.096569971s ago: executing program 3 (id=2202): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) unshare(0xc000400) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe4}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a0101000000000000000001"], 0xc0}}, 0x840) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec000000120001080000000000000001000000001c562bba431de197f4dfa89d2d6f6fd0", @ANYRES32=r3, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c00"], 0xec}}, 0x0) mq_open(&(0x7f0000000200)='\xf7\x03\x85\xa5n\x00\xc9\xff\x00\x00', 0x842, 0x38b, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x28000600) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003d68c5ee17688a2", 0x11) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x2642, 0x0) r7 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000240)=""/184, 0xb8}], 0x1, 0x2, 0x8) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x8e18) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000440)={0x0, 0x1000}, &(0x7f0000000480)) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0xfd, 0xe, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) close_range(r0, 0xffffffffffffffff, 0x2) 6.788544343s ago: executing program 1 (id=2203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0xfffffff7, @private2, 0x3f93}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000500)="2950724403144b8436e1b5e314e97a87d6a5fff2339a600de8293eac7997b1d179afe99d580762ff1464c3ec8a8c56e4b7f4458f6466eb969fde77eb6d8c03aeb36823805623abe4ebdda17456ffaea4644fc08f9b4a93126e17a37c3749552b28ab0c009ba7b8be69b07f0ad94ab077d86eecefa275359502fd7b9d439b0e992f2919710b4dd6b7e15ec35e20465940b29598deec73770ec2527f5c5329775e31f66ee52d7935e15ecc4a9690bc59271a8e48c92f87be2c631135e31a7ba003362a", 0xc2}, {&(0x7f0000000280)="84f6dfd63a7bd1c618325afb5e23d5952c58259ee104da664d26f9ec85617b3033f5e3028a071bdecbbaa09254b806048e7d44a9053b5141fc8f7235b76867416a6fdb4fad4b8efef90a21074969", 0x4e}, {&(0x7f0000000680)="ec24e6ea40d7a04e3b8686051ef15100606027a6f952e4192bbfabe91f9e5954177b3cff843212841be286068598ff083794f3f7b0c0df4d8e3c840db7a0163aa8655c23a38d4d6e5e02f66c8d8fd9dc13f6e881c44fff5d1cf68d7d972b786cac25a5e645aa2a568adb6c8c968bdb9b8a", 0x71}, {&(0x7f0000000700)="d52fba307afef33aafc87ab540a147866c25db8a29fce276009664fd9b6a56a96cae6ec9d013817420a09c6e84c1983bf04c494395e07371f5d251ce8aba68795a816a400117cd1fb75ed2a14e4e3d21ce8351fe57ebde523e9eaa5061e06929da230f16b415cdf77376412a5e1c72be6de1b2eea7e4e71b2b196ee8bd0dc7784acc8ad19c688a6c38530fb6754d8c1a1417d20ec5b15b95d8875dad8657e33ac09c95fe62116e90816b782e8e8d8a9bf4a7a762d20765ae243c6489b288", 0xbe}, {&(0x7f00000007c0)="790eba509de9efe2bf8586968cfa3853f8db7e0fb78df651bab561bfdf471106b776c8f534a7f55fc02a3ae9fb20262d3ee6b12f95a5771bf033db6bc08a69d3cf37803b41d0b21cfbf1c7312a4b34aa43bbbedf2e6616bb06ec259a2c7ee9fac2248a2f8d4ba2059be0f8100981fa", 0x6f}, {&(0x7f0000000a00)="c4f5f9be8d75bb47552ded711846c996f9bb6d4f6061984886648cb8e4179e1c79da3140e690c3aba95830ac017feecaaa3e098176312b11215e2332e8862e4c8675e60c3bdca0ef760bbce8bd54fd9e0b15c1722fe45ba02d14211ffc5b65482ad4d2922d0887d706964c8807ecdb2f0569c00f7e6b6eb3b6d32439e81526eabcf74e97d00bb29e6e11901791b6d2736202645b1eb528cbe1cd5c8d6ceab1769e2d86545156232af561e53946c652f2e5a01701f64e4c2ca185a5ca88e9a706b24e7b39c5e6b0c18b9a10a2197912571271da7ec51674444a56a8c00e9be5545263c248554a1b04285b2421fcf489904afa643c1eb7d141", 0xf8}], 0x6, &(0x7f0000000b00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x11, 0xb, '\x00', [@generic={0x9, 0x49, "250114ba837656b9ed28f37bd3d4b7c3701f20d527fae6eb3c33d3f4214b8d13d2cf9777cd6cf0af0b78ec4a9fb619265b79f3a7217f810d9529ad8cb5cc9e97f5f81d9af75a2cdc79"}, @hao={0xc9, 0x10, @mcast2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x5e, 0x7, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0x8, [0xc8b, 0x71c4, 0x2, 0x0, 0x1, 0xd6]}}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x3b, 0x14, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1, @mcast2, @private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}], 0x1d0}}], 0x3, 0x0) 6.519626437s ago: executing program 5 (id=2204): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) 6.191438233s ago: executing program 1 (id=2205): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x8, 0x2, 0xe6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r2, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x1, 0x2, 0x3, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5.275331866s ago: executing program 5 (id=2206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000203010100000000000000000400000a080001000300002c8973fb000000230d7cda2b643bc0b928d506b6000501e9fff7080003400000000f"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x24008804) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) close(r4) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r4, &(0x7f0000003780)={0x28, 0xfffffffffffffff5, r5, {{0xf982, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff}}}, 0x28) sendmsg$alg(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="f1d268c1b3011c416b2d018ed324194c780da34739ed329b1daf7748b3f72ead9352b546317a3c45638b85db0759ec29a60d56598b989b69d38c23ebe48b342d5efe730467c527dabd873d4833f59352684cb95cb90c64fde3edc787f4d5afb1dba0343e0b46395db87b2a9fff9ccecd922d982baa812443d90b690c810b8e3dab570ffb05e743aa229fae3e8a61a67cd1c2f8daffe7af7b6ebb21dd1fa94154cc93c63c6bf60a4b", 0xa8}, {&(0x7f0000000280)="1c537c826fd4bf181fdbfdda0324021b803d0a15a5161a896faa995a637f3ad1f61a980e7e033a20f490729524707fd8a03f8a5fab8c19d080fd50324538c5aa0b1623268027fc1602e0bae0", 0x4c}, {&(0x7f0000000400)="a75637856f2c54e4776d4fbf56956a47e0823c532cca0a649f989b0e28187dae999ca3ea4c900b2b7a24927f12a18430bac4a3892b63dbfe854e4f06ff259f79f34351e4f53bc8bc85a0e4a379d0a13ab369bb292aae510ec70b3d27f39ba08a0d7e6ba4515f3601", 0x68}, {&(0x7f0000000480)="334a995ef1a63dfb6576a7648f062c25bdb68e6aaab586a395bb4eccd25553bbb457f3a700667a35a08d58b66e469b6355cbedd31bdcce0420c2170900b7f9a0e1164915e80f8aff8390c6da4a7c5146e9b88424a27cdb4ae4f284042238940f03995623002ab8b79ed87f5a5e5bd433fb8960adbfac532bd16642119448d698c6aa80fcfe349c6250c23e842e65b93201dcc1facfb87a524f9aa0cb6fd0612569fc37cf5afb944b6d4db110f06a", 0xae}, {&(0x7f0000000540)="77cd9408e6d0d5609ec04e57ccae71f99187dfeeb5cbef2f570ce2050e489a8956730dda13f225c57602e4987010e2b595fd951df88ab36156df96556699ebf40b16beddb1c38693d21b80bacf7b0c5a685fc9a218e0a284f1c96dd9498502e0ce6848d53a5a35291309f919d538a66102191aef85bddf90bf615c232be0eb56", 0x80}, {&(0x7f00000005c0)="caeb4a066aceeb562972ae608b30887411630fc498732b64c25d710504dff937dd6f035fae356b660e8988977f4671004f417c7719b184b19d4ee215344772628c0dacc346db84d6695961bc77a5ab005cfd37b4d24e37050a6e47be4841183c1edb5345a4a58ed14b6bd0b03d4cf4e446eb0bf7d4bf6e60e38fac5fff6d20", 0x7f}, {&(0x7f0000000640)="399e611364cb9a6015b14de4f60765fe0169e3dfa2fb6e4b5d21071e0107b88ef5554edbe426b2850b99ccce8f38b8e529164c469efefa9a51cbc3d602663d733010228daac40dc2b559428a765e9f5fed17b35edc801f526b893472e60d623ebccaee15fcf5e7fedb0515825299039adde3608dee087e68253ea687a1930d33d6a1d5cb881de1c310836527c0663334a77430181ffa1d34b0d55427d013818fcfb416f7a92cb0d70ba4509d3debde1b6b68d65599fb6d3bae454e0eb11cb5d5e51132677e5606f109976c27ee73c806434c509e91f31d04bdb6876479c6dc2b025777ea5737bc030f29d49257014ba8dbd7d66a7fd94e9cb1b969c27096612236efe959c49098779faff856902064a393d777e16dc2276e93103aad92b6b4b82ad3d026f0364445e423cb881a003c54f146178d5f138b6cb80c758ec95ff1323779b0ec110ecf5cc0bac7fba65c62d1bf9d5ed49d9b2f26b536d00f1e7e4470344db674ac334dcec4641abc51d4c32d2eec22fbf802032f98655c88902dacf6bfa35a627287788f4adad4a41dbe8c97e738f7b562dd837baf058e7ce59d17f7bb3a464c98d9ca98400a3eb4f0722c613153a5df65837535d9ec73b9e612253850957cdf4eb2d0a5e210476828a0a272b576d093c3a182e7dd5fb598a7b95e120dad1b3cf5ba65cc6548e610d88b2aecf09acaa24e1a952d091408cec934704e07890c41d18e62d6343100dbc2bfd8dd9a50a16d0b62de7b8cd3f66bb81d2e1166dab2fcb8d71c892a0ab6e6aeeeb4eb6dfc21072cfaa58b032d65e4c438dc909a95eba65eab7e5b1cf6586a72104bfd2a0c381e4cf59d7bbcc027e83591389b7021b1c2a037fb44d8031ac716847d46d9182c58701a7eaaefcb821cc40a63b9837dc70721aa870fc86533ebc14813d50c0ce9f8616d22ca5b0eb1d60a5a32bca80ac5a17970a039d4f18f04da85fc040e6e9822cdb82c3522757c24c153b1e82c2069a2d54c81513bee6ec652e9ac021cb1226be7cd1af5e48897e9fc35d479138a4158b1a565936a428676ffdaed05863ec53a3613ef16a2ba6fb723591af9a0069274cefff1a0d25ab146b9a750dbb7dedfa53c3ec9101b823fb1f77795beeeccb820c41253e713f9fae5de8023715eb77844efd5dcd93fb26f2fad8a1ab643e5e6793fe8feb5b5d8bfbce510e0b76770006b7fad48301586b8c900d33281ed1365fdafe56c3c2bb417b8099a34cb72e8021e85c7a68f5512b1ad7dca3ca71aa93e1d8fb45f63cebb539d1c015e54009b0a271aac17401c3ef3fd4ab37b4b4fbdf9fa0630c9e285230957336c2cf25a06de633ca896556fa500ae821ef53152c5e244561a87f09a3c32cef98581dfd44e1c62a4d87b1ab69777fef3fee06ca5761495f2605c65d0b92cb5a788cdbbb10a40a43635201498f9be6c1316d1a840cc8a5e1401ac3020e06e5f2a50bb4c4d45e6f7f74435cb8d45139858dfe0a07033bd2e580de3ac2163eb67529ae94a34bf607cc146f93147c992a19e3d93301e79f36eff55a2422126c247bad7760a510d883594d41608c9bea689f0555ee84174b2d1fae2837c6115617a88d9b0ccd28f80715f8d61f910221fd0d537ab9ba525e4baf6a150d1990bf95f9c32b6aaa43bb16a1735406390339f18d5f891f8eaec4269d29908343675a8660d96b0a55788db45f0a4ac86a3ac0b3fe86b079c130bc87f9b38ed6e598a6c17320065ce497f1e525fd4c576bc1c59f7d85c3e045d9c553e0d2ce84480ea82384707d4ec788f6f7502142bb874828f370fda4576c677acb914d66ff50628fd98f1101be017d8ef58164037cea59c0530b3db38e76db7e7bb43799570b9fc0c658205e1fc52939ea5fb7203c834b84ce79d2713fdd47617122126da6473ce3f917c8c421a6ee4b42a81ee6b44fd91dee6a1d5d01710e48257358575e9627b046031413115c6201aef0fc3f39fffa1c759f11d979f998aaf4583b37574f30b08fe51f9a809521e69d490d27a9083093ba6e9b6e9f98f8bb5f05316eaf53b4fef8428b6aff968ea57c1161aca1dbaee3ea93a3f189db8bd858a2b5ce1d83abb6514d91c377a85162a4d4742c742810a37e9e16ea77f78889cad07bf3894320fb976f837b03ea067c470eb246c048274e7cdebc25223a9718a76a6ccf7b0db7dd9c3a33ccd9f7ca5dbe962aa2cde9a06d680b7e6416da5fa1d45739d31d10bd86bfeb634bb0d3689198c94bf944b0731fb0064627187736628900658d8d481616df46f6be3c408141a4e48423b725d313b53a84e3582e6f942c82c2e1e8b246bf109365d221d5cf6dc799b6a51032f76135d3f11e2a249844e72fcf36f1402ea091af3db68cb5efa06708b7de4bd3d85ada63be42ac783468c692932159cb74651f67e60c13a0718c149c56a1eb4b3e2d8e0da869ff16d1abb51a39a972b331c69c782ea0bea2d392ee4188c56f1fb5a8b3a4c84b8dd9f69d120ef9813614d7a69d41c98194cbb29f3b4e34722c8c7d1278f6e892f9b2be2d1960af358a3792adaf4639c68a9ac85b77a1a53529a5de7bcc22fabd9e1aa4524762150188569061d08801db58becc34d7d1a3814edee64cf445af53819aa8bc826b87c0314358a694207394eea16e2dc2aa431104c5611987dceb4e1a93cb4ce2e24b737419b5bca2d63c32f4c5bd651590963fcc4282a9ca4e56f458fd444b21ff330da0bff3bdb9562210e3435e72a4ae500bba4cc4fd1a64106d83d42760c289766e1578c7c1729337dfe99ab37710e579576122d962cf2cb4f77d11e896ff6cf3b54812fb74209210c9c66118809cb15963997cdfb755ae51a8aa474dc7eb2978e0049fd0359dc34f48e0afb093d61f36928976a8821528a0591a9d8701a47cacd3c5e18b75650461e82988582a3e8b1d4111392b8d415337b3a21673110e2d6fc2c8d56c2fb96df66255ef7d5926bb9e992998fa1f0ff77289c2e148871543c52cd46fda7dac87b0b34d8816efcb34a248086891c585505595df85ca05982f79ce1ecca2fd43cba9c545d4e179e31d95096d14871db8214a530d447791bc4f73a35089d942852d8a17c7b19eed046df877ce23cfa3b40f7d4a9829b5e7731a3bed43d063a43411224cbe1525cc4556ad2d93f89c7cfbf786800e593edff9d3c76209b7e1e9f6350ee6dd4c8fa030a60203e83f74214821b04aee5eb60fb06be85ab3c81d61568364de6e99e7b4c0a2f7c4b3ecfaaaa94c05ebb1151887267940805e0ddbb7f9fb34b3f98c199bae0b2e981f040f09831d7e50ff0b341d447824800452ffb7f57003f65675a9515286f2dee27e8e1fd481b9743c5c7c8f58203cc4ae014f8750c9890755857083c549b5f1b951825374951aba65fba520506a7a3c7fab16311bbf26e02097d131a73d649373ed387f204e7937dfea2738ec081f1d6ffd766795c9fc9311d9894f636fd0c28236d6cd8834810ba2607e11488c2e39bb26ca63d427946bfc06577891c62b40a2a4e9eb812f6f3cd0796208ae90ca114749a54f43382a7b55cbbe4470801393b49c61bc285d2957e42197a1af63b3b2b3ebed3d877a42a38e3cd16aae1067a2a778b537d566f0f8a2860aba3e47010d3d7bbe6d4dd12bff86748c297cafc0b1a33770aae4aef2a1d5e223090891b066ab1a883faba3d734c2179bd0deadebce0cd40a55565718ae4da43d847adb67076eb2b41bd313da9a23fce052ae8eb2c63b469354bff11293a4dc9724f0722d8bd334c6e757d68d4432ce25e3ab6dab8b759b3857945372c8f6a3a8df6f16f02d68d01cf1dd16b0df174d335df47a9148b65a1c866f1853cf845a60ae83389ca5226cb4835548e7ce93b9503955fad436924cfc4fc439bd63e1b60befa80b844a0d55923db72ae4a511c1f3452633aa3735ce576d608d8b37cfdd5d7a93e433641d8ddee6e9a264e119730e9c1fa7db81d6738fa13cf4c4dacd34245474e9fdbb830b2cf958f7a3af0dc8425000db6494f5d9f8ba54c4613a48b55485fd4411da79951176dfe395cfee659253bf1aa5a8962f4bd0516beeb59388174c3cb7089f961a3550d8cb25774835690e3762902ae4695d5d67e90f8bbf3c7416cbef1f10d4170e8d5fe4b51c2fbe7835202f1a4c9fe24e5a04c6378c5f76eb6a6bdffdafde65432dc79849d94e9ff50b6651f5d2abf6efe173868aed3b93dc9b7e314f3f4a05e16d4fe81fa94504de35e8492a4606b4b0291870035dba48d9a0a3c02753e1a88e080eeb19edfbc2e7b31d0c9ef83745c4c27c2062b49f490adf4d35510a24bc25fd275d209d01491cb0ea74a6c5aae45b672b6abe0751879447283dd196a8a0d763d8c160b0d114bcb61aa02aa0506cf6be18b83484286fd0f0e0dafcabde9b194be28f3fc6f60709c51610d7c666db4149c3f94b79e1860741b762cd5984835cc34aa40f6cf274e2c55ca469a0184b521ac7d9b3d7fd42ef9745487fdda692d69b3e83e886003b55f0c69c90b25844b1e33c42968afe42c770c6e085c5571811f9fddc0b0993eb47ba18479dfa83e8baa984e036877d8c247fd6dd5954955002c3054e20aeea2bf67b2a30f78a85dd6a916e627bc485dc29dea805d50d7acdac180fa5b4462bd02c851e4f4b9cef1a00125b71b4008194a256da1d3a07c8443791d93d0f7a01d296ff59ee8e1764413285058b1ca4f761e7afe97729d9226f67a0b0032941b0b1c0ea320c7463e394e0ab9d86254266ecf454b1aeea37f5f2aaadd8fd5d46562ba4f7348b02227a35f889d97db70f944381ada94984f55445b22aec28ea54ece02226e992e493dd143499c80f8ecca116c957af5a5fecbb4534ab027b88b1a04f92f072b9dd65b7af4d3b6f9fbe313b54b15334d8670a5779bb81d6c20284e09096768b6c892be492e87355dc91ae81ab37847120e72414b9499374aa577ebcd68a6be277084dcde2ad6aac04d9dfdb6e32c26a3951db91945aba86237e9b72fe0159fdb25264efc927a0de472213bd074a88550bff2a023247c7aa955b0290869008a8cfffd5feb835bb18642a3b1dde6e1520992dc82d45be726d252461b9d5a7dfe913bd208de2988010b360d38a9a5264aa6950561c61acff86a77421055ea0116150a7217dbab526de3bb1fc8f50faf23c958536ee90332fe6fa1ac858b1046c12401f2fd9afbced85aa204bec81275a54cb298d44b4780d5b28b06fe15dcce3f7d9fab059b1f35d6336ffb121713073cb7f65bc00d0eb3fbaaf66b4384519c7640caecdd598b37f8b123bf40af7d25de958c61daf416623176549841364709438ead0ff7f76c4017d288254c1ac7ddfa45254aed0948ddbfe949ada0b315f095f0afbba104387970d1cae7cee4a7ed83a8387a97cf1b3157ce940b5fef4c152dff3067312ccebcca7e12cc88ec50676e602248526017b3af949130457045988562823b3a587e71cd4e8e9aa3dd3b44fe5be1137fe29fa9825d5098ca3b72f70b3f5f64f601c83f8714ab805b5a7a57a3e9b686f75b55c8e53ddb5b3cf264054e0babcf978112548ab03af023a3050fde34c19419f41406ce0aefbe0fdad6b6956d92f0d2225501593807b274ce5b28e82e201f0a2f45fdc4ac08d55dcd678750edda1dff2095ab4ad71aefaf7c9e2b310e8f1f31397b3afa8657728d42d2ecbe0cdec9321e3db2e32a621fa9aecbc2fee98d78c34b411d67cf5ea229454ace08971c80c4e2dcfed7bbcc5d63ecc8483e1b6054323dbd55e591f919f0d74b0fa44c3af6c4c556518f20e97c2613", 0x1000}, {&(0x7f0000000080)="3b7171b3c5c6050770f6fe9af0920e8fdee4fe277c37c274fd318fe6299c6c3c1b7f3b54800426", 0x27}, {&(0x7f00000001c0)="46ca84f2da2023823010115cad8df57e8b693ee4f747ca3200871a7e43e9dcc4d589c55b05e3a3e615727bb6064f27e18d3923d4b70fe0e8", 0x38}], 0x9, 0x0, 0x0, 0x40044}, 0x20000801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 5.259191484s ago: executing program 4 (id=2207): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x2f}, 0xfffffffd}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="528b4856d55340f7296f40fef4cd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.21602574s ago: executing program 2 (id=2208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.018864118s ago: executing program 5 (id=2209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x25, 0x0, &(0x7f00000002c0)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce000000d49e832", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.679276653s ago: executing program 3 (id=2210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000680)="0bcc", 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000940)=ANY=[@ANYRES64=r5, @ANYRES64=r1, @ANYRES64=r6, @ANYBLOB="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"], 0x40}, 0x400c820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="3d66d4af63c1fe4d800ecd3fc7", 0xd}, {&(0x7f0000000280)="b6d6489f8043ece16ec6", 0xa}, {&(0x7f0000000580)="d8dc2b703c32372e49138dad30cfb205812be41784966f80326f45f75002d2154986421d7a33db713e89bed9eb3965bb7414a5db8294a146415eee001c24f4fb8e8d7f26ae151ecd056ea3665906cfad0ae3141d580119cce89dbec4", 0x5c}], 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xe8}, 0x40) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, 0x0, 0x0, 0x2000000022, &(0x7f0000000480)) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x70) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a3200000000b70007"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) 3.643972446s ago: executing program 5 (id=2211): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d8db000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x10000201, 0x0, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r6, 0x0, 0x0, r7], [0x2b8]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x8, 0x1}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00070000000000000000000002000000000000000000000000060000c7c40ad4b2e3e856a70b110368e6ec26403fa2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r9, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 3.636471431s ago: executing program 2 (id=2212): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000020303000000000000000000010000050800034000000001577954af080001000100000b485a28bb42b8a24daa16ab91cd01d47989bf3aa116733fa1f215534152677655b1e4c656a06de17ab73bced9e670f348e85b3b952a327df5fe619a17ff9030658b2ae34692d44b81b8ff8d1f2b9c8b10c55b419297d8"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8080) ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/62, &(0x7f0000000080)=0x3e) 3.57951463s ago: executing program 4 (id=2213): io_setup(0xa1, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1a080, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000080)=0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4063, 0x1, 0xffffffffffffffe7}, 0x0) sigaltstack(&(0x7f0000001100)={0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000, 0x2}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 3.219025877s ago: executing program 3 (id=2214): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan1\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000572000/0x2000)=nil, 0x2000, 0x2be70a33d94da67d) openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000100)={[&(0x7f0000000140)='\\,\x00']}, 0x0, 0x100) fchdir(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) personality(0x400000b) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x0, 0x2, 0x8, 0xffffffffffffdfff}) 3.109969271s ago: executing program 4 (id=2215): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x34) 3.006923861s ago: executing program 1 (id=2216): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) pipe2$9p(&(0x7f0000001900), 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 3.00311886s ago: executing program 4 (id=2217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x92a, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x44, 0xea, 0x9a, 0x10, 0x15a4, 0x1003, 0xbfa7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x918, 0x3, 0x80, 0x8, 0x80, 0x8, [{{0x9, 0x4, 0x57, 0x2, 0x9, 0x72, 0x1f, 0xd6, 0xe, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x3, "60d885"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x4, 0xb}]}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0x2, 0xfa, 0x8, [@generic={0xc0, 0x2, "5fddeff117792819df08dac639388622a951968956efe94b6f1047076bc8cfdce6b8185324aaa1a5061004f7161aceba0405bf47a5a3ffb68f4021e89bb46ba6d3ca88b78a2065062548a968798cbd1c2453c4cc9881a3e452d5bc9921e2d7a6564ec1f87858e38d592a7dfd3e4e10d80da71efda733049f9b3b1d2390479741b82e8b34e9df2c51aede3934a2cedebb68b7cf1b965d6a7d14bc3b92ff140aa3ca12c9bf00192366e4fb8250f9e0d314b79fc64b5206551aac29ff98a617"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x45, 0xe8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1d, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7, 0xa, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x5}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}, @generic={0x60, 0x21, "1383ed5464e6282b321dbd8aee50bcf0c206b546b25bd95e4141065f91abe306cc86485af403442eab97d6bb07cd67d864ec002982d5ecd79bee1ef73225393c13464d93a8b7b17475bd35125314c6c3b618566b7a94b1871c2032f450c2"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x2, 0x8, 0x0, [@generic={0x8d, 0x24, "8bc14c6179edcf08c0a53e8afae9b6d005267f46759494b6c669cd43f5e89ee710eff479782ec922976c1e9b02ed7696a5c72b901bc9491a847f781778db7de317735889b28c09df74bc44cb740879dfe1a39b074888f979e7582515d36bc3c277499cde665b464a6b52b9031b3f30723b7b375b4b7686e44e6067699e99f725be54eb333fcd7d5518f416"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x7fe, 0x5, 0x5, 0x6, [@generic={0x12, 0x4, "9b90ecec4e7f3dadada73854f3e05a92"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x6, 0x4, 0xf7, [@generic={0x98, 0x23, "e91df507b5b2d51864b874ac7e4d1bd22a7ae065aabae521d8bdf478c0d59502f34a7c567bc8f043f82e84ed6f83698bda70c85ee85158b985129fb2897c1b582cd56122bd944f6d81c8ce27070f7306af1c805128794ba51d4efb9ca551fd8978ac4783c54b7497ddf3e40722350ba3169971f02e2fb6537c5e81131ac9e261a25a9dcdbb383a4691ea34c4325e77b7dd6ace039ed7"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x361cdb57b31f095b, 0x64, 0x6, 0x6, [@generic={0xf7, 0x24, "cf108a576c084754ae9431f88461ef0696b9c65c96eff06ae3dce1da103e736ed6ff307dc1f2cdc38369570764dc902428fa8215598d7d6544fcf38de2e05fb82c7cfad959fab5a3bf8ec114fe67cc704fbc5edcebf6ca1f30cf51e014f3161fc34a2090851aa21b856fe4aad8657cf894c5c2df983a82021ccd51435263de62ef61aa27ac96afd96d18800f5dc716ef9866b4794c3334ae984ff5d345b06fa07618900ff05ac19565e70002a8832bde2d56011611e7dd87bb6bd4e0092e9879004f9fb0adf65705908640f8eed4f5de774837e420ef62a817ef328481a2078a87d3d3ab434e6b305698982635443aa44d81f6a349"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x8, 0x5, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xcd22}]}}]}}, {{0x9, 0x4, 0xf3, 0x7f, 0x3, 0xba, 0xe0, 0xd9, 0x9, [@hid_hid={0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x804}}], [{{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x0, 0x1, 0x46, [@generic={0x71, 0x23, "04ac9157809dd1eb741f5412092011e79826e4c94be1a5273ee2915a6102dab45aebb5be108ce4feb860e73db61c51a49f05a7a95d1527142397de2ac3853c76cb92bae8c95ce9d3a516d6ac13da280312e69dd04d26c7feedbf221939d1c8ceee6f9251a85a077d29d1b400781b37"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc1, 0x8}]}}, {{0x9, 0x5, 0x8, 0x63b1d69f9e55ddfc, 0x200, 0xf, 0xd, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x4, 0xb1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}]}}]}}, {{0x9, 0x4, 0xc2, 0x9, 0x5, 0xff, 0x5d, 0x1, 0xfb, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "f8c10b106ee7"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x40, 0x8}, [@mdlm_detail={0x4}, @country_functional={0xc, 0x24, 0x7, 0x8, 0x3, [0x9, 0x3ff, 0x2]}, @mbim={0xc, 0x24, 0x1b, 0x4cd2, 0x7, 0x3, 0x10, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}]}], [{{0x9, 0x5, 0x2, 0x10, 0xf3ba5509d80b1a63, 0x1, 0x2, 0x6, [@generic={0x66, 0x3, "123f81f3fa0ced3904b560f9fc2fc2b83fe6a36e6426f61186cce2a720c6a3117002c8b8879ea34a5368f54e479cfc14f2649229204bf0381026eaa0bc7ed0982635048e05d6f1a12da47021e984e9fd61d4b2e16787be155e265c4114788725cbdfbc31"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1b}]}}, {{0x9, 0x5, 0x9, 0x0, 0x420, 0x2, 0x6f, 0x6, [@generic={0x6, 0x23, "bba3c799"}]}}, {{0x9, 0x5, 0x5, 0x12, 0x200, 0x0, 0x91, 0xd, [@generic={0xe1, 0x23, "bf5d68ba44e5bbd9f3cd325bd998bf5a5c098a5ee74c029ae5c2618cbd0aa41fef69c228f46dba51496ceda00992e43435dad8550029ecdd7e8ebcff876cf7a7e836980ac5c7a362cfedac200929ac90f697ee1af33bb18ec2fa19d20463bf80cc389be3e13e915bcbdf75e28f859c90800d3e32b8723fde94b0b7ad7a1a5fa064ae56b5b5e7ffffe70c9554824a39e867bcd03eab59a5eff22dc76f1bb617f6962946b97986cf34b6d13aa24443474480d0d70d8955081b675ab49083021aef47cc2828974ed9b525fe4788ef76fa6d47c57fd27d0c3c07b521485dc2edf3"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x81, 0x7, 0x5, [@generic={0xcf, 0x23, "db63019db5c22ca350b5295e9d1c5d78267bf92534b9a54d35cb4e47cb6377433eb1126e4a108c5d06f026a6f362eb2c49a28b641f65bbdf0aa72fe833e46d655833af0b2ebd946afdb217ba083bd6d1b2afd72e281fecd1bec7b792d1b6a3394731e3e15aa0002ae8cac8487009f8f6a458f670758b6e0a6068dc9c72d694366d382ee834f71e7b542611a01171263190fed67c8a106fe9d44ddb21ed843cd0b11f854856b9e156c0f19067a75006bc13e776f757675becd5c9a81a35e8712441f9f70d3e067c3c0d96f70bc1"}, @generic={0x7e, 0xb, "ff8005bb79e2bf85653eda0a6a0f5a775daadff28cc57c3dbeb4e932c20da48b84f7ccc5f71535f5614ed1c012b5dd1f9d70584a2ea247030c515dba1c6290b9efe0b086a58d7e69d78b2b34c94392f1387682338161f916e5444b47c47c66fbf0c7dce97194e327bc4a79ef66f8ba668bf8eed1913563ddab91ba6f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x2, 0xb, 0x0, [@generic={0xdd, 0x6, "7c3f6362b7a5d46d685f72ba1f99c5b0c2bff85bab6afbc1d0a8b06c8b6e621bc5b386da7adb920948f9a7be3b55c579de5afe1c09de7788b1e41c2aeaa55a37d619b4fb29c4544fe87389a29ff42608532247d0ce654e44aab6f6b057f96b36ecd3b634e987b156ab26dea423de513b0fbd0b15593dc31ca8ec220e18b5c3b4496a8b724e0e43dd73d3e8fba3ac49dcd94256316f093b5c79763126df4968bef886f724e8ce31bd374ad97985516b3c46deed2839761b88ecb19c0bfdb2d67f9aa759bfdff66f553931de2df6996b3d3aa0313da84f4e6c53c57d"}, @generic={0x81, 0x22, "f0e4b4c6581d81336d1e709c48de2a75af4fa591453a0b40bebb851bc94cad6822ea7bdf2bda6371fedfaa9ec8f6099d6952dd4cc8cf538bbc5daafde4167d9f0203da522ea53e0d09a03b7a91d8591d838d92969b441ecb596e1284ed99ca2bbce3c170483f551d645ccd87b4d8d7449cc5f20dc459e06a2dfa95659b94c1"}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x39, 0x48, 0x40, 0x3}, 0x37, &(0x7f0000000180)={0x5, 0xf, 0x37, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0xac, 0x3, 0x4, 0x0, 0x3, [0x3f00, 0xffc000, 0x3f30]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e6c0738419cd7a22556564700e6c7093"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000500)={0x14, &(0x7f0000000380)={0x20, 0xc, 0xfc, {0xfc, 0xc, "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"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, &(0x7f0000001200)={0x34, &(0x7f0000001000)={0x20, 0xb1439b8edd018b0e, 0xc3, "88f834c4a55ca5fa8f21b26562121177d64cb34cdc79017237725c7e88488e86c8ffa648570c0460077e712e23fd66b3216b74003cadab77beebdc1d7d883ec8e517c555a4b6b9f1343da7940a780e149f84774f2c3b4dcb8604a7b42dfe57713acdd43b114af0a52640734517d9c14ae467435a542f8178b41bb4d07bb16011f8ccd761da244b67445ef524e25ee85573e84dde241f079842adf60a4431b9cc40cb27a136f80d19ce8831a611533b385f484133ac5bf83aa7cfb505c0b69d42003ba9"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001100)={0x20, 0x0, 0xb7, {0xb5, "d09f449065ec1fd72123f6c991fb2f97eefdb4f47dd33c20634296b086172517f579cfb6690d4c21492a80316fa2c2bf71cb5a68f31880729902e6489629aa4d9928156b116b235af1943c490af4e0800ac43fb1f50ceea70dc2eb26ecde18034cd46093eeb95cc2a98b9afee968b445280430e9e47200853c93a154d952acd80c7dff42d7c9477114687444ba8c71d018f681f032956ef2ab24e96de804ff36487546958c56e51b3157ad96d0f15eef182e8752a7"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000011c0)={0x20, 0x0, 0x1}}) 2.895671327s ago: executing program 5 (id=2218): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000407000001000000000000000018120000ba6181095ddba41ef37ebca45fa5bde0ca538920abfd32c33f86d6d9d92dd2d127397d990e99a28af1c28f106a6003b66e97c0f3d6", @ANYBLOB="0000000000000000b703000000000000850000003b000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1.636371383s ago: executing program 2 (id=2219): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000407000001000000000000000018120000ba6181095ddba41ef37ebca45fa5bde0ca538920abfd32c33f86d6d9d92dd2d127397d990e99a28af1c28f106a6003b66e97c0f3d6", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000003b000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1.571125036s ago: executing program 3 (id=2220): unshare(0x2040400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsmount(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) close_range(r2, r2, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.29512981s ago: executing program 5 (id=2221): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x25, 0x0, &(0x7f00000002c0)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce000000d49e832", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=2222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): gh-speed USB device number 70 using dummy_hcd [ 728.140257][ T9] usb 2-1: device descriptor read/64, error -71 [ 728.390349][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 728.531872][ T9] usb 2-1: device descriptor read/64, error -71 [ 728.641247][ T9] usb usb2-port1: attempt power cycle [ 729.050388][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 729.072793][ T9] usb 2-1: device descriptor read/8, error -71 [ 729.310422][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 729.332009][ T9] usb 2-1: device descriptor read/8, error -71 [ 729.441848][ T9] usb usb2-port1: unable to enumerate USB device [ 729.900992][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 730.072817][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.072850][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.072886][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 730.072908][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.159941][ T9] usb 5-1: config 0 descriptor?? [ 731.384024][ T9] usb 5-1: string descriptor 0 read error: -22 [ 731.585754][ T9] uclogic 0003:256C:006D.0038: interface is invalid, ignoring [ 731.932371][ T5887] usb 5-1: USB disconnect, device number 74 [ 733.226030][ T5974] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 735.249850][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.249882][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.249919][ T5974] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 735.249946][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.295077][ T5974] usb 3-1: config 0 descriptor?? [ 735.316269][T10765] 9p: Bad value for 'wfdno' [ 735.842807][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'. [ 736.417973][ T5974] usb 3-1: string descriptor 0 read error: -71 [ 736.418487][ T5974] uclogic 0003:256C:006D.0039: failed retrieving string descriptor #200: -71 [ 736.418543][ T5974] uclogic 0003:256C:006D.0039: failed retrieving pen parameters: -71 [ 736.418559][ T5974] uclogic 0003:256C:006D.0039: failed probing pen v2 parameters: -71 [ 736.418609][ T5974] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 736.418724][ T5974] uclogic 0003:256C:006D.0039: probe with driver uclogic failed with error -71 [ 736.490893][ T5974] usb 3-1: USB disconnect, device number 63 [ 737.062968][T10785] 9p: Bad value for 'rfdno' [ 738.184472][T10787] 9p: Bad value for 'wfdno' [ 745.271016][T10832] 9p: Bad value for 'wfdno' [ 749.440833][T10871] 9p: Bad value for 'wfdno' [ 750.204379][T10880] sctp: [Deprecated]: syz.5.1396 (pid 10880) Use of int in max_burst socket option. [ 750.204379][T10880] Use struct sctp_assoc_value instead [ 751.340348][ T5917] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 751.497546][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.497579][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.497616][ T5917] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 751.497639][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.503388][ T5917] usb 2-1: config 0 descriptor?? [ 752.356522][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.356995][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.160755][ T5917] usb 2-1: string descriptor 0 read error: -71 [ 754.161180][ T5917] uclogic 0003:256C:006D.003A: failed retrieving string descriptor #200: -71 [ 754.161226][ T5917] uclogic 0003:256C:006D.003A: failed retrieving pen parameters: -71 [ 754.161240][ T5917] uclogic 0003:256C:006D.003A: failed probing pen v2 parameters: -71 [ 754.161280][ T5917] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 754.161368][ T5917] uclogic 0003:256C:006D.003A: probe with driver uclogic failed with error -71 [ 754.172435][ T5917] usb 2-1: USB disconnect, device number 74 [ 754.220280][ T5974] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 754.372961][ T5974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.372993][ T5974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.373029][ T5974] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 754.373051][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.393792][ T5974] usb 6-1: config 0 descriptor?? [ 754.541194][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1419'. [ 755.750271][ T5904] kernel write not supported for file /915/oom_score_adj (pid: 5904 comm: kworker/1:4) [ 756.231224][T10940] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 756.231504][T10940] overlayfs: overlapping lowerdir path [ 756.811689][ T5974] usb 6-1: string descriptor 0 read error: -71 [ 756.812371][ T5974] uclogic 0003:256C:006D.003B: failed retrieving string descriptor #200: -71 [ 756.812428][ T5974] uclogic 0003:256C:006D.003B: failed retrieving pen parameters: -71 [ 756.812445][ T5974] uclogic 0003:256C:006D.003B: failed probing pen v2 parameters: -71 [ 756.812495][ T5974] uclogic 0003:256C:006D.003B: failed probing parameters: -71 [ 756.812606][ T5974] uclogic 0003:256C:006D.003B: probe with driver uclogic failed with error -71 [ 756.817491][ T5974] usb 6-1: USB disconnect, device number 52 [ 759.086605][T10960] bridge0: port 3(vxlan0) entered blocking state [ 759.090677][T10960] bridge0: port 3(vxlan0) entered disabled state [ 759.090884][T10960] vxlan0: entered allmulticast mode [ 759.093800][T10960] vxlan0: entered promiscuous mode [ 760.295687][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'. [ 760.393205][ T5801] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 761.502424][ T5801] usb 3-1: config 0 has no interfaces? [ 761.504537][ T5801] usb 3-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 761.504563][ T5801] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 761.504582][ T5801] usb 3-1: Manufacturer: syz [ 761.504595][ T5801] usb 3-1: SerialNumber: syz [ 761.509357][ T5801] usb 3-1: config 0 descriptor?? [ 764.510293][ T5974] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 764.673341][T10990] FAULT_INJECTION: forcing a failure. [ 764.673341][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 764.673364][T10990] CPU: 0 UID: 0 PID: 10990 Comm: syz.5.1437 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 764.673379][T10990] Tainted: [L]=SOFTLOCKUP [ 764.673382][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 764.673389][T10990] Call Trace: [ 764.673393][T10990] [ 764.673398][T10990] dump_stack_lvl+0xe8/0x150 [ 764.673416][T10990] should_fail_ex+0x46c/0x600 [ 764.673433][T10990] should_failslab+0xa8/0x100 [ 764.673445][T10990] __kmalloc_cache_noprof+0x84/0x6d0 [ 764.673461][T10990] ? rtnl_newlink+0xfb/0x1c90 [ 764.673475][T10990] rtnl_newlink+0xfb/0x1c90 [ 764.673487][T10990] ? unwind_next_frame+0xa5/0x23d0 [ 764.673502][T10990] ? is_bpf_text_address+0x26/0x2b0 [ 764.673517][T10990] ? __pfx_rtnl_newlink+0x10/0x10 [ 764.673530][T10990] ? __lock_acquire+0x6b6/0x2cf0 [ 764.673547][T10990] ? __lock_acquire+0x6b6/0x2cf0 [ 764.673562][T10990] ? __lock_acquire+0x6b6/0x2cf0 [ 764.673579][T10990] ? unwind_next_frame+0xa5/0x23d0 [ 764.673596][T10990] ? unwind_next_frame+0xa5/0x23d0 [ 764.673609][T10990] ? is_bpf_text_address+0x26/0x2b0 [ 764.673628][T10990] ? __lock_acquire+0x6b6/0x2cf0 [ 764.673642][T10990] ? is_bpf_text_address+0x292/0x2b0 [ 764.673654][T10990] ? is_bpf_text_address+0x26/0x2b0 [ 764.673673][T10990] ? kernel_text_address+0xa5/0xe0 [ 764.673698][T10990] ? __kernel_text_address+0xd/0x40 [ 764.673722][T10990] ? unwind_get_return_address+0x4d/0x90 [ 764.673744][T10990] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 764.673772][T10990] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 764.673806][T10990] ? __pfx_rtnl_newlink+0x10/0x10 [ 764.673833][T10990] rtnetlink_rcv_msg+0x7cf/0xb70 [ 764.673856][T10990] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 764.673875][T10990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.673894][T10990] ? __lock_acquire+0x6b6/0x2cf0 [ 764.673919][T10990] netlink_rcv_skb+0x208/0x470 [ 764.673934][T10990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.673946][T10990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.673965][T10990] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.673982][T10990] netlink_unicast+0x846/0xa10 [ 764.673998][T10990] ? __pfx_netlink_unicast+0x10/0x10 [ 764.674010][T10990] ? __alloc_skb+0x198/0x3a0 [ 764.674021][T10990] ? netlink_sendmsg+0x642/0xb30 [ 764.674033][T10990] ? skb_put+0x11b/0x210 [ 764.674046][T10990] netlink_sendmsg+0x805/0xb30 [ 764.674064][T10990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.674083][T10990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.674097][T10990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.674111][T10990] __sock_sendmsg+0x21c/0x270 [ 764.674129][T10990] ____sys_sendmsg+0x508/0x810 [ 764.674144][T10990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.674161][T10990] ? import_iovec+0x74/0xa0 [ 764.674173][T10990] ___sys_sendmsg+0x21f/0x2a0 [ 764.674187][T10990] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.674217][T10990] ? __fget_files+0x2a/0x420 [ 764.674227][T10990] ? __fget_files+0x3a6/0x420 [ 764.674243][T10990] __x64_sys_sendmsg+0x1a1/0x260 [ 764.674257][T10990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.674274][T10990] ? __pfx_ksys_write+0x10/0x10 [ 764.674294][T10990] do_syscall_64+0xec/0xf80 [ 764.674304][T10990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.674314][T10990] ? trace_irq_disable+0x37/0x100 [ 764.674324][T10990] ? clear_bhb_loop+0x60/0xb0 [ 764.674336][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.674346][T10990] RIP: 0033:0x7f102dd2f749 [ 764.674356][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.674365][T10990] RSP: 002b:00007f102bf8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.674377][T10990] RAX: ffffffffffffffda RBX: 00007f102df85fa0 RCX: 00007f102dd2f749 [ 764.674385][T10990] RDX: 0000000000008800 RSI: 0000200000000280 RDI: 0000000000000003 [ 764.674392][T10990] RBP: 00007f102bf8e090 R08: 0000000000000000 R09: 0000000000000000 [ 764.674398][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.674404][T10990] R13: 00007f102df86038 R14: 00007f102df85fa0 R15: 00007fff26a498b8 [ 764.674420][T10990] [ 764.980760][ T5974] usb 5-1: device descriptor read/all, error -71 [ 765.166345][ T9] usb 3-1: USB disconnect, device number 64 [ 765.570263][T11000] 9p: Bad value for 'rfdno' [ 765.742719][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1432'. [ 766.344001][T11017] overlayfs: failed to clone upperpath [ 766.402365][T11019] overlayfs: failed to clone lowerpath [ 767.430394][ T5801] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 767.612711][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.612742][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.612778][ T5801] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 767.612800][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.667662][ T5801] usb 3-1: config 0 descriptor?? [ 767.802140][ T6903] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 768.941474][ T6903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.941506][ T6903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.941541][ T6903] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 768.941562][ T6903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.941604][ T5801] usb 3-1: string descriptor 0 read error: -22 [ 769.057741][ T6903] usb 5-1: config 0 descriptor?? [ 769.126713][ T5801] uclogic 0003:256C:006D.003C: interface is invalid, ignoring [ 769.523337][ T5801] usb 3-1: USB disconnect, device number 65 [ 770.738698][ T6903] usb 5-1: string descriptor 0 read error: -22 [ 770.945078][ T6903] uclogic 0003:256C:006D.003D: interface is invalid, ignoring [ 770.964312][ T6903] usb 5-1: USB disconnect, device number 77 [ 771.160393][ T5801] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 771.310343][ T5801] usb 3-1: Using ep0 maxpacket: 32 [ 771.312605][ T5801] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.312637][ T5801] usb 3-1: config 0 interface 0 has no altsetting 0 [ 771.312670][ T5801] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 771.312693][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.322044][ T5801] usb 3-1: config 0 descriptor?? [ 771.507424][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1466'. [ 771.735287][ T5801] hid_parser_main: 12 callbacks suppressed [ 771.735319][ T5801] corsair-cpro 0003:1B1C:0C10.003E: unknown main item tag 0x0 [ 771.735350][ T5801] corsair-cpro 0003:1B1C:0C10.003E: unknown main item tag 0x0 [ 771.735376][ T5801] corsair-cpro 0003:1B1C:0C10.003E: unknown main item tag 0x0 [ 771.735402][ T5801] corsair-cpro 0003:1B1C:0C10.003E: unknown main item tag 0x0 [ 771.735428][ T5801] corsair-cpro 0003:1B1C:0C10.003E: unknown main item tag 0x0 [ 772.537668][ T5801] corsair-cpro 0003:1B1C:0C10.003E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 772.729125][ T5801] corsair-cpro 0003:1B1C:0C10.003E: probe with driver corsair-cpro failed with error -38 [ 772.781474][ T5801] usb 3-1: USB disconnect, device number 66 [ 773.610344][ T5801] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 773.767868][ T5801] usb 3-1: config 0 has no interfaces? [ 773.770033][ T5801] usb 3-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 773.770060][ T5801] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 773.770079][ T5801] usb 3-1: Manufacturer: syz [ 773.770093][ T5801] usb 3-1: SerialNumber: syz [ 773.922366][ T5801] usb 3-1: config 0 descriptor?? [ 776.966068][ T9] usb 3-1: USB disconnect, device number 67 [ 777.096155][ T5801] kernel write not supported for file bpf-prog (pid: 5801 comm: kworker/1:3) [ 777.582064][T11143] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 777.586556][T11140] IPVS: stopping backup sync thread 11143 ... [ 778.230326][ T5917] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 778.501145][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 778.505954][ T5917] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.505980][ T5917] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 778.506004][ T5917] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 778.506026][ T5917] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.506064][ T5917] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 778.506085][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.273433][ T5917] usb 5-1: GET_CAPABILITIES returned 0 [ 779.273533][ T5917] usbtmc 5-1:16.0: can't read capabilities [ 781.060917][ T5801] usb 5-1: USB disconnect, device number 78 [ 782.080303][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 782.232618][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.232651][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.232689][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 782.232712][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.237822][ T9] usb 6-1: config 0 descriptor?? [ 782.350344][ T5974] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 782.512812][ T5974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.515121][ T5974] usb 5-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 782.515137][ T5974] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 782.515148][ T5974] usb 5-1: Manufacturer: syz [ 782.515155][ T5974] usb 5-1: SerialNumber: syz [ 785.339861][ T9] usb 6-1: string descriptor 0 read error: -71 [ 785.347019][ T9] uclogic 0003:256C:006D.003F: failed retrieving string descriptor #200: -71 [ 785.347085][ T9] uclogic 0003:256C:006D.003F: failed retrieving pen parameters: -71 [ 785.347102][ T9] uclogic 0003:256C:006D.003F: failed probing pen v2 parameters: -71 [ 785.347154][ T9] uclogic 0003:256C:006D.003F: failed probing parameters: -71 [ 785.347264][ T9] uclogic 0003:256C:006D.003F: probe with driver uclogic failed with error -71 [ 785.734592][ T9] usb 6-1: USB disconnect, device number 53 [ 785.860400][ T5888] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 786.000289][ T935] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 786.020608][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 786.024665][ T5888] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 786.024690][ T5888] usb 2-1: config 0 has no interface number 0 [ 786.024791][ T5888] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 786.024815][ T5888] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 786.024838][ T5888] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 786.024863][ T5888] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 786.024903][ T5888] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 786.024925][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.031096][ T5888] usb 2-1: config 0 descriptor?? [ 786.129695][ T5888] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 786.161443][ T935] usb 3-1: Using ep0 maxpacket: 32 [ 786.165297][ T935] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 786.165321][ T935] usb 3-1: config 0 has no interface number 0 [ 786.165352][ T935] usb 3-1: config 0 interface 85 has no altsetting 0 [ 786.168318][ T935] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 786.168334][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.168344][ T935] usb 3-1: Product: syz [ 786.168351][ T935] usb 3-1: Manufacturer: syz [ 786.168358][ T935] usb 3-1: SerialNumber: syz [ 786.179092][ T935] usb 3-1: config 0 descriptor?? [ 786.216137][ T935] appletouch 3-1:0.85: Could not find int-in endpoint [ 786.216171][ T935] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 786.218794][ T935] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 786.959508][ T5801] usb 5-1: USB disconnect, device number 79 [ 787.126095][T11212] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20003 [ 787.451622][ T5888] usb 3-1: USB disconnect, device number 68 [ 787.532232][T11224] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 789.292942][ T5917] usb 2-1: USB disconnect, device number 75 [ 789.314969][ T5917] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 789.782965][ T5888] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 790.110838][T11255] bond2: option primary_reselect: invalid value (13) [ 790.444370][T11255] bond2 (unregistering): Released all slaves [ 790.694072][T11265] vivid-002: ================= START STATUS ================= [ 790.694164][T11265] vivid-002: Radio HW Seek Mode: Bounded [ 790.694197][T11265] vivid-002: Radio Programmable HW Seek: false [ 790.694215][T11265] vivid-002: RDS Rx I/O Mode: Block I/O [ 790.694234][T11265] vivid-002: Generate RBDS Instead of RDS: false [ 790.694256][T11265] vivid-002: RDS Reception: true [ 790.694274][T11265] vivid-002: RDS Program Type: 0 inactive [ 790.694298][T11265] vivid-002: RDS PS Name: inactive [ 790.694319][T11265] vivid-002: RDS Radio Text: inactive [ 790.694339][T11265] vivid-002: RDS Traffic Announcement: false inactive [ 790.694361][T11265] vivid-002: RDS Traffic Program: false inactive [ 790.694383][T11265] vivid-002: RDS Music: false inactive [ 790.694405][T11265] vivid-002: ================== END STATUS ================== [ 790.782263][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.783888][ T5888] usb 5-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 790.783913][ T5888] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 790.783932][ T5888] usb 5-1: Manufacturer: syz [ 790.783945][ T5888] usb 5-1: SerialNumber: syz [ 791.079175][ T5888] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 793.118221][ T5888] usb 2-1: device descriptor read/64, error -71 [ 793.363143][ T5888] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 793.490316][ T5888] usb 2-1: device descriptor read/64, error -71 [ 793.500399][ T5917] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 793.655098][ T5917] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.655124][ T5917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 793.655178][ T5917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 793.655220][ T5917] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 793.655242][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.666882][T11283] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 793.673056][ T5917] hub 6-1:1.0: bad descriptor, ignoring hub [ 793.673093][ T5917] hub 6-1:1.0: probe with driver hub failed with error -5 [ 793.676190][ T5917] cdc_wdm 6-1:1.0: skipping garbage [ 793.676207][ T5917] cdc_wdm 6-1:1.0: skipping garbage [ 793.695295][ T5917] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 793.695321][ T5917] cdc_wdm 6-1:1.0: Unknown control protocol [ 793.823358][ T5888] usb usb2-port1: attempt power cycle [ 794.063508][ T5917] usb 6-1: USB disconnect, device number 54 [ 794.360462][ T935] usb 5-1: USB disconnect, device number 80 [ 794.609934][T11301] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 794.609954][T11301] netlink: 'syz.4.1537': attribute type 3 has an invalid length. [ 794.609966][T11301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1537'. [ 794.619965][ T5917] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 796.272122][ T61] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 796.273762][ T5917] usb 6-1: unable to get BOS descriptor or descriptor too short [ 796.278322][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 796.278356][ T5917] usb 6-1: can't read configurations, error -71 [ 796.718062][T11325] tmpfs: Bad value for 'mpol' [ 796.826098][T11327] vim2m vim2m.0: vidioc_s_fmt queue busy [ 798.703127][T11361] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 803.760313][ T5874] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 804.010343][ T5874] usb 2-1: device descriptor read/64, error -71 [ 804.190919][T11203] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 804.256520][ T5874] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 804.343258][T11203] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.345490][T11203] usb 6-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 804.345515][T11203] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 804.345534][T11203] usb 6-1: Manufacturer: syz [ 804.345548][T11203] usb 6-1: SerialNumber: syz [ 804.400429][ T5874] usb 2-1: device descriptor read/64, error -71 [ 804.510963][ T5874] usb usb2-port1: attempt power cycle [ 804.850407][ T5874] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 804.875073][ T5874] usb 2-1: device descriptor read/8, error -71 [ 807.186095][ T9] usb 6-1: USB disconnect, device number 57 [ 808.334126][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1577'. [ 810.060299][ T5874] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 810.080994][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 810.083149][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 810.093081][ T5874] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 810.093106][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 810.093126][ T5874] usb 2-1: Product: syz [ 810.093137][ T5874] usb 2-1: Manufacturer: syz [ 810.093149][ T5874] usb 2-1: SerialNumber: syz [ 810.289528][ T5874] usb 2-1: config 0 descriptor?? [ 810.295539][ T5874] usb 2-1: can't set config #0, error -71 [ 810.298233][ T5874] usb 2-1: USB disconnect, device number 82 [ 811.320377][ T5917] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 811.493592][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.493619][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 811.493669][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 811.493711][ T5917] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 811.493732][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.504869][T11460] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 811.511827][ T5917] hub 3-1:1.0: bad descriptor, ignoring hub [ 811.511863][ T5917] hub 3-1:1.0: probe with driver hub failed with error -5 [ 811.513904][ T5917] cdc_wdm 3-1:1.0: skipping garbage [ 811.513920][ T5917] cdc_wdm 3-1:1.0: skipping garbage [ 811.585841][ T5874] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 811.616718][ T5917] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 811.616737][ T5917] cdc_wdm 3-1:1.0: Unknown control protocol [ 812.202516][ T5801] usb 3-1: USB disconnect, device number 69 [ 812.292575][ T61] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 812.460270][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 812.464113][ T5874] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 812.464136][ T5874] usb 2-1: config 0 has no interface number 0 [ 812.468786][ T5874] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 812.468813][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.468832][ T5874] usb 2-1: Product: syz [ 812.468845][ T5874] usb 2-1: Manufacturer: syz [ 812.468859][ T5874] usb 2-1: SerialNumber: syz [ 812.477695][ T5874] usb 2-1: config 0 descriptor?? [ 812.482892][ T5874] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 812.680375][ T5801] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 812.790378][ T5917] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 812.845870][ T5801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.845894][ T5801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 812.845946][ T5801] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 812.845986][ T5801] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 812.846008][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.902781][T11460] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 812.905804][ T5801] hub 3-1:1.0: bad descriptor, ignoring hub [ 812.905839][ T5801] hub 3-1:1.0: probe with driver hub failed with error -5 [ 812.906869][ T5801] cdc_wdm 3-1:1.0: skipping garbage [ 812.906884][ T5801] cdc_wdm 3-1:1.0: skipping garbage [ 812.909264][ T5801] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 812.909281][ T5801] cdc_wdm 3-1:1.0: Unknown control protocol [ 812.974218][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.974287][ T5917] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 813.000374][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 813.000400][ T5917] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 813.000426][ T5917] usb 5-1: Manufacturer: syz [ 813.000441][ T5917] usb 5-1: SerialNumber: syz [ 813.039260][ T5917] usb 5-1: bad CDC descriptors [ 813.059059][ T5874] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 813.086974][ T5874] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 813.221078][ T5917] usb 3-1: USB disconnect, device number 70 [ 814.372561][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.372640][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.619421][T11455] input: syz1 as /devices/virtual/input/input30 [ 815.662457][ T5874] usb 5-1: USB disconnect, device number 81 [ 816.132811][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 816.161102][ T58] usb 2-1: USB disconnect, device number 83 [ 816.178248][ T58] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 816.206059][ T58] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 816.206707][ T58] quatech2 2-1:0.51: device disconnected [ 819.555831][T11518] 9p: Bad value for 'rfdno' [ 819.574204][ T5917] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 819.742571][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.742590][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.742612][ T5917] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 819.742624][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.745737][ T5917] usb 5-1: config 0 descriptor?? [ 821.146465][ T5917] usb 5-1: string descriptor 0 read error: -22 [ 821.316333][ T5917] uclogic 0003:256C:006D.0040: interface is invalid, ignoring [ 821.519921][ T5887] usb 5-1: USB disconnect, device number 82 [ 823.410321][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 823.885093][T11556] overlayfs: failed to clone upperpath [ 823.890568][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 823.932542][T11558] overlayfs: failed to clone lowerpath [ 823.933408][ T9] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 823.933434][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.933452][ T9] usb 6-1: Product: syz [ 823.933465][ T9] usb 6-1: Manufacturer: syz [ 823.933478][ T9] usb 6-1: SerialNumber: syz [ 824.472069][ T9] usb 6-1: config 0 descriptor?? [ 824.607280][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 825.134760][ T9] gspca_sq930x: reg_r 001f failed -110 [ 825.134858][ T9] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 828.713363][ T5874] usb 6-1: USB disconnect, device number 58 [ 829.240283][ T5874] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 829.662509][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.662544][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.662581][ T5874] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 829.662604][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.671109][ T5874] usb 5-1: config 0 descriptor?? [ 831.071286][ T5874] usb 5-1: string descriptor 0 read error: -22 [ 831.874244][ T5874] uclogic 0003:256C:006D.0041: failed retrieving string descriptor #100: -71 [ 831.874306][ T5874] uclogic 0003:256C:006D.0041: failed retrieving pen parameters: -71 [ 831.874323][ T5874] uclogic 0003:256C:006D.0041: failed probing pen v1 parameters: -71 [ 831.874377][ T5874] uclogic 0003:256C:006D.0041: failed probing parameters: -71 [ 831.874482][ T5874] uclogic 0003:256C:006D.0041: probe with driver uclogic failed with error -71 [ 831.878531][ T5874] usb 5-1: USB disconnect, device number 83 [ 833.307575][T11633] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 833.365642][T11635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.460536][T11646] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 834.460816][T11646] overlayfs: overlapping lowerdir path [ 836.583207][T11666] FAULT_INJECTION: forcing a failure. [ 836.583207][T11666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.583244][T11666] CPU: 1 UID: 0 PID: 11666 Comm: syz.1.1641 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 836.583271][T11666] Tainted: [L]=SOFTLOCKUP [ 836.583278][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.583290][T11666] Call Trace: [ 836.583298][T11666] [ 836.583306][T11666] dump_stack_lvl+0xe8/0x150 [ 836.583336][T11666] should_fail_ex+0x46c/0x600 [ 836.583367][T11666] strncpy_from_user+0x36/0x2c0 [ 836.583393][T11666] getname_flags+0xf3/0x540 [ 836.583417][T11666] __x64_sys_mknodat+0x96/0xc0 [ 836.583444][T11666] do_syscall_64+0xec/0xf80 [ 836.583464][T11666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.583482][T11666] ? trace_irq_disable+0x37/0x100 [ 836.583501][T11666] ? clear_bhb_loop+0x60/0xb0 [ 836.583524][T11666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.583542][T11666] RIP: 0033:0x7f6230b6f749 [ 836.583559][T11666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.583576][T11666] RSP: 002b:00007f622edce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 836.583597][T11666] RAX: ffffffffffffffda RBX: 00007f6230dc5fa0 RCX: 00007f6230b6f749 [ 836.583611][T11666] RDX: 00000000000021c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 836.583625][T11666] RBP: 00007f622edce090 R08: 0000000000000000 R09: 0000000000000000 [ 836.583643][T11666] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 836.583655][T11666] R13: 00007f6230dc6038 R14: 00007f6230dc5fa0 R15: 00007ffcbd763fc8 [ 836.583687][T11666] [ 836.940369][ T37] kauditd_printk_skb: 162 callbacks suppressed [ 836.940396][ T37] audit: type=1326 audit(1767721027.148:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 836.940446][ T37] audit: type=1326 audit(1767721027.148:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 836.940489][ T37] audit: type=1326 audit(1767721027.148:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 836.940531][ T37] audit: type=1326 audit(1767721027.148:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 836.940573][ T37] audit: type=1326 audit(1767721027.148:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 836.940614][ T37] audit: type=1326 audit(1767721027.148:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6230b6df90 code=0x7ffc0000 [ 836.940656][ T37] audit: type=1326 audit(1767721027.148:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 836.940697][ T37] audit: type=1326 audit(1767721027.148:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 836.940750][ T37] audit: type=1326 audit(1767721027.148:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 836.940794][ T37] audit: type=1326 audit(1767721027.148:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11674 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6230b6f749 code=0x7ffc0000 [ 838.352599][T11699] 9p: Bad value for 'rfdno' [ 838.365760][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1652'. [ 838.365785][T11699] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1652'. [ 838.365800][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1652'. [ 838.367446][T11699] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1652'. [ 838.367468][T11699] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1652'. [ 838.369005][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1652'. [ 839.795655][T11716] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 839.799693][T11716] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 840.964009][T11732] FAULT_INJECTION: forcing a failure. [ 840.964009][T11732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.964044][T11732] CPU: 1 UID: 0 PID: 11732 Comm: syz.1.1660 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 840.964068][T11732] Tainted: [L]=SOFTLOCKUP [ 840.964074][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 840.964085][T11732] Call Trace: [ 840.964092][T11732] [ 840.964100][T11732] dump_stack_lvl+0xe8/0x150 [ 840.964129][T11732] should_fail_ex+0x46c/0x600 [ 840.964157][T11732] _copy_from_user+0x2d/0xb0 [ 840.964177][T11732] __copy_msghdr+0x3c5/0x5b0 [ 840.964205][T11732] ___sys_sendmsg+0x1a5/0x2a0 [ 840.964230][T11732] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.964258][T11732] ? kstrtouint+0x6e/0xe0 [ 840.964315][T11732] ? __fget_files+0x2a/0x420 [ 840.964334][T11732] ? __fget_files+0x3a6/0x420 [ 840.964363][T11732] __sys_sendmmsg+0x22d/0x430 [ 840.964391][T11732] ? __pfx___sys_sendmmsg+0x10/0x10 [ 840.964424][T11732] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 840.964461][T11732] ? ksys_write+0x230/0x260 [ 840.964489][T11732] ? __pfx_ksys_write+0x10/0x10 [ 840.964520][T11732] __x64_sys_sendmmsg+0xa0/0xc0 [ 840.964545][T11732] do_syscall_64+0xec/0xf80 [ 840.964563][T11732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.964582][T11732] ? trace_irq_disable+0x37/0x100 [ 840.964601][T11732] ? clear_bhb_loop+0x60/0xb0 [ 840.964624][T11732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.964644][T11732] RIP: 0033:0x7f6230b6f749 [ 840.964660][T11732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.964676][T11732] RSP: 002b:00007f622edce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 840.964698][T11732] RAX: ffffffffffffffda RBX: 00007f6230dc5fa0 RCX: 00007f6230b6f749 [ 840.964712][T11732] RDX: 0000000000000001 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 840.964725][T11732] RBP: 00007f622edce090 R08: 0000000000000000 R09: 0000000000000000 [ 840.964737][T11732] R10: 00000000240000c0 R11: 0000000000000246 R12: 0000000000000001 [ 840.964750][T11732] R13: 00007f6230dc6038 R14: 00007f6230dc5fa0 R15: 00007ffcbd763fc8 [ 840.964781][T11732] [ 842.900405][ T935] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 843.001093][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1671'. [ 843.076541][ T935] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 843.076567][ T935] usb 6-1: config 1 has no interface number 0 [ 843.076626][ T935] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 843.076651][ T935] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 843.076675][ T935] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.079697][ T935] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 843.079724][ T935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.079743][ T935] usb 6-1: Product: syz [ 843.079757][ T935] usb 6-1: Manufacturer: syz [ 843.079770][ T935] usb 6-1: SerialNumber: syz [ 843.110283][ T5911] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 844.170145][T11754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 844.170262][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 844.172523][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 844.172552][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 844.175374][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 844.175400][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.175418][ T5911] usb 2-1: Product: syz [ 844.175431][ T5911] usb 2-1: Manufacturer: syz [ 844.175444][ T5911] usb 2-1: SerialNumber: syz [ 844.365040][ T5911] usb 2-1: config 0 descriptor?? [ 844.383796][ T5911] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 844.383827][ T5911] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 844.467715][T11773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1673'. [ 844.512218][T11749] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 845.009213][ T5911] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 845.018129][ T5911] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 845.744957][ T5911] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 845.746605][ T5911] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 846.247669][ T5911] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 846.249560][ T5911] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 846.250791][ T5911] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 846.261675][ T5911] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 846.309754][ T5911] usb 2-1: USB disconnect, device number 84 [ 846.422803][ T935] usb 6-1: Incompatible driver and firmware versions [ 846.454266][ T935] usb 6-1: USB disconnect, device number 59 [ 846.764407][T11799] syz.2.1678 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 847.000284][ T935] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 847.976700][ T935] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 847.976746][ T935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 847.976773][ T935] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 847.978585][ T935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.978611][ T935] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 847.978628][ T935] usb 3-1: Manufacturer: syz [ 847.978641][ T935] usb 3-1: SerialNumber: syz [ 848.499415][ T935] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 848.742679][ T935] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 848.759853][ T935] usb 3-1: USB disconnect, device number 71 [ 848.958845][T11821] autofs: Bad value for 'uid' [ 848.958857][T11821] autofs: Bad value for 'uid' [ 848.997147][T11821] input: syz1 as /devices/virtual/input/input31 [ 849.034916][T11818] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 849.812448][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 850.001957][T11837] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 850.040638][ T5801] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 850.080570][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1689'. [ 850.192770][ T5801] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 850.192798][ T5801] usb 5-1: config 0 has no interface number 1 [ 850.192853][ T5801] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 850.192886][ T5801] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 850.194381][ T5801] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 850.194407][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 850.194426][ T5801] usb 5-1: SerialNumber: syz [ 850.207728][ T5801] usb 5-1: config 0 descriptor?? [ 850.560263][ T5874] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 850.712746][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.712801][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 850.714853][ T5874] usb 6-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 850.714878][ T5874] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 850.714897][ T5874] usb 6-1: Manufacturer: syz [ 850.714911][ T5874] usb 6-1: SerialNumber: syz [ 850.780581][ T935] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 850.814376][ T5874] usb 6-1: bad CDC descriptors [ 850.900330][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 850.932486][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.932519][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.932610][ T935] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 850.932624][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.953548][ T935] usb 2-1: config 0 descriptor?? [ 852.585356][ T935] usb 2-1: string descriptor 0 read error: -22 [ 852.709388][ T5801] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 852.709494][ T5801] uvcvideo 5-1:0.199: No valid video chain found. [ 852.788343][ T5801] usb 5-1: USB disconnect, device number 84 [ 852.988162][ T935] uclogic 0003:256C:006D.0042: failed retrieving string descriptor #100: -71 [ 852.988232][ T935] uclogic 0003:256C:006D.0042: failed retrieving pen parameters: -71 [ 852.988249][ T935] uclogic 0003:256C:006D.0042: failed probing pen v1 parameters: -71 [ 852.988301][ T935] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 852.988411][ T935] uclogic 0003:256C:006D.0042: probe with driver uclogic failed with error -71 [ 852.995853][ T935] usb 2-1: USB disconnect, device number 85 [ 853.927547][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 853.938395][ T5874] usb 6-1: USB disconnect, device number 60 [ 855.877650][ T61] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 856.368330][T11892] 9pnet_virtio: no channels available for device /dev/sg0 [ 858.030671][ T5917] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 858.189023][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.189079][ T5917] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 858.220440][ T5917] usb 2-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 858.220470][ T5917] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 858.220490][ T5917] usb 2-1: Manufacturer: syz [ 858.220504][ T5917] usb 2-1: SerialNumber: syz [ 858.277107][ T5917] usb 2-1: bad CDC descriptors [ 860.757733][ T5874] usb 2-1: USB disconnect, device number 86 [ 861.260899][ T5904] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 861.290346][ T5874] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 861.412336][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.412370][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.412407][ T5904] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 861.412427][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.417222][ T5904] usb 2-1: config 0 descriptor?? [ 861.453883][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.453914][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.453949][ T5874] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 861.453970][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.458756][ T5874] usb 5-1: config 0 descriptor?? [ 861.529651][T11933] netlink: 'syz.3.1718': attribute type 4 has an invalid length. [ 862.030418][ T5904] usb 2-1: string descriptor 0 read error: -22 [ 862.090397][ T5874] usb 5-1: string descriptor 0 read error: -22 [ 862.290542][ T5874] uclogic 0003:256C:006D.0044: interface is invalid, ignoring [ 862.428736][ T5904] uclogic 0003:256C:006D.0043: failed retrieving string descriptor #100: -71 [ 862.428797][ T5904] uclogic 0003:256C:006D.0043: failed retrieving pen parameters: -71 [ 862.428813][ T5904] uclogic 0003:256C:006D.0043: failed probing pen v1 parameters: -71 [ 862.428864][ T5904] uclogic 0003:256C:006D.0043: failed probing parameters: -71 [ 862.428973][ T5904] uclogic 0003:256C:006D.0043: probe with driver uclogic failed with error -71 [ 862.477113][ T5904] usb 2-1: USB disconnect, device number 87 [ 862.496846][ T58] usb 5-1: USB disconnect, device number 85 [ 865.190313][T11947] sctp: [Deprecated]: syz.5.1723 (pid 11947) Use of int in max_burst socket option deprecated. [ 865.190313][T11947] Use struct sctp_assoc_value instead [ 865.625171][T11958] netlink: 944 bytes leftover after parsing attributes in process `syz.4.1726'. [ 865.625195][T11958] openvswitch: netlink: Flow key attr not present in new flow. [ 865.625839][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1726'. [ 866.250331][ T58] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 866.454396][ T58] usb 5-1: unable to get BOS descriptor or descriptor too short [ 866.513934][ T58] usb 5-1: not running at top speed; connect to a high speed hub [ 866.624577][ T58] usb 5-1: config 115 has an invalid interface number: 230 but max is 2 [ 866.624607][ T58] usb 5-1: config 115 has an invalid interface number: 93 but max is 2 [ 866.624625][ T58] usb 5-1: config 115 has an invalid interface number: 47 but max is 2 [ 866.624644][ T58] usb 5-1: config 115 has no interface number 0 [ 866.624660][ T58] usb 5-1: config 115 has no interface number 1 [ 866.624676][ T58] usb 5-1: config 115 has no interface number 2 [ 866.624734][ T58] usb 5-1: config 115 interface 230 has no altsetting 0 [ 866.624751][ T58] usb 5-1: config 115 interface 93 has no altsetting 0 [ 866.624769][ T58] usb 5-1: config 115 interface 47 has no altsetting 0 [ 866.688382][ T58] usb 5-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=aa.60 [ 866.688402][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.688412][ T58] usb 5-1: Product: syz [ 866.688420][ T58] usb 5-1: Manufacturer: syz [ 866.688427][ T58] usb 5-1: SerialNumber: syz [ 866.785562][ T61] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 867.660473][ T5874] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 868.043332][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 868.247249][ T5874] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 868.247283][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 868.247306][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.247329][ T5874] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.247368][ T5874] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 868.247388][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.888793][ T5874] usb 3-1: usb_control_msg returned -32 [ 868.888843][ T5874] usbtmc 3-1:16.0: can't read capabilities [ 869.256446][ T58] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 869.256892][ T58] usb 5-1: selecting invalid altsetting 0 [ 869.285725][ T2362] pvrusb2: Invalid write control endpoint [ 870.227194][ T58] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 870.227577][ T58] usb 5-1: selecting invalid altsetting 0 [ 870.628415][ T58] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 870.633627][ T58] usb 5-1: selecting invalid altsetting 0 [ 870.658881][ T58] usb 5-1: USB disconnect, device number 86 [ 870.794617][ T935] usb 3-1: USB disconnect, device number 73 [ 870.857667][ T2362] pvrusb2: Invalid write control endpoint [ 870.857679][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 870.857684][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 870.857688][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 870.857693][ T2362] pvrusb2: Device being rendered inoperable [ 870.865269][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 870.865369][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 870.901425][ T2362] pvrusb2: Attached sub-driver cx25840 [ 870.984887][T12016] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 871.085274][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 871.085305][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 871.085327][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 871.085349][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 871.085360][ T2362] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 871.207371][T12022] overlayfs: failed to get index nlink (file1/bus, err=0) [ 871.351237][ T2362] TUNER: Unable to find symbol tda829x_probe() [ 871.430869][ T2362] DVB: Unable to find symbol tda9887_attach() [ 871.430886][ T2362] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 871.431101][ T2362] pvrusb2: Attached sub-driver tuner [ 871.431118][ T2362] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 871.431129][ T2362] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 871.435975][ T2362] pvrusb2: Invalid write control endpoint [ 874.021654][ T2362] pvrusb2: Invalid write control endpoint [ 874.021665][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 874.021669][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 874.021673][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 874.021678][ T2362] pvrusb2: Device being rendered inoperable [ 874.021693][ T2362] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 874.021719][ T2362] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 874.036713][ T2362] pvrusb2: Attached sub-driver cx25840 [ 874.122925][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 874.122955][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 874.122976][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 874.122997][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 874.123008][ T2362] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 874.257269][ T2362] TUNER: Unable to find symbol tda829x_probe() [ 874.405742][ T5917] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 875.201671][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.201741][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.298458][ T5917] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 875.298489][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 875.298509][ T5917] usb 2-1: Product: syz [ 875.298530][ T5917] usb 2-1: Manufacturer: syz [ 875.298545][ T5917] usb 2-1: SerialNumber: syz [ 875.307317][ T5917] usb 2-1: config 0 descriptor?? [ 875.407511][ T5917] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 875.408338][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 875.432381][T12055] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 875.481297][ T5917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 875.486078][ T5917] dvb-usb: DigitalNow DVB-T Dual USB error while loading driver (-19) [ 875.486940][ T5917] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 875.533752][ T5917] usb 2-1: USB disconnect, device number 88 [ 875.906785][ T2362] DVB: Unable to find symbol tda9887_attach() [ 875.906826][ T2362] tuner: 2-0043: Tuner 4 found with type(s) Radio TV. [ 876.634165][ T2362] pvrusb2: Attached sub-driver tuner [ 876.634180][ T2362] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 876.634192][ T2362] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 876.634231][ T2362] pvrusb2: Invalid write control endpoint [ 877.696822][ T2362] pvrusb2: Invalid write control endpoint [ 877.696836][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 877.696846][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 877.696854][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 877.696864][ T2362] pvrusb2: Device being rendered inoperable [ 877.696890][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 877.696937][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 877.709545][ T2362] pvrusb2: Attached sub-driver cx25840 [ 877.945802][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 877.945832][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 877.945851][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 877.945871][ T2362] pvrusb2: Attempted to execute control transfer when device not ok [ 877.945881][ T2362] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 878.068027][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 878.068049][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'. [ 878.068073][T12081] netlink: 'syz.1.1762': attribute type 12 has an invalid length. [ 878.068088][T12081] netlink: 'syz.1.1762': attribute type 11 has an invalid length. [ 878.350472][ T2362] TUNER: Unable to find symbol tda829x_probe() [ 879.674857][ T2362] DVB: Unable to find symbol tda9887_attach() [ 879.674872][ T2362] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 879.675126][ T2362] pvrusb2: Attached sub-driver tuner [ 879.675136][ T2362] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 879.675155][ T2362] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 880.102574][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 880.190377][ T5917] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 880.190742][ T61] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 880.353001][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.353152][ T5917] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 880.355769][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 880.355795][ T5917] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 880.355814][ T5917] usb 3-1: Manufacturer: syz [ 880.355828][ T5917] usb 3-1: SerialNumber: syz [ 880.431858][ T5917] usb 3-1: bad CDC descriptors [ 883.224525][ T5874] usb 3-1: USB disconnect, device number 74 [ 884.298506][ T5932] IPVS: starting estimator thread 0... [ 884.634683][T12120] IPVS: using max 7 ests per chain, 16800 per kthread [ 885.575963][T12132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1774'. [ 885.576698][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 885.576718][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 885.613516][T12134] FAULT_INJECTION: forcing a failure. [ 885.613516][T12134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.613551][T12134] CPU: 0 UID: 0 PID: 12134 Comm: syz.4.1775 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 885.613578][T12134] Tainted: [L]=SOFTLOCKUP [ 885.613585][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.613596][T12134] Call Trace: [ 885.613603][T12134] [ 885.613610][T12134] dump_stack_lvl+0xe8/0x150 [ 885.613638][T12134] should_fail_ex+0x46c/0x600 [ 885.613667][T12134] _copy_to_user+0x31/0xb0 [ 885.613687][T12134] kvm_arch_dev_ioctl+0x41b/0x8f0 [ 885.613708][T12134] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 885.613729][T12134] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 885.613753][T12134] ? __pfx_smack_log+0x10/0x10 [ 885.613774][T12134] ? smk_access+0x14c/0x4e0 [ 885.613799][T12134] ? smk_tskacc+0x2fc/0x370 [ 885.613822][T12134] ? smack_file_ioctl+0x2ac/0x340 [ 885.613851][T12134] kvm_dev_ioctl+0x5ff/0x1600 [ 885.613881][T12134] ? __fget_files+0x2a/0x420 [ 885.613900][T12134] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 885.613921][T12134] ? __fget_files+0x2a/0x420 [ 885.613950][T12134] ? bpf_lsm_file_ioctl+0x9/0x20 [ 885.613975][T12134] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 885.613998][T12134] __se_sys_ioctl+0xff/0x170 [ 885.614023][T12134] do_syscall_64+0xec/0xf80 [ 885.614042][T12134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.614059][T12134] ? trace_irq_disable+0x37/0x100 [ 885.614077][T12134] ? clear_bhb_loop+0x60/0xb0 [ 885.614098][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.614116][T12134] RIP: 0033:0x7feb7d61f749 [ 885.614133][T12134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.614148][T12134] RSP: 002b:00007feb7b87e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.614168][T12134] RAX: ffffffffffffffda RBX: 00007feb7d875fa0 RCX: 00007feb7d61f749 [ 885.614183][T12134] RDX: 0000200000000100 RSI: 00000000c004ae0a RDI: 0000000000000003 [ 885.614194][T12134] RBP: 00007feb7b87e090 R08: 0000000000000000 R09: 0000000000000000 [ 885.614206][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.614217][T12134] R13: 00007feb7d876038 R14: 00007feb7d875fa0 R15: 00007fffe6880198 [ 885.614247][T12134] [ 886.890339][ T58] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 887.334255][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.334311][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 887.337401][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 887.337428][ T58] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 887.337446][ T58] usb 5-1: Manufacturer: syz [ 887.337460][ T58] usb 5-1: SerialNumber: syz [ 887.412345][ T58] usb 5-1: bad CDC descriptors [ 888.842104][T12139] Bluetooth: hci3: command 0x0406 tx timeout [ 889.889169][ T58] usb 5-1: USB disconnect, device number 87 [ 890.531803][T12184] tipc: Enabling of bearer rejected, failed to enable media [ 890.900341][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 890.910608][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 891.060323][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 891.061227][ T9] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 891.072711][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 891.072745][ T9] usb 3-1: can't read configurations, error -61 [ 891.200370][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 891.360358][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 891.360894][ T9] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 891.363511][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 891.363545][ T9] usb 3-1: can't read configurations, error -61 [ 891.363869][ T9] usb usb3-port1: attempt power cycle [ 891.700614][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 891.733608][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 891.736723][ T9] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 891.760768][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 891.760802][ T9] usb 3-1: can't read configurations, error -61 [ 891.890327][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 891.915019][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 891.916009][ T9] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 891.923819][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 891.923853][ T9] usb 3-1: can't read configurations, error -61 [ 891.924914][ T9] usb usb3-port1: unable to enumerate USB device [ 893.658395][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059774c00: rx timeout, send abort [ 893.935720][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 894.147903][T12223] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 894.149249][T12223] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 894.150371][ T6905] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 894.225194][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059774c00: abort rx timeout. Force session deactivation [ 894.313216][ T6905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.313274][ T6905] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 894.315450][ T6905] usb 3-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 894.315476][ T6905] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 894.315495][ T6905] usb 3-1: Manufacturer: syz [ 894.315509][ T6905] usb 3-1: SerialNumber: syz [ 894.391675][ T6905] usb 3-1: bad CDC descriptors [ 894.574080][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 894.591510][ T61] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 894.613500][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1806'. [ 894.860302][ T6905] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 895.709672][ T6905] usb 5-1: Using ep0 maxpacket: 32 [ 895.713728][ T6905] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.713758][ T6905] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.717832][ T6905] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 895.717858][ T6905] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 895.717878][ T6905] usb 5-1: Product: syz [ 895.717892][ T6905] usb 5-1: Manufacturer: syz [ 895.735317][ T6905] hub 5-1:4.0: USB hub found [ 895.962760][ T6905] hub 5-1:4.0: 1 port detected [ 896.183707][ T6905] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 896.183732][ T6905] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 896.243302][ T6905] usb 5-1: USB disconnect, device number 88 [ 896.296182][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 896.412641][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 898.474051][ T5917] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 898.690753][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 898.728566][ T5917] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.728586][ T5917] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.753514][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 898.753532][ T5917] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 898.753543][ T5917] usb 2-1: Product: syz [ 898.753550][ T5917] usb 2-1: Manufacturer: syz [ 898.796200][ T5917] hub 2-1:4.0: USB hub found [ 898.898669][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'. [ 898.982902][ T5917] hub 2-1:4.0: 2 ports detected [ 899.432746][ T5917] hub 2-1:4.0: set hub depth failed [ 899.447811][ T5917] usb 2-1: USB disconnect, device number 89 [ 899.860928][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1825'. [ 899.945343][ T9] usb 3-1: USB disconnect, device number 79 [ 902.925404][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1834'. [ 902.930392][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1834'. [ 904.520400][ T5874] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 904.721738][ T5874] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 904.721757][ T5874] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 904.721767][ T5874] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 904.721776][ T5874] usb 2-1: config 220 has no interface number 2 [ 904.721819][ T5874] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 904.721832][ T5874] usb 2-1: config 220 interface 0 has no altsetting 0 [ 904.721841][ T5874] usb 2-1: config 220 interface 76 has no altsetting 0 [ 904.721850][ T5874] usb 2-1: config 220 interface 1 has no altsetting 0 [ 904.723591][ T5874] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 904.723607][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.723616][ T5874] usb 2-1: Product: syz [ 904.723624][ T5874] usb 2-1: Manufacturer: syz [ 904.723631][ T5874] usb 2-1: SerialNumber: syz [ 905.080076][ T5874] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 905.080099][ T5874] uvcvideo 2-1:220.0: No valid video chain found. [ 905.080137][ T5874] usb 2-1: selecting invalid altsetting 0 [ 905.182859][ T5874] usb 2-1: selecting invalid altsetting 0 [ 905.182896][ T5874] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 905.186752][ T5874] usb 2-1: USB disconnect, device number 90 [ 905.313343][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'. [ 905.910803][T12347] tipc: Enabling of bearer rejected, failed to enable media [ 906.090408][ T5917] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 906.170708][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 906.252667][ T5917] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.252725][ T5917] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 906.257045][ T5917] usb 6-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 906.257071][ T5917] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 906.257089][ T5917] usb 6-1: Manufacturer: syz [ 906.257097][ T5917] usb 6-1: SerialNumber: syz [ 906.316338][ T5917] usb 6-1: bad CDC descriptors [ 906.556961][T12368] FAULT_INJECTION: forcing a failure. [ 906.556961][T12368] name failslab, interval 1, probability 0, space 0, times 0 [ 906.556997][T12368] CPU: 0 UID: 0 PID: 12368 Comm: syz.1.1846 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 906.557023][T12368] Tainted: [L]=SOFTLOCKUP [ 906.557031][T12368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 906.557043][T12368] Call Trace: [ 906.557051][T12368] [ 906.557059][T12368] dump_stack_lvl+0xe8/0x150 [ 906.557089][T12368] should_fail_ex+0x46c/0x600 [ 906.557118][T12368] ? skb_clone+0x212/0x3a0 [ 906.557140][T12368] should_failslab+0xa8/0x100 [ 906.557160][T12368] ? skb_clone+0x212/0x3a0 [ 906.557180][T12368] kmem_cache_alloc_noprof+0x84/0x6c0 [ 906.557203][T12368] ? __netlink_lookup+0xbd/0x8a0 [ 906.557235][T12368] skb_clone+0x212/0x3a0 [ 906.557266][T12368] __netlink_deliver_tap+0x404/0x850 [ 906.557302][T12368] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.557327][T12368] netlink_deliver_tap+0x19c/0x1b0 [ 906.557351][T12368] netlink_unicast+0x811/0xa10 [ 906.557382][T12368] ? __pfx_netlink_unicast+0x10/0x10 [ 906.557409][T12368] ? __alloc_skb+0x198/0x3a0 [ 906.557429][T12368] ? netlink_sendmsg+0x642/0xb30 [ 906.557451][T12368] ? skb_put+0x11b/0x210 [ 906.557475][T12368] netlink_sendmsg+0x805/0xb30 [ 906.557508][T12368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.557540][T12368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 906.557564][T12368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.557589][T12368] __sock_sendmsg+0x21c/0x270 [ 906.557619][T12368] ____sys_sendmsg+0x508/0x810 [ 906.557646][T12368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.557677][T12368] ? import_iovec+0x74/0xa0 [ 906.557698][T12368] ___sys_sendmsg+0x21f/0x2a0 [ 906.557722][T12368] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.557776][T12368] ? __fget_files+0x2a/0x420 [ 906.557796][T12368] ? __fget_files+0x3a6/0x420 [ 906.557824][T12368] __x64_sys_sendmsg+0x1a1/0x260 [ 906.557850][T12368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.557882][T12368] ? __pfx_ksys_write+0x10/0x10 [ 906.557918][T12368] do_syscall_64+0xec/0xf80 [ 906.557937][T12368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.557955][T12368] ? trace_irq_disable+0x37/0x100 [ 906.557973][T12368] ? clear_bhb_loop+0x60/0xb0 [ 906.557996][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.558014][T12368] RIP: 0033:0x7f6230b6f749 [ 906.558032][T12368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.558049][T12368] RSP: 002b:00007f622edce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.558069][T12368] RAX: ffffffffffffffda RBX: 00007f6230dc5fa0 RCX: 00007f6230b6f749 [ 906.558083][T12368] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 906.558096][T12368] RBP: 00007f622edce090 R08: 0000000000000000 R09: 0000000000000000 [ 906.558108][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.558119][T12368] R13: 00007f6230dc6038 R14: 00007f6230dc5fa0 R15: 00007ffcbd763fc8 [ 906.558150][T12368] [ 906.726845][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1847'. [ 907.328323][T12380] macsec1: entered allmulticast mode [ 907.862469][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 907.862487][ T37] audit: type=1326 audit(1767721098.148:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12397 comm="syz.1.1855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6230b6f749 code=0x0 [ 908.097704][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 908.423464][T12410] random: crng reseeded on system resumption [ 909.317259][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'. [ 909.679131][ T5917] usb 6-1: USB disconnect, device number 61 [ 909.740600][T11203] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 910.960282][T11203] usb 5-1: Using ep0 maxpacket: 32 [ 910.963334][T11203] usb 5-1: config 13 has an invalid interface number: 168 but max is 3 [ 910.963359][T11203] usb 5-1: config 13 has an invalid interface number: 168 but max is 3 [ 910.963378][T11203] usb 5-1: config 13 has an invalid interface number: 145 but max is 3 [ 910.963397][T11203] usb 5-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 910.963415][T11203] usb 5-1: config 13 has an invalid interface number: 176 but max is 3 [ 910.963431][T11203] usb 5-1: config 13 has an invalid interface number: 160 but max is 3 [ 910.963442][T11203] usb 5-1: config 13 has no interface number 0 [ 910.963450][T11203] usb 5-1: config 13 has no interface number 1 [ 910.963458][T11203] usb 5-1: config 13 has no interface number 2 [ 910.963465][T11203] usb 5-1: config 13 has no interface number 3 [ 910.963511][T11203] usb 5-1: config 13 interface 168 altsetting 240 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 910.963525][T11203] usb 5-1: config 13 interface 168 altsetting 240 has an invalid descriptor for endpoint zero, skipping [ 910.963537][T11203] usb 5-1: config 13 interface 168 altsetting 240 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 910.963564][T11203] usb 5-1: config 13 interface 168 altsetting 240 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 910.963586][T11203] usb 5-1: config 13 interface 168 altsetting 67 has an invalid descriptor for endpoint zero, skipping [ 910.963596][T11203] usb 5-1: config 13 interface 168 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 910.963618][T11203] usb 5-1: config 13 interface 145 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 910.963630][T11203] usb 5-1: config 13 interface 145 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 910.963640][T11203] usb 5-1: config 13 interface 145 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 910.963651][T11203] usb 5-1: config 13 interface 145 altsetting 16 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 910.963672][T11203] usb 5-1: config 13 interface 176 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 910.963685][T11203] usb 5-1: config 13 interface 176 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 910.963706][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 910.963718][T11203] usb 5-1: config 13 interface 160 altsetting 7 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 910.963731][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 910.963742][T11203] usb 5-1: config 13 interface 160 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 910.963752][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 910.963762][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 910.963773][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 910.963786][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 910.963796][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 910.963807][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 910.963818][T11203] usb 5-1: config 13 interface 160 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 910.963830][T11203] usb 5-1: config 13 interface 160 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 910.963841][T11203] usb 5-1: config 13 interface 160 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 910.963851][T11203] usb 5-1: config 13 interface 168 has no altsetting 0 [ 910.963860][T11203] usb 5-1: config 13 interface 168 has no altsetting 1 [ 910.963868][T11203] usb 5-1: config 13 interface 145 has no altsetting 0 [ 910.963877][T11203] usb 5-1: config 13 interface 176 has no altsetting 0 [ 910.963885][T11203] usb 5-1: config 13 interface 160 has no altsetting 0 [ 910.967010][T11203] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=b0.e2 [ 910.967043][T11203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.967061][T11203] usb 5-1: Product: 䈰恚򞓅롆墭为뾯됋뱱㔝Ě螩檰蕚屗珏ꏴ䐥琍爦뢛褖뉙䲬⦖둆퇁ⓖ猕겏褎ࡰᦡ㏑昿䔷榘栎䒙첓겪ဓ첎먚샟ﶽ觧G否蕺ⶕ顺棕ﯸ [ 910.967074][T11203] usb 5-1: Manufacturer: ⾽钕䯃ᩍヨ躍ᶡ昚쀅헒᪁媻둕樳 [ 910.967082][T11203] usb 5-1: SerialNumber: syz [ 911.278358][T11203] usb 5-1: can't set config #13, error -71 [ 911.292112][T11203] usb 5-1: USB disconnect, device number 89 [ 914.918104][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'. [ 915.285605][T12460] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 915.285879][T12460] overlayfs: overlapping lowerdir path [ 916.361446][ T37] audit: type=1326 audit(1767721106.648:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12461 comm="syz.5.1871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f102dd2f749 code=0x0 [ 916.668700][ T37] audit: type=1326 audit(1767721106.948:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f584c3a65e7 code=0x7ffc0000 [ 916.668870][ T37] audit: type=1326 audit(1767721106.948:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f584c34b829 code=0x7ffc0000 [ 916.669023][ T37] audit: type=1326 audit(1767721106.948:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584c3af749 code=0x7ffc0000 [ 916.723795][ T37] audit: type=1326 audit(1767721107.008:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f584c3a65e7 code=0x7ffc0000 [ 916.724636][ T37] audit: type=1326 audit(1767721107.008:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f584c34b829 code=0x7ffc0000 [ 916.740581][ T37] audit: type=1326 audit(1767721107.008:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f584c3a65e7 code=0x7ffc0000 [ 916.762172][ T37] audit: type=1326 audit(1767721107.028:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f584c34b829 code=0x7ffc0000 [ 916.762479][ T37] audit: type=1326 audit(1767721107.048:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f584c3a65e7 code=0x7ffc0000 [ 916.762689][ T37] audit: type=1326 audit(1767721107.048:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.2.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f584c34b829 code=0x7ffc0000 [ 919.706396][ T6905] kernel write not supported for file /cpu/0/msr (pid: 6905 comm: kworker/1:14) [ 920.330879][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 922.658046][T12510] FAULT_INJECTION: forcing a failure. [ 922.658046][T12510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.658083][T12510] CPU: 0 UID: 0 PID: 12510 Comm: syz.5.1878 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 922.658110][T12510] Tainted: [L]=SOFTLOCKUP [ 922.658117][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 922.658129][T12510] Call Trace: [ 922.658136][T12510] [ 922.658144][T12510] dump_stack_lvl+0xe8/0x150 [ 922.658181][T12510] should_fail_ex+0x46c/0x600 [ 922.658209][T12510] _copy_from_iter+0x1cd/0x1630 [ 922.658244][T12510] ? __pfx__copy_from_iter+0x10/0x10 [ 922.658258][T12510] ? sock_alloc_send_pskb+0x877/0x990 [ 922.658276][T12510] ? __pfx__copy_from_iter+0x10/0x10 [ 922.658291][T12510] ? page_copy_sane+0x4e/0x280 [ 922.658307][T12510] copy_page_from_iter+0xdd/0x170 [ 922.658324][T12510] skb_copy_datagram_from_iter+0x306/0x720 [ 922.658345][T12510] tun_get_user+0x1683/0x3de0 [ 922.658368][T12510] ? __pfx_tun_get_user+0x10/0x10 [ 922.658382][T12510] ? __lock_acquire+0x6b6/0x2cf0 [ 922.658398][T12510] ? kstrtoull+0x12f/0x1d0 [ 922.658415][T12510] ? ref_tracker_alloc+0x2fe/0x450 [ 922.658428][T12510] ? get_pid_task+0x20/0x1f0 [ 922.658443][T12510] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 922.658458][T12510] ? tun_get+0x1c/0x2f0 [ 922.658470][T12510] ? tun_get+0x1c/0x2f0 [ 922.658485][T12510] ? tun_get+0x1c/0x2f0 [ 922.658497][T12510] ? tun_get+0x1c/0x2f0 [ 922.658512][T12510] tun_chr_write_iter+0x119/0x200 [ 922.658526][T12510] vfs_write+0x5d5/0xb40 [ 922.658543][T12510] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 922.658556][T12510] ? __pfx_vfs_write+0x10/0x10 [ 922.658575][T12510] ? __fget_files+0x2a/0x420 [ 922.658590][T12510] ksys_write+0x14b/0x260 [ 922.658605][T12510] ? __pfx_ksys_write+0x10/0x10 [ 922.658625][T12510] do_syscall_64+0xec/0xf80 [ 922.658635][T12510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.658644][T12510] ? trace_irq_disable+0x37/0x100 [ 922.658655][T12510] ? clear_bhb_loop+0x60/0xb0 [ 922.658667][T12510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.658677][T12510] RIP: 0033:0x7f102dd2e1ff [ 922.658687][T12510] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 922.658696][T12510] RSP: 002b:00007f102bf8e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 922.658708][T12510] RAX: ffffffffffffffda RBX: 00007f102df85fa0 RCX: 00007f102dd2e1ff [ 922.658715][T12510] RDX: 0000000000000fc0 RSI: 0000200000001100 RDI: 00000000000000c8 [ 922.658722][T12510] RBP: 00007f102bf8e090 R08: 0000000000000000 R09: 0000000000000000 [ 922.658728][T12510] R10: 0000000000000fc0 R11: 0000000000000293 R12: 0000000000000001 [ 922.658734][T12510] R13: 00007f102df86038 R14: 00007f102df85fa0 R15: 00007fff26a498b8 [ 922.658750][T12510] [ 922.856416][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 923.276258][ T6905] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 923.439023][ T6905] usb 5-1: Using ep0 maxpacket: 8 [ 923.447287][ T6905] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 923.447346][ T6905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 923.447369][ T6905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 923.447391][ T6905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 923.449690][ T6905] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 923.449714][ T6905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.449733][ T6905] usb 5-1: Product: syz [ 923.449747][ T6905] usb 5-1: Manufacturer: syz [ 923.449760][ T6905] usb 5-1: SerialNumber: syz [ 923.457761][ T6905] usb 5-1: config 0 descriptor?? [ 923.505186][T12514] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 923.703182][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 923.772345][ T6905] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 923.837067][ T6905] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32 [ 924.052004][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 924.052018][ T37] audit: type=1326 audit(1767721114.328:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.3.1895" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ea74af749 code=0x0 [ 924.101968][T12538] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 924.190449][ T6905] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 924.569308][ T6905] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 924.569327][ T6905] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 924.569337][ T6905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 924.569364][ T6905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 924.569378][ T6905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 924.573258][ T6905] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 924.573286][ T6905] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 924.573405][ T6905] usb 3-1: Product: syz [ 924.573420][ T6905] usb 3-1: Manufacturer: syz [ 924.684851][ T6905] cdc_wdm 3-1:1.0: skipping garbage [ 924.684866][ T6905] cdc_wdm 3-1:1.0: skipping garbage [ 924.716797][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.730051][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.738561][ T6905] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 924.738574][ T6905] cdc_wdm 3-1:1.0: Unknown control protocol [ 924.759311][ C1] powermate: config urb returned -71 [ 924.759507][ C1] powermate: config urb returned -71 [ 924.760224][ C1] powermate: config urb returned -71 [ 924.778121][ T5917] usb 5-1: USB disconnect, device number 90 [ 924.778223][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 924.899051][T11203] usb 3-1: USB disconnect, device number 80 [ 925.239129][ T61] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 926.547286][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.575650][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.559824][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 927.569262][ T37] audit: type=1326 audit(1767721117.828:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12571 comm="syz.1.1908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6230b6f749 code=0x0 [ 927.689494][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.011808][ T5888] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 929.023580][ T5888] usb 2-1: device descriptor read/64, error -71 [ 929.563400][T12578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.590286][ T5887] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 929.660330][ T5888] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 929.742507][ T5887] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 929.742563][ T5887] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 929.742640][ T5887] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 929.742661][ T5887] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 929.742696][ T5887] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 929.742716][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.838339][ T5887] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 929.839382][ T5887] usb 6-1: invalid MIDI out EP 0 [ 929.882192][ T5888] usb 2-1: device descriptor read/64, error -71 [ 929.991870][ T5888] usb usb2-port1: attempt power cycle [ 930.030567][ T5887] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 930.833124][T12611] overlayfs: failed to resolve './file2': -2 [ 930.885017][T12609] overlayfs: failed to clone lowerpath [ 931.449091][T11203] usb 6-1: USB disconnect, device number 62 [ 931.500313][ T5887] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 931.760248][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 931.762997][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 931.763027][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 931.766885][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 931.766911][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.766930][ T5887] usb 3-1: Product: syz [ 931.766945][ T5887] usb 3-1: Manufacturer: syz [ 931.766959][ T5887] usb 3-1: SerialNumber: syz [ 931.845263][ T5887] usb 3-1: config 0 descriptor?? [ 931.854780][ T5887] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 931.854810][ T5887] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 934.033423][ T5887] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 934.077781][ T5887] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 934.290294][ T5887] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 934.290318][ T5887] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 934.290331][ T5887] em28xx 3-1:0.0: No AC97 audio processor [ 934.409103][T12648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1926'. [ 934.409126][T12648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1926'. [ 934.444590][T12648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1926'. [ 934.444612][T12648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1926'. [ 934.488111][ T5888] usb 3-1: USB disconnect, device number 81 [ 934.496486][ T5888] em28xx 3-1:0.0: Disconnecting em28xx [ 934.519297][ T5888] em28xx 3-1:0.0: Freeing device [ 934.540324][ T5887] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 934.783409][ T5887] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 934.783472][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.785133][ T5887] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 934.785159][ T5887] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 934.785177][ T5887] usb 6-1: Manufacturer: syz [ 934.791112][ T5887] usb 6-1: config 0 descriptor?? [ 934.864135][T12651] 9p: Could not find request transport: fd0x0000000000000004 [ 935.031256][ T5887] rc_core: IR keymap rc-hauppauge not found [ 935.031279][ T5887] Registered IR keymap rc-empty [ 935.040355][ T5887] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 935.047431][ T5887] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 935.101183][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 935.126819][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 936.586483][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.586560][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.301057][ T5887] usb 6-1: USB disconnect, device number 63 [ 938.437147][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'. [ 939.786868][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1941'. [ 940.490226][ T37] audit: type=1326 audit(1767721130.768:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12697 comm="syz.5.1946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f102dd2f749 code=0x0 [ 940.947235][T12712] comedi comedi0: aio_aio12_8: I/O port conflict (0xb02f,32) [ 941.875541][T12723] 9p: Bad value for 'wfdno' [ 942.268340][T12731] batadv0: entered promiscuous mode [ 942.419705][T12731] batadv0: left promiscuous mode [ 942.733367][T12739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 942.866093][T12739] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 942.866119][T12739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 942.894644][T12741] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 942.894670][T12741] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 942.894932][T12741] vhci_hcd vhci_hcd.0: Device attached [ 942.895194][T12739] vhci_hcd vhci_hcd.0: Device attached [ 943.036827][T12739] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(7) [ 943.036854][T12739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 943.061873][T12739] vhci_hcd vhci_hcd.0: Device attached [ 943.130849][T12741] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 943.130876][T12741] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 943.131140][T12741] vhci_hcd vhci_hcd.0: Device attached [ 943.132700][T12741] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 943.134667][T12741] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(17) [ 943.134688][T12741] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 943.135090][T12741] vhci_hcd vhci_hcd.0: Device attached [ 943.137413][T12741] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(19) [ 943.137435][T12741] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 943.140827][T12741] vhci_hcd vhci_hcd.0: Device attached [ 943.160294][ T5887] usb 35-2: new low-speed USB device number 2 using vhci_hcd [ 943.497017][T12753] vhci_hcd: connection closed [ 943.503445][T12742] vhci_hcd: connection closed [ 943.519413][T12745] vhci_hcd: connection closed [ 943.519460][T12755] vhci_hcd: connection closed [ 943.519498][T12750] vhci_hcd: connection closed [ 943.543242][ T5997] vhci_hcd vhci_hcd.1: stop threads [ 943.545234][ T5997] vhci_hcd vhci_hcd.1: release socket [ 943.553516][T12740] vhci_hcd: connection reset by peer [ 943.577988][ T5997] vhci_hcd vhci_hcd.1: disconnect device [ 943.578308][ T5997] vhci_hcd vhci_hcd.1: stop threads [ 943.578327][ T5997] vhci_hcd vhci_hcd.1: release socket [ 943.579628][ T5997] vhci_hcd vhci_hcd.1: disconnect device [ 943.579916][ T5997] vhci_hcd vhci_hcd.1: stop threads [ 943.579930][ T5997] vhci_hcd vhci_hcd.1: release socket [ 943.580123][ T5997] vhci_hcd vhci_hcd.1: disconnect device [ 943.625015][ T5997] vhci_hcd vhci_hcd.1: stop threads [ 943.625030][ T5997] vhci_hcd vhci_hcd.1: release socket [ 943.628643][ T5997] vhci_hcd vhci_hcd.1: disconnect device [ 943.630782][ T5997] vhci_hcd vhci_hcd.1: stop threads [ 943.630799][ T5997] vhci_hcd vhci_hcd.1: release socket [ 943.630999][ T5997] vhci_hcd vhci_hcd.1: disconnect device [ 943.631278][ T5997] vhci_hcd vhci_hcd.1: stop threads [ 943.631291][ T5997] vhci_hcd vhci_hcd.1: release socket [ 943.631480][ T5997] vhci_hcd vhci_hcd.1: disconnect device [ 944.506405][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1957'. [ 944.831792][T12785] FAULT_INJECTION: forcing a failure. [ 944.831792][T12785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.831942][T12785] CPU: 1 UID: 0 PID: 12785 Comm: syz.4.1961 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 944.831970][T12785] Tainted: [L]=SOFTLOCKUP [ 944.831977][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 944.831989][T12785] Call Trace: [ 944.831996][T12785] [ 944.832004][T12785] dump_stack_lvl+0xe8/0x150 [ 944.832034][T12785] should_fail_ex+0x46c/0x600 [ 944.832065][T12785] _copy_from_user+0x2d/0xb0 [ 944.832085][T12785] ___sys_sendmsg+0x158/0x2a0 [ 944.832112][T12785] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.832171][T12785] ? __fget_files+0x2a/0x420 [ 944.832191][T12785] ? __fget_files+0x3a6/0x420 [ 944.832219][T12785] __x64_sys_sendmsg+0x1a1/0x260 [ 944.832246][T12785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 944.832278][T12785] ? __pfx_ksys_write+0x10/0x10 [ 944.832314][T12785] do_syscall_64+0xec/0xf80 [ 944.832333][T12785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.832351][T12785] ? trace_irq_disable+0x37/0x100 [ 944.832370][T12785] ? clear_bhb_loop+0x60/0xb0 [ 944.832393][T12785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.832411][T12785] RIP: 0033:0x7feb7d61f749 [ 944.832428][T12785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.832446][T12785] RSP: 002b:00007feb7b87e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.832474][T12785] RAX: ffffffffffffffda RBX: 00007feb7d875fa0 RCX: 00007feb7d61f749 [ 944.832489][T12785] RDX: 0000000000040850 RSI: 0000200000000580 RDI: 0000000000000003 [ 944.832503][T12785] RBP: 00007feb7b87e090 R08: 0000000000000000 R09: 0000000000000000 [ 944.832514][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.832526][T12785] R13: 00007feb7d876038 R14: 00007feb7d875fa0 R15: 00007fffe6880198 [ 944.832559][T12785] [ 946.307854][ T58] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 947.540585][ T58] usb 5-1: device descriptor read/64, error -71 [ 947.569679][T12823] xt_socket: unknown flags 0xd0 [ 947.977429][ T58] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 948.200586][ T58] usb 5-1: device descriptor read/64, error -71 [ 948.310795][ T58] usb usb5-port1: attempt power cycle [ 948.330498][ T5887] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 948.650571][ T58] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 948.671217][ T58] usb 5-1: device descriptor read/8, error -71 [ 948.840331][T12837] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 948.840348][T12837] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 948.840565][T12837] vhci_hcd vhci_hcd.0: Device attached [ 948.920660][ T58] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 948.942703][ T58] usb 5-1: device descriptor read/8, error -71 [ 949.055835][ T58] usb usb5-port1: unable to enumerate USB device [ 949.100329][T11203] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 949.303876][T12838] vhci_hcd: connection reset by peer [ 949.851121][T12642] vhci_hcd vhci_hcd.5: stop threads [ 949.851145][T12642] vhci_hcd vhci_hcd.5: release socket [ 949.852627][T12642] vhci_hcd vhci_hcd.5: disconnect device [ 949.900323][ T5888] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 950.067739][ T5888] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 950.067767][ T5888] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 950.067787][ T5888] usb 2-1: config 0 has no interface number 1 [ 950.067801][ T5888] usb 2-1: config 0 has no interface number 2 [ 950.067873][ T5888] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 950.067895][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.077382][ T5888] usb 2-1: config 0 descriptor?? [ 950.281616][ T5888] qcserial 2-1:0.3: Qualcomm USB modem converter detected [ 950.670383][ T5888] usb 2-1: USB disconnect, device number 94 [ 950.821605][ T5888] qcserial 2-1:0.3: device disconnected [ 951.305992][T12851] 9p: Bad value for 'rfdno' [ 953.083392][T12881] 9p: Bad value for 'wfdno' [ 953.109267][T12883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'. [ 954.250471][T11203] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 955.237234][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 955.237280][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2004'. [ 955.237296][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 955.641902][T12907] 9pnet_fd: Insufficient options for proto=fd [ 956.632457][T12917] 9p: Bad value for 'wfdno' [ 957.081972][T12932] overlayfs: missing 'lowerdir' [ 957.137416][T12933] overlayfs: failed to clone lowerpath [ 957.587233][ T5887] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 957.970274][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 957.980520][ T5887] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 957.980547][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.980565][ T5887] usb 2-1: Product: syz [ 957.980578][ T5887] usb 2-1: Manufacturer: syz [ 957.980591][ T5887] usb 2-1: SerialNumber: syz [ 958.025495][ T5887] usb 2-1: config 0 descriptor?? [ 958.039549][ T5887] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 958.281047][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.283882][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.306613][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.307797][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.354407][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.355018][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.364904][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.365561][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.410767][T12928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'. [ 958.414258][ T5887] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 958.414411][ T5887] visor 2-1:0.0: probe with driver visor failed with error -71 [ 958.453861][ T5887] usb 2-1: USB disconnect, device number 95 [ 959.693527][ T5887] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 960.150866][ T5887] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 960.150892][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.161413][ T5887] usb 5-1: config 0 descriptor?? [ 960.187189][T12958] 9pnet_fd: Insufficient options for proto=fd [ 960.221682][ T5887] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 960.609056][T12968] overlayfs: missing 'lowerdir' [ 960.664592][T12969] overlayfs: overlapping lowerdir path [ 961.363143][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'. [ 961.403469][ T5887] gp8psk: usb in 137 operation failed. [ 961.403491][ T5887] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 961.403528][ T5887] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 961.436969][ T5887] usb 5-1: USB disconnect, device number 95 [ 962.610781][T12971] 9p: Bad value for 'wfdno' [ 963.040297][ T5887] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 963.194229][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.194256][ T5887] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 963.194288][ T5887] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 963.194300][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.197121][ T5887] usb 2-1: config 0 descriptor?? [ 963.403565][ T5887] usb 2-1: string descriptor 0 read error: -71 [ 963.420345][ T5887] usb 2-1: USB disconnect, device number 96 [ 963.500529][ T935] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 963.660659][ T935] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 963.660686][ T935] usb 5-1: config 0 has no interface number 0 [ 963.660735][ T935] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.660761][ T935] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.660797][ T935] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 963.660819][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.669360][ T935] usb 5-1: config 0 descriptor?? [ 964.099515][ T935] prodikeys 0003:041E:2801.0045: item fetching failed at offset 4/7 [ 964.108762][ T935] prodikeys 0003:041E:2801.0045: hid parse failed [ 964.108874][ T935] prodikeys 0003:041E:2801.0045: probe with driver prodikeys failed with error -22 [ 966.360962][ T935] usb 5-1: USB disconnect, device number 96 [ 966.445450][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 968.006926][T13026] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2041'. [ 969.171301][ T935] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 969.362637][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.362670][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.362709][ T935] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 969.362730][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.367572][ T935] usb 3-1: config 0 descriptor?? [ 970.723017][ T935] usbhid 3-1:0.0: can't add hid device: -71 [ 970.723136][ T935] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 970.747995][ T935] usb 3-1: USB disconnect, device number 82 [ 972.215721][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'. [ 972.580382][ T5887] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 972.730255][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 972.732414][ T5887] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 972.732437][ T5887] usb 5-1: config 0 has no interface number 0 [ 972.735252][ T5887] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 972.735278][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.735298][ T5887] usb 5-1: Product: syz [ 972.735312][ T5887] usb 5-1: Manufacturer: syz [ 972.735325][ T5887] usb 5-1: SerialNumber: syz [ 972.742231][ T5887] usb 5-1: config 0 descriptor?? [ 972.822070][ T5887] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 973.202540][T13078] vxcan0: tx drop: invalid da for name 0x0000020000000000 [ 974.683407][ T5887] gspca_spca1528: reg_w err -110 [ 974.700358][ T5887] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 975.237872][T13063] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.242167][T13063] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.262461][T13091] overlay: Unknown parameter 'fsmagic' [ 976.428346][T13063] tipc: Resetting bearer [ 978.577559][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 978.690300][T11203] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 978.818293][T13063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.824137][T13063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.836865][T13063] hsr0: left allmulticast mode [ 978.836878][T13063] hsr_slave_0: left allmulticast mode [ 978.836893][T13063] hsr_slave_1: left allmulticast mode [ 978.855181][ T5887] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 978.873515][T11203] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.873539][T11203] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.875585][T11203] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 978.875610][T11203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 978.875629][T11203] usb 6-1: SerialNumber: syz [ 979.000561][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 979.003049][ T5887] usb 2-1: config 119 has an invalid interface number: 62 but max is 0 [ 979.003074][ T5887] usb 2-1: config 119 has no interface number 0 [ 979.003117][ T5887] usb 2-1: config 119 interface 62 has no altsetting 0 [ 979.005189][ T5887] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=8f.55 [ 979.005205][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.005215][ T5887] usb 2-1: Product: syz [ 979.005223][ T5887] usb 2-1: Manufacturer: syz [ 979.005230][ T5887] usb 2-1: SerialNumber: syz [ 979.099496][T11203] usb 6-1: 0:2 : does not exist [ 979.099626][T11203] usb 6-1: unit 5 not found! [ 979.198807][T11203] usb 6-1: USB disconnect, device number 64 [ 979.489317][T13063] bridge1: left promiscuous mode [ 979.491599][T13063] macsec1: left allmulticast mode [ 979.532490][T11203] usb 5-1: USB disconnect, device number 97 [ 979.551862][ T5887] usbserial_generic 2-1:119.62: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 979.551886][ T5887] usbserial_generic 2-1:119.62: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 979.551930][ T5887] usbserial_generic 2-1:119.62: device has no bulk endpoints [ 979.552929][ T5887] safe_serial 2-1:119.62: safe_serial converter detected [ 979.553086][ T5887] safe_serial 2-1:119.62: probe with driver safe_serial failed with error -22 [ 979.556586][T12637] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.557757][T12637] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.557797][T12637] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.557832][T12637] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.586838][ T5887] usb 2-1: USB disconnect, device number 97 [ 979.914370][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'. [ 979.914944][T13129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 983.963386][T13160] fuse: Bad value for 'rootmode' [ 984.069027][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 988.173372][T13188] binder_alloc: binder_alloc_mmap_handler: 13185 200000ffd000-200001000000 already mapped failed -16 [ 991.060418][ T58] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 991.350851][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 991.359309][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 991.364161][ T58] usb 6-1: config 4 interface 0 has no altsetting 0 [ 991.769888][ T58] usb 6-1: string descriptor 0 read error: -22 [ 991.790897][ T58] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 991.791713][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.588155][ T58] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 992.599480][ T58] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 992.599751][ T58] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 992.599780][ T58] usb 6-1: media controller created [ 992.872604][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.971561][T13211] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 994.877846][ T58] zl10353_read_register: readreg error (reg=127, ret==0) [ 994.950925][ T58] usb 6-1: USB disconnect, device number 65 [ 995.347817][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2097'. [ 998.109656][T13246] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2104'. [ 998.124622][T13247] delete_channel: no stack [ 998.292191][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.292261][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.944879][T13262] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2107'. [ 999.871547][T13266] netlink: 'syz.2.2109': attribute type 21 has an invalid length. [ 999.871624][T13266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2109'. [ 1000.132194][T13269] futex_wake_op: syz.2.2110 tries to shift op by -1; fix this program [ 1000.350744][T12139] Bluetooth: hci5: command 0x0406 tx timeout [ 1000.991184][ T58] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1002.070355][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 1002.072239][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.072257][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.072268][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1002.072290][ T58] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1002.072302][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.076912][ T58] usb 3-1: config 0 descriptor?? [ 1003.372959][T13289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1003.397300][ T58] shield 0003:0955:7214.0046: unknown main item tag 0x0 [ 1003.397324][ T58] shield 0003:0955:7214.0046: unknown main item tag 0x0 [ 1003.397339][ T58] shield 0003:0955:7214.0046: unknown main item tag 0x0 [ 1003.397354][ T58] shield 0003:0955:7214.0046: unknown main item tag 0x0 [ 1003.397369][ T58] shield 0003:0955:7214.0046: unknown main item tag 0x0 [ 1003.400033][ T58] input: HID 0955:7214 Haptics as /devices/virtual/input/input37 [ 1003.651004][ T58] shield 0003:0955:7214.0046: Registered Thunderstrike controller [ 1003.651391][ T58] shield 0003:0955:7214.0046: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1004.272779][ T6905] shield 0003:0955:7214.0046: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1004.291768][ T6905] shield 0003:0955:7214.0046: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1004.292013][ T6905] shield 0003:0955:7214.0046: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1004.292318][ T6905] shield 0003:0955:7214.0046: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1004.293846][ T58] usb 3-1: USB disconnect, device number 83 [ 1004.609106][T13301] fuse: Bad value for 'fd' [ 1005.048478][ T37] audit: type=1326 audit(3915204843.325:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13308 comm="syz.1.2125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6230b6f749 code=0x0 [ 1005.060574][ T58] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1005.220548][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 1005.262760][ T58] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1005.262789][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.262808][ T58] usb 3-1: Product: syz [ 1005.262913][ T58] usb 3-1: Manufacturer: syz [ 1005.262928][ T58] usb 3-1: SerialNumber: syz [ 1005.309445][ T58] usb 3-1: config 0 descriptor?? [ 1005.527868][ T58] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1007.038850][T13322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2128'. [ 1008.350371][ T58] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1009.758149][ T935] usb 3-1: USB disconnect, device number 84 [ 1010.500041][T13345] futex_wake_op: syz.1.2133 tries to shift op by -1; fix this program [ 1011.455720][ T37] audit: type=1326 audit(3915204849.735:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13353 comm="syz.2.2138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f584c3af749 code=0x0 [ 1011.771044][T11203] IPVS: starting estimator thread 0... [ 1011.860481][T13362] IPVS: using max 15 ests per chain, 36000 per kthread [ 1012.107592][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 1013.442222][ T935] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 1013.478986][T13377] netlink: 'syz.2.2145': attribute type 2 has an invalid length. [ 1013.479332][T13377] netlink: 'syz.2.2145': attribute type 2 has an invalid length. [ 1013.499418][ T935] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1017.722169][T11203] kernel write not supported for file /cpu/0/msr (pid: 11203 comm: kworker/0:1) [ 1018.787941][ T37] audit: type=1326 audit(3915204857.065:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13412 comm="syz.2.2155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f584c3af749 code=0x0 [ 1019.356850][T13422] trusted_key: encrypted_key: insufficient parameters specified [ 1021.240803][T13424] 9p: Bad value for 'rfdno' [ 1022.492390][T13440] overlayfs: missing 'lowerdir' [ 1025.380400][ T37] audit: type=1326 audit(3915204863.655:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13458 comm="syz.2.2170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f584c3af749 code=0x0 [ 1026.353838][T13471] netlink: 'syz.1.2172': attribute type 21 has an invalid length. [ 1026.353912][T13471] IPv6: NLM_F_CREATE should be specified when creating new route [ 1026.429259][T13472] sctp: [Deprecated]: syz.1.2172 (pid 13472) Use of int in max_burst socket option deprecated. [ 1026.429259][T13472] Use struct sctp_assoc_value instead [ 1028.707719][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2174'. [ 1029.688898][ T58] kernel write not supported for file /cpu/0/msr (pid: 58 comm: kworker/1:1) [ 1031.595441][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2181'. [ 1032.288481][ T37] audit: type=1326 audit(6062688518.564:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.4.2185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb7d61f749 code=0x0 [ 1034.407750][T13528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2190'. [ 1034.563753][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2193'. [ 1037.396998][T13531] 9p: Bad value for 'rfdno' [ 1038.720309][ T58] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1038.813061][ T37] audit: type=1326 audit(6062688525.094:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13557 comm="syz.5.2201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f102dd2f749 code=0x0 [ 1038.932862][ T58] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1038.932889][ T58] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1038.932913][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1038.932938][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1038.932963][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1038.936682][ T58] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1038.936709][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.936728][ T58] usb 3-1: Product: syz [ 1038.936742][ T58] usb 3-1: Manufacturer: syz [ 1038.936756][ T58] usb 3-1: SerialNumber: syz [ 1039.158992][ T58] usb 3-1: config 0 descriptor?? [ 1040.003148][T13568] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2202'. [ 1040.161341][T13553] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1040.226654][ T58] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 1040.389837][ C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1041.691021][ T5887] usb 3-1: USB disconnect, device number 85 [ 1041.739983][T13584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2206'. [ 1043.366862][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2210'. [ 1043.818897][ T37] audit: type=1326 audit(6062688530.094:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13607 comm="syz.3.2214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ea74af749 code=0x0 [ 1047.426290][ T5887] ------------[ cut here ]------------ [ 1047.426306][ T5887] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1047.426329][ T5887] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#0: kworker/0:6/5887 [ 1047.426369][ T5887] Modules linked in: [ 1047.426392][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1047.426419][ T5887] Tainted: [L]=SOFTLOCKUP [ 1047.426427][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1047.426440][ T5887] Workqueue: events drm_fb_helper_damage_work [ 1047.426462][ T5887] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 1047.426484][ T5887] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1047.426502][ T5887] RSP: 0018:ffffc900054bf860 EFLAGS: 00010246 [ 1047.426518][ T5887] RAX: 1ffff110047a2800 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 1047.426534][ T5887] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 1047.426548][ T5887] RBP: ffffc900054bf948 R08: 0000000000000000 R09: 0000000000000000 [ 1047.426561][ T5887] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 1047.426576][ T5887] R13: ffff888023d14000 R14: 1ffff92000a97f10 R15: ffffffff8b569b80 [ 1047.426591][ T5887] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1047.426607][ T5887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.426621][ T5887] CR2: 0000001b2f40cff4 CR3: 0000000038b12000 CR4: 00000000003526f0 [ 1047.426638][ T5887] Call Trace: [ 1047.426646][ T5887] [ 1047.426660][ T5887] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1047.426680][ T5887] ? rt_spin_unlock+0x150/0x200 [ 1047.426711][ T5887] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1047.426738][ T5887] ? rt_spin_unlock+0x161/0x200 [ 1047.426765][ T5887] ? drm_vblank_get+0x147/0x260 [ 1047.426789][ T5887] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1047.426820][ T5887] drm_fb_helper_damage_work+0xc9/0x650 [ 1047.426846][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 1047.426873][ T5887] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1047.426900][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 1047.426921][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 1047.426944][ T5887] process_scheduled_works+0xad1/0x1770 [ 1047.426998][ T5887] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.427018][ T5887] ? do_raw_spin_lock+0x121/0x290 [ 1047.427056][ T5887] worker_thread+0x8a0/0xda0 [ 1047.427106][ T5887] kthread+0x711/0x8a0 [ 1047.427134][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 1047.427155][ T5887] ? __pfx_kthread+0x10/0x10 [ 1047.427177][ T5887] ? rt_spin_unlock+0x150/0x200 [ 1047.427206][ T5887] ? rt_spin_unlock+0x161/0x200 [ 1047.427228][ T5887] ? __pfx_kthread+0x10/0x10 [ 1047.427254][ T5887] ret_from_fork+0x510/0xa50 [ 1047.427280][ T5887] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.427299][ T5887] ? __switch_to+0xc9e/0x1480 [ 1047.427331][ T5887] ? __pfx_kthread+0x10/0x10 [ 1047.427358][ T5887] ret_from_fork_asm+0x1a/0x30 [ 1047.427404][ T5887] [ 1047.427425][ T5887] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1047.427442][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1047.427468][ T5887] Tainted: [L]=SOFTLOCKUP [ 1047.427475][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1047.427487][ T5887] Workqueue: events drm_fb_helper_damage_work [ 1047.427507][ T5887] Call Trace: [ 1047.427515][ T5887] [ 1047.427523][ T5887] vpanic+0x1e0/0x670 [ 1047.427552][ T5887] panic+0xb9/0xc0 [ 1047.427575][ T5887] ? __pfx_panic+0x10/0x10 [ 1047.427611][ T5887] ? ret_from_fork_asm+0x1a/0x30 [ 1047.427644][ T5887] __warn+0x317/0x4b0 [ 1047.427668][ T5887] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1047.427693][ T5887] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1047.427720][ T5887] __report_bug+0x288/0x500 [ 1047.427749][ T5887] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1047.427778][ T5887] ? __pfx___report_bug+0x10/0x10 [ 1047.427830][ T5887] report_bug_entry+0x19a/0x290 [ 1047.427859][ T5887] ? drm_wait_one_vblank+0x587/0x5c0 [ 1047.427878][ T5887] ? drm_wait_one_vblank+0x58c/0x5c0 [ 1047.427899][ T5887] handle_bug+0xca/0x200 [ 1047.427923][ T5887] exc_invalid_op+0x1a/0x50 [ 1047.427945][ T5887] asm_exc_invalid_op+0x1a/0x20 [ 1047.427964][ T5887] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 1047.427986][ T5887] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1047.428003][ T5887] RSP: 0018:ffffc900054bf860 EFLAGS: 00010246 [ 1047.428020][ T5887] RAX: 1ffff110047a2800 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 1047.428035][ T5887] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 1047.428051][ T5887] RBP: ffffc900054bf948 R08: 0000000000000000 R09: 0000000000000000 [ 1047.428064][ T5887] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 1047.428080][ T5887] R13: ffff888023d14000 R14: 1ffff92000a97f10 R15: ffffffff8b569b80 [ 1047.428119][ T5887] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1047.428139][ T5887] ? rt_spin_unlock+0x150/0x200 [ 1047.428162][ T5887] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1047.428189][ T5887] ? rt_spin_unlock+0x161/0x200 [ 1047.428217][ T5887] ? drm_vblank_get+0x147/0x260 [ 1047.428241][ T5887] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1047.428273][ T5887] drm_fb_helper_damage_work+0xc9/0x650 [ 1047.428298][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 1047.428325][ T5887] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1047.428353][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 1047.428373][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 1047.428398][ T5887] process_scheduled_works+0xad1/0x1770 [ 1047.428452][ T5887] ? __pfx_process_scheduled_works+0x10/0x10 [ 1047.428472][ T5887] ? do_raw_spin_lock+0x121/0x290 [ 1047.428513][ T5887] worker_thread+0x8a0/0xda0 [ 1047.428566][ T5887] kthread+0x711/0x8a0 [ 1047.428595][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 1047.428616][ T5887] ? __pfx_kthread+0x10/0x10 [ 1047.428635][ T5887] ? rt_spin_unlock+0x150/0x200 [ 1047.428661][ T5887] ? rt_spin_unlock+0x161/0x200 [ 1047.428681][ T5887] ? __pfx_kthread+0x10/0x10 [ 1047.428712][ T5887] ret_from_fork+0x510/0xa50 [ 1047.428732][ T5887] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.428749][ T5887] ? __switch_to+0xc9e/0x1480 [ 1047.428776][ T5887] ? __pfx_kthread+0x10/0x10 [ 1047.428801][ T5887] ret_from_fork_asm+0x1a/0x30 [ 1047.428844][ T5887] [ 1047.429213][ T5887] Kernel Offset: disabled