last executing test programs: 5m48.265864618s ago: executing program 3 (id=219): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000010380)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262fbb9ad8ffd5e1cace81ccd40dd601edef3d9393f975307ff0ff0e97031e9f05e9f16e9c95115568624f7ab5000000000000000000000000000000000000000000007a630a5092", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x3000000000000}, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) 5m46.514022003s ago: executing program 3 (id=231): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xe, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)=0x0) ptrace$setsig(0x4203, r4, 0x7fff, &(0x7f0000000300)={0x40}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000040)={r9, 0x0, 0xffffffffffffffff}) r11 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r10}) close_range(r5, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x6, &(0x7f00000000c0), 0x1, 0x40, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES16=0x0], 0x3}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x277fffffffc, 0x0, 0x1, 0xffffffffffffffff, 0x1}) syz_usb_connect(0x0, 0x57, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff00052406000105240000000d240f010000000000f2ff000006241a00000004"], 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r12, 0x0, 0x4ffe6, 0x0) 5m43.333950333s ago: executing program 3 (id=243): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000060000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 5m43.222471206s ago: executing program 3 (id=245): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffe44b2430, 0x6, 0xffff, 0x8, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b542095091a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8dd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x2, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc01, 0x8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c811}, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x3, 0x0, 0x41ff7484, 0x0}, {0x1, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x6ba, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@alg={0xe0, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {{'cbc-serpent-sse2\x00'}, '\x00', '\x00', 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x40040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 5m42.428817448s ago: executing program 3 (id=249): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0xa, 0xd, 0x4, 0x1, 0x1004, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x0, 0x80, 0x9, 0x0}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r4}, 0x38) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r8 = eventfd(0x78) io_submit(r7, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r8, &(0x7f0000000180)="0055fd600000e7ff", 0x8, 0x36}]) write$binfmt_elf32(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000030006000800000019000000380000005e020000080400000400200003"], 0x98) close(r6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x30, r9, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x30}}, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r4}, 0x38) 5m41.92241417s ago: executing program 3 (id=252): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b24d0202c0a0800b3c70102030109021200010000a00081a439299c37727ac9aa02c57685fcb012707e2f44153dbaf35ed5a30e2f0298131630517c6424856892a1e5dd5e5138bb0b147b9a0313"], 0x0) 5m41.440334847s ago: executing program 32 (id=252): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b24d0202c0a0800b3c70102030109021200010000a00081a439299c37727ac9aa02c57685fcb012707e2f44153dbaf35ed5a30e2f0298131630517c6424856892a1e5dd5e5138bb0b147b9a0313"], 0x0) 7.164663568s ago: executing program 0 (id=1905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) syz_usb_connect(0x2, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0xbd, 0xcf, 0x5d, 0x40, 0x711, 0x900, 0xb882, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x80, 0xc0, 0x5, "", [{{0x9, 0x4, 0xf3, 0x4, 0x0, 0xc1, 0x7e, 0xaf, 0x7}}]}}]}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf, 0x100000) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090224000100001000090400"], 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) sendfile(r6, r6, 0x0, 0x200000) 6.226001238s ago: executing program 5 (id=1909): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x22, 0x0, 0xfffff008}, {0x6}]}, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1004be7, 0x4c3, 0x43, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100200600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800cef010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2], 0xb4}}, 0x0) 5.191243486s ago: executing program 5 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x48, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 5.11886218s ago: executing program 5 (id=1914): unshare(0x8000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c000000181618000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2a, &(0x7f000000cf3d)=""/195}, 0x23) 4.963278555s ago: executing program 5 (id=1916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r6 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) r7 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x4000) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4, 0x41}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x0, 0xd0, 0x6, 0x2}, 0x9c) 3.900763386s ago: executing program 0 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES8=r0], 0x24}}, 0x4000004) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES16, @ANYRESOCT=r0], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x9a9, 0x7ff, 0x3, 0x35b, 0xa, 0x7, 0xff, 0x0, 0x81, 0x9, 0x401, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) ioctl$EVIOCGMASK(r3, 0x80015b12, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'pimreg1\x00', {'veth1_to_bond\x00'}}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00158000000094fc3e0f0af28275ae6e188ac4965af17ec35412e1fcc5587fcd9562ba631f3040bcf1fff41f7ae76ed0f05a4c092f31f23c2b134d8fe71f1dce7fff0e1657e9db93d0faf95152ab81f0896d91c2a59273df1f5a55fa6f3d284ee05a2239964a4e7edee48c572c56969b5bddf4e8b79ce5147d4d8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2a9000070900be001f6b00c8be82fd88a1f60b00000400"], 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x234}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/95) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="000b00001100"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000004ece67de02fafb24079f959033239243017e52546da7be659987b3db25f94f4eab78079dd6c0fb09b4821d4548f322332ca4a1055e2fc53cbba"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x5e04, 0x4, 0x90, [0x0, 0x0, 0x200000002500], 0x2, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff00"/144]}, 0x108) 3.282111508s ago: executing program 5 (id=1922): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000800)=[{0x8000, 0x0, 0x0, 0x0}, {0x6, 0x4019, 0x0, 0x0}], 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000004e000100000000000000000000034323735ef63304da9d0e"], 0x18}}, 0x0) 2.375768129s ago: executing program 2 (id=1927): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x3, 0x9, 0x4dd, 0x0, 0x2}, 0x203, [0xa, 0x7, 0x1, 0x80, 0x0, 0xfffffff7, 0x9c, 0x10, 0xbeb, 0x1, 0x5, 0x6, 0x4, 0x9, 0x5, 0xfc52, 0x4, 0xc26d, 0x6, 0x4, 0x0, 0x6, 0x800, 0x8, 0x80c, 0x0, 0x4, 0x3ff, 0x3, 0x7, 0x1, 0x2, 0x9198, 0x6, 0x6, 0xadc, 0x9, 0xc6, 0x43d, 0xc, 0x3, 0x6, 0x440, 0x7, 0x4, 0x7, 0x8bbc, 0x3, 0x5, 0xffff0000, 0x1, 0xf858, 0x0, 0x7fffffff, 0x9, 0x0, 0x8b, 0x3, 0x6, 0x8, 0x41, 0x6c1a3ddc, 0x7, 0xbd0, 0x3, 0x6, 0x1, 0x25, 0x20000000, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0xffffffff, 0x1, 0x6, 0x8, 0x1, 0x4, 0x1, 0x80000001, 0x4, 0xa4, 0x7, 0x10, 0xd, 0x5, 0x80000001, 0x9, 0x6, 0x9, 0x8, 0x401, 0x1, 0x7, 0xe, 0xc2, 0x0, 0x100, 0x3ff, 0x4c, 0xffff7fff, 0xca, 0x2, 0x5, 0x0, 0xe715, 0x4, 0x6, 0x77e7, 0x10000, 0xd, 0x6, 0x3, 0x7, 0x8, 0x7fffffff, 0x2, 0xfffffffe, 0xfffffff9, 0x2, 0x3ff, 0x9659, 0x7f, 0xfffffffa, 0x3, 0x7f, 0x94b, 0x7fffffff, 0x7, 0x5, 0x8, 0x5, 0x7ff, 0x5, 0x2a, 0x474, 0x7ff, 0x5, 0x10000, 0x1, 0x0, 0x9, 0x7, 0x3, 0x6, 0xe000, 0x0, 0x3ff, 0x400, 0xfffffff8, 0x4, 0x5, 0x1, 0xdda, 0x401, 0x0, 0x3c, 0xc, 0x400, 0x3c, 0xfffffffd, 0x986b, 0xfffff4e6, 0xffffffff, 0x8, 0xfffffffb, 0x8, 0x5, 0xb9, 0x4c3, 0x0, 0x4, 0xfffffff7, 0x9, 0xd, 0x22, 0x4, 0x800, 0x2, 0xfffffff0, 0x4800000, 0xfffffff7, 0x9, 0x0, 0x659b, 0x9, 0x9, 0x3, 0x800, 0xffff, 0x7fffffff, 0x9, 0x77, 0x9, 0x3, 0x9, 0x1, 0x2, 0x421b3dba, 0x12b, 0x0, 0x3, 0x6, 0x6, 0xfffffe01, 0x9, 0x1, 0x4, 0x4, 0x6, 0x8, 0xf9, 0x0, 0xfffffff3, 0x8da, 0x92, 0x85, 0x7, 0x1, 0x1, 0xec3, 0xffff, 0x4, 0x5, 0x4, 0x1c3, 0xff, 0x7, 0x6, 0x9, 0xfdc, 0xfff, 0x1, 0x5, 0x9ac2, 0x5, 0xe, 0x48eb, 0xa, 0xa8f, 0x1, 0x5, 0x7, 0x2, 0xffffffff, 0x74, 0x9, 0x10000, 0x0, 0x1, 0xfffffffb, 0x5, 0xcfbb, 0x200, 0x49f, 0x75b7c621, 0xa073, 0x7, 0x1, 0x7, 0xfff, 0x1b, 0x4, 0x0, 0xb50d, 0x3, 0x9, 0x100, 0x6, 0x4, 0x3, 0x4, 0x1, 0xe0, 0xf3, 0x0, 0x6, 0x8, 0x3, 0x7, 0x9, 0x3, 0xc8, 0x3, 0x6, 0xffff, 0xfffffffc, 0x8, 0x800, 0x2, 0x1, 0x4, 0x1, 0x2, 0x6, 0x1, 0x1, 0x7, 0x8, 0x5, 0x6, 0x5c7, 0x3, 0x4, 0x1ff, 0x8, 0x1, 0x2, 0x0, 0x2, 0x101, 0x8, 0x90, 0x7fff, 0x81, 0x4, 0x3, 0x7fffffff, 0x2, 0x10001, 0x1, 0x1, 0x5, 0x401, 0x17af5719, 0x1000, 0x8000, 0x0, 0x6, 0x1, 0x401, 0x2, 0x10000, 0x8, 0x4, 0x80000001, 0x4, 0x1, 0x0, 0x9, 0x5, 0x100000, 0x800, 0x4, 0xe49, 0x101, 0x8, 0x4, 0x512, 0x0, 0xffff, 0xf8, 0x10, 0x200, 0xfffffff8, 0x2, 0x6, 0x9, 0xfffffffa, 0x25a, 0x42, 0x6, 0x9, 0x3, 0xb, 0x1, 0x3, 0x1ff, 0x3, 0x10000, 0x9, 0x7fffffff, 0x2, 0xc, 0x4, 0x3, 0x4, 0x9, 0xa40, 0x469, 0x2, 0x6, 0x9, 0x800, 0x3, 0x800, 0x2, 0x2ba1, 0x7fff, 0x8, 0x0, 0x8, 0x681, 0x4, 0xd33, 0x2, 0x7, 0x725f458a, 0xc77, 0x7, 0x7, 0x6, 0x3, 0x7, 0x4, 0x1a, 0x6, 0x1000, 0x1, 0x0, 0x7, 0xfffffffd, 0x9, 0xbc, 0x9, 0x8001, 0x10, 0x6, 0x1013165b, 0x0, 0x2cb5, 0x0, 0x3ff, 0x25ce, 0x4, 0x3, 0xfffffff9, 0x2, 0x1ff, 0x3000, 0x3, 0x1, 0x7f, 0x2, 0x7, 0x9, 0x6, 0x8, 0x1, 0x5, 0xd, 0xfffff19a, 0x0, 0x7fffffff, 0x1, 0xffffffbe, 0x1, 0x7, 0xb8000000, 0x10, 0x8, 0x6, 0x864, 0x7, 0x9, 0x3, 0x7f, 0x101, 0x4, 0x81, 0x1, 0xd2, 0x3ff, 0x3ff, 0x6, 0x1ff, 0x1, 0x200, 0x80000001, 0x6, 0x7fff, 0x1, 0x6, 0x200, 0x5, 0x1, 0x7, 0x0, 0x2a7, 0x0, 0x5e30, 0x800, 0x0, 0x1, 0xb4dd, 0x0, 0xfff, 0x2416, 0xb760, 0x5, 0xb106, 0x3, 0x19, 0x0, 0x7fffffff, 0x1, 0x2, 0x7, 0xbe46, 0x2, 0x0, 0x5, 0x1, 0xfffffffd, 0x1, 0x80000001, 0x5, 0x7, 0x0, 0x5, 0x8, 0x2, 0x280, 0x0, 0x0, 0xd, 0xa, 0x7, 0x10001, 0x10001, 0xfa4, 0x0, 0x9, 0x6, 0x9, 0x2, 0x8, 0x6, 0x80000000, 0x6, 0x9, 0x80000000, 0x0, 0x4, 0x5, 0x3, 0x550, 0x80, 0x3ff, 0xd42, 0x1, 0x80000000, 0x7ff, 0xe439, 0x4, 0x1f, 0x6, 0xfffffffb, 0xd92, 0xbed, 0x10, 0x3, 0x3, 0x3, 0x1, 0x101, 0x5, 0x9, 0x2, 0x5, 0x4, 0x324, 0x8, 0x8, 0x7b126469, 0x10001, 0xff, 0x0, 0x71f, 0x25, 0x7, 0x9, 0x80000000, 0x8, 0x6f, 0x3, 0x40, 0x61d75b5e, 0x0, 0x5, 0x1, 0x4, 0x3, 0x800, 0xfffffff9, 0x7f, 0x9, 0x3, 0x6, 0x1ff, 0x7, 0xc, 0x78, 0x5, 0x8, 0x9, 0x1, 0x7, 0xb, 0xfffffff7, 0x10, 0x3, 0xfffffff1, 0x3, 0x1, 0x2, 0x5, 0x300000, 0x8, 0x7, 0x9, 0x2, 0x8, 0x0, 0x5, 0x401, 0x6, 0x1, 0x0, 0x2af, 0x978a, 0x0, 0x1, 0x2, 0xed4, 0x3, 0x2, 0xffffffff, 0x4a, 0x4, 0x80, 0x4, 0x6, 0x4, 0xfffffffc, 0x6, 0x7e, 0xe83, 0x1b, 0x1, 0x0, 0x1, 0x5d, 0x4, 0x9, 0xfff, 0x9, 0x9, 0x4, 0x2, 0xa, 0x1ff, 0x8, 0x2, 0x6, 0x80000001, 0x10001, 0x670, 0xad0f, 0x4, 0xfffffeff, 0x6, 0x81, 0x3, 0x6, 0x2, 0x0, 0x7, 0x5, 0xa, 0x8154, 0x3, 0x965, 0x9, 0xfffffff7, 0x6, 0x34c, 0x2, 0x3, 0x7, 0xed, 0x0, 0xecf, 0x101, 0x99b3, 0x9, 0x5, 0x6, 0xfffffff8, 0x7, 0x3, 0x7, 0xa1e, 0x2, 0x2, 0x4, 0x5, 0x5, 0x1, 0xe5d, 0x1, 0x9, 0xffff, 0x5, 0x4, 0x101, 0x6, 0x3, 0x0, 0x3, 0x8, 0x9, 0xe9, 0xba, 0x6, 0x9, 0x3ff, 0x3, 0xf, 0x2, 0x5, 0x8, 0x10000, 0x7b, 0x8000, 0x3, 0x4418, 0x6, 0x1245caf4, 0x7a25, 0xffffffff, 0x400, 0x2, 0xd55, 0x2, 0x7e0b0878, 0xe01, 0x8c25, 0x8, 0x7ff, 0x3, 0x3, 0x4, 0x0, 0xfffffff7, 0x2, 0x3, 0x3, 0x1c000000, 0x7, 0xfffffff5, 0x0, 0x7, 0x0, 0xa00, 0x87, 0xfffffffc, 0x100, 0xb2f, 0x6, 0xfffffffc, 0x2, 0x2, 0x10, 0x4, 0x1, 0x974, 0xffff0001, 0x6, 0x9, 0x8, 0x10000, 0x10001, 0x7, 0x6, 0x2, 0x6, 0x8, 0xe, 0xaa, 0xe, 0x4, 0x6, 0x4, 0x400, 0x6, 0x7, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x3, 0x73c, 0xd544973, 0x5, 0x6, 0xfffffffa, 0x100, 0x3, 0x7, 0x80000001, 0x0, 0x10, 0x9, 0x1, 0x1, 0x80, 0x4, 0x41, 0x0, 0x7, 0x1, 0x8, 0x8, 0x9, 0x0, 0xfffffffc, 0x101, 0x0, 0x4, 0xdf, 0x9, 0xe1b, 0x1, 0x3, 0x30000, 0xfffffffd, 0x8, 0x200, 0x1, 0x8, 0xb000, 0x6, 0x2, 0x10000, 0x43, 0x3ff, 0x0, 0x3ff, 0x400, 0x7fffffff, 0x0, 0xfffffff8, 0x3, 0x7, 0x0, 0x7ff, 0x10000, 0xfffffffc, 0xfffffff7, 0x0, 0x2, 0x8, 0xe408, 0x6, 0x1, 0x4, 0x4, 0x0, 0x5, 0x8, 0x9, 0x8, 0x80000001, 0x5b6, 0x1, 0x3, 0x9, 0xc, 0x10001, 0x8, 0x3, 0x3, 0x3, 0x801, 0x8, 0x2, 0x6, 0x3, 0x4e, 0x6, 0x3, 0x0, 0x8, 0x581, 0x9e02, 0xfffffffc, 0xc, 0x2, 0x6, 0x8, 0x2, 0x5, 0x200, 0x4, 0x2, 0x3, 0x8b80, 0xffffffff, 0x6, 0x43, 0x8, 0x1, 0x3, 0xffffffb2, 0x7, 0x7, 0x8, 0x0, 0x6793, 0x0, 0x80000000, 0x9, 0xb3ec, 0x81, 0x4144d458, 0x6eb76761, 0x7, 0x9, 0x101, 0x0, 0x3, 0x7fffffff, 0x0, 0x7fffffff, 0x3, 0x1, 0xd2, 0x6, 0x100, 0x9, 0x2ec, 0x9, 0x5, 0x85d1, 0x7, 0x2, 0xb3c, 0x7, 0x3, 0x7, 0x4, 0x7, 0x800, 0x7, 0x101, 0xd3ad, 0x7, 0x2, 0x8000, 0x3, 0x8, 0x1, 0x0, 0x8, 0xfffffffe, 0x8, 0x400, 0x1, 0x1, 0x5, 0x2, 0x5, 0x7fff, 0x4c29, 0xfffff45b, 0xfff, 0x8, 0x0, 0x1, 0x9, 0x3, 0x8, 0x9, 0x0, 0x2, 0x0, 0x1, 0x5, 0x4a4, 0x9, 0x6, 0xd5, 0x9, 0x5b3, 0x7502, 0xfffffff1, 0xd, 0x5, 0x1ff, 0x11, 0x1, 0x5, 0x8, 0x8, 0x0, 0x5, 0x8f36, 0x3, 0x2, 0x1, 0x18000, 0x7, 0x3, 0x0, 0x8, 0x77b, 0x556, 0x292, 0x2, 0x9, 0x422, 0x5, 0x54, 0x2, 0xc7, 0xe, 0x8eea, 0x7, 0x1, 0x8]}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001440)={0xc0, r9, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffe01}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000001}, 0x40880) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) 1.650764561s ago: executing program 1 (id=1932): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="04010000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000fd0100000000040000002001000000000000000000000000000000000000000000000000000000000000020000000000000000000100000000000000001000000000ffffffffffffffff000000000000000000000000080000000000000000000000000020000000000007000000000000000000000000000000000004c06dbc0c0309ba240000000000000000000a000200340000000000000014000e"], 0x104}}, 0x0) 1.624121478s ago: executing program 0 (id=1933): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400f5ff10000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x200301, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x8, 0xfffffffe, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$key(r2, 0x0, 0x40408c0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) 1.566985532s ago: executing program 1 (id=1934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000300000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 1.430434618s ago: executing program 1 (id=1935): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e61280b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.368455712s ago: executing program 2 (id=1936): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x7, 0x0, 0x7fc0000000000003, 0x1, 0x1000, 0x2000000000000007, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200000000000000000000e1fd0001"], 0xfdef) 1.264781503s ago: executing program 1 (id=1937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002f40)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x26}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x6b}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (fail_nth: 4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 757.033207ms ago: executing program 5 (id=1939): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20001) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa237}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x20001000000, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 756.31418ms ago: executing program 4 (id=1940): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x540004a9) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) (async) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) (rerun: 32) 692.745801ms ago: executing program 1 (id=1941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x7300000000000000, 0x0, 0x40044}, 0x4804) 558.146633ms ago: executing program 4 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb331"], 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b"], 0x23c}}, 0x0) 556.689362ms ago: executing program 4 (id=1943): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) chroot(&(0x7f0000000300)='.\x00') mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x10, 0x8) unshare(0x22020600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x5e04, 0x4, 0x90, [0x0, 0x0, 0x200000002500], 0x2, 0x0, 0x0}, 0x78) 480.990104ms ago: executing program 4 (id=1944): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000ef0c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) 466.37357ms ago: executing program 0 (id=1945): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 329.52383ms ago: executing program 1 (id=1946): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x3, 0x9, 0x4dd, 0x0, 0x2}, 0x203, [0xa, 0x7, 0x1, 0x80, 0x0, 0xfffffff7, 0x9c, 0x10, 0xbeb, 0x1, 0x5, 0x6, 0x4, 0x9, 0x5, 0xfc52, 0x4, 0xc26d, 0x6, 0x4, 0x0, 0x6, 0x800, 0x8, 0x80c, 0x0, 0x4, 0x3ff, 0x3, 0x7, 0x1, 0x2, 0x9198, 0x6, 0x6, 0xadc, 0x9, 0xc6, 0x43d, 0xc, 0x3, 0x6, 0x440, 0x7, 0x4, 0x7, 0x8bbc, 0x3, 0x5, 0xffff0000, 0x1, 0xf858, 0x0, 0x7fffffff, 0x9, 0x0, 0x8b, 0x3, 0x6, 0x8, 0x41, 0x6c1a3ddc, 0x7, 0xbd0, 0x3, 0x6, 0x1, 0x25, 0x20000000, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0xffffffff, 0x1, 0x6, 0x8, 0x1, 0x4, 0x1, 0x80000001, 0x4, 0xa4, 0x7, 0x10, 0xd, 0x5, 0x80000001, 0x9, 0x6, 0x9, 0x8, 0x401, 0x1, 0x7, 0xe, 0xc2, 0x0, 0x100, 0x3ff, 0x4c, 0xffff7fff, 0xca, 0x2, 0x5, 0x0, 0xe715, 0x4, 0x6, 0x77e7, 0x10000, 0xd, 0x6, 0x3, 0x7, 0x8, 0x7fffffff, 0x2, 0xfffffffe, 0xfffffff9, 0x2, 0x3ff, 0x9659, 0x7f, 0xfffffffa, 0x3, 0x7f, 0x94b, 0x7fffffff, 0x7, 0x5, 0x8, 0x5, 0x7ff, 0x5, 0x2a, 0x474, 0x7ff, 0x5, 0x10000, 0x1, 0x0, 0x9, 0x7, 0x3, 0x6, 0xe000, 0x0, 0x3ff, 0x400, 0xfffffff8, 0x4, 0x5, 0x1, 0xdda, 0x401, 0x0, 0x3c, 0xc, 0x400, 0x3c, 0xfffffffd, 0x986b, 0xfffff4e6, 0xffffffff, 0x8, 0xfffffffb, 0x8, 0x5, 0xb9, 0x4c3, 0x0, 0x4, 0xfffffff7, 0x9, 0xd, 0x22, 0x4, 0x800, 0x2, 0xfffffff0, 0x4800000, 0xfffffff7, 0x9, 0x0, 0x659b, 0x9, 0x9, 0x3, 0x800, 0xffff, 0x7fffffff, 0x9, 0x77, 0x9, 0x3, 0x9, 0x1, 0x2, 0x421b3dba, 0x12b, 0x0, 0x3, 0x6, 0x6, 0xfffffe01, 0x9, 0x1, 0x4, 0x4, 0x6, 0x8, 0xf9, 0x0, 0xfffffff3, 0x8da, 0x92, 0x85, 0x7, 0x1, 0x1, 0xec3, 0xffff, 0x4, 0x5, 0x4, 0x1c3, 0xff, 0x7, 0x6, 0x9, 0xfdc, 0xfff, 0x1, 0x5, 0x9ac2, 0x5, 0xe, 0x48eb, 0xa, 0xa8f, 0x1, 0x5, 0x7, 0x2, 0xffffffff, 0x74, 0x9, 0x10000, 0x0, 0x1, 0xfffffffb, 0x5, 0xcfbb, 0x200, 0x49f, 0x75b7c621, 0xa073, 0x7, 0x1, 0x7, 0xfff, 0x1b, 0x4, 0x0, 0xb50d, 0x3, 0x9, 0x100, 0x6, 0x4, 0x3, 0x4, 0x1, 0xe0, 0xf3, 0x0, 0x6, 0x8, 0x3, 0x7, 0x9, 0x3, 0xc8, 0x3, 0x6, 0xffff, 0xfffffffc, 0x8, 0x800, 0x2, 0x1, 0x4, 0x1, 0x2, 0x6, 0x1, 0x1, 0x7, 0x8, 0x5, 0x6, 0x5c7, 0x3, 0x4, 0x1ff, 0x8, 0x1, 0x2, 0x0, 0x2, 0x101, 0x8, 0x90, 0x7fff, 0x81, 0x4, 0x3, 0x7fffffff, 0x2, 0x10001, 0x1, 0x1, 0x5, 0x401, 0x17af5719, 0x1000, 0x8000, 0x0, 0x6, 0x1, 0x401, 0x2, 0x10000, 0x8, 0x4, 0x80000001, 0x4, 0x1, 0x0, 0x9, 0x5, 0x100000, 0x800, 0x4, 0xe49, 0x101, 0x8, 0x4, 0x512, 0x0, 0xffff, 0xf8, 0x10, 0x200, 0xfffffff8, 0x2, 0x6, 0x9, 0xfffffffa, 0x25a, 0x42, 0x6, 0x9, 0x3, 0xb, 0x1, 0x3, 0x1ff, 0x3, 0x10000, 0x9, 0x7fffffff, 0x2, 0xc, 0x4, 0x3, 0x4, 0x9, 0xa40, 0x469, 0x2, 0x6, 0x9, 0x800, 0x3, 0x800, 0x2, 0x2ba1, 0x7fff, 0x8, 0x0, 0x8, 0x681, 0x4, 0xd33, 0x2, 0x7, 0x725f458a, 0xc77, 0x7, 0x7, 0x6, 0x3, 0x7, 0x4, 0x1a, 0x6, 0x1000, 0x1, 0x0, 0x7, 0xfffffffd, 0x9, 0xbc, 0x9, 0x8001, 0x10, 0x6, 0x1013165b, 0x0, 0x2cb5, 0x0, 0x3ff, 0x25ce, 0x4, 0x3, 0xfffffff9, 0x2, 0x1ff, 0x3000, 0x3, 0x1, 0x7f, 0x2, 0x7, 0x9, 0x6, 0x8, 0x1, 0x5, 0xd, 0xfffff19a, 0x0, 0x7fffffff, 0x1, 0xffffffbe, 0x1, 0x7, 0xb8000000, 0x10, 0x8, 0x6, 0x864, 0x7, 0x9, 0x3, 0x7f, 0x101, 0x4, 0x81, 0x1, 0xd2, 0x3ff, 0x3ff, 0x6, 0x1ff, 0x1, 0x200, 0x80000001, 0x6, 0x7fff, 0x1, 0x6, 0x200, 0x5, 0x1, 0x7, 0x0, 0x2a7, 0x0, 0x5e30, 0x800, 0x0, 0x1, 0xb4dd, 0x0, 0xfff, 0x2416, 0xb760, 0x5, 0xb106, 0x3, 0x19, 0x0, 0x7fffffff, 0x1, 0x2, 0x7, 0xbe46, 0x2, 0x0, 0x5, 0x1, 0xfffffffd, 0x1, 0x80000001, 0x5, 0x7, 0x0, 0x5, 0x8, 0x2, 0x280, 0x0, 0x0, 0xd, 0xa, 0x7, 0x10001, 0x10001, 0xfa4, 0x0, 0x9, 0x6, 0x9, 0x2, 0x8, 0x6, 0x80000000, 0x6, 0x9, 0x80000000, 0x0, 0x4, 0x5, 0x3, 0x550, 0x80, 0x3ff, 0xd42, 0x1, 0x80000000, 0x7ff, 0xe439, 0x4, 0x1f, 0x6, 0xfffffffb, 0xd92, 0xbed, 0x10, 0x3, 0x3, 0x3, 0x1, 0x101, 0x5, 0x9, 0x2, 0x5, 0x4, 0x324, 0x8, 0x8, 0x7b126469, 0x10001, 0xff, 0x0, 0x71f, 0x25, 0x7, 0x9, 0x80000000, 0x8, 0x6f, 0x3, 0x40, 0x61d75b5e, 0x0, 0x5, 0x1, 0x4, 0x3, 0x800, 0xfffffff9, 0x7f, 0x9, 0x3, 0x6, 0x1ff, 0x7, 0xc, 0x78, 0x5, 0x8, 0x9, 0x1, 0x7, 0xb, 0xfffffff7, 0x10, 0x3, 0xfffffff1, 0x3, 0x1, 0x2, 0x5, 0x300000, 0x8, 0x7, 0x9, 0x2, 0x8, 0x0, 0x5, 0x401, 0x6, 0x1, 0x0, 0x2af, 0x978a, 0x0, 0x1, 0x2, 0xed4, 0x3, 0x2, 0xffffffff, 0x4a, 0x4, 0x80, 0x4, 0x6, 0x4, 0xfffffffc, 0x6, 0x7e, 0xe83, 0x1b, 0x1, 0x0, 0x1, 0x5d, 0x4, 0x9, 0xfff, 0x9, 0x9, 0x4, 0x2, 0xa, 0x1ff, 0x8, 0x2, 0x6, 0x80000001, 0x10001, 0x670, 0xad0f, 0x4, 0xfffffeff, 0x6, 0x81, 0x3, 0x6, 0x2, 0x0, 0x7, 0x5, 0xa, 0x8154, 0x3, 0x965, 0x9, 0xfffffff7, 0x6, 0x34c, 0x2, 0x3, 0x7, 0xed, 0x0, 0xecf, 0x101, 0x99b3, 0x9, 0x5, 0x6, 0xfffffff8, 0x7, 0x3, 0x7, 0xa1e, 0x2, 0x2, 0x4, 0x5, 0x5, 0x1, 0xe5d, 0x1, 0x9, 0xffff, 0x5, 0x4, 0x101, 0x6, 0x3, 0x0, 0x3, 0x8, 0x9, 0xe9, 0xba, 0x6, 0x9, 0x3ff, 0x3, 0xf, 0x2, 0x5, 0x8, 0x10000, 0x7b, 0x8000, 0x3, 0x4418, 0x6, 0x1245caf4, 0x7a25, 0xffffffff, 0x400, 0x2, 0xd55, 0x2, 0x7e0b0878, 0xe01, 0x8c25, 0x8, 0x7ff, 0x3, 0x3, 0x4, 0x0, 0xfffffff7, 0x2, 0x3, 0x3, 0x1c000000, 0x7, 0xfffffff5, 0x0, 0x7, 0x0, 0xa00, 0x87, 0xfffffffc, 0x100, 0xb2f, 0x6, 0xfffffffc, 0x2, 0x2, 0x10, 0x4, 0x1, 0x974, 0xffff0001, 0x6, 0x9, 0x8, 0x10000, 0x10001, 0x7, 0x6, 0x2, 0x6, 0x8, 0xe, 0xaa, 0xe, 0x4, 0x6, 0x4, 0x400, 0x6, 0x7, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x3, 0x73c, 0xd544973, 0x5, 0x6, 0xfffffffa, 0x100, 0x3, 0x7, 0x80000001, 0x0, 0x10, 0x9, 0x1, 0x1, 0x80, 0x4, 0x41, 0x0, 0x7, 0x1, 0x8, 0x8, 0x9, 0x0, 0xfffffffc, 0x101, 0x0, 0x4, 0xdf, 0x9, 0xe1b, 0x1, 0x3, 0x30000, 0xfffffffd, 0x8, 0x200, 0x1, 0x8, 0xb000, 0x6, 0x2, 0x10000, 0x43, 0x3ff, 0x0, 0x3ff, 0x400, 0x7fffffff, 0x0, 0xfffffff8, 0x3, 0x7, 0x0, 0x7ff, 0x10000, 0xfffffffc, 0xfffffff7, 0x0, 0x2, 0x8, 0xe408, 0x6, 0x1, 0x4, 0x4, 0x0, 0x5, 0x8, 0x9, 0x8, 0x80000001, 0x5b6, 0x1, 0x3, 0x9, 0xc, 0x10001, 0x8, 0x3, 0x3, 0x3, 0x801, 0x8, 0x2, 0x6, 0x3, 0x4e, 0x6, 0x3, 0x0, 0x8, 0x581, 0x9e02, 0xfffffffc, 0xc, 0x2, 0x6, 0x8, 0x2, 0x5, 0x200, 0x4, 0x2, 0x3, 0x8b80, 0xffffffff, 0x6, 0x43, 0x8, 0x1, 0x3, 0xffffffb2, 0x7, 0x7, 0x8, 0x0, 0x6793, 0x0, 0x80000000, 0x9, 0xb3ec, 0x81, 0x4144d458, 0x6eb76761, 0x7, 0x9, 0x101, 0x0, 0x3, 0x7fffffff, 0x0, 0x7fffffff, 0x3, 0x1, 0xd2, 0x6, 0x100, 0x9, 0x2ec, 0x9, 0x5, 0x85d1, 0x7, 0x2, 0xb3c, 0x7, 0x3, 0x7, 0x4, 0x7, 0x800, 0x7, 0x101, 0xd3ad, 0x7, 0x2, 0x8000, 0x3, 0x8, 0x1, 0x0, 0x8, 0xfffffffe, 0x8, 0x400, 0x1, 0x1, 0x5, 0x2, 0x5, 0x7fff, 0x4c29, 0xfffff45b, 0xfff, 0x8, 0x0, 0x1, 0x9, 0x3, 0x8, 0x9, 0x0, 0x2, 0x0, 0x1, 0x5, 0x4a4, 0x9, 0x6, 0xd5, 0x9, 0x5b3, 0x7502, 0xfffffff1, 0xd, 0x5, 0x1ff, 0x11, 0x1, 0x5, 0x8, 0x8, 0x0, 0x5, 0x8f36, 0x3, 0x2, 0x1, 0x18000, 0x7, 0x3, 0x0, 0x8, 0x77b, 0x556, 0x292, 0x2, 0x9, 0x422, 0x5, 0x54, 0x2, 0xc7, 0xe, 0x8eea, 0x7, 0x1, 0x8]}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001440)={0xc0, r9, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffe01}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000001}, 0x40880) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) 329.149041ms ago: executing program 4 (id=1947): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r1, 0x1, 0x7, &(0x7f0000000a80)=""/191, &(0x7f0000000b40)=0xbf) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 322.680962ms ago: executing program 2 (id=1948): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="8127b5000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1010000}, 0x94) 281.201257ms ago: executing program 0 (id=1949): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000700000200000000000000000000000000000004000400000000000000000000000000000000030000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) 186.312491ms ago: executing program 2 (id=1950): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="04010000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000fd0100000000290000002001000000000000000000000000000000000000000000000000000000000000020000000000000000000100000000000000001000000000ffffffffffffffff000000000000000000000000080000000000000000000000000020000000000007000000000000000000000000000000000004c06dbc0c0309ba240000000000000000000a000200340000000000000014000e"], 0x104}}, 0x0) 122.223844ms ago: executing program 4 (id=1951): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) (async) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="42153f", 0x3}], 0x1, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x2008}}, {{&(0x7f0000000500)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000580)="f5", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x10}}], 0x2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f000001a000/0x6000)=nil, 0x6000, 0x0, 0xd2df601ccd8a73f5, r0, 0x8000000) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4050) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b160000000000000000020000082c00048028000180080001006f7366001c0002800500020000000000080001400000001008000340100000010900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x64}) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, r9, 0xf18e1ac8fa073add, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x401}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x30}}, 0x48004) (async) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', r1, 0x1000, 0x1, {0x0, r8}}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) 114.035442ms ago: executing program 2 (id=1952): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000400000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 50.450154ms ago: executing program 0 (id=1953): socket$inet(0x2, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x28, '\x00', @buffer={"67156e93446a62b429dbc528411c5c2e13dcf1eed699475586a0f96baf9718c4", 0x20}, 0x802}]}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r7, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000500)=0x5, 0x4) sendto$inet6(r7, 0x0, 0x60, 0x40000, 0x0, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x2, 0x80001, 0x1b2}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(0xffffffffffffffff, 0x6f3e, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/188, 0xbc}, {0x0}], 0x4, 0x2, 0x1}) io_uring_enter(r8, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r11 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r11) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=1954): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000500000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff81020200000000000000bc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232) kernel console output (not intermixed with test programs): config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 381.368404][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 381.382911][ T797] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 381.393574][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.401849][ T797] usb 6-1: Product: syz [ 381.406356][ T5895] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 381.416303][ T797] usb 6-1: Manufacturer: syz [ 381.427408][ T797] usb 6-1: SerialNumber: syz [ 381.436516][ T797] usb 6-1: config 0 descriptor?? [ 381.443200][ T5895] usb 5-1: Invalid ep0 maxpacket: 16 [ 381.449580][ T5895] usb usb5-port1: unable to enumerate USB device [ 381.482226][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 381.489679][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.504880][ T5887] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 381.519449][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.530226][ T5887] usb 1-1: Product: syz [ 381.536915][ T5887] usb 1-1: Manufacturer: syz [ 381.541922][ T5887] usb 1-1: SerialNumber: syz [ 381.574569][ T5887] usb 1-1: config 0 descriptor?? [ 381.589760][ T5887] usb 1-1: bad CDC descriptors [ 381.598342][ T5887] usb 1-1: unsupported MDLM descriptors [ 381.606748][ T5887] cdc_acm 1-1:0.0: Zero length descriptor references [ 381.614777][ T5887] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 381.628438][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1485'. [ 381.817187][ T5887] usb 1-1: USB disconnect, device number 41 [ 381.833695][ T797] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 381.933001][ T797] usb 6-1: USB disconnect, device number 42 [ 382.565519][T11109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.572177][ T797] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 382.781884][ T797] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 382.793142][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.837279][ T797] usb 3-1: config 0 descriptor?? [ 382.844094][ T797] cp210x 3-1:0.0: cp210x converter detected [ 383.038657][T11116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1496'. [ 383.159705][T11105] tipc: Enabled bearer , priority 0 [ 383.180815][T11105] syzkaller0: entered promiscuous mode [ 383.212526][T11105] syzkaller0: entered allmulticast mode [ 383.316857][T11105] tipc: Resetting bearer [ 383.372577][T11122] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 383.380127][T11122] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 383.389288][T11122] tipc: Enabled bearer , priority 0 [ 383.886100][T11137] netlink: 'syz.1.1500': attribute type 21 has an invalid length. [ 383.895222][T11137] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1500'. [ 383.905911][T11137] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 383.919252][T11137] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1500'. [ 384.164003][ T5887] tipc: Node number set to 805144727 [ 385.102210][ T5887] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 385.271996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 385.430995][ T5887] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.450817][ T5887] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.465581][ T5887] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 385.475221][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.503657][T11120] tipc: Resetting bearer [ 385.566526][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1508'. [ 385.594649][T11120] tipc: Disabling bearer [ 385.654201][ T797] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 385.667227][ T797] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 385.699530][ T5887] usb 6-1: usb_control_msg returned -32 [ 385.721184][ T5887] usbtmc 6-1:16.0: can't read capabilities [ 385.730376][ T797] usb 3-1: cp210x converter now attached to ttyUSB0 [ 385.762863][ T797] usb 3-1: USB disconnect, device number 49 [ 385.793629][ T797] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 385.818482][ T797] cp210x 3-1:0.0: device disconnected [ 385.990212][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 386.160512][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1512'. [ 387.382831][ T5887] usb 6-1: USB disconnect, device number 43 [ 387.477254][T11184] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 387.485831][T11184] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 387.494585][T11184] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 388.299560][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 388.299583][ T30] audit: type=1326 audit(1774286918.015:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 388.771441][ T30] audit: type=1326 audit(1774286918.025:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 388.840467][ T30] audit: type=1326 audit(1774286918.025:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 389.023749][ T30] audit: type=1326 audit(1774286918.065:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 389.178543][ T30] audit: type=1326 audit(1774286918.075:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 389.316909][ T30] audit: type=1326 audit(1774286918.075:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 389.376800][T11218] trusted_key: encrypted_key: insufficient parameters specified [ 389.413544][T11218] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1523'. [ 389.499083][ T30] audit: type=1326 audit(1774286918.085:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 389.709705][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'. [ 389.788262][ T30] audit: type=1326 audit(1774286918.085:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 390.195941][ T30] audit: type=1326 audit(1774286918.095:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f68f6d58bec code=0x7ffc0000 [ 390.223736][ T5909] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 390.305832][ T30] audit: type=1326 audit(1774286918.095:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.4.1520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f68f6d58c4e code=0x7ffc0000 [ 390.442585][ T5909] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.467114][ T5909] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.531577][ T5909] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 390.573769][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.739910][T11235] FAULT_INJECTION: forcing a failure. [ 390.739910][T11235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.763227][T11235] CPU: 1 UID: 0 PID: 11235 Comm: syz.1.1528 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.763279][T11235] Tainted: [L]=SOFTLOCKUP [ 390.763286][T11235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.763302][T11235] Call Trace: [ 390.763314][T11235] [ 390.763322][T11235] dump_stack_lvl+0xe8/0x150 [ 390.763357][T11235] should_fail_ex+0x412/0x560 [ 390.763390][T11235] _copy_from_user+0x2d/0xb0 [ 390.763413][T11235] ___sys_sendmsg+0x1c6/0x360 [ 390.763441][T11235] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.763492][T11235] ? __fget_files+0x2a/0x420 [ 390.763530][T11235] ? __fget_files+0x3a0/0x420 [ 390.763565][T11235] __x64_sys_sendmsg+0x1bd/0x2a0 [ 390.763587][T11235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.763615][T11235] ? __pfx_ksys_write+0x10/0x10 [ 390.763645][T11235] do_syscall_64+0x14d/0xf80 [ 390.763664][T11235] ? trace_irq_disable+0x3b/0x150 [ 390.763690][T11235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.763708][T11235] ? clear_bhb_loop+0x40/0x90 [ 390.763731][T11235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.763753][T11235] RIP: 0033:0x7f86b619c799 [ 390.763772][T11235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.763788][T11235] RSP: 002b:00007f86b707d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.763808][T11235] RAX: ffffffffffffffda RBX: 00007f86b6416090 RCX: 00007f86b619c799 [ 390.763822][T11235] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 390.763834][T11235] RBP: 00007f86b707d090 R08: 0000000000000000 R09: 0000000000000000 [ 390.763845][T11235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.763856][T11235] R13: 00007f86b6416128 R14: 00007f86b6416090 R15: 00007f86b653fa48 [ 390.763884][T11235] [ 391.086057][ T5909] usb 6-1: usb_control_msg returned -32 [ 391.091744][ T5909] usbtmc 6-1:16.0: can't read capabilities [ 391.672169][ T5887] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 391.942474][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 391.951827][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 391.966539][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.981350][ T5887] usb 3-1: Product: syz [ 392.020080][ T5887] usb 3-1: Manufacturer: syz [ 392.031820][ T5887] usb 3-1: SerialNumber: syz [ 392.050353][ T5887] usb 3-1: config 0 descriptor?? [ 392.278995][ T5887] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 393.352100][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 393.352122][ T30] audit: type=1326 audit(1774286922.245:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 393.396477][T11270] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 393.716190][ T10] usb 6-1: USB disconnect, device number 44 [ 393.815914][ T30] audit: type=1326 audit(1774286922.245:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 393.890330][ T5887] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 393.891304][ T30] audit: type=1326 audit(1774286922.255:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 394.160049][ T30] audit: type=1326 audit(1774286922.255:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 394.167456][ T5887] usb 3-1: USB disconnect, device number 50 [ 394.211872][ T30] audit: type=1326 audit(1774286922.255:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 394.314730][ T30] audit: type=1326 audit(1774286922.255:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 394.342237][ T30] audit: type=1326 audit(1774286922.255:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 394.405106][ T30] audit: type=1326 audit(1774286922.255:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 394.472777][ T30] audit: type=1326 audit(1774286922.255:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 394.552302][ T30] audit: type=1326 audit(1774286922.255:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11260 comm="syz.4.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 394.723020][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1542'. [ 395.002294][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 395.088368][T11295] netlink: 'syz.1.1545': attribute type 1 has an invalid length. [ 395.111292][T11295] netlink: 416 bytes leftover after parsing attributes in process `syz.1.1545'. [ 395.142126][ T5909] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 395.149930][ T10] usb 3-1: device descriptor read/64, error -71 [ 395.307755][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1547'. [ 395.339375][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.349620][ T5909] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 395.359714][ T5909] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 395.370323][ T5909] usb 1-1: config 63 has no interface number 0 [ 395.385724][ T5909] usb 1-1: config 63 interface 66 has no altsetting 0 [ 395.396915][ T5909] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 395.406825][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.415261][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 395.425238][ T5909] usb 1-1: Product: syz [ 395.452160][ T5909] usb 1-1: Manufacturer: syz [ 395.452190][ T5909] usb 1-1: SerialNumber: syz [ 395.582114][ T10] usb 3-1: device descriptor read/64, error -71 [ 395.588725][ T5902] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 395.681508][ T5909] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 395.689064][ T5909] uvcvideo 1-1:63.66: No valid video chain found. [ 395.701881][ T5909] usb 1-1: USB disconnect, device number 42 [ 395.708669][ T10] usb usb3-port1: attempt power cycle [ 395.774104][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 395.780187][ T5902] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 395.799544][ T5902] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 395.809039][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.818521][ T5902] usb 2-1: Product: syz [ 395.823031][ T5902] usb 2-1: Manufacturer: syz [ 395.827686][ T5902] usb 2-1: SerialNumber: syz [ 395.837836][ T5902] r8152-cfgselector 2-1: Unknown version 0x0000 [ 395.845026][ T5902] r8152-cfgselector 2-1: config 0 descriptor?? [ 396.058650][ T5902] r8152-cfgselector 2-1: Unknown version 0x0000 [ 396.071536][ T5902] r8152-cfgselector 2-1: bad CDC descriptors [ 396.087067][ T5902] r8152-cfgselector 2-1: USB disconnect, device number 50 [ 396.094848][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 396.124951][ T10] usb 3-1: device descriptor read/8, error -71 [ 396.175425][ T796] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 396.217239][ T5909] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 396.354515][ T796] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.364994][ T796] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.370624][T11311] IPv6: sit2: Disabled Multicast RS [ 396.380510][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 396.393927][ T796] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.404961][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 396.413407][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.416799][T11311] sit2: entered allmulticast mode [ 396.422012][ T5909] usb 1-1: not running at top speed; connect to a high speed hub [ 396.436230][ T10] usb 3-1: device descriptor read/8, error -71 [ 396.446976][ T5909] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 396.461580][ T5909] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 396.476188][ T5909] usb 1-1: config 63 has no interface number 0 [ 396.483578][ T5909] usb 1-1: config 63 interface 66 has no altsetting 0 [ 396.493669][ T5909] usb 1-1: string descriptor 0 read error: -22 [ 396.500239][ T5909] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 396.509781][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.533004][ T5909] uvcvideo 1-1:63.66: Found UVC 0.07 device (174f:8acf) [ 396.540982][ T5909] uvcvideo 1-1:63.66: No valid video chain found. [ 396.562865][ T10] usb usb3-port1: unable to enumerate USB device [ 396.651877][ T796] usb 6-1: usb_control_msg returned -32 [ 396.658036][ T796] usbtmc 6-1:16.0: can't read capabilities [ 396.745214][T11280] tipc: Enabled bearer , priority 0 [ 396.755812][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1540'. [ 396.766132][T11280] syzkaller0: entered promiscuous mode [ 396.771638][T11280] syzkaller0: entered allmulticast mode [ 396.785509][T11279] tipc: Resetting bearer [ 396.806412][T11279] tipc: Disabling bearer [ 396.855820][ T796] usb 1-1: USB disconnect, device number 43 [ 397.382135][ T796] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 397.402121][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 397.544042][ T796] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 397.577679][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 397.583189][ T796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.594607][ T796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 397.632491][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 397.644068][ T796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.658764][ T796] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 397.668554][ T796] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 397.677131][ T10] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 397.702461][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.710999][ T796] usb 2-1: Product: syz [ 397.719111][ T796] usb 2-1: Manufacturer: syz [ 397.724214][ T10] usb 5-1: Product: syz [ 397.803854][ T10] usb 5-1: Manufacturer: syz [ 397.808514][ T10] usb 5-1: SerialNumber: syz [ 397.838348][T11328] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 397.846819][T11328] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 397.855486][T11328] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 397.904654][ T10] usb 5-1: config 0 descriptor?? [ 397.913808][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 397.919804][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 397.928205][ T796] cdc_wdm 2-1:1.0: skipping garbage [ 397.934222][ T796] cdc_wdm 2-1:1.0: skipping garbage [ 397.943585][ T796] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 397.959721][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.172632][T11316] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 398.198130][T11321] kvm: kvm [11320]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 398.215356][T11321] kvm: kvm [11320]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 398.515612][ T5887] usb 5-1: USB disconnect, device number 53 [ 398.602116][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 398.698460][ T796] IPVS: starting estimator thread 0... [ 398.705576][T11339] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1557'. [ 398.754107][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.796970][ T796] usb 6-1: USB disconnect, device number 45 [ 398.812907][T11340] IPVS: using max 35 ests per chain, 84000 per kthread [ 398.846849][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.871461][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.898894][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.920157][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.941126][ T10] usb 3-1: config 0 descriptor?? [ 399.093926][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1558'. [ 399.107838][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1558'. [ 399.145628][T11344] netlink: 'syz.5.1558': attribute type 4 has an invalid length. [ 399.550824][ T10] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 399.748782][T11334] kvm: apic: phys broadcast and lowest prio [ 399.905945][ T10] usb 3-1: USB disconnect, device number 55 [ 399.964820][ T29] usb 2-1: USB disconnect, device number 51 [ 400.602369][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 400.742200][ T796] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 400.762178][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 400.769470][ T10] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 400.790002][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 400.802162][ T29] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 400.821009][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.839637][ T10] usb 5-1: Product: syz [ 400.850552][ T10] usb 5-1: Manufacturer: syz [ 400.875549][ T10] usb 5-1: SerialNumber: syz [ 400.903622][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 400.909950][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 400.945131][ T796] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.958084][ T797] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 400.982506][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 400.997286][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.019836][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 401.049060][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 401.069938][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.099153][ T29] usb 3-1: config 0 descriptor?? [ 401.112459][ T797] usb 6-1: Using ep0 maxpacket: 16 [ 401.118456][ T796] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 401.141654][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 401.143283][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 401.160116][ T796] usb 1-1: Product: syz [ 401.165042][ T5887] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 401.171028][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.188294][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.203889][ T796] usb 1-1: Manufacturer: syz [ 401.204921][ T797] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 401.218034][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 401.218506][ T10] r8152-cfgselector 5-1: bad CDC descriptors [ 401.250179][ T10] r8152-cfgselector 5-1: USB disconnect, device number 54 [ 401.257946][ T796] usb 1-1: SerialNumber: syz [ 401.310588][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.332237][ T797] usb 6-1: Product: syz [ 401.365818][ T797] usb 6-1: Manufacturer: syz [ 401.373523][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.398388][ T797] usb 6-1: SerialNumber: syz [ 401.403516][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.421912][ T797] usb 6-1: config 0 descriptor?? [ 401.442384][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.451755][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.476011][ T797] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 401.490145][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 401.497179][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 401.510603][ T797] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 401.532835][ T29] usb 3-1: USB disconnect, device number 56 [ 401.571392][ T796] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 401.607738][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 401.797356][ T5887] usb 2-1: usb_control_msg returned -32 [ 401.816702][ T5887] usbtmc 2-1:16.0: can't read capabilities [ 401.861085][ C0] usblp0: nonzero write bulk status received: -71 [ 401.875469][ T796] usb 1-1: USB disconnect, device number 44 [ 402.024516][T11360] usblp0: removed [ 402.084345][ T797] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 402.162089][ T5887] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 402.292098][ T5887] usb 5-1: device descriptor read/64, error -71 [ 402.510618][ T797] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 402.521678][ T797] em28xx 6-1:0.0: board has no eeprom [ 402.542388][ T5887] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 402.673566][ T5887] usb 5-1: device descriptor read/64, error -71 [ 402.707865][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 402.767017][T11395] fuse: Unknown parameter '00000000000000000000003' [ 402.784383][ T5887] usb usb5-port1: attempt power cycle [ 402.812188][ T797] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 402.820352][ T797] em28xx 6-1:0.0: dvb set to bulk mode. [ 402.827916][ T5913] em28xx 6-1:0.0: Binding DVB extension [ 402.946550][ T797] usb 6-1: USB disconnect, device number 46 [ 402.966139][ T797] em28xx 6-1:0.0: Disconnecting em28xx [ 402.977443][ T5913] em28xx 6-1:0.0: Registering input extension [ 402.988648][ T797] em28xx 6-1:0.0: Closing input extension [ 403.010888][ T797] em28xx 6-1:0.0: Freeing device [ 403.132385][ T5887] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 403.142390][ T796] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 403.152906][ T5887] usb 5-1: device descriptor read/8, error -71 [ 403.302166][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 403.308903][ T796] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.319059][ T796] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.329131][ T796] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.339305][ T796] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.353939][ T796] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.363239][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.392164][ T5887] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 403.412884][ T5887] usb 5-1: device descriptor read/8, error -71 [ 403.522937][ T5887] usb usb5-port1: unable to enumerate USB device [ 403.553138][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1580'. [ 403.577045][ T796] usb 3-1: GET_CAPABILITIES returned 0 [ 403.583837][ T796] usbtmc 3-1:16.0: can't read capabilities [ 403.595024][T11408] FAULT_INJECTION: forcing a failure. [ 403.595024][T11408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.610870][T11408] CPU: 0 UID: 0 PID: 11408 Comm: syz.0.1580 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.610922][T11408] Tainted: [L]=SOFTLOCKUP [ 403.610928][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.610940][T11408] Call Trace: [ 403.610948][T11408] [ 403.610956][T11408] dump_stack_lvl+0xe8/0x150 [ 403.610989][T11408] should_fail_ex+0x412/0x560 [ 403.611019][T11408] _copy_from_iter+0x1d3/0x1670 [ 403.611049][T11408] ? rcu_is_watching+0x15/0xb0 [ 403.611079][T11408] ? __pfx__copy_from_iter+0x10/0x10 [ 403.611111][T11408] ? netlink_sendmsg+0x650/0xb40 [ 403.611128][T11408] ? skb_put+0x11b/0x210 [ 403.611151][T11408] netlink_sendmsg+0x6c0/0xb40 [ 403.611173][T11408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.611192][T11408] ? aa_sock_msg_perm+0xf1/0x1b0 [ 403.611218][T11408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.611241][T11408] ____sys_sendmsg+0x972/0x9f0 [ 403.611270][T11408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.611298][T11408] ? import_iovec+0x73/0xa0 [ 403.611320][T11408] ___sys_sendmsg+0x2a5/0x360 [ 403.611345][T11408] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.611392][T11408] ? __fget_files+0x2a/0x420 [ 403.611417][T11408] ? __fget_files+0x3a0/0x420 [ 403.611449][T11408] __x64_sys_sendmsg+0x1bd/0x2a0 [ 403.611471][T11408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.611499][T11408] ? __pfx_ksys_write+0x10/0x10 [ 403.611529][T11408] do_syscall_64+0x14d/0xf80 [ 403.611550][T11408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.611568][T11408] ? clear_bhb_loop+0x40/0x90 [ 403.611589][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.611605][T11408] RIP: 0033:0x7f3aee39c799 [ 403.611622][T11408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.611637][T11408] RSP: 002b:00007f3aef307028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.611657][T11408] RAX: ffffffffffffffda RBX: 00007f3aee615fa0 RCX: 00007f3aee39c799 [ 403.611670][T11408] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 403.611681][T11408] RBP: 00007f3aef307090 R08: 0000000000000000 R09: 0000000000000000 [ 403.611692][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.611702][T11408] R13: 00007f3aee616038 R14: 00007f3aee615fa0 R15: 00007f3aee73fa48 [ 403.611730][T11408] [ 403.931772][ T797] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 403.996827][ T5887] usb 2-1: USB disconnect, device number 52 [ 404.068534][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.080618][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.122439][ T5913] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 404.162328][ T797] usb 6-1: Using ep0 maxpacket: 8 [ 404.169360][ T797] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 404.178029][ T797] usb 6-1: config 0 has no interface number 0 [ 404.194344][ T797] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.213465][ T797] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 404.218041][ T796] usb 3-1: USB disconnect, device number 57 [ 404.226185][ T797] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 404.253502][ T797] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.270050][ T797] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 404.280023][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.288153][ T797] usb 6-1: Product: syz [ 404.293342][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 404.302248][ T797] usb 6-1: Manufacturer: syz [ 404.309325][ T5913] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 404.322122][ T797] usb 6-1: SerialNumber: syz [ 404.328631][ T5913] usb 1-1: config 0 has no interface number 0 [ 404.335985][ T797] usb 6-1: config 0 descriptor?? [ 404.341306][ T5913] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 404.375516][ T5913] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 404.384887][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.394989][ T5913] usb 1-1: Product: syz [ 404.402743][ T5913] usb 1-1: Manufacturer: syz [ 404.412164][ T5913] usb 1-1: SerialNumber: syz [ 404.462656][ T5913] usb 1-1: config 0 descriptor?? [ 404.482971][T11410] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 404.564556][ T797] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 404.698167][T11423] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 404.713432][ T5913] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 404.734142][ T5913] asix 1-1:0.188: probe with driver asix failed with error -32 [ 404.867251][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 404.898135][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 404.922469][T11429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1585'. [ 405.572183][ T796] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 405.723065][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 405.730700][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 405.758743][ T796] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 405.783081][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.791145][ T796] usb 3-1: Product: syz [ 405.806682][ T796] usb 3-1: Manufacturer: syz [ 405.811340][ T796] usb 3-1: SerialNumber: syz [ 405.834790][ T796] usb 3-1: config 0 descriptor?? [ 405.845658][ T796] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 405.867248][ T796] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 406.446865][ T796] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 406.492327][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 406.563415][T11302] usb 6-1: USB disconnect, device number 47 [ 406.719845][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.751598][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.765606][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.782994][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.846259][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1596'. [ 406.871316][ T796] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 406.896958][ T796] em28xx 3-1:0.0: board has no eeprom [ 406.913081][T11302] usb 1-1: USB disconnect, device number 45 [ 407.045969][ T10] usb 2-1: usb_control_msg returned -32 [ 407.051732][ T10] usbtmc 2-1:16.0: can't read capabilities [ 407.222160][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 407.222181][ T30] audit: type=1326 audit(1774286936.935:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.251473][ T796] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 407.260106][ T796] em28xx 3-1:0.0: dvb set to bulk mode. [ 407.267215][ T10] em28xx 3-1:0.0: Binding DVB extension [ 407.277875][ T30] audit: type=1326 audit(1774286936.995:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.317115][ T30] audit: type=1326 audit(1774286937.015:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.342504][ T30] audit: type=1326 audit(1774286937.015:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.369262][ T30] audit: type=1326 audit(1774286937.015:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.384767][ T5913] usb 3-1: USB disconnect, device number 58 [ 407.421319][ T5913] em28xx 3-1:0.0: Disconnecting em28xx [ 407.437229][ T30] audit: type=1326 audit(1774286937.015:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.468837][ T30] audit: type=1326 audit(1774286937.015:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.494634][ T10] em28xx 3-1:0.0: Registering input extension [ 407.502425][T11302] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 407.511648][ T5913] em28xx 3-1:0.0: Closing input extension [ 407.525643][ T30] audit: type=1326 audit(1774286937.015:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.566471][ T30] audit: type=1326 audit(1774286937.015:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.629645][ T30] audit: type=1326 audit(1774286937.015:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11464 comm="syz.4.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 407.646941][ T5913] em28xx 3-1:0.0: Freeing device [ 407.673062][T11302] usb 1-1: Using ep0 maxpacket: 32 [ 407.684925][T11302] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 407.706800][T11302] usb 1-1: config 0 has no interface number 0 [ 407.727833][T11302] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.770023][T11302] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.779215][T11472] netlink: 'syz.5.1602': attribute type 4 has an invalid length. [ 407.796487][T11472] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1602'. [ 407.806654][T11302] usb 1-1: config 0 interface 85 has no altsetting 0 [ 407.816480][T11472] .`: renamed from bond0 [ 407.834757][T11302] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 407.854888][T11302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.897546][T11302] usb 1-1: Product: syz [ 407.915473][T11302] usb 1-1: Manufacturer: syz [ 407.950986][T11302] usb 1-1: SerialNumber: syz [ 407.989077][T11302] usb 1-1: config 0 descriptor?? [ 408.298879][T11302] appletouch 1-1:0.85: Failed to read mode from device. [ 408.337209][T11302] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 408.370342][T11482] netlink: 'syz.2.1606': attribute type 21 has an invalid length. [ 408.416638][T11302] usb 1-1: USB disconnect, device number 46 [ 408.707190][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 409.108151][T11302] usb 2-1: USB disconnect, device number 53 [ 409.680634][T11302] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 409.853209][T11302] usb 1-1: Using ep0 maxpacket: 16 [ 409.860931][T11302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 409.875182][T11302] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 409.875784][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 409.902360][ T796] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 409.922456][T11302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.936219][T11302] usb 1-1: Product: syz [ 409.940424][T11302] usb 1-1: Manufacturer: syz [ 409.970168][T11302] usb 1-1: SerialNumber: syz [ 409.991860][T11512] netlink: 'syz.2.1618': attribute type 1 has an invalid length. [ 409.999593][T11302] usb 1-1: config 0 descriptor?? [ 410.019152][T11302] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 410.058119][T11302] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 410.064775][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 410.096958][ T796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.129622][T11514] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 410.140652][ T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 410.162870][ T796] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.198547][T11514] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 410.212214][ T796] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 410.247470][T11512] bond1: (slave gretap1): making interface the new active one [ 410.255402][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.294319][T11512] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 410.322296][ T796] hub 5-1:1.0: bad descriptor, ignoring hub [ 410.332136][ T796] hub 5-1:1.0: probe with driver hub failed with error -5 [ 410.385855][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 410.391417][ T796] cdc_wdm 5-1:1.0: skipping garbage [ 410.406947][ T796] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 410.627331][T11302] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 410.962116][ T5887] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 410.972937][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 411.085866][T11302] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 411.102147][ T5887] usb 2-1: device descriptor read/64, error -32 [ 411.189341][T11302] em28xx 1-1:0.0: board has no eeprom [ 411.433535][ T5887] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 411.482072][T11302] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 411.490277][T11302] em28xx 1-1:0.0: dvb set to bulk mode. [ 411.498426][ T796] em28xx 1-1:0.0: Binding DVB extension [ 411.611715][ T5913] usb 1-1: USB disconnect, device number 47 [ 411.681405][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.696727][ T5913] em28xx 1-1:0.0: Disconnecting em28xx [ 411.723207][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.784060][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'. [ 411.797738][ T796] em28xx 1-1:0.0: Registering input extension [ 411.812445][ T5913] em28xx 1-1:0.0: Closing input extension [ 411.833562][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.871430][ T5913] em28xx 1-1:0.0: Freeing device [ 411.881311][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.932205][T11302] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 412.102228][T11302] usb 6-1: Using ep0 maxpacket: 32 [ 412.138989][ T5887] usb 2-1: usb_control_msg returned -32 [ 412.148434][ T5887] usbtmc 2-1:16.0: can't read capabilities [ 412.167037][T11302] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 412.185437][T11302] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 412.202071][T11302] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 412.216669][T11302] usb 6-1: config 1 has no interface number 0 [ 412.223657][T11302] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.250274][T11302] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 412.301055][T11302] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 412.312335][T11302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.349086][T11302] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 412.356056][T11549] syzkaller0: entered promiscuous mode [ 412.361653][T11549] syzkaller0: entered allmulticast mode [ 412.373612][T11549] tipc: Enabled bearer , priority 0 [ 412.382483][T11546] tipc: Resetting bearer [ 412.426570][T11546] tipc: Disabling bearer [ 412.555663][T11302] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 412.588489][T11554] loop5: detected capacity change from 0 to 7 [ 412.601113][T11554] Dev loop5: unable to read RDB block 7 [ 412.608031][T11554] loop5: unable to read partition table [ 412.615167][T11554] loop5: partition table beyond EOD, truncated [ 412.652132][T11554] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.688785][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1631'. [ 412.752478][ T5887] usb 5-1: USB disconnect, device number 59 [ 412.843091][T11562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'. [ 412.862410][T11562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'. [ 412.901355][T11564] trusted_key: encrypted_key: insufficient parameters specified [ 412.914547][T11564] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1634'. [ 413.032619][ T5887] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 413.076533][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 413.086998][T11569] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1635'. [ 413.192416][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 413.201471][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.221049][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 413.234420][ T5913] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 413.250174][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 413.268187][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.288363][ T5887] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 413.297805][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.306616][ T5887] usb 3-1: Product: syz [ 413.310824][ T5887] usb 3-1: Manufacturer: syz [ 413.316607][ T5887] usb 3-1: SerialNumber: syz [ 413.325047][ T5887] usb 3-1: config 0 descriptor?? [ 413.332951][ T5887] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 413.392221][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 413.400220][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 413.413745][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 413.423109][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.431179][ T5913] usb 1-1: Product: syz [ 413.435709][ T5913] usb 1-1: Manufacturer: syz [ 413.440423][ T5913] usb 1-1: SerialNumber: syz [ 413.448592][ T5913] usb 1-1: config 0 descriptor?? [ 413.461245][ T5913] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 413.471473][ T5913] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 413.541358][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.552319][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.596093][T11302] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 413.657045][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.669322][T11302] usb 2-1: USB disconnect, device number 55 [ 413.671606][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.718920][ T5887] usb 3-1: USB disconnect, device number 59 [ 413.870408][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 414.070025][ T5913] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 414.082409][T11302] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 414.252296][T11302] usb 2-1: Using ep0 maxpacket: 16 [ 414.266951][T11302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 414.282185][ T796] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 414.298603][T11302] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 414.309739][T11302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.318713][T11302] usb 2-1: Product: syz [ 414.323106][T11302] usb 2-1: Manufacturer: syz [ 414.327788][T11302] usb 2-1: SerialNumber: syz [ 414.338475][T11302] usb 2-1: config 0 descriptor?? [ 414.345860][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1641'. [ 414.356759][T11302] hub 2-1:0.0: bad descriptor, ignoring hub [ 414.363355][T11302] hub 2-1:0.0: probe with driver hub failed with error -5 [ 414.373328][T11302] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.462126][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 414.469927][ T796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 414.527780][ T5913] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 414.561371][ T5913] em28xx 1-1:0.0: board has no eeprom [ 414.598674][ T796] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 414.614918][ T796] usb 5-1: language id specifier not provided by device, defaulting to English [ 414.633652][ T796] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 414.643516][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.652875][T11302] usb 6-1: USB disconnect, device number 48 [ 414.659388][ T796] usb 5-1: Product: syz [ 414.664900][ T796] usb 5-1: Manufacturer: å¾—ã‡©ážˆè¬†â¿¢ï‘ [ 414.672758][T11302] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 414.680449][ T796] usb 5-1: SerialNumber: syz [ 414.872515][ T5913] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 414.906865][ T5913] em28xx 1-1:0.0: dvb set to bulk mode. [ 414.916928][ T5950] usb 2-1: USB disconnect, device number 56 [ 414.929044][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 414.929065][ T30] audit: type=1326 audit(1774286944.645:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 414.937836][ T5887] em28xx 1-1:0.0: Binding DVB extension [ 415.249325][T11302] usb 5-1: USB disconnect, device number 60 [ 415.259295][ T5913] usb 1-1: USB disconnect, device number 48 [ 415.301094][ T5913] em28xx 1-1:0.0: Disconnecting em28xx [ 415.350998][ T30] audit: type=1326 audit(1774286944.645:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 415.853499][ T30] audit: type=1326 audit(1774286944.685:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 415.888109][ T30] audit: type=1326 audit(1774286944.685:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 415.946762][ T30] audit: type=1326 audit(1774286944.685:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 415.971756][ T5887] em28xx 1-1:0.0: Registering input extension [ 415.982121][ T30] audit: type=1326 audit(1774286944.685:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 416.010932][ T5913] em28xx 1-1:0.0: Closing input extension [ 416.066197][ T30] audit: type=1326 audit(1774286944.685:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 416.086010][ T5913] em28xx 1-1:0.0: Freeing device [ 416.107917][T11600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'. [ 416.134317][ T30] audit: type=1326 audit(1774286944.685:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 416.222842][ T30] audit: type=1326 audit(1774286944.685:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 416.284979][T11600] syzkaller0: entered promiscuous mode [ 416.290667][T11600] syzkaller0: entered allmulticast mode [ 416.387081][ T30] audit: type=1326 audit(1774286944.685:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 416.912576][ T5887] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 417.483148][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 417.513021][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.523453][ T5887] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.619106][ T5887] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.644612][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.734808][T11628] __nla_validate_parse: 2 callbacks suppressed [ 417.734887][T11628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1654'. [ 417.898825][ T5887] usb 5-1: usb_control_msg returned -32 [ 417.917889][ T5887] usbtmc 5-1:16.0: can't read capabilities [ 418.055187][T11633] tipc: Enabled bearer , priority 0 [ 418.063402][T11633] syzkaller0: entered promiscuous mode [ 418.071382][T11633] syzkaller0: entered allmulticast mode [ 418.108452][T11633] tipc: Resetting bearer [ 418.117619][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 418.129463][T11631] tipc: Resetting bearer [ 418.163967][T11631] tipc: Disabling bearer [ 418.262173][T11302] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 418.412134][T11302] usb 1-1: Using ep0 maxpacket: 16 [ 418.418976][T11302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 418.432397][T11302] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 418.444779][T11302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.456957][T11302] usb 1-1: Product: syz [ 418.463759][T11302] usb 1-1: Manufacturer: syz [ 418.470391][T11302] usb 1-1: SerialNumber: syz [ 418.485147][T11302] usb 1-1: config 0 descriptor?? [ 418.495086][T11302] hub 1-1:0.0: bad descriptor, ignoring hub [ 418.501071][T11302] hub 1-1:0.0: probe with driver hub failed with error -5 [ 418.513399][ T796] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 418.523921][T11302] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.682029][ T5909] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 418.712249][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 418.753390][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 418.756371][T11632] kvm: kvm [11630]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 418.765654][ T796] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 418.772990][T11632] kvm: kvm [11630]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 418.782392][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.808334][ T796] usb 3-1: Product: syz [ 418.813647][ T796] usb 3-1: Manufacturer: syz [ 418.820504][ T796] usb 3-1: SerialNumber: syz [ 418.846270][ T796] usb 3-1: config 0 descriptor?? [ 418.860970][ T796] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 418.902202][ T796] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 418.910412][ T5909] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 418.919976][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.932922][ T5909] usb 6-1: Product: syz [ 418.937252][ T5909] usb 6-1: Manufacturer: syz [ 418.942362][ T5909] usb 6-1: SerialNumber: syz [ 418.963847][ T5909] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 418.983600][T11302] usb 1-1: USB disconnect, device number 49 [ 419.048230][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 419.251063][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 419.349752][ T5950] usb 5-1: USB disconnect, device number 61 [ 419.464339][ T796] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 419.478964][ T5887] usb 6-1: USB disconnect, device number 49 [ 419.832530][ T5950] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 419.899929][ T796] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 419.956614][T11673] FAULT_INJECTION: forcing a failure. [ 419.956614][T11673] name failslab, interval 1, probability 0, space 0, times 0 [ 419.970144][T11673] CPU: 1 UID: 0 PID: 11673 Comm: syz.4.1666 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.970171][T11673] Tainted: [L]=SOFTLOCKUP [ 419.970177][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.970196][T11673] Call Trace: [ 419.970205][T11673] [ 419.970212][T11673] dump_stack_lvl+0xe8/0x150 [ 419.970245][T11673] should_fail_ex+0x412/0x560 [ 419.970276][T11673] should_failslab+0xa8/0x100 [ 419.970299][T11673] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 419.970323][T11673] ? __alloc_skb+0x1d0/0x7d0 [ 419.970342][T11673] ? __local_bh_enable_ip+0xd0/0x130 [ 419.970368][T11673] __alloc_skb+0x1d0/0x7d0 [ 419.970390][T11673] xfrm_send_state_notify+0x884/0x18d0 [ 419.970421][T11673] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 419.970449][T11673] ? km_state_notify+0x25/0x1f0 [ 419.970470][T11673] ? km_state_notify+0x25/0x1f0 [ 419.970491][T11673] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 419.970512][T11673] km_state_notify+0x110/0x1f0 [ 419.970536][T11673] xfrm_add_sa+0x389b/0x4230 [ 419.970569][T11673] ? __pfx_xfrm_add_sa+0x10/0x10 [ 419.970591][T11673] ? apparmor_capable+0x126/0x170 [ 419.970613][T11673] ? __nla_parse+0x40/0x60 [ 419.970635][T11673] xfrm_user_rcv_msg+0x746/0xb20 [ 419.970663][T11673] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 419.970716][T11673] ? __pfx___mutex_trylock_common+0x10/0x10 [ 419.970748][T11673] ? rcu_is_watching+0x15/0xb0 [ 419.970774][T11673] ? trace_contention_end+0x3d/0x150 [ 419.970801][T11673] ? __mutex_lock+0x319/0x1300 [ 419.970829][T11673] netlink_rcv_skb+0x232/0x4b0 [ 419.970863][T11673] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 419.970889][T11673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.970928][T11673] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.970953][T11673] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.970981][T11673] xfrm_netlink_rcv+0x79/0x90 [ 419.971005][T11673] netlink_unicast+0x80f/0x9b0 [ 419.971036][T11673] ? __pfx_netlink_unicast+0x10/0x10 [ 419.971061][T11673] ? netlink_sendmsg+0x650/0xb40 [ 419.971077][T11673] ? skb_put+0x11b/0x210 [ 419.971100][T11673] netlink_sendmsg+0x813/0xb40 [ 419.971125][T11673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.971145][T11673] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.971172][T11673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.971205][T11673] ____sys_sendmsg+0x972/0x9f0 [ 419.971236][T11673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.971267][T11673] ? import_iovec+0x73/0xa0 [ 419.971292][T11673] ___sys_sendmsg+0x2a5/0x360 [ 419.971319][T11673] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.971376][T11673] ? __fget_files+0x2a/0x420 [ 419.971403][T11673] ? __fget_files+0x3a0/0x420 [ 419.971439][T11673] __x64_sys_sendmsg+0x1bd/0x2a0 [ 419.971463][T11673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.971491][T11673] ? __pfx_ksys_write+0x10/0x10 [ 419.971522][T11673] do_syscall_64+0x14d/0xf80 [ 419.971542][T11673] ? trace_irq_disable+0x3b/0x150 [ 419.971569][T11673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.971587][T11673] ? clear_bhb_loop+0x40/0x90 [ 419.971611][T11673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.971630][T11673] RIP: 0033:0x7f68f6d9c799 [ 419.971649][T11673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.971665][T11673] RSP: 002b:00007f68f7c3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.971685][T11673] RAX: ffffffffffffffda RBX: 00007f68f7015fa0 RCX: 00007f68f6d9c799 [ 419.971698][T11673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 419.971710][T11673] RBP: 00007f68f7c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 419.971721][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.971733][T11673] R13: 00007f68f7016038 R14: 00007f68f7015fa0 R15: 00007f68f713fa48 [ 419.971763][T11673] [ 419.979812][ T796] em28xx 3-1:0.0: board has no eeprom [ 420.183572][ T5950] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 420.183602][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.186314][ T5950] usb 2-1: config 0 descriptor?? [ 420.188783][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 420.404266][ T10] ath9k_htc: Failed to initialize the device [ 420.417656][ T5887] usb 6-1: ath9k_htc: USB layer deinitialized [ 420.562367][ T796] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 420.573030][ T796] em28xx 3-1:0.0: dvb set to bulk mode. [ 420.579658][T11302] em28xx 3-1:0.0: Binding DVB extension [ 420.682281][ T5913] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 420.731307][ T5887] usb 3-1: USB disconnect, device number 60 [ 420.775777][ T5950] usb 2-1: Cannot set MAC address [ 420.839631][ T5950] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 420.864474][ T5887] em28xx 3-1:0.0: Disconnecting em28xx [ 420.903513][ T5913] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 420.912994][ T5950] usb 2-1: USB disconnect, device number 57 [ 420.925937][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.985133][ T5913] usb 5-1: Product: syz [ 421.011190][ T5913] usb 5-1: Manufacturer: syz [ 421.014692][T11302] em28xx 3-1:0.0: Registering input extension [ 421.026464][ T5913] usb 5-1: SerialNumber: syz [ 421.031390][ T5887] em28xx 3-1:0.0: Closing input extension [ 421.043249][ T5913] usb 5-1: config 0 descriptor?? [ 421.063025][ T5887] em28xx 3-1:0.0: Freeing device [ 421.508189][ T5913] usb 5-1: Firmware: major: 229, minor: 18, hardware type: UNKNOWN (84) [ 421.572874][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 421.572890][ T30] audit: type=1326 audit(1774286951.255:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 421.833039][ T5913] usb 5-1: Firmware: build è© [ 421.944505][ T30] audit: type=1326 audit(1774286951.255:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 421.998294][T11703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1676'. [ 422.012041][ T30] audit: type=1326 audit(1774286951.255:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 422.030286][ T5913] usb 5-1: failed to fetch extended address, random address set [ 422.062085][ T5950] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 422.071155][ T5913] usb 5-1: atusb_probe: initialization failed, error = -524 [ 422.083147][ T5913] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 422.115918][ T5913] usb 5-1: USB disconnect, device number 62 [ 422.166568][ T30] audit: type=1326 audit(1774286951.255:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 422.257025][ T30] audit: type=1326 audit(1774286951.255:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 422.284059][ T5950] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.294038][ T5950] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.370079][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 422.380003][T11715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1679'. [ 422.394132][ T5950] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.403587][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.549721][ T30] audit: type=1326 audit(1774286951.255:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 422.617494][ T5950] usb 2-1: usb_control_msg returned -32 [ 422.637720][ T5950] usbtmc 2-1:16.0: can't read capabilities [ 422.890285][ T30] audit: type=1326 audit(1774286951.255:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 423.151468][ T30] audit: type=1326 audit(1774286951.255:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 423.205723][ T30] audit: type=1326 audit(1774286951.255:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 423.340177][ T30] audit: type=1326 audit(1774286951.255:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.5.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 423.982294][ T5913] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 424.132371][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 424.140972][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 424.157492][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 424.179778][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.218619][ T5913] usb 5-1: Product: syz [ 424.226554][ T5913] usb 5-1: Manufacturer: syz [ 424.231176][ T5913] usb 5-1: SerialNumber: syz [ 424.267123][ T5913] usb 5-1: config 0 descriptor?? [ 424.286421][ T5913] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 424.315743][ T5913] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 424.494589][ T5950] usb 2-1: USB disconnect, device number 58 [ 424.626176][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1691'. [ 424.635350][T11752] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1691'. [ 424.982956][ T5913] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 425.093601][T11748] kvm: kvm [11747]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 425.107538][T11748] kvm: kvm [11747]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 425.121095][T11748] kvm: kvm [11747]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 425.698322][ T5913] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 425.706604][ T5913] em28xx 5-1:0.0: board has no eeprom [ 425.724533][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'. [ 426.034141][ T5913] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 426.042220][ T5913] em28xx 5-1:0.0: dvb set to bulk mode. [ 426.052144][ T5950] em28xx 5-1:0.0: Binding DVB extension [ 426.163468][T11302] usb 5-1: USB disconnect, device number 63 [ 426.188377][T11302] em28xx 5-1:0.0: Disconnecting em28xx [ 426.283824][ T5950] em28xx 5-1:0.0: Registering input extension [ 426.291120][T11302] em28xx 5-1:0.0: Closing input extension [ 426.355329][T11302] em28xx 5-1:0.0: Freeing device [ 426.942108][ T5913] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 427.092377][ T5950] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 427.092377][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 427.204840][ T5913] usb 3-1: Invalid ep0 maxpacket: 16 [ 427.442098][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 427.449822][ T5950] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.465513][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.474808][ T10] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 427.479353][ T5950] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.496249][ T5913] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 427.569797][ T5950] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.581533][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.741794][ T10] usb 1-1: config 13 has no interface number 0 [ 427.762101][ T5913] usb 3-1: Invalid ep0 maxpacket: 16 [ 427.768837][ T10] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 427.769123][ T5913] usb usb3-port1: attempt power cycle [ 427.850358][ T10] usb 1-1: config 13 interface 50 has no altsetting 0 [ 427.912859][ T10] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 427.942334][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.950844][ T10] usb 1-1: Product: syz [ 428.020995][ T10] usb 1-1: Manufacturer: syz [ 428.026833][ T5950] usb 6-1: usb_control_msg returned -32 [ 428.042147][ T10] usb 1-1: SerialNumber: syz [ 428.045880][ T5950] usbtmc 6-1:16.0: can't read capabilities [ 428.073440][T11790] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 428.219917][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 428.222159][ T5913] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 428.418783][ T5913] usb 3-1: Invalid ep0 maxpacket: 16 [ 428.552135][ T5913] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 428.572865][ T5913] usb 3-1: Invalid ep0 maxpacket: 16 [ 428.578681][ T5913] usb usb3-port1: unable to enumerate USB device [ 428.678444][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.685739][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 428.767923][ T10] usb 1-1: USB disconnect, device number 50 [ 428.783341][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1712'. [ 428.889162][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1713'. [ 428.891681][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.242087][ T796] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 429.249758][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 429.402082][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 429.411938][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 429.422067][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 429.430037][ T796] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 429.439411][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 429.447721][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.456761][ T796] usb 2-1: Product: syz [ 429.461065][ T10] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 429.469604][ T10] usb 1-1: config 13 has no interface number 0 [ 429.475813][ T796] usb 2-1: Manufacturer: syz [ 429.482835][ T796] usb 2-1: SerialNumber: syz [ 429.487943][ T10] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 429.505888][ T796] usb 2-1: config 0 descriptor?? [ 429.516025][ T10] usb 1-1: config 13 interface 50 has no altsetting 0 [ 429.533471][ T796] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 429.546758][ T10] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 429.560575][ T796] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 429.567350][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.576209][ T10] usb 1-1: Product: syz [ 429.580455][ T10] usb 1-1: Manufacturer: syz [ 429.585839][ T10] usb 1-1: SerialNumber: syz [ 429.600766][ T5950] usb 6-1: USB disconnect, device number 50 [ 429.611496][T11785] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 429.906239][T11785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.935627][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.942726][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 430.006667][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1717'. [ 430.077680][ T10] usb 1-1: USB disconnect, device number 51 [ 430.156132][ T796] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 430.399423][ T6386] udevd[6386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.581449][ T796] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 430.589618][ T796] em28xx 2-1:0.0: board has no eeprom [ 430.845737][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 430.845784][ T30] audit: type=1326 audit(1774286960.505:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 430.912210][ T796] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 430.932449][ T796] em28xx 2-1:0.0: dvb set to bulk mode. [ 430.952091][ T10] em28xx 2-1:0.0: Binding DVB extension [ 431.025485][ T5950] usb 2-1: USB disconnect, device number 59 [ 431.053200][ T5950] em28xx 2-1:0.0: Disconnecting em28xx [ 431.075437][ T30] audit: type=1326 audit(1774286960.505:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 431.284510][ T10] em28xx 2-1:0.0: Registering input extension [ 431.372558][ T5950] em28xx 2-1:0.0: Closing input extension [ 431.742563][ T5950] em28xx 2-1:0.0: Freeing device [ 431.748998][ T30] audit: type=1326 audit(1774286960.505:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 431.932250][ T30] audit: type=1326 audit(1774286960.505:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 432.042148][ T30] audit: type=1326 audit(1774286960.505:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 432.132110][ T30] audit: type=1326 audit(1774286960.505:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 432.205273][T11861] usb usb8: selecting invalid altsetting 2047 [ 432.235854][ T30] audit: type=1326 audit(1774286960.505:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 432.366531][ T30] audit: type=1326 audit(1774286960.505:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 432.400402][ T30] audit: type=1326 audit(1774286960.505:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 432.439069][ T30] audit: type=1326 audit(1774286960.505:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.5.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec79c799 code=0x7ffc0000 [ 432.722366][ T797] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 432.723537][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 432.745208][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 432.883885][ T797] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.893160][ T797] usb 1-1: config 0 has no interface number 0 [ 432.912656][ T797] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 432.921756][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.930850][ T797] usb 1-1: Product: syz [ 432.935360][ T797] usb 1-1: Manufacturer: syz [ 432.940263][ T797] usb 1-1: SerialNumber: syz [ 432.964004][ T797] usb 1-1: config 0 descriptor?? [ 433.082247][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 433.262138][ T797] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 433.275746][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 433.285677][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 433.293034][ T797] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 433.376126][ T10] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 433.401118][ T10] usb 5-1: config 220 has no interface number 2 [ 433.427972][ T797] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 433.683459][ T797] usb 1-1: media controller created [ 433.691878][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 433.740264][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.759949][T11904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.835913][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 433.869507][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 433.890357][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 433.910125][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 433.920567][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.938455][T11904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.949489][ T10] usb 5-1: Product: syz [ 433.956351][ T10] usb 5-1: Manufacturer: syz [ 433.969353][ T10] usb 5-1: SerialNumber: syz [ 434.162163][ T5887] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 434.325096][ T10] usb 5-1: selecting invalid altsetting 0 [ 434.336662][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 434.356689][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 434.364705][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.378741][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 434.392742][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 434.403737][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.417692][ T5887] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.427275][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.429529][ T10] usb 5-1: selecting invalid altsetting 0 [ 434.462458][ T5887] usb 6-1: config 0 descriptor?? [ 434.477740][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 434.524140][ T10] usb 5-1: USB disconnect, device number 64 [ 434.687471][T11910] trusted_key: syz.5.1739 sent an empty control message without MSG_MORE. [ 434.737343][ T5887] usbhid 6-1:0.0: can't add hid device: -71 [ 434.759017][ T5887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 434.816700][ T5887] usb 6-1: USB disconnect, device number 51 [ 434.989419][T11922] program syz.5.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.203984][ T797] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 435.310370][ T797] usb 1-1: USB disconnect, device number 52 [ 435.721364][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 435.916753][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1746'. [ 435.990101][T11931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.324402][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 436.882892][T11953] tipc: Enabling of bearer rejected, failed to enable media [ 437.199470][T11957] fuse: Bad value for 'group_id' [ 437.211435][T11957] fuse: Bad value for 'group_id' [ 437.277829][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1755'. [ 437.452086][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 437.604298][ T10] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 437.636092][ T10] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 437.674247][ T10] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=e5.46 [ 437.735755][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.754766][ T10] usb 2-1: Product: syz [ 437.765859][ T10] usb 2-1: Manufacturer: syz [ 437.775780][ T10] usb 2-1: SerialNumber: syz [ 437.988226][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 437.997387][T11971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1759'. [ 438.021804][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 438.225640][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 438.249470][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 438.271876][ T10] usb 2-1: media controller created [ 438.296959][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.462446][ T797] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 438.485248][ T10] DVB: Unable to find symbol mt352_attach() [ 438.632196][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 438.644194][ T797] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.645483][ T10] DVB: Unable to find symbol nxt6000_attach() [ 438.666490][ T797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.679162][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 438.729230][ T797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.731574][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 438.773983][ T797] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.796555][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 438.804842][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 438.815310][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 438.832122][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 438.838293][ T797] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.857841][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.965312][T11991] program syz.2.1766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.071624][ T10] usb 2-1: USB disconnect, device number 60 [ 439.076725][ T797] usb 1-1: GET_CAPABILITIES returned 0 [ 439.076774][ T797] usbtmc 1-1:16.0: can't read capabilities [ 439.603548][ T797] usb 1-1: USB disconnect, device number 53 [ 439.699870][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 439.832700][ T5913] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 439.903913][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1769'. [ 439.948497][T12001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1769'. [ 439.964527][T12001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.053673][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 440.065952][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 440.087116][ T5913] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 440.108233][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.132863][ T5913] usb 5-1: Product: syz [ 440.146638][ T5913] usb 5-1: Manufacturer: syz [ 440.164960][ T5913] usb 5-1: SerialNumber: syz [ 440.196904][ T5913] usb 5-1: config 0 descriptor?? [ 440.271677][ T5913] hub 5-1:0.0: bad descriptor, ignoring hub [ 440.291914][ T5913] hub 5-1:0.0: probe with driver hub failed with error -5 [ 440.327485][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.409840][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.425900][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.566165][T11997] kvm: kvm [11996]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 440.721750][T11997] kvm: kvm [11996]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 440.756026][T12006] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:0 [ 441.085633][ T10] usb 5-1: USB disconnect, device number 65 [ 441.552111][ T5913] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 441.683394][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 441.702435][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 441.724793][ T5913] usb 1-1: config index 0 descriptor too short (expected 51726, got 36) [ 441.734130][ T5913] usb 1-1: config 81 has too many interfaces: 239, using maximum allowed: 32 [ 441.746113][ T5913] usb 1-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 441.758909][ T5913] usb 1-1: config 81 has 0 interfaces, different from the descriptor's value: 239 [ 441.799260][ T5913] usb 1-1: New USB device found, idVendor=b3f0, idProduct=845d, bcdDevice=94.f8 [ 441.808821][ T5913] usb 1-1: New USB device strings: Mfr=68, Product=65, SerialNumber=247 [ 441.821678][ T5913] usb 1-1: Product: syz [ 441.826935][ T5913] usb 1-1: Manufacturer: syz [ 441.833816][ T5913] usb 1-1: SerialNumber: syz [ 441.863461][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 441.898603][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 441.932284][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 441.945072][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.957503][T12016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 441.986783][ T10] usb 3-1: Product: syz [ 441.991005][ T10] usb 3-1: Manufacturer: syz [ 442.008800][ T10] usb 3-1: SerialNumber: syz [ 442.028587][T12016] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 442.060809][ T10] usb 3-1: config 0 descriptor?? [ 442.088720][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 442.116809][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 442.191743][T12024] fuse: Unknown parameter 'f® n÷CKá©›C ¤d50x0000000000000005' [ 442.418360][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1777'. [ 442.688576][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 443.447693][T12051] netlink: 'syz.5.1785': attribute type 10 has an invalid length. [ 443.469421][T12051] .`: (slave bridge0): Enslaving as an active interface with an up link [ 443.595193][T11302] usb 1-1: USB disconnect, device number 54 [ 443.614101][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 443.624589][ T10] em28xx 3-1:0.0: board has no eeprom [ 443.885125][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.972097][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 443.980081][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 443.985818][ T5909] em28xx 3-1:0.0: Binding DVB extension [ 444.084124][ T10] usb 3-1: USB disconnect, device number 65 [ 444.147381][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 444.226786][ T5909] em28xx 3-1:0.0: Registering input extension [ 444.244745][ T10] em28xx 3-1:0.0: Closing input extension [ 444.275548][ T10] em28xx 3-1:0.0: Freeing device [ 445.004883][T12103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.114698][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 446.178615][T12121] tipc: Can't bind to reserved service type 1 [ 446.592075][ T797] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 446.772045][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 446.803184][ T797] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 446.811343][ T797] usb 5-1: config 0 has no interface number 0 [ 446.812155][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 446.836960][ T797] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 446.846581][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.865063][ T797] usb 5-1: Product: syz [ 446.879475][ T797] usb 5-1: Manufacturer: syz [ 446.892039][ T797] usb 5-1: SerialNumber: syz [ 446.972388][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 446.982411][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 446.982934][ T797] usb 5-1: config 0 descriptor?? [ 447.008508][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.022060][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.044763][ T10] usb 6-1: Product: syz [ 447.054449][ T10] usb 6-1: Manufacturer: syz [ 447.067265][ T10] usb 6-1: SerialNumber: syz [ 447.096776][ T10] usb 6-1: config 0 descriptor?? [ 447.119827][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.149843][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 447.447592][ T797] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 447.467643][ T797] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 447.719134][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 447.852857][ T797] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 447.877710][ T797] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 447.911916][ T797] usb 5-1: USB disconnect, device number 66 [ 448.134771][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 448.153579][ T10] em28xx 6-1:0.0: board has no eeprom [ 448.442094][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 448.450346][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 448.457109][ T796] em28xx 6-1:0.0: Binding DVB extension [ 448.612417][ T10] usb 6-1: USB disconnect, device number 52 [ 448.684730][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 448.832265][ T5913] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 448.860079][ T796] em28xx 6-1:0.0: Registering input extension [ 448.876045][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 448.894983][ T10] em28xx 6-1:0.0: Closing input extension [ 449.125640][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 449.141365][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.147555][ T10] em28xx 6-1:0.0: Freeing device [ 449.152408][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.196473][ T5913] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 449.206830][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.299050][ T5913] usb 2-1: Product: syz [ 449.308979][ T5913] usb 2-1: Manufacturer: syz [ 449.319136][ T5913] usb 2-1: SerialNumber: syz [ 449.423612][ T5913] usb 2-1: config 0 descriptor?? [ 449.802301][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 449.882816][T12166] IPVS: sh: FWM 3 0x00000003 - no destination available [ 449.945594][ T5913] IPVS: starting estimator thread 0... [ 449.982434][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 449.996409][T12169] trusted_key: encrypted_key: insufficient parameters specified [ 450.005532][T12169] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1821'. [ 450.041849][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 450.042578][T12174] IPVS: using max 38 ests per chain, 91200 per kthread [ 450.056430][ T10] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 450.058994][ T10] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 450.108864][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.129368][ T10] usb 6-1: Product: syz [ 450.139777][ T10] usb 6-1: Manufacturer: syz [ 450.151317][ T10] usb 6-1: SerialNumber: syz [ 450.192757][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.192757][T12178] Use struct sctp_sack_info instead [ 450.229306][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1823'. [ 450.280648][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.280648][T12178] Use struct sctp_sack_info instead [ 450.304966][T12180] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1823'. [ 450.458143][ T10] usb 6-1: Limiting number of CPorts to U8_MAX [ 450.487280][ T10] usb 6-1: Not enough endpoints found in device, aborting! [ 450.533128][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.533128][T12178] Use struct sctp_sack_info instead [ 450.715025][T12164] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1818'. [ 450.752236][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.752236][T12178] Use struct sctp_sack_info instead [ 450.796543][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.796543][T12178] Use struct sctp_sack_info instead [ 450.872499][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.872499][T12178] Use struct sctp_sack_info instead [ 451.049088][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.049088][T12178] Use struct sctp_sack_info instead [ 451.049204][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.049204][T12178] Use struct sctp_sack_info instead [ 451.049247][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.049247][T12178] Use struct sctp_sack_info instead [ 451.049288][T12178] sctp: [Deprecated]: syz.0.1822 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.049288][T12178] Use struct sctp_sack_info instead [ 451.139976][ T12] IPVS: stop unused estimator thread 0... [ 452.662447][ T5913] usb 2-1: USB disconnect, device number 61 [ 452.817265][ T5887] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 453.040078][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 453.188419][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 453.238616][ T5887] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 453.258413][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.278551][ T5887] usb 5-1: Product: syz [ 453.289479][ T5887] usb 5-1: Manufacturer: syz [ 453.294197][ T5887] usb 5-1: SerialNumber: syz [ 453.359337][ T5887] usb 5-1: config 0 descriptor?? [ 453.383920][ T5887] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 453.415197][ T5887] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 453.515938][ T797] usb 6-1: USB disconnect, device number 53 [ 453.585940][T12208] tipc: Enabling of bearer rejected, failed to enable media [ 453.645143][T12204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.994027][ T5887] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 454.014092][T12215] netlink: 'syz.5.1832': attribute type 3 has an invalid length. [ 454.022183][T12215] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1832'. [ 454.283630][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 454.303675][T12220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.435118][ T5887] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 454.467776][ T5887] em28xx 5-1:0.0: board has no eeprom [ 454.832350][ T5887] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 454.854768][ T5887] em28xx 5-1:0.0: dvb set to bulk mode. [ 454.872137][ T797] em28xx 5-1:0.0: Binding DVB extension [ 455.170828][ T5887] usb 5-1: USB disconnect, device number 67 [ 455.286580][ T5887] em28xx 5-1:0.0: Disconnecting em28xx [ 455.343531][ T797] em28xx 5-1:0.0: Registering input extension [ 455.354211][ T5887] em28xx 5-1:0.0: Closing input extension [ 455.793717][ T5887] em28xx 5-1:0.0: Freeing device [ 455.816544][T12234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.823237][T12234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.830145][T12234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.836991][T12234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 456.162178][ T796] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 456.209750][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 456.530827][ T796] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 456.542376][ T796] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 456.582886][ T796] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 456.635997][ T796] usb 3-1: config 150 has no interface number 0 [ 456.642103][ T5887] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 456.685152][ T796] usb 3-1: config 150 interface 204 has no altsetting 0 [ 456.704552][ T796] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 456.715120][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.727152][ T796] usb 3-1: Product: syz [ 456.731585][ T796] usb 3-1: Manufacturer: syz [ 456.742711][ T796] usb 3-1: SerialNumber: syz [ 456.822060][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 456.835958][ T5887] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 456.847146][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.855667][ T5887] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 456.871703][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.042200][ T10] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 457.082880][ T5887] usb 5-1: config 0 descriptor?? [ 457.232118][ T10] usb 2-1: device descriptor read/64, error -71 [ 457.517248][ T10] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 457.671570][ T10] usb 2-1: device descriptor read/64, error -71 [ 458.010177][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 458.012397][ T10] usb usb2-port1: attempt power cycle [ 458.016360][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 458.027874][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 458.034050][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 458.429872][ T10] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 458.463575][ T10] usb 2-1: device descriptor read/8, error -71 [ 458.792116][ T10] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 458.814296][ T10] usb 2-1: device descriptor read/8, error -71 [ 458.932438][ T10] usb usb2-port1: unable to enumerate USB device [ 458.995356][ T796] usb 3-1: USB disconnect, device number 66 [ 459.135038][T12270] usb usb8: selecting invalid altsetting 2047 [ 459.295899][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 459.308241][ T30] audit: type=1326 audit(1774286989.015:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.0.1848" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3aee39c799 code=0x0 [ 459.525511][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 459.532304][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 459.584960][ T5887] usb 5-1: USB disconnect, device number 68 [ 459.680286][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 459.689919][T12284] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1850'. [ 459.739463][T12286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1852'. [ 459.766368][T12286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1852'. [ 460.041865][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'. [ 460.191134][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 460.732126][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 460.912148][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 461.006666][T12320] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1862'. [ 461.128216][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 461.213955][ T10] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 461.240992][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.413117][ T10] usb 5-1: Product: syz [ 461.422041][ T10] usb 5-1: Manufacturer: syz [ 461.429324][ T10] usb 5-1: SerialNumber: syz [ 461.462102][ T10] usb 5-1: config 0 descriptor?? [ 461.488367][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 461.650146][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 461.707606][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.962452][ T10] usb 5-1: USB disconnect, device number 69 [ 462.084218][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.079030][ T5913] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 463.248972][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 463.258144][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 463.261559][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 463.360149][T12362] netlink: 'syz.0.1872': attribute type 4 has an invalid length. [ 463.437638][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 463.462273][ T5913] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 463.471516][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.635944][ T5913] usb 2-1: Product: syz [ 463.645384][ T5913] usb 2-1: Manufacturer: syz [ 463.662201][ T5913] usb 2-1: SerialNumber: syz [ 463.676913][ T5913] usb 2-1: config 0 descriptor?? [ 463.703702][ T5913] hub 2-1:0.0: bad descriptor, ignoring hub [ 463.709773][ T5913] hub 2-1:0.0: probe with driver hub failed with error -5 [ 463.844179][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.008287][T12349] kvm: kvm [12342]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 464.138052][T12374] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 464.280972][T12349] kvm: kvm [12342]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 464.725169][ T10] usb 2-1: USB disconnect, device number 66 [ 464.888619][ T796] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 465.675090][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 465.686856][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 465.711328][ T796] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 465.721616][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.730565][ T796] usb 5-1: Product: syz [ 465.738504][ T796] usb 5-1: Manufacturer: syz [ 465.745459][ T796] usb 5-1: SerialNumber: syz [ 465.759618][ T796] usb 5-1: config 0 descriptor?? [ 465.767933][ T796] hub 5-1:0.0: bad descriptor, ignoring hub [ 465.806040][ T796] hub 5-1:0.0: probe with driver hub failed with error -5 [ 465.808885][ T796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.841005][T12392] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 466.048281][T12396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1882'. [ 466.156365][T12396] bond2: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 466.553088][T12396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1882'. [ 466.612579][T12396] bond2: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 466.756458][ T10] usb 5-1: USB disconnect, device number 70 [ 466.905328][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 466.933514][T12406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.432263][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 467.644466][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 467.652270][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 467.661303][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.782357][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 467.791402][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.804319][ T5913] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 467.888221][ T10] usb 2-1: config 1 interface 1 has no altsetting 0 [ 467.963271][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 467.982078][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.986897][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.990117][ T10] usb 2-1: Product: syz [ 468.051396][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.115448][ T10] usb 2-1: Manufacturer: syz [ 468.122219][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.151294][ T10] usb 2-1: SerialNumber: syz [ 468.200039][ T10] usb 2-1: interface 2 not found [ 468.205432][ T5913] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.205466][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.245633][ T5913] usb 3-1: config 0 descriptor?? [ 468.310140][ T10] usb 2-1: selecting invalid altsetting 0 [ 468.371647][ T10] usb 2-1: selecting invalid altsetting 0 [ 468.414593][ T10] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 468.443208][ T10] usb 2-1: selecting invalid altsetting 0 [ 468.449093][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 468.508881][ T10] usb 2-1: selecting invalid altsetting 0 [ 468.508927][ T10] snd-ua101 2-1:1.1: probe with driver snd-ua101 failed with error -22 [ 468.513064][ T10] usb 2-1: USB disconnect, device number 67 [ 468.527254][T12431] tipc: Enabling of bearer rejected, already enabled [ 468.873801][T12414] fuse: Bad value for 'user_id' [ 468.878731][T12414] fuse: Bad value for 'user_id' [ 468.892785][ T5913] usbhid 3-1:0.0: can't add hid device: -71 [ 468.919602][ T5913] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 468.980853][ T5913] usb 3-1: USB disconnect, device number 67 [ 469.106772][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1899'. [ 469.367273][T12454] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1903'. [ 469.501883][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 469.511025][T12468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1904'. [ 469.541418][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 469.555979][T12470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.682232][ T10] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 469.856017][ T10] usb 1-1: config 251 has an invalid interface number: 243 but max is 0 [ 469.865351][ T10] usb 1-1: config 251 has no interface number 0 [ 469.873116][ T10] usb 1-1: config 251 interface 243 has no altsetting 0 [ 469.905864][ T10] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 469.922214][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.931402][ T10] usb 1-1: Product: syz [ 469.936978][ T10] usb 1-1: Manufacturer: syz [ 469.950919][ T10] usb 1-1: SerialNumber: syz [ 469.992953][ T796] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 470.222457][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 470.239284][ T796] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 470.253777][T12473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.265865][T12473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.354368][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.361068][ T796] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 470.400818][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.478948][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1909'. [ 470.496774][ T796] usb 3-1: config 0 descriptor?? [ 470.522234][T12476] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1909'. [ 470.542514][T12476] vlan6: entered allmulticast mode [ 472.566244][ T10] sisusb 1-1:251.243: Invalid USB2VGA device [ 472.592211][ T10] sisusb 1-1:251.243: probe with driver sisusb failed with error -22 [ 472.605407][ T10] usb 1-1: USB disconnect, device number 55 [ 472.919284][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'. [ 472.945189][T12512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.982204][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 472.996023][ T30] audit: type=1326 audit(1774287002.715:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.152572][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 473.164954][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 473.176714][ T30] audit: type=1326 audit(1774287002.745:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.204619][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.228284][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.254144][ T30] audit: type=1326 audit(1774287002.745:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.276946][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.305619][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.337144][ T30] audit: type=1326 audit(1774287002.745:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.364530][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 473.394609][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.417636][ T30] audit: type=1326 audit(1774287002.745:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.482724][ T30] audit: type=1326 audit(1774287002.745:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.616606][ T30] audit: type=1326 audit(1774287002.745:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.639826][ T10] usb 1-1: usb_control_msg returned -32 [ 473.645909][ T10] usbtmc 1-1:16.0: can't read capabilities [ 473.752568][ T30] audit: type=1326 audit(1774287002.965:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.814990][ T30] audit: type=1326 audit(1774287002.965:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.857226][ T796] usbhid 3-1:0.0: can't add hid device: -71 [ 473.863566][ T796] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 473.894042][ T796] usb 3-1: USB disconnect, device number 68 [ 473.911433][ T30] audit: type=1326 audit(1774287002.965:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12507 comm="syz.4.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f6d9c799 code=0x7ffc0000 [ 473.946668][T12519] netlink: 780 bytes leftover after parsing attributes in process `syz.4.1924'. [ 473.956397][T12519] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 473.986874][T12519] netlink: 780 bytes leftover after parsing attributes in process `syz.4.1924'. [ 474.003003][ T5913] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 474.012151][T12522] usbtmc 1-1:16.0: control status returned a9 [ 474.028873][T12519] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 474.054214][T12522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.109723][T12522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.192306][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 474.199322][ T5913] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 474.219625][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.224953][ T796] usb 1-1: USB disconnect, device number 56 [ 474.276815][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400 [ 474.303148][ T5913] pvrusb2: ********** [ 474.307189][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 474.307211][ T5913] pvrusb2: Important functionality might not be entirely working. [ 474.307221][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 474.307233][ T5913] pvrusb2: ********** [ 474.395777][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 474.395807][T12535] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1929'. [ 474.414088][T12535] vlan6: entered allmulticast mode [ 474.477338][ T2346] pvrusb2: Invalid write control endpoint [ 474.571054][ T2346] pvrusb2: Invalid write control endpoint [ 474.578153][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 474.590735][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 474.600411][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 474.611001][ T2346] pvrusb2: Device being rendered inoperable [ 474.636971][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 474.653465][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 474.694150][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1922'. [ 474.709548][ T5913] usb 6-1: USB disconnect, device number 54 [ 474.715578][ T2346] pvrusb2: Attached sub-driver cx25840 [ 474.715649][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 474.715660][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 474.942755][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 475.003995][T12550] loop5: detected capacity change from 0 to 7 [ 475.011294][T12550] Dev loop5: unable to read RDB block 7 [ 475.021271][T12550] loop5: unable to read partition table [ 475.028628][T12550] loop5: partition table beyond EOD, truncated [ 475.039212][T12550] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 475.214676][T12556] FAULT_INJECTION: forcing a failure. [ 475.214676][T12556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.233476][T12556] CPU: 1 UID: 0 PID: 12556 Comm: syz.1.1937 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.233504][T12556] Tainted: [L]=SOFTLOCKUP [ 475.233511][T12556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.233522][T12556] Call Trace: [ 475.233530][T12556] [ 475.233538][T12556] dump_stack_lvl+0xe8/0x150 [ 475.233590][T12556] should_fail_ex+0x412/0x560 [ 475.233620][T12556] _copy_from_iter+0x1d3/0x1670 [ 475.233650][T12556] ? rcu_is_watching+0x15/0xb0 [ 475.233680][T12556] ? __pfx__copy_from_iter+0x10/0x10 [ 475.233708][T12556] ? netlink_sendmsg+0x650/0xb40 [ 475.233723][T12556] ? skb_put+0x11b/0x210 [ 475.233743][T12556] netlink_sendmsg+0x6c0/0xb40 [ 475.233768][T12556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.233795][T12556] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.233820][T12556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.233850][T12556] ____sys_sendmsg+0x972/0x9f0 [ 475.233878][T12556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.233906][T12556] ? import_iovec+0x73/0xa0 [ 475.233929][T12556] ___sys_sendmsg+0x2a5/0x360 [ 475.233953][T12556] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.234001][T12556] ? __fget_files+0x2a/0x420 [ 475.234024][T12556] ? __fget_files+0x3a0/0x420 [ 475.234056][T12556] __x64_sys_sendmsg+0x1bd/0x2a0 [ 475.234080][T12556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.234107][T12556] ? __pfx_ksys_write+0x10/0x10 [ 475.234136][T12556] do_syscall_64+0x14d/0xf80 [ 475.234156][T12556] ? trace_irq_disable+0x3b/0x150 [ 475.234180][T12556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.234199][T12556] ? clear_bhb_loop+0x40/0x90 [ 475.234219][T12556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.234237][T12556] RIP: 0033:0x7f86b619c799 [ 475.234256][T12556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.234272][T12556] RSP: 002b:00007f86b709e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.234293][T12556] RAX: ffffffffffffffda RBX: 00007f86b6415fa0 RCX: 00007f86b619c799 [ 475.234310][T12556] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 475.234321][T12556] RBP: 00007f86b709e090 R08: 0000000000000000 R09: 0000000000000000 [ 475.234333][T12556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.234345][T12556] R13: 00007f86b6416038 R14: 00007f86b6415fa0 R15: 00007f86b653fa48 [ 475.234372][T12556] [ 475.778968][T12561] fuse: Bad value for 'fd' [ 475.809410][T12568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1941'. [ 475.841604][T12569] program syz.5.1939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.021283][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 476.411477][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 476.463741][T12597] [ 476.466174][T12597] ===================================================== [ 476.473091][T12597] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 476.480683][T12597] syzkaller #0 Tainted: G L [ 476.486756][T12597] ----------------------------------------------------- [ 476.493874][T12597] syz.4.1951/12597 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 476.501680][T12597] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 476.510377][T12597] [ 476.510377][T12597] and this task is already holding: [ 476.517878][T12597] ffff888041ae4620 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 476.526506][T12597] which would create a new lock dependency: [ 476.532388][T12597] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 476.540046][T12597] [ 476.540046][T12597] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 476.549672][T12597] (&dev->event_lock#2){..-.}-{3:3} [ 476.549710][T12597] [ 476.549710][T12597] ... which became SOFTIRQ-irq-safe at: [ 476.562595][T12597] lock_acquire+0xf0/0x2e0 [ 476.567188][T12597] _raw_spin_lock_irqsave+0x40/0x60 [ 476.572549][T12597] input_event+0x76/0xe0 [ 476.576872][T12597] atp_complete_geyser_3_4+0x114e/0x1d90 [ 476.582630][T12597] __usb_hcd_giveback_urb+0x376/0x540 [ 476.589051][T12597] dummy_timer+0xbbd/0x45d0 [ 476.593743][T12597] __hrtimer_run_queues+0x53a/0xcc0 [ 476.599109][T12597] hrtimer_run_softirq+0x182/0x5a0 [ 476.604304][T12597] handle_softirqs+0x22a/0x870 [ 476.609143][T12597] __irq_exit_rcu+0x5f/0x150 [ 476.613819][T12597] irq_exit_rcu+0x9/0x30 [ 476.618169][T12597] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 476.624001][T12597] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.630156][T12597] _raw_spin_unlock_irqrestore+0x47/0x80 [ 476.635863][T12597] dummy_urb_enqueue+0x58a/0x780 [ 476.640990][T12597] usb_hcd_submit_urb+0x328/0x1b70 [ 476.646405][T12597] atp_open+0x60/0x90 [ 476.650486][T12597] input_open_device+0x1f8/0x3b0 [ 476.655502][T12597] mousedev_open_device+0xcc/0x150 [ 476.660738][T12597] mousedev_open+0x2ef/0x4a0 [ 476.665422][T12597] chrdev_open+0x4cd/0x5e0 [ 476.669938][T12597] do_dentry_open+0x785/0x14e0 [ 476.674786][T12597] vfs_open+0x3b/0x340 [ 476.678946][T12597] path_openat+0x2e08/0x3860 [ 476.683629][T12597] do_file_open+0x23e/0x4a0 [ 476.688208][T12597] do_sys_openat2+0x113/0x200 [ 476.693058][T12597] __x64_sys_openat+0x138/0x170 [ 476.698037][T12597] do_syscall_64+0x14d/0xf80 [ 476.702905][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.708891][T12597] [ 476.708891][T12597] to a SOFTIRQ-irq-unsafe lock: [ 476.715986][T12597] (tasklist_lock){.+.+}-{3:3} [ 476.716014][T12597] [ 476.716014][T12597] ... which became SOFTIRQ-irq-unsafe at: [ 476.728651][T12597] ... [ 476.728664][T12597] lock_acquire+0xf0/0x2e0 [ 476.735824][T12597] _raw_read_lock+0x36/0x50 [ 476.740450][T12597] __do_wait+0xde/0x740 [ 476.744696][T12597] do_wait+0x1e7/0x540 [ 476.748855][T12597] kernel_wait+0xd6/0x1c0 [ 476.753308][T12597] call_usermodehelper_exec_work+0xbe/0x230 [ 476.759401][T12597] process_scheduled_works+0xb6e/0x18c0 [ 476.765123][T12597] worker_thread+0xa53/0xfc0 [ 476.769810][T12597] kthread+0x388/0x470 [ 476.773965][T12597] ret_from_fork+0x51e/0xb90 [ 476.778655][T12597] ret_from_fork_asm+0x1a/0x30 [ 476.783497][T12597] [ 476.783497][T12597] other info that might help us debug this: [ 476.783497][T12597] [ 476.793717][T12597] Chain exists of: [ 476.793717][T12597] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 476.793717][T12597] [ 476.806786][T12597] Possible interrupt unsafe locking scenario: [ 476.806786][T12597] [ 476.815115][T12597] CPU0 CPU1 [ 476.820470][T12597] ---- ---- [ 476.825835][T12597] lock(tasklist_lock); [ 476.830265][T12597] local_irq_disable(); [ 476.837106][T12597] lock(&dev->event_lock#2); [ 476.844314][T12597] lock(&f_owner->lock); [ 476.851561][T12597] [ 476.855018][T12597] lock(&dev->event_lock#2); [ 476.859861][T12597] [ 476.859861][T12597] *** DEADLOCK *** [ 476.859861][T12597] [ 476.867986][T12597] 5 locks held by syz.4.1951/12597: [ 476.873166][T12597] #0: ffff88802b85e420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 476.882343][T12597] #1: ffff888034e9e3d0 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb4c/0x3860 [ 476.892518][T12597] #2: ffffffff9a2f22f8 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 476.902087][T12597] #3: ffff888053aa1808 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 476.911751][T12597] #4: ffff888041ae4620 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 476.920883][T12597] [ 476.920883][T12597] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 476.931281][T12597] -> (&dev->event_lock#2){..-.}-{3:3} { [ 476.937210][T12597] IN-SOFTIRQ-W at: [ 476.941443][T12597] lock_acquire+0xf0/0x2e0 [ 476.948026][T12597] _raw_spin_lock_irqsave+0x40/0x60 [ 476.955475][T12597] input_event+0x76/0xe0 [ 476.962671][T12597] atp_complete_geyser_3_4+0x114e/0x1d90 [ 476.970479][T12597] __usb_hcd_giveback_urb+0x376/0x540 [ 476.978014][T12597] dummy_timer+0xbbd/0x45d0 [ 476.984861][T12597] __hrtimer_run_queues+0x53a/0xcc0 [ 476.992399][T12597] hrtimer_run_softirq+0x182/0x5a0 [ 476.999818][T12597] handle_softirqs+0x22a/0x870 [ 477.006760][T12597] __irq_exit_rcu+0x5f/0x150 [ 477.013523][T12597] irq_exit_rcu+0x9/0x30 [ 477.020024][T12597] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 477.027822][T12597] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 477.035962][T12597] _raw_spin_unlock_irqrestore+0x47/0x80 [ 477.043839][T12597] dummy_urb_enqueue+0x58a/0x780 [ 477.050952][T12597] usb_hcd_submit_urb+0x328/0x1b70 [ 477.058255][T12597] atp_open+0x60/0x90 [ 477.064437][T12597] input_open_device+0x1f8/0x3b0 [ 477.071574][T12597] mousedev_open_device+0xcc/0x150 [ 477.078856][T12597] mousedev_open+0x2ef/0x4a0 [ 477.085884][T12597] chrdev_open+0x4cd/0x5e0 [ 477.092479][T12597] do_dentry_open+0x785/0x14e0 [ 477.099410][T12597] vfs_open+0x3b/0x340 [ 477.105730][T12597] path_openat+0x2e08/0x3860 [ 477.112484][T12597] do_file_open+0x23e/0x4a0 [ 477.119255][T12597] do_sys_openat2+0x113/0x200 [ 477.126105][T12597] __x64_sys_openat+0x138/0x170 [ 477.133202][T12597] do_syscall_64+0x14d/0xf80 [ 477.140048][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.148095][T12597] INITIAL USE at: [ 477.152237][T12597] lock_acquire+0xf0/0x2e0 [ 477.158728][T12597] _raw_spin_lock_irqsave+0x40/0x60 [ 477.166099][T12597] input_inject_event+0xa5/0x340 [ 477.173119][T12597] kbd_led_trigger_activate+0xbc/0x100 [ 477.180669][T12597] led_trigger_set+0x535/0x960 [ 477.187862][T12597] led_trigger_set_default+0x260/0x2a0 [ 477.195399][T12597] led_classdev_register_ext+0x787/0x9c0 [ 477.203099][T12597] input_leds_connect+0x517/0x790 [ 477.210196][T12597] input_register_device+0xd00/0x1160 [ 477.217640][T12597] atkbd_connect+0x731/0xa50 [ 477.224384][T12597] serio_driver_probe+0x82/0xd0 [ 477.231306][T12597] really_probe+0x267/0xaf0 [ 477.237882][T12597] __driver_probe_device+0x18c/0x320 [ 477.245342][T12597] driver_probe_device+0x4f/0x240 [ 477.252447][T12597] __driver_attach+0x34c/0x640 [ 477.259291][T12597] bus_for_each_dev+0x23b/0x2c0 [ 477.266382][T12597] serio_handle_event+0x20a/0xdd0 [ 477.273483][T12597] process_scheduled_works+0xb6e/0x18c0 [ 477.281125][T12597] worker_thread+0xa53/0xfc0 [ 477.287799][T12597] kthread+0x388/0x470 [ 477.294026][T12597] ret_from_fork+0x51e/0xb90 [ 477.300788][T12597] ret_from_fork_asm+0x1a/0x30 [ 477.307628][T12597] } [ 477.310367][T12597] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 477.319639][T12597] -> (&client->buffer_lock){....}-{3:3} { [ 477.325534][T12597] INITIAL USE at: [ 477.329582][T12597] lock_acquire+0xf0/0x2e0 [ 477.335986][T12597] _raw_spin_lock+0x2e/0x40 [ 477.342380][T12597] evdev_pass_values+0xb9/0xbd0 [ 477.349127][T12597] evdev_events+0x1e6/0x340 [ 477.355527][T12597] input_pass_values+0x288/0x890 [ 477.362456][T12597] input_event_dispose+0x330/0x6b0 [ 477.369462][T12597] input_inject_event+0x1dd/0x340 [ 477.376379][T12597] evdev_write+0x325/0x4c0 [ 477.382685][T12597] vfs_write+0x29a/0xb90 [ 477.388826][T12597] ksys_write+0x150/0x270 [ 477.395052][T12597] do_syscall_64+0x14d/0xf80 [ 477.401620][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.409506][T12597] } [ 477.412173][T12597] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 477.420503][T12597] ... acquired at: [ 477.424561][T12597] _raw_spin_lock+0x2e/0x40 [ 477.429261][T12597] evdev_pass_values+0xb9/0xbd0 [ 477.434287][T12597] evdev_events+0x1e6/0x340 [ 477.438958][T12597] input_pass_values+0x288/0x890 [ 477.444067][T12597] input_event_dispose+0x330/0x6b0 [ 477.449337][T12597] input_inject_event+0x1dd/0x340 [ 477.454520][T12597] evdev_write+0x325/0x4c0 [ 477.459186][T12597] vfs_write+0x29a/0xb90 [ 477.463585][T12597] ksys_write+0x150/0x270 [ 477.468068][T12597] do_syscall_64+0x14d/0xf80 [ 477.472815][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.478866][T12597] [ 477.481169][T12597] -> (&new->fa_lock){....}-{3:3} { [ 477.486369][T12597] INITIAL USE at: [ 477.490439][T12597] lock_acquire+0xf0/0x2e0 [ 477.496594][T12597] _raw_write_lock_irq+0x3d/0x50 [ 477.503269][T12597] fasync_remove_entry+0xf1/0x1c0 [ 477.510020][T12597] sock_fasync+0x85/0xf0 [ 477.516076][T12597] __fput+0x8a5/0xa70 [ 477.521969][T12597] task_work_run+0x1d9/0x270 [ 477.528282][T12597] do_exit+0x70f/0x23c0 [ 477.534257][T12597] __pfx___ia32_sys_exit+0x0/0x10 [ 477.541105][T12597] x64_sys_call+0x2231/0x2240 [ 477.547523][T12597] do_syscall_64+0x14d/0xf80 [ 477.554027][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.561643][T12597] INITIAL READ USE at: [ 477.566042][T12597] lock_acquire+0xf0/0x2e0 [ 477.572705][T12597] _raw_read_lock_irqsave+0x48/0x60 [ 477.580171][T12597] kill_fasync+0x199/0x4d0 [ 477.586749][T12597] lease_break_callback+0x26/0x30 [ 477.593939][T12597] __break_lease+0x81c/0x1e80 [ 477.600772][T12597] do_dentry_open+0x1010/0x14e0 [ 477.607783][T12597] vfs_open+0x3b/0x340 [ 477.614009][T12597] path_openat+0x2e08/0x3860 [ 477.620752][T12597] do_file_open+0x23e/0x4a0 [ 477.627590][T12597] do_sys_openat2+0x113/0x200 [ 477.634423][T12597] __x64_sys_openat+0x138/0x170 [ 477.641436][T12597] do_syscall_64+0x14d/0xf80 [ 477.648191][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.656240][T12597] } [ 477.658806][T12597] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 477.667559][T12597] ... acquired at: [ 477.671430][T12597] _raw_read_lock_irqsave+0x48/0x60 [ 477.676880][T12597] kill_fasync+0x199/0x4d0 [ 477.681453][T12597] evdev_pass_values+0x627/0xbd0 [ 477.686549][T12597] evdev_events+0x1e6/0x340 [ 477.691211][T12597] input_pass_values+0x288/0x890 [ 477.696308][T12597] input_event_dispose+0x330/0x6b0 [ 477.701584][T12597] input_inject_event+0x1dd/0x340 [ 477.706764][T12597] evdev_write+0x325/0x4c0 [ 477.711333][T12597] vfs_write+0x29a/0xb90 [ 477.715822][T12597] ksys_write+0x150/0x270 [ 477.720401][T12597] do_syscall_64+0x14d/0xf80 [ 477.725154][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.731200][T12597] [ 477.733508][T12597] -> (&f_owner->lock){....}-{3:3} { [ 477.738876][T12597] INITIAL USE at: [ 477.742840][T12597] lock_acquire+0xf0/0x2e0 [ 477.748806][T12597] _raw_write_lock_irq+0x3d/0x50 [ 477.755297][T12597] __f_setown+0x67/0x370 [ 477.761083][T12597] fcntl_dirnotify+0x3f9/0x6a0 [ 477.767391][T12597] do_fcntl+0x77e/0x1a20 [ 477.773184][T12597] __se_sys_fcntl+0xc8/0x150 [ 477.779492][T12597] do_syscall_64+0x14d/0xf80 [ 477.785634][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.793246][T12597] INITIAL READ USE at: [ 477.797556][T12597] lock_acquire+0xf0/0x2e0 [ 477.803952][T12597] _raw_read_lock_irqsave+0x48/0x60 [ 477.811128][T12597] send_sigio+0x38/0x370 [ 477.817454][T12597] dnotify_handle_event+0x169/0x440 [ 477.824642][T12597] fsnotify+0x1831/0x1ae0 [ 477.830951][T12597] path_openat+0x15c2/0x3860 [ 477.837605][T12597] do_file_open+0x23e/0x4a0 [ 477.844176][T12597] do_sys_openat2+0x113/0x200 [ 477.850836][T12597] __x64_sys_openat+0x138/0x170 [ 477.857687][T12597] do_syscall_64+0x14d/0xf80 [ 477.864261][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.872138][T12597] } [ 477.874617][T12597] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 477.883449][T12597] ... acquired at: [ 477.887237][T12597] _raw_read_lock_irqsave+0x48/0x60 [ 477.892593][T12597] send_sigio+0x38/0x370 [ 477.896990][T12597] kill_fasync+0x24d/0x4d0 [ 477.901560][T12597] lease_break_callback+0x26/0x30 [ 477.906737][T12597] __break_lease+0x81c/0x1e80 [ 477.911574][T12597] do_dentry_open+0x1010/0x14e0 [ 477.916584][T12597] vfs_open+0x3b/0x340 [ 477.920843][T12597] path_openat+0x2e08/0x3860 [ 477.925617][T12597] do_file_open+0x23e/0x4a0 [ 477.930291][T12597] do_sys_openat2+0x113/0x200 [ 477.935132][T12597] __x64_sys_openat+0x138/0x170 [ 477.940153][T12597] do_syscall_64+0x14d/0xf80 [ 477.944989][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.951053][T12597] [ 477.953368][T12597] [ 477.953368][T12597] the dependencies between the lock to be acquired [ 477.953376][T12597] and SOFTIRQ-irq-unsafe lock: [ 477.966867][T12597] -> (tasklist_lock){.+.+}-{3:3} { [ 477.971977][T12597] HARDIRQ-ON-R at: [ 477.975948][T12597] lock_acquire+0xf0/0x2e0 [ 477.982002][T12597] _raw_read_lock+0x36/0x50 [ 477.988139][T12597] __do_wait+0xde/0x740 [ 477.993929][T12597] do_wait+0x1e7/0x540 [ 477.999653][T12597] kernel_wait+0xd6/0x1c0 [ 478.005619][T12597] call_usermodehelper_exec_work+0xbe/0x230 [ 478.013413][T12597] process_scheduled_works+0xb6e/0x18c0 [ 478.020705][T12597] worker_thread+0xa53/0xfc0 [ 478.027036][T12597] kthread+0x388/0x470 [ 478.032763][T12597] ret_from_fork+0x51e/0xb90 [ 478.039445][T12597] ret_from_fork_asm+0x1a/0x30 [ 478.045862][T12597] SOFTIRQ-ON-R at: [ 478.049849][T12597] lock_acquire+0xf0/0x2e0 [ 478.055932][T12597] _raw_read_lock+0x36/0x50 [ 478.062174][T12597] __do_wait+0xde/0x740 [ 478.068082][T12597] do_wait+0x1e7/0x540 [ 478.073818][T12597] kernel_wait+0xd6/0x1c0 [ 478.079801][T12597] call_usermodehelper_exec_work+0xbe/0x230 [ 478.087352][T12597] process_scheduled_works+0xb6e/0x18c0 [ 478.094646][T12597] worker_thread+0xa53/0xfc0 [ 478.101094][T12597] kthread+0x388/0x470 [ 478.106830][T12597] ret_from_fork+0x51e/0xb90 [ 478.113203][T12597] ret_from_fork_asm+0x1a/0x30 [ 478.119726][T12597] INITIAL USE at: [ 478.123637][T12597] lock_acquire+0xf0/0x2e0 [ 478.129686][T12597] _raw_write_lock_irq+0x3d/0x50 [ 478.136277][T12597] copy_process+0x247a/0x3cd0 [ 478.142527][T12597] kernel_clone+0x248/0x8e0 [ 478.148588][T12597] user_mode_thread+0x110/0x180 [ 478.155013][T12597] rest_init+0x23/0x300 [ 478.160727][T12597] start_kernel+0x385/0x3d0 [ 478.166820][T12597] x86_64_start_reservations+0x24/0x30 [ 478.173847][T12597] x86_64_start_kernel+0x143/0x1c0 [ 478.180530][T12597] common_startup_64+0x13e/0x147 [ 478.187043][T12597] INITIAL READ USE at: [ 478.191476][T12597] lock_acquire+0xf0/0x2e0 [ 478.197892][T12597] _raw_read_lock+0x36/0x50 [ 478.204389][T12597] __do_wait+0xde/0x740 [ 478.210731][T12597] do_wait+0x1e7/0x540 [ 478.216902][T12597] kernel_wait+0xd6/0x1c0 [ 478.223238][T12597] call_usermodehelper_exec_work+0xbe/0x230 [ 478.231242][T12597] process_scheduled_works+0xb6e/0x18c0 [ 478.238795][T12597] worker_thread+0xa53/0xfc0 [ 478.245414][T12597] kthread+0x388/0x470 [ 478.251494][T12597] ret_from_fork+0x51e/0xb90 [ 478.258090][T12597] ret_from_fork_asm+0x1a/0x30 [ 478.264942][T12597] } [ 478.267439][T12597] ... key at: [] tasklist_lock+0x18/0x40 [ 478.275152][T12597] ... acquired at: [ 478.278941][T12597] _raw_read_lock+0x36/0x50 [ 478.283622][T12597] send_sigio+0x101/0x370 [ 478.288111][T12597] dnotify_handle_event+0x169/0x440 [ 478.293468][T12597] fsnotify+0x1831/0x1ae0 [ 478.298052][T12597] path_openat+0x15c2/0x3860 [ 478.302820][T12597] do_file_open+0x23e/0x4a0 [ 478.307502][T12597] do_sys_openat2+0x113/0x200 [ 478.312371][T12597] __x64_sys_creat+0x8f/0xc0 [ 478.317139][T12597] do_syscall_64+0x14d/0xf80 [ 478.321899][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.327968][T12597] [ 478.330286][T12597] [ 478.330286][T12597] stack backtrace: [ 478.336197][T12597] CPU: 0 UID: 0 PID: 12597 Comm: syz.4.1951 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.336221][T12597] Tainted: [L]=SOFTLOCKUP [ 478.336227][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.336237][T12597] Call Trace: [ 478.336244][T12597] [ 478.336252][T12597] dump_stack_lvl+0xe8/0x150 [ 478.336276][T12597] __lock_acquire+0x2a94/0x2cf0 [ 478.336302][T12597] lock_acquire+0xf0/0x2e0 [ 478.336318][T12597] ? send_sigio+0x101/0x370 [ 478.336336][T12597] _raw_read_lock+0x36/0x50 [ 478.336351][T12597] ? send_sigio+0x101/0x370 [ 478.336364][T12597] send_sigio+0x101/0x370 [ 478.336379][T12597] dnotify_handle_event+0x169/0x440 [ 478.336399][T12597] fsnotify+0x1831/0x1ae0 [ 478.336412][T12597] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 478.336433][T12597] ? fsnotify+0x74c/0x1ae0 [ 478.336445][T12597] ? __pfx_fsnotify+0x10/0x10 [ 478.336456][T12597] ? do_raw_spin_unlock+0xf5/0x210 [ 478.336472][T12597] ? d_make_persistent+0x10f/0x180 [ 478.336488][T12597] ? shmem_mknod+0x2ea/0x360 [ 478.336506][T12597] path_openat+0x15c2/0x3860 [ 478.336532][T12597] ? __pfx_path_openat+0x10/0x10 [ 478.336545][T12597] ? __x64_sys_creat+0x8f/0xc0 [ 478.336567][T12597] ? __lock_acquire+0x6b5/0x2cf0 [ 478.336585][T12597] do_file_open+0x23e/0x4a0 [ 478.336601][T12597] ? __pfx_do_file_open+0x10/0x10 [ 478.336620][T12597] ? _raw_spin_unlock+0x28/0x50 [ 478.336632][T12597] ? alloc_fd+0x64b/0x6c0 [ 478.336653][T12597] do_sys_openat2+0x113/0x200 [ 478.336671][T12597] ? __se_sys_futex+0x3a8/0x450 [ 478.336688][T12597] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.336707][T12597] ? rcu_is_watching+0x15/0xb0 [ 478.336726][T12597] __x64_sys_creat+0x8f/0xc0 [ 478.336746][T12597] do_syscall_64+0x14d/0xf80 [ 478.336761][T12597] ? trace_irq_disable+0x3b/0x150 [ 478.336780][T12597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.336794][T12597] ? clear_bhb_loop+0x40/0x90 [ 478.336809][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.336822][T12597] RIP: 0033:0x7f68f6d9c799 [ 478.336838][T12597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.336850][T12597] RSP: 002b:00007f68f7c3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 478.336866][T12597] RAX: ffffffffffffffda RBX: 00007f68f7015fa0 RCX: 00007f68f6d9c799 [ 478.336877][T12597] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000240 [ 478.336886][T12597] RBP: 00007f68f6e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 478.336895][T12597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.336904][T12597] R13: 00007f68f7016038 R14: 00007f68f7015fa0 R15: 00007f68f713fa48 [ 478.336919][T12597] [ 478.693642][T12604] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined