last executing test programs: 7.133063152s ago: executing program 2 (id=736): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x5, 0x36, &(0x7f0000003040)={{0x12, 0x1, 0x310, 0x88, 0x87, 0x80, 0x20, 0xc72, 0xd, 0xa1d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x3, 0x30, 0xa, [{{0x9, 0x4, 0xcb, 0x2, 0x2, 0x51, 0xb1, 0x18, 0x2, [], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x3, 0x18, 0x10}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0x3, 0xf5}}]}}]}}]}}, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000003040)={{0x12, 0x1, 0x310, 0x88, 0x87, 0x80, 0x20, 0xc72, 0xd, 0xa1d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x3, 0x30, 0xa, [{{0x9, 0x4, 0xcb, 0x2, 0x2, 0x51, 0xb1, 0x18, 0x2, [], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x3, 0x18, 0x10}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0x3, 0xf5}}]}}]}}]}}, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r2, 0xc5, "95bdaf8a9eaf96282cb0b1c004c0a976209cac41be52c39ce43d5d494b4a1695f1683fe52cb138e3f0ce9354058c95a03dcafc028f458114cee7a8ac0b82d274d82176a289f28cdd9f9b19eb788b9863a919c1ad70e499ad01679998423fbb7cfe9daea0f3849ddcb4ffba1667be48f07acf769bf102bf83f6866fbb45d423e13c5807a6af49c34762b8760f61acd823a6df527e9a6a41049c9fed88cc82cf1b59f153da2423dd73a5d60ff9d91f0b1f6587737a8a8fe59daa55298adefd9a167677b56738"}, &(0x7f0000000240)=0xcd) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r2, 0xc5, "95bdaf8a9eaf96282cb0b1c004c0a976209cac41be52c39ce43d5d494b4a1695f1683fe52cb138e3f0ce9354058c95a03dcafc028f458114cee7a8ac0b82d274d82176a289f28cdd9f9b19eb788b9863a919c1ad70e499ad01679998423fbb7cfe9daea0f3849ddcb4ffba1667be48f07acf769bf102bf83f6866fbb45d423e13c5807a6af49c34762b8760f61acd823a6df527e9a6a41049c9fed88cc82cf1b59f153da2423dd73a5d60ff9d91f0b1f6587737a8a8fe59daa55298adefd9a167677b56738"}, &(0x7f0000000240)=0xcd) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r9, 0xa, 0x21) fcntl$setlease(r9, 0x400, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x1}, &(0x7f0000000300)=0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000b799d28947c14278d877cbd2b30363247899704783edec055c", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a8008000580"], 0x44}}, 0x0) 6.921513188s ago: executing program 1 (id=737): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000380)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="ab", 0x1}, {&(0x7f0000000000)="274896d1ea552e0fa2aa7a6c1428e54de5dd217448b799c411c8ab3e0b3850fb88cc71037d63da3983d0313a0829b15586797f126f20d61fa53a8739bacce42f9c583ba813cad75ed9fdac6eb1ed84d212ea0a1f68b3f0c4500469bed7f3d8ac3dd894ff71fb4f97b6fc2c5404057c46644f6c", 0x73}, {&(0x7f0000000080)="441a4481410c873c332f61a3fd150889fd2b48a5a9f2ec44add9835a19913264dc52c66a48659b2e4426d93bfa34721fc1aa396b42137da1665a3f4930343edb318655cba81f86b84f90279a0d566c4af6b2a9fa6c98c067721fc2cc53e1c5e48f6d42da93831164c9e05320ec461715d6d3d41c674a53a19b2ec09bc5889ef09909f3a6dfe7a0894d6b5aed9ec1e0b646815d90e2021ed2aab9f7c513869c3d787b34c33b51cb7744a24b36cb9e4d9fa477e333943c9bb22ef5b9ad6b65724b198ab1cdc24589cdf1de5234a2bd49fb8465b98b78ca7aac78e42462c3a833f6d00259b4513a9fe9f2f8ba462a93c673cab7373fdb", 0xf5}], 0x3}}], 0x1, 0x24048084) 6.516856174s ago: executing program 2 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x1ff, 0x20480) (async) r2 = syz_open_dev$evdev(0x0, 0x1ff, 0x20480) ioctl$EVIOCSABS20(r2, 0x401845e0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x41) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x3e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f74b60", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.323058094s ago: executing program 1 (id=739): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'nr0\x00', 0x4}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfdcd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000005c0)) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, 0x0, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r3) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047459, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) (async) fadvise64(r1, 0x7, 0x1000000, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b3f7ffd601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f30400000000000000a964a0193b3e8772fd2900", "24431a1e77a68e174f000000000000000010e200"}}) preadv2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) (async) link(&(0x7f0000000000)='./file0\x00', 0x0) 5.87357373s ago: executing program 1 (id=740): timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) r1 = getpgrp(0x0) ioprio_set$pid(0x3, r1, 0x4000) rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8) 5.800374357s ago: executing program 2 (id=741): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) write$smackfs_logging(r0, &(0x7f00000000c0)=0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x1, @local}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="08000c00cb0d000008000db5f3000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x8040) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r8, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.629451937s ago: executing program 1 (id=743): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x1, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/122, 0xffffffffffffffca}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/58, 0x3a}}], 0x1, 0x2, 0x0) r4 = io_uring_setup(0x7695, &(0x7f00000001c0)={0x0, 0xa6c2, 0x10000, 0x2, 0x223}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000800)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x29) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8, 0x0) fdatasync(r5) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r10, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r6, 0xffffffffffffffff, 0x0) 3.990388865s ago: executing program 0 (id=748): r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff6900000000000100000018009b3900000200861f4104bfeacdd5a9007d16", 0x27, r1) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r3, 0x0, 0x0) timer_gettime(r2, &(0x7f0000000040)) 3.71183102s ago: executing program 3 (id=750): r0 = io_uring_setup(0x1039, &(0x7f0000000180)={0x0, 0x4adb, 0x2000, 0x1, 0x1d5}) io_uring_enter(r0, 0x9be, 0x608, 0x1, &(0x7f0000000200)={[0x3]}, 0x8) (async) io_uring_enter(r0, 0x9be, 0x608, 0x1, &(0x7f0000000200)={[0x3]}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x39) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x2236}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x2236}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3.49553521s ago: executing program 3 (id=752): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x60000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0xe6000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 2.589442903s ago: executing program 3 (id=753): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)={0x0, 0xe, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpid() kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x26c8, 0x0, 0x1, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x40000180, &(0x7f0000000180), 0x1, 0x4000007}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 2.489009673s ago: executing program 0 (id=755): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @loopback}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004300)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb30, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x1000, 0xe5, &(0x7f0000000300)=""/229, 0x40f00, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x4, 0xc, 0xba7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r1, r1, r1], &(0x7f0000000480)=[{0x1, 0x3, 0x2, 0x7}, {0x4, 0x4, 0x6, 0x4}, {0x5, 0x5, 0x9, 0x5}, {0x0, 0x3, 0x4, 0xa}, {0x4, 0x1, 0x2, 0x6}, {0x5, 0x5, 0xb, 0x8}, {0x3, 0x5, 0x6, 0x1}, {0x5, 0x2, 0x1, 0x4357643b45eb482b}], 0x10, 0xff}, 0x94) 2.205589358s ago: executing program 4 (id=756): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xffffffff, 0x1f, 0x7, 0xfffffffa, 0x3, "a4c82192e6aed8e8950470331d04006c9957ed"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090491000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) 2.054485774s ago: executing program 1 (id=757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x42010}, 0x4000005) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0xd3, 0xfe, r8}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0xdd, 0x5}}]}, 0x3c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x1, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0xb}, {0x1, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0x10000, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xff, 0x8, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x6a, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x2, 0x8000000, 0xd, 0x5, 0x28, 0x3, 0xa, 0x9, 0x50, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x1}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "52f27a0ea171476c", "32735e74e0be8408e453dd2d508a5d13", "2231e1c2", "0fde38e92d3a9d94"}, 0x28) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000480), 0x4001) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x0, 0x19) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r12, @ANYBLOB="24002d80050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) inotify_init() syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff00e7406d0423080700010203010902520001000000000904"], 0x0) pipe2$9p(&(0x7f0000000000), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000003208"]) 1.832794636s ago: executing program 2 (id=758): unshare(0x8000400) (async) r0 = epoll_create(0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000108000440000000040900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20040805}, 0x40000) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) 1.73759906s ago: executing program 0 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c000380e589a0b31afb357e300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e6430000000000000000000000014"], 0x4b0}}, 0x300000c4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.675951212s ago: executing program 2 (id=760): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x32314152, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=@deltfilter={0x34, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x10}, {0x0, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000002c0)) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040), 0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_SIOCGIFADDR(r7, 0x891b, 0x0) sendfile(r1, r2, 0x0, 0x20000023893) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r9, 0x1}}, 0x18) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\b\x00\fj\bH', 0x0, 0x7, 0x8000, 0x1, 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000580)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ctinfo={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x10001}, @TCA_CTINFO_ACT={0x0, 0x3, {0x37b1, 0x401, 0x7, 0x593, 0x8}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x1}]}, {0x0, 0x6, "8542cb1443597b7e2279d68ac13215be30fcf0b909c27cca3c14f2827890a01707ed42584ad54c5028455b256f921951ba08d60a007232457da846f2d93a00dd14b6e9bfb53b863c7cc4d20e5b0a5bf4c8e1eff2ee91a02136fdb450efc4b55fc2233afa09cdb3e5dc81684621043ee1efc87d0e010a5a7891fc0a8b23a91355d3e479fc81c6e43680261933118e54e7821265733ef307cfd67eb97e9f17326f428c15db2cad4b5a169dfb9b4b938e"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3, 0x2}}}}]}]}, 0x44}}, 0x0) 1.589304291s ago: executing program 0 (id=761): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x0) 1.529368522s ago: executing program 4 (id=762): syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x10, 0xb0, 0x4, [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x4, 0xff}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x9, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0f00ce0a"], 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x5, 0x71a, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x43, 0xad, 0xfd, 0x40, 0x7c4, 0xa109, 0xdc70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x708, 0x4, 0x7, 0x91, 0x0, 0x0, [{{0x9, 0x4, 0x93, 0xf, 0x7, 0xb2, 0xea, 0x86, 0x8, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x81, 0x0, [@generic={0x7a, 0x31, "451d1b4b71197287e2835807c1138ce47634daaffa82a3436a52a0d187dc30b82d59b8799bdc05ea91f89cf9fc6e17e3a674aa97afc47895f9d75219615606e69bcc71bd44150e3a3e3fda05c7152490696549e94151a9be74fa6a765a3b11ae2e89fcc1273b9a0e64cdc4cf9ac91d3fdc31e8d39db6684f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x5, 0x4, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x6d, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x7f}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xc, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @generic={0xac, 0x9, "c87e06d8dd6eb1847decb09811cac74a17673b850bf96f9ac62cba4f8670ef89301c05b8f487a4338695b102c47c366c7b0711d6fb2d6c2b99558f09ed44a3e72fec7262d516663c1e6a0e2b5dfbbf7d51c77fa99a609c13b293ee321104d45458503f41538d7003be1dd90d0f055669602dcf8d5f58d72fd3d7c05185aae3993f696556c299cba951fd9adcc0ba6fd89919f0db87602844965c83c56c196eb927d8266b83bca71e8b7f"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x248, 0x9, 0x9b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x180}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xd76}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x8, 0x0, 0x4f}}]}}, {{0x9, 0x4, 0x4, 0x8, 0xb, 0x4d, 0x5f, 0x9b, 0x4, [], [{{0x9, 0x5, 0x5, 0x0, 0x40, 0x5, 0x6, 0xf}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x1, 0x7, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x6, 0x0, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xec, 0x40}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x1, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x8, 0x4, 0xe}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x3, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xfffa}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0x81, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x4, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xd5, 0x8}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x5, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6a, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x5ff, 0x0, 0xc4, 0xd, [@generic={0xb4, 0x21, "980940951a2ccf5c23846af8952c12664b7b7a283249348b95e90d1d9c2ab6c6aa0aa0ce161ffe7a2b4eb43e17afae5aa94ed0133bb39374f7699d2fa27c059d6af4d19b418e27d1e15f26f3c81e6b24217d626baca23714fd10f20c7fea8bb2b5fa95daf107468b80da50561b2faab514f1af34bd20b232417a3941a376e99b727c9640a1349f3e7181ad5c81cf87c36e500425d9ce9598489cf5dcbff1783c4ceb5347e4f9e4bfae0dd86804a94c86fdb7"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x8, 0x4, 0x6, [@generic={0x3b, 0x8, "6e17ca5927c196914c2f567b0834679002c3a88270d249fd86835df10db9035b75a87c4c1114d2491e18369cac7c5a9b8f4e6c9f1bb55830eb"}, @generic={0xa9, 0xc, "0380caf704bf4d0167bf4b4d146cd2d3eb4176a76cc3f6b7257e0b0edb952d5a489ee0f5df35589a7ffd1bf86794ced295c476a0c92d7035c3255a9f0667f50d90165184f74298ce40c15077e522d88534b37a7a038f2d27aafddd5e27ef5d7f07b574fdd1544af39c1f90a4d5ee3ffd6930c85dc9509a138570c6c9c5875c6fc4ce3376309d3786955f0073dc6719e47d927597148ce19655a4107ed5db3514a05e06b8ffc52e"}]}}]}}, {{0x9, 0x4, 0xf, 0xae, 0x9, 0x79, 0x85, 0x39, 0x2, [], [{{0x9, 0x5, 0xf, 0x3, 0x10, 0x2, 0x3}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x0, 0x0, 0x7}}, {{0x9, 0x5, 0x4582ca3ce0adb47e, 0x0, 0x3ff, 0xc, 0x6, 0xb}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x5, 0x6, 0x8, [@generic={0x5e, 0x23, "3b3a6ff1bb5ae17fe44e85fac474113a40116a32270dbfb8386d0fd379c7b574673369f3a946fd0f395f737409623a2dfb53289bf25f4b0bce683e0f6311adca5260c38868c8be739f062fa04c859361a24a7a39f3a5017bb0fda5bf"}, @generic={0x53, 0x11, "be97239efeeb9f14d6579000a4008322f03ed2c687b5a772a707996181e056c5796ab5261be7e98793501b49e95db4c9f2b12d05873264d68c652deb3720aafd36d5cca1ed89b31bb94a180e6bd66d7904"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0xa, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}, @generic={0x8f, 0xa, "6661d7087e8c8c1cf17f884fd9c96e4f7c77a4042640425f4d0b3eff021130d7ed1aaa23ee61767a89d8327c2d4729f417cf89fb30609acc0e922a70dcbee68dc29d0d24d889c52ba9b3e10ac11bd1dce60e0090035777345663a1ec46a03c08c532374c4410abd359c9d3485d6f9f1e9622061180fc0fd5a41f135fbe43e1cec177963f269d6eec369c4362eb"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x68, 0xdd, 0xba, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xf, 0x85, 0x4, [@generic={0xc2, 0x9, "7c25324d588c8f720001c79f1e2da584102e1393610a24a54adcb4d0585d138a0ddb3ed64e5395ad5b911f4b4bb3b52848a98dce325a8d5d9eeb6aeeb6aacde75f54d7a39ed8e470e7b31b2270c0e1e1ecd834b04ed109841991274d659f6ce807f128ca87e8b3295a5cb789e1e9c54e229d9c99dd8f3d39da6920db1a12cc133642ffebaae8b6fd54ef419f28f0769cfd8279050db84f2bf9ff150755977ac083e7de5f25c9f06aef8e79b0044ef91736a1ab0477cbded35b95c3dd1328c478"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x3, 0x7, 0x2}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x2b, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0xa3, 0x5, 0x2, 0xff, 0x2, 0x34, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xfffc, 0x9}, [@extension_unit={0xd, 0x24, 0x8, 0x4, 0x76d0, 0x80, "54b43bfdb022"}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0xb6, "b7"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x4, 0x7, '&'}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0xac, 0x5, [0x9, 0x7, 0x5, 0x9, 0x2], 0x5}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0xa, 0x3, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x7, 0x9, 0xe8, [@generic={0x78, 0x24, "1b06d55f839ea446c582b7a74fec85314afb8c30eac5f4687ec75cab5ae793eca68b44611ab3692759d4034cba5d05b65aa620f659e5126d2d06dec77304746cc2911518e4e177f39f8b48050f188a92ea5bc568ee2273e168d55ec9b8a32ed5e28760420f2565efe9b3ae72c568599e211535b5a562"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x4, 0xdb, 0xe, 0x10, 0xd0}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x8d, &(0x7f00000001c0)=@string={0x8d, 0x3, "c9598603c83bd9fbd56916efb1a39e3838f7e09937f00d0adae4157e874edc36c25d83604503cc7723da45af66ae7ed63bce48dd701ec37c877299f0104d1b6167678b90a12e3fbc065270cff285809eedb4bfa96895b1b4113058533a7f49819d38346190d23bd95c1f896d0f57659e1cdf833f9efa922064d8df291517491756c078fe08fa1474792852"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum64={0x7, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xc, 0x0, 0xe8a7}]}]}, {0x0, [0x61, 0x5f, 0x0]}}, &(0x7f0000000b80)=""/231, 0x35, 0xe7, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10000, '\x00', 0x0, r1, 0x1, 0x4}, 0x50) 1.360245437s ago: executing program 3 (id=763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x100000001, 0x800) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000008040800002c000311660917f15f19e9f781919cf8196601400cbe87e1ff950f87209b361552c1b32a332283a5779f389409434cd2e4fe89a420e5d4cb862d0b029d6af0f41f7607d64b98f04fdb59de362df2a2cd3abd0dfb381469072d685537dcbe9c89515b52e820e062a4f20c107728998b3c5780c95b94fa549bffd3723b9de296fbac43c7c09243435830be0ff29256d7f1f89e852b16644bf10a0828ea33dde12b4d0a46d6a3573720273430ec4d74a04c4612194ee73b90e998cdb721ebac30852144c1e534c275be0d00"/224, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES8=r0], 0x50) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) io_uring_setup(0x1cb4, &(0x7f0000000180)={0x0, 0xcc57, 0x2, 0x10000, 0x121}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) sendmmsg$unix(r4, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='\n', 0x1}], 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r1, r8, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140700000806010200000000000001000100000b"], 0x14}, 0x1, 0x0, 0x0, 0x24008001}, 0x40000) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) sendfile(r7, r9, 0x0, 0x10ffff) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x202, 0x5408c1) 1.170095964s ago: executing program 3 (id=764): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$vcsu(&(0x7f0000000040), 0xfffffffffffffffe, 0x8000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x3, 0xe7d89e3f53bc100c) bind$inet(r4, 0x0, 0x0) close(r4) mq_timedsend(r3, &(0x7f0000000240)="5e1afc575e6110a98e2a29fb06ae8939be7a0f4c29f84d593542a54dcef99d166d74f50646204a7cd167502f037042b203c096df4d970b218160b50ddf29019e20bef00e21f037212baf7407885ba7a492f90d182eccd7ab0c", 0x59, 0x3, &(0x7f00000000c0)={0x0, 0x3938700}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x2020) 1.069171805s ago: executing program 3 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x282080, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004ac3b526b33994637eac4121afe16233b058b0180000038ef5bbb690af3afa8e489e8fc5892", @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="0022000000000000000010000000220000000800000000000000000000040000444f7a8335d2e0104775e123ef23138bcf4d20a3060000000000000033ec702b2fc71e50c45e714f5ec463efba137df0a0efaf04308784f32c06469584ddcd144db1d2819dd3a9a2bace317f4426a4c7e5f9a40ff4f84eaf24ad4c1b29b0b7aeed16ea1b917224ae0000", @ANYRES8=r0, @ANYRESHEX=r1], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000009aac694d02aab2e4dfa4b473619e24740c7000000000000000000000400", @ANYRES16=r2, @ANYBLOB="000000000000000000004d893dc2e049783ed5491983c9a4f84d30e5ac766a30cf27e1d25149d14ce42ec1cea34be9afea75dffdabdd8d0d595a8af3cee680826f30954dce5b61a09b4d4e110d4de9050cea75874d025c59379fe3aa4f13322bed9bef38523c90af37292060823569858c80124f210fc97c2a55c0bd49f2ac7eac49e46fd20a861f9874f7ad7939c2a6687a219ad17f5b6807394631a1afe2531ccfe2b11797f43dba74d3bcf9d36e1948940dc1137fd81d56eef4d0db7f4e28f31ac7a7c139c1a7091f5f7a7d47675aaf9375f7", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES64=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000500)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000680)={0x0, 0xfffffff2, 0x7, 0x401, 0x1, [0x0, 0x0, r7, r7], [0x0, 0xffff401f, 0x2, 0x7ff], [0x800, 0x0, 0xfffffffa, 0xe0], [0x9e, 0x1, 0x4, 0x1]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x1c, &(0x7f0000000b00)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000080)) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xc000) connect(r6, &(0x7f0000000400)=@ax25={{0x3, @null, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) 952.874984ms ago: executing program 4 (id=766): symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) setrlimit(0x4, &(0x7f0000000000)={0xfffffffe0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x1c) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000c80)={@remote, @multicast2, 0x0}, &(0x7f0000002300)=0xc) sendmmsg$inet6(r4, &(0x7f0000002580)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x6, @private0, 0x2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000300)="2211a1cbb9a5bd157ce73d7de3931e24098ecaeca44925a5f0b5239fb26a3c7a45953c30697c5b72db57ad0db5dfbca44353a30ecc40a327f8a4be30e3013db0f6dcb36c56a59f24c315855fef3948be91e0637386086c6bf0e112eac25ae59bbae5e37117f63041ab46485c0ff1db58ffff50d0ec8cc51ac231b3f16ac324cc9f23087d735fd7eaae69ce39002c0142f40610b443ed07c88167074d8739754badd9ef0566d4ae4a4e1dcdc8f2ab9ca5992a070404efdec1c9d19ef3ea71494d74911e72a4256b84f599878b585c321a42fcb6acd85f5ef153", 0xd9}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f00000004c0)="74918309168d85e585eda60911f87925b30bff540dcecfe52e7ee813419e6df3f497d73cbd88e6ec872fa73bcccda9cff3e66c547b781c0337486189ca90538581bd06f6dfda4bed3a604b3c08dde6bedc91760801cf9471dc6ec54808e8", 0x5e}, {&(0x7f0000000400)="18261ea8e511f1be56dd9beb3b5cc36283f6f2075babc4f5020a276a", 0x1c}, {&(0x7f0000000540)="06559d07d6617fb6839e7517f0c55c4ea22a9b3988ab75c429be2d26ed980cbf11a361a45b615b38e1cef18e0b9188", 0x2f}, {&(0x7f0000000580)="c23b6486a3781b", 0x7}, {&(0x7f0000000680)="3b0388a2b4bf6d6a2b0f094531ee76e834753f641f67acc0d364a9d98154f790485221c5beb33b6850dfa722c5dab85266dd56fa2baaf00bbe448462927a8030189fa11712fb55984166dbb3d440c9c5a32ba7c57b28b686ffd12e1a06020d9756df9f8a3eecdf8c1fc41e377aa02ffdbe104f2eb55cfa1b432d997a5d8597ade4a57b0bc61151febc24b7aa44345880d6ada85d9b0df4f2d953e9e14dbab77ad90d61564090d011165c4fb8b608a5d573d252edc90acca4625b08bca3a4a14c2a3be44ca7958b9ee1f3e4481f", 0xcd}], 0x7, &(0x7f0000000780)=[@dontfrag={{0x14, 0x29, 0x3e, 0x200}}, @flowinfo={{0x14, 0x29, 0xb, 0xcb22}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x151b15cd}}, @dstopts={{0x48, 0x29, 0x37, {0x2c, 0x5, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffff4}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5858}}], 0xd8}}, {{&(0x7f0000000880)={0xa, 0x4e23, 0x1, @mcast1, 0x5}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000008c0)="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", 0xfb}], 0x1, &(0x7f0000001ec0)=[@rthdr={{0x28, 0x29, 0x39, {0x2, 0x2, 0x2, 0x4, 0x0, [@private1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts_2292={{0x128, 0x29, 0x36, {0x57, 0x21, '\x00', [@pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xe6, 0x1, [0x51ca]}}, @padn, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0xc, 0xd9, "1ea43604edb9d6b0a45ae759da81b857efcb9ceb3126830aadb791b7d371c2f41983e4c42c3237c02e298440f4548745a6a615ddaf7a4071dc8b1aa812de710142cc04a2ff1dbc1e669cd9f7c20f7ba37fbb89b7c6c3a51582f8c41495dfd0ea8512a62bcea83a50e9018a45fcfabf5e32eca36bf40811b9bfa55c5eba6772d64c62676f84ef2fb6de9a1e578bbf90787a12c7a7a7fb0315c80610b4ab82d1d19852739369da29e73e553b0a97928656e4945b8b9801349d979dc6e07d5bb217f26e4bb7601a1cb5b502816ff1c47cad3a164258f2644f7b9a"}, @jumbo={0xc2, 0x4, 0xb}, @enc_lim, @ra={0x5, 0x2, 0xf000}, @pad1]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x3c, 0x12, 0x0, 0xff, 0x0, [@remote, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}], 0x210}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdd6}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)="cd3f38c0ace767129ab2d408c59fe2206084700e3c8126684ea857f02d8e9b2b1fc48ea3bb8de363258e4e0d9f31fe4e195119e9df743d6d02a464d6057e8818af91cfc9b3bb2a434db10226cdd1c50eff1dd24431bf043f10f037e74df53620e4be83b6e4baa069718a856ba99cd5aad82ee8d0801ffb9f814e97095e20e8f6d712c3d6036805a381300e53e2603a3a54376072ea1186b482b8638b0961138af3449c605bf187c09425383794e4fa64ade1ebfee2b1adee2e54aaab39edc195266679df82399f0dd70c60945178651402b00214cfd9503c71e28738380e0f23697e7f6fe2b39ed5da1e22b9f6a1a681285e7646", 0xf4}, {&(0x7f0000002100)="05d1792aee228f94b17e3b611fe11ba406c07080fb5c0f34127e469511df501d6cff538985ad1f863bfbe13dc8fd081e129a742c629de41f52ff918682bc3e71a89057c60e3cc9b53e436dd95f8f858a1b1c7ce4d5b29099312a8d02d10c80c0cc426a6e208d69abbdd10f9975c3ed49bb06d4954d6946ba4ab5c38f6d3bf761cb381ac4d555ab261ba6d3", 0x8b}, {&(0x7f0000000c40)="6cc2", 0x2}, {&(0x7f00000021c0)="5f51c9037c46b03e84992266cf7528705fc4317d7e92c514c8d8ecfcd82e5c7dbb79530f71c73576156df8ae651b2a6f4e2075ea2004fb406741e2770c38872f894842d6b4a112811990d1f084576df229164a53fad506c62db04fe51ba82fd63103d3fccb2984bd24de561db5b952a0211546923cf5ea7bdda83e731e8b572d917b42a344225b7db6", 0x89}], 0x5, &(0x7f0000002340)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x3c, 0x10, 0x2, 0xf8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @local, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x26}, @private2, @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x33}, r5}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x5f, 0x18, '\x00', [@generic={0xe, 0xc5, "0bf86065cf521b2bd7800837554daa1c272b972d96f68b7eaf9858f998f03ce91e9464096e8a305586b92cf9289818d7a5afdbf8bc4b94f933e311e761de168e871e39e7682acc8cb3d5571df8d79405877c460c76848d4e0c663917c1d59a9d6192613b64e687be6e211e80cfdede4ade8bd8b6f940f7ead6d579c059ec624de002d8ca6804386a89d45c382aaf6e79a274b160eac4e5e460b0118933c8189f7049648cc2ee6b279a7b8c95882ff263dd2d81ef7ac3b5392486739722384935f631946844"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x7d}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x218}}], 0x3, 0x4000) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002700)={@cgroup, 0xc, 0x1, 0x2, &(0x7f0000000b00)=[0x0], 0x1, 0x0, &(0x7f0000002640)=[0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000026c0)=[0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000027c0)={r1, r5, 0x25, 0x4, @val=@iter={&(0x7f0000002780)=@map_fd=r0, 0x10}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002740)={@map=r0, r1, 0x38, 0x2000, 0x0, @value=r7, @void, @void, @void, r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) readlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004240)=""/4098, 0x47c) 898.201076ms ago: executing program 4 (id=767): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x81}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000850) rmdir(&(0x7f0000000240)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000fff4ff7f003400000008000000040000000000000401000000001600000000000101afff1a33aafb0c719c4f8dfd00000000003892288f30f68f57cdf8bda90000007a2892225640ca0024f6322623d269fe000000000000"], 0x0, 0x54}, 0x28) chdir(&(0x7f00000001c0)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd=r1, 0x1, &(0x7f00000000c0)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r7, &(0x7f00000059c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000002100), 0x20024, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0d093cb8643c", @ANYRESDEC=r8, @ANYBLOB=',fowner>', @ANYRESDEC=r8, @ANYBLOB=',\x00']) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004) r10 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r10, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r11, &(0x7f0000003980)={0x2020}, 0x2020) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 609.373035ms ago: executing program 0 (id=768): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e1d, 0x487, @mcast1, 0x400}, 0x1c) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000000c0)={0x1c, 0x5, 0xd}) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009602"]) (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') (async) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x1, {0x0, 0x0, 0x2}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x0) (async) syz_usb_connect(0x4, 0x7b5, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2e, 0x3f, 0xe9, 0x10, 0xbeed, 0x909f, 0xfb11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a3, 0x2, 0xfd, 0xfa, 0x0, 0xca, [{{0x9, 0x4, 0x62, 0x6, 0xf, 0x8, 0x2, 0x1, 0xa4, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "d48c7c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xf3e7, 0x7, 0x9b}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0xd0d1, 0x100}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0x7, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}]}], [{{0x9, 0x5, 0xd, 0xc, 0x3bf, 0x5, 0xfe, 0xd, [@generic={0xb3, 0x10, "9cf1a8c641c6b0991778f53081aad52d829b8ca3cd59f6234eeeab80726b3bc5aaf46795402e666b69f574237cf09b69ddf11baaab7b2f720952da23b8bc03b0b183c4134211442d0cc62c31b301772ba913ca2cbee4174dd817a0ce4f7068e89cf7f2eb5f65f02101850fdaadcac66abbb0de48eb18a62666899345473410905840482feea834896af224ddad8674930e956051565af4b9c0df4e3c3913b8c3a64984c3bd523463f0bc3f1d860b88e997"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x6, 0x40, 0xb, [@generic={0xaa, 0x2d, "9cbeb77728d6a15867b34dfcc695e950366019d50cae8947f4d4c90e1608ab4db82040f8a37432e5ce517eb195e87d4b06d205e4b49af312f9d36712976eaf11cfba073a3f1213543636d66b6bdf19676814e0548c5d10b27f572523bcefeabe57dee73fa593838fb197895bc455315ef5d320ec1c3039c2e4cd3291abd3aa57187a84e8beb9e30f4b26f221fd54c9a99ea2c262b1950e34f7c946e4dfe6f96797627658c77b04a2"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0xd, 0x28, 0x20}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0xc, 0x0, [@generic={0xd1, 0x2d, "58fddc48134ae0c2f9f6748ae7ea3e9dded5fc9457fa2673a92b05f9020ec4931f4bd6b9386bf3ed92810b892dfd95a297f1a1ef30acc6967af5bbccde642cb7d968c19b9a4b7cbe96684798f07ad7878786dd33d5bb3768c9210f83ef25cce55cb9c0bd8a7ba72229f3906be1e6b91ccd509d9962b2ccca513adafdb33c80002df2a41d5242b5dc31fef7a6648d391a749e06380291170078296bedc2d57b50d658b30d22d3f6ed0ef57fec043ee1f35dd6c8171e585800b7c253e996e6f4a2aa97b1a7195874124af0ce6598dd95"}, @generic={0xee, 0x22, "6b0506f758983c237d3e91b32e74b5c707f0128976096f072c6a52ea00280551f8f210f7b239059bb82afb7d85b0075495eb30e2b1b90bb892d7a282a006667f43b2b5369211f37327346c2c42c0d813364a148c2ebfb967a40bbb7abbbec7d0b47edc089ba6beef29242d8dbb106128ce8f4f49d284a3248953971f38c370edd5264ab6445f856428bee7a0b24084457f5d9eeb1e9af7d01a9d7df9b861ffad8df17b714201ca6405229f55814efca6dec324a2ec9522ec92cfe8fadf5c6455091368d5621244a6a083887e5ac45fa1ca80cf4f8fa9b2bf39a7b440f2b2b657869fa57edbb05a6f40e831f7"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x3, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xf3}, @generic={0x14, 0xc, "f4dc2fb005209ea557f1e275792ec382794e"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x1, 0x9, 0x3, [@generic={0xdc, 0xa, "5aca7946dcf5d7d82c50ef87536986c2cbda554558873a1bec8c796105ce41d252d57d872fe03383a333e6cc9ad59e2f9e2243fdbb7cf8ad66f7eeaa6297ed2d5e8af0667336312454ed400ffd049f3f976cfbf6c48f862e159321d37ff08051c1d9c5fa9183942ad823ec725b01c5dde9cb2d2761bc5316fbc86beb90533eb576971bf36872cb6d5ad88179301160c26a773d9086cb59670019e255bf82a921156abe3e5e416fdc1bb06c815417477d9c071bddcab1aaa9a8084c6bcebc10b1b3cf0ce3c7ad2bdfecdec85e2ca66449353f7a31f9854d896cfc"}, @generic={0x57, 0x23, "afb8504c70495688c31e91e7122c741a1b8c0caa28a8cabc6f07238a38e413a1b4e6af496a7f2aa953b0b6f2e0372c8635cc31dc1edc2a2543007f05a28c5e830450c3de3741708277aa43b6874d8be4ac200acfe6"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7, 0x4, 0x6c}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2b9}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x2, 0xc2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xeb81}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x2, 0x47, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xfe, 0xff, 0xb, [@generic={0xb8, 0x8, "94560d0fc1462d5386b7a3fb62f11a8c7744edf55c3553927f22a9a7b4c0adba9f45f92392957c93313a77d6ed8d37030413173caa1c0a08f8c272a4f361df335ecabddafeb6b1710f4a72a1b8072249e490bf869e5a75378305eab0be9c8d74d144283e5e24c8f9f4d35d3e4d4deb38fe7ae40cc6ceff6d850f4591c1c163cf4a2588a1c4dc4bc077f7a8ce1e4528b85bf7c7008ab2a99721675f6c6b362eea2fb35df878fedaa5d3a2cb2acd6976f71f971fd51c95"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0xfa, 0x1, 0x4f, [@generic={0xc2, 0x21, "2849ec5d17f587b781801f59a6423772f618fe16367ebdd7e135be0a96aebd4622fe9657f3730b36a2758f2facbdde71bb0f728c88860e80afbb35e238a6db7b4fbf9432478ce50fc4292ab9f93bd4c8c8e8ff0d0fec7b88dfc6acafada614de2d24e750d21e9a7c12f35871c5c5353a43ce928100114d5c19f86a714f5622d8d7c4173a3123780e5fabe8e06a294bebdf0c538d110da0d0ae6d9d7525d331bd9571d281244156bfbe3667d825e2662e005c8697ecf9c134c75d2f9a6d8f23cd"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x38f2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xe, 0x9, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x28, 0x8, 0x5}}]}}, {{0x9, 0x4, 0xd8, 0x2, 0x7, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x8, 0x1, 0x6, 0x81}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x74, 0x80, 0x8}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x3, 0x97, 0x7}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x0, 0x2, 0x1, [@generic={0x5b, 0xf, "6f13fbaa7b99c75e5636df2fd2359669f930700be35d0a7f9f2663868d35d55d3527f8efc1bf56e1128262f8a4a8f0116537f2eb4530729e984bb463d23dff129a2f3f56edbec3544bf1fd4c4c621f5b8867e3b4132a101889"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x3, 0xf}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xfffd}]}}, {{0x9, 0x5, 0xafd26a16df37cc84, 0x0, 0x200, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x0, 0x9, 0x1, 0x40, 0xd}, 0x37, &(0x7f0000000240)={0x5, 0xf, 0x37, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a988a9b3d9df15a5db82e23c7dd75d94"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xfd, 0x5, 0xfffe}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xa, 0x1, 0x90c}, @ss_cap={0xfffffffffffffcb9, 0x10, 0x3, 0x0, 0x5, 0x6, 0x13}]}, 0x6, [{0x83, &(0x7f0000000280)=@string={0x83, 0x3, "388de3fb803c9832310b94e9dab30fcf713f60ccdf681c690a3bfe4a74dd7d3ace123beb42b955992ac60e4c10ec0841b1b5f51877e59ac75820e2eb54c51064ecd102fd5407d382e9f9bc51a6d0ff1ed7157beb85f1fe8ee8ea2987f5086b3d4e2f919a9d1876766110c0533e795f2c0c301727ee524c5114e00d8d75cb191bd2"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xec, &(0x7f00000003c0)=@string={0xec, 0x3, "a2a594ac3640b4b5647a6434fe9a78f98ae81b63ca5a68a317f0dd88165ef14367553f6883d16c9d0f7446238b3756c96b063f969210f8ceee9d639f2479175465816b17173c59308ae671d92707d44b73a1812b8122fd50e0b29114ee78d2cf23080dbfe437d3a73f0c78832c37f5e3465d4b0c1148c3fd2251c2425787f3c957c376579d67cc39e83fffed7d2309e1363dd26a57d82214e0097834f2e2d7ced3fe0bf1c44d03d6f56f76264f051d3aac4f6eb5878ecf8a79949c2453bd12f040242eca5c31c16572eea4d942854bf6d990a68596f841cc0ffc4373da3fe931e10a44ec8c6cb661d5df"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x140c}}, {0x91, &(0x7f00000005c0)=@string={0x91, 0x3, "577a01a2b45859fe3253150b6a9fb5237618e3630fd1e299c474cbf8c5c5f89dd6779b7558caa33b78aa0635ad1bcd7dcc50f897882bb939a7d295a7fb7e86996bf1da1c52d763b9429866852666573f2c41a20b21d6e4d66e26aae95f18c5f7c521342b654daed98a5e0f5f4413fec758f91b2b79ab1b61aece72435cdfe47206bde58adc4d1c47617d64ea4b0e41"}}]}) r7 = socket$l2tp(0x2, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = syz_io_uring_setup(0x328, &(0x7f0000000000)={0x0, 0x6fa9, 0x10000, 0x3}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) io_uring_enter(r8, 0x2, 0x10a5, 0x3, 0x0, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SYNC(r11, 0x5001, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0) ioctl$TUNSETTXFILTER(r12, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) (async) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@broadcast]}) (async) bind$inet(r7, &(0x7f0000000540)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10) (async) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x30, 0x0, &(0x7f0000000040)) 607.940868ms ago: executing program 2 (id=769): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000300)='befs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3, 0x3b3}, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r6, 0x137c34ab10f3c183, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x2004c054) 435.547467ms ago: executing program 4 (id=770): r0 = syz_usb_connect$cdc_ncm(0x6, 0x9a, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x1, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "40c9ca8c"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x794, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x8}, [@call_mgmt={0x5}, @dmm={0x7, 0x24, 0x14, 0x4, 0xe5}, @mbim_extended={0x8, 0x24, 0x1c, 0x18a, 0x9, 0xfb0}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xc, 0x5976}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xbef, 0x0, 0x7, 0x4, 0x10}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x84, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7b, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xbe, 0x9, 0x6}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x10, 0x2, 0x4, 0x78, 0xb}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6f, "5bb3afd1f30a3a6c07410d864b3ab1e5"}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x35}}, {0x49, &(0x7f0000000200)=@string={0x49, 0x3, "2053ba9e41b7797f04727e69468b11cde8883c24864ecd1f0aa29f7a16be3ec61b36be73280c632a30bb8eb95ca60c1c246c6a03c43a805577a745f6c2fda01a9a941c3dc78fc6"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x186d}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x22, 0xb7, {0xb7, 0x9, "2fe0c4eab09871b64f80495d1164d08e0192c760b830631eac9f0e2fbfb7dbc0dffabcf65adbc212d74dc89d6284cf3b460a78ee567377342cfc3936d1c2403e3f4e2c2c48db17f55e41bff4406ee512fa0fe8c60d05d752e26312409e7b16a19a9b8683a1c84c9446cd2126725a4e13818488a1abcdacaef7e7be676609126824719f7c58d58a7b467d05b5e7729f841b3f6dc7f327d6ec3678c0bfdd5fdbdfacb3af330b9ea66addd2bd49ccfc3e719edb496550"}}, &(0x7f0000000480)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "63567a6e41cdeb6c584f95dcc715b72bb448a6e72a2af493964cf591ccd14a3081a159f2ab02a2751504022403af69ce58b32ab2e53aabc3a3198da3d2114281e484e514222e07f3b036"}}, &(0x7f0000000500)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x7fff000, 0x0, 0x8, [0xc000, 0x3f00]}, @ss_container_id={0xfffffe50, 0x10, 0x4, 0x28, "4048acb68304ac99ba36fa80097ac438"}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x9, 0x98, "15f396a4", "41572213"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x18, 0x2, 0x0, 0x7f, 0x5, 0x2}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x0, 0x17, 0x54, "5e1dede9c9ef63585e134d5caf48eaf6078db6c9cc7ebf6a944f99cfc368a93ed70a06ba3332a57fab1065a916b66c9126e09160eb492fbc34744323ac3721fb1f286569031e07c015871cb5781f4bc6ff4083e7"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x1a}, &(0x7f0000000800)={0x40, 0xb, 0x2, '&\r'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "02c5"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x543}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x18}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x9f}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x7}}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r1, 0x1}, 0x20) unshare(0x400) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x8f, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f) (async, rerun: 32) r5 = syz_usb_connect$cdc_ecm(0x0, 0x6c, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x7, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x8f, {{0xa, 0x24, 0x6, 0x0, 0x0, "8318401ec7"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffc, 0x7, 0x5}, [@acm={0x4, 0x24, 0x2, 0x7}, @dmm={0x7, 0x24, 0x14, 0x7, 0xfff}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xb1, 0x4, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x4, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x200, 0x5, 0xf5, 0xf1, 0x8, 0x6}, 0x1d, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1c09}}]}) (rerun: 32) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000d00)={0x14, &(0x7f0000000c80)={0x40, 0xa, 0x5, {0x5, 0x7, "cfecf9"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x1c, &(0x7f0000000d40)={0x20, 0x1, 0x36, "2afe2b357959b6de7c30ebc0e80e3d40f2d377734263051532c830fa53748d536bc9644f6f5a8244efba918e76d267624eaf69ff85c1"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000dc0)={0x0, 0x8, 0x1}}) (async) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) 210.680711ms ago: executing program 1 (id=771): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x800) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000400), 0x4a) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r1], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x22, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 37.503252ms ago: executing program 0 (id=772): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}]}, 0x1c}}, 0x4010) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) clock_settime(0x0, &(0x7f0000000700)={0x77359400}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6}, 0x18) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xd9, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @broadcast, @loopback}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000080) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000140)=0x2) (async) getdents64(r1, &(0x7f00000000c0)=""/85, 0x55) 0s ago: executing program 4 (id=773): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)={0x0, 0xe, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpid() kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x26c8, 0x0, 0x1, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x40000180, &(0x7f0000000180), 0x1, 0x4000007}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 168.216860][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.227336][ T6877] CIFS mount error: No usable UNC path provided in device string! [ 168.227336][ T6877] [ 168.237564][ T6877] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 168.247233][ T44] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.402349][ T44] usb 5-1: device descriptor read/64, error -71 [ 168.539157][ T44] usb usb5-port1: attempt power cycle [ 168.921759][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 168.986584][ T44] usb 5-1: device descriptor read/8, error -71 [ 169.357386][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.510486][ T44] usb 5-1: device descriptor read/8, error -71 [ 169.692781][ T44] usb usb5-port1: unable to enumerate USB device [ 170.012126][ T5931] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 170.145857][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 170.169923][ T6906] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 170.189720][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.203635][ T5931] usb 2-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.00 [ 170.214057][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.227751][ T5931] usb 2-1: config 0 descriptor?? [ 170.446651][ T5931] hid-generic 0003:1477:1022.0003: unknown main item tag 0x0 [ 170.504026][ T5931] hid-generic 0003:1477:1022.0003: hidraw0: USB HID vff.fe Device [HID 1477:1022] on usb-dummy_hcd.1-1/input0 [ 171.245530][ T5912] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 171.418900][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.468443][ T5912] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.508843][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.553599][ T5912] usb 5-1: config 0 descriptor?? [ 171.744413][ T6932] sctp: failed to load transform for md5: -2 [ 171.828191][ T5912] usbhid 5-1:0.0: can't add hid device: -71 [ 171.836231][ T5912] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 171.872192][ T5912] usb 5-1: USB disconnect, device number 15 [ 171.981938][ T5986] usb 2-1: USB disconnect, device number 17 [ 172.521734][ T5912] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 172.681790][ T1778] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.703013][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 172.710931][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.736692][ T5912] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 172.761017][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.784682][ T5912] usb 5-1: config 0 descriptor?? [ 172.855886][ T1778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.871715][ T1778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 172.893919][ T1778] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 172.903889][ T1778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.923298][ T1778] usb 1-1: Product: syz [ 172.931889][ T1778] usb 1-1: Manufacturer: syz [ 172.936556][ T1778] usb 1-1: SerialNumber: syz [ 172.979037][ T1778] usb 1-1: config 0 descriptor?? [ 173.101056][ T6960] capability: warning: `syz.3.255' uses deprecated v2 capabilities in a way that may be insecure [ 173.199547][ T5912] kye 0003:0458:5016.0004: control desc unexpectedly large [ 173.210252][ T5931] usb 1-1: USB disconnect, device number 8 [ 173.260836][ T5912] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0004/input/input8 [ 173.393784][ T5912] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0004/input/input9 [ 173.477276][ T6965] binder: 6964:6965 unknown command 0 [ 173.513388][ T6965] binder: 6964:6965 ioctl c0306201 200000000080 returned -22 [ 173.553131][ T5912] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 173.555865][ T6967] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.256'. [ 173.746954][ T6972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.756050][ T6972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.134137][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 175.341918][ T1778] usb 5-1: USB disconnect, device number 16 [ 175.476919][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 176.192583][ T1778] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.382027][ T1778] usb 3-1: Using ep0 maxpacket: 32 [ 176.410035][ T1778] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 176.447586][ T1778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 176.527955][ T1778] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 176.577565][ T1778] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 176.627490][ T1778] usb 3-1: Product: syz [ 176.661070][ T1778] usb 3-1: Manufacturer: syz [ 176.691930][ T1778] usb 3-1: SerialNumber: syz [ 176.743060][ T1778] usb 3-1: config 0 descriptor?? [ 176.875957][ T1778] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 177.396832][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 177.517710][ T7037] ubi31: detaching mtd0 [ 177.530756][ T7037] ubi31: mtd0 is detached [ 177.698091][ T44] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.713442][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 177.782230][ T5986] usb 3-1: USB disconnect, device number 12 [ 177.789961][ T6055] usb 3-1: Failed to submit usb control message: -71 [ 177.826646][ T6055] usb 3-1: unable to send the bmi data to the device: -71 [ 177.852047][ T6055] usb 3-1: unable to get target info from device [ 177.869321][ T6055] usb 3-1: could not get target info (-71) [ 177.895910][ T6055] usb 3-1: could not probe fw (-71) [ 177.913031][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 177.938930][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 177.954446][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.990289][ T44] pvrusb2: Hardware description: Terratec Grabster AV400 [ 178.012516][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 178.015725][ T44] pvrusb2: ********** [ 178.047165][ T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 178.066218][ T44] pvrusb2: Important functionality might not be entirely working. [ 178.075725][ T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 178.089572][ T44] pvrusb2: ********** [ 178.183959][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.196919][ T2344] pvrusb2: Invalid write control endpoint [ 178.263313][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 178.297094][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.342609][ T10] usb 1-1: Product: syz [ 178.346869][ T10] usb 1-1: Manufacturer: syz [ 178.367695][ T10] usb 1-1: SerialNumber: syz [ 178.398899][ T10] usb 1-1: config 0 descriptor?? [ 178.497669][ T2344] pvrusb2: Invalid write control endpoint [ 178.532235][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 178.570576][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 178.578643][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 178.640183][ T10] usb 1-1: USB disconnect, device number 9 [ 178.652966][ T2344] pvrusb2: Device being rendered inoperable [ 178.683808][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 178.714725][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 178.749735][ T2344] pvrusb2: Attached sub-driver cx25840 [ 178.766052][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 178.792258][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 179.138489][ T5912] usb 2-1: USB disconnect, device number 18 [ 179.565577][ T7090] ipvlan0: entered promiscuous mode [ 179.586621][ T7090] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 179.616643][ T7090] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.953097][ T7109] 9pnet: Could not find request transport: fo [ 181.353511][ T5931] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 181.531736][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 181.545206][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.591971][ T5931] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 181.601106][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.621261][ T5931] usb 1-1: config 0 descriptor?? [ 181.655409][ T5931] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 181.701887][ T5912] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 181.895598][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.959011][ T5912] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 181.973771][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.001770][ T5912] usb 2-1: Product: syz [ 182.006021][ T5912] usb 2-1: Manufacturer: syz [ 182.024842][ T5912] usb 2-1: SerialNumber: syz [ 182.032888][ T5912] usb 2-1: config 0 descriptor?? [ 182.144745][ T5192] bcm5974 1-1:0.0: could not read from device [ 182.146657][ T5912] usb 1-1: USB disconnect, device number 10 [ 182.175833][ T7118] bcm5974 1-1:0.0: could not read from device [ 182.209622][ T6351] bcm5974 1-1:0.0: could not read from device [ 182.257151][ T5986] usb 2-1: USB disconnect, device number 19 [ 182.690002][ T7145] binder: BINDER_SET_CONTEXT_MGR already set [ 182.697903][ T7145] binder: 7144:7145 ioctl 4018620d 2000000001c0 returned -16 [ 182.763223][ T7148] binder: 7144:7148 ioctl 89f8 200000000080 returned -22 [ 182.772076][ T5931] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 182.951466][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.987518][ T5931] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.020627][ T5931] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 183.045855][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 183.069412][ T5931] usb 3-1: Product: syz [ 183.094497][ T5931] usb 3-1: config 0 descriptor?? [ 183.184146][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 183.343121][ T5931] usb 3-1: USB disconnect, device number 13 [ 183.655207][ T30] audit: type=1326 audit(1754878882.808:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 183.741379][ T30] audit: type=1326 audit(1754878882.808:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 183.808691][ T30] audit: type=1326 audit(1754878882.828:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 183.808745][ T30] audit: type=1326 audit(1754878882.828:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 183.808792][ T30] audit: type=1326 audit(1754878882.828:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 183.808837][ T30] audit: type=1326 audit(1754878882.828:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 183.808888][ T30] audit: type=1326 audit(1754878882.828:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 183.808940][ T30] audit: type=1326 audit(1754878882.828:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7160 comm="syz.2.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 183.929114][ T7169] Bluetooth: MGMT ver 1.23 [ 184.167099][ T7166] tty tty28: ldisc open failed (-12), clearing slot 27 [ 184.515889][ T7186] IPv4: Oversized IP packet from 172.20.20.24 [ 184.525282][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 184.532953][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 184.631753][ T5931] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 184.682224][ T1778] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 184.761790][ T5931] usb 5-1: device descriptor read/64, error -71 [ 184.869521][ T1778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.908209][ T1778] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 184.927678][ T1778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.940170][ T1778] usb 2-1: Product: syz [ 184.944619][ T1778] usb 2-1: Manufacturer: syz [ 184.949482][ T1778] usb 2-1: SerialNumber: syz [ 184.990484][ T1778] usb 2-1: config 0 descriptor?? [ 185.031811][ T5931] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 185.181991][ T5931] usb 5-1: device descriptor read/64, error -71 [ 185.219529][ T5926] usb 2-1: USB disconnect, device number 20 [ 185.295033][ T5931] usb usb5-port1: attempt power cycle [ 185.391186][ T7198] netlink: 44 bytes leftover after parsing attributes in process `syz.3.331'. [ 185.550232][ T7202] binder_alloc: 7201: binder_alloc_buf, no vma [ 185.641799][ T5931] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 185.662580][ T5931] usb 5-1: device descriptor read/8, error -71 [ 185.902021][ T5931] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 186.118174][ T5931] usb 5-1: device descriptor read/8, error -71 [ 186.451394][ T5931] usb usb5-port1: unable to enumerate USB device [ 186.942137][ T5931] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 187.103637][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.115828][ T5931] usb 2-1: config 0 has no interface number 0 [ 187.127081][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 187.129094][ T7234] 9pnet_fd: Insufficient options for proto=fd [ 187.138162][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 187.138223][ T5931] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.138248][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.180992][ T5931] usb 2-1: config 0 descriptor?? [ 187.190476][ T7222] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 187.577944][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 187.584377][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 187.613424][ T5931] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 187.639577][ T5931] usb 2-1: USB disconnect, device number 21 [ 187.876299][ T7240] binder_alloc: 7236: binder_alloc_buf, no vma [ 188.591853][ T5931] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 188.803301][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.837943][ T7266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.857373][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 188.881583][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.903733][ T5931] usb 3-1: Product: syz [ 188.914762][ T5931] usb 3-1: Manufacturer: syz [ 188.919531][ T5931] usb 3-1: SerialNumber: syz [ 188.945144][ T5931] usb 3-1: config 0 descriptor?? [ 189.162966][ T10] usb 3-1: USB disconnect, device number 14 [ 189.691975][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.739547][ T7281] binder_alloc: 7280: binder_alloc_buf, no vma [ 189.822246][ T5986] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 189.844487][ T10] usb 5-1: device descriptor read/64, error -71 [ 189.942520][ T5931] IPVS: starting estimator thread 0... [ 189.991905][ T5986] usb 2-1: Using ep0 maxpacket: 32 [ 190.042334][ T5986] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 190.050686][ T5986] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 190.064477][ T7289] IPVS: using max 36 ests per chain, 86400 per kthread [ 190.089649][ T5986] usb 2-1: config 0 has no interface number 0 [ 190.101875][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 190.104105][ T5986] usb 2-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 190.134045][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.146862][ T5986] usb 2-1: Product: syz [ 190.151269][ T5986] usb 2-1: Manufacturer: syz [ 190.161552][ T5986] usb 2-1: SerialNumber: syz [ 190.176686][ T7298] netlink: 3 bytes leftover after parsing attributes in process `syz.0.362'. [ 190.188634][ T5986] usb 2-1: config 0 descriptor?? [ 190.200263][ T5986] cdc_acm 2-1:0.123: More than one union descriptor, skipping ... [ 190.218943][ T5986] cdc_acm 2-1:0.123: skipping garbage [ 190.252733][ T7298] batadv1: entered promiscuous mode [ 190.258015][ T7298] batadv1: entered allmulticast mode [ 190.272217][ T10] usb 5-1: device descriptor read/64, error -71 [ 190.399027][ T10] usb usb5-port1: attempt power cycle [ 190.538096][ T5986] usb 2-1: USB disconnect, device number 22 [ 190.761934][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 190.832418][ T10] usb 5-1: device descriptor read/8, error -71 [ 190.921727][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 191.071878][ T44] usb 1-1: device descriptor read/64, error -71 [ 191.071891][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 191.108313][ T10] usb 5-1: device descriptor read/8, error -71 [ 191.228741][ T10] usb usb5-port1: unable to enumerate USB device [ 191.415487][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 191.561888][ T44] usb 1-1: device descriptor read/64, error -71 [ 191.675851][ T44] usb usb1-port1: attempt power cycle [ 191.762456][ T5986] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 191.935305][ T5986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.968317][ T5986] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 191.985543][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.995591][ T5986] usb 3-1: Product: syz [ 191.999854][ T5986] usb 3-1: Manufacturer: syz [ 192.005046][ T5986] usb 3-1: SerialNumber: syz [ 192.018402][ T5986] usb 3-1: config 0 descriptor?? [ 192.031790][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 192.063733][ T44] usb 1-1: device descriptor read/8, error -71 [ 192.229853][ T5986] usb 3-1: USB disconnect, device number 15 [ 192.311829][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 192.350819][ T44] usb 1-1: device descriptor read/8, error -71 [ 192.521784][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 192.640035][ T44] usb usb1-port1: unable to enumerate USB device [ 193.454772][ T10] usb 2-1: config index 0 descriptor too short (expected 897, got 27) [ 193.475226][ T10] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 193.486361][ T10] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 193.497915][ T10] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 193.511772][ T10] usb 2-1: config 2 has no interface number 0 [ 193.520246][ T7353] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 193.536831][ T10] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 193.550536][ T7353] overlayfs: failed to set xattr on upper [ 193.578335][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.597634][ T7353] overlayfs: ...falling back to index=off. [ 193.607777][ T10] usb 2-1: Product: syz [ 193.613689][ T10] usb 2-1: Manufacturer: syz [ 193.621498][ T7353] overlayfs: ...falling back to uuid=null. [ 193.629821][ T10] usb 2-1: SerialNumber: syz [ 193.634693][ T30] audit: type=1326 audit(1754878892.778:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 194.022090][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.261447][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.595872][ T10] cdc_ncm 2-1:2.1: CDC Union missing and no IAD found [ 194.606932][ T30] audit: type=1326 audit(1754878892.778:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 194.629185][ T10] cdc_ncm 2-1:2.1: bind() failure [ 194.638926][ T10] usb 2-1: no audio or video endpoints found [ 194.671971][ T10] usb 2-1: USB disconnect, device number 23 [ 194.690059][ T30] audit: type=1326 audit(1754878892.778:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 194.931766][ T5919] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 194.938147][ T30] audit: type=1326 audit(1754878892.778:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 194.969923][ T30] audit: type=1326 audit(1754878892.778:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 195.029835][ T30] audit: type=1326 audit(1754878892.778:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 195.110786][ T30] audit: type=1326 audit(1754878892.778:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 195.143160][ T30] audit: type=1326 audit(1754878892.778:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 195.165794][ T30] audit: type=1326 audit(1754878892.778:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 195.195638][ T7374] autofs: Unknown parameter '' [ 195.225902][ T30] audit: type=1326 audit(1754878892.778:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7355 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4218ebe9 code=0x7ffc0000 [ 195.284464][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 195.324401][ T5919] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 195.337153][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.364373][ T5919] usb 5-1: Product: syz [ 195.378689][ T5919] usb 5-1: Manufacturer: syz [ 195.393585][ T5919] usb 5-1: SerialNumber: syz [ 195.416833][ T5919] usb 5-1: config 0 descriptor?? [ 195.440035][ T5919] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 195.821915][ T5931] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 196.241117][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.269023][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 196.288889][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.311345][ T5931] usb 2-1: Product: syz [ 196.319491][ T5931] usb 2-1: Manufacturer: syz [ 196.337780][ T5931] usb 2-1: SerialNumber: syz [ 196.369936][ T5931] usb 2-1: config 0 descriptor?? [ 196.375461][ T5919] usb 5-1: USB disconnect, device number 25 [ 196.632365][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 196.667613][ T5931] usb 2-1: USB disconnect, device number 24 [ 197.065082][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 197.087665][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 197.201908][ T5931] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.343702][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 197.353647][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 197.365312][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 197.377318][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 197.390803][ T5931] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.400447][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.412970][ T5931] usb 1-1: config 0 descriptor?? [ 197.425150][ T7407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 197.450562][ T5931] hub 1-1:0.0: USB hub found [ 197.511802][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 197.522466][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.538662][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.001405][ T5931] hub 1-1:0.0: 1 port detected [ 198.007744][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 198.054010][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.064105][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.083521][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 198.121685][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.132287][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.158117][ T10] usb 3-1: config 0 descriptor?? [ 198.779444][ T7433] gretap0: left allmulticast mode [ 198.784938][ T7433] gretap0: left promiscuous mode [ 198.792008][ T7433] bridge0: port 3(gretap0) entered disabled state [ 198.797686][ T5919] usb 3-1: USB disconnect, device number 16 [ 198.818906][ T7433] bridge_slave_0: left allmulticast mode [ 198.835857][ T7433] bridge_slave_0: left promiscuous mode [ 198.854024][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.879550][ T7433] bridge_slave_1: left allmulticast mode [ 198.889535][ T7433] bridge_slave_1: left promiscuous mode [ 198.896791][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.929841][ T7433] : (slave bond_slave_0): Releasing backup interface [ 198.969544][ T7433] : (slave bond_slave_1): Releasing backup interface [ 199.053937][ T7433] team0: Port device team_slave_0 removed [ 199.093743][ T7433] team0: Port device team_slave_1 removed [ 199.117533][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.137956][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.149052][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.163503][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.527428][ T7447] binder: BINDER_SET_CONTEXT_MGR already set [ 199.560195][ T7447] binder: 7446:7447 ioctl 4018620d 200000000040 returned -16 [ 199.613699][ T7435] tipc: Started in network mode [ 199.620584][ T7435] tipc: Node identity ac14140f, cluster identity 4711 [ 199.639659][ T7435] tipc: Enabled bearer , priority 10 [ 199.684509][ T5931] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 199.690300][ T5919] usb 1-1: USB disconnect, device number 15 [ 199.699367][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.705812][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.223345][ T5919] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 200.385570][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.396811][ T7471] fuse: Bad value for 'fd' [ 200.410524][ T5919] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 200.420872][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.429399][ T5919] usb 3-1: Product: syz [ 200.434790][ T5919] usb 3-1: Manufacturer: syz [ 200.439591][ T5919] usb 3-1: SerialNumber: syz [ 200.465295][ T5919] usb 3-1: config 0 descriptor?? [ 200.512838][ T44] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 200.512880][ T7476] C: renamed from team_slave_0 (while UP) [ 200.533357][ T5919] Process accounting resumed [ 200.544091][ T7476] netlink: 'syz.1.417': attribute type 4 has an invalid length. [ 200.552375][ T7476] netlink: 120 bytes leftover after parsing attributes in process `syz.1.417'. [ 200.563758][ T7476] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.633567][ T10] tipc: Node number set to 2886997007 [ 200.684570][ T7479] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 200.706625][ T5919] usb 3-1: USB disconnect, device number 17 [ 200.716598][ T44] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 200.757353][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.781033][ T7479] overlayfs: overlapping lowerdir path [ 200.798194][ T44] usb 5-1: Product: syz [ 200.810758][ T44] usb 5-1: Manufacturer: syz [ 200.838241][ T44] usb 5-1: SerialNumber: syz [ 200.859236][ T44] usb 5-1: config 0 descriptor?? [ 201.148372][ T44] usb-storage 5-1:0.0: USB Mass Storage device detected [ 201.157019][ T7488] syz.3.421: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 201.173490][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.3.421 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 201.173510][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.173526][ T7488] Call Trace: [ 201.173535][ T7488] [ 201.173543][ T7488] dump_stack_lvl+0x189/0x250 [ 201.173576][ T7488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.173594][ T7488] ? __pfx__printk+0x10/0x10 [ 201.173616][ T7488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 201.173637][ T7488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 201.173658][ T7488] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 201.173681][ T7488] warn_alloc+0x214/0x310 [ 201.173700][ T7488] ? stack_depot_save_flags+0x429/0x900 [ 201.173720][ T7488] ? __pfx_warn_alloc+0x10/0x10 [ 201.173740][ T7488] ? kasan_save_track+0x4f/0x80 [ 201.173765][ T7488] ? xskq_create+0x56/0x170 [ 201.173780][ T7488] ? xsk_init_queue+0xb0/0x110 [ 201.173793][ T7488] ? xsk_setsockopt+0x43f/0x710 [ 201.173817][ T7488] ? do_sock_setsockopt+0x179/0x1b0 [ 201.173840][ T7488] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 201.173862][ T7488] ? do_syscall_64+0xfa/0x3b0 [ 201.173878][ T7488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.173900][ T7488] __vmalloc_node_range_noprof+0x125/0x12f0 [ 201.173942][ T7488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 201.173970][ T7488] ? __kasan_kmalloc+0x93/0xb0 [ 201.173988][ T7488] vmalloc_user_noprof+0xad/0xf0 [ 201.174005][ T7488] ? xskq_create+0xbf/0x170 [ 201.174021][ T7488] xskq_create+0xbf/0x170 [ 201.174039][ T7488] xsk_init_queue+0xb0/0x110 [ 201.174056][ T7488] xsk_setsockopt+0x43f/0x710 [ 201.174083][ T7488] ? __pfx_xsk_setsockopt+0x10/0x10 [ 201.174110][ T7488] ? __fget_files+0x2a/0x420 [ 201.174131][ T7488] ? __fget_files+0x2a/0x420 [ 201.174147][ T7488] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 201.174163][ T7488] ? __pfx_xsk_setsockopt+0x10/0x10 [ 201.174189][ T7488] do_sock_setsockopt+0x179/0x1b0 [ 201.174217][ T7488] __x64_sys_setsockopt+0x13f/0x1b0 [ 201.174245][ T7488] do_syscall_64+0xfa/0x3b0 [ 201.174261][ T7488] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.174277][ T7488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.174293][ T7488] ? clear_bhb_loop+0x60/0xb0 [ 201.174312][ T7488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.174327][ T7488] RIP: 0033:0x7f8a4218ebe9 [ 201.174345][ T7488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.174358][ T7488] RSP: 002b:00007f8a43088038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.174375][ T7488] RAX: ffffffffffffffda RBX: 00007f8a423b5fa0 RCX: 00007f8a4218ebe9 [ 201.174386][ T7488] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 201.174396][ T7488] RBP: 00007f8a42211e19 R08: 0000000000000004 R09: 0000000000000000 [ 201.174405][ T7488] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.174415][ T7488] R13: 00007f8a423b6038 R14: 00007f8a423b5fa0 R15: 00007ffec92a4518 [ 201.174439][ T7488] [ 201.174448][ T7488] Mem-Info: [ 201.487518][ T7488] active_anon:38 inactive_anon:8841 isolated_anon:0 [ 201.487518][ T7488] active_file:4805 inactive_file:10255 isolated_file:0 [ 201.487518][ T7488] unevictable:17083 dirty:92 writeback:0 [ 201.487518][ T7488] slab_reclaimable:10152 slab_unreclaimable:97440 [ 201.487518][ T7488] mapped:33140 shmem:4251 pagetables:1309 [ 201.487518][ T7488] sec_pagetables:0 bounce:0 [ 201.487518][ T7488] kernel_misc_reclaimable:0 [ 201.487518][ T7488] free:1331552 free_pcp:17363 free_cma:0 [ 201.533258][ T7488] Node 0 active_anon:152kB inactive_anon:35364kB active_file:19220kB inactive_file:40888kB unevictable:66796kB isolated(anon):0kB isolated(file):0kB mapped:132560kB dirty:368kB writeback:0kB shmem:15468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12892kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.567070][ T7488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.600293][ T7488] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.629238][ T7488] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 201.635060][ T7488] Node 0 DMA32 free:1418568kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:35292kB active_file:17648kB inactive_file:40744kB unevictable:66796kB writepending:368kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:46824kB local_pcp:24848kB free_cma:0kB [ 201.667531][ T7488] lowmem_reserve[]: 0 0 1 1 1 [ 201.672352][ T7488] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:92kB active_file:1572kB inactive_file:144kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:88kB local_pcp:32kB free_cma:0kB [ 201.703280][ T7488] lowmem_reserve[]: 0 0 0 0 0 [ 201.708059][ T7488] Node 1 Normal free:3892264kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22532kB local_pcp:9028kB free_cma:0kB [ 201.740220][ T7488] lowmem_reserve[]: 0 0 0 0 0 [ 201.745013][ T7488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.757763][ T7488] Node 0 DMA32: 20*4kB (UME) 56*8kB (UME) 202*16kB (UME) 973*32kB (UME) 824*64kB (UE) 220*128kB (UE) 55*256kB (UME) 57*512kB (UM) 50*1024kB (UME) 24*2048kB (UM) 283*4096kB (UM) = 1418576kB [ 201.776570][ T7488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.789532][ T7488] Node 1 Normal: 218*4kB (UE) 68*8kB (UME) 44*16kB (UME) 63*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3892264kB [ 201.807765][ T7488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.817364][ T7488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.826763][ T7488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.836388][ T7488] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 201.845933][ T7488] 35622 total pagecache pages [ 201.850637][ T7488] 0 pages in swap cache [ 201.854839][ T7488] Free swap = 124996kB [ 201.859004][ T7488] Total swap = 124996kB [ 201.863216][ T7488] 2097051 pages RAM [ 201.867062][ T7488] 0 pages HighMem/MovableOnly [ 201.871792][ T7488] 424695 pages reserved [ 201.875999][ T7488] 0 pages cma reserved [ 203.317448][ T7471] Process accounting resumed [ 203.349204][ T44] usb 5-1: USB disconnect, device number 26 [ 203.479220][ T7499] tipc: Enabled bearer , priority 0 [ 203.559467][ T7499] syzkaller0: entered promiscuous mode [ 203.580436][ T7499] syzkaller0: entered allmulticast mode [ 203.869148][ T7518] tipc: Resetting bearer [ 203.882487][ T44] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 203.918164][ T7518] tipc: Disabling bearer [ 203.980401][ T7529] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 204.003393][ T5926] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 204.024343][ T7529] macsec1: entered promiscuous mode [ 204.029894][ T7529] macsec1: entered allmulticast mode [ 204.044830][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 204.064848][ T44] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 204.079616][ T44] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 204.095599][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.106114][ T7529] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 204.120814][ T7524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.430'. [ 204.132526][ T44] usb 5-1: Product: syz [ 204.136776][ T44] usb 5-1: Manufacturer: syz [ 204.152077][ T5926] usb 1-1: device descriptor read/64, error -71 [ 204.181741][ T44] usb 5-1: SerialNumber: syz [ 204.190717][ T44] usb 5-1: config 0 descriptor?? [ 204.201419][ T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 204.216012][ T44] usb 5-1: setting power ON [ 204.221289][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 204.237295][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.253799][ T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 204.263872][ T44] usb 5-1: media controller created [ 204.301400][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.344578][ T44] usb 5-1: selecting invalid altsetting 6 [ 204.361831][ T44] usb 5-1: digital interface selection failed (-22) [ 204.368707][ T44] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 204.402678][ T5926] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 204.454506][ T44] usb 5-1: setting power OFF [ 204.469764][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 204.651438][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 204.721576][ T7538] openvswitch: netlink: VXLAN extension message has 45 unknown bytes. [ 204.798679][ T5926] usb 1-1: device descriptor read/64, error -71 [ 204.815331][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.851038][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 204.882148][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.931091][ T10] usb 2-1: Product: syz [ 204.942472][ T10] usb 2-1: Manufacturer: syz [ 204.952530][ T5926] usb usb1-port1: attempt power cycle [ 204.964916][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 204.970401][ T10] usb 2-1: SerialNumber: syz [ 204.993241][ T44] (NULL device *): no alternate interface [ 204.997845][ T10] usb 2-1: config 0 descriptor?? [ 205.092581][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 205.170814][ T7544] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967294 (68719476704 ns) > initial count (4096 ns). Using initial count to start timer. [ 205.188899][ T7544] kvm: vcpu 0: requested 4096 ns lapic timer period limited to 200000 ns [ 205.228820][ T5919] usb 2-1: USB disconnect, device number 25 [ 205.321755][ T5926] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 205.362907][ T5926] usb 1-1: device descriptor read/8, error -71 [ 205.612488][ T5926] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 205.642403][ T5926] usb 1-1: device descriptor read/8, error -71 [ 205.763086][ T5926] usb usb1-port1: unable to enumerate USB device [ 205.844666][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 205.875308][ T5854] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 206.068695][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 206.076592][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 206.089565][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 206.095878][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 206.227174][ T7554] ceph: No mds server is up or the cluster is laggy [ 206.276183][ T7560] kernel profiling enabled (shift: 0) [ 206.476537][ T7563] x_tables: duplicate underflow at hook 1 [ 206.483262][ T5926] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 206.649299][ T10] usb 5-1: USB disconnect, device number 27 [ 206.733278][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 206.741199][ T5926] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 206.997714][ T5926] usb 2-1: config 0 has no interface number 0 [ 207.355396][ T5926] usb 2-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9 [ 207.381710][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.397149][ T5926] usb 2-1: Product: syz [ 207.401420][ T5926] usb 2-1: Manufacturer: syz [ 207.407494][ T5926] usb 2-1: SerialNumber: syz [ 207.420249][ T5926] usb 2-1: config 0 descriptor?? [ 207.657962][ T5926] ipheth 2-1:0.15: Unable to find alternate settings interface [ 208.077171][ T5926] usb 2-1: USB disconnect, device number 26 [ 208.581300][ T44] libceph: connect (1)[c::]:6789 error -101 [ 208.587803][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 208.605106][ T7577] ceph: No mds server is up or the cluster is laggy [ 208.864361][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 208.895580][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 209.781797][ T5926] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 209.992583][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.015130][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 210.045791][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.062791][ T7595] 9pnet_fd: Insufficient options for proto=fd [ 210.090237][ T5926] usb 5-1: Product: syz [ 210.101999][ T5926] usb 5-1: Manufacturer: syz [ 210.106677][ T5926] usb 5-1: SerialNumber: syz [ 210.150348][ T5926] usb 5-1: config 0 descriptor?? [ 210.396815][ T5926] usb 5-1: USB disconnect, device number 28 [ 210.987054][ T5919] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 211.212502][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 211.281928][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 211.380067][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.460999][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.563696][ T5919] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 211.608783][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.670732][ T5919] usb 2-1: config 0 descriptor?? [ 211.883740][ T7623] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.259045][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 214.268342][ T7631] bridge_slave_1: left allmulticast mode [ 214.274211][ T7631] bridge_slave_1: left promiscuous mode [ 214.282567][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.447911][ T7636] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 214.540840][ T7637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.458'. [ 215.085609][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 215.129514][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.237264][ T7631] bridge_slave_0: left allmulticast mode [ 215.243201][ T7631] bridge_slave_0: left promiscuous mode [ 215.249199][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.258929][ T5919] usb 2-1: USB disconnect, device number 27 [ 215.396763][ T7642] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 215.464264][ T7642] tipc: Enabling of bearer rejected, failed to enable media [ 215.618357][ T7647] cgroup: Need name or subsystem set [ 215.836085][ T7647] xt_CT: No such helper "snmp" [ 216.981777][ T1778] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 217.093471][ T44] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 217.163628][ T1778] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.197984][ T1778] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 217.220500][ T1778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.241175][ T1778] usb 1-1: Product: syz [ 217.273214][ T1778] usb 1-1: Manufacturer: syz [ 217.277896][ T1778] usb 1-1: SerialNumber: syz [ 217.313112][ T1778] usb 1-1: config 0 descriptor?? [ 217.371813][ T5919] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 217.406215][ T44] usb 2-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 217.422136][ T44] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 217.540155][ T1778] usb 1-1: USB disconnect, device number 20 [ 217.553334][ T44] usb 2-1: Product: syz [ 217.561902][ T44] usb 2-1: Manufacturer: syz [ 217.574190][ T44] usb 2-1: SerialNumber: syz [ 217.595315][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.604490][ T44] usb 2-1: config 0 descriptor?? [ 217.619328][ T5919] usb 3-1: config 7 has an invalid interface number: 97 but max is 0 [ 217.643385][ T5919] usb 3-1: config 7 has no interface number 0 [ 217.649995][ T44] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 217.677087][ T5919] usb 3-1: config 7 interface 97 altsetting 254 endpoint 0x7 has invalid maxpacket 16, setting to 0 [ 217.704973][ T44] dvb-usb: bulk message failed: -22 (4/0) [ 217.728109][ T5919] usb 3-1: No eUSB2 isoc ep 7 companion for config 7 interface 97 altsetting 254 [ 217.739942][ T44] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 217.794814][ T5919] usb 3-1: config 7 interface 97 has no altsetting 0 [ 217.810557][ T44] dvb-usb: bulk message failed: -22 (5/0) [ 217.837732][ T44] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 217.870130][ T5919] usb 3-1: string descriptor 0 read error: -22 [ 217.878384][ T5919] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01e8, bcdDevice=8e.09 [ 217.892382][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.913634][ T44] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 217.924629][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.944645][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.976248][ T44] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 217.996647][ T5919] ftdi_sio 3-1:7.97: FTDI USB Serial Device converter detected [ 218.062079][ T44] usb 2-1: USB disconnect, device number 28 [ 218.070281][ T5919] ftdi_sio ttyUSB0: unknown device type: 0x8e09 [ 218.337866][ T44] usb 3-1: USB disconnect, device number 18 [ 218.364311][ T44] ftdi_sio 3-1:7.97: device disconnected [ 218.551866][ T5931] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 218.695439][ T5931] usb 1-1: device descriptor read/64, error -71 [ 218.951765][ T5931] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 219.122142][ T5931] usb 1-1: device descriptor read/64, error -71 [ 219.312132][ T5931] usb usb1-port1: attempt power cycle [ 219.955535][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.051847][ T5931] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 220.095604][ T5931] usb 1-1: device descriptor read/8, error -71 [ 220.402901][ T5931] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 220.444607][ T5931] usb 1-1: device descriptor read/8, error -71 [ 220.572106][ T5931] usb usb1-port1: unable to enumerate USB device [ 220.869922][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.487'. [ 221.811956][ T1778] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 222.230741][ T1778] usb 3-1: Using ep0 maxpacket: 8 [ 222.261316][ T1778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 222.283281][ T1778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.294769][ T1778] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.305184][ T1778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 222.326681][ T1778] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 222.370467][ T1778] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 222.399627][ T1778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.434525][ T1778] usb 3-1: config 0 descriptor?? [ 222.464914][ T7750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.740362][ T5841] Bluetooth: hci5: unexpected event 0x04 length: 3 < 10 [ 222.747901][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.756294][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.763362][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.885792][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.893612][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.901390][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.910666][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.918584][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.926737][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.001795][ T7765] netlink: 'syz.4.493': attribute type 4 has an invalid length. [ 223.009602][ T7765] netlink: 17 bytes leftover after parsing attributes in process `syz.4.493'. [ 223.233978][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.241718][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.251248][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.259257][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.268256][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.276300][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.287905][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.296581][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.306184][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.314137][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.322804][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.489019][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.497847][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.504952][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.514041][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.521014][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.528059][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.535037][ T5841] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 223.559140][ T5919] usb 3-1: USB disconnect, device number 19 [ 223.581735][ T5854] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 223.913024][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 225.682489][ T44] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 225.841933][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 225.857652][ T44] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 225.867004][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.875117][ T44] usb 3-1: Product: syz [ 225.879474][ T44] usb 3-1: Manufacturer: syz [ 225.884198][ T44] usb 3-1: SerialNumber: syz [ 225.891560][ T44] usb 3-1: config 0 descriptor?? [ 225.897076][ T1778] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 225.901009][ T44] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 225.952061][ T5926] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 226.071927][ T1778] usb 2-1: Using ep0 maxpacket: 8 [ 226.098959][ T1778] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 226.107729][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 226.113754][ T44] gspca_sn9c2028: read1 error -32 [ 226.114500][ T44] gspca_sn9c2028: read1 error -32 [ 226.145197][ T1778] usb 2-1: config 0 has no interface number 0 [ 226.161759][ T1778] usb 2-1: config 0 interface 38 has no altsetting 0 [ 226.177199][ T5926] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 226.192033][ T1778] usb 2-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 226.201197][ T1778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.210413][ T5926] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.231672][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.241971][ T1778] usb 2-1: Product: syz [ 226.246183][ T1778] usb 2-1: Manufacturer: syz [ 226.250821][ T1778] usb 2-1: SerialNumber: syz [ 226.256689][ T5926] usb 1-1: config 0 has no interface number 0 [ 226.268701][ T5926] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.277819][ T1778] usb 2-1: config 0 descriptor?? [ 226.301447][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.323975][ T1778] usb-storage 2-1:0.38: USB Mass Storage device detected [ 226.349042][ T5926] usb 1-1: config 0 has no interface number 0 [ 226.366908][ T5926] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.377807][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.388338][ T5926] usb 1-1: config 0 has no interface number 0 [ 226.396177][ T5926] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.421835][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.441441][ T5926] usb 1-1: config 0 has no interface number 0 [ 226.480471][ T5926] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.512028][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.558162][ T44] usb 2-1: USB disconnect, device number 29 [ 226.569164][ T5926] usb 1-1: config 0 has no interface number 0 [ 226.614123][ T5926] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.633714][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.661958][ T5926] usb 1-1: config 0 has no interface number 0 [ 226.670599][ T5926] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.681671][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.697404][ T5926] usb 1-1: config 0 has no interface number 0 [ 226.705947][ T5926] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 226.714626][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.724847][ T5926] usb 1-1: config 0 has no interface number 0 [ 226.732593][ T5926] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.742003][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0 [ 226.750116][ T5926] usb 1-1: Product: syz [ 226.759301][ T5926] usb 1-1: config 0 descriptor?? [ 226.769762][ T5926] hub 1-1:0.255: Invalid hub with more than one config or interface [ 226.777956][ T5926] hub 1-1:0.255: probe with driver hub failed with error -22 [ 226.851759][ T5919] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 226.974692][ T44] usb 1-1: USB disconnect, device number 25 [ 227.014031][ T5919] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 227.024362][ T5919] usb 5-1: config 0 has no interface number 0 [ 227.030611][ T5919] usb 5-1: config 0 interface 41 has no altsetting 0 [ 227.041236][ T5919] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 227.058024][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.068763][ T5919] usb 5-1: Product: syz [ 227.076792][ T5919] usb 5-1: Manufacturer: syz [ 227.081480][ T5919] usb 5-1: SerialNumber: syz [ 227.089564][ T5919] usb 5-1: config 0 descriptor?? [ 227.506014][ T5926] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 227.666848][ T5926] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 227.675684][ T5926] usb 2-1: config 0 has no interface number 0 [ 227.682148][ T5926] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 227.695611][ T5926] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.710206][ T5926] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 227.720088][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.729801][ T5926] usb 2-1: Product: syz [ 227.734221][ T5926] usb 2-1: Manufacturer: syz [ 227.739062][ T5926] usb 2-1: SerialNumber: syz [ 227.751953][ T5926] usb 2-1: config 0 descriptor?? [ 227.772652][ T7828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 227.809859][ T7845] wg1 speed is unknown, defaulting to 1000 [ 227.817400][ T7845] wg1 speed is unknown, defaulting to 1000 [ 227.826777][ T7845] wg1 speed is unknown, defaulting to 1000 [ 227.841196][ T7845] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 227.860561][ T7845] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 227.922323][ T7845] wg1 speed is unknown, defaulting to 1000 [ 227.936181][ T7845] wg1 speed is unknown, defaulting to 1000 [ 227.946435][ T7845] wg1 speed is unknown, defaulting to 1000 [ 227.955193][ T7845] wg1 speed is unknown, defaulting to 1000 [ 227.963391][ T7845] wg1 speed is unknown, defaulting to 1000 [ 228.114430][ T5919] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 228.157704][ T5919] usb 5-1: USB disconnect, device number 29 [ 228.411912][ T44] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 228.486907][ T5912] usb 3-1: USB disconnect, device number 20 [ 228.592505][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 228.607726][ T44] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 228.639523][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.647056][ T5926] usb 2-1: USB disconnect, device number 30 [ 228.682173][ T44] usb 1-1: config 0 has no interface number 0 [ 228.745906][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 228.769358][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.792520][ T44] usb 1-1: Product: syz [ 228.810237][ T44] usb 1-1: Manufacturer: syz [ 228.831432][ T44] usb 1-1: SerialNumber: syz [ 228.856209][ T44] usb 1-1: config 0 descriptor?? [ 228.888155][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 228.888176][ T30] audit: type=1326 audit(1754878928.038:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f283b98ebe9 code=0x0 [ 229.129098][ T5926] usb 1-1: USB disconnect, device number 26 [ 229.446871][ T5986] hid (null): unknown global tag 0xe [ 229.453288][ T5986] hid (null): unknown global tag 0xc [ 229.467398][ T5986] hid-generic 0000:80000000:0002.0006: unknown main item tag 0x6 [ 229.479493][ T5986] hid-generic 0000:80000000:0002.0006: unknown main item tag 0x4 [ 229.488474][ T5986] hid-generic 0000:80000000:0002.0006: unknown main item tag 0x3 [ 229.496649][ T5986] hid-generic 0000:80000000:0002.0006: reserved main item tag 0xe [ 229.504912][ T5986] hid-generic 0000:80000000:0002.0006: reserved main item tag 0xd [ 229.513133][ T5986] hid-generic 0000:80000000:0002.0006: unknown global tag 0xe [ 229.520705][ T5986] hid-generic 0000:80000000:0002.0006: item 0 2 1 14 parsing failed [ 229.529901][ T5986] hid-generic 0000:80000000:0002.0006: probe with driver hid-generic failed with error -22 [ 229.661937][ T7880] netlink: 'syz.2.531': attribute type 12 has an invalid length. [ 229.672044][ T44] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 229.847596][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 229.892535][ T44] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 229.985183][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.097430][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.116314][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 230.143353][ T44] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 230.161459][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.233883][ T44] usb 5-1: config 0 descriptor?? [ 230.778048][ T44] redragon 0003:0C45:760B.0007: unknown main item tag 0x6 [ 230.808584][ T44] redragon 0003:0C45:760B.0007: item fetching failed at offset 7/133 [ 230.818847][ T44] redragon 0003:0C45:760B.0007: probe with driver redragon failed with error -22 [ 230.904716][ T5919] usb 5-1: USB disconnect, device number 30 [ 231.111869][ T44] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 231.281961][ T5926] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 231.307049][ T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 231.320503][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.329183][ T44] usb 3-1: Product: syz [ 231.337767][ T44] usb 3-1: Manufacturer: syz [ 231.342852][ T44] usb 3-1: SerialNumber: syz [ 231.356049][ T44] usb 3-1: config 0 descriptor?? [ 231.433718][ T5926] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 231.451715][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.471723][ T5931] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 231.483961][ T5926] usb 1-1: config 0 descriptor?? [ 231.522995][ T5926] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 231.621757][ T5931] usb 2-1: device descriptor read/64, error -71 [ 231.780271][ T44] hso 3-1:0.0: Can't find BULK IN endpoint [ 231.792376][ T44] usb-storage 3-1:0.0: USB Mass Storage device detected [ 231.871921][ T5931] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 232.001827][ T5931] usb 2-1: device descriptor read/64, error -71 [ 232.012498][ T10] usb 3-1: USB disconnect, device number 21 [ 232.112317][ T5931] usb usb2-port1: attempt power cycle [ 232.288081][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.318300][ T7928] bond0: (slave rose0): Enslaving as an active interface with an up link [ 232.501691][ T5931] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 232.962510][ T5931] usb 2-1: device descriptor read/8, error -71 [ 233.236356][ T5931] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 233.256171][ T7941] fuse: Bad value for 'user_id' [ 233.280663][ T7941] fuse: Bad value for 'user_id' [ 233.300987][ T5931] usb 2-1: device descriptor read/8, error -71 [ 233.352991][ T5926] gspca_stv06xx: I2C: Read error writing address: -71 [ 233.362442][ T5926] usb 1-1: USB disconnect, device number 27 [ 233.452403][ T5931] usb usb2-port1: unable to enumerate USB device [ 233.478658][ T30] audit: type=1326 audit(1754878932.628:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 233.587353][ T30] audit: type=1326 audit(1754878932.628:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 233.635474][ T30] audit: type=1326 audit(1754878932.628:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 233.690753][ T30] audit: type=1326 audit(1754878932.658:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 233.864583][ T30] audit: type=1326 audit(1754878932.658:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 233.923271][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.549'. [ 234.482401][ T44] hid (null): invalid report_size -1358781365 [ 234.532476][ T44] hid-generic 0001:0009:0001.0008: unknown main item tag 0x3 [ 234.548222][ T30] audit: type=1326 audit(1754878932.658:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 234.571131][ T44] hid-generic 0001:0009:0001.0008: unknown main item tag 0x6 [ 234.609041][ T44] hid-generic 0001:0009:0001.0008: invalid report_size -1358781365 [ 234.642171][ T44] hid-generic 0001:0009:0001.0008: item 0 4 1 7 parsing failed [ 234.650546][ T44] hid-generic 0001:0009:0001.0008: probe with driver hid-generic failed with error -22 [ 234.681406][ T30] audit: type=1326 audit(1754878932.668:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 234.969187][ T30] audit: type=1326 audit(1754878932.668:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 235.328782][ T30] audit: type=1326 audit(1754878932.668:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 236.150657][ T30] audit: type=1326 audit(1754878932.668:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 236.172110][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.181867][ T30] audit: type=1326 audit(1754878932.668:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 236.203298][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.242015][ T30] audit: type=1326 audit(1754878932.668:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 236.279420][ T30] audit: type=1326 audit(1754878932.678:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b82f90b07 code=0x7ffc0000 [ 236.354195][ T30] audit: type=1326 audit(1754878932.678:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6b82f90a7c code=0x7ffc0000 [ 236.382912][ T7985] overlayfs: failed to get inode (-116) [ 236.389408][ T7985] overlayfs: failed to get inode (-116) [ 236.431467][ T30] audit: type=1326 audit(1754878932.678:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6b82f909b4 code=0x7ffc0000 [ 236.452872][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.624969][ T7992] No such timeout policy "syz1" [ 236.639206][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 236.661321][ T7985] overlayfs: failed to get inode (-116) [ 236.667859][ T7985] overlayfs: failed to get inode (-116) [ 236.675164][ T7985] overlayfs: failed to get inode (-116) [ 236.681359][ T7985] overlayfs: failed to get inode (-116) [ 236.697014][ T7985] overlayfs: failed to get inode (-116) [ 236.705795][ T7985] overlayfs: failed to get inode (-116) [ 236.863930][ T5931] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 237.066539][ T5931] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 237.101552][ T5931] usb 5-1: config 0 has no interface number 0 [ 237.132399][ T5931] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 237.158155][ T5931] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.196696][ T5931] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 237.232063][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.260521][ T5931] usb 5-1: Product: syz [ 237.280750][ T5931] usb 5-1: Manufacturer: syz [ 237.294907][ T5931] usb 5-1: SerialNumber: syz [ 237.352064][ T5931] usb 5-1: config 0 descriptor?? [ 237.363382][ T7988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.394461][ T5931] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 237.456570][ T5931] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 237.527560][ T44] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 237.693309][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 237.758285][ T44] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 237.769802][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.800803][ T44] usb 2-1: Product: syz [ 237.819316][ T44] usb 2-1: Manufacturer: syz [ 237.842490][ T44] usb 2-1: SerialNumber: syz [ 237.871160][ T44] usb 2-1: config 0 descriptor?? [ 237.914483][ T44] gspca_main: sq905-2.14.0 probing 2770:9120 [ 238.193652][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.243562][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.071979][ T8057] netlink: zone id is out of range [ 239.077510][ T8057] netlink: zone id is out of range [ 239.083144][ T8057] netlink: zone id is out of range [ 239.089425][ T8057] netlink: zone id is out of range [ 239.095125][ T8057] netlink: zone id is out of range [ 239.102256][ T8057] netlink: zone id is out of range [ 239.107879][ T8057] netlink: zone id is out of range [ 239.113579][ T8057] netlink: zone id is out of range [ 239.143940][ T8057] netlink: zone id is out of range [ 239.281832][ T8057] netlink: zone id is out of range [ 239.333352][ T44] gspca_sq905: sq905_read_data: usb_control_msg failed (-110) [ 239.410160][ T44] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 239.666309][ T5931] usb 5-1: USB disconnect, device number 31 [ 239.678696][ T44] usb 2-1: USB disconnect, device number 35 [ 239.762558][ T5931] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 239.833407][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 239.833429][ T30] audit: type=1326 audit(1754878938.978:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 239.891237][ T8068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.573'. [ 239.892027][ T5931] cyberjack 5-1:0.69: device disconnected [ 239.969891][ T8068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.573'. [ 239.991702][ T30] audit: type=1326 audit(1754878938.978:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.031523][ T30] audit: type=1326 audit(1754878939.018:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.044384][ T8065] bridge1: entered promiscuous mode [ 240.052945][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.069083][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 240.108334][ T8068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.573'. [ 240.132382][ T30] audit: type=1326 audit(1754878939.018:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.136632][ T8065] bridge1: entered allmulticast mode [ 240.154691][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.216863][ T30] audit: type=1326 audit(1754878939.018:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.231378][ T8065] team0: Port device bridge1 added [ 240.238305][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.310018][ T30] audit: type=1326 audit(1754878939.018:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.351401][ T30] audit: type=1326 audit(1754878939.018:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.398993][ T30] audit: type=1326 audit(1754878939.018:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.411804][ T44] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 240.420714][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.452866][ T30] audit: type=1326 audit(1754878939.018:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.522143][ T30] audit: type=1326 audit(1754878939.018:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b82f8ebe9 code=0x7ffc0000 [ 240.593177][ T44] usb 1-1: device descriptor read/64, error -71 [ 240.619080][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 240.632091][ T5919] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 240.679019][ T8084] syz_tun (unregistering): left promiscuous mode [ 240.783210][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 240.795241][ T5919] usb 5-1: config 187 has an invalid interface number: 19 but max is 1 [ 240.810286][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 240.822883][ T5919] usb 5-1: config 187 has an invalid descriptor of length 0, skipping remainder of the config [ 240.843544][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 240.863010][ T5919] usb 5-1: config 187 has 1 interface, different from the descriptor's value: 2 [ 240.882368][ T5919] usb 5-1: config 187 has no interface number 0 [ 240.889209][ T5919] usb 5-1: config 187 interface 19 altsetting 64 endpoint 0x4 has invalid maxpacket 1608, setting to 64 [ 240.955486][ T5919] usb 5-1: config 187 interface 19 altsetting 64 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 240.984930][ T5919] usb 5-1: config 187 interface 19 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 240.997140][ T44] usb 1-1: device descriptor read/64, error -71 [ 241.014165][ T5919] usb 5-1: config 187 interface 19 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 241.028160][ T5919] usb 5-1: config 187 interface 19 has no altsetting 0 [ 241.039445][ T5919] usb 5-1: New USB device found, idVendor=10c4, idProduct=82f4, bcdDevice=47.d5 [ 241.049491][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.058226][ T5919] usb 5-1: Product: 蕈䢛鸹✟꥖ ❡挖箢䌎뻺꣣쯩莊 [ 241.068753][ T5919] usb 5-1: Manufacturer: Г [ 241.130069][ T5919] usb 5-1: SerialNumber: ﱘ땻ᦛ厎춌妴죠묱佶᮱쨂煢崱烊ᾀ뿑幥嬨햃Ȅ舏꩎僥䑪ᛉ홷⢄츒⤙ퟔ珆ꕶ뀔깯驃톺뀫薆步㶅廣氒ⰽ桁̀ﭚꆇ쭲犣蛉칬쁋ቱ궱䈊쯤ᗖᑹ꣝䊠ꞿ禕ড়몠챳宅溬ߗ໿ɷ㌗偞僀沔乜蠣쥾᳙ᑊ믄ṟ讞讏揄䜺깝ḕ㊤ꕚぶ賛牏ꆙ됝Λ重Ʃ鱭孡ෆʸ⊗鶄괚♶몔뮆 [ 241.171787][ T44] usb usb1-port1: attempt power cycle [ 241.421877][ T5912] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 241.492357][ T5919] cp210x 5-1:187.19: cp210x converter detected [ 241.507184][ T5919] cp210x 5-1:187.19: failed to get vendor val 0x370b size 1: -71 [ 241.521531][ T5919] cp210x 5-1:187.19: querying part number failed [ 241.532902][ T44] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 241.544373][ T5919] usb 5-1: cp210x converter now attached to ttyUSB0 [ 241.564029][ T44] usb 1-1: device descriptor read/8, error -71 [ 241.570712][ T5919] usb 5-1: USB disconnect, device number 32 [ 241.589921][ T5912] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 241.606641][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 241.614789][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.627372][ T5919] cp210x 5-1:187.19: device disconnected [ 241.633923][ T5912] usb 3-1: Product: syz [ 241.638407][ T5912] usb 3-1: Manufacturer: syz [ 241.644795][ T5912] usb 3-1: SerialNumber: syz [ 241.663455][ T5912] usb 3-1: config 0 descriptor?? [ 241.683999][ T5912] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 241.790842][ T8103] binder: 8102:8103 unknown command 6 [ 241.796975][ T8103] binder: 8102:8103 ioctl c0306201 200000000080 returned -22 [ 241.804630][ T44] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 241.834289][ T44] usb 1-1: device descriptor read/8, error -71 [ 242.002076][ T44] usb usb1-port1: unable to enumerate USB device [ 242.406544][ T8118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.425257][ T5912] gspca_sunplus: reg_r err -110 [ 242.430307][ T5912] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 242.697239][ T8120] autofs: Bad value for 'fd' [ 242.991829][ T5912] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 243.161689][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 243.188546][ T5912] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 243.205797][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.243303][ T5912] usb 2-1: Product: syz [ 243.260695][ T5912] usb 2-1: Manufacturer: syz [ 243.276493][ T5912] usb 2-1: SerialNumber: syz [ 243.313137][ T5912] usb 2-1: config 0 descriptor?? [ 243.349600][ T5912] gspca_main: sq905-2.14.0 probing 2770:9120 [ 244.089023][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.097919][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.262984][ T8136] capability: warning: `syz.4.591' uses 32-bit capabilities (legacy support in use) [ 244.509591][ T5912] gspca_sq905: bulk read fail (-22) len 0/4 [ 244.516008][ T5912] sq905 2-1:0.0: probe with driver sq905 failed with error -5 [ 244.934217][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.943201][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.708055][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 245.725891][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 245.752040][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 245.928427][ T5931] usb 3-1: USB disconnect, device number 22 [ 245.941895][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 245.970734][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.000879][ T9] usb 1-1: config 179 has no interface number 0 [ 246.038056][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 246.078826][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 246.114478][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.131069][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 246.143418][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 246.160219][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 246.173275][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.192380][ T8141] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 246.220988][ T8156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.597'. [ 246.469731][ T8141] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 246.476590][ T8141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.618076][ T9] usb 2-1: USB disconnect, device number 36 [ 246.668949][ T8141] vhci_hcd vhci_hcd.0: Device attached [ 246.910232][ T8167] netlink: 'syz.4.599': attribute type 3 has an invalid length. [ 246.919875][ T8167] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.599'. [ 246.972143][ T5912] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 247.023387][ T8161] vhci_hcd: connection closed [ 247.024738][ T44] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 247.282332][ T6767] vhci_hcd: stop threads [ 247.288010][ T6767] vhci_hcd: release socket [ 247.310132][ T5919] usb 1-1: USB disconnect, device number 32 [ 247.310132][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 247.310281][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 247.398998][ T6767] vhci_hcd: disconnect device [ 247.474526][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 248.079077][ T44] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 248.132287][ T44] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 248.165515][ T44] usb 3-1: Product: syz [ 248.182628][ T44] usb 3-1: Manufacturer: syz [ 248.200951][ T44] usb 3-1: SerialNumber: syz [ 248.238051][ T44] usb 3-1: config 0 descriptor?? [ 248.504464][ T44] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 248.529772][ T44] asix 3-1:0.0: probe with driver asix failed with error -61 [ 249.459959][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 249.546384][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 249.561695][ T5986] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 249.727943][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.772924][ T5986] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 79 [ 249.799045][ T5986] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.828481][ T5986] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 249.848447][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.878726][ T5986] usb 2-1: config 0 descriptor?? [ 249.893622][ T8185] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 250.103125][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.116693][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.129995][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.140662][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.153089][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.164324][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.178964][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.190315][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.203333][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.212974][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.244961][ T8214] xt_hashlimit: Unknown mode mask 500, kernel too old? [ 250.288814][ T5986] ath6kl: Failed to submit usb control message: -71 [ 250.327885][ T5986] ath6kl: unable to send the bmi data to the device: -71 [ 250.350975][ T5986] ath6kl: Unable to send get target info: -71 [ 250.370680][ T5986] ath6kl: Failed to init ath6kl core: -71 [ 250.387078][ T5986] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 250.416781][ T5986] usb 2-1: USB disconnect, device number 37 [ 250.589476][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 250.589496][ T30] audit: type=1326 audit(1754878949.738:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 250.617046][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.635016][ T30] audit: type=1326 audit(1754878949.738:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 250.702035][ T30] audit: type=1326 audit(1754878949.738:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 250.755160][ T30] audit: type=1326 audit(1754878949.738:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 250.802072][ T30] audit: type=1326 audit(1754878949.738:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 250.868513][ T30] audit: type=1326 audit(1754878949.778:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 250.936068][ T30] audit: type=1326 audit(1754878949.778:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 250.974151][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 251.002444][ T30] audit: type=1326 audit(1754878949.778:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 251.063787][ T8223] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 251.147108][ T30] audit: type=1326 audit(1754878949.788:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 251.216522][ T30] audit: type=1326 audit(1754878949.788:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 251.281887][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 251.300919][ T9] usb 3-1: USB disconnect, device number 23 [ 252.200995][ T9] IPVS: starting estimator thread 0... [ 252.246113][ T8237] net_ratelimit: 112 callbacks suppressed [ 252.246146][ T8237] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 252.301853][ T8235] IPVS: using max 24 ests per chain, 57600 per kthread [ 252.392207][ T5912] vhci_hcd: vhci_device speed not set [ 253.579195][ T8250] overlayfs: failed to clone upperpath [ 253.652284][ T5926] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 253.861724][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 253.883239][ T5926] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 253.911475][ T5926] usb 2-1: config 0 has no interface number 0 [ 253.982497][ T8269] trusted_key: encrypted_key: insufficient parameters specified [ 254.737781][ T5926] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 254.781162][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.813661][ T5926] usb 2-1: Product: syz [ 254.819199][ T5926] usb 2-1: Manufacturer: syz [ 254.863385][ T5926] usb 2-1: SerialNumber: syz [ 254.891106][ T5926] usb 2-1: config 0 descriptor?? [ 255.157351][ T5926] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 255.164020][ T5926] usb 2-1: Failed to initialize entity for entity 6 [ 255.170670][ T5926] usb 2-1: Failed to register entities (-22). [ 255.433412][ T8291] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 255.591767][ T2152] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 255.604457][ T8291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.666437][ T8295] erspan0: entered allmulticast mode [ 255.695045][ T8295] bond1: (slave erspan0): making interface the new active one [ 255.719047][ T8295] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 255.762002][ T2152] usb 5-1: Using ep0 maxpacket: 32 [ 255.770174][ T2152] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 255.781271][ T2152] usb 5-1: config 0 has no interface number 0 [ 255.800851][ T2152] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 255.814772][ T2152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.848317][ T5986] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 255.857329][ T2152] usb 5-1: Product: syz [ 255.878093][ T2152] usb 5-1: Manufacturer: syz [ 255.891522][ T2152] usb 5-1: SerialNumber: syz [ 255.914439][ T2152] usb 5-1: config 0 descriptor?? [ 256.026653][ T5986] usb 1-1: unable to get BOS descriptor or descriptor too short [ 256.048460][ T5986] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 256.068861][ T5986] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 256.091300][ T5986] usb 1-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config [ 256.114863][ T5986] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.135787][ T5986] usb 1-1: config 1 has no interface number 1 [ 256.148042][ T2152] radio-si470x 5-1:0.35: this is not a si470x device. [ 256.163046][ T5986] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 256.189393][ T5986] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.206793][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.218691][ T5986] usb 1-1: Product: syz [ 256.225248][ T5986] usb 1-1: Manufacturer: syz [ 256.238824][ T5986] usb 1-1: SerialNumber: syz [ 256.348042][ T2152] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 256.382651][ T2152] usb 5-1: USB disconnect, device number 33 [ 256.507873][ T5986] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 256.518715][ T5986] usb 1-1: found format II with max.bitrate = 8, frame size=9 [ 256.526656][ T5986] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 256.587832][ T5986] usb 1-1: USB disconnect, device number 33 [ 256.630508][ T5926] usb 2-1: USB disconnect, device number 38 [ 257.116469][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.146905][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout [ 257.201343][ T8295] syz.0.628 (8295) used greatest stack depth: 19864 bytes left [ 257.818630][ T5926] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 258.041908][ T5912] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 258.050233][ T5986] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 258.629007][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.642861][ T5926] usb 5-1: not running at top speed; connect to a high speed hub [ 258.655271][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.668733][ T5926] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 258.680622][ T5926] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 258.707187][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.717932][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.726734][ T5926] usb 5-1: Product: syz [ 258.731010][ T5926] usb 5-1: Manufacturer: syz [ 258.736131][ T5926] usb 5-1: SerialNumber: syz [ 258.771955][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 258.781383][ T5986] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 258.790511][ T5986] usb 2-1: config 179 has no interface number 0 [ 258.799587][ T5912] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.809012][ T5986] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 258.821396][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.830458][ T5912] usb 1-1: Product: syz [ 258.834993][ T5986] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 258.846652][ T5912] usb 1-1: Manufacturer: syz [ 258.851302][ T5912] usb 1-1: SerialNumber: syz [ 258.856102][ T5986] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 258.876292][ T5912] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 258.888391][ T5986] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 258.919050][ T5986] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 258.931756][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 258.937162][ T5986] usb 2-1: config 179 interface 65 has no altsetting 0 [ 258.947421][ T5986] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 258.957063][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.975513][ T2152] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 259.268952][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.293357][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.633173][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 259.695929][ T5926] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 259.712059][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 259.735783][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.759300][ T5986] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input13 [ 259.789013][ T10] usb 3-1: Product: syz [ 259.819782][ T10] usb 3-1: Manufacturer: syz [ 259.850394][ T5931] usb 1-1: USB disconnect, device number 34 [ 259.860640][ T5192] input input13: unable to receive magic message: -71 [ 259.871864][ T5926] usb 5-1: USB disconnect, device number 34 [ 259.883221][ T10] usb 3-1: SerialNumber: syz [ 259.944715][ T10] usb 3-1: config 0 descriptor?? [ 259.999669][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.022419][ T5192] input input13: unable to receive magic message: -71 [ 260.038186][ T8344] Invalid ELF section header size [ 260.065158][ T5192] input input13: unable to receive magic message: -71 [ 260.128610][ T5986] usb 2-1: USB disconnect, device number 39 [ 260.134700][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 260.242928][ T10] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 260.264511][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 260.302145][ T10] usb 3-1: USB disconnect, device number 24 [ 260.363872][ T8346] syz_tun: entered allmulticast mode [ 260.516904][ T8350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'. [ 260.732546][ T2152] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 260.806864][ T2152] ath9k_htc: Failed to initialize the device [ 261.063810][ T5931] usb 1-1: ath9k_htc: USB layer deinitialized [ 261.136761][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.143667][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.266030][ T8345] syz_tun: left allmulticast mode [ 262.821443][ T5986] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 262.829826][ T2152] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 263.412084][ T2152] usb 1-1: device descriptor read/64, error -71 [ 263.433847][ T5986] usb 3-1: config 8 has an invalid interface number: 235 but max is 0 [ 263.477686][ T5986] usb 3-1: config 8 has no interface number 0 [ 263.502614][ T5986] usb 3-1: config 8 interface 235 has no altsetting 0 [ 263.526167][ T5986] usb 3-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 263.537219][ T8373] binder: 8371:8373 ioctl 4018620d 0 returned -22 [ 263.558494][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.682058][ T2152] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 263.824717][ T2152] usb 1-1: device descriptor read/64, error -71 [ 263.935479][ T2152] usb usb1-port1: attempt power cycle [ 264.026083][ T8380] netlink: 'syz.4.655': attribute type 4 has an invalid length. [ 264.303240][ T2152] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 264.459178][ T2152] usb 1-1: device descriptor read/8, error -71 [ 264.872262][ T2152] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 264.934845][ T2152] usb 1-1: device descriptor read/8, error -71 [ 265.061997][ T2152] usb usb1-port1: unable to enumerate USB device [ 265.288670][ T5986] usb 3-1: string descriptor 0 read error: -71 [ 265.358758][ T5986] keyspan 3-1:8.235: Keyspan - (without firmware) converter detected [ 265.418798][ T5986] usb 3-1: USB disconnect, device number 25 [ 265.446217][ T5986] keyspan 3-1:8.235: device disconnected [ 265.573139][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 265.573159][ T30] audit: type=1326 audit(1754878964.728:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8403 comm="syz.1.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fb158ebe9 code=0x0 [ 265.632872][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 265.661815][ T2152] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 265.794351][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 265.811944][ T10] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 265.821754][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 265.821772][ T2152] usb 1-1: Using ep0 maxpacket: 32 [ 265.835203][ T2152] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 265.841254][ T10] usb 5-1: can't read configurations, error -61 [ 265.856081][ T2152] usb 1-1: config 0 has no interface number 0 [ 265.871084][ T2152] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 265.892325][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.900593][ T2152] usb 1-1: Product: syz [ 265.916588][ T2152] usb 1-1: Manufacturer: syz [ 265.924686][ T2152] usb 1-1: SerialNumber: syz [ 265.952776][ T2152] usb 1-1: config 0 descriptor?? [ 265.960904][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 265.968600][ T2152] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 265.982212][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 266.161944][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 266.180936][ T10] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 266.181813][ T2152] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 266.204824][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 266.213013][ T10] usb 5-1: can't read configurations, error -61 [ 266.225151][ T8412] binder: 8411:8412 ioctl 4018620d 0 returned -22 [ 266.232501][ T10] usb usb5-port1: attempt power cycle [ 266.236980][ T2152] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 266.580171][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 266.582161][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 266.630752][ T5926] usb 1-1: USB disconnect, device number 39 [ 266.659279][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 266.678806][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 266.699778][ T10] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 266.784880][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 266.797599][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 266.852475][ T10] usb 5-1: can't read configurations, error -61 [ 266.934650][ T5926] quatech2 1-1:0.51: device disconnected [ 267.052239][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 267.157737][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 267.232160][ T10] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 267.349658][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 267.439740][ T10] usb 5-1: can't read configurations, error -61 [ 267.503804][ T8430] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 267.526537][ T10] usb usb5-port1: unable to enumerate USB device [ 267.876061][ T30] audit: type=1800 audit(1754878967.018:249): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.669" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 268.076248][ T8441] Process accounting resumed [ 268.912814][ T8455] binder: 8454:8455 ioctl 4018620d 0 returned -22 [ 269.210687][ T8459] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 270.031860][ T5986] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 270.923949][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.939653][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.951782][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 270.958626][ T5986] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.968884][ T5986] usb 3-1: config 0 has no interface number 0 [ 270.978365][ T5986] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 270.991692][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.173606][ T5986] usb 3-1: Product: syz [ 271.185748][ T5986] usb 3-1: Manufacturer: syz [ 271.198881][ T5986] usb 3-1: SerialNumber: syz [ 271.232166][ T5986] usb 3-1: config 0 descriptor?? [ 271.242584][ T2152] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 271.270284][ T5986] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 271.432173][ T2152] usb 1-1: Using ep0 maxpacket: 16 [ 271.441745][ T2152] usb 1-1: config 0 has an invalid interface number: 135 but max is 1 [ 271.455435][ T2152] usb 1-1: config 0 has an invalid interface number: 96 but max is 1 [ 271.496746][ T2152] usb 1-1: config 0 has an invalid interface number: 90 but max is 1 [ 271.529036][ T2152] usb 1-1: config 0 has an invalid interface number: 191 but max is 1 [ 271.558290][ T2152] usb 1-1: config 0 has 4 interfaces, different from the descriptor's value: 2 [ 271.577655][ T2152] usb 1-1: config 0 has no interface number 0 [ 271.591717][ T2152] usb 1-1: config 0 has no interface number 1 [ 271.608272][ T2152] usb 1-1: config 0 has no interface number 2 [ 271.624772][ T2152] usb 1-1: config 0 has no interface number 3 [ 271.635274][ T2152] usb 1-1: config 0 interface 135 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 271.661737][ T2152] usb 1-1: config 0 interface 135 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 271.691315][ T2152] usb 1-1: config 0 interface 135 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 271.722864][ T2152] usb 1-1: too many endpoints for config 0 interface 96 altsetting 253: 176, using maximum allowed: 30 [ 271.744441][ T2152] usb 1-1: config 0 interface 96 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 271.772002][ T2152] usb 1-1: config 0 interface 96 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 176 [ 271.801655][ T2152] usb 1-1: too many endpoints for config 0 interface 90 altsetting 0: 186, using maximum allowed: 30 [ 271.821681][ T2152] usb 1-1: config 0 interface 90 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.821876][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 271.851733][ T2152] usb 1-1: config 0 interface 90 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 271.872947][ T2152] usb 1-1: config 0 interface 90 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 271.898369][ T2152] usb 1-1: config 0 interface 90 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 271.930754][ T2152] usb 1-1: config 0 interface 90 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 271.997432][ T8494] sctp: [Deprecated]: syz.2.678 (pid 8494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.997432][ T8494] Use struct sctp_sack_info instead [ 271.997633][ T2152] usb 1-1: config 0 interface 90 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 272.065323][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.080286][ T2152] usb 1-1: config 0 interface 90 altsetting 0 endpoint 0x7 has an invalid bInterval 27, changing to 7 [ 272.105350][ T2152] usb 1-1: config 0 interface 90 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 272.115294][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.137367][ T2152] usb 1-1: config 0 interface 90 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 272.194521][ T8497] afs: Unknown parameter '01777777777777777777777' [ 272.205724][ T2152] usb 1-1: config 0 interface 90 altsetting 0 endpoint 0xC has invalid maxpacket 1407, setting to 64 [ 272.222283][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.270661][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 272.271190][ T2152] usb 1-1: config 0 interface 90 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 186 [ 272.325228][ T2152] usb 1-1: config 0 interface 191 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 272.354253][ T2152] usb 1-1: config 0 interface 191 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 272.420980][ T2152] usb 1-1: config 0 interface 191 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 272.477490][ T2152] usb 1-1: config 0 interface 135 has no altsetting 0 [ 272.516259][ T2152] usb 1-1: config 0 interface 96 has no altsetting 0 [ 272.554162][ T2152] usb 1-1: config 0 interface 191 has no altsetting 0 [ 272.587573][ T2152] usb 1-1: New USB device found, idVendor=19d2, idProduct=1075, bcdDevice=a0.4e [ 272.601871][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.602034][ T5986] gspca_spca1528: reg_w err -110 [ 272.616181][ T2152] usb 1-1: Product: syz [ 272.627587][ T2152] usb 1-1: Manufacturer: Ќ [ 272.636459][ T2152] usb 1-1: SerialNumber: syz [ 272.652113][ T5986] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 272.661666][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.685872][ T10] usb 5-1: config 0 descriptor?? [ 272.686158][ T2152] usb 1-1: config 0 descriptor?? [ 272.921988][ T5926] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 272.931135][ T2152] option 1-1:0.135: GSM modem (1-port) converter detected [ 273.002198][ T2152] usb 1-1: USB disconnect, device number 40 [ 273.013119][ T2152] option 1-1:0.135: device disconnected [ 273.095936][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.120145][ T5926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 273.156314][ T5926] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 273.178371][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.200346][ T5926] usb 2-1: config 0 descriptor?? [ 273.245325][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 273.252499][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 273.264359][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 273.274326][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 273.281510][ T5926] usb 2-1: media controller created [ 273.295544][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.330740][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 273.342027][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 273.367435][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 273.389780][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 273.397682][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 273.434449][ T5926] usb 2-1: USB disconnect, device number 40 [ 273.507189][ T5926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 273.853737][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 273.859852][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 273.882724][ T10] usb 5-1: USB disconnect, device number 39 [ 274.099571][ T8515] netlink: 156 bytes leftover after parsing attributes in process `syz.1.693'. [ 274.283167][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 274.426075][ T8509] netlink: 300 bytes leftover after parsing attributes in process `syz.0.691'. [ 274.427730][ T9] usb 3-1: USB disconnect, device number 26 [ 274.501903][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 274.530877][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.559660][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 274.593856][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 274.616156][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.647002][ T10] usb 5-1: config 0 descriptor?? [ 274.991993][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 275.171252][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 275.189754][ T9] usb 3-1: can't read configurations, error -22 [ 275.352092][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 275.432032][ T10] logitech 0003:046D:C623.0009: unknown main item tag 0x6 [ 275.464622][ T10] logitech 0003:046D:C623.0009: collection stack underflow [ 275.537712][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 275.549436][ T10] logitech 0003:046D:C623.0009: item 0 4 0 12 parsing failed [ 275.589474][ T9] usb 3-1: can't read configurations, error -22 [ 275.628147][ T10] logitech 0003:046D:C623.0009: parse failed [ 275.660235][ T9] usb usb3-port1: attempt power cycle [ 275.685516][ T10] logitech 0003:046D:C623.0009: probe with driver logitech failed with error -22 [ 275.963263][ T5854] Bluetooth: hci1: Dropping invalid advertising data [ 275.971438][ T5854] Bluetooth: hci1: Malformed LE Event: 0x02 [ 276.032388][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 276.065971][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 276.074712][ T9] usb 3-1: can't read configurations, error -22 [ 276.211870][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 276.256213][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 276.278128][ T9] usb 3-1: can't read configurations, error -22 [ 276.299652][ T9] usb usb3-port1: unable to enumerate USB device [ 276.788938][ T8576] binder: BINDER_SET_CONTEXT_MGR already set [ 276.808904][ T8576] binder: 8575:8576 ioctl 4018620d 200000000040 returned -16 [ 277.016809][ T8583] cgroup2: Unexpected value for 'memory_localevents' [ 277.146216][ T2152] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 277.294084][ T8591] ip6tnl3: entered promiscuous mode [ 277.301401][ T2152] usb 2-1: device descriptor read/64, error -71 [ 277.512322][ T5986] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 277.571775][ T2152] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 277.692160][ T5986] usb 1-1: Using ep0 maxpacket: 32 [ 277.709650][ T5986] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 277.731529][ T5986] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 277.740238][ T2152] usb 2-1: device descriptor read/64, error -71 [ 277.750392][ T5986] usb 1-1: config 0 has no interface number 0 [ 277.757349][ T5986] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.769412][ T5986] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 277.801200][ T5986] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 277.819907][ T5986] usb 1-1: config 0 has no interface number 0 [ 277.831487][ T5986] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.842044][ T5986] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 277.862038][ T2152] usb usb2-port1: attempt power cycle [ 277.924463][ T5986] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 277.941834][ T5986] usb 1-1: config 0 has no interface number 0 [ 277.951701][ T5986] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.993493][ T5986] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.034297][ T5986] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 278.071296][ T5986] usb 1-1: config 0 has no interface number 0 [ 278.085496][ T5986] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.120536][ T5986] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.120661][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 278.143697][ T5986] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 278.176209][ T8601] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 278.185671][ T5986] usb 1-1: config 0 has no interface number 0 [ 278.204276][ T5986] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.216361][ T8601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.226775][ T5986] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.237036][ T2152] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 278.268102][ T5986] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 278.465385][ T2152] usb 2-1: device descriptor read/8, error -71 [ 278.471828][ T5986] usb 1-1: config 0 has no interface number 0 [ 278.478009][ T5986] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.527902][ T5986] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.553235][ T5986] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 278.561480][ T5986] usb 1-1: config 0 has no interface number 0 [ 278.639772][ T5986] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.693597][ T5986] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.733230][ T2152] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 278.764686][ T5986] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 278.773139][ T5986] usb 1-1: config 0 has no interface number 0 [ 278.779708][ T5986] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.792624][ T2152] usb 2-1: device descriptor read/8, error -71 [ 278.799129][ T5986] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.812353][ T5986] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 278.821833][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.830030][ T5986] usb 1-1: Product: syz [ 278.837042][ T5986] usb 1-1: Manufacturer: syz [ 278.846468][ T5986] usb 1-1: SerialNumber: syz [ 278.854414][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 278.902262][ T2152] usb usb2-port1: unable to enumerate USB device [ 278.993805][ T5986] usb 1-1: config 0 descriptor?? [ 279.036250][ T5986] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 279.130993][ T8608] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 279.138958][ T8608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.721'. [ 279.147983][ T8608] bond0: entered promiscuous mode [ 279.153078][ T8608] bond_slave_0: entered promiscuous mode [ 279.159013][ T8608] bond_slave_1: entered promiscuous mode [ 279.164899][ T8608] bond0: entered allmulticast mode [ 279.170034][ T8608] bond_slave_0: entered allmulticast mode [ 279.175866][ T8608] bond_slave_1: entered allmulticast mode [ 279.182034][ T8608] bridge0: port 3(bond0) entered blocking state [ 279.188446][ T8608] bridge0: port 3(bond0) entered disabled state [ 279.199533][ T8608] bridge0: port 3(bond0) entered blocking state [ 279.205963][ T8608] bridge0: port 3(bond0) entered forwarding state [ 279.238805][ T5986] etas_es58x 1-1:0.2: could not parse product info: '424242424242' [ 279.614081][ T5986] usb 1-1: USB disconnect, device number 41 [ 279.655995][ T5986] etas_es58x 1-1:0.2: Disconnecting syz syz [ 279.803185][ T44] usb 5-1: USB disconnect, device number 40 [ 281.825373][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.934791][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.153223][ T5986] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 282.579299][ T8688] netlink: 44 bytes leftover after parsing attributes in process `syz.4.722'. [ 282.721763][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.738'. [ 283.999966][ T8717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.742'. [ 284.180416][ T8717] netlink: 5 bytes leftover after parsing attributes in process `syz.3.742'. [ 284.511917][ T44] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 284.693944][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 284.721568][ T44] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 284.761861][ T44] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 284.792010][ T44] usb 2-1: Product: syz [ 284.796450][ T44] usb 2-1: Manufacturer: syz [ 284.831865][ T44] usb 2-1: SerialNumber: syz [ 284.852921][ T44] usb 2-1: config 0 descriptor?? [ 284.877045][ T8724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.894263][ T44] hub 2-1:0.0: bad descriptor, ignoring hub [ 284.906599][ T44] hub 2-1:0.0: probe with driver hub failed with error -5 [ 284.921104][ T8742] netlink: 88 bytes leftover after parsing attributes in process `syz.3.747'. [ 285.145325][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 285.324200][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.751'. [ 286.229603][ T44] usb 2-1: USB disconnect, device number 45 [ 286.409878][ T8761] 9pnet_fd: Insufficient options for proto=fd [ 287.004659][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.757'. [ 287.086722][ T8770] ip6gre1: entered allmulticast mode [ 287.275923][ C1] sd 0:0:1:0: [sda] tag#6651 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 287.286556][ C1] sd 0:0:1:0: [sda] tag#6651 CDB: Read(6) 08 00 0c 6a 08 48 [ 287.291835][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 287.305768][ T8781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.760'. [ 287.315636][ T8781] tc_dump_action: action bad kind [ 287.470886][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.508138][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 287.520022][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.529043][ T9] usb 2-1: Product: syz [ 287.533808][ T9] usb 2-1: Manufacturer: syz [ 287.538554][ T9] usb 2-1: SerialNumber: syz [ 287.554892][ T9] usb 2-1: config 0 descriptor?? [ 287.788853][ T9] usb 2-1: USB disconnect, device number 46 [ 287.975154][ T8793] overlayfs: failed to clone upperpath [ 288.882988][ T30] audit: type=1326 audit(1754878988.038:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8810 comm="syz.0.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95718ebe9 code=0x7ffc0000 [ 393.871573][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 393.878769][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5850/1:b..l [ 393.887471][ C1] rcu: (detected by 1, t=10502 jiffies, g=33553, q=805 ncpus=2) [ 393.895249][ C1] task:syz-executor state:R running task stack:21960 pid:5850 tgid:5850 ppid:5833 task_flags:0x400140 flags:0x00004000 [ 393.909614][ C1] Call Trace: [ 393.912946][ C1] [ 393.915920][ C1] __schedule+0x16aa/0x4c90 [ 393.920493][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 393.925823][ C1] ? __lock_acquire+0xab9/0xd20 [ 393.930722][ C1] ? __pfx___schedule+0x10/0x10 [ 393.935625][ C1] ? css_rstat_updated+0x1a5/0xca0 [ 393.940828][ C1] ? __lock_acquire+0xab9/0xd20 [ 393.945720][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 393.951060][ C1] preempt_schedule_irq+0xb5/0x150 [ 393.956219][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 393.962033][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 393.967890][ C1] irqentry_exit+0x6f/0x90 [ 393.972373][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 393.978609][ C1] RIP: 0010:lock_acquire+0x18b/0x360 [ 393.983965][ C1] Code: 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 55 fe 10 48 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e <41> 5f 5d e9 4d 28 cb 09 cc 65 8b 05 65 95 fe 10 85 c0 75 ce 65 8b [ 394.003752][ C1] RSP: 0018:ffffc9000430f318 EFLAGS: 00000282 [ 394.009968][ C1] RAX: ecf865a4cd4aee00 RBX: ffffffff821fd43e RCX: ecf865a4cd4aee00 [ 394.017976][ C1] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 394.026020][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 394.034243][ C1] R10: ffffc9000430f458 R11: ffffffff81acfd40 R12: 1ffff92000861e81 [ 394.042286][ C1] R13: ffffc9000430f440 R14: ffffc9000430f408 R15: 0000000000000246 [ 394.050339][ C1] ? unwind_next_frame+0xa5/0x2390 [ 394.055543][ C1] ? kasan_save_track+0x3e/0x80 [ 394.060454][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 394.066663][ C1] ? unwind_next_frame+0xa5/0x2390 [ 394.071857][ C1] ? unwind_next_frame+0xa5/0x2390 [ 394.077014][ C1] unwind_next_frame+0xc2/0x2390 [ 394.082077][ C1] ? unwind_next_frame+0xa5/0x2390 [ 394.087231][ C1] ? unwind_next_frame+0xa5/0x2390 [ 394.092383][ C1] ? stack_trace_save+0x9c/0xe0 [ 394.097284][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 394.103479][ C1] arch_stack_walk+0x11c/0x150 [ 394.108286][ C1] ? kasan_save_track+0x3e/0x80 [ 394.113192][ C1] stack_trace_save+0x9c/0xe0 [ 394.117914][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 394.123336][ C1] ? __pfx_mas_destroy+0x10/0x10 [ 394.128321][ C1] kasan_save_track+0x3e/0x80 [ 394.133131][ C1] ? kasan_save_track+0x3e/0x80 [ 394.138098][ C1] __kasan_slab_alloc+0x6c/0x80 [ 394.143011][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 394.148539][ C1] ? vm_area_dup+0x2b/0x680 [ 394.153103][ C1] vm_area_dup+0x2b/0x680 [ 394.157480][ C1] dup_mmap+0x90c/0x1ac0 [ 394.161785][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 394.166510][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 394.172447][ C1] ? mm_init+0xc68/0xec0 [ 394.176752][ C1] copy_mm+0x13c/0x4b0 [ 394.180874][ C1] ? copy_process+0x978/0x3b80 [ 394.185774][ C1] copy_process+0x16d3/0x3b80 [ 394.190511][ C1] ? copy_process+0x978/0x3b80 [ 394.195390][ C1] ? __pfx_copy_process+0x10/0x10 [ 394.200583][ C1] ? __handle_mm_fault+0x1144/0x5620 [ 394.205969][ C1] kernel_clone+0x224/0x7f0 [ 394.210546][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 394.215637][ C1] __x64_sys_clone+0x18b/0x1e0 [ 394.220626][ C1] ? count_memcg_event_mm+0x21/0x260 [ 394.225969][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 394.231325][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 394.236662][ C1] ? do_syscall_64+0xbe/0x3b0 [ 394.241387][ C1] do_syscall_64+0xfa/0x3b0 [ 394.245933][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.251260][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.257370][ C1] ? clear_bhb_loop+0x60/0xb0 [ 394.262095][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.268038][ C1] RIP: 0033:0x7f283b985453 [ 394.272486][ C1] RSP: 002b:00007fff2768fda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 394.281032][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f283b985453 [ 394.289125][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 394.297131][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 394.305150][ C1] R10: 00005555597057d0 R11: 0000000000000246 R12: 0000000000000000 [ 394.313158][ C1] R13: 00000000000927c0 R14: 0000000000046723 R15: 00007fff2768ff40 [ 394.321192][ C1] [ 394.324240][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g33553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 394.335670][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 394.345684][ C1] rcu: RCU grace-period kthread stack dump: [ 394.351635][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 394.365325][ C1] Call Trace: [ 394.368651][ C1] [ 394.371630][ C1] __schedule+0x16aa/0x4c90 [ 394.376312][ C1] ? schedule+0x165/0x360 [ 394.380711][ C1] ? __pfx___schedule+0x10/0x10 [ 394.385641][ C1] ? schedule+0x91/0x360 [ 394.389937][ C1] schedule+0x165/0x360 [ 394.394139][ C1] schedule_timeout+0x12b/0x270 [ 394.399055][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 394.404561][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 394.410511][ C1] ? __pfx_process_timeout+0x10/0x10 [ 394.415877][ C1] ? prepare_to_swait_event+0x341/0x380 [ 394.421539][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 394.426534][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.431772][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 394.438105][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 394.443491][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 394.448759][ C1] ? finish_swait+0xcd/0x1f0 [ 394.453409][ C1] rcu_gp_kthread+0x99/0x390 [ 394.458041][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 394.463386][ C1] ? __kthread_parkme+0x7b/0x200 [ 394.468394][ C1] ? __kthread_parkme+0x1a1/0x200 [ 394.473499][ C1] kthread+0x70e/0x8a0 [ 394.477649][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 394.482899][ C1] ? __pfx_kthread+0x10/0x10 [ 394.487541][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.492775][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.498016][ C1] ? __pfx_kthread+0x10/0x10 [ 394.502662][ C1] ret_from_fork+0x3fc/0x770 [ 394.507307][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 394.512481][ C1] ? __switch_to_asm+0x39/0x70 [ 394.517290][ C1] ? __switch_to_asm+0x33/0x70 [ 394.522105][ C1] ? __pfx_kthread+0x10/0x10 [ 394.526747][ C1] ret_from_fork_asm+0x1a/0x30 [ 394.531572][ C1] [ 394.534621][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 394.541088][ C1] CPU: 1 UID: 0 PID: 6107 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 394.551288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.561385][ C1] Workqueue: events_unbound toggle_allocation_gate [ 394.567951][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 394.574694][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 80 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 2b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 10 6a 0b [ 394.594368][ C1] RSP: 0018:ffffc90003f2f6a0 EFLAGS: 00000293 [ 394.600480][ C1] RAX: ffffffff81b4bbb0 RBX: ffff8880b873b040 RCX: ffff88801f385a00 [ 394.608486][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 394.616487][ C1] RBP: ffffc90003f2f800 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 394.624577][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110170c835d [ 394.632616][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8641ae8 [ 394.640624][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 394.649586][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.656225][ C1] CR2: 00007fd9571746a0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 394.664230][ C1] Call Trace: [ 394.667541][ C1] [ 394.670516][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 394.676914][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 394.682368][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 394.688623][ C1] ? __pfx___text_poke+0x10/0x10 [ 394.693630][ C1] ? rcu_is_watching+0x15/0xb0 [ 394.698451][ C1] ? trace_contention_end+0x39/0x120 [ 394.703799][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 394.708881][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 394.714134][ C1] smp_text_poke_batch_finish+0x5e0/0x1100 [ 394.719987][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 394.725058][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 394.731383][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 394.737705][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 394.743855][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 394.749832][ C1] static_key_disable+0x1a/0x20 [ 394.754779][ C1] toggle_allocation_gate+0x1a1/0x240 [ 394.760212][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 394.766157][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 394.772284][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 394.778044][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 394.783826][ C1] process_scheduled_works+0xade/0x17b0 [ 394.789445][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.795486][ C1] worker_thread+0x8a0/0xda0 [ 394.800153][ C1] kthread+0x70e/0x8a0 [ 394.804275][ C1] ? __pfx_worker_thread+0x10/0x10 [ 394.809443][ C1] ? __pfx_kthread+0x10/0x10 [ 394.814075][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.819315][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.824548][ C1] ? __pfx_kthread+0x10/0x10 [ 394.829182][ C1] ret_from_fork+0x3fc/0x770 [ 394.833810][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 394.838963][ C1] ? __switch_to_asm+0x39/0x70 [ 394.843769][ C1] ? __switch_to_asm+0x33/0x70 [ 394.848570][ C1] ? __pfx_kthread+0x10/0x10 [ 394.853205][ C1] ret_from_fork_asm+0x1a/0x30 [ 394.858023][ C1]