last executing test programs: 23m20.433126254s ago: executing program 2 (id=2988): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800fdff41000100fcff0700040000000100000004004880180001801400108010000b8008000100ac1414bb0450f880080002"], 0x38}, 0x1, 0x0, 0x0, 0x404c005}, 0x4008094) 23m20.307357281s ago: executing program 2 (id=2991): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, 0x0, 0xc8) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, 0x0], 0x2}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4, &(0x7f0000000040)=0xb, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 23m19.729127074s ago: executing program 2 (id=2996): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a0000100000000000000000804000000000000000000800000000000000ec01"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019"], 0xfc}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000840)={{0xdddd0000, 0x111e5001, 0x10, 0x6, 0xd, 0x2, 0x10, 0xc, 0x9, 0x7f, 0xc, 0x8}, {0x8080000, 0x25000, 0xd, 0x4, 0x7f, 0x4, 0x6, 0x2, 0xf8, 0x5, 0x0, 0x4}, {0x1, 0x41000, 0xc, 0x4, 0x0, 0x2, 0xc8, 0x5, 0x3, 0xd, 0x80, 0x8c}, {0x58000, 0x2, 0x8, 0x40, 0x8a, 0x1, 0x2, 0x2, 0x3, 0x5, 0xb, 0x2}, {0x54000, 0xffffffff, 0xa, 0xb6, 0xff, 0xed, 0x6, 0xb, 0x5, 0x3, 0x6, 0x4}, {0x60000, 0x8080000, 0x10, 0xd7, 0x5, 0x4, 0x84, 0x8, 0x2, 0xfa, 0x5f, 0xd}, {0x58000, 0x26000, 0xd, 0x6, 0x4, 0x5, 0x7, 0xff, 0x0, 0x7, 0x40, 0x6}, {0x40000, 0x100000, 0x0, 0x3e, 0x4, 0x2, 0xf, 0x7, 0x95, 0x0, 0x2, 0x6}, {0xf000, 0x4}, {0x1, 0x9}, 0x20000000, 0x0, 0xa000, 0x20001, 0x0, 0x2100, 0xdddd0000, [0x6, 0x2, 0x2040000001000, 0xffffffffffff5adc]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) statfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r3 = fsopen(&(0x7f0000000980)='iso9660\x00', 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000180)={0x8, @meta={0x4131434d, 0x5f2830b1, 0x87f8, 0x791f, 0x5ac298b2}}) r5 = socket(0x22, 0x80000, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 23m18.375838177s ago: executing program 2 (id=3005): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x220) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x90}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000e95}, 0x20048040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 23m18.283827637s ago: executing program 2 (id=3006): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r1, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 23m17.950446338s ago: executing program 2 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) r3 = socket(0x1e, 0x1, 0x3) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f0000000200)=""/146, 0x92}, 0x4}], 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000380)={0x3000000, 0x0, 0x1012, 0xdda1, 0x4, 0x10001, 0x2}) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r4 = socket$inet(0x2, 0x800, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) memfd_create(&(0x7f00000000c0)=',\xea\x00\xd4\xd7\xf1..\x8es\x0f\xb9\x80\xb9\x13\x92\'\x94N\x00-\xb3\x8d\xa1\xa4d\xda0y\xed\xdb\xf4\xeb-\xcf\xa3\xb8\xa3\x85\x9b\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\x00'/67, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000002, 0x30, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = eventfd2(0x0, 0x801) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x0, 0x200000, 0x2, r9, 0x8}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) 23m17.520346701s ago: executing program 32 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) r3 = socket(0x1e, 0x1, 0x3) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f0000000200)=""/146, 0x92}, 0x4}], 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000380)={0x3000000, 0x0, 0x1012, 0xdda1, 0x4, 0x10001, 0x2}) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r4 = socket$inet(0x2, 0x800, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) memfd_create(&(0x7f00000000c0)=',\xea\x00\xd4\xd7\xf1..\x8es\x0f\xb9\x80\xb9\x13\x92\'\x94N\x00-\xb3\x8d\xa1\xa4d\xda0y\xed\xdb\xf4\xeb-\xcf\xa3\xb8\xa3\x85\x9b\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\x00'/67, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000002, 0x30, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = eventfd2(0x0, 0x801) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x0, 0x200000, 0x2, r9, 0x8}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) 3m24.170715854s ago: executing program 4 (id=8632): getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) write(r4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x60, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004084) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe372, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe03, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x91ce, 0x4f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 3m22.60368709s ago: executing program 4 (id=8636): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x5, &(0x7f00000001c0)={0x11, 0x1fffffff, 0x2}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0xe, 0x0, 0x0, 0xb49, 0x9, 0xe, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000600), 0x0, 0x2000c844) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, 0x13}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) getpid() fcntl$setownex(r0, 0xf, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000014c0)={0x7, &(0x7f00000027c0)=[{0x6, 0x47, 0xff, 0x3}, {0x1ff, 0x8, 0x6, 0x4f1f}, {0x7, 0x5, 0x7, 0x200}, {0x4, 0x3, 0x3a, 0xebdb}, {0x9, 0x3, 0xfe, 0x1}, {0x3c0, 0x9, 0x2, 0x3}, {0xe5d0, 0x0, 0x1, 0x40}]}, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) syz_clone3(&(0x7f0000001500)={0x8100, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket(0x28, 0x5, 0x4) 3m18.843708417s ago: executing program 4 (id=8652): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000880)={0x3, 0x1d, 0x6, 0x0, 0x0, [{}, {{}, 0x10000}, {{}, 0xb}, {{}, 0x6}, {{}, 0xb13d}, {{}, 0x8000000000000000}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000001"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x801, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000080)="01fd", 0x2, 0x2a25}]) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50) r2 = fsmount(r1, 0x1, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000000)=""/30, &(0x7f00000000c0)=0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x0, 0x7f, 0x2, 0x4d, 0x9, 0x1, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4c57c34b, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x40], [0xfffffffd, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0xf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x9, 0x75, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x75, 0x5, 0x5f31, 0x4, 0x6, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0xdd, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x4, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x4000008, 0x4, 0x6d01, 0x8fd, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfb2, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xfffe, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xc0000, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x7, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xfffe, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0x11, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0xffcc83f, 0x4, 0x8006, 0x1, 0x2000, 0x4, 0x7ff, 0x30b1d693, 0x200, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) userfaultfd(0x801) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x5, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0x7, 0x7, 0x0, 0x0, 0x0, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m18.140855499s ago: executing program 4 (id=8656): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7}]}, 0x10) close(0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) (fail_nth: 17) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x40], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x11, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 3m16.891752956s ago: executing program 3 (id=8657): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f00000000c0)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)=' \\ 1 7.0.0.1 2000000000 \\xalhost\n', 0x24) 3m16.838767482s ago: executing program 4 (id=8659): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dae04070"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110"], 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/221) 3m16.640621833s ago: executing program 3 (id=8661): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e10800400"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x40400, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(0x0, r3) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101901, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip_vti0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000b40)={0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="20110c0000000c4845"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m16.360366493s ago: executing program 0 (id=8662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000440)={r1, 0x0, 0x100, 0x0, 0x7, 0x0, &(0x7f0000000400)=0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') link(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0xfffffffe, 0x401, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x15, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r7) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x3c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x44, 0x0, &(0x7f0000000280)="010ac1ea3a2f92d98cae9792c1b8a9d61ac2e9fb3267133f3b7aca527279a542ab786fba6c606466649c843f0b4db2b4a7eed95236adb6fe39797e2def7be1715b7984e8", 0x0}, 0x4c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r9, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES64=r1, @ANYRES32=r0, @ANYRES8, @ANYRESDEC, @ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=0x0], 0xff2e) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x1, 0x0, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002680)={r5, 0xe0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000002480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f0000000200), 0x8, 0x90, 0x8, 0x8, &(0x7f0000002540)}}, 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000026c0)={0x0, @dev, @multicast2}, &(0x7f0000002700)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f00000028c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002880)={&(0x7f0000000480)=ANY=[@ANYBLOB="24010000", @ANYRES16=r8, @ANYBLOB="000129bd7000fcdbdf250b0000004000018014000200636169663000000000000000000000001400020076657468305f746f5f626f6e640000001400020070696d726567310000000000000000001400018008000100", @ANYRES32=r10, @ANYBLOB="08000300020000003400018014000200697036677265300000000000000000000800030001000000140002006e65747063693000000000000000000088000180140002006d6163766c616e3100000000000000001400020070696d7265673000000000000000000014000200626f6e645f736c6176655f300000000008000300000000001400020073797a6b616c6c657230000000000000140002006970766c616e30000000000000000000080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08a001009beda26aec027a74d7a38c45dc7a521b5de54f3190484ca333e0d9b83b993ddddfadbdf017cef4520f45e4e9cfc765f8fb636a72f28b98fd9ec7000000004f18a6a330a9f84a10597138501d0158c2935f6f851bd67f29df9420c294665545e7ef1fae2ebd9fca02b821f0cfda4f88b14214ad3fe4b3379b652b5c3c8bfd230113711c752ceb72b4738252aec893722423c45b19ce435c3ef82b2957176cb3d7ff194e76fa53", @ANYRES32=r11, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) 3m15.416454119s ago: executing program 0 (id=8666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x2f, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d037"}]}], {0x14}}, 0x98}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) stat(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b80)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x839}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r8, 0xae9a) fsopen(&(0x7f0000000040)='binder\x00', 0x1) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) 3m15.296892895s ago: executing program 5 (id=8667): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) r1 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) close_range(r1, r1, 0x0) signalfd(r1, &(0x7f0000000240)={[0xc18]}, 0x8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) shutdown(r0, 0x1) connect(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xf8a, @empty, 0x377, 0x1}, 0x80) 3m15.221917686s ago: executing program 5 (id=8668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000020105040000000000000000020000003400018014000180080001007f000001080002007f0000011c0002800500010600020006b700000600034006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700000c00058008000100524153000800070000000000"], 0x90}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x280182, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000580)={0x0, 0x1}) close(r2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="17000000000000000000000000000000a4000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) openat$panthor(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) socket(0x1a, 0x5, 0x0) epoll_create1(0x0) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x2, 0x31, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002cb03e1203721"], 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xf01) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00000000000007000000850000000f000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) timer_create(0x3, 0x0, &(0x7f0000001400)) socket(0x21, 0x2, 0x10000000000002) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000f1000300ab2793127ec0ef573d5fac7796dde9ea3a4f06fa50c5e2cf0699b1d56c8d7a07aa1fdd4a263025a761054cd9e9eca0419a35accb582468d1e7e15d8c647950ffbd0527a4795665979f11f6d8e8979d514fc625be2456f5821c48796f8284358731264e78e40e17967143960da6c258fc584eca4ea1ce05c86386a39b71b3d940173bbbfd126882734c2ecf2f589bdf8172db01195f843cc7b1111ea9c31bfa81a9246f7dbef933e11fd3750c59ce283c6a838468abddfcaa0d80dcd82a85282e6fef3bca54cde72e19f0e23a47c3bb6156fb8638e89f756c561cba68247813a904ff", @ANYRES64=r4], 0x3e3100) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000002010101"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 3m14.680954714s ago: executing program 1 (id=8670): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) preadv(r0, &(0x7f0000000580), 0x0, 0x6, 0x1) syz_open_dev$usbfs(&(0x7f0000000d00), 0x76, 0xf01) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x2a) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) write$vhost_msg_v2(r4, &(0x7f0000000680)={0x2, 0x0, {&(0x7f00000004c0)=""/200, 0xc8, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) write$vhost_msg_v2(r4, &(0x7f0000000280)={0x2, 0x0, {&(0x7f00000001c0)=""/128, 0x80, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000380)=0x1) bind$can_j1939(r1, &(0x7f0000000640)={0x1d, r2, 0xffffffffffffffff, {0x1, 0x1, 0x3}, 0xfe}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x9}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000060005000500000000000900020073793000000000100073c7c25d28be06e13a706f7274001c0007800600054000000000060004400000000008000640000000060500010007000000050004000000000000ca3d7b10ba185dbfcfde888fc0b67071fd19249e75e742361403d5a77ffa9a9947b157cad1d73af3e5843b1bcae48a74137464ab5f8efdc1be6451247adb732d21aeed"], 0x64}}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a0f000003000000010000000000000006000000000000007ba6000000000000080000000000000000000000000000000000000000000000000000000000000000008000bd002000aa0000000000000002000000000000000700000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b6b00"/320]) landlock_restrict_self(r6, 0x8) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x4, 0x0, 0x0, 0xb}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000100)={0x210a, r7}, 0x0) landlock_restrict_self(r8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) 3m14.414521798s ago: executing program 0 (id=8671): r0 = socket(0x2, 0x3, 0x7f) unshare(0x26020480) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48890, &(0x7f0000000340)={0x2, 0x4e24, @broadcast}, 0x10) 3m14.324667916s ago: executing program 0 (id=8672): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x80, 0x2, 0x40, 0x10, 0xc, 0xb0}, {0x9, 0x5, 0x0, 0x2, 0x20, 0x7f, 0x4, 0x80}, {0x9, 0x5, 0x1, 0x3, 0x20, 0x5, 0x9, 0x7}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000200)={0xc, &(0x7f00000000c0)={0x20, 0xe, 0x24, {0x24, 0x31, "36f4da66f85d602425827bcbcd774ef9fc7cb57c418578304fc20e27bacabd548b6d"}}, &(0x7f0000000100)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "acbf166acf0b5dd6a5c0293660bdba50cfff474d84c1a8322099ee165879e53308354fa0de4b42792ef3a5359b932d09aa3d90f10781710c0aaa69a5ffcf9b82dc7cf261e8ce0067dcafd59366c1811dc7beb0fa8f2c6203e313357019d56980286c52dbe9f0913a3b2d24e1ad267d826f76a865f7c9fe3ee38ba8454909e970e4b44feb01d994b3867b59ea11ddc23f11c65a65d9621edfa306f635536649d5b359da07341b0c7cf82486293d3cb0943ce66ec8365bfaa025a6247463ac48e70620c334d6d40cc988881438ac3413a8db89f19905cfd473e96f2c6d61c6f2d4b077bcc501d055a496bf7a137f4c446d"}}}, &(0x7f0000000700)={0x10, &(0x7f0000000240)={0x0, 0x15, 0x1e, "06c0eaf0b649985cc3e415e60c723c9e60da8c4b04609a2f576c12db4a9a"}, &(0x7f0000000280)={0xa1, 0x1, 0x400, "c8b034f232545f227804655e1fea30be20833888c555310620b3ee889c9fc4fff2b43af703c7489b3b9739c2c52eee3ea0aad6ade3c5d0c24a15a17a03ce142bee100dd1a2cdb1764002047750c06f10ca50c87f249a8d812cae7d6ed76072baa69d75e55e4cab2710e923ddd8d7adb32866b8ba60704c73fe83e76cb4ea57359b298b64c0fbf0f37457972c997dabf8140b27875fdfeef1a94e0d3db61dacfa12687d9fb520d5eebb93ad368e763eb4c2ef10a34be677dd8c29564b1ccac6e6b909ce3214fe4c627e05bd1e28454c6bb794928f7631676fa90f24dabb546859967f20386498f486262e64162dd1a388e59d379fc8667075bc7bfcb97316cf86f4b7f4a956420e5c5e90b422bcd5283c8e5c4e94f317029a05aff940c5174890e24606b35393cc7f001c30a304de253d2f4176491fbe9106efc604076e8febc5ea5fc0407cee22a6680a3ed7dac18864faee575b556376e396d9f11ad0c9a5a31900a0695d70dd06af2054b20a6b8d7b64e42d66ede0bdb832bb52c8dda773308fa45819a22e70b44fae597bd2766c75fd5ada86f4ec5df4d7878c08456ee62b20815d03705070292dd672eeebdd9a2f698811e3977f1e13d1473bf27f9860ae99763efca5257b2b640782405cfa8c05f77f64330b771d2c0585fbf2718e8e221e116e9ac4913ee468ce964d17f705fd957ceee96fbf9395accd52d879d9198a8e06616c759c7339fe44903566a72977627ea88eae25168246cdbd228483c8fced05181495c36da730c52a0dbf125bb5697ba86e879265d87e4f67c9c50b9e102de68a0fa6e2a2a7edfb3940a6ce697711efbf5b70d45b3482b3a52bf2a2ee51152fe08ab0b585eee8fc3810040087c626518866be8f77fdba9ea8f152cf6a7f309fdc312d367bf94f6b7e17f7cbe613da66523cde72f1bac9f1285c49e7a15a850a2b7c53a5639df7dbffdcc9b57fb17ce900829efed29cd7aa444a4e5d9741ccde6e702f43a72ffcf52514c92d4c881551319e6cf29879af4b74372ab430282f83e4242efc6b91839db195701d87a32d4698ce79b383e732750b4c6ac4f21866131ba40944ad4f285903e14fb88edc799fa9ac52ed7aff63548fadff2c8de28130b1bc8dfb87958703ebe567d0ee7f917f948e46fd3316b6559fe562286bf2358ab40d067b198c06e266949b689484ae6585537516585f23eab5ac5675555e2e0699159d7e31b9c537d561011ade7cad64c3d3a1b24f8b9ee23cfd274c916a0c2c04dcf98b0f7719eb42adcf770c9ac1a6e9fcf0bf3c6bc05373eca7e291d1739ba7cf2b001959c508c8031ed24c9c48dd6680dfc989fa77e8f5d0a66f5998b11d525ef37c0582bc2c5d4fb6dcd9fc26fa455b50edfbd9ea4fbe02bb3c5ddb2d6e6ad4cddda6e82808c746ae97292d820909d9118cf042190fa5f7045748a8"}, &(0x7f00000006c0)={0x21, 0x0, 0x1, "1f"}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@gettaction={0x80, 0x32, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000015) 3m14.061798737s ago: executing program 5 (id=8673): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1031, r0, 0x0) (async) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r0, 0xe, 0x4) write$binfmt_script(r3, &(0x7f0000001380)={'#! ', './file0'}, 0xb) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000000)={0x9, 0x4, 0x7fffffff, 0x3, 'syz0\x00', 0x4}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(r4, 0x0, 0x0) 3m13.720849699s ago: executing program 1 (id=8674): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffc000, 0x103) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x280b0880, 0x0, 0x0, 0x7, 0xe, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1003, 0x0, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0xfffffffffffffff5, 0x80000004, {0x1006, 0xfffffffffffffffe, 0x1001, 0xffff, 0x7, 0x6, {0x2, 0x0, 0x2, 0x6, 0x80000000, 0x3, 0x41, 0x96, 0x3d25, 0x0, 0x3, r2, r3, 0xf73, 0x99}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m13.58078131s ago: executing program 4 (id=8675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001002bbd700000000010c108f5edc372648b0000000000000001ffffffff000000000000000000000000ecdf0000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fc020000000000000000000000000000fefffffffffffffffcffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000900000000000000010000000000000000084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0004002c0000004d00020063626328636173743529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280000000040000020000000"], 0x140}}, 0x44050) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000140)={0xe, 0x0, 0x6, {0xfffffff3, 0xffffffff, 0x2, 0x9}}) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./control\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000e0ffffff000000000c00ff102d000400000000030000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mlock2(&(0x7f0000765000/0x1000)=nil, 0x1002, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc090000000000010902240001000090080904000009030003000921fdff080122090009058103"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x0, 0x70bd29, 0x25dfdbfb, {0xa, 0x8, 0xb1, 0xff}, [@IFA_CACHEINFO={0x14, 0x6, {0xffff18d5, 0x5709aec7, 0x7fff, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r8, &(0x7f0000000480)={0xc, &(0x7f0000000340)={0x20, 0xc, 0x9b, {0x9b, 0x2, "e206f8939948567ec58668eb33a1fcbba6dca3097cd73d550cc79f7ea9f77fc2332c9eb9cd2696f4f6db2a81f73bd2592e40fea7413a845b228d41cd7f047a0b36afbf900437f33cf57807da39dbc1d3e3c41c267f11118123d9114d7bd7cc433850a86832c69e9a047450e8dbede68d56880d181cc47597464fb6202479ac3475cb69beda7b5735bd766c62ecc89c91c52cdbe442de37e0a1"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000680)={0x18, &(0x7f00000004c0)={0x40, 0x30, 0x86, "6e5328dd07e1576f97c7b791dfde17ccb1058e7518fbe12b5eb89f488fa195a6a40146581bcc95cdd50adada60760d1a82868f72271b9917c306f4730a313ce9d694a07508fc7a7d9093b8462890ab568767cfc3a07179d411e6734ab84647c2a90ebbce38b76ddf500182917205d96a7eacf326b8cc783930504d0729dbfee3ec1e9334a2d3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5e}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000600)={0xc0, 0x5, 0x4, "f85e4066"}, &(0x7f0000000640)={0x40, 0x5, 0x1, "9c"}}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3m13.537578667s ago: executing program 1 (id=8676): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000440)="5ca7127901fdfa99acb30266a167a01f", 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x102, 0x92) write(r1, &(0x7f0000000280)='0', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) pipe2$watch_queue(&(0x7f0000000000), 0x80) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) unshare(0x26030480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r2 = open(&(0x7f00000005c0)='./bus\x00', 0xe0c42, 0x8b) pwritev2(r2, 0x0, 0x0, 0x7000, 0x29000, 0x3) 3m13.481367487s ago: executing program 3 (id=8677): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x8, 0x30}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="0000000000000000100000008100", 0xe}, {&(0x7f0000000180)="b52d9fc437", 0x5}], 0x2}, 0x4040000) (fail_nth: 3) 3m13.331820034s ago: executing program 3 (id=8678): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$FUSE(r0, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="7d9a639445f958d1c914016db969130a3f96ad4750599c0ba266064cf84110132ceca224ebbfb27b7e4954055815b343e29c856845e98dfb15e73e34a232c44a37cb8862649c8d1c69ad0fc9ebe98f55a534fe2b12a24dd5cbe2545da68b5640ba01bd2056506b2e44b71ed4fc8b753429f6fdbdca67399be752217ebb545f33112f59b4774b432fadaae4a185bd729395066c4efd3dec111d7d541bacaf80", 0x9f}, {&(0x7f00000003c0)="b919e291ff71e5cbd64c7fbf82ab65feed93c517067c4662997a7ee02e83507fc613019f978d60405129044550140517d7851cca7b5d36", 0x37}, {&(0x7f0000000540)="5d4ca5d488891e6bd83cd66ecdefce023b6a6049da256c1392ca819b06b9769c11fe67abadee2a4850384ab72f8b7c53f07312584347b0c9580fbd8391235e02b629c2f14a02af608f60c62a57a8df0741f21d63b31a1b279d23b7538eb2f8cd683e98e989dfa8bb0af95730e9d3f4ea1f9ae91ea93303a1d5dc45068d6803172807bcc360c727537b37636189a074067aec86e606ace238fd6f135d733db726f59f9c65d9", 0xa5}, {&(0x7f0000001600)="fa62af380b2a4935047cd6aa917f5a81fa6c44952e551b749afddda12b96a78c474cc914453fe725c51e34ff55f666cfb2921f66c1f7f65502e4af90edce3366b35f5d1899ad34fd7add4f7f416ff1", 0x4f}], 0x4, &(0x7f00000016c0)=[@rights={{0x30, 0x1, 0x1, [r5, r6, r6, r0, r3, r6, r5, r5, r0]}}, @cred={{0x18, 0x1, 0x2, {r2, 0x0, r1}}}], 0x48, 0x880}}, {{&(0x7f0000002340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000056c0)=[{0x0}, {&(0x7f0000005680)}], 0x2, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x28, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, r3, r6, r0]}}], 0x40, 0x20008080}}, {{&(0x7f00000057c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005880)=[{&(0x7f0000005840)="85a285cb54ecc47d", 0x8}], 0x1, &(0x7f00000058c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r5, r6, r3]}}, @cred={{0x18, 0x1, 0x2, {r2, 0x0, r1}}}, @rights={{0x10, 0x1, 0x1, [r6]}}], 0x70, 0x24004004}}], 0x3, 0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd26, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x7, 0xb8822e013bb3d21}, {0xa, 0xfff3}, {0xffe0, 0xb}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x54, 0x6, 0x300, 0xc, 0x1, 0x40000002, 0x101}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x18, 0x7, 0xf, 0x0, 0x4, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) r7 = socket$inet6(0xa, 0x802, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, 0x0, 0x0) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000480)='#', 0x1}], 0x1) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000002600)) r10 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r10) 3m12.97529537s ago: executing program 5 (id=8679): openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x4, 0xbfffff89, 0x6, 0x6, 0x3}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000005, 0x100, 0x4, 0x7, 0x400003, 0x40000002, 0x9}, {0x7ffffffe, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000001"], 0x60}, 0x1, 0x400000000000000}, 0x40010) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010033000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff070000ffc10002d588380003c1000000"], 0xfd6c) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f00000001c0)={0x46fa, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYRES32, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES8=r4, @ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) bind(r4, &(0x7f00000006c0)=@ethernet={0x6, @multicast}, 0x80) r7 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x4d4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4a8, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x0, 0x461, 0x5, 0x400, 0xfffffff8}, {0x5, 0x1, 0x4, 0x6, 0x5}, 0x0, 0x101, 0xcd7}}, @TCA_TBF_PBURST={0x8, 0x7, 0x3cc}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x2, 0x81, 0x5, 0x7, 0x7}, {0x8, 0x1, 0x4, 0x80, 0x4, 0x4}, 0xfffffffc, 0x3, 0x134e}}, @TCA_TBF_PTAB={0x404, 0x3, [0xffffffff, 0x1949, 0x13, 0x0, 0x8, 0xfffffffa, 0x8, 0x101, 0x80, 0x0, 0x9, 0x9, 0x6, 0x6, 0xc, 0x3, 0x8, 0x10000, 0x6b8d, 0x200, 0x2, 0x7dd, 0xd, 0x9, 0x1, 0x3, 0x6, 0x2, 0xa44e, 0x8, 0x6, 0x9, 0xbe, 0x1, 0x1, 0x3, 0x0, 0xfffffffd, 0x4, 0x7, 0x76c, 0x5, 0x9, 0x4, 0x6, 0x5, 0x8, 0xeb, 0x524, 0x40000010, 0x3, 0xff, 0x8, 0x800, 0x7, 0x7, 0x6, 0x7a99, 0x6, 0x1c4, 0x0, 0x8001, 0x99, 0x3, 0x7fff, 0x27c, 0xbac1, 0x1fc, 0x6, 0x3, 0x0, 0x2, 0x7, 0x0, 0x7, 0x5, 0x2, 0xf8, 0x3ff, 0xfffffffb, 0x10, 0x3, 0xf2e, 0x3, 0x5, 0x3, 0x80000000, 0x9, 0x8000000, 0x3, 0x6, 0x5, 0x1, 0x2, 0x200, 0x7, 0x5, 0x9, 0x7ff, 0x500, 0x9, 0x3f2, 0x8000, 0x6, 0x6, 0x1e2bb73c, 0x8, 0x6, 0x8, 0x8, 0x0, 0x3bc, 0x10001, 0xa, 0x9, 0x6058, 0x7fff, 0x9, 0xf88e, 0x6, 0xff, 0x7, 0x1, 0x2, 0x8, 0x2, 0xff, 0x9, 0x1, 0x80000001, 0xa, 0x7, 0x6, 0xfffffff8, 0x5, 0x8, 0x4, 0x8, 0x0, 0x400, 0x7, 0x3, 0x3d2e5592, 0x0, 0x9, 0xf, 0x0, 0x400, 0xe, 0x1, 0xfffffffb, 0x3, 0x4000005, 0xfffffffc, 0x0, 0x1ff, 0x7ff, 0x9, 0x7, 0x7fff, 0xfffffffe, 0x10000, 0x800, 0x7fff, 0x0, 0xfffffff5, 0x6, 0x5, 0x7, 0x6, 0x81, 0xff, 0xffffffff, 0x5, 0x0, 0x9, 0x6, 0x9, 0x8, 0x400, 0x7, 0x1, 0x100, 0x6, 0x8, 0x2, 0x0, 0x1, 0x80, 0x10000, 0x401, 0x8, 0x2, 0x7, 0x400, 0xffff, 0xd59, 0x100, 0x3, 0xad, 0x9, 0x1000, 0x6, 0x1, 0xd51, 0x6, 0x5, 0xfd3, 0xffff, 0x400, 0x3, 0x2, 0xffffffff, 0xb28, 0x9, 0x4, 0xfdb7, 0x36f68fdc, 0xfffffffc, 0x7b8, 0x7, 0x2, 0x9, 0x5, 0x0, 0x7, 0x7f, 0x5, 0x2, 0xae, 0x5, 0xf, 0x2, 0x3, 0x1800, 0x8, 0x7, 0x3, 0xa, 0x7, 0xe1f, 0x4, 0x743da27b, 0x6, 0x1, 0x860, 0x3, 0x9, 0xc, 0x2, 0x80, 0x4, 0x10000, 0x2, 0xf8666b5, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0x5fb35b102dfce04}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe8ff8c6c033c1278}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0xfffe, 0x1, 0xfff7, 0x11c2}, {0x9, 0x2, 0x3ff, 0xc89a, 0x9, 0x3d0}, 0x7, 0xfffffff7, 0x18c6}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m12.904206423s ago: executing program 0 (id=8680): syz_emit_vhci(0x0, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = inotify_init() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8010) inotify_add_watch(r1, &(0x7f00000001c0)='./cgroup\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c004f213f1d3e7550cdffffff000000010000000500010007"], 0x1c}}, 0x48810) 3m12.698141976s ago: executing program 5 (id=8681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (fail_nth: 5) 3m12.28873369s ago: executing program 5 (id=8682): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x4, 0x1, 0x200, "288c6dd856429149a95a2e167d2c7b8dcf4400", 0x30385056}) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) (async) sendmsg$inet6(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0xaf}}}], 0x18}, 0x90) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x8000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="0909d91761ff2cebb4a7dcd2abbdc9f480618dec70c32ae8fe37c00a5ac0ccb171ddc42135f5d2a708d5d23647fa6123f7f940f1c7441242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m12.27938904s ago: executing program 3 (id=8683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) io_uring_setup(0x40ec, &(0x7f0000000280)={0x0, 0x21, 0x800, 0x0, 0x18c}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000005c0)='7', 0x1}], 0x1}}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={r5, 0xa49a, 0x30}, 0xc) r6 = socket(0x10, 0x3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000680)={0xfffffff7, 0xffffffff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000005480)={0x0, 0x7a120, 0x3cdb, {0x0, 0x10000}}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$TCSBRKP(r0, 0x5425, 0x2) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xfffffdd4, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x4080) sendmsg$inet6(r1, &(0x7f0000002440)={&(0x7f0000000000)={0xa, 0x4e23, 0xa69, @mcast1, 0x5}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000000f00)="74273085554dc82966383ec2d3b254041a1da1e007549bf6ea8a1d7083a64f574e0b40860e38801385bdb877cd5a59b96198fd431eacf187dafc7218f88ec4c6830988d1576a08e9a49ff670e28153acb161baf9e366e293597fb73a26d9af8d09d4130d1d512d79b360ea71110a961fd85312a8bc4eda1e277a920e0f2866ac0a6c7c618b9ad389b773ca5e35e15a011e19d42a4c8a510bfdda22072dcbfb965e0579f6828c506e3c320eb5b4c064540cb38d1a68a192b3e6b8359cf38258fe799084a1033c4c65679820bd5442f823881cc9ff19189d5dd214ed4c3c7de7c96be6108f45101a815ecb35fa735a86c970071ba933304e84363edbc2f1a578f5ce5d31aee5f9df7db135fcdc158e6ac8a07821f0ef6453a4bc8431ff87d7f3311486a4c2d1ecd45cc0c749aeff85044a4b3f0b762672e25a28134791d37b4f55ea4cbc13e766dd42f4085f6f2167f8e49b92c6cbe45fcd1a39c440c6d527bec48282b02be1ace7d836bcb7a97922d65ab06cbfe768e9418c277cb8fc9a00bce097f492b71dfa4b82c58fa1e2e7adfd265c161f9a85296b5032d453de993d0cae2ca5718f8d6e0500a00571a07f6d0db022556e1cae3b1c81435ea58f5b5f6f233fd7dac516d023acc6ce2abd25314de72cf250f8b5360ceb4349ee056c097a72f39ce85581bfb2cf628f016d4d0bd27eeed88330182f8ecac96d3d0529cd6cb5a0df344c101b7a693b60d016c5e5b38654224ff12d760c396dc27ca9b0df3cd2a8552e7886ab01d4563b5465d4b93d06c28823dce3af58bf1a0a8c3adb263eaea8ccf548add9ffa2cc865c30a8113a4eae625a998bcef720eb2514030fa5f26c0ccc171c18ac883353778613792a2cd9e12462b8807ca3d163542d3a4fc8792565f0f2cd1fe9fdc749dff48656f3b91e789537b0630f82257f37a89a70ac748130e4e777048d1310f02945355fedeabd0fe69f54f670015e7f583f977a2efb178535628b6edbb5cfe12dd0b699f27f4877527f9613f0ef4b2659dc39e58cdd5854a953db9389c0c45f0ea723e7c60a988bc8c734dfd3cab0aa85972e3948a2308468ce06bc699ecafcd723f1c58d2278682df99ceda2cf602271fdc3991ee42d16d9c4532d7adc74d28d80d0eca803c4ef725448902309d3e8448890e3bb82a8edd31869ecfe31b68b5005ff9462f0aeb6c4752978fb5e36e0a7484dd5200608ace0103f926a4ba955e8022a917a6d92e42dbd07806c5145b884770dea6c5b415f86e634a455d96398ac032cc05313c5657166193f024325da9171c801a549a46a34a81f164052762ddfa6c90269911013f7b0cbd6d2a84cd530ef1a5d1eb16c3fbf128101dd48381b3701b8ba5089ac83441dca75b068dc4c9a296ab756d2163c09099d915f73b4dbc83bc4e6e3b2396e7443d805ffd9f298b2ec4160f374363efc5754a3e4d46ab51b25169c47f8c485f2857d42d9eae128a1667e5135b1615043f3106d114e962e4c2e22f4e706101f67d2798a3a651fbec092ecd9661bf761d7c7d60743f26c62eab1d59cb53a7181710430987ac9fa24c8552ecd0017908dea108645f2659a96b1bd0d3389a75b2bfcd13eb69fa4b96bd191b20ace4d16e813a643b28141a7810ce94bc728731ec98362cae4fd14f46e24e6de53fe02bc925ab914f23ea50fac37c21ad93bf3f706c4ce34ed0e603d9b42e3b66ef4d59ddc2b13c9775f05fbc45b44684489f89290a27892fea4aeab8c487151813475ee9c76113db37277b2bc4020805e70744bab74b96dac1384f2eb8362ac705b64e31e55eb47661910ca1cdde74c2e4ab1841ddd514dc4a44254c3f5b39f45985e7dfae87ef359f7a8cc0ff9580070d07d28b3cfda07015c5c75ef0b8514aed23f5ab9734265034afec42e65e47ab2e4fea7bf280ca6aad2f39cf1f919eb1d3ee6bed95077c19a3744c5d147ba1bbbef7980be8787fe281453870b9475572b17b6be34ef4ffeb893147647eba27d5b0e923c883d5b3766bb5529eb099dcc074ad160f1e2ec4fc915b39f4473247b4043acb8810884320f507485b7f484973adf44a0d81704609f39b7b6259e6c7431dc86bacb99339335c8a5be7f3b692ed5a0ca571877d71ce7d70847578f7531a594fadb5f038f503ff79852442d082225a814de805494d0aefe8ab2d1924d6415016b78dacf21c2190f65e5fa0bf8456bdfb7f0432f5e522b0ddc5d8bc5ae6df0ce44e2c217b2f4a4c1d4f5663864105642e7ba31bd6d6b667411373d2bcf6cf8610caecefd4b4865dd3d96761aa7446d271b3da4177caf8b7f3da9b81610b63216036cb15fceba9a84196d6737c50b506d50c9c3b198f40f77aa82d43ab66a3e3127d6250669da381db3d237d9d87ce47605f3135014637a5928b7139ddf398241bb53d2f61385c9920fd8679aa2f17c57d33aa2928ec92575ea0b377502b721e23b6f9ca956ba0044f22387b75077437ef26fcd71dde515767026cb6987305748be94db7b41bc1afccc776c3e6dc830a7518c361917818ee40744890647e15e19a01ba34e8981de0e3c26f5b448bb58eb9f48a4ee9898211f0a2a403e743dce63724793bcc25df7d9b868a6fd1630a166bde158d35466671c74913586b8c381cb8d932feb2a1a7feb67fcbb9fd840c75d442b04ba44b26175a75a735e67d58f1eab381af5644154cdd3009f6bb6554e9093fe542f5327b143502867c03836dcce9504989db899516ced998d594e653c7e8ce149686c6c2537e2e1371b538a60e21dc41c1ff6bf356df519b12d88fc7869ff95a349b7adbc0e58e11f21b55ee0f5d892c12990b7de78fdf69faccc2eced7a16f5feba80e4e14ba390f2a34ab85d5ba7bad29a843a16aa05b3068368e7a28a9af76c7ca0ad1ce9c11eb90b9ad0cdc5fd294ba4c27d2036abe390e9d82c1a2b97833a7ae28ba96c461c462297998dfa56be2d781ce61c7de8a65aa6d4add99ba8bbe6bd9a935002110f81b2fbbc59b411de5e824945e006eb8be3ea8de6b96aa0de7c3bbd819099e398f0804ee4133d51ffa257c5ec1c75aa1656ca3d2b5460fef6879488f4e302b5ec54dd9a624937256160724f7e98638b761cbd18e79c388c6c206091f0e62a32ac55dc647c6492c5adf95b0d14963cd58fcde60c1b27c20c1db99cf823e7217ae30c1e3ba127cd5b0f471035231d67cbf19e52d05cb31be9b435a1ea02f88fbd13056160a60f6adc776c9c6e12c01e6f213e7a618228ac9cdcbc28d239cc922b4f90fa2b8cf367b7ba5894d949de1a603ab8d813505e01602642383719dbc0ea1333bc5bf65fc1255218962af6cadb94c1814d96df78b4f73dcbfbd9744d1edaaf3ecdac5929b2d9606ff27f3a501778d4f65e45f6316287736fc6ab2786545f8be062006f70bb14d5c71449ae7552f93eed7c45dd9e17b7a0d92bd9e7eccf19be0daa97235288da3ab2ad63f690799d15cdc7e7a0de174cb296b6e8b135d176d3e1a8e525a0656b8b1ec20880a765f5eca9d9d8ea40b74301423471247f1bd41b763b4efe05eb53bb740da23501272b619e617324ba67a2ae04799b59582fee380511b09d460355739fcf46f0c1c22892b7fbb5388ecd8f72fe236eb180ee21e0d677107fb3f4fe5edc281c29192e2d3e1820b1a21cfcb1fc55d360aa2f5c2c62561eb622bdd72d82cf4da62ea9bb3ae4dff6a9496066c7241c998b0c327e7c8774dc05e42b106fc9d85025f01e52d1d12297a55ed3b4ba45dd00af9c14112621e0913f13bc3e8bc3282243cb6e3247e065c89e1a9b184e5f50b99ff30acb7f3f518515c3c7f4c5e528f601f655c5657454e24860bf0b34c0e84d30b408b1892ed8b9843164efe59b34dffcc8b8216d6ace6f8fae804143e7b6dc53992a9afee66ce8bdfc17a2a6e55918209daa19323ad5b366a36ef4d1db5ffd029547b713804f28d3bc5befc9032043e823cce3a5fae51e094cd5d27f85d421c02d2af46e7e6f2c6829cb547b78ce0b4804fe567defd6e2824841b012a7ebd44c035a8401395c53d1e96f77fbf91c8b068e01eb5dbab5366b793e979b6334a9509eae56de304640aca8b44cee23b08abc5b1aa1afaaf1e65e2e90c7fd2be2aa89f292499272db4e24a8b69b6f12eab64a7da6745beefa03f18d152c54ddfb5f4c2f9c58457bacb1beedebc07a66e58ba06adeaf9cf08cf8549e78cf2281d0f26a5f053064a442013b7223986b94c3678790db71968f7d2eafb5a3ec635561d007831d07ad5dcccedf0069a5271afc008ad8ec13c9ec62a2b64c03df43800132f00d5cb3d73fe57cd6c92c492f9478b3f3a31ee4dcd14826d9a1c3a8925fba08f52e0533c787a3da43a9b2315d9e57ecb2779310e118584806a8d10e55cdbd4f3fb710c271f42b25e09823957b86b59e094d2a85e5af9adf788c4112260062a7e46ebdf01362dc75d3b17c940b2b327baa1260d6e9862bfb793b6633cfdc571f3c3d494c927622125612138f26d9440ed39320cf87ba939cf041957897b4e65b5079d9c2d6b1fdb026af6442bf242ba18de5dac73d2572460b2f54b2e486f07087e2d94b2701dc82ec8fbee8890ae206e288a1e711973be7601f26ddee48a572f39bb201937710ac326be42fbf8b87b5ab65b554f803266ae97a18a7f477c48c0395a45b532b6188768e40c9b46c76132955d2b2382c122ddd95d4510a17e1b977fc54a803b58acc683e91b943d73fb6c1bd4f629e85f72378c3eb0619147abb75dd0292075e0106441e4b87e3bed5eddcd9d042fd47a791c94f8d0560cb73b83351043e0634d87e8bc47c1a1546445acba14263eb0870d5c2a983fc19ef5cf298c506cf5558a29415348fe1bc8de7af143a93b73c7968b45aa7d2363712ad80022e1731f8e40e65766fc99161a44ffce95255278d9bf869295546ffa5e3cd7c302c3ca90773762eeebf7c32e6a501bccba28478f628f83aa17d57bc047ba56c0974d24459ece5609016aa95e0c8feffe09a101de09d7b02395798490daaeac3d537be0ad094c4e548c53a830ee9f364f6d235315bd023c616ef4d635b856ee0623e8647567a3d5da0013e3ff5dd8f695a536deb2780e43a820c2b050eb5b74749eeb4ecc06b44d623d27902110514f58461e0dc7e69f0c75247fd9f07f4f1d5eb399da782d2b47e5ae588bc99e97f775b5245d10f5e6ba2205f7d1e79df4f4978d0e509eb8ed2b48f84dad19a61cc0f6a3be5f7e7ada0a93cf642d5bf69dd175634fd05ab679f494c7e3d4dbcecb0b6dd2cb40cd183b376f1c771ef91d44c345ba742788a5a11cc1aa5f9421ad85f778e9103263f236eef5a54e33c1f3dc44dea04ef26ff183b5e4cc50c7e85488a890f2a345a0eed79d5a2259f325ad7245f79ca6cf6dfde4da1b19daa476d295c68a9a00efb3052dac004ad882f1a0f6a8b47c01d6c4328630045d5d7d66e4d9c5179141597de92619d6cc6df2c88ab4072f51c550162383d26a6663bda90866b52bd0f43bcffe6c62e404c8a7d89d591188b38cd43f7eff277559311a1fb8e082b3bcdebc5d3950092142f4692d48ba2f763bffa49969a2ac3e0c208b0e5a99610f6b843739fd2b25b886a8af3f6051d31dc6ccdfd45e8b3e4c7887e36948547a9f12677fa5d52f95888c9839e092094e407d16aca41aa023f4b6dd19725e62f17d59e0b3d710b3fe4659ea2133167daf84c9560588ed1c78423da469fc9f6dce8787dcc2b9067dc95f62efb339122d88ca7266c3d3e0d52e0357bc6f0e69ac40da1cee1fa82c8477706f88d403b3", 0x1000}, {&(0x7f0000001f00)="4e659066ea681c97f80d06ec42bbc263ddc4913853b63048dad81dc5213b995d65b686f84c402f1b4076cbff587ab311d052a359eed4a667e3ebf39857b4a409a7b1a1441b4cc0ef38adf89678d4a87fac07a19142ba6096693067d376a7e7a59b205424000e2a0a3526f4c6053e4fd4ad19b11da7ad4acc00bc707669ce0dfffbba503ded4b8e63df17cac090b0aa1a3bd393c5746b0063cc517862b866b32e38eddfadd11d1444e11861d8788a7f0464db27a18ad5c228eb88c4b76753fa7f8caa7e6cc53cfbf694", 0xc9}, {&(0x7f0000002000)="4fd673524228d57f62f8af47a66bff609971e331d758377832fa11914236ca82041e9a5b95b333db0e18444b7b75b68d532df1fb4f4477c54a484522cf04aa8289aa2242d980c8839cd95dc2e62ccffac9869a63b2cf3482bc089afd98a1c0724dc9cb8b01aa5675cfe99b5274349b78719d714fb79fbfa13ec8efbf418862c52d1e3f3f099664a772c74d0bc7bb9e998c2089258082cbd41772bfbdf3e7974bac3bbf78e6f59e3e4a19e5f77727ef7e7a0c6ea19afd30d4a07917b130be6579dd1ff9ddf33689", 0xc7}, {&(0x7f0000002100)="2f922b87f0681aa2395da6101312c49be05a94e67131423a19700cf54a19fddb3e57394b45a992a800ba03097490443613ce4876961f50c8636503c3e37c98eaf4829f4346631923f43a1f21fd340aa0", 0x50}, {&(0x7f0000002180)="8ad448b51411f69856fd0ca7c8839e297c165d8b535f177242574e7b320dfb2894e814f045ab4bdb021c8778488f9f0cf037c1ff382feb99df09b69f141c9b6650286f68970e223f74893aff8667fced4cdbd39fd6943ef1c47e374afeedf20fe4430524b2788e3ed648eb25b6385e48168b156f86e78ea49afc4f0f8f5f4519cda7e0554e8467ea12bb1f8a48ba999510adb8864598242f6dedea7e7a35256d422647f92d1d3ff33e561ea946e1fb9c2356bd2e8128a08e957ba49b6a3f6840241d683dc321e56448a155cc25314a", 0xcf}, {&(0x7f0000002280)="e7d92ae0b59161194b2828e5737d2d114be8e27dadd4b4261c3d8e03138ab9ed00ee5ec85e205401d1c7264dd49a6904d713c43d300eb2e7729f0b03117947ec8dae69424ae37803ce29bc0d64b68b548fe70b57c4f299e3e1233e5af883ed4b4f68eac437f65a6fe1c3743e23a70fb88698738b71146f5e6bae4f5cc30665b0c2e14bc8e57a76ecbb341117aa33b8cee0f139322af1259f8c508f496867c571963216adc7d2b59b93346bd80863f39915c091c9c10f6c1d9929", 0xba}, {&(0x7f0000002340)="71e8c77067efb136371f9478282546533b5682fa8252d199cf85e2bcd419cca95a09bb97e56a7dd5dfb3e095e698062383fee984db6ec13137f33dee6ce8760623dfbea989", 0x45}], 0x7, &(0x7f0000002400)=[@rthdrdstopts={{0x1c, 0x29, 0x37, {0x1ecd911ca3ecaf33, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r3}}}], 0x3c}, 0x44000) 3m12.202642987s ago: executing program 0 (id=8684): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x4008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x100000c, 0x2172, r4, 0x70d2000) r5 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x6, 0xfffffffe, 0x3631564e, 0x8, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x2, 0x6}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010027bda887b752df250000", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040801}, 0x2c040004) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) 3m12.135457095s ago: executing program 1 (id=8685): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2040400) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x28, 0x140) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x180) socket$inet(0xa, 0x801, 0x84) socket$kcm(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r4], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) poll(&(0x7f00000022c0)=[{r1, 0x41}], 0x1, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3m12.062010567s ago: executing program 3 (id=8686): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000000000000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x80) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a4072300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r3, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x82316000) writev(r3, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0x84a}], 0x5) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) 3m12.015496037s ago: executing program 1 (id=8687): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000003001a80100004800c"], 0x34}}, 0x0) 3m11.528194s ago: executing program 1 (id=8688): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x20) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$inet(0x2, 0x2, 0x3) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @remote}) write$tun(r3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x7ff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xffed}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) 2m48.537455629s ago: executing program 33 (id=8675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001002bbd700000000010c108f5edc372648b0000000000000001ffffffff000000000000000000000000ecdf0000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fc020000000000000000000000000000fefffffffffffffffcffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000900000000000000010000000000000000084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0004002c0000004d00020063626328636173743529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280000000040000020000000"], 0x140}}, 0x44050) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000140)={0xe, 0x0, 0x6, {0xfffffff3, 0xffffffff, 0x2, 0x9}}) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./control\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000e0ffffff000000000c00ff102d000400000000030000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mlock2(&(0x7f0000765000/0x1000)=nil, 0x1002, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc090000000000010902240001000090080904000009030003000921fdff080122090009058103"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x0, 0x70bd29, 0x25dfdbfb, {0xa, 0x8, 0xb1, 0xff}, [@IFA_CACHEINFO={0x14, 0x6, {0xffff18d5, 0x5709aec7, 0x7fff, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r8, &(0x7f0000000480)={0xc, &(0x7f0000000340)={0x20, 0xc, 0x9b, {0x9b, 0x2, "e206f8939948567ec58668eb33a1fcbba6dca3097cd73d550cc79f7ea9f77fc2332c9eb9cd2696f4f6db2a81f73bd2592e40fea7413a845b228d41cd7f047a0b36afbf900437f33cf57807da39dbc1d3e3c41c267f11118123d9114d7bd7cc433850a86832c69e9a047450e8dbede68d56880d181cc47597464fb6202479ac3475cb69beda7b5735bd766c62ecc89c91c52cdbe442de37e0a1"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000680)={0x18, &(0x7f00000004c0)={0x40, 0x30, 0x86, "6e5328dd07e1576f97c7b791dfde17ccb1058e7518fbe12b5eb89f488fa195a6a40146581bcc95cdd50adada60760d1a82868f72271b9917c306f4730a313ce9d694a07508fc7a7d9093b8462890ab568767cfc3a07179d411e6734ab84647c2a90ebbce38b76ddf500182917205d96a7eacf326b8cc783930504d0729dbfee3ec1e9334a2d3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5e}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000600)={0xc0, 0x5, 0x4, "f85e4066"}, &(0x7f0000000640)={0x40, 0x5, 0x1, "9c"}}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 34 (id=8684): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x4008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000310000/0x3000)=nil, 0x3000, 0x100000c, 0x2172, r4, 0x70d2000) r5 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x6, 0xfffffffe, 0x3631564e, 0x8, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x2, 0x6}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010027bda887b752df250000", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040801}, 0x2c040004) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) kernel console output (not intermixed with test programs): B device number 45 using dummy_hcd [ 1734.315077][ T2218] usb 2-1: Using ep0 maxpacket: 8 [ 1734.315854][ T2218] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1734.316941][ T2218] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1734.316957][ T2218] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1734.316971][ T2218] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1734.316984][ T2218] usb 2-1: config 250 has no interface number 0 [ 1734.317009][ T2218] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1734.317027][ T2218] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1734.317043][ T2218] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1734.317058][ T2218] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1734.317113][ T2218] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1734.317139][ T2218] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1734.318545][ T2218] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1734.318711][ T2218] usb 2-1: Product: syz [ 1734.318729][ T2218] usb 2-1: SerialNumber: syz [ 1734.357833][ T2203] usb 4-1: device descriptor read/64, error -71 [ 1734.373597][T14437] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1734.469255][ T2203] usb usb4-port1: attempt power cycle [ 1734.476302][T14437] usb 1-1: device descriptor read/8, error -71 [ 1734.477177][ T2218] hub 2-1:250.228: bad descriptor, ignoring hub [ 1734.477200][ T2218] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1734.564773][ T2218] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1734.585481][T14437] usb usb1-port1: unable to enumerate USB device [ 1734.806396][ T2203] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1734.828719][ T2203] usb 4-1: device descriptor read/8, error -71 [ 1734.882553][ T2205] usb 2-1: USB disconnect, device number 12 [ 1734.889262][ T2205] usblp0: removed [ 1734.964821][T23391] qrtr: Invalid version 0 [ 1734.982835][T16725] usb 6-1: USB disconnect, device number 31 [ 1735.044634][T23391] syzkaller1: entered promiscuous mode [ 1735.044653][T23391] syzkaller1: entered allmulticast mode [ 1735.066453][ T2203] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1735.104172][ T2203] usb 4-1: device descriptor read/8, error -71 [ 1735.205412][ T2203] usb usb4-port1: unable to enumerate USB device [ 1735.209742][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8286'. [ 1735.211034][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8286'. [ 1735.346081][T16725] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1735.479297][T23421] FAULT_INJECTION: forcing a failure. [ 1735.479297][T23421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.479323][T23421] CPU: 0 UID: 0 PID: 23421 Comm: syz.1.8289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1735.479343][T23421] Tainted: [L]=SOFTLOCKUP [ 1735.479348][T23421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1735.479358][T23421] Call Trace: [ 1735.479364][T23421] [ 1735.479371][T23421] dump_stack_lvl+0xe8/0x150 [ 1735.479396][T23421] should_fail_ex+0x410/0x560 [ 1735.479417][T23421] _copy_to_user+0x31/0xb0 [ 1735.479437][T23421] simple_read_from_buffer+0xe1/0x170 [ 1735.479461][T23421] proc_fail_nth_read+0x1bb/0x230 [ 1735.479475][T23421] ? common_file_perm+0x20e/0x2b0 [ 1735.479494][T23421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1735.479520][T23421] ? rw_verify_area+0x24a/0x4c0 [ 1735.479542][T23421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1735.479565][T23421] vfs_read+0x213/0xa80 [ 1735.479589][T23421] ? __pfx___mutex_lock+0x10/0x10 [ 1735.479609][T23421] ? __pfx_vfs_read+0x10/0x10 [ 1735.479631][T23421] ? __fget_files+0x2a/0x420 [ 1735.479654][T23421] ? __fget_files+0x3a2/0x420 [ 1735.479681][T23421] ? __fget_files+0x2a/0x420 [ 1735.479706][T23421] ksys_read+0x150/0x270 [ 1735.479730][T23421] ? __pfx_ksys_read+0x10/0x10 [ 1735.479754][T23421] ? asm_int80_emulation+0x1a/0x20 [ 1735.479772][T23421] do_int80_emulation+0x198/0x500 [ 1735.479793][T23421] ? trace_irq_disable+0x3b/0x140 [ 1735.479807][T23421] ? asm_int80_emulation+0x1a/0x20 [ 1735.479820][T23421] ? clear_bhb_loop+0x70/0xc0 [ 1735.479835][T23421] ? clear_bhb_loop+0x70/0xc0 [ 1735.479852][T23421] asm_int80_emulation+0x1a/0x20 [ 1735.479866][T23421] RIP: 0023:0xf71d75ab [ 1735.479883][T23421] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1735.479897][T23421] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1735.479913][T23421] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 1735.479923][T23421] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.479932][T23421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1735.479941][T23421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1735.479949][T23421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.479970][T23421] [ 1735.501368][T16725] usb 6-1: Using ep0 maxpacket: 8 [ 1735.503211][T16725] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1735.591233][T16725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.591257][T16725] usb 6-1: Product: syz [ 1735.591272][T16725] usb 6-1: Manufacturer: syz [ 1735.591286][T16725] usb 6-1: SerialNumber: syz [ 1735.649009][T16725] usb 6-1: config 0 descriptor?? [ 1735.714038][T16725] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1736.047161][T23438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8293'. [ 1736.380372][T16725] gspca_sq930x: ucbus_write failed -110 [ 1736.380474][T16725] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 1736.456286][T23467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8297'. [ 1737.101543][T12361] tipc: Resetting bearer [ 1737.274912][T12361] tipc: Disabling bearer [ 1737.338349][ T3202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1737.353008][ T3202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1737.363993][ T3202] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1737.374671][ T3202] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1737.383901][ T3202] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1737.473964][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1737.484154][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1737.494775][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1737.512059][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1737.514212][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1738.192334][T16725] usb 6-1: USB disconnect, device number 32 [ 1738.259172][T18145] tipc: Resetting bearer [ 1738.331113][T18145] tipc: Disabling bearer [ 1738.426835][ T2205] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 1738.461910][T23635] qrtr: Invalid version 0 [ 1738.507362][T23617] sctp: [Deprecated]: syz.1.8309 (pid 23617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1738.507362][T23617] Use struct sctp_sack_info instead [ 1738.531578][T23635] syzkaller1: entered promiscuous mode [ 1738.531597][T23635] syzkaller1: entered allmulticast mode [ 1738.601572][ T2205] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1738.601625][ T2205] usb 1-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.40 [ 1738.604602][ T2205] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1738.604638][ T2205] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1738.604658][ T2205] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1738.621466][ T2205] usb 1-1: string descriptor 0 read error: -22 [ 1738.621814][ T2205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.672726][T23589] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1738.782220][T23526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.782435][T23526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.782552][T23526] bridge_slave_0: entered allmulticast mode [ 1738.812461][T23526] bridge_slave_0: entered promiscuous mode [ 1738.883666][T23589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.884693][T23589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.912563][ T2205] usbhid 1-1:1.0: can't add hid device: -71 [ 1738.913248][ T2205] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1738.950524][ T2205] usb 1-1: USB disconnect, device number 46 [ 1738.972937][T23526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.973029][T23526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.973238][T23526] bridge_slave_1: entered allmulticast mode [ 1738.989112][T23526] bridge_slave_1: entered promiscuous mode [ 1739.080444][T23526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.083053][T23526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.134239][T23526] team0: Port device team_slave_0 added [ 1739.143772][T23526] team0: Port device team_slave_1 added [ 1739.175521][ T2218] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1739.242082][T23740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1739.281777][T23526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.281795][T23526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.281825][T23526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.284021][T23526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.284036][T23526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.284064][T23526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.385148][ T2218] usb 6-1: Using ep0 maxpacket: 32 [ 1739.386314][ T2218] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1739.387273][ T2218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.390810][ T2218] usb 6-1: config 0 descriptor?? [ 1739.424654][ T2218] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1739.502454][T23526] hsr_slave_0: entered promiscuous mode [ 1739.503740][T23526] hsr_slave_1: entered promiscuous mode [ 1739.504525][T23526] debugfs: 'hsr0' already exists in 'hsr' [ 1739.504584][T23526] Cannot create hsr debugfs directory [ 1739.656187][ T3202] Bluetooth: hci4: command tx timeout [ 1739.926488][ T2205] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 1740.077896][ T2205] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1740.079132][ T2205] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1740.079155][ T2205] usb 1-1: config 0 has no interface number 0 [ 1740.079190][ T2205] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1740.079213][ T2205] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1740.079248][ T2205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.094369][ T2205] usb 1-1: config 0 descriptor?? [ 1740.096344][T23782] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1740.196405][ T2205] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1740.317000][T21408] team0: Port device xfrm0 removed [ 1740.343599][ T8864] usb 1-1: USB disconnect, device number 47 [ 1740.608000][T21408] bond0 (unregistering): Released all slaves [ 1740.619109][T21408] bond1 (unregistering): Released all slaves [ 1740.861681][T21408] tipc: Left network mode [ 1741.178878][ T2218] gspca_vc032x: reg_w err -71 [ 1741.178959][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.178972][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.178981][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.178991][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179000][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179010][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179018][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179028][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179036][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179045][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179054][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179063][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179072][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179081][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179090][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179099][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179108][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179116][ T2218] gspca_vc032x: I2c Bus Busy Wait 00 [ 1741.179125][ T2218] gspca_vc032x: Unknown sensor... [ 1741.179190][ T2218] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1741.310858][ T2218] usb 6-1: USB disconnect, device number 33 [ 1741.401026][T23888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8319'. [ 1741.612184][T23905] bridge2: port 1(dummy0) entered blocking state [ 1741.612286][T23905] bridge2: port 1(dummy0) entered disabled state [ 1741.612408][T23905] dummy0: entered allmulticast mode [ 1741.688601][T23905] dummy0: entered promiscuous mode [ 1741.737054][ T3202] Bluetooth: hci4: command tx timeout [ 1741.939668][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1741.993265][T23931] qrtr: Invalid version 0 [ 1742.252178][T23946] syzkaller1: entered promiscuous mode [ 1742.252198][T23946] syzkaller1: entered allmulticast mode [ 1742.375385][T23956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8325'. [ 1742.827940][T21408] hsr_slave_0: left promiscuous mode [ 1742.841554][T21408] hsr_slave_1: left promiscuous mode [ 1743.145050][ T2205] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1743.259626][T23988] netlink: 124 bytes leftover after parsing attributes in process `syz.5.8330'. [ 1743.298853][ T2205] usb 2-1: Using ep0 maxpacket: 32 [ 1743.299909][ T2205] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1743.302180][ T2205] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.302209][ T2205] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1743.302234][ T2205] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1743.302265][ T2205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.321786][ T2205] usb 2-1: config 0 descriptor?? [ 1743.802042][ T2205] input: HID 04e7:0009 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04E7:0009.00CC/input/input238 [ 1743.816633][ T3202] Bluetooth: hci4: command tx timeout [ 1743.968780][ T2205] elo 0003:04E7:0009.00CC: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 1744.254594][T24015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8333'. [ 1745.039488][T23526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1745.063431][T23526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1745.064273][T23526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1745.108540][T23526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1745.109322][T23526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1745.119121][T23526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1745.124107][T23526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1745.152241][T23526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1745.218848][T21408] IPVS: stop unused estimator thread 0... [ 1745.319999][T24053] qrtr: Invalid version 0 [ 1745.439326][T24053] syzkaller1: entered promiscuous mode [ 1745.439348][T24053] syzkaller1: entered allmulticast mode [ 1745.590397][T23526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1745.618133][T23526] 8021q: adding VLAN 0 to HW filter on device team0 [ 1745.626778][T21411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.626984][T21411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1745.652117][T21411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.652280][T21411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1745.790878][ T2203] usb 2-1: USB disconnect, device number 13 [ 1745.895085][ T3202] Bluetooth: hci4: command tx timeout [ 1745.958298][T23526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1746.024431][T23526] veth0_vlan: entered promiscuous mode [ 1746.039499][T23526] veth1_vlan: entered promiscuous mode [ 1746.114338][T23526] veth0_macvtap: entered promiscuous mode [ 1746.137778][T23526] veth1_macvtap: entered promiscuous mode [ 1746.164801][T23526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1746.197258][T23526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1746.247634][T16909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.247689][T16909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.247731][T16909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.247772][T16909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.404086][T16897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.404104][T16897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.453541][T21411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.453562][T21411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.483186][T24080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8341'. [ 1746.562578][T24089] syzkaller0: entered promiscuous mode [ 1746.562615][T24089] syzkaller0: entered allmulticast mode [ 1746.876416][ T2205] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1747.046505][ T2205] usb 2-1: Using ep0 maxpacket: 16 [ 1747.047227][ T2205] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1747.048270][ T2205] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1747.048296][ T2205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.048318][ T2205] usb 2-1: config 0 has no interface number 0 [ 1747.048360][ T2205] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1747.048406][ T2205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.052123][ T2205] usb 2-1: config 0 descriptor?? [ 1747.073077][ T2205] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 1747.509405][T24079] fuse: Bad value for 'fd' [ 1747.683549][T24128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1747.683566][T24128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1747.775124][T14436] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1747.935194][T14436] usb 6-1: Using ep0 maxpacket: 16 [ 1747.935989][T14436] usb 6-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1747.937463][T14436] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1747.937501][T14436] usb 6-1: can't read configurations, error -61 [ 1748.065340][T14436] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1748.225591][T14436] usb 6-1: Using ep0 maxpacket: 16 [ 1748.226330][T14436] usb 6-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1748.227818][T14436] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1748.227841][T14436] usb 6-1: can't read configurations, error -61 [ 1748.228130][T14436] usb usb6-port1: attempt power cycle [ 1748.265747][ T8864] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1748.415088][ T8864] usb 4-1: Using ep0 maxpacket: 32 [ 1748.416138][ T8864] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1748.417306][ T8864] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.417336][ T8864] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1748.417353][ T8864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1748.417374][ T8864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.419635][ T8864] usb 4-1: config 0 descriptor?? [ 1748.585340][T14436] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1748.617193][T14436] usb 6-1: Using ep0 maxpacket: 16 [ 1748.617833][T14436] usb 6-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1748.621560][T14436] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1748.621592][T14436] usb 6-1: can't read configurations, error -61 [ 1748.745055][T14436] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1748.768612][T14436] usb 6-1: Using ep0 maxpacket: 16 [ 1748.769536][T14436] usb 6-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1748.772133][T14436] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1748.772169][T14436] usb 6-1: can't read configurations, error -61 [ 1748.772854][T14436] usb usb6-port1: unable to enumerate USB device [ 1748.841558][ T8864] input: HID 04e7:0009 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04E7:0009.00CD/input/input239 [ 1748.920082][ T8864] elo 0003:04E7:0009.00CD: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 1749.496308][ T8864] usb 4-1: USB disconnect, device number 48 [ 1749.628049][T14436] usb 2-1: USB disconnect, device number 14 [ 1749.831666][T24190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8356'. [ 1749.831692][T24190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8356'. [ 1749.858890][T24190] geneve3: entered promiscuous mode [ 1750.015061][T14436] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1750.155469][T14436] usb 2-1: device descriptor read/64, error -71 [ 1750.243840][T24202] bridge0: port 1(syzkaller0) entered blocking state [ 1750.243928][T24202] bridge0: port 1(syzkaller0) entered disabled state [ 1750.244051][T24202] syzkaller0: entered allmulticast mode [ 1750.248147][T24202] syzkaller0: entered promiscuous mode [ 1750.313753][T24202] syzkaller0 (unregistering): left allmulticast mode [ 1750.313768][T24202] syzkaller0 (unregistering): left promiscuous mode [ 1750.315301][T24202] bridge0: port 1(syzkaller0) entered disabled state [ 1750.332598][ T2205] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1750.415678][T14436] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1750.487209][ T2205] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1750.489340][ T2205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1750.489366][ T2205] usb 4-1: Product: syz [ 1750.489378][ T2205] usb 4-1: Manufacturer: syz [ 1750.557691][T14436] usb 2-1: device descriptor read/64, error -71 [ 1750.667641][T14436] usb usb2-port1: attempt power cycle [ 1750.740911][ T2205] scsi host1: uas [ 1750.944850][ C0] usb 4-1: stat urb: status -71 [ 1750.944931][ C0] usb 4-1: cmd cmplt err -71 [ 1750.957121][T16725] usb 4-1: USB disconnect, device number 49 [ 1750.963191][T16725] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 1750.963242][T16725] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 1751.008411][T14436] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1751.025933][T14436] usb 2-1: device descriptor read/8, error -71 [ 1751.116026][ T2205] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1751.265106][T14436] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1751.266896][ T2205] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1751.269684][ T2205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.269706][ T2205] usb 6-1: Product: syz [ 1751.269721][ T2205] usb 6-1: Manufacturer: syz [ 1751.269733][ T2205] usb 6-1: SerialNumber: syz [ 1751.298724][T14436] usb 2-1: device descriptor read/8, error -71 [ 1751.364806][T16725] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1751.395693][T14436] usb usb2-port1: unable to enumerate USB device [ 1751.725085][T14436] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1751.765097][ T8864] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1751.875014][T14436] usb 1-1: Using ep0 maxpacket: 16 [ 1751.877706][T14436] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1751.878952][T14436] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.878977][T14436] usb 1-1: config 0 has no interfaces? [ 1751.880282][T14436] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1751.880308][T14436] usb 1-1: Manufacturer: syz [ 1751.884669][T14436] usb 1-1: config 0 descriptor?? [ 1751.975067][ T8864] usb 4-1: Using ep0 maxpacket: 32 [ 1751.975757][ T8864] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1751.977916][ T8864] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.977945][ T8864] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1751.977970][ T8864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1751.978001][ T8864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.012410][ T8864] usb 4-1: config 0 descriptor?? [ 1752.111294][T24259] batadv_slave_1: entered promiscuous mode [ 1752.127410][T24258] batadv_slave_1: left promiscuous mode [ 1752.142984][ T2203] usb 1-1: USB disconnect, device number 48 [ 1752.467969][ T8864] input: HID 04e7:0009 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04E7:0009.00CE/input/input240 [ 1752.540657][ T8864] elo 0003:04E7:0009.00CE: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 1752.697515][T16725] usb 6-1: Service connection timeout for: 256 [ 1752.697541][T16725] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1752.744743][T16725] ath9k_htc: Failed to initialize the device [ 1752.788917][T16725] usb 6-1: ath9k_htc: USB layer deinitialized [ 1753.220001][ T2203] usb 4-1: USB disconnect, device number 50 [ 1753.431755][T24337] binder: 24336:24337 ioctl c0306201 0 returned -14 [ 1753.552193][T24356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8373'. [ 1753.552249][T24356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8373'. [ 1753.552267][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8373'. [ 1753.872317][T14436] usb 6-1: USB disconnect, device number 38 [ 1754.316452][ T2205] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1754.467587][ T2205] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1754.470599][ T2205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1754.470627][ T2205] usb 6-1: Product: syz [ 1754.470658][ T2205] usb 6-1: Manufacturer: syz [ 1754.751385][ T2205] scsi host1: uas [ 1755.065459][ C0] usb 6-1: stat urb: status -71 [ 1755.065557][ C0] usb 6-1: cmd cmplt err -71 [ 1755.066264][T14436] usb 6-1: USB disconnect, device number 39 [ 1755.102425][T14436] scsi 1:0:0:0: tag#0 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 1755.102469][T14436] scsi 1:0:0:0: tag#0 CDB: Inquiry 12 00 00 00 24 00 [ 1755.517557][T24430] nvme_rdma: malformed address passed: 172.20.20.24:+ [ 1756.163753][T24446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1756.163777][T24446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1756.209320][T24438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1756.531079][T24450] fuse: Bad value for 'user_id' [ 1756.531100][T24450] fuse: Bad value for 'user_id' [ 1756.532403][T24451] fuse: Bad value for 'user_id' [ 1756.532418][T24451] fuse: Bad value for 'user_id' [ 1756.805853][T14436] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1756.923826][T24456] FAULT_INJECTION: forcing a failure. [ 1756.923826][T24456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.923859][T24456] CPU: 1 UID: 0 PID: 24456 Comm: syz.5.8388 Tainted: G L syzkaller #0 PREEMPT(full) [ 1756.923886][T24456] Tainted: [L]=SOFTLOCKUP [ 1756.923894][T24456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1756.923906][T24456] Call Trace: [ 1756.923914][T24456] [ 1756.923923][T24456] dump_stack_lvl+0xe8/0x150 [ 1756.923957][T24456] should_fail_ex+0x410/0x560 [ 1756.923986][T24456] _copy_from_iter+0x1d3/0x1660 [ 1756.924021][T24456] ? __pfx__copy_from_iter+0x10/0x10 [ 1756.924043][T24456] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1756.924065][T24456] ? netlink_sendmsg+0x5d4/0xb40 [ 1756.924086][T24456] ? netlink_sendmsg+0x5d4/0xb40 [ 1756.924110][T24456] ? netlink_sendmsg+0x650/0xb40 [ 1756.924128][T24456] ? skb_put+0x112/0x210 [ 1756.924175][T24456] netlink_sendmsg+0x6c0/0xb40 [ 1756.924205][T24456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1756.924234][T24456] ? apparmor_socket_sendmsg+0x98/0x360 [ 1756.924260][T24456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1756.924280][T24456] sock_sendmsg_nosec+0x13a/0x180 [ 1756.924304][T24456] ____sys_sendmsg+0x54e/0x850 [ 1756.924339][T24456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1756.924383][T24456] ___sys_sendmsg+0x2a5/0x360 [ 1756.924412][T24456] ? __lock_acquire+0x747/0x2de0 [ 1756.924447][T24456] ? __pfx____sys_sendmsg+0x10/0x10 [ 1756.924476][T24456] ? get_pid_task+0x20/0x1f0 [ 1756.924498][T24456] ? get_pid_task+0x20/0x1f0 [ 1756.924516][T24456] ? get_pid_task+0x20/0x1f0 [ 1756.924569][T24456] ? __fget_files+0x2a/0x420 [ 1756.924618][T24456] ? __fget_files+0x3a2/0x420 [ 1756.924659][T24456] __sys_sendmsg+0x177/0x240 [ 1756.924694][T24456] ? __pfx___sys_sendmsg+0x10/0x10 [ 1756.924752][T24456] __do_fast_syscall_32+0x27a/0x6a0 [ 1756.924788][T24456] ? do_fast_syscall_32+0x33/0x70 [ 1756.924818][T24456] ? asm_int80_emulation+0x1a/0x20 [ 1756.924842][T24456] ? do_int80_emulation+0x299/0x500 [ 1756.924871][T24456] ? trace_irq_disable+0x3b/0x140 [ 1756.924901][T24456] do_fast_syscall_32+0x33/0x70 [ 1756.924936][T24456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1756.924963][T24456] RIP: 0023:0xf7f760ec [ 1756.924989][T24456] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1756.925010][T24456] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1756.925035][T24456] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1756.925052][T24456] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1756.925065][T24456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1756.925080][T24456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1756.925094][T24456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1756.925127][T24456] [ 1756.947027][T14436] usb 2-1: device descriptor read/64, error -71 [ 1757.205255][T14436] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1757.335555][T14436] usb 2-1: device descriptor read/64, error -71 [ 1757.445525][T14436] usb usb2-port1: attempt power cycle [ 1757.785073][T14436] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1757.807161][T14436] usb 2-1: device descriptor read/8, error -71 [ 1758.056809][T14436] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1758.085689][T14436] usb 2-1: device descriptor read/8, error -71 [ 1758.197367][T14436] usb usb2-port1: unable to enumerate USB device [ 1758.699100][T24477] socket: no more sockets [ 1758.741270][T24477] socket: no more sockets [ 1758.803119][T24477] socket: no more sockets [ 1758.907323][ T2205] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1762.651170][T24493] fuse: Bad value for 'fd' [ 1762.657986][T24492] fuse: Bad value for 'fd' [ 1763.002747][ T2205] usb 1-1: device descriptor read/all, error -71 [ 1763.260943][T24524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8400'. [ 1763.260982][T24524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8400'. [ 1763.364371][T24524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8400'. [ 1763.415377][ T2220] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1763.575026][ T2220] usb 2-1: Using ep0 maxpacket: 32 [ 1763.577561][ T2220] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1763.577613][ T2220] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1763.579677][ T2220] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1763.579695][ T2220] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1763.579708][ T2220] usb 2-1: config 14 has no interface number 0 [ 1763.579720][ T2220] usb 2-1: config 14 has no interface number 1 [ 1763.579758][ T2220] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1763.579774][ T2220] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1763.579791][ T2220] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1763.579810][ T2220] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1763.579829][ T2220] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1763.579847][ T2220] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1763.579864][ T2220] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1763.579877][ T2220] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1763.583902][ T2220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.583921][ T2220] usb 2-1: Product: syz [ 1763.583931][ T2220] usb 2-1: Manufacturer: syz [ 1763.583942][ T2220] usb 2-1: SerialNumber: syz [ 1763.648875][ T2205] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1763.658427][ T2203] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1763.806660][ T2203] usb 4-1: Using ep0 maxpacket: 32 [ 1763.806786][ T2205] usb 1-1: Using ep0 maxpacket: 8 [ 1763.807519][ T2203] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1763.807725][ T2205] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1763.809849][ T2203] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1763.809866][ T2203] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1763.809879][ T2203] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.809907][ T2203] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1763.809927][ T2203] usb 4-1: config 1 has no interface number 0 [ 1763.809964][ T2203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.810684][ T2205] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1763.810707][ T2205] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1763.810736][ T2205] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1763.810756][ T2205] usb 1-1: config 250 has no interface number 0 [ 1763.810781][ T2205] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1763.810798][ T2205] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1763.810828][ T2205] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1763.810849][ T2205] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1763.810869][ T2205] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1763.810902][ T2205] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1763.813295][ T2205] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1763.813329][ T2205] usb 1-1: Product: syz [ 1763.813345][ T2205] usb 1-1: SerialNumber: syz [ 1764.043570][ T2205] hub 1-1:250.228: bad descriptor, ignoring hub [ 1764.043606][ T2205] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1764.079168][ T2203] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1764.154410][ T2205] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 50 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1764.217049][ T2205] usb 1-1: USB disconnect, device number 50 [ 1764.256942][ T2220] legousbtower 2-1:14.57: interrupt endpoints not found [ 1764.264253][ T2205] usblp0: removed [ 1764.582031][T24562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8406'. [ 1764.588615][T24562] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8406'. [ 1764.588721][T24562] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8406'. [ 1764.637839][ T2220] legousbtower 2-1:14.228: get version request failed: -32 [ 1764.638005][ T2220] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 1764.823447][T24567] program syz.0.8407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1764.963887][ T2203] snd_usb_pod 4-1:1.1: set_interface failed [ 1764.964121][ T2203] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1764.964297][ T2203] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1764.971534][ T2203] usb 4-1: USB disconnect, device number 51 [ 1765.296040][ T2205] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1765.446291][ T2205] usb 1-1: Using ep0 maxpacket: 32 [ 1765.447224][ T2205] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1765.448243][ T2205] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.448315][ T2205] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1765.448334][ T2205] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1765.448357][ T2205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.452541][ T2205] usb 1-1: config 0 descriptor?? [ 1765.663903][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8411'. [ 1765.889842][ T2205] input: HID 04e7:0009 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04E7:0009.00CF/input/input241 [ 1765.951927][ T2205] elo 0003:04E7:0009.00CF: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 1766.018220][ T2203] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 1766.252423][ T2203] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1766.253790][ T2203] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1766.253815][ T2203] usb 4-1: config 0 has no interface number 0 [ 1766.253887][ T2203] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1766.253916][ T2203] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1766.253961][ T2203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.303769][ T2203] usb 4-1: config 0 descriptor?? [ 1766.315965][T24603] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1766.353342][ T2203] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1766.431281][ T2218] usb 2-1: USB disconnect, device number 23 [ 1766.553290][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1766.553333][T14436] usb 4-1: USB disconnect, device number 52 [ 1766.726937][T24652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8415'. [ 1766.728126][T24652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8415'. [ 1766.790122][T24652] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8415'. [ 1766.945083][ T2218] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1767.111626][ T2218] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1767.113298][ T2218] usb 2-1: not running at top speed; connect to a high speed hub [ 1767.113328][ T2218] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5b.c4 [ 1767.131132][ T2218] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 1767.131157][ T2218] usb 2-1: config 4 has no interface number 0 [ 1767.131197][ T2218] usb 2-1: config 4 interface 228 has no altsetting 0 [ 1767.166555][ T2218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.166579][ T2218] usb 2-1: Product: syz [ 1767.166593][ T2218] usb 2-1: Manufacturer: syz [ 1767.166608][ T2218] usb 2-1: SerialNumber: syz [ 1767.217106][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 1767.217134][ T32] audit: type=1326 audit(1790269442.623:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.217583][ T32] audit: type=1326 audit(1790269442.623:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.217966][ T32] audit: type=1326 audit(1790269442.623:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.218086][ T32] audit: type=1326 audit(1790269442.623:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.218225][ T32] audit: type=1326 audit(1790269442.623:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.219567][ T32] audit: type=1326 audit(1790269442.623:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.220300][ T32] audit: type=1326 audit(1790269442.623:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.220445][ T32] audit: type=1326 audit(1790269442.623:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.256469][ T32] audit: type=1326 audit(1790269442.643:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.256549][ T32] audit: type=1326 audit(1790269442.653:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.4.8417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1767.517305][T24646] netlink: 'syz.1.8416': attribute type 4 has an invalid length. [ 1767.537335][ T2218] quatech2 2-1:4.228: Quatech 2nd gen USB to Serial Driver converter detected [ 1767.543999][ T2218] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1767.544156][ T2218] quatech2 2-1:4.228: probe with driver quatech2 failed with error -71 [ 1767.585446][ T2218] usb 2-1: USB disconnect, device number 24 [ 1767.802376][T24674] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes. [ 1767.935063][T14436] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1767.987252][ T2218] usb 1-1: USB disconnect, device number 51 [ 1768.067009][T16725] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1768.086793][T14436] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1768.088700][T14436] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1768.088731][T14436] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1768.088767][T14436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.095470][T24667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1768.148734][T14436] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1768.218632][T16725] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1768.223779][T16725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1768.223807][T16725] usb 4-1: Product: syz [ 1768.223823][T16725] usb 4-1: Manufacturer: syz [ 1768.379774][ T2203] usb 6-1: USB disconnect, device number 40 [ 1768.479229][T16725] scsi host1: uas [ 1768.575061][T14436] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1768.720516][ C1] usb 4-1: stat urb: status -71 [ 1768.720607][ C1] usb 4-1: cmd cmplt err -71 [ 1768.721145][ T2203] usb 4-1: USB disconnect, device number 53 [ 1768.725048][T14436] usb 2-1: Using ep0 maxpacket: 32 [ 1768.749561][T14436] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1768.749610][T14436] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1768.750611][T14436] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1768.750635][T14436] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1768.750655][T14436] usb 2-1: config 14 has no interface number 0 [ 1768.750671][T14436] usb 2-1: config 14 has no interface number 1 [ 1768.750730][T14436] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1768.750755][T14436] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1768.750781][T14436] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1768.750806][T14436] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1768.750834][T14436] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1768.750860][T14436] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1768.750885][T14436] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1768.750908][T14436] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1768.753062][ T2203] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 1768.753132][ T2203] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 1768.753861][T14436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.753886][T14436] usb 2-1: Product: syz [ 1768.753903][T14436] usb 2-1: Manufacturer: syz [ 1768.753919][T14436] usb 2-1: SerialNumber: syz [ 1769.016781][T24759] __nla_validate_parse: 1 callbacks suppressed [ 1769.016801][T24759] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.8426'. [ 1769.016817][T24759] veth0_to_bond: default FDB implementation only supports local addresses [ 1769.144629][T24767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8427'. [ 1769.144650][T24767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8427'. [ 1769.176017][T24751] syzkaller1: entered promiscuous mode [ 1769.176067][T24751] syzkaller1: entered allmulticast mode [ 1769.334209][T14436] legousbtower 2-1:14.57: interrupt endpoints not found [ 1769.733518][T14436] legousbtower 2-1:14.228: get version request failed: -32 [ 1769.733706][T14436] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 1770.532391][T24806] tipc: Enabling of bearer rejected, already enabled [ 1770.547569][T14436] hid-generic 0000:0000:0001.00D0: unknown main item tag 0x0 [ 1770.547599][T14436] hid-generic 0000:0000:0001.00D0: unknown main item tag 0x0 [ 1770.547624][T14436] hid-generic 0000:0000:0001.00D0: unknown main item tag 0x0 [ 1770.547647][T14436] hid-generic 0000:0000:0001.00D0: unknown main item tag 0x0 [ 1770.547671][T14436] hid-generic 0000:0000:0001.00D0: unknown main item tag 0x0 [ 1770.547694][T14436] hid-generic 0000:0000:0001.00D0: unknown main item tag 0x0 [ 1770.547718][T14436] hid-generic 0000:0000:0001.00D0: unknown main item tag 0x0 [ 1770.547742][T14436] hid-generic 0000:0000:0001.00D0: unknown main item tag 0x0 [ 1770.578402][ T2203] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1770.629249][T14436] hid-generic 0000:0000:0001.00D0: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1770.727772][ T2203] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1770.728236][ T2203] usb 1-1: not running at top speed; connect to a high speed hub [ 1770.728260][ T2203] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1770.729100][ T2203] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1770.729115][ T2203] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1770.729128][ T2203] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.729141][ T2203] usb 1-1: config 14 has no interface number 0 [ 1770.729151][ T2203] usb 1-1: config 14 has no interface number 1 [ 1770.729188][ T2203] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1770.729224][ T2203] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1770.729247][ T2203] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1770.729271][ T2203] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1770.729300][ T2203] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1770.729312][ T2203] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1770.730884][ T2203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.730900][ T2203] usb 1-1: Product: syz [ 1770.730909][ T2203] usb 1-1: Manufacturer: syz [ 1770.730919][ T2203] usb 1-1: SerialNumber: syz [ 1770.868075][T16725] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1771.016506][T16725] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1771.017564][T16725] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1771.017591][T16725] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.017605][T16725] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1771.017619][T16725] usb 6-1: config 1 has no interface number 1 [ 1771.017696][T16725] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1771.017734][T16725] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1771.019478][T16725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.019495][T16725] usb 6-1: Product: syz [ 1771.019505][T16725] usb 6-1: Manufacturer: syz [ 1771.019515][T16725] usb 6-1: SerialNumber: syz [ 1771.111008][T24825] FAULT_INJECTION: forcing a failure. [ 1771.111008][T24825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1771.111098][T24825] CPU: 1 UID: 0 PID: 24825 Comm: syz.4.8437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.111186][T24825] Tainted: [L]=SOFTLOCKUP [ 1771.111207][T24825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1771.111246][T24825] Call Trace: [ 1771.111278][T24825] [ 1771.111300][T24825] dump_stack_lvl+0xe8/0x150 [ 1771.111413][T24825] should_fail_ex+0x410/0x560 [ 1771.111502][T24825] _copy_from_user+0x2d/0xb0 [ 1771.111581][T24825] get_compat_msghdr+0xb3/0x4c0 [ 1771.111685][T24825] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1771.111783][T24825] ? kfree+0x4d/0x650 [ 1771.111882][T24825] ___sys_sendmsg+0x201/0x360 [ 1771.111975][T24825] ? __lock_acquire+0x747/0x2de0 [ 1771.112058][T24825] ? __pfx____sys_sendmsg+0x10/0x10 [ 1771.112148][T24825] ? kstrtoull+0x137/0x1d0 [ 1771.112267][T24825] ? irqentry_exit+0x218/0x910 [ 1771.112425][T24825] __sys_sendmmsg+0x2de/0x4d0 [ 1771.112527][T24825] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1771.112701][T24825] ? fput+0xa0/0xd0 [ 1771.112759][T24825] ? ksys_write+0x242/0x270 [ 1771.112875][T24825] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1771.112924][T24825] __do_fast_syscall_32+0x27a/0x6a0 [ 1771.113012][T24825] ? do_fast_syscall_32+0x33/0x70 [ 1771.113093][T24825] ? asm_int80_emulation+0x1a/0x20 [ 1771.113147][T24825] ? do_int80_emulation+0x299/0x500 [ 1771.113232][T24825] do_fast_syscall_32+0x33/0x70 [ 1771.113330][T24825] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1771.113396][T24825] RIP: 0023:0xf7fd30ec [ 1771.113448][T24825] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1771.113499][T24825] RSP: 002b:00000000f547550c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1771.113560][T24825] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000880 [ 1771.113601][T24825] RDX: 000000000000002b RSI: 0000000000048091 RDI: 0000000000000000 [ 1771.113645][T24825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1771.113659][T24825] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1771.113673][T24825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1771.113705][T24825] [ 1771.249822][ T2203] legousbtower 1-1:14.57: interrupt endpoints not found [ 1771.371300][ T2203] legousbtower 1-1:14.228: get version request failed: -32 [ 1771.371420][ T2203] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -32 [ 1771.422384][T16725] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1771.422446][T16725] usb 6-1: MIDIStreaming interface descriptor not found [ 1771.440610][T24829] ÿ: renamed from dummy0 [ 1771.502831][ T2205] usb 2-1: USB disconnect, device number 25 [ 1771.541084][T24829] ALSA: mixer_oss: invalid OSS volume '' [ 1771.561201][T24856] FAULT_INJECTION: forcing a failure. [ 1771.561201][T24856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1771.561636][T24856] CPU: 0 UID: 0 PID: 24856 Comm: syz.1.8438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.561669][T24856] Tainted: [L]=SOFTLOCKUP [ 1771.561690][T24856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1771.561704][T24856] Call Trace: [ 1771.561713][T24856] [ 1771.561722][T24856] dump_stack_lvl+0xe8/0x150 [ 1771.561769][T24856] should_fail_ex+0x410/0x560 [ 1771.561796][T24856] _copy_from_user+0x2d/0xb0 [ 1771.561822][T24856] sw_sync_ioctl+0x10d/0x10f0 [ 1771.561950][T24856] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 1771.561975][T24856] ? __fget_files+0x2a/0x420 [ 1771.562006][T24856] ? __fget_files+0x3a2/0x420 [ 1771.562031][T24856] ? __fget_files+0x2a/0x420 [ 1771.562060][T24856] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1771.562093][T24856] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1771.562122][T24856] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1771.562144][T24856] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1771.562171][T24856] ? __fget_files+0x3a2/0x420 [ 1771.562204][T24856] ? fput+0xa0/0xd0 [ 1771.562228][T24856] ? ksys_write+0x242/0x270 [ 1771.562268][T24856] __do_fast_syscall_32+0x27a/0x6a0 [ 1771.562295][T24856] ? do_fast_syscall_32+0x33/0x70 [ 1771.562320][T24856] ? asm_int80_emulation+0x1a/0x20 [ 1771.562339][T24856] ? do_int80_emulation+0x299/0x500 [ 1771.562364][T24856] ? trace_irq_disable+0x3b/0x140 [ 1771.562387][T24856] do_fast_syscall_32+0x33/0x70 [ 1771.562414][T24856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1771.562437][T24856] RIP: 0023:0xf709f0ec [ 1771.562454][T24856] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1771.562472][T24856] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1771.562493][T24856] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045701 [ 1771.562507][T24856] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1771.562520][T24856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1771.562531][T24856] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1771.562543][T24856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1771.562571][T24856] [ 1771.914222][T16725] usb 6-1: USB disconnect, device number 41 [ 1771.995740][T24871] tipc: Enabling of bearer rejected, already enabled [ 1772.019435][T24869] tipc: Resetting bearer [ 1772.082217][T24873] udevd[24873]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1772.557202][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1772.557238][T24894] netlink: 'syz.1.8443': attribute type 30 has an invalid length. [ 1772.557256][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8443'. [ 1772.696896][T16725] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1772.846242][T16725] usb 6-1: Using ep0 maxpacket: 32 [ 1772.847663][T16725] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1772.848741][T16725] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1772.848763][T16725] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.848782][T16725] usb 6-1: config 0 has no interface number 0 [ 1772.848818][T16725] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1772.848833][T16725] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1772.848848][T16725] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1772.848865][T16725] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1772.850463][T16725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.850478][T16725] usb 6-1: Product: syz [ 1772.850488][T16725] usb 6-1: Manufacturer: syz [ 1772.850497][T16725] usb 6-1: SerialNumber: syz [ 1772.852764][T16725] usb 6-1: config 0 descriptor?? [ 1772.936908][ T2203] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1773.068303][T24916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8446'. [ 1773.068336][T24916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8446'. [ 1773.069863][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8446'. [ 1773.069892][T24917] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8446'. [ 1773.096094][ T2203] usb 2-1: Using ep0 maxpacket: 32 [ 1773.107073][T21411] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.107484][T21411] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.107564][T21411] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.107638][T21411] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.166398][ T2203] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1773.166442][ T2203] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1773.167664][ T2203] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1773.167713][ T2203] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1773.167735][ T2203] usb 2-1: config 14 has no interface number 0 [ 1773.167777][ T2203] usb 2-1: config 14 has no interface number 1 [ 1773.167837][ T2203] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1773.167861][ T2203] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1773.167887][ T2203] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1773.167949][ T2203] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1773.167975][ T2203] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1773.167998][ T2203] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1773.168022][ T2203] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1773.168038][ T2203] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1773.170538][ T2203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.170561][ T2203] usb 2-1: Product: syz [ 1773.170576][ T2203] usb 2-1: Manufacturer: syz [ 1773.170612][ T2203] usb 2-1: SerialNumber: syz [ 1773.391353][ T2210] usb 1-1: USB disconnect, device number 52 [ 1773.699212][ T2203] legousbtower 2-1:14.57: interrupt endpoints not found [ 1774.107999][ T2203] legousbtower 2-1:14.228: get version request failed: -32 [ 1774.110039][ T2203] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 1774.385188][ T2203] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1774.498601][T24949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1774.536864][ T2203] usb 4-1: Using ep0 maxpacket: 16 [ 1774.537556][ T2203] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 1774.537623][ T2203] usb 4-1: too many configurations: 97, using maximum allowed: 8 [ 1774.577202][ T2203] usb 4-1: string descriptor 0 read error: -71 [ 1774.577352][ T2203] usb 4-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 1774.584415][ T2203] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 1774.584440][ T2203] usb 4-1: no configuration chosen from 8 choices [ 1774.623571][ T2203] usb 4-1: USB disconnect, device number 54 [ 1775.530782][T16725] ipheth 6-1:0.196: Unable to find endpoints [ 1775.552020][T16725] usb 6-1: USB disconnect, device number 42 [ 1775.617027][T24984] ALSA: mixer_oss: invalid OSS volume '' [ 1775.687737][ T2220] usb 2-1: USB disconnect, device number 26 [ 1775.786775][T14436] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1775.935073][T14436] usb 4-1: Using ep0 maxpacket: 32 [ 1775.935919][T14436] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1775.937554][T14436] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.937583][T14436] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1775.937603][T14436] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1775.937628][T14436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.942321][T14436] usb 4-1: config 0 descriptor?? [ 1776.287983][T16900] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.288032][T16900] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.288101][T16900] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.288125][T16900] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1776.404983][T14437] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1776.414173][T14436] input: HID 04e7:0009 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04E7:0009.00D1/input/input243 [ 1776.414802][T25024] netlink: 'syz.4.8466': attribute type 11 has an invalid length. [ 1776.494246][T25024] bridge2: port 1(dummy0) entered blocking state [ 1776.494357][T25024] bridge2: port 1(dummy0) entered forwarding state [ 1776.562472][T14436] elo 0003:04E7:0009.00D1: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 1776.581773][T14437] usb 2-1: Using ep0 maxpacket: 8 [ 1776.594224][T14437] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 1776.611182][T14437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.611203][T14437] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1776.611246][T14437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.657073][T14437] usb 2-1: config 0 descriptor?? [ 1776.896734][T25016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.897208][T25016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.899044][T25016] netlink: 'syz.1.8464': attribute type 2 has an invalid length. [ 1776.899062][T25016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8464'. [ 1776.982777][T25043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.004044][T25043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.100940][T25016] : entered promiscuous mode [ 1777.131762][T14437] usbhid 2-1:0.0: can't add hid device: -71 [ 1777.131879][T14437] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1777.156795][T14437] usb 2-1: USB disconnect, device number 27 [ 1777.217804][T25057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8469'. [ 1777.499745][T25073] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8472'. [ 1777.757312][ T2205] usb 4-1: USB disconnect, device number 55 [ 1778.036619][T25109] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8477'. [ 1778.036641][T25109] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8477'. [ 1778.344190][ T2205] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1778.518961][ T2205] usb 1-1: Using ep0 maxpacket: 8 [ 1778.519751][ T2205] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1778.520332][ T2205] usb 1-1: config 0 has no interfaces? [ 1778.520366][ T2205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.523412][ T2205] usb 1-1: config 0 descriptor?? [ 1778.880386][T25137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8480'. [ 1779.010503][ T8864] usb 1-1: USB disconnect, device number 53 [ 1779.272850][T25158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8483'. [ 1779.272886][T25158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8483'. [ 1779.341761][T25158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8483'. [ 1779.445097][T14437] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1779.606452][T14437] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1779.630183][T14437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.630209][T14437] usb 6-1: Product: syz [ 1779.630235][T14437] usb 6-1: Manufacturer: syz [ 1779.630250][T14437] usb 6-1: SerialNumber: syz [ 1779.699139][ T8864] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1780.518751][T25201] vivid-001: disconnect [ 1780.747055][T25206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8492'. [ 1780.747676][T25208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8491'. [ 1780.852571][T25211] netlink: 'syz.1.8491': attribute type 4 has an invalid length. [ 1781.105225][ T8864] usb 6-1: Service connection timeout for: 256 [ 1781.105252][ T8864] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1781.151877][ T8864] ath9k_htc: Failed to initialize the device [ 1781.172695][ T8864] usb 6-1: ath9k_htc: USB layer deinitialized [ 1781.261703][T25216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1781.309177][T25228] bond4: (slave ip6erspan0): making interface the new active one [ 1781.314137][T25228] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1781.422688][T25216] veth1_to_bond: entered allmulticast mode [ 1781.809484][T25215] veth1_to_bond: left allmulticast mode [ 1782.004813][T25281] syzkaller0: entered promiscuous mode [ 1782.004837][T25281] syzkaller0: entered allmulticast mode [ 1782.033260][T25281] tipc: Enabled bearer , priority 0 [ 1782.106949][T25281] tipc: Resetting bearer [ 1782.130388][T25280] tipc: Resetting bearer [ 1782.156948][T25280] tipc: Disabling bearer [ 1782.284284][T25292] netlink: 'syz.0.8503': attribute type 1 has an invalid length. [ 1782.337312][ T2205] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1782.400017][T14437] usb 6-1: USB disconnect, device number 43 [ 1782.401926][T25292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1782.466601][T25311] gretap1: entered promiscuous mode [ 1782.491657][T25311] bond5: (slave gretap1): making interface the new active one [ 1782.493195][T25311] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1782.513595][ T2205] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1782.523417][ T2205] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.523495][ T2205] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1782.552254][ T2205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.552277][ T2205] usb 4-1: Product: syz [ 1782.552290][ T2205] usb 4-1: Manufacturer: syz [ 1782.552303][ T2205] usb 4-1: SerialNumber: syz [ 1782.609626][ T2205] usb 4-1: 0:1 : does not exist [ 1782.610433][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8504'. [ 1782.744139][T25292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1782.772789][T25292] bond5: (slave bond6): Enslaving as an active interface with a down link [ 1782.878565][T25285] bridge0: port 3(netdevsim0) entered blocking state [ 1782.878677][T25285] bridge0: port 3(netdevsim0) entered disabled state [ 1782.878902][T25285] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1782.950418][T25285] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1782.966559][T25285] bridge0: port 3(netdevsim0) entered blocking state [ 1782.966669][T25285] bridge0: port 3(netdevsim0) entered forwarding state [ 1783.006425][ T2205] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 1783.011322][ T2205] usb 4-1: unit 0 not found! [ 1783.132649][ T2205] usb 4-1: USB disconnect, device number 56 [ 1783.194594][T24546] udevd[24546]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1784.123410][T25438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8511'. [ 1784.298649][T25438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1784.303534][T25438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.344711][T25438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.417243][ T32] kauditd_printk_skb: 76 callbacks suppressed [ 1784.417259][ T32] audit: type=1326 audit(1790269459.823:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1784.417528][ T32] audit: type=1326 audit(1790269459.823:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1784.417750][ T32] audit: type=1326 audit(1790269459.823:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1784.417996][ T32] audit: type=1326 audit(1790269459.823:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1784.418258][ T32] audit: type=1326 audit(1790269459.823:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1784.418550][ T32] audit: type=1326 audit(1790269459.823:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1784.420878][ T32] audit: type=1326 audit(1790269459.823:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1784.422234][ T32] audit: type=1326 audit(1790269459.823:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d75ab code=0x7ffc0000 [ 1784.422618][ T32] audit: type=1326 audit(1790269459.823:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x7ffc0000 [ 1784.422895][ T32] audit: type=1326 audit(1790269459.823:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.4.8523" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d75ab code=0x7ffc0000 [ 1784.423949][T25455] FAULT_INJECTION: forcing a failure. [ 1784.423949][T25455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.423978][T25455] CPU: 0 UID: 0 PID: 25455 Comm: syz.4.8523 Tainted: G L syzkaller #0 PREEMPT(full) [ 1784.424004][T25455] Tainted: [L]=SOFTLOCKUP [ 1784.424016][T25455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1784.424029][T25455] Call Trace: [ 1784.424037][T25455] [ 1784.424045][T25455] dump_stack_lvl+0xe8/0x150 [ 1784.424078][T25455] should_fail_ex+0x410/0x560 [ 1784.424106][T25455] _copy_to_user+0x31/0xb0 [ 1784.424133][T25455] simple_read_from_buffer+0xe1/0x170 [ 1784.424166][T25455] proc_fail_nth_read+0x1bb/0x230 [ 1784.424185][T25455] ? common_file_perm+0x20e/0x2b0 [ 1784.424212][T25455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1784.424246][T25455] ? rw_verify_area+0x24a/0x4c0 [ 1784.424276][T25455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1784.424305][T25455] vfs_read+0x213/0xa80 [ 1784.424340][T25455] ? __pfx_vfs_read+0x10/0x10 [ 1784.424387][T25455] ksys_read+0x150/0x270 [ 1784.424418][T25455] ? __pfx_ksys_read+0x10/0x10 [ 1784.424450][T25455] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1784.424480][T25455] do_int80_emulation+0x198/0x500 [ 1784.424506][T25455] ? trace_irq_disable+0x3b/0x140 [ 1784.424526][T25455] ? asm_int80_emulation+0x1a/0x20 [ 1784.424545][T25455] ? clear_bhb_loop+0x70/0xc0 [ 1784.424565][T25455] ? clear_bhb_loop+0x70/0xc0 [ 1784.424588][T25455] asm_int80_emulation+0x1a/0x20 [ 1784.424607][T25455] RIP: 0023:0xf71d75ab [ 1784.424625][T25455] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1784.424642][T25455] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1784.424662][T25455] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54965d0 [ 1784.424677][T25455] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1784.424689][T25455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1784.424701][T25455] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1784.424713][T25455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1784.424741][T25455] [ 1784.606611][ T2220] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1784.820831][T25438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1784.820893][T25438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1784.851292][ T2220] usb 6-1: Using ep0 maxpacket: 32 [ 1784.876255][ T2220] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1784.912888][ T2220] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.912918][ T2220] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1784.912945][ T2220] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1784.912977][ T2220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.972387][T25438] veth1_vlan: left promiscuous mode [ 1784.994752][ T2220] usb 6-1: config 0 descriptor?? [ 1785.019783][T25438] veth0_vlan: left promiscuous mode [ 1785.044728][T25438] veth0_vlan: entered promiscuous mode [ 1785.073264][T25438] veth1_vlan: entered promiscuous mode [ 1785.084074][T25438] ipvlan0: left allmulticast mode [ 1785.084091][T25438] veth0_vlan: left allmulticast mode [ 1785.120445][T25438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1785.121697][T25438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1785.122882][T25438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1785.124101][T25438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1785.188326][T25438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1785.190240][T25438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1785.231599][T25438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1785.244700][T25438] geneve3: left promiscuous mode [ 1785.244725][T25438] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1785.264418][T25442] batadv_slave_1: entered promiscuous mode [ 1785.269163][T21411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.269334][T21411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.269419][T21411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.436562][ T2220] input: HID 04e7:0009 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04E7:0009.00D2/input/input245 [ 1785.495775][ T2220] elo 0003:04E7:0009.00D2: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.5-1/input0 [ 1785.537427][T21409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.072118][T25492] fuse: Bad value for 'fd' [ 1786.507599][T25489] fuse: Bad value for 'fd' [ 1786.630995][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.631223][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.631498][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.631714][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.632045][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.632270][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.632573][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.632774][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.633232][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1786.633472][T25495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8531'. [ 1787.571933][T25513] fuse: Bad value for 'fd' [ 1787.655032][ T3202] Bluetooth: hci4: command 0x0c1a tx timeout [ 1787.657949][T25470] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1788.418242][T25470] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1788.421633][T25470] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1788.554371][T16725] usb 6-1: USB disconnect, device number 44 [ 1788.757772][T25534] netlink: 'syz.3.8534': attribute type 12 has an invalid length. [ 1788.786687][T21409] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1788.786894][T21409] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1788.786957][T21409] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1788.786995][T21409] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1788.941563][T25546] netlink: 'syz.3.8538': attribute type 1 has an invalid length. [ 1789.306366][T16725] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1789.456610][T16725] usb 4-1: Using ep0 maxpacket: 32 [ 1789.457180][T16725] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1789.458139][T16725] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1789.458162][T16725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.461234][T16725] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1789.461257][T16725] usb 4-1: Product: syz [ 1789.461271][T16725] usb 4-1: Manufacturer: syz [ 1789.461284][T16725] usb 4-1: SerialNumber: syz [ 1789.464445][T16725] usb 4-1: config 0 descriptor?? [ 1789.518257][T16725] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1789.746595][ T3202] Bluetooth: hci4: command 0x0c1a tx timeout [ 1789.749485][T25565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1789.789258][T16725] usb 4-1: USB disconnect, device number 57 [ 1789.958292][T25610] fuse: Bad value for 'group_id' [ 1789.958306][T25610] fuse: Bad value for 'group_id' [ 1790.276105][ T2203] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1790.427371][ T2203] usb 1-1: Using ep0 maxpacket: 32 [ 1790.428525][ T2203] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1790.429799][ T2203] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.429819][ T2203] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1790.429836][ T2203] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1790.429858][ T2203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.500374][ T2203] usb 1-1: config 0 descriptor?? [ 1790.957757][ T2203] input: HID 04e7:0009 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04E7:0009.00D3/input/input246 [ 1791.050056][ T2203] elo 0003:04E7:0009.00D3: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 1791.577180][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.577244][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.815010][ T3202] Bluetooth: hci4: command 0x0c1a tx timeout [ 1792.153476][T25665] openvswitch: netlink: Key 3 has unexpected len 52 expected 4 [ 1792.166637][T25663] input: syz1 as /devices/virtual/input/input247 [ 1792.338364][T25678] fuse: Bad value for 'group_id' [ 1792.338379][T25678] fuse: Bad value for 'group_id' [ 1792.414542][ T32] kauditd_printk_skb: 6 callbacks suppressed [ 1792.414559][ T32] audit: type=1326 audit(1790269467.813:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x0 [ 1792.591542][ T32] audit: type=1804 audit(1790269467.993:2252): pid=25683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8558" name="/newroot/55/file1" dev="fuse" ino=1 res=1 errno=0 [ 1792.716954][ T2203] usb 1-1: USB disconnect, device number 54 [ 1792.751870][T25701] __nla_validate_parse: 35 callbacks suppressed [ 1792.751889][T25701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8560'. [ 1792.751904][T25701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8560'. [ 1792.774138][ T32] audit: type=1326 audit(1790269468.183:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 1792.774251][ T32] audit: type=1326 audit(1790269468.183:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 1792.774352][ T32] audit: type=1326 audit(1790269468.183:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 1792.774446][ T32] audit: type=1326 audit(1790269468.183:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 1792.774540][ T32] audit: type=1326 audit(1790269468.183:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 1792.774638][ T32] audit: type=1326 audit(1790269468.183:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 1792.774727][ T32] audit: type=1326 audit(1790269468.183:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 1792.774842][ T32] audit: type=1326 audit(1790269468.183:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.8558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 1793.556889][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1793.557229][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1793.557407][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1793.557582][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1793.557783][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1793.557948][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1793.558127][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1793.558314][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 1793.693166][ C1] sd 0:0:1:0: [sda] tag#8860 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1793.693244][ C1] sd 0:0:1:0: [sda] tag#8860 CDB: Read(6) 08 00 00 72 6b 58 [ 1794.107099][ T2218] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1794.267777][ T2218] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 1794.270642][ T2218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.270665][ T2218] usb 6-1: Product: syz [ 1794.270679][ T2218] usb 6-1: Manufacturer: syz [ 1794.270703][ T2218] usb 6-1: SerialNumber: syz [ 1794.310705][ T2218] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 1794.322800][ T2218] scsi host1: usb-storage 6-1:1.0 [ 1794.446519][ T2205] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1794.505075][ T2220] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1794.597211][ T2205] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1794.598693][ T2205] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1794.598722][ T2205] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1794.598744][ T2205] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1794.600651][ T2205] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1794.600675][ T2205] usb 2-1: Product: syz [ 1794.600690][ T2205] usb 2-1: Manufacturer: syz [ 1794.600705][ T2205] usb 2-1: SerialNumber: syz [ 1794.610167][ T2205] usb 2-1: config 0 descriptor?? [ 1794.638336][ T2205] usb 2-1: selecting invalid altsetting 0 [ 1794.657720][ T2220] usb 1-1: Using ep0 maxpacket: 32 [ 1794.662558][ T2220] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1794.699687][ T2220] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.699737][ T2220] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1794.699762][ T2220] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1794.699792][ T2220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.758453][ T2220] usb 1-1: config 0 descriptor?? [ 1795.119952][T25789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.120539][T25789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.217386][ T2220] input: HID 04e7:0009 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04E7:0009.00D4/input/input248 [ 1795.303454][ T2220] elo 0003:04E7:0009.00D4: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 1795.462512][T25798] fuse: fd is not a fuse device [ 1796.559971][T25826] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1796.560002][T25826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1796.562650][T25826] vhci_hcd vhci_hcd.0: Device attached [ 1796.610840][T25826] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 1796.610867][T25826] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1796.610915][T25826] vhci_hcd vhci_hcd.0: Device attached [ 1796.684784][T25829] vhci_hcd: connection closed [ 1796.688922][T25827] vhci_hcd: connection closed [ 1796.692565][T16897] vhci_hcd vhci_hcd.4: stop threads [ 1796.692583][T16897] vhci_hcd vhci_hcd.4: release socket [ 1796.692694][T16897] vhci_hcd vhci_hcd.4: disconnect device [ 1796.692835][T16897] vhci_hcd vhci_hcd.4: stop threads [ 1796.692849][T16897] vhci_hcd vhci_hcd.4: release socket [ 1796.692888][T16897] vhci_hcd vhci_hcd.4: disconnect device [ 1796.746909][ T2205] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1797.159663][ T2203] usb 1-1: USB disconnect, device number 55 [ 1797.546481][T14436] usb 2-1: USB disconnect, device number 28 [ 1797.736717][T14437] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1797.904998][T14437] usb 4-1: Using ep0 maxpacket: 32 [ 1797.905757][T14437] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1797.907073][T14437] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 1797.907119][T14437] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1797.907145][T14437] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1797.907180][T14437] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1797.907212][T14437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.921455][T14437] usb 4-1: config 0 descriptor?? [ 1797.954092][T25863] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1798.089455][T25898] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1798.116407][ T2205] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1798.269222][ T2205] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1798.269479][ T2205] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1798.270747][ T2205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.270770][ T2205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1798.273136][ T2205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.273160][ T2205] usb 2-1: Product: syz [ 1798.273175][ T2205] usb 2-1: Manufacturer: syz [ 1798.273190][ T2205] usb 2-1: SerialNumber: syz [ 1798.339506][ T2205] usb 2-1: 0:1 : does not exist [ 1798.358330][T25903] __nla_validate_parse: 124 callbacks suppressed [ 1798.358348][T25903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1798.358373][T25903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1798.402034][T25863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.402510][T25863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.425128][T14437] hid (null): report_id 16367 is invalid [ 1798.431049][T14437] asus 0003:048D:CE50.00D5: report_id 16367 is invalid [ 1798.431071][T14437] asus 0003:048D:CE50.00D5: item 0 2 1 8 parsing failed [ 1798.431749][T14437] asus 0003:048D:CE50.00D5: Asus hid parse failed: -22 [ 1798.431862][T14437] asus 0003:048D:CE50.00D5: probe with driver asus failed with error -22 [ 1798.526833][T25903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1798.632796][ T2205] usb 4-1: USB disconnect, device number 58 [ 1798.684252][T25886] fuse: Bad value for 'fd' [ 1798.762149][T25930] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.8593'. [ 1798.762322][T25930] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1798.764302][T25930] 0ªX¹¦Dö»: entered allmulticast mode [ 1799.185849][T14436] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1799.242799][T25943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8597'. [ 1799.355177][T14436] usb 1-1: Using ep0 maxpacket: 8 [ 1799.355931][T14436] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1799.356995][T14436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1799.357024][T14436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.359113][T14436] usb 1-1: config 0 descriptor?? [ 1799.475075][ T2220] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1799.569527][T25936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.570147][T25936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.635117][ T2220] usb 4-1: Using ep0 maxpacket: 32 [ 1799.636045][ T2220] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1799.638151][ T2220] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.638171][ T2220] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1799.638188][ T2220] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1799.638211][ T2220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.641258][ T2220] usb 4-1: config 0 descriptor?? [ 1799.726593][T14436] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1799.731695][T14436] usb 1-1: USB disconnect, device number 56 [ 1800.054636][ T2220] input: HID 04e7:0009 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04E7:0009.00D6/input/input249 [ 1800.079667][ T2220] elo 0003:04E7:0009.00D6: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 1800.373814][T25983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8598'. [ 1800.567005][ T2220] usb 4-1: USB disconnect, device number 59 [ 1800.884332][ T2220] usb 2-1: USB disconnect, device number 29 [ 1801.368705][T26029] kAFS: unable to lookup cell 'ÿ' [ 1801.406566][ T2218] ums_eneub6250 6-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 1801.414182][ T2218] usb 6-1: USB disconnect, device number 45 [ 1801.643961][T26041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8605'. [ 1801.643988][T26041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8605'. [ 1801.755153][ T2218] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1801.893531][T26025] fuse: Bad value for 'fd' [ 1801.908419][ T2218] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1801.909880][ T2218] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.909918][ T2218] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1801.909944][ T2218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.398602][ C0] usb 6-1: received EP1 urb->status = -2 [ 1802.400567][ T2218] usb 6-1: unable to init card! (ret=-110) [ 1802.400863][ T2218] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 1802.669463][ T2205] usb 6-1: USB disconnect, device number 46 [ 1803.010488][T26075] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1803.315801][ T2205] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1803.469927][ T2205] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1803.470032][ T2205] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1803.471179][ T2205] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.471202][ T2205] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1803.474830][ T2205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.474852][ T2205] usb 1-1: Product: syz [ 1803.474866][ T2205] usb 1-1: Manufacturer: syz [ 1803.474880][ T2205] usb 1-1: SerialNumber: syz [ 1803.550345][ T2205] usb 1-1: 0:1 : does not exist [ 1804.232606][T26083] fuse: Bad value for 'fd' [ 1804.528610][T26103] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.8617'. [ 1804.528635][T26103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8617'. [ 1804.885533][T26100] fuse: Bad value for 'fd' [ 1805.276785][ T2218] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 1805.425771][ T2218] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1805.428633][ T2218] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1805.428678][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1805.428705][ T2218] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1805.428729][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1805.428753][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1805.432704][ T2218] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1805.432747][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1805.432772][ T2218] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1805.432796][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1805.432820][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1805.433831][ T2218] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1805.433889][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1805.433915][ T2218] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1805.433939][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1805.433964][ T2218] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1805.607555][ T2218] usb 2-1: string descriptor 0 read error: -22 [ 1805.607770][ T2218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.644818][ T2218] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1805.655342][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1805.673351][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1805.687167][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1805.690117][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1805.690687][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1805.860661][T26125] tipc: Enabling of bearer rejected, already enabled [ 1805.954549][ T2205] usb 2-1: USB disconnect, device number 30 [ 1806.158482][ T2218] usb 1-1: USB disconnect, device number 57 [ 1806.635542][ T2218] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1806.692550][T26150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.694398][T26150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.694534][T26150] bridge_slave_0: entered allmulticast mode [ 1806.718009][T26150] bridge_slave_0: entered promiscuous mode [ 1806.731646][T26150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.735140][T26150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.735289][T26150] bridge_slave_1: entered allmulticast mode [ 1806.737063][T26150] bridge_slave_1: entered promiscuous mode [ 1806.786006][ T2218] usb 1-1: Using ep0 maxpacket: 32 [ 1806.800675][ T2218] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1806.810917][ T2218] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1806.810950][ T2218] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1806.810999][ T2218] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1806.811025][ T2218] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1806.811051][ T2218] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1806.813293][ T2218] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1806.813316][ T2218] usb 1-1: Product: syz [ 1806.813331][ T2218] usb 1-1: Manufacturer: syz [ 1806.813345][ T2218] usb 1-1: SerialNumber: syz [ 1806.875726][ T2218] usb 1-1: config 0 descriptor?? [ 1806.902622][ T2218] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1806.914866][ T2218] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1807.043776][T26150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.070794][T26150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.181850][ T2205] usb 1-1: USB disconnect, device number 58 [ 1807.181905][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 1807.199336][T26220] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1807.199405][ T2205] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1807.263672][T26150] team0: Port device team_slave_0 added [ 1807.287577][T26150] team0: Port device team_slave_1 added [ 1807.288373][T26351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1807.540943][T26379] input: syz0 as /devices/virtual/input/input250 [ 1807.583418][T26150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.583435][T26150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.583462][T26150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.631761][T26150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.631778][T26150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.631803][T26150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.779718][T26150] hsr_slave_0: entered promiscuous mode [ 1807.780738][T26150] hsr_slave_1: entered promiscuous mode [ 1807.783060][T26150] debugfs: 'hsr0' already exists in 'hsr' [ 1807.783079][T26150] Cannot create hsr debugfs directory [ 1807.815016][ T3202] Bluetooth: hci3: command tx timeout [ 1808.441005][T26485] fuse: Unknown parameter '0x0000000000000007' [ 1808.457869][T26485] fuse: Unknown parameter 'use00000000000000000000' [ 1808.533449][T26485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1809.004061][T26150] bond0: (slave netdevsim1): Releasing backup interface [ 1809.877289][T26517] fuse: Unknown parameter 'grou00000000000000000000' [ 1809.896661][ T3202] Bluetooth: hci3: command tx timeout [ 1810.371856][ T2218] wiimote 0005:057E:0330.00D7: global environment stack underflow [ 1810.371877][ T2218] wiimote 0005:057E:0330.00D7: item 0 2 1 11 parsing failed [ 1810.393430][ T2218] wiimote 0005:057E:0330.00D7: HID parse failed [ 1810.407251][ T2218] wiimote 0005:057E:0330.00D7: probe with driver wiimote failed with error -22 [ 1810.453981][T26150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1810.480338][T26150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1810.482978][T26150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1810.522688][T26150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1810.537901][T26150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1810.573347][T26150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1810.584407][T26150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1810.632647][T26540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8648'. [ 1810.641363][T26150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1810.651391][T26540] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8648'. [ 1810.651409][T26540] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8648'. [ 1810.941379][T26150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1810.982041][T26150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1811.018742][T21408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.018855][T21408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.062241][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.062319][T16905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.099740][T26553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1811.099764][T26553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1811.349177][T26150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.435826][T26150] veth0_vlan: entered promiscuous mode [ 1811.442505][T26150] veth1_vlan: entered promiscuous mode [ 1811.482144][T26150] veth0_macvtap: entered promiscuous mode [ 1811.506776][T26150] veth1_macvtap: entered promiscuous mode [ 1811.651973][T26150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.682131][T26150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.716863][T16907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.716908][T16907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.716944][T16907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.716978][T16907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.816069][T26572] fuse: Unknown parameter 'grou00000000000000000000' [ 1811.867050][ T8864] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 1811.975261][ T3202] Bluetooth: hci3: command tx timeout [ 1812.016990][T16900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.017010][T16900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.052910][ T8864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1812.052953][ T8864] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1812.054052][ T8864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.054081][ T8864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1812.093768][ T8864] usb 4-1: string descriptor 0 read error: -22 [ 1812.093895][ T8864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.202409][T16909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.202431][T16909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.527515][ T2218] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1812.553468][ T32] kauditd_printk_skb: 2355 callbacks suppressed [ 1812.553486][ T32] audit: type=1800 audit(1790269487.953:4616): pid=26606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8656" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1812.651272][T16725] usb 4-1: USB disconnect, device number 60 [ 1812.694735][ T2218] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1812.721990][ T2218] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1812.722048][ T2218] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1812.722073][ T2218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1812.722097][ T2218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1812.722122][ T2218] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1812.722160][ T2218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.795837][ T2218] usb 2-1: config 0 descriptor?? [ 1812.810313][T26590] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1812.909115][T26613] sctp: [Deprecated]: syz.5.8625 (pid 26613) Use of int in max_burst socket option. [ 1812.909115][T26613] Use struct sctp_assoc_value instead [ 1813.090194][T26606] FAULT_INJECTION: forcing a failure. [ 1813.090194][T26606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1813.090228][T26606] CPU: 1 UID: 0 PID: 26606 Comm: syz.4.8656 Tainted: G L syzkaller #0 PREEMPT(full) [ 1813.090253][T26606] Tainted: [L]=SOFTLOCKUP [ 1813.090261][T26606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1813.090273][T26606] Call Trace: [ 1813.090281][T26606] [ 1813.090290][T26606] dump_stack_lvl+0xe8/0x150 [ 1813.090325][T26606] should_fail_ex+0x410/0x560 [ 1813.090353][T26606] _copy_to_user+0x31/0xb0 [ 1813.090381][T26606] simple_read_from_buffer+0xe1/0x170 [ 1813.090418][T26606] proc_fail_nth_read+0x1bb/0x230 [ 1813.090437][T26606] ? common_file_perm+0x20e/0x2b0 [ 1813.090464][T26606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1813.090505][T26606] ? rw_verify_area+0x24a/0x4c0 [ 1813.090535][T26606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1813.090565][T26606] vfs_read+0x213/0xa80 [ 1813.090598][T26606] ? __pfx___mutex_lock+0x10/0x10 [ 1813.090624][T26606] ? __pfx_vfs_read+0x10/0x10 [ 1813.090653][T26606] ? __fget_files+0x2a/0x420 [ 1813.090684][T26606] ? __fget_files+0x3a2/0x420 [ 1813.090712][T26606] ? __fget_files+0x2a/0x420 [ 1813.090746][T26606] ksys_read+0x150/0x270 [ 1813.090777][T26606] ? __pfx_ksys_read+0x10/0x10 [ 1813.090810][T26606] ? asm_int80_emulation+0x1a/0x20 [ 1813.090836][T26606] do_int80_emulation+0x198/0x500 [ 1813.090863][T26606] ? asm_int80_emulation+0x1a/0x20 [ 1813.090882][T26606] ? clear_bhb_loop+0x70/0xc0 [ 1813.090902][T26606] ? clear_bhb_loop+0x70/0xc0 [ 1813.090926][T26606] asm_int80_emulation+0x1a/0x20 [ 1813.090945][T26606] RIP: 0023:0xf71d75ab [ 1813.090962][T26606] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1813.090979][T26606] RSP: 002b:00000000f54684bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1813.091000][T26606] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54685d0 [ 1813.091015][T26606] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1813.091027][T26606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1813.091039][T26606] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1813.091051][T26606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1813.091079][T26606] [ 1813.369128][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369176][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369202][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369256][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369322][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369348][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369373][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369398][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369423][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.369448][ T2218] plantronics 0003:047F:FFFF.00D8: unknown main item tag 0x0 [ 1813.454203][ T2218] plantronics 0003:047F:FFFF.00D8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1813.642749][T26590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.643175][T26590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.836968][T16725] usb 2-1: USB disconnect, device number 31 [ 1814.055258][ T3202] Bluetooth: hci3: command tx timeout [ 1814.055334][ T2218] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1814.225361][ T2218] usb 6-1: Using ep0 maxpacket: 32 [ 1814.226103][ T2218] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1814.227219][ T2218] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1814.227254][ T2218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.273260][ T2218] usb 6-1: config 0 descriptor?? [ 1814.481447][T26676] fuse: Unknown parameter 'grou00000000000000000000' [ 1814.581463][ T2218] usb 6-1: string descriptor 0 read error: -71 [ 1814.599496][ T2218] as10x_usb: device has been detected [ 1814.600662][ T2218] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1814.633252][ T2218] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1814.654139][ T2218] as10x_usb: error during firmware upload part1 [ 1814.654657][ T2218] Registered device nBox DVB-T Dongle [ 1814.669097][ T2218] usb 6-1: USB disconnect, device number 47 [ 1814.735215][ T2218] Unregistered device nBox DVB-T Dongle [ 1814.737137][ T2218] as10x_usb: device has been disconnected [ 1814.854675][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8665'. [ 1814.864567][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8665'. [ 1815.112249][ T32] audit: type=1326 audit(1790269490.513:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26706 comm="syz.0.8666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700f0ec code=0x0 [ 1815.261328][T26712] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8668'. [ 1815.261348][T26712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8668'. [ 1815.545110][ T2218] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1815.794547][ T2218] usb 6-1: New USB device found, idVendor=2137, idProduct=6e65, bcdDevice=65.64 [ 1815.794588][ T2218] usb 6-1: too many configurations: 50, using maximum allowed: 8 [ 1815.814419][ T2218] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1815.814452][ T2218] usb 6-1: can't read configurations, error -71 [ 1815.882488][ T32] audit: type=1326 audit(1790269491.283:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26732 comm="syz.1.8670" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x0 [ 1816.062864][T26739] raw_sendmsg: syz.0.8671 forgot to set AF_INET. Fix it! [ 1816.355177][ T8864] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1816.506571][ T8864] usb 1-1: Using ep0 maxpacket: 16 [ 1816.507273][ T8864] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1816.508822][ T8864] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1816.508846][ T8864] usb 1-1: config 0 has no interface number 0 [ 1816.509129][ T8864] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.509158][ T8864] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1816.509189][ T8864] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1816.509215][ T8864] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1816.509248][ T8864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.512120][ T8864] usb 1-1: config 0 descriptor?? [ 1816.607121][ T8864] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 1816.811587][T26753] fuse: Unknown parameter 'group_i00000000000000000000' [ 1816.941920][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8675'. [ 1816.982558][ T8864] usbhid 1-1:0.1: can't add hid device: -71 [ 1816.982673][ T8864] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1817.013361][ T8864] usb 1-1: USB disconnect, device number 59 [ 1817.790085][T26794] FAULT_INJECTION: forcing a failure. [ 1817.790085][T26794] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.790124][T26794] CPU: 1 UID: 0 PID: 26794 Comm: syz.5.8681 Tainted: G L syzkaller #0 PREEMPT(full) [ 1817.790166][T26794] Tainted: [L]=SOFTLOCKUP [ 1817.790174][T26794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1817.790186][T26794] Call Trace: [ 1817.790195][T26794] [ 1817.790204][T26794] dump_stack_lvl+0xe8/0x150 [ 1817.790238][T26794] should_fail_ex+0x410/0x560 [ 1817.790267][T26794] should_failslab+0xa8/0x100 [ 1817.790292][T26794] ? skb_clone+0x212/0x3a0 [ 1817.790322][T26794] kmem_cache_alloc_noprof+0xa1/0x600 [ 1817.790356][T26794] ? skb_clone+0x212/0x3a0 [ 1817.790390][T26794] skb_clone+0x212/0x3a0 [ 1817.790422][T26794] __netlink_deliver_tap+0x413/0x860 [ 1817.790464][T26794] ? netlink_deliver_tap+0x2e/0x1b0 [ 1817.790497][T26794] netlink_deliver_tap+0x19c/0x1b0 [ 1817.790529][T26794] netlink_unicast+0x781/0x940 [ 1817.790580][T26794] netlink_sendmsg+0x813/0xb40 [ 1817.790608][T26794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1817.790635][T26794] ? apparmor_socket_sendmsg+0x98/0x360 [ 1817.790661][T26794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1817.790678][T26794] sock_sendmsg_nosec+0x13a/0x180 [ 1817.790702][T26794] ____sys_sendmsg+0x54e/0x850 [ 1817.790734][T26794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1817.790776][T26794] ___sys_sendmsg+0x2a5/0x360 [ 1817.790802][T26794] ? __lock_acquire+0x747/0x2de0 [ 1817.790831][T26794] ? __pfx____sys_sendmsg+0x10/0x10 [ 1817.790858][T26794] ? get_pid_task+0x20/0x1f0 [ 1817.790876][T26794] ? get_pid_task+0x20/0x1f0 [ 1817.790910][T26794] ? get_pid_task+0x20/0x1f0 [ 1817.790961][T26794] ? __fget_files+0x2a/0x420 [ 1817.790989][T26794] ? __fget_files+0x3a2/0x420 [ 1817.791028][T26794] __sys_sendmsg+0x177/0x240 [ 1817.791060][T26794] ? __pfx___sys_sendmsg+0x10/0x10 [ 1817.791108][T26794] __do_fast_syscall_32+0x27a/0x6a0 [ 1817.791139][T26794] ? do_fast_syscall_32+0x33/0x70 [ 1817.791167][T26794] ? asm_int80_emulation+0x1a/0x20 [ 1817.791187][T26794] ? do_int80_emulation+0x299/0x500 [ 1817.791213][T26794] ? trace_irq_disable+0x3b/0x140 [ 1817.791239][T26794] do_fast_syscall_32+0x33/0x70 [ 1817.791261][T26794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1817.791292][T26794] RIP: 0023:0xf7f560ec [ 1817.791306][T26794] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1817.791319][T26794] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1817.791336][T26794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1817.791347][T26794] RDX: 0000000000048810 RSI: 0000000000000000 RDI: 0000000000000000 [ 1817.791356][T26794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1817.791366][T26794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1817.791375][T26794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1817.791396][T26794] [ 1818.211394][T26766] fuse: Bad value for 'fd' [ 1818.364046][T26812] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.8685'. [ 1818.374109][T26812] netlink: 'syz.1.8685': attribute type 7 has an invalid length. [ 1818.374152][T26812] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.8685'. [ 1818.392696][ T8864] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1818.393993][T26812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8685'. [ 1818.773583][ T8864] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1818.784662][ T8864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.784710][ T8864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.826221][ T8864] usb 6-1: config 0 descriptor?? [ 1818.865802][ T8864] pwc: Askey VC010 type 2 USB webcam detected. [ 1819.004185][T26829] batadv_slave_1: entered promiscuous mode [ 1819.117638][T26796] netlink: 'syz.5.8682': attribute type 10 has an invalid length. [ 1819.117658][T26796] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8682'. [ 1819.117795][T26796] dummy0: entered promiscuous mode [ 1819.167622][ T8864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1819.172122][T26834] syzkaller1: entered allmulticast mode [ 1819.172358][ T8864] pwc: recv_control_msg error -32 req 02 val 2700 [ 1819.173174][ T8864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1819.203806][ T8864] pwc: recv_control_msg error -32 req 04 val 1000 [ 1819.216286][ T8864] pwc: recv_control_msg error -32 req 04 val 1300 [ 1819.247776][T26839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8684'. [ 1819.519546][ T8864] pwc: recv_control_msg error -71 req 02 val 2000 [ 1819.519971][ T8864] pwc: recv_control_msg error -71 req 02 val 2100 [ 1819.541036][ T8864] pwc: recv_control_msg error -71 req 04 val 1500 [ 1819.549436][ T8864] pwc: recv_control_msg error -71 req 02 val 2500 [ 1819.564754][ T8864] pwc: recv_control_msg error -71 req 02 val 2400 [ 1819.571679][T14436] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1819.586733][ T8864] pwc: recv_control_msg error -71 req 02 val 2600 [ 1819.588965][ T8864] pwc: recv_control_msg error -71 req 02 val 2900 [ 1819.592083][ T8864] pwc: recv_control_msg error -71 req 02 val 2800 [ 1819.682332][ T8864] pwc: recv_control_msg error -71 req 04 val 1100 [ 1819.684302][ T8864] pwc: recv_control_msg error -71 req 04 val 1200 [ 1819.755799][ T8864] pwc: Registered as video103. [ 1819.761969][ T8864] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input252 [ 1819.786425][ T8864] usb 6-1: USB disconnect, device number 50 [ 1819.834988][T14436] usb 2-1: Using ep0 maxpacket: 32 [ 1819.835751][T14436] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1819.836762][T14436] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.836788][T14436] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1819.836822][T14436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.144938][ C0] sched: DL replenish lagged too much [ 1825.110238][T14436] usb 2-1: config 0 descriptor?? [ 1837.764787][T14436] usb 2-1: can't set config #0, error -110 [ 1856.410851][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1856.424251][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.611640][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.624271][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1933.929113][T26137] Bluetooth: hci3: command 0x0406 tx timeout [ 1965.469067][ T2218] usb 2-1: USB disconnect, device number 32 [ 1976.760009][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.774319][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 2006.291512][T24546] udevd[24546]: timeout 'v4l_id /dev/video103' [ 2016.391077][T24546] udevd[24546]: slow: 'v4l_id /dev/video103' [26856] [ 2017.722595][T24546] udevd[24546]: timeout: killing 'v4l_id /dev/video103' [26856] [ 2017.724438][T24546] udevd[24546]: slow: 'v4l_id /dev/video103' [26856] [ 2021.999031][ T33] INFO: task syz.3.8686:26826 blocked for more than 158 seconds. [ 2021.999060][ T33] Tainted: G L syzkaller #0 [ 2021.999072][ T33] Blocked by coredump. [ 2021.999079][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2021.999089][ T33] task:syz.3.8686 state:D stack:28808 pid:26826 tgid:26813 ppid:23526 task_flags:0x40044c flags:0x08080002 [ 2021.999151][ T33] Call Trace: [ 2021.999159][ T33] [ 2021.999172][ T33] __schedule+0x17db/0x58f0 [ 2021.999238][ T33] ? __pfx___schedule+0x10/0x10 [ 2021.999271][ T33] ? schedule+0x90/0x2b0 [ 2021.999297][ T33] schedule+0x164/0x2b0 [ 2021.999321][ T33] schedule_preempt_disabled+0x13/0x30 [ 2021.999344][ T33] rwsem_down_read_slowpath+0x6ba/0x920 [ 2021.999373][ T33] ? rwsem_down_read_slowpath+0x57f/0x920 [ 2021.999406][ T33] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 2021.999453][ T33] down_read+0x9c/0x330 [ 2021.999480][ T33] ? mm_exit_exec_release+0x10d/0x290 [ 2021.999511][ T33] exit_mm+0x111/0x2d0 [ 2021.999534][ T33] do_exit+0x6cd/0x2360 [ 2021.999559][ T33] ? futex_hash+0x4e/0x2b0 [ 2021.999582][ T33] ? __pfx_do_exit+0x10/0x10 [ 2021.999605][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 2021.999643][ T33] do_group_exit+0x22d/0x2f0 [ 2021.999663][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 2021.999688][ T33] get_signal+0x121b/0x12c0 [ 2021.999734][ T33] arch_do_signal_or_restart+0xbb/0x860 [ 2021.999769][ T33] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2021.999817][ T33] exit_to_user_mode_loop+0x10e/0x770 [ 2021.999839][ T33] ? rcu_is_watching+0x16/0xb0 [ 2021.999864][ T33] ? do_fast_syscall_32+0x33/0x70 [ 2021.999893][ T33] __do_fast_syscall_32+0x437/0x6a0 [ 2021.999921][ T33] ? do_fast_syscall_32+0x33/0x70 [ 2021.999948][ T33] ? irqentry_exit+0x10f/0x910 [ 2021.999976][ T33] do_fast_syscall_32+0x33/0x70 [ 2022.000003][ T33] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2022.000029][ T33] RIP: 0023:0xf706f0ec [ 2022.000046][ T33] RSP: 002b:00000000f53b85bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 2022.000067][ T33] RAX: fffffffffffffe00 RBX: 00000000f7465280 RCX: 0000000000000080 [ 2022.000081][ T33] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7465284 [ 2022.000094][ T33] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 2022.000107][ T33] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2022.000119][ T33] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2022.000149][ T33] [ 2022.000167][ T33] [ 2022.000167][ T33] Showing all locks held in the system: [ 2022.000176][ T33] locks held by kthreadd/2: 2, last CPU#1: [ 2022.000191][ T33] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2022.000246][ T33] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2022.000298][ T33] locks held by kworker/R-mm_pe/14: 1, last CPU#1: [ 2022.000312][ T33] #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 2022.000369][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 2022.000383][ T33] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2022.000431][ T33] locks held by kswapd0/86: 1, last CPU#1: [ 2022.000444][ T33] #0: ffffffff8ee901a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0 [ 2022.000510][ T33] locks held by kworker/R-ipv6_/3196: 3, on CPU#0: [ 2022.000524][ T33] #0: ffff88803282e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.000578][ T33] #1: ffffc9000ed2fc20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.000632][ T33] #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 2022.000689][ T33] locks held by klogd/4975: 1, last CPU#1: [ 2022.000702][ T33] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2022.000749][ T33] locks held by udevd/4986: 2, last CPU#1: [ 2022.000762][ T33] #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 2022.000813][ T33] #1: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2022.000859][ T33] locks held by dhcpcd/5280: 1, last CPU#1: [ 2022.000872][ T33] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2022.000919][ T33] locks held by dhcpcd/5281: 1, last CPU#1: [ 2022.000932][ T33] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2022.000978][ T33] locks held by crond/5359: 3, last CPU#1: [ 2022.000992][ T33] #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 2022.001038][ T33] #1: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2022.001083][ T33] #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2022.001133][ T33] locks held by getty/5376: 2, on CPU#1: [ 2022.001147][ T33] #0: ffff8880349130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2022.001302][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2022.001355][ T33] locks held by syz-executor/5607: 1, last CPU#1: [ 2022.001370][ T33] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2022.001417][ T33] locks held by kworker/0:6/5688: 4, on CPU#0: [ 2022.001430][ T33] #0: ffff88803514a940 ((wq_completion)wg-kex-wg2#27){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.001488][ T33] #1: ffffc90004b1fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.001556][ T33] #2: ffff888029049440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 2022.001619][ T33] #3: ffff88803391e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 2022.001679][ T33] locks held by kworker/1:6/5748: 1, on CPU#1: [ 2022.001693][ T33] #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 2022.001748][ T33] locks held by kworker/u8:10/10920: 5, last CPU#1: [ 2022.001762][ T33] #0: ffff888045ebb140 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.001816][ T33] #1: ffffc9000b6d7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.001870][ T33] #2: ffff88805cf4c080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 2022.001956][ T33] #3: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2022.002003][ T33] #4: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2022.002054][ T33] locks held by kworker/1:9/2203: 3, on CPU#1: [ 2022.002069][ T33] #0: ffff888053470940 ((wq_completion)wg-kex-wg2#32){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.002128][ T33] #1: ffffc900032dfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.002220][ T33] #2: ffff88802dde2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 2022.002285][ T33] locks held by kworker/1:11/2205: 3, on CPU#1: [ 2022.002299][ T33] #0: ffff88801fb82d40 ((wq_completion)wg-kex-wg1#32){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.002371][ T33] #1: ffffc900034e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.002440][ T33] #2: ffff88802dde7208 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 2022.002526][ T33] locks held by kworker/1:15/2210: 2, last CPU#1: [ 2022.002541][ T33] #0: ffff88805db98540 ((wq_completion)wg-kex-wg2#34){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2022.002600][ T33] #1: ffffc900032bfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630