last executing test programs: 16m29.452794762s ago: executing program 0 (id=5419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x503, 0x70bd3b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x0, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}}, 0x2000000) 16m25.946244327s ago: executing program 0 (id=5430): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000300)={0x0, @reserved}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000200)}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000280)={0x2, 0x1, "d9b3876ba62e18ec6ee8a96cefb02d1bf6e33b56e5fe9190dffe354a6b861a24", 0x0, 0x10001, 0x8, 0xfffffe3d, 0xe084af61e5e9161}) (async) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000280)={0x2, 0x1, "d9b3876ba62e18ec6ee8a96cefb02d1bf6e33b56e5fe9190dffe354a6b861a24", 0x0, 0x10001, 0x8, 0xfffffe3d, 0xe084af61e5e9161}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mmap(&(0x7f00003d8000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r3, 0x7fcd1000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000340)={0xfffffffc, 0x4, 0x1}) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000200)) (async) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000200)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6(0xa, 0x5f96e99f8a006e72, 0x6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x4, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x8001, 0xe0, 0xaf39, 0x972, 0xf, 0x2]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) 16m25.75700289s ago: executing program 0 (id=5432): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) dup(0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x18) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) r9 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x18, 0x3b, 0x92, 0x20, 0x13b1, 0x42, 0x5816, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0xa, 0xc0, 0x5, [{{0x9, 0x4, 0xca, 0x0, 0x1, 0x7a, 0x8b, 0xb5, 0x4, [], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x6, 0x7b, 0x8}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) 16m22.646063838s ago: executing program 0 (id=5444): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8114}, 0x8840) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x3, 0x40, {{0x8, 0x4, 0x2, 0x35, 0x20, 0x66, 0x0, 0x9, 0x29, 0x0, @loopback, @loopback, {[@generic={0x86, 0x9, "81bc42507e9b96"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x40, 0x1, 0x1, 0x70c, {{0x28, 0x4, 0x3, 0x4, 0xa0, 0x66, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0xef, [@private=0xa010101, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}, @local, @empty, @rand_addr=0x64010100]}, @ssrr={0x89, 0x2b, 0x92, [@remote, @remote, @remote, @rand_addr=0x64010101, @broadcast, @empty, @local, @remote, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x0, [{@remote, 0x7}, {@remote, 0x30}, {@rand_addr=0x64010101, 0x4}, {@multicast1, 0xffffffff}, {@private=0xa010102}, {@broadcast, 0x6}, {@private=0xa010100, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x40, 0xfffffffa, 0x4, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7800, 0x1, 0x40}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000400)={@private1}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x3, 0x2, 0x10, @local, @loopback, 0x1, 0x8000, 0x6, 0x6}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'team0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x15, 0x5, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) connect$can_j1939(r4, &(0x7f0000000040)={0xa, 0x0, 0xffffffffffffffff, {0x1}}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000840)={r1}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) 16m21.66998928s ago: executing program 0 (id=5449): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100033060000000000000000ffffffff000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000fe880000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000448000201656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fffffff}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = io_uring_setup(0x4c77, &(0x7f0000000280)={0x0, 0x90c9, 0x2, 0x20002, 0x1df}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x713, &(0x7f0000000200)={0x0, 0xfd26, 0x24, 0x0, 0x4c, 0x0, r4}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000200)={0x0, 0x40002, 0x2, {0x2, @pix={0x41ce, 0x1a, 0x41415270, 0x3, 0x100, 0x1, 0xa, 0x2, 0x0, 0x3, 0x1, 0x6}}}) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000340)=@ax25={{0x3, @default}, [@netrom, @null, @bcast, @null, @default, @bcast, @default, @bcast]}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000640)=""/85, 0x55}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f00000007c0)=""/156, 0x9c}, {&(0x7f0000000880)=""/27, 0x1b}], 0x9, &(0x7f0000000980)=""/15, 0xf}, 0x8}, {{&(0x7f00000009c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000a40)=""/61, 0x3d}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/138, 0x8a}, {&(0x7f0000000d00)=""/50, 0x32}, {&(0x7f0000000d40)=""/173, 0xad}, {&(0x7f0000000e00)=""/33, 0x21}, {&(0x7f0000000e40)=""/195, 0xc3}, {&(0x7f0000000f40)=""/165, 0xa5}, {&(0x7f0000001000)=""/191, 0xbf}], 0xa, &(0x7f0000001180)=""/55, 0x37}, 0x4}, {{&(0x7f00000011c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)=""/100, 0x64}, {&(0x7f00000012c0)}], 0x2}, 0x6af}, {{&(0x7f0000001340)=@xdp, 0x80, &(0x7f00000034c0)=[{&(0x7f00000013c0)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/38, 0x26}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/120, 0x78}], 0x5, &(0x7f0000003540)=""/148, 0x94}, 0xf1}, {{0x0, 0x0, &(0x7f0000003600), 0x0, &(0x7f0000003640)=""/114, 0x72}, 0x3}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000036c0)=""/120, 0x78}, {&(0x7f0000003740)=""/129, 0x81}], 0x2, &(0x7f0000003840)=""/40, 0x28}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003880)=""/41, 0x29}], 0x1}, 0x9}, {{&(0x7f0000003900)=@qipcrtr, 0x80, &(0x7f0000004d80)=[{&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/178, 0xb2}, {&(0x7f0000004a40)=""/105, 0x69}, {&(0x7f0000004ac0)=""/171, 0xab}, {&(0x7f0000004b80)=""/195, 0xc3}, {&(0x7f0000004c80)=""/63, 0x3f}, {&(0x7f0000004cc0)=""/6, 0x6}, {&(0x7f0000004d00)=""/96, 0x60}], 0x8, &(0x7f0000004e00)=""/30, 0x1e}, 0x93e5}], 0x8, 0x2002, &(0x7f0000005040)) 16m21.291463573s ago: executing program 0 (id=5452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000280)="66baa000ecc74424001100000066bad004b0aeeeff2c2443f48f68788f8ad8320000c0b8f2c967894266bafc0c66ed0f0740c067089548b820450000000000000f23d00f01c535000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30420f01c5", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m20.880159869s ago: executing program 32 (id=5452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000280)="66baa000ecc74424001100000066bad004b0aeeeff2c2443f48f68788f8ad8320000c0b8f2c967894266bafc0c66ed0f0740c067089548b820450000000000000f23d00f01c535000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30420f01c5", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.913632332s ago: executing program 1 (id=8627): unshare(0x2119f91268ee30ff) pipe(&(0x7f0000000080)) r0 = socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x40, 0x3}, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)='veth1_to_batadv\x00', 0x8, 0x9, 0xff9e}) landlock_create_ruleset(&(0x7f0000000300)={0x2114, 0x0, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r7 = socket(0x1e, 0xa, 0x0) write(r7, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 41.813464603s ago: executing program 1 (id=8641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x0, 0x101}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet(0x2b, 0x801, 0x0) socket$inet(0x2b, 0x801, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 41.216092627s ago: executing program 1 (id=8643): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40), 0x0, 0x40080c1) syz_usb_connect(0x0, 0x63, 0x0, 0x0) r2 = socket$isdn(0x22, 0x2, 0x26) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x80044943, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mlock(&(0x7f0000720000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(0x0, &(0x7f0000000140)) r6 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0x0, 0x3b6, 0x0, r0}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@cgroup, 0xffffffffffffffff, 0x5, 0x2020, 0xffffffffffffffff, @void, @void, @value}, 0x20) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="0ad1709a3693fa2fedaa6a1b1be022c8f17854f6bf48d21607383f1e9e0fadc99d5f8e2432d0f143e3774267e20226fc7d7e66343087b783e1312ad8c92960accbdd7810fca73f1515fdf8e558e91bef773f0e9115d5d57766a53015cbdcce73ee27e7b13052df87a1cdfa463ffb63d17899b218dacf17f609f5b8aa6eca0f6c92b9c1c4370336e121ef6c772ff9e8be70d705f0bb89a15ed671acb6ec99d2203384035241ef5816d57a6fa5c1874a81c6932e097f8ae2b968036ecfc214d231c4b32f9c82812a109875c9423355059a8145df1332119a25089748108d414775b38eee802fbb3e2548eea9711249afe5d97291eb5b90203ca34c5a2d4a8e9d8627ef208aa0e5c2a36c22b8f576c9270beb5d23a26d48ff912d0100c97ca180978dae550cb7b45bb74b5274cf649a26a07dffdc7d57631091aacf694f43fb9c9f72bde39d032f4e0ad75dfab51d2ad06f2b41d7bc36c24063b768c7e85de2f7d9d34bcbf465ff9763045426785713a1dd3f089d88b3f26e8876d2a3df098b7d6e04f4842cb3a04af461252dada3c17d9210cf732923affe2c210fa20df86077e369910c02465856703913dcc2506e7b45ef062773ef5c0a272d2ecef870433fef0461f46022cfb3b0f1202c49e81889cdc7950bfb7304295d3490354b462fc9362740f56a309a1cf9d8679bc7188562fc7e3bd2a31807e65837ccc5a167ba7d3d7cd7fa22647c662337d07ba082a72225572afafe4d6d247c8ce8a68b81fe90c9a93a3fff1a4899aeb7121e3a1cbf5f7096a5057cffa0a0d0105aaef5c3a6f202bff0870c70221958085547c7842ad1eea07a4f8a2c75ecfe65a9bbe4beb534da419cdb0d5030f12d0e2183e2c97faae95228428a3d38169f9c4472c58805dc3e3cce2dcf58a5365200b93a86e22f87fbec6a29b4b36b242c258bfef6d6036d486f89df6fd162c5132919f5faf6134fef22772321d71ccfbd156a28a89f1ee1696cd7b758c6cee4abf528750df4d414b889b779cf303ac5bca5a9ca9b13f8851b86885943feaae54a4ca10764442eed3a0e2d30b1f3d2f8f36a841e8760eba69681828e1493701dbcd3a6718729b13c43d1aae07aad4636cf26a5a03eb554d8e7d887c67c7f787ebdf2562adae18698120f894d7211b46ea2450022ab7c643513ff842635383ec6e8bebacbc13f728bcc7551dce39d915ebda56383925621b1f9dec104f070ef1858201d9f31ade5c01f38653f49554fc21e2e0febff8449173798a734fa3f98ef61f11014d75fafa55a3e184b85336836e0216a087d827ecffab8d0072ce40175fb891f411c21a673998a4645153111c67c7bf00252dceeed233aee6c89206f80d4113ce27fbb40fc21720a5f6b4a35575a7e98087e99714218ac0ee32c6f7a2e26e1d3566e5c908a95eaf9b27cf2fdd60759eeaeffc4bc1156cc1a2f76094a42320647466ff6dc30959ca9f57d719d984beaa19fe2ca68a140a5c60b034960f627ef52ef88573e219f7ce4833a80a8d5b34d27a17109aabdbf5205f37e0c2dad460ae0c73a31df61b34ed2283e3c1e96feb5845b337bbcaf07a37073405f03b4968d2004053979470823d8bf525d956ca541c7a920303eaf6a5a77645991effd79314d4908bfe3baaedd9d24349bdf6900bb9f06d77d52b2654ac625bba74dc13f3669318da7536c7075075b34a2d000dba54503ffd15581b43665549546233ed49effd3cbd187d73f4b7d79aac1360e1c1884016a84977f38efa0dab71080875713b81feaae216c2e83d6c3969793a753b1e0ca2d72cad9fa1eca6983dfb710ff214ee8a51314ab34cdef3b0792d907589c2eefe68dd8469d6c5401bb4b55488d7360af93b6df202af71e953b3e0f1c9cd1baee0381dc5aa828d62781e466f22255548ce69ff7e5cbed83b6e750042018cb28682826d875e335dce6bbae59da6aa5270c84e4b70081b284ea218696d3da3c2d5fb95911601f90ea543ecbdc525efb6ca18aa7c851bff3a7ea760eff91437953f9c66cf5f6ba3303d35c7261c828ba87614549091e27b627a9c24c060a66a2b9fb88af584d4a317af8cb23ba2920f94577b1e59275b91975afaae508426de389fe5714e9bf70e77f77b842b098002c2d5c611a2af1be513a250e204761a9c11c35a1687d1c25ff8b03a7980d8f3073f3fcebd4e664644164e09a94a5348cf023a1c4930137e6223a785c7713ad19957eadab2689f9b8a7cbbf4cf1a3afc6257cde4805f9f8cd39da4b04b66c35fe7027294b940c7245a2da531a7fba6d4c11035451a3b14db1e61cfac0319336265f11975e04566d128c2b59585946a5c50c4409d7ed85f8a647bd8733817dbdc32d2bb6b6f87bb1dd041324d5e6a18fa0869dddaa356588a3c5e725f6a3bc469b23418e2ba5cea9458c5c420f7b09607dad16badc02f910c197296709c6019c9787a7bf3501f6617022f0cd56608f606be7a365a7f095fccf317ecf4199e38173ba2d91be3bce979c0d0bb31297acb154a03304d9b3cc8f3c8477f6cd5be1869712f3a9dcf5d4ee912c5abfa57898e9357577f2ce41559a9bca96fa26bed379d38bc4ee734c6b4083649ce43a93852fc69d97e93142a6c2e9588283d0cd78fac37f45668c6a71287ba3fc71e3975dc0e7de3a559c166e06900f0b5e32d18fba8f9bfaa868654fe61ba121248d9938ebd3544ff725374af3da668ee7a5ada1d31826bbd7c0b60eb0f0c4dcf9c6429e1a8e7e1b2e37925324dab32b95083cd9c3e4f412847ca11b3075277cce76fbc4d411c48c69b4031bb1df217317f069567305a4ba9b9f94037ac346824bee9f99dbd9c5e66019476215f15a772f9832b2ed5bd7892d0d6f4155f0771bf4dd412b26fbc7b4f3feb33189caa0e16826745fd56bdb01784ee3d2f345632d3a43d3664729510e7c5835421e200b2525e260a2b9e27aed28d860b60eb4107940df2e00415d5c8a1c035c0bdb2803dc5427eb2c855bf3f9f8035c346514247e90a3182e21bcdfb4e6ce0a86972706a7a40af0278e33dadb2529827bd248f5f0a6f3d8061caab23cbf3c699d360956197e9ba04751815102fa1eaf30039ba526dad8495d68f9950404dcb9afdbeaca10e0af32789d8ab6a767c3430498c6b5064514c2aa26d5e84963282eefcc1692213cff0932eb34235beb6e0b702d3e0a7bcb71370e1c7f49ad9188258ca9c180ceb5cd6c5d5c08047b9c5994f93f19057f4c1639c25274f9b4336372f8e51ad89d12989a87c74a3c55df99cd5d761526e2f0e32fd4dd828196dd7b47f3948b6fcb36004470feced010447e4f97b34110d87b8571c00da185e094196e5d853f33e0badac2b074fc8aee4957d2f4a7e934b6eeecd39c80258ff8d3acd0eb70e98b1b4bec849fc634b08991dca3f918c381c64c1da3d95c04abcda9667e1c169cdeef1664c652d9a86fa1af0ba7aa209aa53a541221cf0eef183b343cc5721a5c1d28f7a7504320e73ffb916e4ee12a7fe63cf3780cf35f7cc40c437e314a95a8d2133917a47d39c1cf91b1c877140b6d38b6aed638f50540831b8122b9ff4b94ccf12179130b27423b216e4896d67c6e9e7994f86c86ecdb2433b22eacb9d3f3459b8788effda747867e31d57ea36d0c96a6130d5d6e998bd6a609e2b47f3c98893ed35a39a2da813c1c36727ec2b6da0dbbb9d69a2049c3b431298be064880eb84071ad385f1ce52ab3ed035bc34efc5b27befc06e9ac3bb07eedfd895bbe48ca9cdd634ca8075c270846b67ec331d417c55f1f52cbc817422de2c61fc11924e9a7a8adc05dbcd7f1d4a60a1d8dd127151ecf456507af36338ba50c1682d22376f9613f3ea72b02e8103f90712a863edaaecc0fd67200009c26ca9cf5e50931278b46e3a09a273a57ea35c5f903928a987806111ec127ecfd8ecd1b65ad1e6187b7524e1d897657437e3a3053bc9af0baa6ca6ad67b05bc463ffe28f772c0477e7f29c7710910a2828cf6f633457f88fa8ab04a3315d29091eaa65fc54bb9002ed3a61d4049a3bce7c1151453e2bd461454af0b685522242fcea45bff288437a8c3882533f7284e3e508abe84207e8e8d0556ab6f8bd316995e175ffb40de26996dc05883cd33e8908f17ba5a0071e52aba800c38292b88f204838eaa124fa19f4ec6a4905199992786ab315dd2032afc642d196ecefe42b785ed1468a2cd0407d0f992f6d9033a257de27700be6b07da65e635dbbecdbafabcbc0f7ce214125a259a50ae9ca6b1892d026d950da98af773a9eabdfc9ed2080151b4e20f9f707aafddcc63f769978dad9a75c58648c39bdbca731d2b788f9277baffa36d18b819b14e1baef76344b8d8ae4d0a22f2a78471f836bad085d5afc60a2740c8ee529c33a254c76cd7a22142b31d74d0b9f2b6dca9de12468927d768e4ce139e768a3836cec3168f985d459d163b317c9622b13dbcf4ac1fd24d82f17f37775814c42a148e45a817d35994ca339502694d75ccad7b1dc71c58098f9a72cc399698fa24fd15baaf12aa68a42977025061ec5c5c592461c4da154ecb51128c96e6e0bb6a6e1165798bb328f5a48948d7b69f282cc5ccff7ba215b4b8127a6bd3bf0636a3b7c932dee21af4c240723bd3adb62bd8b944ed1c77b3e9de6cf4212eae319232a02169477ad48fa6ae0c6e42b436b58f4af443d4132e9d2233b9b0f798a9bfbdfd1b081a482e61a0d1082c2a29acf266e5c1248daff7006a8274a43313531932cb5598d0e10bddbfe48c032bd25387caa245c015ef58d531ef5e19cb923241aa092ac768899dcca51199378bae8f303103a0a43f1c4cdf9d44c50daef2c414a1da042dfdbcc255d979e7b27df7e00e4fda5ec15b7ba764443a2af9e1bc697c4873cabb676ad93fcba4afc6aef7ddad4fd4087d10d136d9364985762ad5989520e47e5758ec28549f560f97ad15756dc1c01981f14ca14c870d038489b5dc3995ec1d50cdae8aa643d0cdd56c44a430f123c3015b096b0df945ce1d4d224e56799e5dd53eb610db708a9d52f331d82ef65fba8f3745bc8b1593c274110fb83e8689dcea1dd84d531a05aab96e639f8425a332f6c7e702281d5de1840e3f3c061801366fc13360802d6def09b2dd9e4b8ddbb513956fb313df11996e13cb43ce36a86fa9b87f86e682cb65239f1456ce1c747c48f3e119304460113ca4a367a9e27f1e4f9ba36004b74b92cf30a19948869a10befe8392711be3a0277b6b497c42f12e262d321ec9a7f7589ec99aaf2058f251dd01f091b0a8af73c365248116e31d971f0da82f7c774c85b6f2c1f84ad2dcd82a772b39ab451e8d87efc1d99f824f06c298c5a63617baa306eed72ba9e7110ae46d25b81a40b69c066c043fc92e06dd73130571103670481f7e397fabaf9eff21af5404db2c82163438d4ed429d08c4331aea6eb22f9edc9a2bb138e5035389588c328c066595717e787499433beed510d9e1dcc5699098b432c56a14c05dee52e7751d3fec228e1eb8e370d0ebae45fd8d69ff59c1ec7fdb234a80d3182bec44bce61ca9193b7c5dbc49d313cb377d97912142b9024c8c3c665196ce8ea3a4abfe92a3cb862cf0c5e384bbcb13db32e19f09615156a7e6ccfacef2141f88b2441586074fb805102331fcdb592983b9b9679fbd36c241e6fe72f455b21984c2d63b5987ccc03c5a34a8b6d69a25d609d6e7398012242dd10a7ed0d02879e011613e3f29ea7141b384c25853731cb1cc714f466584bef07c4afe4ab28e9d3783ed4449dfa859bbe672f517ce9f"}, {&(0x7f0000000280)="580ed7a8a3323c19c349ae41af02b689b67fbc37f5bf3322665007eaced221a4560617d8d0d6326addc31da58a67ffef301a44efd50a37ade5d6811be4b31e322d08f7508dc98a7482509012672fa53e7c424af414ed846190ebdc88075cf416091c0a3937afc4f5eac05ccdf8b7fe2e447f94496016e3d09a7ba358aecfc51366df5f13d0387536a2a381cf48a7c9efc851521d4162ef16fa973e9c29bd8e316ac49b6c8a1a1e29b03787caf8cea6ccac9b80cf0196d47e8ba2d99d383238d35d799c5e3f18530c8bd542ff5c343594075a79ab9bf6c5544c76c74d131aa8073f945c08d1e2c9df7d1f7278ac656e8fce62e1f70d"}, {&(0x7f0000000380)="e16f7f6095ac3557909673c556f5df72d834ed61a07b68596d834883eec2bfc30984224dc3fe0979227b25f34eb0623a113d7bb1d1dfdd06117bbf3219867239d6e203e6d490457202368c54264553572b1f552cca82b340e1810dd37d0fdfbead563dd3af6ff4d95967b1fc24b2c91e8c4123c18c5ae54ca33ca9109fcc20426e5f5a9f09e78c0f07265b59b2f0ae970360e6b7180cbd17fadbfc9e00f2c694ee861351bbf7ecc67c3151acde2de2ca394418"}], 0x1}, 0x20004020) io_uring_enter(r6, 0x48e9, 0x0, 0x3, 0x0, 0x0) 37.746253965s ago: executing program 1 (id=8657): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0xaa3449d9f1a0734a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x9, 0xf, 0x120000, 0xff, 0xffffffffffffbfff, 0x9, 0x8000000000000005, 0x4, 0x0, 0x9, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') syz_usb_connect(0x0, 0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="12f1ff080000601649cdcd863602033f723a390955030109022cd05f32430002070540010904c70000147004070904fb80017380c60109050d0200028100fa08"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, [{0xfd2f, &(0x7f0000000440)=@string={0x0, 0x3, "2f13b1ace3fbfd1dec1beee9527bb4e3ddbc649baf43ea28929f15cbffea4df8582b25b0267c1b2a7f56bb8c88a2e9100334dfa4c5532bbba478bc1c9eff75687d30e3d40e8bda780c820cc607631d75ebb390103d2826033d7710954f248f96feb814c2b84172f564d91b4291ed"}}, {0x4, &(0x7f0000000380)=@string={0x0, 0x3, "9042b03677a69688982cdb0999af40558823b6f06e90d54e6d35740405b8a89e1f4595635e37404527dfb55bc8c8cd902fccea13aa5e66b129ddece3f0ff57efb0"}}]}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 34.387141713s ago: executing program 1 (id=8662): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffff001b361025213cc2fefffffffeffff0700000000000000000000000000000000000000000000000000000000000000000000000000000000fe"]}, 0x108) 34.235677798s ago: executing program 1 (id=8664): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x0, 0x101}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet(0x2b, 0x801, 0x0) socket$inet(0x2b, 0x801, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 33.219099316s ago: executing program 33 (id=8664): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x0, 0x101}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet(0x2b, 0x801, 0x0) socket$inet(0x2b, 0x801, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13.396701637s ago: executing program 2 (id=8729): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xfff, 0x5, 0x369, 0x9, 0x80, 0xb00, 0x1}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={r3, 0x0, &(0x7f0000000340)}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r4, 0x4}, 0x8) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1a240000517a000000000000000000d49c41e2efec23bc5e80531869eeba83bb8dcb78464540fff0536dec55ccbab3d88c0f6e23f0c6e8db992d39a962e047a7b81f7024883e"], 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000001940)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@dccp={{0x1b, 0x4, 0x0, 0x29, 0x116, 0x65, 0x0, 0x91, 0x21, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x55, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@loopback, 0x6}, {@broadcast, 0x8}]}, @generic={0x86, 0xf, "89c7caf24c6f0318cf8ae3a215"}, @lsrr={0x83, 0x2b, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100, @multicast1, @local, @private=0xa010101, @empty, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x6, 0x1, "ef6fe9", 0x7, "ca36b8"}, "66b8f158dc36c37bb0704641863dfd38313c5b64328814f54f4757e28fcfcfb81be819aab5bb1d3cc822cfaad6f464a018723993d4ef203a5cddb75732bf4b1b64f493d42768495782b96a0a2ac714ad4a209be9fbf99d735cedfffe4c4f0cfbcc450b09076099b865c0bf03aaa8565e684d153dd3941d6e4cbe4b8086d251cffdcd8ec511b1d4ce6d785bd527e99b6d74088eabc747dfa7b6d8"}}}}, 0x124) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80000) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x14) recvmsg$can_raw(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1}, 0x2101) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d040015000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f00000045c0)=0x40) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) (async) preadv2(r10, 0x0, 0x0, 0x2, 0x6, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x24, 0x51, {0x51, 0x5, "3b069599d5e3863b5180c9e4ebc29d6354672b7e63af913341b155978f7b0b038829bb92a5a2325481d4dcd5992a972b6b80d1a042a1c37bb5e62f6cecf90a10bf1a0ca9916845b92780a4b76ac6e7"}}, &(0x7f00000004c0)={0x0, 0x3, 0xac, @string={0xac, 0x3, "e81fd892c346eb131f7d8c4bc318695ff6c382bcf7f7e8fc1d52c2f46d4e43cd3c0bbe72e4c546b7b4e5c283dae62c19b80be042c07472f57c90f3d10d5a79ebccd14ee897e4709163ff2fff09289e1c05db8371a934f71e9cd8bc524bc42488cf73ba95169d155967f5bae57b9a24516571813524a2e795c28f9bc8a9dd90a724c9d822c0ad41397879c12acc1258e58f79bc82b651b041b4bfe19dcd627b2bba07e7bc482a972f16b4"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0x8, 0xc, "1a2f5596", "f6628358"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x7, 0x6, 0xc, 0xe, 0xfeff, 0x7}}}, &(0x7f0000000a40)={0x84, &(0x7f0000001840)=ANY=[@ANYBLOB="4017b50000012f152b0283ca399a050dd79bf698008164a080bab9e8f3a72476342fd722c4c5d15a2e65369195de63ad94a3e2cebc352444cee0eda3591e5b917b0c0f6ae47159205949643422a9731ae11a61690e11386fef4961989ab12b8489279f2a6d9f6c65c37de80dfdac0f0390425f6580a9b9790c34d9546bc8e46424f4dda8975360721f1c94994297c4192382fb4cc5fb1b06082f0ec0a4b29fcf99d350a4aa4e32a676aa405211994dbb6947aecfcf7c7c490e77ffe2dee6e95bdd5870c83355e668b58ee07f56dd1e54465fa52cd070c1"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf23}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x45}, &(0x7f0000000800)={0x40, 0xb, 0x2, '\f>'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0xbd9}, &(0x7f0000000880)={0x40, 0x13, 0x6, @remote}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "08f8"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9a}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xd}}) 11.379750996s ago: executing program 2 (id=8733): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r1, &(0x7f0000000300)=[{&(0x7f00000078c0)=""/86, 0x56}], 0x1) ppoll(0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0xf6a248d08e4854cf, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x250, 0x940c, 0x3002, 0x0, 0x2c0, 0x368, 0x3d8, 0x3d8, 0x368, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x250, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x2, 0x3, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv4=@broadcast, @ipv4=@broadcast, @ipv4=@multicast2, @ipv4=@remote, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth1\x00', {0xb8cd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c00044000000000000000021400000011000100"], 0xe4}}, 0x200000d4) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r8, &(0x7f00000004c0)=""/57, 0x39) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000001040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="400a440000005a6e8a2360c115f5ffbe7bc382945bb9d7dc7f0e0f1d92c66fd6626896e5ffc0d7efc1614915c06554f8d50e4e7f37c8e40f9db2590000000000000000b666888785ee0b"], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200e2362a6dcdcedfe7934dba078ba69ddc327b7761696d9fcb8966d5b7d5ea9722ad6742476a8413e4260d75224aa76b9daa59be7a58b0acdf639e7e504b53b50bf753d9437937c56bc6402915d98868106fdb56bde2222d663271d57629330ac5116e4e60322394330d00"/121], &(0x7f0000000440)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0xff}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 10.973235497s ago: executing program 3 (id=8735): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0xba31000000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000200)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16], 0x24}}, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007e00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@multicast1, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@dev, 0x4d6, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0xfffffffffffffffd, 0x0, 0xfff, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd}, {}, {0x8f}, 0x70bd29, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x1e8, r12, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x533f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf86}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8004}, 0x40) getsockopt$inet6_int(r10, 0x29, 0x13, 0x0, &(0x7f0000000d40)) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400002310ffbd1e98dc7fd9260700100001000000c60cd033f9a2c2bb86c652b059260000000000000000000a50000000060a010400000000000000000200000024000480200001c025c1a4006374000014000280080002400000001208000140000000020900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) socket$packet(0x11, 0x2, 0x300) io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r17, r17], 0x2, r15, r16, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 10.349426083s ago: executing program 3 (id=8737): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106d0000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5, 0x8, 0xff, 0x8}]}, 0x10) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r5], 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd2b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xfff1, 0xffe7}, {0xe, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xd}}, @TCA_CHAIN={0x8}]}, 0x34}}, 0x4000084) 9.351823061s ago: executing program 5 (id=8742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x4}}) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYRES32]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x203, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x8000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r10, 0x29, 0x0, 0x40, 0x4152, 0x1, @remote, @mcast2, 0x8000, 0x40, 0x8e91, 0x9}}) 8.575957287s ago: executing program 3 (id=8745): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x9, 0x47, {0x47, 0xe, "1ddd9f0c201f552328ec17f302e56115f8d35ef3d4a4cdc0f8232a65bd2d1ee56de5aafd0e130e3ec1cf6f11d38003ba4618618a1278d8a0695bb36382906047a7e8a7b2c7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.138670933s ago: executing program 2 (id=8747): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() userfaultfd(0x80000) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 7.720040135s ago: executing program 3 (id=8748): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) socket(0x40000000015, 0x5, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 6.705011855s ago: executing program 5 (id=8749): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c015}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x900, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0xffffffffffffff9c, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "a472be82610f"}, {0x5, 0x24, 0x0, 0xbc62}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x8, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x7, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r5, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x9, 0x0, 0x0, 0x25733472}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) r9 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x0, 0x30}, 0x0, 0x0}) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000180)={0x15, 0xfffffffffffffe77, 0xfa00, {r10, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x1, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}}, 0x118) 5.961348653s ago: executing program 6 (id=8750): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="3c0000000000000000000000070000000710"], 0x40}}], 0x2, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="660fef13b8f5000f00d865f365dbeff20fc23f5bbaf80c66b8c056a38166efbafc0cb000ee0f0636d9e96766c7442400174b00006766c74424021e0000006766c744240600000000670f011c24f30fc77600baf80c66b8f450258266efbafc0c66b80900000066ef", 0x68}], 0x1, 0x50, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) socket$packet(0x11, 0x2, 0x300) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x701, 0xfffffffc, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a140000000c0a0300000000000000000005000002140000001100010000000000000000000300000af7"], 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000400)={0x0, 0x1, 0x7, 0x800, @vifc_lcl_addr=@multicast1, @empty}, 0x10) 5.380234004s ago: executing program 4 (id=8751): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 5.376619475s ago: executing program 2 (id=8752): mkdir(0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x2, 0x0, 0x1000], [0x0, 0x8, 0x0, 0x0, 0xd641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}]}}]}, 0x98}, 0x1, 0x7a00, 0xf000000}, 0x0) 5.110207825s ago: executing program 6 (id=8753): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000001808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$inet(r10, &(0x7f00000000c0)="03bd7721f9ac2988b137760969889103a50022bdb2fb1aa4e69bda4d7663649afbd257a7586e4b32006688d949db872efc31aaee61de4e4fd738d68ad7f1b0f4a8dd91dedfb9bc304c52c339773fdf4d8c3f4914c1677fdf8f2c0fcb1ddebd5ef44a4a63078afa93ec17cc247cfab227e6aecf803218be17", 0x78, 0x20000000, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r8, 0x0, r4}) read$FUSE(r8, &(0x7f0000001d80)={0x2020}, 0x2020) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001d40), 0x1, 0x0) fallocate(r11, 0x1, 0x2e, 0x80000000) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) 5.088866858s ago: executing program 2 (id=8754): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigpending(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000203505a8a440000102030109022400010109900d5adae8480997eb3631924109040006020701010209050102080004"], &(0x7f0000000280)={0x0, 0x0, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="050f1a00020a100300060006f7ff070810010c"]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10081, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}], 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x470500) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x28) 4.922161235s ago: executing program 4 (id=8755): openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socket(0x10, 0x3, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6034df09006411000000000000000000000000000000000000000000000000000000ffff0000000000004e23"], 0x0) read$FUSE(r2, 0x0, 0x0) capget(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b0001003172696467650000340002800c002306000000000000000c0021000300000000000000050025000100000000000800040003000000"], 0x64}}, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4018}], 0x1, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xc0, 0x40000000}) 4.291988856s ago: executing program 6 (id=8756): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00%'], 0x33fe0) 3.780821262s ago: executing program 6 (id=8757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000400001000000000000100c41000000030014"], 0x68}, 0x1, 0x0, 0x0, 0x104}, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ptrace(0x10, r2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0xf000)=nil, 0xf000, &(0x7f0000000100)='{#\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000003c0)={0x3, {{0x2, 0x5e33, @multicast1}}, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x108) r6 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x80000000, 0x10000) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x80010, r6, 0xa000) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x26, &(0x7f0000002000)={0x1}) fcntl$lock(r7, 0x6, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00', 0x9}) r8 = gettid() ptrace$poke(0x4, r8, &(0x7f0000000080), 0x4) 3.214235321s ago: executing program 6 (id=8758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x4}}) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYRES32]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x203, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x8000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r10, 0x29, 0x0, 0x40, 0x4152, 0x1, @remote, @mcast2, 0x8000, 0x40, 0x8e91, 0x9}}) 3.100187002s ago: executing program 5 (id=8759): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000008c0)={{}, "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000916030073797a3100000000080007006e6174001c00048008000140"], 0xac}}, 0x0) 2.974187944s ago: executing program 3 (id=8760): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000004", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.585320077s ago: executing program 3 (id=8761): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) socket$packet(0x11, 0x3, 0x300) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f00001a6000/0x3000)=nil, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000016c0)={0x38, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x18, 0x4829, 0xb5d1, 0x6, 0x9, 0xf062, 0x6, 0x1388]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) 2.443988917s ago: executing program 5 (id=8762): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x80005, 0x0) syz_usb_disconnect(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c03509000000440f22c0410f01c8450f01c566baf80cb827099d8aef66bafc0cec66baf80cb838229a8eef66bafc0cb808000000ef673eec2642d30248b84d9af29b560a9d140f23c00f21f83501000b000f23f80f300f01c5", 0x5c}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[], 0x0) (async, rerun: 64) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) (async, rerun: 32) r5 = inotify_init() (rerun: 32) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0xc02) (async) close(r4) execve(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) (async) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1.792933275s ago: executing program 4 (id=8763): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x800) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x40c81, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x7) 1.417126985s ago: executing program 4 (id=8764): mkdir(0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x2, 0x0, 0x1000], [0x0, 0x8, 0x0, 0x0, 0xd641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}]}}]}, 0x98}, 0x1, 0x7a00, 0x10000000}, 0x0) 1.172006724s ago: executing program 5 (id=8765): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 1.102396119s ago: executing program 4 (id=8766): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getenv(0x4201, r3, 0x1, 0x0) ptrace$peekuser(0x3, r3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x200000000, r3, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 959.718272ms ago: executing program 2 (id=8767): r0 = socket(0x40000000015, 0x805, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x4d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@getlink={0x64, 0x12, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x2040}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_macvtap\x00'}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2a17}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7ff}, @IFLA_PHYS_PORT_ID={0xe, 0x22, "049942dd554c5e0caf1d"}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004900}, 0x20040004) 838.18192ms ago: executing program 5 (id=8768): r0 = syz_io_uring_setup(0x5c3, &(0x7f0000000500)={0x0, 0x67a4, 0x0, 0x0, 0x11d}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0xa, 0x0, @fd_index=0x9, 0xc, 0x0, 0x0, 0x2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d507df08c410448200dc0102030109021200010000000009040000a9f782ca0ad0221b8d1e889c4bf2f5df9fb7ea20aabede5af3c7b578606d57034aa19ec396c2b48b6e1447ad9bf9c0cc26b8ff8e17b3f7c4fa0a94c22d980fa25006cc8b574bf02d6fabdd2ec8409d6e26cd2fa74d095059bcbdc522f077de263ade08debeaf48a769b4"], 0x0) io_uring_enter(r0, 0xc54, 0xc993, 0x1, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000080)={0x7fffffff, 0x7f, 0x0, 0x20000000, 0x2, [0xffff8000, 0x4, 0x80, 0x8]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x150, 0x0, 0x0, [{{0x3, 0x2, 0x37a, 0x6, 0x0, 0xc4b0, {0x0, 0x4, 0x8fb, 0xec3, 0x7, 0x8, 0x7f, 0xfffff5e3, 0x1, 0xa000, 0x5, r6, r7, 0xfffff057, 0xa}}, {0x4, 0x0, 0x8, 0x800, 'rootmode'}}, {{0x3, 0x6, 0x6, 0x1ff, 0x2, 0x2, {0x4, 0x87, 0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffff81, 0x800, 0x5, 0xfffff118, 0xc000, 0xff, r6, 0x0, 0x4, 0x4a}}, {0x6, 0x10000, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) 60.067482ms ago: executing program 6 (id=8769): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) creat(0x0, 0x122) (async) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae504000905070020000508ce090503"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000a00)={0x40, 0xd, 0x2, "def0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) dup3(r0, r2, 0x80000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 32) sendmmsg$alg(r4, &(0x7f00000018c0)=[{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000006c0)="b639a948cc16d1059cb9a2ae0ed0d1d85b86c8901cf825bc0cc34e47d4a76510cbc80d10c339d758c89d57ee9784743be7c2952da06429a73c0df7f6b5d82e9fc66799190f5082230743ab45c320cc3210731ee9402cfff9c918ee2f5356686806e401393b4499a6f41c5484731619b9d271e5e1f4a9c3aa770c34700c176241d686da87c0e13b5a81cf848180c9fbdd5e499e108a381468a2c88c486222faff", 0xa0}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x24000010) (async, rerun: 32) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f00000002c0)=""/73, 0x49}], 0x2}, 0x40002141) (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async, rerun: 32) socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (rerun: 64) syz_io_uring_submit(r9, r10, 0x0) (async, rerun: 32) io_uring_enter(r8, 0x3516, 0x77e, 0x0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 0s ago: executing program 4 (id=8770): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) socket(0x40000000015, 0x5, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): ace 0 has no altsetting 0 [ 2440.838594][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8341'. [ 2440.852663][T19715] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2440.939394][T19715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.056433][T19715] usb 6-1: Product: syz [ 2441.068375][T19715] usb 6-1: Manufacturer: syz [ 2441.078222][T19715] usb 6-1: SerialNumber: syz [ 2441.331094][T19715] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2441.368421][T19715] r8152-cfgselector 6-1: config 0 descriptor?? [ 2441.933753][ T5700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8344'. [ 2443.149238][T19715] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2443.169805][ T8515] r8152-cfgselector 6-1: USB disconnect, device number 49 [ 2443.378397][T19715] usb 5-1: Using ep0 maxpacket: 32 [ 2443.431483][T19715] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2443.443660][T19715] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2443.464132][T19715] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2443.494862][T19715] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 2443.534156][T19715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2443.596943][T19715] usb 5-1: config 0 descriptor?? [ 2443.823958][ T5725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2443.855554][ T5713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2443.855996][ T5725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2443.872041][T12638] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2443.872875][ T5713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2443.977017][T19715] usbhid 5-1:0.0: can't add hid device: -71 [ 2444.008350][T19715] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2444.048320][T19715] usb 5-1: USB disconnect, device number 54 [ 2444.088323][T12638] usb 3-1: Using ep0 maxpacket: 16 [ 2444.107601][T12638] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2444.164301][T12638] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2444.204136][T12638] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2444.219626][T12638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.250807][T12638] usb 3-1: Product: syz [ 2444.265384][T12638] usb 3-1: Manufacturer: syz [ 2444.278559][T12638] usb 3-1: SerialNumber: syz [ 2444.548788][T12638] usb 3-1: 0:2 : does not exist [ 2444.586049][T12638] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2444.696413][T12638] usb 3-1: USB disconnect, device number 61 [ 2444.711523][ T5737] FAULT_INJECTION: forcing a failure. [ 2444.711523][ T5737] name failslab, interval 1, probability 0, space 0, times 0 [ 2444.792160][ T5737] CPU: 1 UID: 0 PID: 5737 Comm: syz.5.8355 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2444.792191][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2444.792205][ T5737] Call Trace: [ 2444.792214][ T5737] [ 2444.792225][ T5737] dump_stack_lvl+0x189/0x250 [ 2444.792264][ T5737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2444.792295][ T5737] ? __pfx__printk+0x10/0x10 [ 2444.792322][ T5737] ? __ip_dev_find+0x444/0x4e0 [ 2444.792352][ T5737] should_fail_ex+0x414/0x560 [ 2444.792380][ T5737] should_failslab+0xa8/0x100 [ 2444.792410][ T5737] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2444.792437][ T5737] ? dst_alloc+0x105/0x170 [ 2444.792471][ T5737] dst_alloc+0x105/0x170 [ 2444.792501][ T5737] ? ip_check_mc_rcu+0x4c7/0x680 [ 2444.792531][ T5737] ip_route_output_key_hash_rcu+0x140d/0x2330 [ 2444.792566][ T5737] ? ip_rt_get_source+0x2b5/0x790 [ 2444.792598][ T5737] ? ip_route_output_key_hash+0xde/0x2e0 [ 2444.792629][ T5737] ip_route_output_key_hash+0x1b9/0x2e0 [ 2444.792662][ T5737] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2444.792710][ T5737] ip_route_output_flow+0x2a/0x150 [ 2444.792745][ T5737] ? security_sk_classify_flow+0x70/0x180 [ 2444.792782][ T5737] raw_sendmsg+0x1030/0x18a0 [ 2444.792828][ T5737] ? __pfx_raw_sendmsg+0x10/0x10 [ 2444.792875][ T5737] ? aa_sk_perm+0x81e/0x950 [ 2444.792905][ T5737] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 2444.792938][ T5737] ? sock_rps_record_flow+0x19/0x400 [ 2444.792973][ T5737] ? inet_sendmsg+0x2f4/0x370 [ 2444.793004][ T5737] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2444.793033][ T5737] __sock_sendmsg+0x19c/0x270 [ 2444.793060][ T5737] ____sys_sendmsg+0x505/0x830 [ 2444.793096][ T5737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2444.793137][ T5737] ? import_iovec+0x74/0xa0 [ 2444.793170][ T5737] ___sys_sendmsg+0x21f/0x2a0 [ 2444.793203][ T5737] ? __pfx____sys_sendmsg+0x10/0x10 [ 2444.793271][ T5737] ? __fget_files+0x2a/0x420 [ 2444.793299][ T5737] ? __fget_files+0x3a0/0x420 [ 2444.793339][ T5737] __x64_sys_sendmsg+0x19b/0x260 [ 2444.793373][ T5737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2444.793421][ T5737] ? do_syscall_64+0xba/0x210 [ 2444.793455][ T5737] do_syscall_64+0xf6/0x210 [ 2444.793485][ T5737] ? clear_bhb_loop+0x60/0xb0 [ 2444.793512][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2444.793532][ T5737] RIP: 0033:0x7f0806b8e969 [ 2444.793551][ T5737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2444.793569][ T5737] RSP: 002b:00007f0807911038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2444.793591][ T5737] RAX: ffffffffffffffda RBX: 00007f0806db5fa0 RCX: 00007f0806b8e969 [ 2444.793607][ T5737] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 2444.793618][ T5737] RBP: 00007f0807911090 R08: 0000000000000000 R09: 0000000000000000 [ 2444.793631][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2444.793644][ T5737] R13: 0000000000000000 R14: 00007f0806db5fa0 R15: 00007f0806edfa28 [ 2444.793676][ T5737] [ 2444.813113][T21857] udevd[21857]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2445.229997][ T5750] misc userio: Invalid payload size [ 2445.248495][T19514] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2445.256247][ T8510] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2445.428720][T19514] usb 5-1: Using ep0 maxpacket: 16 [ 2445.439116][ T8510] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2445.457005][T19514] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2445.480779][ T8510] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2445.519213][T19514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.551579][ T8510] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 2445.566837][T19514] usb 5-1: config 0 descriptor?? [ 2445.596175][ T8510] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2445.612102][T19514] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2445.620082][ T8510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.630548][ T8510] usb 2-1: Product: syz [ 2445.638268][ T8510] usb 2-1: Manufacturer: syz [ 2445.649158][ T8510] usb 2-1: SerialNumber: syz [ 2445.656566][ T5763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2445.679608][ T5740] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2445.681783][ T5763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2445.768242][T19715] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2445.911164][ T8510] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2445.929119][ C1] usblp0: nonzero read bulk status received: -71 [ 2445.939844][T19715] usb 6-1: Using ep0 maxpacket: 16 [ 2445.986297][T19715] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2446.004242][T19715] usb 6-1: config 2 has an invalid interface number: 22 but max is 0 [ 2446.027247][T19715] usb 6-1: config 2 has no interface number 0 [ 2446.051523][ T8515] usb 2-1: USB disconnect, device number 97 [ 2446.057607][T19715] usb 6-1: config 2 interface 22 has no altsetting 0 [ 2446.080241][ T8515] usblp0: removed [ 2446.098086][T19715] usb 6-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 2446.125791][T19715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.145882][T19715] usb 6-1: Product: syz [ 2446.156051][T19715] usb 6-1: Manufacturer: syz [ 2446.170218][T19715] usb 6-1: SerialNumber: syz [ 2446.196944][T19514] gspca_sonixj: reg_r err -32 [ 2446.214842][T19514] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 2446.261045][ T8510] usb 5-1: USB disconnect, device number 55 [ 2446.353856][ T5780] 8021q: VLANs not supported on vcan0 [ 2446.409419][T19715] usb-storage 6-1:2.22: USB Mass Storage device detected [ 2446.456826][T19715] usb-storage 6-1:2.22: Quirks match for vid 0451 pid 5416: 2 [ 2446.527734][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2446.573155][T19715] usb 6-1: USB disconnect, device number 50 [ 2446.578997][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2446.635968][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2446.674234][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2446.718284][ T8515] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2446.868486][ T8515] usb 3-1: Using ep0 maxpacket: 16 [ 2446.880737][ T8515] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2446.893765][ T8515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.902859][ T8515] usb 3-1: Product: syz [ 2446.907524][ T8515] usb 3-1: Manufacturer: syz [ 2446.915862][ T8515] usb 3-1: SerialNumber: syz [ 2446.923877][ T8515] usb 3-1: config 0 descriptor?? [ 2446.939241][ T8515] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2447.733757][ T5816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2447.744229][ T8515] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 2447.757906][ T5816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2447.815360][ T5816] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 2447.825809][ T5816] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 2448.121581][T29815] usb 3-1: USB disconnect, device number 62 [ 2448.178968][ T5829] netlink: 'syz.5.8376': attribute type 21 has an invalid length. [ 2448.280960][ T5829] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8376'. [ 2448.578477][T29815] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2449.784493][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8381'. [ 2450.287365][ T5861] netlink: 'syz.1.8384': attribute type 1 has an invalid length. [ 2450.328330][ T5861] net_ratelimit: 4 callbacks suppressed [ 2450.328351][ T5861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2450.658392][ T8515] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2450.829310][ T8515] usb 5-1: config 0 has no interfaces? [ 2450.844620][ T8515] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2450.858317][ T8515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.868255][T19715] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2450.890903][ T8515] usb 5-1: Product: syz [ 2450.895124][ T8515] usb 5-1: Manufacturer: syz [ 2450.915277][ T8515] usb 5-1: SerialNumber: syz [ 2450.940219][ T8515] usb 5-1: config 0 descriptor?? [ 2450.958475][T12841] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2451.038417][T19715] usb 6-1: Using ep0 maxpacket: 8 [ 2451.047971][T19715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2451.062991][T19715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2451.116885][T19715] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2451.127743][T19715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2451.145398][T12841] usb 2-1: config 127 has an invalid interface number: 32 but max is 0 [ 2451.188254][T12841] usb 2-1: config 127 has no interface number 0 [ 2451.194614][T12841] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 2451.208696][T19715] usb 6-1: Product: syz [ 2451.218834][T19715] usb 6-1: Manufacturer: syz [ 2451.223521][T19715] usb 6-1: SerialNumber: syz [ 2451.234215][T12841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.294500][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2451.303548][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2451.333728][T12841] ums-freecom 2-1:127.32: USB Mass Storage device detected [ 2451.362211][ T5865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8385'. [ 2451.547002][ T5871] syzkaller1: entered promiscuous mode [ 2451.552850][ T5871] syzkaller1: entered allmulticast mode [ 2451.559124][T12841] IPVS: starting estimator thread 0... [ 2451.566376][ T5894] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8387'. [ 2451.566496][ T5869] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2451.658282][ T5895] IPVS: using max 29 ests per chain, 69600 per kthread [ 2451.735433][T19715] usb 6-1: 0:2 : does not exist [ 2451.779579][T19715] usb 6-1: USB disconnect, device number 51 [ 2451.841067][T21857] udevd[21857]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2452.127484][T19715] usb 2-1: USB disconnect, device number 98 [ 2452.226138][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8395'. [ 2452.421048][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8395'. [ 2452.461526][T29815] usb 5-1: USB disconnect, device number 56 [ 2452.508812][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8395'. [ 2452.522897][ T5900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 42607 - 0 [ 2452.559074][ T5900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 42607 - 0 [ 2452.559410][ T5907] openvswitch: netlink: Flow key attr not present in new flow. [ 2452.577544][ T5900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 42607 - 0 [ 2452.593042][ T5900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 42607 - 0 [ 2452.611626][ T5900] geneve2: entered promiscuous mode [ 2452.627499][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8399'. [ 2452.715631][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8399'. [ 2453.018908][T29815] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2453.178385][T29815] usb 2-1: Using ep0 maxpacket: 32 [ 2453.196386][T29815] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2453.226777][T29815] usb 2-1: config 0 has no interface number 0 [ 2453.243562][T29815] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2453.275424][T29815] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2453.302540][T29815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.337933][T29815] usb 2-1: Product: syz [ 2453.352826][T29815] usb 2-1: Manufacturer: syz [ 2453.382398][T29815] usb 2-1: SerialNumber: syz [ 2453.401985][T29815] usb 2-1: config 0 descriptor?? [ 2453.502244][T29815] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2453.545836][T29815] em28xx 2-1:0.132: Video interface 132 found: [ 2453.840381][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2453.909840][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2454.182405][T29815] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 2454.388905][T19514] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2454.597993][T19514] usb 6-1: config 0 has no interfaces? [ 2454.605435][T29815] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 2454.631943][T29815] em28xx 2-1:0.132: board has no eeprom [ 2454.638719][T19514] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2454.647850][T19514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.659697][T19514] usb 6-1: Product: syz [ 2454.663930][T19514] usb 6-1: Manufacturer: syz [ 2454.689918][T19514] usb 6-1: SerialNumber: syz [ 2454.735631][T19514] usb 6-1: config 0 descriptor?? [ 2454.803465][ T5938] netlink: 'syz.3.8406': attribute type 1 has an invalid length. [ 2455.123717][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2455.167492][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2455.188660][ T5939] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2455.198905][ T5939] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2455.240200][ T5940] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2455.266070][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8403'. [ 2455.339404][ T5941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8406'. [ 2455.372729][ T5943] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2455.397578][ T1830] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2455.629122][ T1830] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2455.724720][ T5938] veth3: entered promiscuous mode [ 2455.733789][ T5938] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 2455.759140][T29815] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2455.888917][T29815] em28xx 2-1:0.132: analog set to bulk mode. [ 2455.895021][T19514] em28xx 2-1:0.132: Registering V4L2 extension [ 2456.015993][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2456.016013][ T30] audit: type=1326 audit(1747451487.790:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2456.105201][T29815] usb 2-1: USB disconnect, device number 99 [ 2456.111596][T19514] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 2456.266052][ T5949] could not allocate digest TFM handle crc32 [ 2456.273692][T29815] em28xx 2-1:0.132: Disconnecting em28xx [ 2456.295740][ T5947] delete_channel: no stack [ 2456.311865][ T30] audit: type=1326 audit(1747451487.790:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2456.876788][T19514] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 2456.890767][T19514] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 2456.953118][T19514] em28xx 2-1:0.132: No AC97 audio processor [ 2456.953230][ T30] audit: type=1326 audit(1747451487.790:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2457.029029][T19514] usb 2-1: Decoder not found [ 2457.033674][T19514] em28xx 2-1:0.132: failed to create media graph [ 2457.073462][T19514] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 2457.115971][ T30] audit: type=1326 audit(1747451487.790:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a15d8e9a3 code=0x7ffc0000 [ 2457.155137][T19514] em28xx 2-1:0.132: Remote control support is not available for this card. [ 2457.215511][T29815] em28xx 2-1:0.132: Closing input extension [ 2457.293195][T29815] em28xx 2-1:0.132: Freeing device [ 2457.318611][ T30] audit: type=1326 audit(1747451487.790:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2457.408236][ T30] audit: type=1326 audit(1747451487.790:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2457.495375][ T30] audit: type=1326 audit(1747451487.790:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2457.634518][T26326] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 2457.798435][T12841] usb 6-1: USB disconnect, device number 52 [ 2457.858623][ T30] audit: type=1326 audit(1747451487.790:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2457.943015][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2457.954784][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2457.959937][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2457.988765][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2458.428369][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8418'. [ 2458.548435][ T8510] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2458.720493][ T8510] usb 2-1: Using ep0 maxpacket: 8 [ 2458.742192][ T8510] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 2458.750751][ T8510] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2458.761390][ T8510] usb 2-1: config 0 has no interface number 0 [ 2458.780618][ T8510] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2458.789993][ T8510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.810498][ T8510] usb 2-1: Product: syz [ 2458.819603][ T8510] usb 2-1: Manufacturer: syz [ 2458.834450][ T8510] usb 2-1: SerialNumber: syz [ 2458.855194][ T8510] usb 2-1: config 0 descriptor?? [ 2458.872581][ T8510] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 2458.882494][ T8510] usb 2-1: No valid video chain found. [ 2458.948291][T29815] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2459.028435][T12841] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2459.116328][T29815] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 2459.221017][T12841] usb 5-1: config 0 has no interfaces? [ 2459.222440][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2459.246028][T29815] usb 3-1: config 0 has no interface number 0 [ 2459.265741][T29815] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2459.283486][T12841] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2459.292859][T12841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2459.308406][T29815] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2459.334844][T12841] usb 5-1: Product: syz [ 2459.356939][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2459.375825][T12841] usb 5-1: Manufacturer: syz [ 2459.391884][T12841] usb 5-1: SerialNumber: syz [ 2459.410878][T12841] usb 5-1: config 0 descriptor?? [ 2459.426836][T29815] usb 3-1: config 0 interface 255 has no altsetting 0 [ 2459.636174][T29815] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2459.648416][T29815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.649465][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8417'. [ 2459.683409][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8417'. [ 2459.705698][T29815] usb 3-1: config 0 descriptor?? [ 2459.730312][T29815] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 2460.000076][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2460.010663][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2460.160490][T12841] usb 3-1: USB disconnect, device number 64 [ 2461.169293][ T8510] usb 5-1: USB disconnect, device number 57 [ 2461.669936][ T8510] usb 2-1: USB disconnect, device number 100 [ 2461.718398][T26326] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2461.729213][T26326] Bluetooth: hci0: Injecting HCI hardware error event [ 2461.738764][T26326] Bluetooth: hci0: hardware error 0x00 [ 2461.939364][ T30] audit: type=1800 audit(1747451493.590:4870): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8430" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 2462.212983][ T8510] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2462.378305][ T8510] usb 2-1: Using ep0 maxpacket: 32 [ 2462.386329][ T8510] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2462.458220][ T8510] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2462.511996][ T8510] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2462.542471][ T8510] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 2462.578211][ T8510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.628897][ T8510] usb 2-1: config 0 descriptor?? [ 2462.859544][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2462.917052][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2463.011635][ T8510] usbhid 2-1:0.0: can't add hid device: -71 [ 2463.038088][ T8510] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2463.050990][ T8510] usb 2-1: USB disconnect, device number 101 [ 2463.737682][ T6063] ALSA: mixer_oss: invalid OSS volume '' [ 2463.782052][T26326] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2463.938806][T12841] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2464.025918][ T6072] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2464.098367][T12841] usb 3-1: Using ep0 maxpacket: 32 [ 2464.107486][T12841] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2464.121274][T12841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2464.159220][T12841] usb 3-1: config 0 has no interface number 0 [ 2464.167368][T12841] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2464.191803][T12841] usb 3-1: config 0 interface 1 has no altsetting 0 [ 2464.208603][T12841] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2464.218871][T12841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.227069][T12841] usb 3-1: Product: syz [ 2464.233308][T12841] usb 3-1: Manufacturer: syz [ 2464.238072][T12841] usb 3-1: SerialNumber: syz [ 2464.253212][T12841] usb 3-1: config 0 descriptor?? [ 2464.652035][T12841] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2464.692627][T12841] cx231xx 3-1:0.1: Not found matching IAD interface [ 2464.749078][T12841] usb 3-1: USB disconnect, device number 65 [ 2465.218341][T12841] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2465.268345][ T8510] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2465.368262][T12841] usb 3-1: Using ep0 maxpacket: 32 [ 2465.474888][ T8510] usb 2-1: Using ep0 maxpacket: 8 [ 2465.489055][ T8510] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 2465.497323][ T8510] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2465.508315][ T8510] usb 2-1: config 0 has no interface number 0 [ 2465.542407][ T8510] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2465.552205][ T8510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2465.560542][ T8510] usb 2-1: Product: syz [ 2465.598758][ T8510] usb 2-1: Manufacturer: syz [ 2465.603508][ T8510] usb 2-1: SerialNumber: syz [ 2465.634503][T12841] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2465.645520][T12841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2465.646285][ T8510] usb 2-1: config 0 descriptor?? [ 2465.686677][T12841] usb 3-1: config 0 has no interface number 0 [ 2465.906811][ T8510] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 2465.924650][ T8510] usb 2-1: No valid video chain found. [ 2465.949859][ T30] audit: type=1800 audit(1747451497.730:4871): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8445" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 2466.029347][T12841] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2466.347792][T12841] usb 3-1: config 0 interface 1 has no altsetting 0 [ 2466.423600][T12841] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2466.432722][T12841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.692977][T12841] usb 3-1: Product: syz [ 2466.702030][T12841] usb 3-1: Manufacturer: syz [ 2466.707497][T12841] usb 3-1: SerialNumber: syz [ 2466.729713][T12841] usb 3-1: config 0 descriptor?? [ 2466.932066][T12841] usb 3-1: can't set config #0, error -71 [ 2467.010574][T12841] usb 3-1: USB disconnect, device number 66 [ 2467.658292][T12841] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2467.667751][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.676643][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.854835][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8447'. [ 2467.938455][T12841] usb 3-1: Using ep0 maxpacket: 32 [ 2468.176849][T12841] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2468.197880][T12841] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2468.444435][ T30] audit: type=1800 audit(1747451500.190:4872): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8448" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 2468.487570][T12841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2468.761129][T12841] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 2468.771631][T12841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2468.789740][T12841] usb 3-1: config 0 descriptor?? [ 2469.018513][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2469.027390][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2469.076847][T29815] usb 2-1: USB disconnect, device number 102 [ 2469.105584][T12841] usbhid 3-1:0.0: can't add hid device: -71 [ 2469.112284][T12841] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2469.284515][T12841] usb 3-1: USB disconnect, device number 67 [ 2469.627813][ T6119] ALSA: mixer_oss: invalid OSS volume '' [ 2469.664009][ T6105] fuse: Unknown parameter 'user_iä' [ 2469.878290][T12841] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2470.032803][T12841] usb 2-1: Using ep0 maxpacket: 16 [ 2470.056986][T12841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2470.163710][T12841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2470.174095][T12841] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2470.189371][T12841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.220147][ T8510] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2470.269571][T12841] usb 2-1: config 0 descriptor?? [ 2470.308450][T29180] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2470.558216][T29180] usb 6-1: Using ep0 maxpacket: 8 [ 2470.566853][T29180] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 2470.588663][T29180] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 2470.599692][ T8510] usb 3-1: Using ep0 maxpacket: 32 [ 2470.604921][T29180] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2470.607271][ T8510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2470.632821][T29180] usb 6-1: config 250 has no interface number 0 [ 2470.633669][ T8510] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2470.655774][T29180] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2470.677883][T29180] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2470.698249][T29815] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2470.708371][ T8510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.736970][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2470.820242][ T8510] usb 3-1: config 0 descriptor?? [ 2470.825618][T29180] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2470.827451][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2470.847066][T29180] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 2470.857634][T29180] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2470.871362][T29180] usb 6-1: config 250 interface 228 has no altsetting 0 [ 2470.881338][T29180] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2470.890885][T29180] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2470.899690][T29180] usb 6-1: Product: syz [ 2470.904713][T29180] usb 6-1: SerialNumber: syz [ 2470.928371][T29815] usb 5-1: Using ep0 maxpacket: 32 [ 2470.932439][T12841] usbhid 2-1:0.0: can't add hid device: -71 [ 2470.944313][T12841] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2470.957881][T29815] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2470.973030][T29815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.985909][ T8510] hub 3-1:0.0: USB hub found [ 2470.986401][T29180] hub 6-1:250.228: bad descriptor, ignoring hub [ 2471.022516][T29815] usb 5-1: config 0 descriptor?? [ 2471.033815][T12841] usb 2-1: USB disconnect, device number 103 [ 2471.048663][T29815] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2471.061831][T29180] hub 6-1:250.228: probe with driver hub failed with error -5 [ 2471.228058][T29180] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 53 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2471.292209][T29180] usb 6-1: USB disconnect, device number 53 [ 2471.349231][T29180] usblp0: removed [ 2471.394115][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2471.432883][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2471.511059][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2471.539421][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2471.558810][T29815] gspca_sunplus: reg_w_riv err -110 [ 2471.589635][T29815] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 2472.246770][ T30] audit: type=1800 audit(1747451503.990:4873): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8457" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 [ 2473.288546][T29815] usb 5-1: USB disconnect, device number 58 [ 2473.347688][ T8510] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 2473.457735][ T8510] usbhid 3-1:0.0: can't add hid device: -71 [ 2473.482784][ T8510] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2473.549391][ T8510] usb 3-1: USB disconnect, device number 68 [ 2473.738352][T29815] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2473.968299][T29815] usb 5-1: Using ep0 maxpacket: 8 [ 2473.974989][T29815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2474.006595][T29815] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2474.058361][ T8510] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2474.078468][ T5889] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2474.098451][T29815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2474.108538][T29815] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2474.575388][ T6167] [U]  [ 2474.583558][ T8510] usb 3-1: Using ep0 maxpacket: 8 [ 2474.618347][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 2474.661471][ T5889] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2474.688257][T29815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.696639][ T5889] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2474.734333][ T8510] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 2474.825887][ T8510] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2474.894589][T29815] usb 5-1: config 0 descriptor?? [ 2474.899879][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2474.924680][ T5889] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 2474.934489][ T8510] usb 3-1: config 0 has no interface number 0 [ 2475.008855][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2475.019394][ T8510] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2475.060553][ T8510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.074102][ T5889] usb 6-1: config 0 descriptor?? [ 2475.105869][ T6176] ALSA: mixer_oss: invalid OSS volume '' [ 2475.116145][ T8510] usb 3-1: Product: syz [ 2475.138202][ T8510] usb 3-1: Manufacturer: syz [ 2475.195668][ T8510] usb 3-1: SerialNumber: syz [ 2475.215308][ T8510] usb 3-1: config 0 descriptor?? [ 2475.234464][ T8510] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 2475.250581][ T8510] usb 3-1: No valid video chain found. [ 2475.321930][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2475.384069][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2475.439869][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 2475.445910][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2475.493075][T29815] usbhid 5-1:0.0: can't add hid device: -71 [ 2475.522976][T29815] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2475.534245][ T5889] usb 6-1: USB disconnect, device number 54 [ 2475.570875][T29815] usb 5-1: USB disconnect, device number 59 [ 2475.746206][ T6190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2475.965998][ T30] audit: type=1326 audit(1747451507.740:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2476.086451][ T30] audit: type=1326 audit(1747451507.740:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2476.173998][ T30] audit: type=1326 audit(1747451507.740:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2476.247930][ T30] audit: type=1326 audit(1747451507.740:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2476.248302][T29180] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2476.349280][ T30] audit: type=1326 audit(1747451507.740:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a15d8e969 code=0x7ffc0000 [ 2476.428324][T29180] usb 5-1: device descriptor read/64, error -71 [ 2476.437579][ T30] audit: type=1326 audit(1747451507.740:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4a15d8d1d7 code=0x7ffc0000 [ 2476.557601][ T30] audit: type=1326 audit(1747451507.750:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4a15d9010a code=0x7ffc0000 [ 2476.668620][T29180] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2476.676104][ T30] audit: type=1326 audit(1747451507.750:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.1.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a15d8d2d0 code=0x7ffc0000 [ 2476.699193][ T30] audit: type=1800 audit(1747451508.270:4882): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8472" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2476.798835][T29180] usb 5-1: device descriptor read/64, error -71 [ 2476.982052][T29180] usb usb5-port1: attempt power cycle [ 2477.304038][T12841] usb 3-1: USB disconnect, device number 69 [ 2477.388546][T29180] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2477.419923][T29180] usb 5-1: device descriptor read/8, error -71 [ 2477.658348][T29180] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2477.688364][T12841] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2477.699436][T29180] usb 5-1: device descriptor read/8, error -71 [ 2477.820050][T29180] usb usb5-port1: unable to enumerate USB device [ 2477.826860][T12841] usb 3-1: device descriptor read/64, error -71 [ 2478.065024][ T6228] ALSA: mixer_oss: invalid OSS volume '' [ 2478.092917][T12841] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2478.206416][ T6236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2478.248322][T12841] usb 3-1: device descriptor read/64, error -71 [ 2478.368715][T12841] usb usb3-port1: attempt power cycle [ 2478.508312][ T8510] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 2478.670719][ T8510] usb 6-1: No LPM exit latency info found, disabling LPM. [ 2478.683061][ T8510] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2478.702690][ T8510] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2478.718314][ T8510] usb 6-1: can't read configurations, error -61 [ 2478.719265][T12841] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2478.759008][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8484'. [ 2478.783818][T12841] usb 3-1: device descriptor read/8, error -71 [ 2478.858278][ T8510] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 2478.943955][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2478.990101][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2479.022144][ T8510] usb 6-1: No LPM exit latency info found, disabling LPM. [ 2479.035470][ T8510] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2479.049825][ T6253] tipc: Started in network mode [ 2479.052681][T12841] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2479.058432][ T6253] tipc: Node identity ac14142f, cluster identity 4711 [ 2479.081620][ T8510] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2479.085335][T12841] usb 3-1: device descriptor read/8, error -71 [ 2479.090392][ T8510] usb 6-1: can't read configurations, error -61 [ 2479.102202][ T6253] tipc: New replicast peer: 0.0.0.0 [ 2479.107700][ T6253] tipc: Enabled bearer , priority 10 [ 2479.131704][ T8510] usb usb6-port1: attempt power cycle [ 2479.199365][T12841] usb usb3-port1: unable to enumerate USB device [ 2479.224423][ T30] audit: type=1326 audit(1747451511.000:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.3.8488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb349b8e969 code=0x7ffc0000 [ 2479.490164][ T8510] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 2479.852920][ T8510] usb 6-1: No LPM exit latency info found, disabling LPM. [ 2479.860389][ T8510] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2479.870062][ T8510] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2479.877693][ T8510] usb 6-1: can't read configurations, error -61 [ 2480.026656][ T8510] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 2480.124821][ T8510] usb 6-1: No LPM exit latency info found, disabling LPM. [ 2480.132259][ T8510] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2480.144173][ T8510] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2480.152278][ T8510] usb 6-1: can't read configurations, error -61 [ 2480.163914][ T8510] usb usb6-port1: unable to enumerate USB device [ 2480.239559][ T8510] tipc: Node number set to 2886997039 [ 2480.287579][ T6275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2480.493729][ T6276] ALSA: mixer_oss: invalid OSS volume '' [ 2480.545873][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8492'. [ 2480.774721][ T6281] FAULT_INJECTION: forcing a failure. [ 2480.774721][ T6281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2480.834303][ T6281] CPU: 0 UID: 0 PID: 6281 Comm: syz.1.8494 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2480.834335][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2480.834349][ T6281] Call Trace: [ 2480.834358][ T6281] [ 2480.834368][ T6281] dump_stack_lvl+0x189/0x250 [ 2480.834404][ T6281] ? __lock_acquire+0xaac/0xd20 [ 2480.834438][ T6281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2480.834469][ T6281] ? __pfx__printk+0x10/0x10 [ 2480.834492][ T6281] ? __might_fault+0xb0/0x130 [ 2480.834534][ T6281] should_fail_ex+0x414/0x560 [ 2480.834563][ T6281] _copy_from_user+0x2d/0xb0 [ 2480.834597][ T6281] kstrtouint_from_user+0xc4/0x170 [ 2480.834627][ T6281] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2480.834680][ T6281] proc_fail_nth_write+0x88/0x240 [ 2480.834713][ T6281] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2480.834752][ T6281] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2480.834787][ T6281] vfs_write+0x27b/0xa90 [ 2480.834824][ T6281] ? __pfx_vfs_write+0x10/0x10 [ 2480.834852][ T6281] ? __fget_files+0x2a/0x420 [ 2480.834887][ T6281] ? __fget_files+0x3a0/0x420 [ 2480.834915][ T6281] ? __fget_files+0x2a/0x420 [ 2480.834955][ T6281] ksys_write+0x145/0x250 [ 2480.834980][ T6281] ? rcu_is_watching+0x15/0xb0 [ 2480.835002][ T6281] ? __pfx_ksys_write+0x10/0x10 [ 2480.835032][ T6281] ? do_syscall_64+0xba/0x210 [ 2480.835069][ T6281] do_syscall_64+0xf6/0x210 [ 2480.835100][ T6281] ? clear_bhb_loop+0x60/0xb0 [ 2480.835129][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2480.835151][ T6281] RIP: 0033:0x7f4a15d8d41f [ 2480.835171][ T6281] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2480.835191][ T6281] RSP: 002b:00007f4a16ba1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2480.835214][ T6281] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a15d8d41f [ 2480.835230][ T6281] RDX: 0000000000000001 RSI: 00007f4a16ba10a0 RDI: 0000000000000004 [ 2480.835244][ T6281] RBP: 00007f4a16ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 2480.835258][ T6281] R10: 0000000000000082 R11: 0000000000000293 R12: 0000000000000001 [ 2480.835271][ T6281] R13: 0000000000000000 R14: 00007f4a15fb5fa0 R15: 00007f4a160dfa28 [ 2480.835306][ T6281] [ 2481.568989][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2481.615955][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2481.903052][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8501'. [ 2481.924486][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8502'. [ 2482.118289][ T8510] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2482.289332][ T8510] usb 6-1: config 0 has no interfaces? [ 2482.304067][ T8510] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2482.313683][ T8510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2482.350966][ T8510] usb 6-1: Product: syz [ 2482.355175][ T8510] usb 6-1: Manufacturer: syz [ 2482.374350][ T8510] usb 6-1: SerialNumber: syz [ 2482.429669][ T8510] usb 6-1: config 0 descriptor?? [ 2484.412914][ T6326] ALSA: mixer_oss: invalid OSS volume '' [ 2484.792225][T12841] usb 6-1: USB disconnect, device number 59 [ 2485.093207][ T6340] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 2485.328285][ T8510] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2485.438982][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2485.439001][ T30] audit: type=1800 audit(1747451517.220:4916): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8511" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 errno=0 [ 2485.478313][ T8510] usb 5-1: device descriptor read/64, error -71 [ 2485.498734][ T6350] usb usb7: usbfs: process 6350 (syz.5.8513) did not claim interface 2 before use [ 2485.688394][T12841] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2485.749799][ T8510] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2485.881536][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2485.889957][T12841] usb 2-1: Using ep0 maxpacket: 8 [ 2485.894180][T12841] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2485.904700][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2485.914250][T12841] usb 2-1: config 8 has an invalid interface number: 67 but max is 0 [ 2485.928074][T12841] usb 2-1: config 8 has no interface number 0 [ 2485.936007][T12841] usb 2-1: config 8 interface 67 altsetting 1 has an endpoint descriptor with address 0x16, changing to 0x6 [ 2485.978182][ T8510] usb 5-1: device descriptor read/64, error -71 [ 2486.024881][T12841] usb 2-1: config 8 interface 67 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 2486.036537][T12841] usb 2-1: config 8 interface 67 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2486.072760][T12841] usb 2-1: config 8 interface 67 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2486.085257][T12841] usb 2-1: config 8 interface 67 altsetting 1 has a duplicate endpoint with address 0x8F, skipping [ 2486.088981][ T8510] usb usb5-port1: attempt power cycle [ 2486.116274][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2486.125373][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2486.138532][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8515'. [ 2486.174511][T12841] usb 2-1: config 8 interface 67 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 2486.186224][T12841] usb 2-1: config 8 interface 67 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 2486.217840][T12841] usb 2-1: config 8 interface 67 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 1024 [ 2486.251617][T12841] usb 2-1: config 8 interface 67 has no altsetting 0 [ 2486.588221][ T8510] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2486.682621][ T8510] usb 5-1: device descriptor read/8, error -71 [ 2486.938388][ T8510] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2486.969110][ T8510] usb 5-1: device descriptor read/8, error -71 [ 2487.080751][ T8510] usb usb5-port1: unable to enumerate USB device [ 2487.468307][ T8510] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2488.120561][ T6372] netlink: 'syz.2.8519': attribute type 4 has an invalid length. [ 2488.188573][ T8510] usb 6-1: Using ep0 maxpacket: 16 [ 2488.218030][ T8510] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2488.271073][ T8510] usb 6-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2488.388623][ T8510] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2488.466425][T12841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0013, bcdDevice=10.02 [ 2488.490104][ T8510] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 2488.490899][T12841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.562622][ T8510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.587768][ T8510] usb 6-1: Product: syz [ 2488.596686][ T8510] usb 6-1: Manufacturer: syz [ 2488.607504][ T8510] usb 6-1: SerialNumber: syz [ 2488.613490][T12841] usb 2-1: Product:  [ 2488.657300][T12841] usb 2-1: can't set config #8, error -71 [ 2488.675161][T12841] usb 2-1: USB disconnect, device number 104 [ 2489.468680][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8522'. [ 2489.599232][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8522'. [ 2489.717179][ T6389] geneve2: entered promiscuous mode [ 2489.728434][ T6389] geneve2: entered allmulticast mode [ 2489.829443][ T6396] usb usb7: usbfs: process 6396 (syz.2.8524) did not claim interface 2 before use [ 2490.813017][ T30] audit: type=1800 audit(1747451522.590:4917): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8528" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0 [ 2490.905109][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8531'. [ 2490.914877][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8531'. [ 2490.924044][ T6420] netlink: 'syz.1.8531': attribute type 18 has an invalid length. [ 2491.179474][ T5889] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2491.476976][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 2491.560205][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8532'. [ 2491.561143][ T8510] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input177 [ 2491.632637][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2491.667027][ T5889] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 2491.681045][ T5185] bcm5974 6-1:1.0: could not read from device [ 2491.705317][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.723528][ T5889] usb 2-1: Product: syz [ 2491.758340][ T5889] usb 2-1: Manufacturer: syz [ 2491.763428][ T8510] usb 6-1: USB disconnect, device number 60 [ 2491.784228][ T5889] usb 2-1: SerialNumber: syz [ 2491.845805][ T5889] usb 2-1: config 0 descriptor?? [ 2491.881463][ T5889] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2491.894581][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2491.936845][ T5889] usb 2-1: Detected SIO [ 2491.952283][ T5889] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 2491.960488][ T5889] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 2491.968305][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2491.992536][T21864] udevd[21864]: Error opening device "/dev/input/event4": No such file or directory [ 2492.005118][ T5889] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2492.039997][ T6427] loop7: detected capacity change from 0 to 16384 [ 2492.079007][T21864] udevd[21864]: Unable to EVIOCGABS device "/dev/input/event4" [ 2492.086746][T21864] udevd[21864]: Unable to EVIOCGABS device "/dev/input/event4" [ 2492.107687][ T5889] usb 2-1: USB disconnect, device number 105 [ 2492.135300][ T5889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2492.202057][T21864] udevd[21864]: Unable to EVIOCGABS device "/dev/input/event4" [ 2492.222205][ T5889] ftdi_sio 2-1:0.0: device disconnected [ 2492.259125][T21864] udevd[21864]: Unable to EVIOCGABS device "/dev/input/event4" [ 2492.288384][ T8510] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2492.502120][ T8510] usb 6-1: Using ep0 maxpacket: 8 [ 2492.511738][ T8510] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2492.539370][ T8510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2492.562005][ T8510] usb 6-1: Product: syz [ 2492.566210][ T8510] usb 6-1: Manufacturer: syz [ 2492.584378][ T6432] usb usb7: usbfs: process 6432 (syz.2.8535) did not claim interface 2 before use [ 2492.594240][ T8510] usb 6-1: SerialNumber: syz [ 2492.615358][ T8510] usb 6-1: config 0 descriptor?? [ 2492.671449][ T8510] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2492.885851][ T6443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8537'. [ 2492.941057][ T6445] fuse: Bad value for 'user_id' [ 2492.946560][ T6445] fuse: Bad value for 'user_id' [ 2493.169578][ T8510] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 2493.179370][T19514] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2493.197419][ T5889] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 2493.254879][ T8510] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2493.300328][ T8510] usb 6-1: USB disconnect, device number 61 [ 2493.406475][T19514] usb 5-1: config 0 has no interfaces? [ 2493.498712][ T5889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2493.507944][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2493.520310][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2493.532508][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2493.572497][T19514] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2493.582174][T19514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2493.595098][ T6452] fuse: Unknown parameter 'ÿ00000000000000000005' [ 2493.607210][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2493.616783][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2493.692474][T19514] usb 5-1: Product: syz [ 2493.702593][T19514] usb 5-1: Manufacturer: syz [ 2493.707245][T19514] usb 5-1: SerialNumber: syz [ 2493.779882][ T5889] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2493.810944][T19514] usb 5-1: config 0 descriptor?? [ 2493.844408][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2493.895739][ T5889] usb 3-1: Product: syz [ 2493.907327][ T5889] usb 3-1: Manufacturer: syz [ 2493.914177][ T5889] usb 3-1: SerialNumber: syz [ 2493.934244][ T5889] usb 3-1: config 0 descriptor?? [ 2494.032656][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2494.042699][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2494.060271][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8536'. [ 2494.158547][ T6441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2494.400253][ T8515] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2494.408330][T12841] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2494.450777][ T5889] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 2494.470042][ T5889] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input179 [ 2494.619105][T12841] usb 6-1: config 0 has no interfaces? [ 2494.637164][ T8515] usb 2-1: config 0 has no interfaces? [ 2494.672573][T12841] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2494.689503][ T8515] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2494.737051][ T30] audit: type=1326 audit(1747451526.500:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d998e969 code=0x7ffc0000 [ 2494.795335][ T8515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2494.818677][T12841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2494.894803][ T8515] usb 2-1: Product: syz [ 2494.896683][ T30] audit: type=1326 audit(1747451526.500:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d998e969 code=0x7ffc0000 [ 2494.921887][T12841] usb 6-1: Product: syz [ 2494.995215][ T8515] usb 2-1: Manufacturer: syz [ 2495.001396][T12841] usb 6-1: Manufacturer: syz [ 2495.075008][T12841] usb 6-1: SerialNumber: syz [ 2495.088224][ T8515] usb 2-1: SerialNumber: syz [ 2495.130360][ T8515] usb 2-1: config 0 descriptor?? [ 2495.148797][T12841] usb 6-1: config 0 descriptor?? [ 2495.417852][ T6459] program syz.5.8541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2495.458711][ T30] audit: type=1326 audit(1747451526.500:4920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe6d998e969 code=0x7ffc0000 [ 2495.576564][ T30] audit: type=1326 audit(1747451526.500:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d998e969 code=0x7ffc0000 [ 2496.117118][ T30] audit: type=1326 audit(1747451526.500:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe6d998e969 code=0x7ffc0000 [ 2496.468546][ T30] audit: type=1326 audit(1747451526.510:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2496.519076][ T30] audit: type=1326 audit(1747451526.510:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2496.589379][ T30] audit: type=1326 audit(1747451526.510:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2496.699613][ T30] audit: type=1326 audit(1747451526.510:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2497.065834][ T30] audit: type=1326 audit(1747451526.510:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2497.144247][ T30] audit: type=1326 audit(1747451526.510:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2497.188364][ T30] audit: type=1326 audit(1747451526.510:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2497.268264][ T30] audit: type=1326 audit(1747451526.510:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2497.302318][T12841] usb 6-1: USB disconnect, device number 62 [ 2497.387205][ T30] audit: type=1326 audit(1747451526.510:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.2.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6d992ab39 code=0x7ffc0000 [ 2497.678188][ C0] powermate: config urb returned -71 [ 2497.678807][T12841] usb 3-1: USB disconnect, device number 74 [ 2497.683577][ C0] powermate: usb_submit_urb(config) failed [ 2497.690038][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2497.755230][ T5889] usb 5-1: USB disconnect, device number 68 [ 2497.996858][T12841] usb 2-1: USB disconnect, device number 106 [ 2498.137625][ T6486] usb usb7: usbfs: process 6486 (syz.1.8549) did not claim interface 2 before use [ 2498.233797][ T6490] loop2: detected capacity change from 0 to 7 [ 2498.272568][ T6490] loop2: [ 2498.275594][ T6490] loop2: partition table partially beyond EOD, truncated [ 2498.488321][T19715] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2498.690010][T19715] usb 6-1: device descriptor read/64, error -71 [ 2498.942187][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2498.951670][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2499.011286][T19715] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2499.148774][T12841] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2499.158299][T19715] usb 6-1: device descriptor read/64, error -71 [ 2499.271150][T19715] usb usb6-port1: attempt power cycle [ 2499.311444][T12841] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2499.326694][T12841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.452146][T12841] usb 2-1: config 0 descriptor?? [ 2499.465334][T12841] cp210x 2-1:0.0: cp210x converter detected [ 2499.668621][T19715] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2499.689005][T19715] usb 6-1: device descriptor read/8, error -71 [ 2499.879810][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2499.894985][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2499.918981][T12841] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2499.932062][T19715] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2499.977046][T19715] usb 6-1: device descriptor read/8, error -71 [ 2500.089221][T19715] usb usb6-port1: unable to enumerate USB device [ 2500.290185][T12841] usb 2-1: USB disconnect, device number 107 [ 2500.302737][T12841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2500.350704][T12841] cp210x 2-1:0.0: device disconnected [ 2500.798275][T12841] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2500.983626][T12841] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 2500.992178][T12841] usb 5-1: config 0 has no interface number 0 [ 2501.001230][T12841] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 2501.018258][T12841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2501.069197][T12841] usb 5-1: Product: syz [ 2501.088844][T12841] usb 5-1: Manufacturer: syz [ 2501.100332][T12841] usb 5-1: SerialNumber: syz [ 2501.121755][T12841] usb 5-1: config 0 descriptor?? [ 2501.208705][T12841] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 2501.233527][T12841] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 2501.438369][T19715] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2501.598428][T19715] usb 2-1: Using ep0 maxpacket: 16 [ 2501.606295][T19715] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2501.635354][T19715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2501.878235][T19715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2501.947034][T12841] usb 5-1: USB disconnect, device number 69 [ 2501.992248][T19715] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2502.078201][T19715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2502.088436][ T5889] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2502.157126][T19715] usb 2-1: Product: syz [ 2502.158644][T29815] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2502.223282][T19715] usb 2-1: Manufacturer: syz [ 2502.260128][T19715] usb 2-1: SerialNumber: syz [ 2502.303343][ T5889] usb 6-1: config 0 has no interfaces? [ 2502.359316][ T6527] usb usb7: usbfs: process 6527 (syz.3.8561) did not claim interface 2 before use [ 2502.388552][T12841] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2502.423175][T29815] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 2502.434169][T29815] usb 3-1: config 0 has no interface number 0 [ 2502.463028][T29815] usb 3-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 2502.495776][T29815] usb 3-1: config 0 interface 11 has no altsetting 0 [ 2502.507910][ T5889] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2502.530530][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2502.568235][T12841] usb 5-1: Using ep0 maxpacket: 8 [ 2502.578420][T29815] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2502.590942][ T5889] usb 6-1: Product: syz [ 2502.605261][T12841] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2502.614691][T12841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2502.633016][T29815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2502.641820][T12841] usb 5-1: Product: syz [ 2502.658072][T12841] usb 5-1: Manufacturer: syz [ 2502.671801][ T5889] usb 6-1: Manufacturer: syz [ 2502.681173][T12841] usb 5-1: SerialNumber: syz [ 2502.685967][ T5889] usb 6-1: SerialNumber: syz [ 2502.703819][T29815] usb 3-1: config 0 descriptor?? [ 2502.719899][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2502.729996][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2502.774030][ T6514] Cannot find add_set index 3 as target [ 2502.785524][T12841] usb 5-1: config 0 descriptor?? [ 2502.785891][ T6521] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 2502.806906][ T5889] usb 6-1: config 0 descriptor?? [ 2502.844335][T29815] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 2502.857582][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 2502.865665][T12841] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2502.973649][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 2503.003731][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 2503.034999][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2503.126315][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 2503.189144][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2503.197487][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2503.280912][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 2503.308963][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2503.325035][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 2503.464739][T29815] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2503.589471][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8557'. [ 2503.644157][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 2503.723441][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 2503.755356][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 2503.787194][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 2503.810639][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 2503.882707][T29815] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 2503.932473][T29815] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2503.979678][T12841] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 2503.991107][T12841] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2504.041342][T29815] usb 3-1: USB disconnect, device number 75 [ 2504.396615][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 2504.396630][ T30] audit: type=1800 audit(1747451536.170:4987): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8564" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0 [ 2504.580291][T29815] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2504.625900][T29815] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2504.674278][T29815] keyspan 3-1:0.11: device disconnected [ 2504.939864][T19715] usb 2-1: 0:2 : does not exist [ 2504.983317][T19715] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 2505.118687][T29815] usb 5-1: USB disconnect, device number 70 [ 2505.124874][T19715] usb 2-1: USB disconnect, device number 108 [ 2505.284733][T21857] udevd[21857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2505.559924][T29815] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2505.718356][T29815] usb 5-1: Using ep0 maxpacket: 32 [ 2505.727896][T29815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2505.758780][T29815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2505.792360][T19514] usb 6-1: USB disconnect, device number 67 [ 2505.799280][T29815] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2505.862228][T29815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.873821][T29815] usb 5-1: config 0 descriptor?? [ 2505.904723][T29815] hub 5-1:0.0: USB hub found [ 2505.968321][ T5889] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2506.015038][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8569'. [ 2506.047303][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8569'. [ 2506.106491][T29815] hub 5-1:0.0: 1 port detected [ 2506.118276][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 2506.140925][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2506.168512][ T5889] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2506.196897][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.210240][ T5889] usb 2-1: Product: syz [ 2506.214475][ T5889] usb 2-1: Manufacturer: syz [ 2506.217867][ T6565] usb usb7: usbfs: process 6565 (syz.2.8572) did not claim interface 2 before use [ 2506.222143][ T5889] usb 2-1: SerialNumber: syz [ 2506.254673][ T5889] usb 2-1: config 0 descriptor?? [ 2506.274443][ T5889] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2506.288546][ T5889] usb 2-1: setting power ON [ 2506.298973][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 2506.320749][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2506.331856][ T5889] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2506.348230][ T5889] usb 2-1: media controller created [ 2506.393796][ T6570] xt_hashlimit: invalid rate [ 2506.421380][ T6570] netlink: 136 bytes leftover after parsing attributes in process `syz.5.8573'. [ 2506.460670][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2506.527758][ T5889] usb 2-1: selecting invalid altsetting 6 [ 2506.534021][ T5889] usb 2-1: digital interface selection failed (-22) [ 2506.540847][ T5889] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2506.602351][ T5889] usb 2-1: setting power OFF [ 2506.613707][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 2506.626930][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2506.645604][ T6576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2506.653372][ T5889] (NULL device *): no alternate interface [ 2506.713287][T29815] hub 5-1:0.0: activate --> -90 [ 2506.814594][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2506.832637][ T6579] input: syz0 as /devices/virtual/input/input180 [ 2506.876315][ T5889] usb 2-1: USB disconnect, device number 109 [ 2507.068074][ T6578] bond2: entered promiscuous mode [ 2507.077654][ T6578] bond2: entered allmulticast mode [ 2507.088197][ T6578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2507.360826][T29815] usb 5-1-port1: cannot disable (err = -71) [ 2507.369070][T29815] usb 5-1-port1: cannot disable (err = -71) [ 2507.389155][T29815] usb 5-1: USB disconnect, device number 71 [ 2507.702675][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2507.739867][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2508.064943][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2508.074638][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2508.085383][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2508.094914][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2508.108294][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8581'. [ 2508.498354][T29815] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2508.642456][ T6610] usb usb7: usbfs: process 6610 (syz.1.8584) did not claim interface 2 before use [ 2508.656600][T29815] usb 5-1: Using ep0 maxpacket: 8 [ 2508.722419][T29815] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 2508.764206][T29815] usb 5-1: config 0 has no interface number 0 [ 2508.799738][T29815] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2508.900953][T29815] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2508.970417][T29815] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2508.993476][T29815] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2509.018034][T29815] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2509.027609][T29815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.038483][T29815] usb 5-1: Product: syz [ 2509.046776][T29815] usb 5-1: Manufacturer: syz [ 2509.055037][T29815] usb 5-1: SerialNumber: syz [ 2509.185284][T29815] usb 5-1: config 0 descriptor?? [ 2509.338518][ T8510] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2509.465607][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2509.495294][ T8510] usb 2-1: config 0 has no interfaces? [ 2509.505636][ T8510] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2509.652318][ T8510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.789280][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2509.828875][ T8510] usb 2-1: Product: syz [ 2509.833687][ T8510] usb 2-1: Manufacturer: syz [ 2509.840434][T29815] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2509.854512][ T8510] usb 2-1: SerialNumber: syz [ 2509.974867][ T8510] usb 2-1: config 0 descriptor?? [ 2510.041379][ T8510] usb 5-1: USB disconnect, device number 72 [ 2511.049946][ T8510] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2511.562052][T12841] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2511.802714][ T8510] usb 3-1: config 0 has no interfaces? [ 2511.813344][ T8510] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2511.822968][ T8510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2511.832882][ T8510] usb 3-1: Product: syz [ 2511.848905][ T6651] ALSA: mixer_oss: invalid OSS volume '' [ 2511.873559][ T8510] usb 3-1: Manufacturer: syz [ 2511.891334][ T8510] usb 3-1: SerialNumber: syz [ 2511.910486][T12841] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 2511.926515][ T8510] usb 3-1: config 0 descriptor?? [ 2512.089469][ T8510] usb 2-1: USB disconnect, device number 110 [ 2512.133496][T12841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2512.184217][T12841] usb 5-1: config 0 has no interfaces? [ 2512.213444][T12841] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2512.222963][T12841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2512.238426][T12841] usb 5-1: Product: syz [ 2512.242758][T12841] usb 5-1: Manufacturer: syz [ 2512.247509][T12841] usb 5-1: SerialNumber: syz [ 2512.265194][ T6654] usb usb7: usbfs: process 6654 (syz.1.8596) did not claim interface 2 before use [ 2512.286151][T12841] usb 5-1: config 0 descriptor?? [ 2512.309190][T19514] usb 3-1: USB disconnect, device number 76 [ 2513.847322][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2513.898724][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2514.078815][T19514] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2514.260652][T19514] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2514.336654][T19514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.376138][T19514] usb 2-1: config 0 descriptor?? [ 2514.638438][T19514] usbhid 2-1:0.0: can't add hid device: -71 [ 2514.666125][T19514] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2514.714456][T19514] usb 2-1: USB disconnect, device number 111 [ 2514.804519][ T6691] usb usb7: usbfs: process 6691 (syz.2.8607) did not claim interface 2 before use [ 2515.069051][T12841] usb 5-1: USB disconnect, device number 73 [ 2515.107205][ T6696] ALSA: mixer_oss: invalid OSS volume '' [ 2515.323915][ T6707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2515.363911][ T6707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2515.377760][ T6711] fuse: Bad value for 'user_id' [ 2515.383239][ T6711] fuse: Bad value for 'user_id' [ 2515.477584][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2515.490723][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2515.504476][ T6718] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2515.511064][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2515.524583][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 2515.724560][T12841] vhci_hcd: vhci_device speed not set [ 2515.729925][ T8510] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2515.742663][ T6729] usb usb7: usbfs: process 6729 (syz.2.8618) did not claim interface 2 before use [ 2515.788321][T12841] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 2515.898416][ T8510] usb 5-1: Using ep0 maxpacket: 32 [ 2515.905391][ T8510] usb 5-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 2515.978342][T29180] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2515.978745][ T8510] usb 5-1: config 0 has no interfaces? [ 2516.013310][ T8510] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2516.024778][ T8510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.042924][ T8510] usb 5-1: config 0 descriptor?? [ 2516.122609][ T6737] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 2516.146565][T29180] usb 6-1: config 0 has no interfaces? [ 2516.164595][T29180] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2516.178690][ T6737] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 2516.187760][T29180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2516.198514][ T6719] vhci_hcd: connection reset by peer [ 2516.202550][T29180] usb 6-1: Product: syz [ 2516.208487][ T12] vhci_hcd: stop threads [ 2516.212067][ T6737] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 2516.212874][ T12] vhci_hcd: release socket [ 2516.228023][T29180] usb 6-1: Manufacturer: syz [ 2516.236615][ T12] vhci_hcd: disconnect device [ 2516.244943][T29180] usb 6-1: SerialNumber: syz [ 2516.248533][ T6737] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 2516.262745][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2516.275727][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2516.297052][ T6737] geneve3: entered promiscuous mode [ 2516.302537][T29180] usb 6-1: config 0 descriptor?? [ 2516.316866][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2516.327238][ T6737] geneve3: entered allmulticast mode [ 2516.344135][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2516.541271][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2516.563076][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2516.580515][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2516.629315][T29815] usb 6-1: USB disconnect, device number 68 [ 2516.666286][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2517.315883][ T6757] ALSA: mixer_oss: invalid OSS volume '' [ 2517.720391][ T6764] netlink: 112 bytes leftover after parsing attributes in process `syz.5.8630'. [ 2517.784090][ T30] audit: type=1326 audit(1747451549.550:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.2.8631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6d998e969 code=0x0 [ 2518.220462][ T6774] netlink: 'syz.5.8634': attribute type 8 has an invalid length. [ 2518.338724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2518.348040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2518.394120][ T8510] usb 5-1: string descriptor 0 read error: -71 [ 2518.427698][ T8510] usb 5-1: USB disconnect, device number 74 [ 2518.625676][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8636'. [ 2519.131317][ T6797] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2519.322473][ T8515] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2519.430546][ T6801] netlink: 'syz.5.8642': attribute type 1 has an invalid length. [ 2519.498384][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2519.567228][ T8515] usb 3-1: config 0 has no interfaces? [ 2519.592929][ T8515] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2519.603732][ T8515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2519.631994][ T8515] usb 3-1: Product: syz [ 2519.710959][ T8515] usb 3-1: Manufacturer: syz [ 2519.725075][ T8515] usb 3-1: SerialNumber: syz [ 2519.853021][ T8515] usb 3-1: config 0 descriptor?? [ 2520.171030][ T8515] usb 3-1: USB disconnect, device number 77 [ 2520.213757][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8644'. [ 2520.245723][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 2520.557446][ T6823] loop2: detected capacity change from 0 to 7 [ 2520.569458][T21857] loop2: [ 2520.572532][T21857] loop2: partition table partially beyond EOD, truncated [ 2520.585836][ T6823] loop2: [ 2520.591905][ T6823] loop2: partition table partially beyond EOD, truncated [ 2520.938723][T12841] vhci_hcd: vhci_device speed not set [ 2521.259218][ T8510] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2521.452722][ T8510] usb 5-1: config 0 has no interfaces? [ 2521.465313][ T8510] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2521.475347][ T8510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.485197][ T8510] usb 5-1: Product: syz [ 2521.495396][ T8510] usb 5-1: Manufacturer: syz [ 2521.549271][ T8510] usb 5-1: SerialNumber: syz [ 2521.603374][ T8510] usb 5-1: config 0 descriptor?? [ 2521.885124][ T8510] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2521.996528][ T6829] program syz.4.8649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2522.108330][ T8510] usb 6-1: Using ep0 maxpacket: 16 [ 2522.239401][ T8510] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2522.313291][ T8510] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.354744][ T8510] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2522.384817][ T8510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2522.438825][ T8510] usb 6-1: config 0 descriptor?? [ 2522.526767][ T6843] netlink: 'syz.2.8655': attribute type 1 has an invalid length. [ 2522.536311][ T6843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2522.919438][ T6804] delete_channel: no stack [ 2524.287797][ T8510] konepure 0003:1E7D:2DB4.00A2: unknown main item tag 0x0 [ 2524.376004][ T8510] konepure 0003:1E7D:2DB4.00A2: unknown main item tag 0x0 [ 2524.403801][ T8510] konepure 0003:1E7D:2DB4.00A2: unknown main item tag 0x0 [ 2524.428087][ T8510] konepure 0003:1E7D:2DB4.00A2: unknown main item tag 0x0 [ 2524.553598][ T8510] konepure 0003:1E7D:2DB4.00A2: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0 [ 2525.257167][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2525.824747][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2526.248475][T12841] usb 6-1: USB disconnect, device number 69 [ 2526.275858][T29815] usb 5-1: USB disconnect, device number 75 [ 2526.555128][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2527.107411][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2527.310354][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2527.539764][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2527.620512][ T6885] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2527.640294][ T6885] pimreg: entered allmulticast mode [ 2527.647561][ T6885] pimreg: left allmulticast mode [ 2527.791335][T29815] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2527.948721][T29815] usb 5-1: Using ep0 maxpacket: 32 [ 2527.957321][T29815] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2527.969073][T29815] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2527.997287][T29815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2528.013514][ T12] bridge_slave_1: left allmulticast mode [ 2528.019718][T29815] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 2528.040407][ T12] bridge_slave_1: left promiscuous mode [ 2528.052601][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2528.063710][T29815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.109150][ T12] bridge_slave_0: left allmulticast mode [ 2528.120871][T29815] usb 5-1: config 0 descriptor?? [ 2528.133431][ T12] bridge_slave_0: left promiscuous mode [ 2528.158456][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2528.349591][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2528.360743][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2528.442824][T20543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2528.457921][T20543] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2528.472001][T20543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2528.483288][T20543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2528.500203][T29815] usbhid 5-1:0.0: can't add hid device: -71 [ 2528.511889][T20543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2528.513680][T29815] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2528.600998][T29815] usb 5-1: USB disconnect, device number 76 [ 2529.081814][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.094757][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.147052][ T6898] loop2: detected capacity change from 0 to 7 [ 2529.155907][ T6898] Dev loop2: unable to read RDB block 7 [ 2529.162800][ T6898] loop2: unable to read partition table [ 2529.176391][ T6898] loop2: partition table beyond EOD, truncated [ 2529.187104][ T6898] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2529.410661][ T30] audit: type=1326 audit(1747451561.190:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.8673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6138e969 code=0x7ffc0000 [ 2529.458340][ T30] audit: type=1326 audit(1747451561.210:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.8673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6138e969 code=0x7ffc0000 [ 2529.484163][ T30] audit: type=1326 audit(1747451561.210:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.8673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d6138e969 code=0x7ffc0000 [ 2529.506475][ C0] vkms_vblank_simulate: vblank timer overrun [ 2529.538145][ T30] audit: type=1326 audit(1747451561.210:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.8673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6138e969 code=0x7ffc0000 [ 2529.583800][ T30] audit: type=1326 audit(1747451561.210:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.4.8673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d6138e969 code=0x7ffc0000 [ 2529.606098][ C0] vkms_vblank_simulate: vblank timer overrun [ 2529.840262][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2529.869767][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2529.881148][ T12] bond0 (unregistering): Released all slaves [ 2529.897996][ T12] bond1 (unregistering): Released all slaves [ 2529.924377][ T12] bond2 (unregistering): Released all slaves [ 2530.071470][ T12] : left promiscuous mode [ 2530.130165][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8674'. [ 2530.380302][ T6917] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8677'. [ 2530.659178][T20543] Bluetooth: hci1: command tx timeout [ 2530.868361][T12841] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2531.049724][T12841] usb 3-1: config 0 has no interfaces? [ 2531.074239][T12841] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2531.093672][T12841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.111015][T12841] usb 3-1: Product: syz [ 2531.115944][T12841] usb 3-1: Manufacturer: syz [ 2531.124981][T12841] usb 3-1: SerialNumber: syz [ 2531.152000][T12841] usb 3-1: config 0 descriptor?? [ 2531.587358][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2531.676046][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2531.716393][ T12] hsr_slave_0: left promiscuous mode [ 2531.748343][ T12] hsr_slave_1: left promiscuous mode [ 2531.775121][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2531.852970][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2531.877808][ T12] veth1_macvtap: left promiscuous mode [ 2531.958246][ T12] veth0_macvtap: left promiscuous mode [ 2532.615861][ T6949] loop2: detected capacity change from 0 to 7 [ 2532.624799][T21857] loop2: [ 2532.627920][T21857] loop2: partition table partially beyond EOD, truncated [ 2532.642500][ T6949] loop2: [ 2532.645578][ T6949] loop2: partition table partially beyond EOD, truncated [ 2532.742123][T20543] Bluetooth: hci1: command tx timeout [ 2532.928446][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8686'. [ 2533.288274][T12841] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2533.342217][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2533.396557][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2533.491285][T12841] usb 5-1: Using ep0 maxpacket: 8 [ 2533.521900][T12841] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 2533.539451][T12841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2533.573631][T12841] usb 5-1: config 0 has no interface number 0 [ 2533.606397][T12841] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2533.615804][T12841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.627671][T12841] usb 5-1: Product: syz [ 2533.632164][T12841] usb 5-1: Manufacturer: syz [ 2533.657308][T12841] usb 5-1: SerialNumber: syz [ 2533.687251][T12841] usb 5-1: config 0 descriptor?? [ 2533.714824][T12841] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 2533.750976][T12841] usb 5-1: No valid video chain found. [ 2533.841987][T29815] usb 3-1: USB disconnect, device number 78 [ 2534.818552][T20543] Bluetooth: hci1: command tx timeout [ 2535.148910][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 2535.698579][ T12] IPVS: stop unused estimator thread 0... [ 2535.723584][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 2535.731968][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2535.739440][ T6896] bridge_slave_0: entered allmulticast mode [ 2535.747835][ T6896] bridge_slave_0: entered promiscuous mode [ 2535.774217][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 2535.782170][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 2535.812273][ T6896] bridge_slave_1: entered allmulticast mode [ 2535.836219][ T6896] bridge_slave_1: entered promiscuous mode [ 2535.975098][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2536.017822][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2536.097873][ T30] audit: type=1800 audit(1747451567.840:4994): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8692" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 2536.411703][ T30] audit: type=1326 audit(1747451568.180:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2536.825110][ T30] audit: type=1326 audit(1747451568.180:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2536.859644][ T30] audit: type=1326 audit(1747451568.220:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2536.883788][ T30] audit: type=1326 audit(1747451568.220:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2536.914802][ T30] audit: type=1326 audit(1747451568.220:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2536.927282][T20543] Bluetooth: hci1: command tx timeout [ 2536.994413][T12841] usb 5-1: USB disconnect, device number 77 [ 2537.035608][ T6896] team0: Port device team_slave_0 added [ 2537.077191][ T6896] team0: Port device team_slave_1 added [ 2537.093455][ T30] audit: type=1326 audit(1747451568.220:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2537.485058][ T30] audit: type=1326 audit(1747451568.220:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2537.530961][ T30] audit: type=1326 audit(1747451568.250:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2537.563982][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2537.580411][ T7003] loop2: detected capacity change from 0 to 7 [ 2537.587195][ T7003] loop2: [ 2537.632181][ T7003] loop2: partition table partially beyond EOD, truncated [ 2537.639413][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2537.672726][ T30] audit: type=1326 audit(1747451568.250:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.8693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0806b8e969 code=0x7ffc0000 [ 2537.702702][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2537.722532][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2538.113210][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2538.276417][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2538.329610][ T7006] netlink: 'syz.4.8695': attribute type 21 has an invalid length. [ 2538.432839][ T7010] netlink: 'syz.4.8695': attribute type 21 has an invalid length. [ 2538.879419][ T6896] hsr_slave_0: entered promiscuous mode [ 2538.928784][ T6896] hsr_slave_1: entered promiscuous mode [ 2538.935246][ T6896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2538.958182][ T6896] Cannot create hsr debugfs directory [ 2539.265255][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2539.276038][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2539.289390][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2539.300969][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2539.500301][ T7031] Attempt to restore checkpoint with obsolete wellknown handles [ 2539.598398][ T8515] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2539.738886][ T6896] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2539.758656][ T8515] usb 6-1: Using ep0 maxpacket: 16 [ 2539.774562][ T8515] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2539.790166][ T6896] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2539.797783][ T8515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2539.816812][ T6896] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2539.838625][ T8515] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2539.852291][ T8515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2539.861202][ T8515] usb 6-1: Product: syz [ 2539.865397][ T8515] usb 6-1: Manufacturer: syz [ 2539.879907][ T6896] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2539.886776][ T8515] usb 6-1: SerialNumber: syz [ 2539.902108][ T8515] usb 6-1: config 0 descriptor?? [ 2539.949034][ T8515] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2539.985953][ T8515] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2540.383474][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2540.449644][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 2540.490268][ T1825] bridge0: port 1(bridge_slave_0) entered blocking state [ 2540.497464][ T1825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2540.554718][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 2540.561927][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2540.572405][ T8515] em28xx 6-1:0.0: chip ID is em28174 [ 2540.656007][ T7052] loop2: detected capacity change from 0 to 7 [ 2540.748752][ T7052] loop2: [ 2540.774685][ T7052] loop2: partition table partially beyond EOD, truncated [ 2540.870143][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2541.176255][ T6896] veth0_vlan: entered promiscuous mode [ 2541.250949][ T6896] veth1_vlan: entered promiscuous mode [ 2541.360769][ T6896] veth0_macvtap: entered promiscuous mode [ 2541.461705][ T6896] veth1_macvtap: entered promiscuous mode [ 2541.529775][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2541.600799][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2541.652834][ T6896] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2541.682428][ T6896] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2541.705075][ T6896] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2541.722272][T19514] usb 6-1: USB disconnect, device number 70 [ 2541.730155][ T6896] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2541.745981][T19514] em28xx 6-1:0.0: Disconnecting em28xx [ 2541.765854][T19514] em28xx 6-1:0.0: Freeing device [ 2542.189374][ T1825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2542.217030][ T1825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2542.345759][ T1825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2542.375934][ T1825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2542.932887][ T7070] loop2: detected capacity change from 0 to 7 [ 2542.971267][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2542.971289][ T30] audit: type=1326 audit(1747451574.740:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2543.002526][ T7070] Dev loop2: unable to read RDB block 7 [ 2543.014135][ T7070] loop2: unable to read partition table [ 2543.042152][ T7070] loop2: partition table beyond EOD, truncated [ 2543.076220][ T7070] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2543.147489][ T30] audit: type=1326 audit(1747451574.780:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2543.311924][ T30] audit: type=1326 audit(1747451574.820:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2543.368189][ T30] audit: type=1326 audit(1747451574.820:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2543.461742][ T30] audit: type=1326 audit(1747451574.820:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2543.655084][ T30] audit: type=1326 audit(1747451574.830:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2543.772361][ T30] audit: type=1326 audit(1747451574.840:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2543.919233][ T30] audit: type=1326 audit(1747451574.840:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2544.032677][ T30] audit: type=1326 audit(1747451574.840:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2544.098516][ T8510] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2544.107222][ T30] audit: type=1326 audit(1747451575.310:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.6.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974a18e969 code=0x7ffc0000 [ 2544.174751][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8710'. [ 2544.238581][T20543] Bluetooth: hci2: unexpected event for opcode 0x040e [ 2544.362497][ T8510] usb 6-1: Using ep0 maxpacket: 32 [ 2544.382878][ T8510] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2544.408210][ T8510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.434487][ T8510] usb 6-1: config 0 descriptor?? [ 2544.443916][ T8510] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2544.854778][ T7105] loop2: detected capacity change from 0 to 7 [ 2544.884833][ T7105] loop2: [ 2544.887889][ T7105] loop2: partition table partially beyond EOD, truncated [ 2545.878254][T29180] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2546.068187][T29180] usb 3-1: Using ep0 maxpacket: 8 [ 2546.075521][T29180] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 2546.094055][T29180] usb 3-1: config 0 has no interface number 0 [ 2546.115206][T29180] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 2546.138400][T29180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2546.163096][T29180] usb 3-1: Product: syz [ 2546.183321][T29180] usb 3-1: Manufacturer: syz [ 2546.189531][T29180] usb 3-1: SerialNumber: syz [ 2546.223118][T29180] usb 3-1: config 0 descriptor?? [ 2546.487035][ T7128] bond0: entered promiscuous mode [ 2546.494090][ T1825] bond0: (slave bond_slave_0): interface is now down [ 2546.506348][T20543] Bluetooth: hci3: command 0x0406 tx timeout [ 2546.521856][ T7128] bond_slave_0: entered promiscuous mode [ 2546.527700][ T1825] bond0: (slave bond_slave_1): interface is now down [ 2546.537032][ T7128] bond_slave_1: entered promiscuous mode [ 2546.546030][ T7128] bond0: entered allmulticast mode [ 2546.560921][ T7128] bond_slave_0: entered allmulticast mode [ 2546.566960][ T7128] bond_slave_1: entered allmulticast mode [ 2546.581498][ T1825] bond0: (slave bond_slave_0): interface is now down [ 2546.588727][ T1825] bond0: (slave bond_slave_1): interface is now down [ 2546.602890][ T1825] bond0: now running without any active interface! [ 2546.855818][T29180] usbserial_generic 3-1:0.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2546.908284][T29180] usbserial_generic 3-1:0.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2546.929537][ T7141] program syz.4.8726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2546.983567][T29180] usbserial_generic 3-1:0.175: device has no bulk endpoints [ 2547.032211][T29180] safe_serial 3-1:0.175: safe_serial converter detected [ 2547.097420][T29180] safe_serial 3-1:0.175: probe with driver safe_serial failed with error -22 [ 2547.224986][T29180] usb 3-1: USB disconnect, device number 79 [ 2547.348415][T12638] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2547.368805][ T8510] gspca_vc032x: reg_r err -71 [ 2547.373550][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.397403][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.414291][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.492253][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.499746][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.527202][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.548878][T12638] usb 5-1: Using ep0 maxpacket: 32 [ 2547.564691][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.575594][T12638] usb 5-1: config index 0 descriptor too short (expected 30280, got 27) [ 2547.590743][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.596325][T12638] usb 5-1: config 49 has too many interfaces: 35, using maximum allowed: 32 [ 2547.617594][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.628366][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.633820][T12638] usb 5-1: config 49 has an invalid descriptor of length 0, skipping remainder of the config [ 2547.644516][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.650206][T12638] usb 5-1: config 49 has 0 interfaces, different from the descriptor's value: 35 [ 2547.659800][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.665186][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.671419][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.681999][T12638] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 2547.705202][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.716019][T12638] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 2547.724743][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8730'. [ 2547.737651][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.749510][T12638] usb 5-1: Product: syz [ 2547.749535][T12638] usb 5-1: Manufacturer: syz [ 2547.750366][ T8510] gspca_vc032x: I2c Bus Busy Wait 00 [ 2547.750389][ T8510] gspca_vc032x: Unknown sensor... [ 2547.750473][ T8510] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 2547.764418][ T8510] usb 6-1: USB disconnect, device number 71 [ 2547.790700][T29180] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2548.011690][T29180] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2548.011733][T29180] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2548.011771][T29180] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 2548.011796][T29180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.029680][T29180] usb 3-1: config 0 descriptor?? [ 2548.714482][ T7180] netlink: 'syz.5.8732': attribute type 2 has an invalid length. [ 2548.866705][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8731'. [ 2549.261566][T29180] usbhid 3-1:0.0: can't add hid device: -71 [ 2549.306325][T29180] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2549.489355][T29180] usb 3-1: USB disconnect, device number 80 [ 2549.564352][ T7188] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 2550.398579][T12638] usb 5-1: USB disconnect, device number 78 [ 2550.538295][T29180] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2550.599606][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2550.644277][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2550.699962][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2550.723377][T29180] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2550.758953][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2550.773538][T29180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.787121][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8738'. [ 2550.823027][T29180] usb 3-1: config 0 descriptor?? [ 2550.873743][T29180] cp210x 3-1:0.0: cp210x converter detected [ 2551.319415][T29180] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2551.619969][T29180] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2551.645086][T29180] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 2551.712765][T29180] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2551.787806][T29180] usb 3-1: USB disconnect, device number 81 [ 2551.843289][T29180] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2551.904537][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8742'. [ 2551.926694][T29180] cp210x 3-1:0.0: device disconnected [ 2552.149033][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2552.177190][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2552.268222][T12841] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2552.428309][T12841] usb 7-1: Using ep0 maxpacket: 32 [ 2552.478645][T12841] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 2552.547620][T12841] usb 7-1: config 0 has no interface number 0 [ 2552.562110][T12841] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2552.593554][T12841] usb 7-1: config 0 interface 85 has no altsetting 0 [ 2552.615123][T12841] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2552.637977][T12841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.694019][T12841] usb 7-1: Product: syz [ 2552.715384][T12841] usb 7-1: Manufacturer: syz [ 2552.763099][T12841] usb 7-1: SerialNumber: syz [ 2552.802303][T12841] usb 7-1: config 0 descriptor?? [ 2553.775328][T12841] appletouch 7-1:0.85: Geyser mode initialized. [ 2553.818187][T12841] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input181 [ 2554.140488][T19715] usb 7-1: USB disconnect, device number 2 [ 2554.146370][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 2554.303965][ T7273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2554.394196][T19715] appletouch 7-1:0.85: input: appletouch disconnected [ 2554.598213][T29815] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2554.778432][T29815] usb 6-1: Using ep0 maxpacket: 16 [ 2554.846001][T29815] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2554.911700][T29815] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2554.975837][T29815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.074969][T29815] usb 6-1: config 0 descriptor?? [ 2555.353320][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2555.504020][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2556.260108][T19514] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 2556.544658][T19514] usb 3-1: not running at top speed; connect to a high speed hub [ 2556.638421][T19514] usb 3-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 2556.680773][T19514] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2556.824929][T19514] usb 3-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 2556.875067][T19514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2556.916288][T19514] usb 3-1: Product: syz [ 2556.946523][T19514] usb 3-1: Manufacturer: syz [ 2556.972759][T19514] usb 3-1: SerialNumber: syz [ 2557.360729][T29815] usbhid 6-1:0.0: can't add hid device: -71 [ 2557.375932][T29815] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2557.477071][T29815] usb 6-1: USB disconnect, device number 72 [ 2557.863958][ T7331] loop2: detected capacity change from 0 to 7 [ 2557.882968][ T7328] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8759'. [ 2557.886781][ T7331] loop2: [ 2557.912127][ T7331] loop2: partition table partially beyond EOD, truncated [ 2558.218490][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8758'. [ 2558.503713][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.590466][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2559.666432][T19514] usb 3-1: USB disconnect, device number 82 [ 2560.238747][T19514] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2560.588988][T19514] usb 6-1: Using ep0 maxpacket: 8 [ 2560.662267][T19514] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 169, using maximum allowed: 30 [ 2560.702374][T19514] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 169 [ 2560.792478][T19514] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2560.827465][T19514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.874963][T19514] usb 6-1: Product: syz [ 2560.915442][T19514] usb 6-1: Manufacturer: syz [ 2560.948383][T19514] usb 6-1: SerialNumber: syz [ 2560.978985][T19514] usb 6-1: config 0 descriptor?? [ 2561.018664][T29180] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2561.208292][T29180] usb 7-1: Using ep0 maxpacket: 32 [ 2561.257705][T29180] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2561.336101][T29180] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 2561.375107][T29180] usb 7-1: config 7 has no interface number 0 [ 2561.404403][T29180] usb 7-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2561.450547][T29180] usb 7-1: config 7 interface 187 has no altsetting 0 [ 2561.480788][T29180] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2561.516129][T19514] usb 6-1: USB disconnect, device number 73 [ 2561.520867][T29180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.577008][T29180] usb 7-1: Product: syz [ 2561.602621][T29180] usb 7-1: Manufacturer: syz [ 2561.615222][T29180] usb 7-1: SerialNumber: syz [ 2561.861750][T29180] usb 7-1: Limiting number of CPorts to U8_MAX [ 2561.881805][T29180] usb 7-1: Unknown endpoint type found, address 0x07 [ 2561.906438][T29180] usb 7-1: Unknown endpoint type found, address 0x03 [ 2561.968389][T29180] usb 7-1: Not enough endpoints found in device, aborting! [ 2562.067574][T29180] usb 7-1: USB disconnect, device number 3 [ 2562.285739][ T7401] openvswitch: netlink: IP tunnel dst address not specified [ 2562.911935][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8774'. [ 2563.218453][T12638] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2563.234041][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2563.294304][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2563.326600][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2563.375511][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2563.465248][T12638] usb 7-1: Using ep0 maxpacket: 16 [ 2563.496948][T12638] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2563.520625][T12638] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2563.588989][T12638] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 2563.665049][T12638] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2563.701047][T12638] usb 7-1: Product: syz [ 2563.712174][T12638] usb 7-1: Manufacturer: syz [ 2563.768320][T12638] usb 7-1: SerialNumber: syz [ 2563.874235][T12638] usb 7-1: config 0 descriptor?? [ 2563.906343][ T7413] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2563.947501][ T7413] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2564.088580][ T7426] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2564.315758][T12638] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2564.497824][T12638] asix 7-1:0.0: probe with driver asix failed with error -71 [ 2564.605756][T12638] usb 7-1: USB disconnect, device number 4 [ 2564.902021][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8779'. [ 2565.048578][T19715] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2565.240746][T19715] usb 5-1: Using ep0 maxpacket: 16 [ 2565.285096][T19715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.324946][T19715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2565.358016][T19715] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2565.402089][T19715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.418739][T19715] usb 5-1: Product: syz [ 2565.427356][T19715] usb 5-1: Manufacturer: syz [ 2565.442902][T19715] usb 5-1: SerialNumber: syz [ 2567.762894][T19715] usb 5-1: 0:2 : does not exist [ 2567.777073][T19715] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2567.799379][T19715] usb 5-1: USB disconnect, device number 79 [ 2567.833169][T21857] udevd[21857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2590.513262][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.520392][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.942824][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.952946][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2654.018302][T20543] Bluetooth: hci1: command 0x0406 tx timeout [ 2713.383382][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.390526][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2725.538440][ T31] INFO: task kworker/1:12:8518 blocked for more than 143 seconds. [ 2725.546339][ T31] Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 [ 2725.554251][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2725.563179][ T31] task:kworker/1:12 state:D stack:20392 pid:8518 tgid:8518 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2725.576036][ T31] Workqueue: usb_hub_wq hub_event [ 2725.581246][ T31] Call Trace: [ 2725.584570][ T31] [ 2725.587544][ T31] __schedule+0x16e2/0x4cd0 [ 2725.592231][ T31] ? __lock_acquire+0xaac/0xd20 [ 2725.597159][ T31] ? schedule+0x165/0x360 [ 2725.601753][ T31] ? __pfx___schedule+0x10/0x10 [ 2725.606683][ T31] ? schedule+0x91/0x360 [ 2725.611055][ T31] schedule+0x165/0x360 [ 2725.615273][ T31] usb_kill_urb+0x1be/0x2d0 [ 2725.620138][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2725.625226][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2725.631592][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2725.636689][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2725.646524][ T31] ? __kmalloc_noprof+0x29b/0x4f0 [ 2725.651760][ T31] usb_control_msg+0x232/0x3e0 [ 2725.656600][ T31] hub_port_init+0xbf9/0x2800 [ 2725.661671][ T31] hub_event+0x2518/0x4a00 [ 2725.666228][ T31] ? __pfx_hub_event+0x10/0x10 [ 2725.671208][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 2725.677857][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2725.683399][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 2725.689243][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 2725.695020][ T31] process_scheduled_works+0xade/0x17a0 [ 2725.703511][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2725.709960][ T31] worker_thread+0x8a0/0xda0 [ 2725.714621][ T31] kthread+0x711/0x8a0 [ 2725.718844][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2725.724136][ T31] ? __pfx_kthread+0x10/0x10 [ 2725.729961][ T31] ? __pfx_kthread+0x10/0x10 [ 2725.734648][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2725.740666][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2725.745934][ T31] ? __pfx_kthread+0x10/0x10 [ 2725.750898][ T31] ret_from_fork+0x4b/0x80 [ 2725.755382][ T31] ? __pfx_kthread+0x10/0x10 [ 2725.760307][ T31] ret_from_fork_asm+0x1a/0x30 [ 2725.765155][ T31] [ 2725.770770][ T31] [ 2725.770770][ T31] Showing all locks held in the system: [ 2725.779900][ T31] 1 lock held by khungtaskd/31: [ 2725.784839][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2725.794875][ T31] 2 locks held by getty/5595: [ 2725.799740][ T31] #0: ffff88803440a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2725.809782][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2725.820078][ T31] 5 locks held by kworker/1:12/8518: [ 2725.825391][ T31] #0: ffff88801facd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 2725.836973][ T31] #1: ffffc9000380fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 2725.849152][ T31] #2: ffff888145f58198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 2725.858273][ T31] #3: ffff888145f5b510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 2725.868352][ T31] #4: ffff888145bfd368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 2725.878254][ T31] 7 locks held by kworker/u8:15/1826: [ 2725.884278][ T31] [ 2725.886681][ T31] ============================================= [ 2725.886681][ T31] [ 2725.895203][ T31] NMI backtrace for cpu 1 [ 2725.895221][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2725.895245][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2725.895257][ T31] Call Trace: [ 2725.895265][ T31] [ 2725.895274][ T31] dump_stack_lvl+0x189/0x250 [ 2725.895308][ T31] ? __wake_up_klogd+0xd9/0x110 [ 2725.895336][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2725.895366][ T31] ? __pfx__printk+0x10/0x10 [ 2725.895400][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2725.895425][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2725.895445][ T31] ? _printk+0xcf/0x120 [ 2725.895472][ T31] ? __pfx__printk+0x10/0x10 [ 2725.895496][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2725.895523][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2725.895551][ T31] watchdog+0xfee/0x1030 [ 2725.895582][ T31] ? watchdog+0x1de/0x1030 [ 2725.895619][ T31] kthread+0x711/0x8a0 [ 2725.895651][ T31] ? __pfx_watchdog+0x10/0x10 [ 2725.895679][ T31] ? __pfx_kthread+0x10/0x10 [ 2725.895708][ T31] ? __pfx_kthread+0x10/0x10 [ 2725.895734][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2725.895761][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2725.895789][ T31] ? __pfx_kthread+0x10/0x10 [ 2725.895815][ T31] ret_from_fork+0x4b/0x80 [ 2725.895838][ T31] ? __pfx_kthread+0x10/0x10 [ 2725.895865][ T31] ret_from_fork_asm+0x1a/0x30 [ 2725.895902][ T31] [ 2725.895911][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2726.045203][ C0] NMI backtrace for cpu 0 [ 2726.045222][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2726.045245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2726.045258][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2726.045286][ C0] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 af 11 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2726.045309][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2726.045326][ C0] RAX: 8ce85b0775a5f900 RBX: ffffffff81977128 RCX: 8ce85b0775a5f900 [ 2726.045341][ C0] RDX: 0000000000000001 RSI: ffffffff8d74c6ea RDI: ffffffff8bc1d9a0 [ 2726.045354][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 2726.045368][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7efc70 [ 2726.045381][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 2726.045394][ C0] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 2726.045414][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2726.045427][ C0] CR2: 0000560a38a12660 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2726.045443][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2726.045454][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2726.045466][ C0] Call Trace: [ 2726.045474][ C0] [ 2726.045483][ C0] default_idle+0x13/0x20 [ 2726.045509][ C0] default_idle_call+0x74/0xb0 [ 2726.045536][ C0] do_idle+0x1e8/0x510 [ 2726.045558][ C0] ? __pfx_do_idle+0x10/0x10 [ 2726.045584][ C0] cpu_startup_entry+0x44/0x60 [ 2726.045601][ C0] rest_init+0x2de/0x300 [ 2726.045616][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2726.045637][ C0] start_kernel+0x470/0x4f0 [ 2726.045664][ C0] x86_64_start_reservations+0x2a/0x30 [ 2726.045683][ C0] x86_64_start_kernel+0x66/0x70 [ 2726.045700][ C0] common_startup_64+0x13e/0x147 [ 2726.045735][ C0] [ 2726.046245][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2726.252573][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 2726.264399][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2726.274469][ T31] Call Trace: [ 2726.277760][ T31] [ 2726.280709][ T31] dump_stack_lvl+0x99/0x250 [ 2726.285364][ T31] ? __asan_memcpy+0x40/0x70 [ 2726.290071][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2726.295298][ T31] ? __pfx__printk+0x10/0x10 [ 2726.299932][ T31] panic+0x2db/0x790 [ 2726.303858][ T31] ? __pfx_panic+0x10/0x10 [ 2726.308325][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 2726.314181][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2726.319574][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2726.325861][ T31] watchdog+0x102d/0x1030 [ 2726.330215][ T31] ? watchdog+0x1de/0x1030 [ 2726.334676][ T31] kthread+0x711/0x8a0 [ 2726.338767][ T31] ? __pfx_watchdog+0x10/0x10 [ 2726.343467][ T31] ? __pfx_kthread+0x10/0x10 [ 2726.348079][ T31] ? __pfx_kthread+0x10/0x10 [ 2726.352700][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2726.357916][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2726.363133][ T31] ? __pfx_kthread+0x10/0x10 [ 2726.367740][ T31] ret_from_fork+0x4b/0x80 [ 2726.372172][ T31] ? __pfx_kthread+0x10/0x10 [ 2726.376781][ T31] ret_from_fork_asm+0x1a/0x30 [ 2726.381571][ T31] [ 2726.384876][ T31] Kernel Offset: disabled [ 2726.389207][ T31] Rebooting in 86400 seconds..