last executing test programs: 1m37.387480658s ago: executing program 0 (id=2541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="0100"], 0x3c}}, 0x0) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r4, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1m36.895310945s ago: executing program 0 (id=2544): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup2(r2, r3) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 1m33.826212243s ago: executing program 0 (id=2550): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r0, 0x12) openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 1m33.418268688s ago: executing program 0 (id=2553): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, 0x0, r0, 0x0, 0x46) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x202}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m32.999299528s ago: executing program 0 (id=2557): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x1, 0x10, 0x6, 0x80000001, {{0x17, 0x4, 0x0, 0x12, 0x5c, 0x68, 0x0, 0x4, 0x2f, 0x0, @empty, @empty, {[@end, @rr={0x7, 0x3f, 0x1e, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x33}, @local, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @remote, @local, @loopback, @remote, @multicast1, @broadcast, @remote]}, @lsrr={0x83, 0x7, 0x31, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xe}, {0x7, 0x10}, {0x6, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x401}, @TCA_CHAIN={0x8, 0xb, 0x46}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4048084) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000e00)="32ef1b0f2bcab97d8dbc26dfc5ba03c9518a45b5c10e5de1bcc9a3920f20ce9a413c48bfcd2c5d5e910aab845ac967f7a74284eb216cc5ffe9db7306518aead6d1c07f0e7af682b73efce8b2432d493a0daaaab44a67ebe9792ed65dbd05df9eecfe80d811000000", 0x68) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0x1, "0062ba7d82000000000000000000f7ffffff00"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r11, &(0x7f0000002f00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @remote, 0x10000001}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x101}}, @flowinfo={{0x14}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2c}}}], 0x48}}], 0x1, 0x4041080) dup(r6) r12 = syz_open_pts(r6, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) dup3(r12, r6, 0x80000) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xd) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1c, 0x4007, @fd=r0, 0xa, 0x0, 0x0, 0x6, 0x1, {0x6}}) io_uring_enter(r0, 0x629, 0x4c1, 0x43, 0x0, 0x0) 1m32.508918605s ago: executing program 0 (id=2559): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x1, @private2, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 1m31.852512654s ago: executing program 32 (id=2559): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x1, @private2, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 12.722319101s ago: executing program 4 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064000000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, r8, r4}}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="110000d86aee4617655a681088d8ae20000c000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000540)="aa323fcbaeddffea6957d89bbe0001000090c2c70a978537b69f3fca", &(0x7f0000000000), 0x2}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x4080) 11.550592545s ago: executing program 2 (id=2845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800540000000000000000000000000000d54e1136c515779caabcf0f0ea59bc2f8bff8be73859324db15ec60b6393a38a0de8909642efc5e691ce8f27e0395d9786295767898356936a257159e1c5b5567a531b2e1512a04ead4bb972657331c7ff6f4f57e35f32f9ec18ae1b6ef37454f62a1a0f292aee781b9aee46c031d5be7aa4c4f956479fb1b6eabe996e8bd88b051ef02a3bde0b143dd533e47c7c7b00a209911d8491eb65b52ef73959ded5ccbcc709eb21400f6b11b0bf6a85cf1cfac69d3b66f248e6800c3939533a4e43bffafb1142896a1871654cd0895b937d8d8aa33870ee24e04987c06443c1603de3942ebb61fa7f85b8ddf85d3863c55fec7af86bed9a21a7b50eae530ee36d107a42df552fc5afc075720f74b6672de0ab932f1c944dac557aad3d981d021ce5cf0209574b360d7c68ec8dbb8b98b26d6846e18988e380e20bec28e86e112957c140a9de078a72a4f49f2cfdc5c4743fad8c46da3add0b4b6b1fd3425665ad6b5ca420d86e82c2a7", @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803c00040067636d28616573290000000000000000000000000000000000000000000000001c000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000001780)={{0x2, 0x3, 0x28, 0x3, 'syz0\x00', 0xfffffffb}, 0x0, 0x7, 0x81, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r9, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r10, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="af3dce507f94", 0x6}], 0x1}, 0x4048884) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x44, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00001100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.979438251s ago: executing program 4 (id=2846): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getcwd(&(0x7f0000000200)=""/93, 0x5d) syz_usb_connect(0x5, 0x107, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRES32=r0], 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="7b65863a2975ca6173", 0x9}], 0x1}, 0x8000) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48005) getcwd(&(0x7f0000000100)=""/125, 0x7d) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/hardlockup_count', 0x2, 0x84) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x5, 0x278480) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) move_mount(r3, &(0x7f0000000180)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x1) 10.697426368s ago: executing program 3 (id=2847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) pwritev(r0, 0x0, 0x0, 0x586, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = openat$kvm(0x0, 0x0, 0x2382, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x8}], 0x38) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 10.276134753s ago: executing program 3 (id=2848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000b6ffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 10.047384651s ago: executing program 3 (id=2849): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x9, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x6, "00008000"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) fanotify_mark(r2, 0x80, 0x0, r1, &(0x7f0000000100)='./file0\x00') r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000140)={0x1, 0x200, 0x3, 0x9e, 0x4, 0x81, 0xa4, 0x7f, 0x5, 0x805, 0x0, 0x40, 0x8, 0xfffffffc}) r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r7, 0x7a98, 0x0, 0x8, 0x0, 0x0) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x20) 9.869524019s ago: executing program 2 (id=2850): socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000040)) (async) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001500), 0x42202) (async) pselect6(0x40, &(0x7f0000000800)={0xd, 0x1, 0x8, 0x9, 0x8, 0x2cc, 0x0, 0xac83}, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038007000180080001000000010d77ffffffffffff000c000280ca3fbe1a00000000240001"], 0x80}}, 0x0) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.807956208s ago: executing program 2 (id=2851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x2000006, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x88) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r3, &(0x7f0000001780)=[{{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000740)="f8e0e3bba88c0d9bb7a235184e00d0fc7081cac4e8d697e3474e9490017767e49b0f771538f26093f93e75a21ae9243cfa7dffceef847931a5d141d98df246b43d46ca9511df6693f96313acc246c017269ed51216ca9b63fdc58f2fe2b467de0cb4839f72c88d40805656b7fd751f218ff1e6826228686741d464c10348b245194cf3ac393110", 0x87}, {&(0x7f0000000900)="de78dcb91869eac1e99eb1f29a379c433aece70c4376ab8581d6471f6e8342ea9a00a2113be499ff2b2c0137d5831f2b1380cebd307ee9bf792e40286efc8ed9169d953fb9e62540da520d26b54b0590014ee3916736bbb4266e31d0a5a538fe671ec1f54565a8025c4f0ff57fbf72f792466f9dd1002875b126c1b353e972f1b3fcbe292bbcf54e0f1aec55a9a6fc8b72febde2468fee97a7b5480293608f091fd23453887394b5d096f0c4f7c094ee181315222756cab44273c16b8f84fee613ff6b9dec05cee3436a9f6718dc749258ac7a436f479e689d07cf5b3d826ee37344abb71bfefb6e67a77d1dd24911891fd209fd", 0xf4}], 0x2, 0x0, 0x0, 0x40}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000880)}, {&(0x7f0000000ac0)}], 0x2, 0x0, 0x0, 0x4}}, {{&(0x7f0000000b40)=@file={0x1, './file0/../file0/file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="c5fae4a96fa7c6ca7b9ad304bfd380823d05d2def7aff8293b6a1849c4728dbc53efb6cdebba10376ae35e3be4397f3973cdc3a8bafef0b4dba440cef0bdfd6fe8929a713b1e14af9a045190743ba8a149a9e852497ee587c221f15807380e7e5b1a20c7fefeae4e70378a85cb4ba098d1184e28c2f31568069ce4ae0c884b8860d9b2f6771a284e20a91d8040a2ff0b7f9fd0d4c9083131e30cb2a85030abedc3", 0xa1}, {&(0x7f0000000c80)="ac90ec2c", 0x4}, {&(0x7f0000000cc0)="0ca21725e5e6b29febf7ac03cf7ea9aba6ad4b40e0c9682c86dd673f85d1027475bc129cb60e7383a09addb0cc87872b3abc2e3ab266e8f7cfc0aad679d6307cfba54cf935d55cf1e9eb8c84f9dbe72519adf245d9d44321f46bc8c22014b54d0ea8f964ec55489a5771fde84621d151d079def4107423873407601739fe9f2b", 0x80}, {&(0x7f0000000d40)="b8a609479bf0fefcd8ef2c495b3af5fda269fb5d6b749a55358df8169028db3433a9f56968e290a9a1569a3404f4a2af2041a074d5e98a1e0205b2d6a2c01637b7f73dd54861f06dfa3d2887d520c58432c6d8ac6b5b4e773f1af907eac73f74bf073d8647e3c71cc0604c87c8df758507a70edceedfca", 0x77}], 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r2, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32, @ANYRES32=r7, @ANYBLOB="d2611c50"], 0x60, 0x40}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000ec0)="3c9232d8d4c5a86532e9c90d0db1b90e7495720e3dd40e2e4621acc7bf9b92b91dea03ad1455a747470dd5625e0a633adca2a2c88ad4ddcc197eaf4eb27b2599ba819c697dc81abd47c096f0ea6a65f10ccfa3b587678ebe454b3e3a1b573445b2f06606798e", 0x66}, {&(0x7f0000000f40)="e70b825cb4f850d21fd08b32fe1bc99ac91ee70699360c83b6dfa1a225de9bb1ff2002c15a2791292e570495123008190a7765a8dfd4b93141ec44cb4d974498b3489acc4535b06b270f99f3127e32e2e14287fdf5701e1a1f5bdaf13f5617ec72c4a233a43fb46f6a95a124b32a41d06d3a0b3c5220b25e038476786a681bf0010ad37dcccd054fec2244d4aaa825370f08838561fb886dcbb5094f5f60bcfc597eb87a70e0ba86f6789eb043b9d4d7", 0xb0}, {&(0x7f0000001000)="f8943c88caf4ef1aac38f26a58035c4ea293ba0cf833234d803d5e908f951ccf0f2305a98a0829d9f69d39f51858f4371e84a3dd1243654c2062966157a0aab90a7012fe146c3475404df21ff31f90b9c17094df0eeee1827bafe887877bcc1145b657591828aca6dac41f1f06013ecccbcf8c40adbe7ecfdb49777810bee2a39c09705dd70dfd289271cd879498f53afe6955a21ffa7c15d3827604307f3835315700b550a7341dc3496a8f2acc1ef81bc6358788e640a954cb1e34f9f82eee88e2dc47bb3f5c31c9bb10d507fe21d510cef904ff1d", 0xd6}], 0x3, 0x0, 0x0, 0x20040000}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001140)}, {&(0x7f0000001180)="498f8a4d257281993aea1b401708595bdfd2994d58c35b8b72d727aa70203c3bc4c3bb4c1ef540a5304cec9c060f8fc85cbfac8466cafa596973dd7dd2df668a3b3041cd00fffff35d05554078043421ae5c", 0x52}, {&(0x7f0000001200)="3e716826eadf70441b3911c8c8c84a21adb76bc37e8694867b724a4f7c39419fe75055542ab1c9119bf5d823f630955dde2a1ca8f033fcbbf1367bb791399eb550f048f06847c14927fb98f606bf38a6afcc0e01fb7c2c7ac38590", 0x5b}, {&(0x7f0000001280)="d2d3d3109132af08938600f5a3a61f26eb3c01", 0x13}, {&(0x7f00000012c0)="a8d3d52133661cde13055849b3259152d2b93e6787e3cf3267d0331afbef49b07306751343f244f9c429", 0x2a}, {&(0x7f0000001300)="cab4e5872a46eb61a28ee666ddfec880de00c3ff9cc242597553d07c716b8fad6f760958053a9cf1f998b1f6be0b11fbf7ffca274791401145ef6505942986293292c6e3aaf0217d88f93177afae8e3948c7276ec2ca9f17b41133616751d5848460eee6", 0x64}], 0x6, &(0x7f0000001600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r0, r1, r2, r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x20, 0x1, 0x1, [r5, r0, r4, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r4, r3, r6, r4]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r7, r4, r0, r3]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x150, 0x4040000}}], 0x5, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3730000000010403060000000000000000000000090c000440000000000a000200000000080200000008000440000000003ddacfffa9c194650fa600ff9f6768e5497f10ba958260e62537fca5dfee7a52c8741c779fd58e9b548b77be8e2fa27dcef7928b4650ee362949bf19e50ab32708e051ba5addd62e5b66e7ce711a517628ca2a0f1ad280b7f8dc9b05e14aa12408e6d445c939dccfc482813b4219acb7fb6976241501ea85199c6aab8512e924670774a6a785887479f4644958dbc5af2c02f47914d6b064eae60cba2e5758d19e7d8a96ccf7d523635829409d2c6897"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000010) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x28, 0x1, 0x40488060, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r10, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x4, {0x4, 0x1, 0xfffffffffffffff3, 0xcd9, 0x9, 0xfffffffe, {0x5, 0x80000808000080, 0x3, 0x40006, 0x800000000003, 0x6, 0x80000000, 0x4, 0x7, 0x0, 0x7fffffff, r9, r10, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(0x0, 0x0) 8.115122236s ago: executing program 5 (id=2854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0xd4, 0x24, 0xe20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x3, 0xc}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_RATE={0x6, 0x5, {0x3, 0x81}}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0x5, 0x3, 0x0, 0xe1d, 0x1000, 0x4b}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xa, 0x2, 0x7ff, 0x62, 0x0, 0x9252, 0xc, 0x7}}, {0x12, 0x2, [0x9, 0x5102, 0x5, 0x3, 0x5, 0x8, 0x0, 0xe, 0x9, 0xe, 0x6]}}, {{0x1c, 0x1, {0x10, 0x7, 0x2, 0x1000, 0x1, 0xcc3, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xad, 0x1, 0x4, 0x4, 0x0, 0x9, 0x78, 0x2}}, {0x8, 0x2, [0x165, 0xb45]}}]}]}, 0xd4}}, 0x4048804) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7.877918915s ago: executing program 4 (id=2855): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0xf4ff, 0x0, 0x0, 0x0) 7.743345443s ago: executing program 4 (id=2856): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ffffffff0000007ac8b6d331e9e8b30000000000"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x1e, 0x3, 0x9) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e22, @multicast1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xf727, 0x2, 0xfffffffe, 0x94}, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) syz_usb_connect$cdc_ecm(0x5, 0x5a, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000cc0)=0x7) 7.578109032s ago: executing program 3 (id=2857): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x4, 0x36f273, 0x22272d}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000100)={0x0, 0x4, 0x0, 0xb}) 7.182659688s ago: executing program 5 (id=2858): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x64, 0x4, 0x310, 0x100000c, 0x158, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x8004, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r5, @ANYBLOB="0106000000000000000009000000240004"], 0x38}}, 0x400c000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0x3) open(0x0, 0x60840, 0x0) write(r8, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r10, 0xc0585605, &(0x7f0000000540)={0x0, 0x1, @stop_pts=0x6f}) 6.447204632s ago: executing program 1 (id=2859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f0000001140)=@ax25={{0x3, @null}, [@default, @default, @default, @null, @bcast, @rose, @remote, @rose]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/92, 0x5c}], 0x3, &(0x7f00000011c0)=""/178, 0xb2}, 0x6}, {{&(0x7f0000000ac0)=@pppol2tpv3in6, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000b40)=""/173, 0xad}, {&(0x7f0000000c00)=""/157, 0x9d}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f0000000d00)=""/133, 0x85}, {&(0x7f0000000dc0)=""/86, 0x56}, {&(0x7f0000000e40)=""/216, 0xd8}], 0x7}, 0x2}], 0x2, 0x40010100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x6, 0x1, 0x9, 0x8, 0x0, 0x1203}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000a00)={0x0, 0xfff, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9a0919, 0x10001, '\x00', @p_u32=&(0x7f0000000300)=0xffff}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x96, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109028400030105a0100904000000010100000a24010400000201020924030105030202060524050408052404030109040100000102000009040101010102000009050109100002020107250100030600090402000001"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000000740)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r5, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a3b83000000000000000005000008fd00024000000002040006000900010073797a31000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x3, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7c, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x80000000, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x1, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x9, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x7, 0x4, 0xff, 0x400, 0x80, 0x0, 0xd, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xeffffffd, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x0, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x5, 0x7, 0x7fff, 0x5a80, 0x420, 0x401, 0x6, 0x7da, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x412d, 0xfffffe00, 0xc, 0x8, 0x2, 0x9, 0x43, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc46, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0xffffffff, 0x9, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0xfffffffc, 0x5, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x97, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfac, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac5, 0xbf, 0x2, 0x203, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x200, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x10001, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x1, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x9, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x738, 0x1, 0x6c1b, 0x80, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000200)={0x3, @vbi={0x6, 0x8, 0x3, 0x34363248, [0x6, 0x2], [0x4, 0x38], 0x1}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 6.308348427s ago: executing program 2 (id=2860): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0, 0x8000}], 0x1, 0x5) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89900) statx(r1, 0x0, 0x100, 0x80, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d0000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6001010000161100fc010001fe8000000000000000000000000000aa00000e2200169078020200000000000e0a790cc55a8e4b84e4b5c0"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x17) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x0, 0x3938700}) 4.794508495s ago: executing program 5 (id=2861): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000540)="13", 0x1}], 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x808, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x89, 0x49, 0xc8, 0x10, 0x1fb9, 0x302, 0x98e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f6, 0x2, 0x80, 0x2, 0x10, 0x4, [{{0x9, 0x4, 0x8a, 0x8, 0xc, 0x9d, 0x68, 0x1e, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x7, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf86, 0x8, 0x9}, @dmm={0x7, 0x24, 0x14, 0x3d7d, 0x81}]}], [{{0x9, 0x5, 0x8, 0x0, 0x420, 0x77, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xb853}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x8, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfe00}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x3, 0xd1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @generic={0x90, 0x21, "dce00717187a0f17e18189228645e1ae02c25feab74353179a4eb3de534863a25c1256f0cc70df160b33826a9969f7a192caa387ad5dd43c3d8c8b5ecfc3647a5ff674ff60d4b0176d9e538b228c1756224e25873fd768c6049ae5dc5af18dfe3fb0ef618b899f224a9af6d393138f98bcd67e72e8b8f2456f36e34f334c599498c46f56b3fbd62bc835aededa48"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0xff, 0xe8, 0x4, [@generic={0xd, 0x21, "a47f0126d0f363bb4654f6"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x68, 0x8, 0x4}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x7, 0x5, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x400}]}}, {{0x9, 0x5, 0x8, 0x4, 0x68, 0x6, 0xf8, 0xf2, [@generic={0x92, 0xd, "85ba8778364b85c792a8dbe952282afac766db6f875f16f93cb0fa1a05fbceefae40f9f55274e234e62a26272495532d7d5c697ae904fa76dde1bbbbf27dbf69d8fb17c0e1bf06d274108651688d19b720366a3926e2e5d46983677ead3599c645f99eaa817ad8d3bbcf0b03be78d34ef83bb983448d2af40f73fdc1d9215f27c3e985b19575a0a3edcda1b3d186460b"}, @generic={0xcc, 0xb, "3cbb54f4de13e56b1a90a91c1afe2c165331ee598cff2cd19834c980e0de0c3e1add1045980716336271b1bf472f13767429618c4aa0bad12e99fd752075eb5ccc1253169ca50bf558149685983525adda7d051bc18a5dffa6b218c19204489f33f5fa4b16440dbb763a37a9697f9dd0ce73b8d99f6ea378ae619b8e904ec595df742a650cd86e0ca9c9283a5a3fa36a11d6feadf9584432920b534fe61fe4c24bf15ea892bdff4ace10260c019662cfb21a6d461ac14124e438f28bc04293b7eae1aedadd8a19300d43"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x4b, 0xdc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}, @generic={0xec, 0xf, "6b088fadf3bc4dccfd88263cf8eada27c3de1e3359134834c7845d0e65ebd07401de5c0ccb68801be114995f3c4a95ecab096a36b538c7e13fe10f6e1cad686cb875b86276363d5f8a935245e29d0eeeaf96d7e8fe438f1f44db98d1fa2947a26d562e46641dd3b6e4bba580d5508cb68b322013c06c918a02e2b553975f72cc0465f33186f4451f1144ab8547932b52b941a294ed5e9533bc1e15a16012606b328271c1a4297561772492772389d31c8ce8d1c7de6bb028d6460a2660c6cb01030785e196e9b20cefd760f6fd9588244828f7d568be7afc02ee41e9a21c2e8e982a7f09bf502ffb3bf1"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x5, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0xff, 0x6, [@generic={0x28, 0x8, "f65019159082b7872cdefe6773f1147efba1ec326667bb4c2971a147809ee0d2f22052585db6"}, @generic={0x4, 0xd, 'ho'}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x46, 0x9, 0xb}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x7, 0x4, 0x8, [@generic={0xed, 0x22, "4946051f283804bd49975b5e77b03f3ee8fcdcd3dee014f561eadb62728a2f617f297afa41779cdbea9b8a2bd8d971142eabbf230d4b924172cdfc43817c8c5a89e1bb0e601be7b08cdb00c5c04c97754d19e65c30929dc0553e6b3b555ea0f45b7ea65fddd248c506c6362ee5f5f7dc713217ee4aaed7e7c45d2b7ecaca012c9459501f73db4a4e51e87606c5ea2afa14cb81498db9080fb3ed2c44bdb8031ac27ca545205e00fa863d2f2f9013414d09ce1cdba185ecf0853e3f160d4f0f4bd48f40ec50e084f3a39151f8ba790c0fc18365fc8bf45c5f7f9e807f71be069155f93830be2f80576e643f"}, @generic={0xaa, 0x300079e028bfba5f, "749e21930f5c5b2fce582f832a72d181837c0470a87cd523103b5e83b4003f8cd6256403d0d6b773defecbcdde86a206d093b79a8694cab27792eea5aa4321ecba04fd232cef72490d57303dcca39a23f0df3451f6188906f84efcc31f2048e776efca7e3189119f3c6cf743be5919778e48d3552414e3df1288c83e2f67d3c62fcf3623dd6f26cc923731ec7ad9735be523dd210fcde45ae54fc6f2c2d79552d34d22621d33f06e"}]}}]}}, {{0x9, 0x4, 0x14, 0x2, 0x8, 0x76, 0x13, 0x70, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}}], [{{0x9, 0x5, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x77, [@generic={0xbe, 0x4, "9851a7237ed319f1be7d6ec9e1e24b2a15d3c42687a6124ec041e707844d62a7977af440785a73a705884e5b86ccd116d8ce64fd65f1d4dbdaba1b4ef3a61aab2a3aeb241d08504623b51d8385c2e2bea850576f3db7e2eb7aafcba03e028f4ee934aaf9f0dfce6c03eb62ae555ec01cca409818e9b89ccd356b437c1ad6b5e52c140468674e079e27cf3c7a206dfeb31c3782a755f64b6d28e84a86ffbf428412f79faf904dc17046d2ffc70ab0f86a11a301a884327ff26e706381"}, @generic={0xcd, 0xb, "b8506033690913a90ff133d7523665b74da0c12b0f223eb26a78e47e2744828ac875f5760842f47facb8092a900518e963f755a113cf2272382a3678cdf23fb33d43856aea7c748e4f76ad45d4c24bbbeeff1da6aac78c21b70e2608e218ed87a22ceb33acc13b6d45b47cf2bad8c8fe0e9536142df179d499c5e2de66e71a388da5de24bc5eadbedf449ed425364aada78204db3a7f149c220542547cafe1ac6976e8a11bfa063a047e26172eabb16381657def001348bedd24b6efa0f4b36a9a6c34a13edde719a02a12"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0xe, 0xaf, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x45}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7f}]}}, {{0x9, 0x5, 0xe, 0x3, 0x48, 0x30, 0xff, 0x4, [@generic={0x45, 0x11, "7b4c353ef70520e97da22507f399cae0d7cb961162bc1e3b61e56325a7bd478a4f892f3209a86566f92e4fdbcd778c47c7d3f185cb0c9e84b4114af8c5ad655f2e3726"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe0, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x6, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7f}, @generic={0x17, 0x30, "901103b1d350bc17c7c43a64d4b72ba06ab856a9f6"}]}}, {{0x9, 0x5, 0x9, 0x643526d244221079, 0x3ff, 0x3, 0x16, 0xf7}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x5, 0x4d, 0x3}}, {{0x9, 0x5, 0x6, 0x8, 0x0, 0x1, 0x5, 0x29, [@generic={0x13, 0x23, "cd839bf544a6e2148cc564ba5d12af5fff"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x6, 0xd, 0xd}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x300, 0x1, 0xff, 0x0, 0xff, 0x6}, 0x36, &(0x7f0000000e40)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x40, 0xff}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x8001, 0xf00, 0x6, [0xff000f, 0x0, 0x30, 0xff0000, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x1, 0xaaa}]}, 0x5, [{0x43, &(0x7f0000000e80)=@string={0x43, 0x3, "7fd8d1777eef2c132bcb1603b133c54f0fb26591f7944305f90ab45c59de121a24208f7795c1fc864cda135b1c56bc6fed21763f4d50d973f192658ccdea6dd461"}}, {0xcb, &(0x7f0000000f00)=@string={0xcb, 0x3, "9a781a241cbf2a2491053f19e1cbbba63e24847a9f60db40f177a93245408d267d7f95e1dc710d25d3d1e7b4f723139512dbb7d18e8d8912a0028661b8225915416aaf4f5b417e2643e4dc03734bddfd33b77d6b4d95b5cacd61826e27147b67602bdb0b61514c7b9963d850356e142e004394bb5ffc7016d23ff62d9da1d206d7c03eae78167fdab93607ffe59765db50e2603da411a03841f3be8f9defc630dacb9ad36e112b58e11b9ff61c022f2411b7f9b9726d6900890abf0d414c7af11fd9dd9109a6d792d6"}}, {0xdd, &(0x7f0000001000)=@string={0xdd, 0x3, "9706d1cfd7694572b1e188a0344a80cb8ce6aaf69741092ebef797f8909f6aa0f4617c346820dc27ff795dfa14ff89013ee7fe953e353c666be69ed09325f04591f2d4d26084ab6310e3ff142aa55edb7c9b57fe7ab5b96de37636351e8c47d205f1e0db924440db8026c1fd02fb67614b6b3b655108876d1cd12e0da24169c520cb62470c710ff008af5f4c3500f212d99c8448db9110508f2753162920d6459e61326130818175c2614411f91600a6d9329e478298153e93ca37cdfeea37d715c429e054ac3b198d571739f54191e9066ff35c01becca184393a"}}, {0x38, &(0x7f0000001100)=@string={0x38, 0x3, "06fb8c77fc94f8a8d426ddb58c64274801e73166f1379865547f39c29bdd67f9b56ca61e166453de6df43d67f391f29d3d9ea7539cac"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x42d}}]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d912501"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x30, 0xc6, {0xc6, 0xed04f4fe7a7ac79, "9eb73029befc47af206f405f53e9a2d6610d7dbe96a4cfc6a7dac4817fade8faa5a7470e37e179f2471eaea975b7ca0d395540cc12be23d6621c3572494a902ee097b8333958f94d449e188a5c3b593f474204529d93376e81a3872cfcb516a5c0972c12565ac7832b348d10edd76b97035b7708588f8b1417999d790bcf17725d2f81e15666a9d3849ca30ad7c4bafd9d2eb132f74d665b04ccdc56c51f14eb9dd2435e7d45a8207c9532d36a1085a7e5686a9da33b5f1a8afafdd8a389b02289c6a5d2"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}}, &(0x7f0000000540)={0x44, &(0x7f0000000380)={0x20, 0x16, 0x100, "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"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0x20, 0x81, 0x1, "06"}, &(0x7f0000000280)={0x20, 0x82, 0x1, "16"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "b163"}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "5862b9"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "4db77e"}}) 4.664309422s ago: executing program 3 (id=2862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x4, &(0x7f00000004c0)=""/157, 0x9d}, 0x4}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000004e00)=""/55, 0x37}, {&(0x7f0000000880)=""/225, 0xe1}, {&(0x7f0000003a00)=""/254, 0xfe}, {&(0x7f0000000980)=""/15, 0xf}], 0x7}, 0x9}, {{&(0x7f0000003b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003c00)=""/39, 0x27}, {&(0x7f0000003c40)=""/189, 0xbd}], 0x2, &(0x7f0000003d40)=""/4096, 0x1000}, 0x9}], 0x3, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) r8 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="a0"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_disconnect(r2) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r7, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) 4.55061096s ago: executing program 2 (id=2863): openat$vcsu(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x5, 0x0, 0x0, 0x3}, {}, 0x94, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r4) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x5b06, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0xaa100) syz_usb_disconnect(r6) 4.371657529s ago: executing program 4 (id=2864): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xfffffffffffff000) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80000000, 0x6, &(0x7f00000003c0)=0x1) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000302001d99df280600777600000201"]}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00130200000048804222b1c1984f6d66c1c77ae4c68e2f258822787a01c1ec68685b7404359a91ba2034316d9839297e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x82, 0x2, "47d8"}, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000380)={0x0, 0x13, 0x2, 'i\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_read(r0, 0x7, 0x32, &(0x7f0000000000)=""/50) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x14, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x695}}, @alu={0x4, 0x1, 0x0, 0x9, 0x7, 0x20, 0x1}, @exit, @ringbuf_query, @map_fd={0x18, 0x9}, @ldst={0x0, 0x2, 0x2, 0x2, 0x3, 0x50, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000740)='GPL\x00', 0x2, 0x58, &(0x7f00000008c0)=""/88, 0x41100, 0x40, '\x00', 0x0, @fallback=0x37, r3, 0x8, &(0x7f0000000980)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x2, 0xfffffffa, 0x1}, 0x10, r4, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000a40)=[{0x5, 0x2, 0xc, 0x6}, {0x4, 0x1, 0xa, 0xc}, {0x1, 0x3, 0x2, 0x7}, {0x1, 0x3, 0xe, 0x7}, {0x3, 0x5, 0x30, 0x3}, {0x4, 0x4, 0x10, 0x8}, {0x1, 0x2, 0xa, 0x9}, {0x4, 0x4, 0xf, 0xa3c83f7457266301}, {0x0, 0x2, 0xa, 0x2}, {0x5, 0x5, 0x10, 0x9}], 0x10, 0x800}, 0x94) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0x84, &(0x7f0000001300)={0x0, 0x14, 0x2, "6783"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x40, 0xf, 0x2, 0xb8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x2000}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r5, 0x54, 0x0, 0x1, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000042c0)={0x2020}, 0x2020) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x105000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r9}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r10, 0x4008ae48, 0x0) 3.211460105s ago: executing program 1 (id=2865): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604f9309000000000000000000000002fe8000000000000000000000000000aa000040010000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) 2.931739599s ago: executing program 1 (id=2866): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) (async) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) 2.569675523s ago: executing program 5 (id=2867): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) eventfd2(0x5, 0x800) io_uring_enter(r1, 0x3516, 0x67f, 0x64, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x200040b4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x22c01c48}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000001, 0x15}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x10001}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x20000018) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.123326379s ago: executing program 5 (id=2868): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x8, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x48, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {0x8}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 1.016709579s ago: executing program 1 (id=2869): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/pm_debug_messages', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 399.540648ms ago: executing program 4 (id=2870): syz_emit_ethernet(0xfc0, &(0x7f0000002700)=ANY=[@ANYBLOB="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"], 0x0) 356.546884ms ago: executing program 1 (id=2871): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='sessionid\x00') readv(r1, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x0) 197.694969ms ago: executing program 3 (id=2872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff45, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xffff7cd6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x8844) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) write$vhost_msg(r4, &(0x7f00000002c0)={0x1, {&(0x7f00000000c0)=""/2, 0x2, &(0x7f0000000140)=""/47, 0x3, 0x2}}, 0x48) 191.37585ms ago: executing program 1 (id=2873): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00c8030000000000140012800900010076657468000000000400028008000a00", @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 149.602847ms ago: executing program 5 (id=2874): fanotify_init(0x200, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, 0x0, 0xa000, 0x1da) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x204f) close(r2) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000740)=""/14, 0xfef9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 0s ago: executing program 2 (id=2875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x96, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109028400030105a0100904000000010100000a24010400000201020924030105030202060524050408052404030109040100000102000009040101010102000009050109100002020107250100030600090402000001"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000000740)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r6, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028006000e0002000006000f000700000008000700ac14142808000a00", @ANYRES32=r7, @ANYBLOB], 0x54}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a3b83000000000000000005000008fd00024000000002040006000900010073797a31000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x3, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7c, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x80000000, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x9, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x7, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x5, 0x7, 0x7fff, 0x5a80, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x8, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc46, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x738, 0x1, 0x6c1b, 0x80, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000200)={0x3, @vbi={0x6, 0x8, 0x3, 0x34363248, [0x6, 0x2], [0x4, 0x38], 0x1}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0][ T6001] usb 3-1: config 0 descriptor?? [ 834.547506][ T6001] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 834.554175][ T3092] usb usb2-port1: attempt power cycle [ 834.597278][T15884] Bluetooth: hci2: command tx timeout [ 834.618514][T15889] veth0_macvtap: entered promiscuous mode [ 834.629559][T15889] veth1_macvtap: entered promiscuous mode [ 834.650573][T15889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.677278][T15889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.714723][T15889] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.730021][T15889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.739376][T15889] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.762709][T15889] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.786532][ T977] usb 3-1: USB disconnect, device number 7 [ 834.873219][ T6001] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 834.926302][ T3092] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 834.953812][ T3092] usb 2-1: device descriptor read/8, error -71 [ 834.964737][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.972605][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.017026][ T9364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.029179][ T9364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.049286][ T6001] usb 5-1: Using ep0 maxpacket: 16 [ 835.065590][ T6001] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 835.089022][ T6001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.128229][ T6001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 835.169049][ T6001] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 835.191322][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.205827][ T6001] usb 5-1: Product: syz [ 835.210197][ T6001] usb 5-1: Manufacturer: syz [ 835.218542][ T6001] usb 5-1: SerialNumber: syz [ 835.223702][ T3092] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 835.245641][ T3092] usb 2-1: device descriptor read/8, error -71 [ 835.365681][ T3092] usb usb2-port1: unable to enumerate USB device [ 835.395314][ T3513] net_ratelimit: 2 callbacks suppressed [ 835.395332][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 835.442371][T15951] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709510581) [ 835.454121][T15951] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 835.470690][T15951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.488736][T15951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.613512][ T977] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 835.663153][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 835.717256][ T6001] usb 5-1: 0:2 : does not exist [ 835.752944][ T977] usb 3-1: device descriptor read/64, error -71 [ 835.914734][T15951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.923996][T15951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.023475][ T977] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 836.084634][T15968] FAULT_INJECTION: forcing a failure. [ 836.084634][T15968] name failslab, interval 1, probability 0, space 0, times 0 [ 836.097987][T15968] CPU: 1 UID: 0 PID: 15968 Comm: syz.3.2587 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 836.098011][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 836.098023][T15968] Call Trace: [ 836.098031][T15968] [ 836.098039][T15968] dump_stack_lvl+0x189/0x250 [ 836.098067][T15968] ? __pfx____ratelimit+0x10/0x10 [ 836.098095][T15968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.098120][T15968] ? __pfx__printk+0x10/0x10 [ 836.098157][T15968] should_fail_ex+0x414/0x560 [ 836.098189][T15968] should_failslab+0xa8/0x100 [ 836.098215][T15968] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 836.098238][T15968] ? __alloc_skb+0x112/0x2d0 [ 836.098265][T15968] __alloc_skb+0x112/0x2d0 [ 836.098290][T15968] tcp_v6_send_response+0x358/0x2180 [ 836.098330][T15968] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 836.098354][T15968] ? __lock_acquire+0xab9/0xd20 [ 836.098381][T15968] ? tcp_v6_send_reset+0x303/0x15c0 [ 836.098412][T15968] ? tcp_v6_send_reset+0x303/0x15c0 [ 836.098441][T15968] ? cookie_v6_check+0x658/0x1810 [ 836.098468][T15968] tcp_v6_send_reset+0xdd7/0x15c0 [ 836.098512][T15968] ? tcp_v6_send_reset+0x303/0x15c0 [ 836.098545][T15968] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 836.098574][T15968] ? sk_filter_trim_cap+0x5b0/0xa70 [ 836.098601][T15968] ? tcp_inbound_hash+0x3cd/0x8d0 [ 836.098629][T15968] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 836.098651][T15968] ? sk_filter_trim_cap+0x199/0xa70 [ 836.098681][T15968] tcp_v6_do_rcv+0x997/0x13f0 [ 836.098701][T15968] ? tcp_v6_fill_cb+0x260/0x4c0 [ 836.098724][T15968] tcp_v6_rcv+0x20b4/0x2bf0 [ 836.098777][T15968] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 836.098794][T15968] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 836.098824][T15968] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 836.098841][T15968] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 836.098893][T15968] ip6_input_finish+0xde/0x190 [ 836.098929][T15968] NF_HOOK+0x30c/0x3a0 [ 836.098964][T15968] ? __pfx_ip6_input_finish+0x10/0x10 [ 836.098990][T15968] ? NF_HOOK+0x9a/0x3a0 [ 836.099014][T15968] ? __pfx_NF_HOOK+0x10/0x10 [ 836.099042][T15968] ? __pfx_ip6_input_finish+0x10/0x10 [ 836.099080][T15968] ip6_input+0x16a/0x270 [ 836.099106][T15968] ? ip6_input+0x23/0x270 [ 836.099135][T15968] NF_HOOK+0x30c/0x3a0 [ 836.099158][T15968] ? skb_orphan+0x4f/0xd0 [ 836.099186][T15968] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 836.099210][T15968] ? NF_HOOK+0x9a/0x3a0 [ 836.099235][T15968] ? __pfx_NF_HOOK+0x10/0x10 [ 836.099263][T15968] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 836.099298][T15968] __netif_receive_skb+0xd3/0x380 [ 836.099321][T15968] ? netif_receive_skb+0x115/0x790 [ 836.099349][T15968] netif_receive_skb+0x1cb/0x790 [ 836.099379][T15968] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 836.099419][T15968] ? __pfx_netif_receive_skb+0x10/0x10 [ 836.099456][T15968] ? tun_rx_batched+0x160/0x730 [ 836.099479][T15968] tun_rx_batched+0x1b9/0x730 [ 836.099499][T15968] ? __lock_acquire+0xab9/0xd20 [ 836.099524][T15968] ? __pfx_tun_rx_batched+0x10/0x10 [ 836.099549][T15968] ? tun_get_user+0x2549/0x3ce0 [ 836.099583][T15968] tun_get_user+0x298e/0x3ce0 [ 836.099607][T15968] ? tun_get_user+0x693/0x3ce0 [ 836.099625][T15968] ? tun_get_user+0x2549/0x3ce0 [ 836.099658][T15968] ? aa_file_perm+0x11f/0xed0 [ 836.099678][T15968] ? __pfx_tun_get_user+0x10/0x10 [ 836.099700][T15968] ? aa_file_perm+0x3e7/0xed0 [ 836.099730][T15968] ? ref_tracker_alloc+0x318/0x460 [ 836.099758][T15968] ? __lock_acquire+0xab9/0xd20 [ 836.099780][T15968] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 836.099826][T15968] ? tun_get+0x1c/0x2f0 [ 836.099850][T15968] ? tun_get+0x1c/0x2f0 [ 836.099869][T15968] ? tun_get+0x1c/0x2f0 [ 836.099892][T15968] tun_chr_write_iter+0x113/0x200 [ 836.099914][T15968] vfs_write+0x54b/0xa90 [ 836.099946][T15968] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 836.099967][T15968] ? __pfx_vfs_write+0x10/0x10 [ 836.099999][T15968] ? __fget_files+0x2a/0x420 [ 836.100032][T15968] ksys_write+0x145/0x250 [ 836.100055][T15968] ? __pfx_ksys_write+0x10/0x10 [ 836.100081][T15968] ? do_syscall_64+0xbe/0x3b0 [ 836.100104][T15968] do_syscall_64+0xfa/0x3b0 [ 836.100122][T15968] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.100150][T15968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.100168][T15968] ? clear_bhb_loop+0x60/0xb0 [ 836.100190][T15968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.100208][T15968] RIP: 0033:0x7f8b1818d3df [ 836.100224][T15968] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 836.100240][T15968] RSP: 002b:00007f8b1906e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 836.100261][T15968] RAX: ffffffffffffffda RBX: 00007f8b183b5fa0 RCX: 00007f8b1818d3df [ 836.100275][T15968] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 836.100287][T15968] RBP: 00007f8b1906e090 R08: 0000000000000000 R09: 0000000000000000 [ 836.100297][T15968] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 836.100309][T15968] R13: 0000000000000001 R14: 00007f8b183b5fa0 R15: 00007f8b184dfa28 [ 836.100337][T15968] [ 836.643584][ T977] usb 3-1: device descriptor read/64, error -71 [ 836.680964][T15884] Bluetooth: hci2: command tx timeout [ 836.688952][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'. [ 836.705887][T15974] openvswitch: netlink: Duplicate or invalid key (type 0). [ 836.726614][T15974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.739482][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2588'. [ 836.763763][ T977] usb usb3-port1: attempt power cycle [ 836.963796][T15980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2589'. [ 837.051108][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'. [ 837.083014][T15511] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 837.123647][ T977] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 837.167278][ T977] usb 3-1: device descriptor read/8, error -71 [ 837.243759][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 837.270091][T15511] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 837.282427][T15511] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 837.295507][T15511] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 837.310537][T15511] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 837.319946][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 837.329953][T15511] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.342574][T15511] usb 6-1: config 0 descriptor?? [ 837.423099][ T977] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 837.443693][ T977] usb 3-1: device descriptor read/8, error -71 [ 837.563822][ T977] usb usb3-port1: unable to enumerate USB device [ 837.663066][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 837.699262][ T6001] usb 5-1: USB disconnect, device number 50 [ 837.732393][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.762558][T15511] a4tech 0003:09DA:001A.0054: unknown main item tag 0x0 [ 837.774674][T15511] a4tech 0003:09DA:001A.0054: unknown main item tag 0x0 [ 837.781675][T15511] a4tech 0003:09DA:001A.0054: unknown main item tag 0x0 [ 837.789562][T15511] a4tech 0003:09DA:001A.0054: unknown main item tag 0x0 [ 837.796906][T15511] a4tech 0003:09DA:001A.0054: unknown main item tag 0x0 [ 837.804209][T15511] a4tech 0003:09DA:001A.0054: unknown main item tag 0x0 [ 837.811216][T15511] a4tech 0003:09DA:001A.0054: unknown main item tag 0x0 [ 837.821577][T15511] a4tech 0003:09DA:001A.0054: hidraw0: USB HID v80.04 Device [HID 09da:001a] on usb-dummy_hcd.5-1/input0 [ 837.955101][ T3092] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 838.116503][ T3092] usb 2-1: config 0 has no interfaces? [ 838.148285][ T3092] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 838.174629][ T3092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.184884][ T3092] usb 2-1: Product: syz [ 838.189116][ T3092] usb 2-1: Manufacturer: syz [ 838.200301][ T3092] usb 2-1: SerialNumber: syz [ 838.228394][ T3092] usb 2-1: config 0 descriptor?? [ 838.366299][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 838.444295][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 838.549970][T15995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2590'. [ 838.672981][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 838.752932][T15884] Bluetooth: hci2: command tx timeout [ 838.787288][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 838.820308][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.836332][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 838.884229][ T24] usb 4-1: config 1 has no interface number 1 [ 838.890971][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 838.990226][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 839.011058][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.021162][ T24] usb 4-1: Product: syz [ 839.060432][ T24] usb 4-1: Manufacturer: syz [ 839.262834][ T24] usb 4-1: SerialNumber: syz [ 839.578292][T16003] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 839.601968][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 839.832460][T16003] 8021q: adding VLAN 0 to HW filter on device bond9 [ 839.867053][ T43] usb 6-1: USB disconnect, device number 2 [ 840.033483][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 840.159090][T16025] veth3: entered promiscuous mode [ 840.236531][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 840.246014][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.317482][ T10] usb 3-1: Product: syz [ 840.323834][T16025] veth3: entered allmulticast mode [ 840.330460][ T10] usb 3-1: Manufacturer: syz [ 840.346913][ T10] usb 3-1: SerialNumber: syz [ 840.359070][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 840.377647][ T10] usb 3-1: config 0 descriptor?? [ 840.513112][ C1] net_ratelimit: 1 callbacks suppressed [ 840.513131][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 840.588000][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 840.806220][T16033] input: syz0 as /devices/virtual/input/input74 [ 840.824632][T16033] SET target dimension over the limit! [ 840.854586][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 840.893913][ T6001] usb 2-1: USB disconnect, device number 31 [ 841.091131][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 841.169771][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 841.253407][T16042] loop2: detected capacity change from 0 to 7 [ 841.261653][T16042] Dev loop2: unable to read RDB block 7 [ 841.271589][T16042] loop2: unable to read partition table [ 841.673686][T16042] loop2: partition table beyond EOD, truncated [ 841.677974][ T24] usb 4-1: USB disconnect, device number 38 [ 841.713186][T16042] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 841.756337][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.058034][T16050] usb usb8: usbfs: process 16050 (syz.1.2606) did not claim interface 0 before use [ 842.703192][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 842.729407][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 842.800290][T16062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2610'. [ 843.064110][ T24] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 843.073383][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 843.175158][ T6001] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 843.227000][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 843.244456][ T10] usb 3-1: USB disconnect, device number 12 [ 843.255696][ T24] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d5.70 [ 843.268530][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.278527][ T24] usb 4-1: Product: syz [ 843.288392][ T24] usb 4-1: Manufacturer: syz [ 843.309420][ T24] usb 4-1: SerialNumber: syz [ 843.321737][ T24] kl5kusb105 4-1:110.0: KL5KUSB105D / PalmConnect converter detected [ 843.334130][ T6001] usb 2-1: Using ep0 maxpacket: 16 [ 843.340094][ T24] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 843.341322][ T6001] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 843.361171][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.372064][ T6001] usb 2-1: config 0 descriptor?? [ 843.380303][ T6001] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 843.494905][T16072] netlink: 'syz.4.2615': attribute type 3 has an invalid length. [ 843.504691][T16072] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 843.523374][T15511] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 843.590805][T16074] loop2: detected capacity change from 0 to 7 [ 843.606795][T16074] Dev loop2: unable to read RDB block 7 [ 843.612475][T16074] loop2: unable to read partition table [ 843.619925][T16074] loop2: partition table beyond EOD, truncated [ 843.630780][T16074] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 843.713075][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 843.720925][T15511] usb 6-1: Using ep0 maxpacket: 16 [ 843.730233][T15511] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 843.757680][T15511] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 843.784648][T15511] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 843.794169][T15511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.802276][T15511] usb 6-1: Product: syz [ 843.813729][T15511] usb 6-1: Manufacturer: syz [ 843.828718][T15511] usb 6-1: SerialNumber: syz [ 843.858163][T15511] usb 6-1: config 0 descriptor?? [ 843.870473][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 843.881710][T15511] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 843.891551][T15511] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 844.152971][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 844.330793][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 844.340325][ T24] usb 3-1: config 0 has no interface number 0 [ 844.353366][ T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 844.362967][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.370981][ T24] usb 3-1: Product: syz [ 844.375366][ T24] usb 3-1: Manufacturer: syz [ 844.380023][ T24] usb 3-1: SerialNumber: syz [ 844.388176][ T24] usb 3-1: config 0 descriptor?? [ 844.489449][T15511] em28xx 6-1:0.0: chip ID is em2870 [ 844.563605][ T43] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 844.600172][ T24] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 844.611973][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 844.624733][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 844.632970][ T24] usb 3-1: media controller created [ 844.662574][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 844.702898][ T43] usb 5-1: device descriptor read/64, error -71 [ 844.753002][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 844.778473][T15511] usb 6-1: USB disconnect, device number 3 [ 844.792287][T15511] em28xx 6-1:0.0: Disconnecting em28xx [ 844.800957][T15511] em28xx 6-1:0.0: Freeing device [ 844.824666][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.847777][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.860068][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.870014][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.886452][ T24] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 844.935461][ T24] usb 3-1: USB disconnect, device number 13 [ 844.983149][ T43] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 844.996012][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 845.124921][ T43] usb 5-1: device descriptor read/64, error -71 [ 845.245189][ T43] usb usb5-port1: attempt power cycle [ 845.583199][ T43] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 845.592575][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 845.624375][ T43] usb 5-1: device descriptor read/8, error -71 [ 845.676524][T15511] usb 4-1: USB disconnect, device number 39 [ 845.719467][T15511] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 845.737505][T15511] kl5kusb105 4-1:110.0: device disconnected [ 845.752881][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 845.762774][ T24] usb 6-1: config 0 has an invalid interface number: 248 but max is 0 [ 845.778427][ T24] usb 6-1: config 0 has no interface number 0 [ 845.802740][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=83.0d [ 845.818633][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.826918][ T24] usb 6-1: Product: syz [ 845.831182][ T24] usb 6-1: Manufacturer: syz [ 845.850386][ T24] usb 6-1: SerialNumber: syz [ 845.869839][ T24] usb 6-1: config 0 descriptor?? [ 845.875235][ T43] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 845.900489][ T24] ttusb_dec_send_command: command bulk message failed: error -22 [ 845.943342][ T43] usb 5-1: device descriptor read/8, error -71 [ 845.950529][ T24] ttusb-dec 6-1:0.248: probe with driver ttusb-dec failed with error -22 [ 846.074025][ T6001] usb 2-1: Detected FT232A [ 846.074130][ T43] usb usb5-port1: unable to enumerate USB device [ 846.091345][ T6001] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 846.099994][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.100355][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.102884][ T3092] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 846.120948][T12988] 0: reclassify loop, rule prio 0, protocol 800 [ 846.143048][ T24] usb 6-1: USB disconnect, device number 4 [ 846.185919][ T6001] usb 2-1: USB disconnect, device number 32 [ 846.205237][ T6001] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 846.222456][ T6001] ftdi_sio 2-1:0.0: device disconnected [ 846.326636][ T3092] usb 3-1: device descriptor read/64, error -71 [ 846.583391][ T3092] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 846.781254][ T6001] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 846.788907][ T3092] usb 3-1: device descriptor read/64, error -71 [ 846.830790][T16124] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 846.914465][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 846.916370][ T3092] usb usb3-port1: attempt power cycle [ 846.965291][ T6001] usb 2-1: Using ep0 maxpacket: 16 [ 846.972746][ T6001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.999415][ T6001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.017508][ T6001] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 847.207938][ T6001] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 847.217163][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.234781][ T6001] usb 2-1: config 0 descriptor?? [ 847.263069][ T3092] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 847.300669][ T3092] usb 3-1: device descriptor read/8, error -71 [ 847.334610][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 847.451417][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2633'. [ 847.466233][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 847.522895][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 847.533731][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2633'. [ 847.545238][ T43] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 847.572178][ T43] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 847.593005][ T3092] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 847.626161][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 847.636149][ T3092] usb 3-1: device descriptor read/8, error -71 [ 847.650146][ T6001] microsoft 0003:045E:07DA.0055: ignoring exceeding usage max [ 847.667900][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.675873][ T6001] microsoft 0003:045E:07DA.0055: ignoring exceeding usage max [ 847.702878][ T43] usb 6-1: Product: 볆ä®í“»æ¾êª‡è°ƒç¨†îŸ—ᥖ輵ç™é‡Œâ¯¸Û崰䋎얾璡郹ìžã©ìŽ¹ç»¶ê¡ë­å£‘䗤棅ᰚ [ 847.742967][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 847.773555][ T3092] usb usb3-port1: unable to enumerate USB device [ 847.780072][ T43] usb 6-1: Manufacturer: ä£ï›¼ë’†ì›§è–¬â…Ÿâ‘€æ”é«é£â¬îŸ›â«žï¾–蛑㲢ↈ䖊韊輯浊뫢ë±ï­´ì¶„ë´³ïµä½â™è¯¹ê…»èµšâ ¹è¶¡Ùªï§±ë¥¬æ¼²î´¯é¬„┎ë„㮶ᚗ꾄ã·ë¤¬â¿¿à¸¥í¤Í±å½»ã‘ç¿¯ë«‡î‰†ç¼Ÿâ·‹è‘æ¡¤ä³¢íƒì½äšÏ¿æ»î…¼ã»ä——Û¼è¿ï­­à«ï¬²é¬³ [ 847.783493][ T6001] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0055/input/input75 [ 847.873092][ T43] usb 6-1: SerialNumber: á° [ 847.901134][T16127] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 847.913322][T16127] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 847.963743][ T6001] microsoft 0003:045E:07DA.0055: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 848.154569][ T3092] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 848.343080][ T3092] usb 5-1: Using ep0 maxpacket: 16 [ 848.348339][T15957] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 848.363642][ T3092] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 848.372542][ T3092] usb 5-1: config 4 has no interface number 0 [ 848.386812][ T3092] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 848.397248][ T3092] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 848.408741][ T3092] usb 5-1: config 4 interface 51 has no altsetting 0 [ 848.422038][ T3092] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 848.431540][ T3092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.451674][ T3092] usb 5-1: Product: syz [ 848.462536][ T3092] usb 5-1: Manufacturer: syz [ 848.472447][ T3092] usb 5-1: SerialNumber: syz [ 848.481854][T16131] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 848.496399][T16131] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 848.531899][T15957] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 848.548744][T15957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.558199][T15957] usb 4-1: Product: syz [ 848.562560][T15957] usb 4-1: Manufacturer: syz [ 848.572516][T15957] usb 4-1: SerialNumber: syz [ 848.585749][T15957] usb 4-1: config 0 descriptor?? [ 848.601321][T15957] ch341 4-1:0.0: ch341-uart converter detected [ 848.610125][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 848.753476][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 848.779178][ T3092] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -71 [ 848.837502][T12988] 0: reclassify loop, rule prio 0, protocol 800 [ 848.849315][ T3092] usb 5-1: USB disconnect, device number 55 [ 848.911354][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2636'. [ 848.930730][T16155] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 848.939454][T16155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.020732][T16136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 849.055508][T16136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2635'. [ 849.142718][ T43] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 849.160352][ T43] usb 6-1: USB disconnect, device number 5 [ 849.171671][ T43] usblp0: removed [ 849.224550][ T3092] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 849.384589][ T3092] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 849.393112][ T3092] usb 5-1: config 0 has no interface number 0 [ 849.399363][ T3092] usb 5-1: config 0 interface 58 has no altsetting 0 [ 849.407275][ T3092] usb 5-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 849.418042][ T3092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.435758][ T3092] usb 5-1: config 0 descriptor?? [ 849.471021][ T43] usb 2-1: USB disconnect, device number 33 [ 849.673058][T16153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.693406][T16153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.707505][T15957] ch341-uart ttyUSB0: break control not supported, using simulated break [ 849.729328][ T3092] usb 5-1: string descriptor 0 read error: -71 [ 849.738488][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 849.747131][T15957] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 849.768549][ T3092] usb-storage 5-1:0.58: USB Mass Storage device detected [ 849.789529][T15957] usb 4-1: USB disconnect, device number 40 [ 849.801129][ T3092] usb-storage 5-1:0.58: Quirks match for vid 04b3 pid 4001: 2000 [ 849.817537][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 849.817552][ T30] audit: type=1326 audit(1752112412.640:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4998e929 code=0x7ffc0000 [ 849.817576][T15957] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 849.875924][ T30] audit: type=1326 audit(1752112412.690:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5e4998e929 code=0x7ffc0000 [ 849.879377][T15957] ch341 4-1:0.0: device disconnected [ 849.904301][ T30] audit: type=1326 audit(1752112412.690:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4998e929 code=0x7ffc0000 [ 849.966607][ T3092] usb 5-1: USB disconnect, device number 56 [ 849.975639][ T30] audit: type=1326 audit(1752112412.690:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4998e929 code=0x7ffc0000 [ 850.015225][ T30] audit: type=1326 audit(1752112412.690:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5e4998e929 code=0x7ffc0000 [ 850.068232][ T30] audit: type=1326 audit(1752112412.690:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4998e929 code=0x7ffc0000 [ 850.092462][ T30] audit: type=1326 audit(1752112412.690:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5e4998e929 code=0x7ffc0000 [ 850.116633][ T30] audit: type=1326 audit(1752112412.690:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e4992ab19 code=0x7ffc0000 [ 850.139756][ T30] audit: type=1326 audit(1752112412.690:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4998e929 code=0x7ffc0000 [ 850.190459][ T30] audit: type=1326 audit(1752112412.690:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16161 comm="syz.5.2639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e4992ab19 code=0x7ffc0000 [ 850.688568][T16174] binder: 16173:16174 ioctl c0306201 200000000240 returned -14 [ 850.919116][T16181] veth7: entered promiscuous mode [ 851.106887][T16186] input: syz0 as /devices/virtual/input/input77 [ 851.131126][T16186] SET target dimension over the limit! [ 851.875906][T16199] netlink: 'syz.3.2647': attribute type 7 has an invalid length. [ 852.033362][ T9364] net_ratelimit: 2 callbacks suppressed [ 852.033380][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 852.154105][ T6001] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 852.199709][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 852.312920][ T6001] usb 4-1: Using ep0 maxpacket: 8 [ 852.337427][ T6001] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.399942][ T6001] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 852.415345][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 852.427632][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 852.438991][ T6001] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.463261][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 852.516989][ T6001] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 852.530443][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.558990][ T6001] usb 4-1: Product: syz [ 852.582156][ T6001] usb 4-1: Manufacturer: syz [ 852.601058][ T6001] usb 4-1: SerialNumber: syz [ 852.630177][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 852.654461][T16207] netlink: 'syz.4.2650': attribute type 4 has an invalid length. [ 852.683909][T16207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2650'. [ 852.688411][ T10] usb 6-1: config 42 has too many interfaces: 120, using maximum allowed: 32 [ 852.701724][ T10] usb 6-1: config 42 has 1 interface, different from the descriptor's value: 120 [ 852.711943][ T6001] usb 4-1: config 0 descriptor?? [ 852.774238][ T10] usb 6-1: config 42 has no interface number 0 [ 852.783065][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 852.804806][ T10] usb 6-1: config 42 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 852.842487][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=02b3, bcdDevice=f8.63 [ 852.858759][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.874413][ T10] usb 6-1: Product: syz [ 852.878649][ T10] usb 6-1: Manufacturer: syz [ 852.891991][ T10] usb 6-1: SerialNumber: syz [ 853.152960][ T977] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 853.167803][ T6001] iowarrior 4-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 853.246798][ T6001] usb 4-1: USB disconnect, device number 41 [ 853.334545][ T977] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 853.355387][ T10] usb 6-1: USB disconnect, device number 6 [ 853.364221][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.366639][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 853.408386][ T977] usb 5-1: config 0 descriptor?? [ 853.700574][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.724284][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.793012][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 853.933517][T16230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2655'. [ 854.600237][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 854.833003][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 854.947286][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 855.935450][ T977] usb 5-1: string descriptor 0 read error: -71 [ 855.958935][ T977] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 856.015365][ T977] asix 5-1:0.0: probe with driver asix failed with error -71 [ 856.049341][T16247] netlink: 'syz.5.2661': attribute type 4 has an invalid length. [ 856.063180][ T977] usb 5-1: USB disconnect, device number 57 [ 856.079128][T16247] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2661'. [ 856.114678][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 856.309438][T16262] input: syz0 as /devices/virtual/input/input78 [ 856.350516][T16262] SET target dimension over the limit! [ 856.513222][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 856.613816][ T977] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 856.734733][ T3092] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 856.852718][ T977] usb 6-1: Using ep0 maxpacket: 32 [ 856.867067][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 856.884907][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 856.942313][ T977] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 856.965013][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.995675][ T977] usb 6-1: Product: syz [ 857.010211][ T977] usb 6-1: Manufacturer: syz [ 857.025191][ T977] usb 6-1: SerialNumber: syz [ 857.050789][ T977] usb 6-1: config 0 descriptor?? [ 857.068254][ T977] ati_remote 6-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 857.136785][ T3092] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.149862][ T3092] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 857.211277][ T3092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.253210][ T3092] usb 5-1: config 0 descriptor?? [ 857.298836][ T6001] usb 6-1: USB disconnect, device number 7 [ 857.373314][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 857.758426][ T3092] lenovo 0003:17EF:6062.0056: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 857.794353][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 857.813066][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 857.879643][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 857.984225][T16266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 858.057979][ T24] usb 5-1: USB disconnect, device number 58 [ 858.129676][T16287] binder: 16286:16287 ioctl c0306201 200000000080 returned -14 [ 858.142998][ T3092] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 858.339070][ T3092] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 858.356116][ T3092] usb 3-1: config 0 has no interface number 0 [ 858.382029][T16299] syz_tun: tun_net_xmit 86 [ 858.389512][ T3092] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 858.413745][ T3092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.421775][ T3092] usb 3-1: Product: syz [ 858.433992][ T3092] usb 3-1: Manufacturer: syz [ 858.438622][ T3092] usb 3-1: SerialNumber: syz [ 858.469722][ T3092] usb 3-1: config 0 descriptor?? [ 858.473113][ T977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 858.606464][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 858.680945][ T3092] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 858.690528][ T3092] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 858.699182][ T3092] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 858.708159][ T3092] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 858.714030][ T977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.737735][ T3092] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 858.761435][ T977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.780634][ T977] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.797450][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.813579][ T977] usb 6-1: SerialNumber: syz [ 858.832981][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 858.896841][T16312] mmap: syz.4.2678 (16312): VmData 37462016 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 859.049941][ T977] usb 6-1: invalid UAC_HEADER (v1) [ 859.094393][ T6001] usb 3-1: USB disconnect, device number 18 [ 859.114607][ T6001] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 859.126774][ T977] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 859.140176][ T6001] keyspan 3-1:0.133: device disconnected [ 859.152995][ T977] usb 6-1: USB disconnect, device number 8 [ 859.184491][ T10] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 859.201290][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.362859][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 859.393081][ C0] syz_tun: tun_net_xmit 86 [ 859.438262][T16317] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 859.459672][T16317] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 859.470045][T16317] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 859.483613][T16317] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 859.492051][T16317] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 859.500372][ T10] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 859.683119][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 859.690033][ T10] usb usb5-port1: attempt power cycle [ 859.717941][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 859.743884][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 859.784395][T16330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.820477][T16329] veth3: entered promiscuous mode [ 859.873100][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 860.072897][ T10] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 860.133219][T16341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2684'. [ 860.156783][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'. [ 860.196909][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 860.335284][ T10] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 860.439968][T16341] veth1_macvtap (unregistering): left allmulticast mode [ 860.469996][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 860.476230][ T10] usb usb5-port1: unable to enumerate USB device [ 860.642467][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2688'. [ 860.878580][T16346] netlink: 'syz.5.2688': attribute type 2 has an invalid length. [ 861.007570][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 861.030651][T16354] program syz.3.2690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.121004][T16346] ave_0: entered promiscuous mode [ 861.422901][T15957] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 861.644672][T15957] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 861.653612][T15957] usb 4-1: config 0 has no interface number 0 [ 861.665624][T15957] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 861.674919][T15957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.686804][T15957] usb 4-1: Product: syz [ 861.692304][T15957] usb 4-1: Manufacturer: syz [ 861.697821][T15957] usb 4-1: SerialNumber: syz [ 861.709689][T15957] usb 4-1: config 0 descriptor?? [ 861.928484][T15957] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 861.991196][T15957] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 862.002053][T15957] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 862.004617][T16365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.017588][T15957] usb 4-1: media controller created [ 862.206056][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 862.258433][T16371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.304076][T16371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.318332][T15957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 862.573786][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 862.591947][T15957] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 862.737818][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 862.748976][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 862.766914][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 862.776111][T15511] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 862.793315][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.816406][T16370] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 862.845450][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 862.852994][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 862.946043][T15511] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 862.981250][T15511] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.029783][ T3092] usb 5-1: USB disconnect, device number 63 [ 863.044387][T15511] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 863.058002][T15511] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.194170][T15957] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 863.304820][T15511] usb 6-1: GET_CAPABILITIES returned 0 [ 863.321662][T15511] usbtmc 6-1:16.0: can't read capabilities [ 863.390218][T15957] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 863.400744][T16381] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 863.426440][T15957] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 863.449748][T15957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 863.469818][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 863.473367][T15957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 863.499229][T15957] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 863.514593][ T3092] usb 6-1: USB disconnect, device number 9 [ 863.549600][T15957] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 863.563180][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 863.576691][T15957] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 863.589437][T15957] usb 2-1: Product: syz [ 863.596803][T15957] usb 2-1: Manufacturer: syz [ 863.617052][T15957] cdc_wdm 2-1:1.0: skipping garbage [ 863.622321][T15957] cdc_wdm 2-1:1.0: skipping garbage [ 863.639281][T15957] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 863.650806][T15957] cdc_wdm 2-1:1.0: Unknown control protocol [ 863.873024][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 864.661226][T15957] usb 4-1: USB disconnect, device number 42 [ 864.843151][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 864.922991][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 864.934664][ T43] usb 2-1: USB disconnect, device number 34 [ 865.126143][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 865.183334][T15511] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 865.324185][T16404] input: syz0 as /devices/virtual/input/input79 [ 865.339082][T16405] loop4: detected capacity change from 0 to 7 [ 865.380007][T16409] SET target dimension over the limit! [ 865.463283][T15511] usb 6-1: device descriptor read/64, error -71 [ 865.517502][T16405] Dev loop4: unable to read RDB block 7 [ 865.543208][T16405] loop4: unable to read partition table [ 865.560458][T16405] loop4: partition table beyond EOD, truncated [ 865.566825][ T43] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 865.574483][T15957] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 865.623461][T16405] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 865.754922][T15957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 865.769176][T15957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 865.773086][T15511] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 865.798889][T15957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 865.829838][T15957] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 865.927670][T15511] usb 6-1: device descriptor read/64, error -71 [ 865.959853][T15957] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.012839][T15957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 866.053862][T15511] usb usb6-port1: attempt power cycle [ 866.107119][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 866.120454][T15957] usb 3-1: SerialNumber: syz [ 866.140801][T16408] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 866.151097][T16408] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 866.176648][T15957] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 866.202172][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.212491][ T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 866.224571][ T43] usb 4-1: config 1 has no interface number 1 [ 866.231085][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 866.383079][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 866.383075][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 866.383109][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.408080][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.421024][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.430962][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.447467][ T43] usb 4-1: Product: syz [ 866.451751][ T43] usb 4-1: Manufacturer: syz [ 866.460335][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.469717][ T43] usb 4-1: SerialNumber: syz [ 866.607338][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.623289][T15511] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 866.669303][T15511] usb 6-1: device descriptor read/8, error -71 [ 866.685567][T16416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.704011][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.726768][T16416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.805932][T16406] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 867.234684][T16406] 8021q: adding VLAN 0 to HW filter on device bond10 [ 867.328216][T15511] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 867.355816][T15511] usb 6-1: device descriptor read/8, error -71 [ 867.473814][T15511] usb usb6-port1: unable to enumerate USB device [ 867.519404][T15957] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 867.554967][T15957] usb 3-1: USB disconnect, device number 19 [ 867.839604][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 867.903021][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 868.922966][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 869.252502][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 869.268618][ T43] usb 4-1: USB disconnect, device number 43 [ 869.331216][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 869.568601][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.957951][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 870.012849][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.019167][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.745945][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 871.081163][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 871.433056][ T6001] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 871.529986][T16463] netlink: 'syz.4.2716': attribute type 2 has an invalid length. [ 871.633069][ T6001] usb 2-1: unable to get BOS descriptor or descriptor too short [ 871.645649][ T6001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.666133][ T6001] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 871.685593][ T6001] usb 2-1: config 1 has no interface number 1 [ 871.728151][ T6001] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 871.779099][ T6001] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 871.789079][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.798084][ T6001] usb 2-1: Product: syz [ 871.802336][ T6001] usb 2-1: Manufacturer: syz [ 871.807393][ T6001] usb 2-1: SerialNumber: syz [ 871.833953][T15511] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 872.130434][T15511] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 872.139568][T15511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.182942][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 872.184152][T15511] usb 3-1: config 0 descriptor?? [ 872.219319][T16455] netlink: 'syz.1.2714': attribute type 1 has an invalid length. [ 872.366931][T16455] 8021q: adding VLAN 0 to HW filter on device bond16 [ 872.472885][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 872.485154][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 872.531792][ T9345] 0: reclassify loop, rule prio 0, protocol 800 [ 872.541956][ T24] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 872.598840][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 872.679545][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 872.699200][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.718458][ T24] usb 4-1: Product: syz [ 872.743897][T16478] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 872.747379][ T24] usb 4-1: Manufacturer: syz [ 872.803262][ T24] usb 4-1: SerialNumber: syz [ 872.933015][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 873.003415][ T10] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 873.032801][T16472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2719'. [ 873.173023][ T10] usb 5-1: device descriptor read/64, error -71 [ 873.294619][ T24] usb 4-1: 0:2 : does not exist [ 873.394984][ T24] usb 4-1: USB disconnect, device number 44 [ 873.433096][ T10] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 873.483778][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.499709][T15511] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 873.582988][ T10] usb 5-1: device descriptor read/64, error -71 [ 873.677833][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 873.735526][ T10] usb usb5-port1: attempt power cycle [ 873.952986][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 873.970821][T16483] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2722'. [ 874.151639][ T10] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 874.184814][ T10] usb 5-1: device descriptor read/8, error -71 [ 874.287827][ T6001] usb 2-1: USB disconnect, device number 35 [ 874.350021][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.442999][ T10] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 874.484436][ T10] usb 5-1: device descriptor read/8, error -71 [ 874.603615][ T10] usb usb5-port1: unable to enumerate USB device [ 874.633364][T15511] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 874.746591][ T10] usb 3-1: USB disconnect, device number 20 [ 874.793346][T15957] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 874.803189][T15511] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.821576][T15511] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.835367][T15511] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.859519][T15511] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.906114][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 874.918999][T15511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.976396][T15957] usb 2-1: config 0 has no interfaces? [ 874.993348][T15511] usb 4-1: config 0 descriptor?? [ 875.003122][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 875.050916][T16496] fuse: Bad value for 'group_id' [ 875.057100][T16496] fuse: Bad value for 'group_id' [ 875.085189][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 875.163142][T15957] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 875.182658][T15957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.202929][T15957] usb 2-1: Product: syz [ 875.207291][T15957] usb 2-1: Manufacturer: syz [ 875.212119][T15957] usb 2-1: SerialNumber: syz [ 875.235533][T15957] usb 2-1: config 0 descriptor?? [ 875.423631][T15511] usbhid 4-1:0.0: can't add hid device: -71 [ 875.432177][T15511] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 875.444501][T15511] usb 4-1: USB disconnect, device number 45 [ 875.567002][T16491] program syz.1.2723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 875.627337][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.816875][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.022182][T16498] FAULT_INJECTION: forcing a failure. [ 876.022182][T16498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.069294][T16498] CPU: 1 UID: 0 PID: 16498 Comm: syz.4.2726 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 876.069322][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 876.069340][T16498] Call Trace: [ 876.069350][T16498] [ 876.069358][T16498] dump_stack_lvl+0x189/0x250 [ 876.069388][T16498] ? __pfx____ratelimit+0x10/0x10 [ 876.069420][T16498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.069445][T16498] ? __pfx__printk+0x10/0x10 [ 876.069473][T16498] ? __might_fault+0xb0/0x130 [ 876.069509][T16498] should_fail_ex+0x414/0x560 [ 876.069543][T16498] _copy_from_user+0x2d/0xb0 [ 876.069569][T16498] kvm_arch_vcpu_ioctl+0xb5d/0x2a40 [ 876.069602][T16498] ? __lock_acquire+0xab9/0xd20 [ 876.069628][T16498] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 876.069664][T16498] ? __lock_acquire+0xab9/0xd20 [ 876.069704][T16498] ? is_bpf_text_address+0x26/0x2b0 [ 876.069733][T16498] ? is_bpf_text_address+0x292/0x2b0 [ 876.069755][T16498] ? is_bpf_text_address+0x26/0x2b0 [ 876.069780][T16498] ? kernel_text_address+0xa5/0xe0 [ 876.069801][T16498] ? __kernel_text_address+0xd/0x40 [ 876.069818][T16498] ? unwind_get_return_address+0x4d/0x90 [ 876.069842][T16498] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 876.069870][T16498] ? arch_stack_walk+0xfc/0x150 [ 876.069909][T16498] ? stack_trace_save+0x9c/0xe0 [ 876.069950][T16498] ? stack_depot_save_flags+0x40/0x900 [ 876.069987][T16498] ? kasan_save_track+0x4f/0x80 [ 876.070006][T16498] ? kasan_save_track+0x3e/0x80 [ 876.070035][T16498] ? __lock_acquire+0xab9/0xd20 [ 876.070062][T16498] ? __mutex_trylock_common+0x153/0x260 [ 876.070099][T16498] ? __pfx___mutex_trylock_common+0x10/0x10 [ 876.070129][T16498] ? rcu_is_watching+0x15/0xb0 [ 876.070152][T16498] ? trace_contention_end+0x39/0x120 [ 876.070178][T16498] ? __mutex_lock+0x330/0xe80 [ 876.070199][T16498] ? kasan_quarantine_put+0xdd/0x220 [ 876.070224][T16498] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 876.070252][T16498] ? __pfx___mutex_lock+0x10/0x10 [ 876.070271][T16498] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 876.070301][T16498] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 876.070327][T16498] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 876.070361][T16498] kvm_vcpu_ioctl+0x74d/0xe90 [ 876.070391][T16498] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 876.070414][T16498] ? __lock_acquire+0xab9/0xd20 [ 876.070453][T16498] ? __fget_files+0x2a/0x420 [ 876.070481][T16498] ? __fget_files+0x2a/0x420 [ 876.070504][T16498] ? __fget_files+0x3a0/0x420 [ 876.070528][T16498] ? __fget_files+0x2a/0x420 [ 876.070557][T16498] ? bpf_lsm_file_ioctl+0x9/0x20 [ 876.070577][T16498] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 876.070602][T16498] __se_sys_ioctl+0xfc/0x170 [ 876.070626][T16498] do_syscall_64+0xfa/0x3b0 [ 876.070643][T16498] ? lockdep_hardirqs_on+0x9c/0x150 [ 876.070671][T16498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.070690][T16498] ? clear_bhb_loop+0x60/0xb0 [ 876.070713][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.070732][T16498] RIP: 0033:0x7fb470f8e929 [ 876.070749][T16498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.070765][T16498] RSP: 002b:00007fb471ded038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.070787][T16498] RAX: ffffffffffffffda RBX: 00007fb4711b5fa0 RCX: 00007fb470f8e929 [ 876.070801][T16498] RDX: 0000200000000080 RSI: 000000004008ae8a RDI: 0000000000000005 [ 876.070814][T16498] RBP: 00007fb471ded090 R08: 0000000000000000 R09: 0000000000000000 [ 876.070826][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.070838][T16498] R13: 0000000000000000 R14: 00007fb4711b5fa0 R15: 00007fb4712dfa28 [ 876.070867][T16498] [ 876.579080][ T9345] 0: reclassify loop, rule prio 0, protocol 800 [ 876.901578][T16502] openvswitch: netlink: IP tunnel dst address not specified [ 876.917200][ T9345] 0: reclassify loop, rule prio 0, protocol 800 [ 877.117866][T16507] netlink: 'syz.2.2728': attribute type 4 has an invalid length. [ 877.148193][T16507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2728'. [ 877.340988][T16514] netlink: 'syz.4.2730': attribute type 2 has an invalid length. [ 878.023023][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 878.148021][T15957] usb 2-1: USB disconnect, device number 36 [ 878.528210][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 879.052866][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 879.072966][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 879.226055][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 879.228082][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.228111][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 879.228134][ T10] usb 5-1: config 1 has no interface number 1 [ 879.228176][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 879.234511][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 879.234538][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.234558][ T10] usb 5-1: Product: syz [ 879.234573][ T10] usb 5-1: Manufacturer: syz [ 879.234589][ T10] usb 5-1: SerialNumber: syz [ 879.464710][T16532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2734'. [ 879.667917][T16535] veth1_macvtap: left allmulticast mode [ 879.667951][T16535] veth1_macvtap: left promiscuous mode [ 879.667992][T16535] macsec0: entered promiscuous mode [ 879.752796][ T9345] 0: reclassify loop, rule prio 0, protocol 800 [ 879.902849][T15957] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 880.113140][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 880.113622][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 880.304482][T15957] usb 4-1: Using ep0 maxpacket: 32 [ 880.313846][T15957] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 880.313873][T15957] usb 4-1: config 0 has no interface number 0 [ 880.313909][T15957] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 880.313933][T15957] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 880.319875][T15957] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 880.319901][T15957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.319922][T15957] usb 4-1: Product: syz [ 880.319937][T15957] usb 4-1: Manufacturer: syz [ 880.319952][T15957] usb 4-1: SerialNumber: syz [ 880.336977][T15957] usb 4-1: config 0 descriptor?? [ 880.693350][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 880.864144][T15957] radio-si470x 4-1:0.35: this is not a si470x device. [ 880.869858][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.896126][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 880.903357][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.903382][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 880.903424][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 880.903447][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.907858][ T24] usb 3-1: config 0 descriptor?? [ 880.951120][T15957] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 881.364941][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 881.371139][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 881.387637][ T24] usb 3-1: USB disconnect, device number 21 [ 881.743022][T16550] FAULT_INJECTION: forcing a failure. [ 881.743022][T16550] name failslab, interval 1, probability 0, space 0, times 0 [ 881.763397][ T10] usb 5-1: USB disconnect, device number 68 [ 881.775390][T16550] CPU: 0 UID: 0 PID: 16550 Comm: syz.1.2739 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 881.775414][T16550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 881.775426][T16550] Call Trace: [ 881.775434][T16550] [ 881.775442][T16550] dump_stack_lvl+0x189/0x250 [ 881.775470][T16550] ? __pfx____ratelimit+0x10/0x10 [ 881.775499][T16550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 881.775522][T16550] ? __pfx__printk+0x10/0x10 [ 881.775552][T16550] ? __pfx___might_resched+0x10/0x10 [ 881.775574][T16550] ? fs_reclaim_acquire+0x7d/0x100 [ 881.775604][T16550] should_fail_ex+0x414/0x560 [ 881.775634][T16550] ? vmemdup_user+0x26/0xd0 [ 881.775660][T16550] should_failslab+0xa8/0x100 [ 881.775686][T16550] __kvmalloc_node_noprof+0x161/0x5f0 [ 881.775711][T16550] ? vmemdup_user+0x26/0xd0 [ 881.775743][T16550] vmemdup_user+0x26/0xd0 [ 881.775770][T16550] kvm_vcpu_ioctl_set_cpuid+0x8a/0x5b0 [ 881.775802][T16550] kvm_arch_vcpu_ioctl+0x1352/0x2a40 [ 881.775834][T16550] ? __lock_acquire+0xab9/0xd20 [ 881.775857][T16550] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 881.775898][T16550] ? __lock_acquire+0xab9/0xd20 [ 881.775935][T16550] ? is_bpf_text_address+0x26/0x2b0 [ 881.775960][T16550] ? is_bpf_text_address+0x292/0x2b0 [ 881.775980][T16550] ? is_bpf_text_address+0x26/0x2b0 [ 881.776003][T16550] ? kernel_text_address+0xa5/0xe0 [ 881.776022][T16550] ? __kernel_text_address+0xd/0x40 [ 881.776038][T16550] ? unwind_get_return_address+0x4d/0x90 [ 881.776064][T16550] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 881.776091][T16550] ? arch_stack_walk+0xfc/0x150 [ 881.776125][T16550] ? stack_trace_save+0x9c/0xe0 [ 881.776153][T16550] ? stack_depot_save_flags+0x40/0x900 [ 881.776189][T16550] ? kasan_save_track+0x4f/0x80 [ 881.776227][T16550] ? kasan_save_track+0x3e/0x80 [ 881.776260][T16550] ? __lock_acquire+0xab9/0xd20 [ 881.776292][T16550] ? __mutex_trylock_common+0x153/0x260 [ 881.776325][T16550] ? __pfx___mutex_trylock_common+0x10/0x10 [ 881.776359][T16550] ? rcu_is_watching+0x15/0xb0 [ 881.776385][T16550] ? trace_contention_end+0x39/0x120 [ 881.776415][T16550] ? __mutex_lock+0x330/0xe80 [ 881.776440][T16550] ? kasan_quarantine_put+0xdd/0x220 [ 881.776469][T16550] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 881.776502][T16550] ? __pfx___mutex_lock+0x10/0x10 [ 881.776525][T16550] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 881.776559][T16550] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 881.776590][T16550] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 881.776630][T16550] kvm_vcpu_ioctl+0x74d/0xe90 [ 881.776667][T16550] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 881.776694][T16550] ? __lock_acquire+0xab9/0xd20 [ 881.776739][T16550] ? __fget_files+0x2a/0x420 [ 881.776772][T16550] ? __fget_files+0x2a/0x420 [ 881.776800][T16550] ? __fget_files+0x3a0/0x420 [ 881.776828][T16550] ? __fget_files+0x2a/0x420 [ 881.776861][T16550] ? bpf_lsm_file_ioctl+0x9/0x20 [ 881.776885][T16550] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 881.776921][T16550] __se_sys_ioctl+0xfc/0x170 [ 881.776948][T16550] do_syscall_64+0xfa/0x3b0 [ 881.776969][T16550] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.777003][T16550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.777024][T16550] ? clear_bhb_loop+0x60/0xb0 [ 881.777051][T16550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.777073][T16550] RIP: 0033:0x7f1edf78e929 [ 881.777092][T16550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.777111][T16550] RSP: 002b:00007f1ee057b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 881.777136][T16550] RAX: ffffffffffffffda RBX: 00007f1edf9b5fa0 RCX: 00007f1edf78e929 [ 881.777152][T16550] RDX: 0000200000000080 RSI: 000000004008ae8a RDI: 0000000000000005 [ 881.777167][T16550] RBP: 00007f1ee057b090 R08: 0000000000000000 R09: 0000000000000000 [ 881.777181][T16550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.777194][T16550] R13: 0000000000000000 R14: 00007f1edf9b5fa0 R15: 00007f1edfadfa28 [ 881.777227][T16550] [ 881.827832][T16552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.116656][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 882.199384][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.262878][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 882.482211][ T10] usb 4-1: USB disconnect, device number 46 [ 882.630426][T16576] netlink: 'syz.3.2746': attribute type 1 has an invalid length. [ 882.702842][T16576] 8021q: adding VLAN 0 to HW filter on device bond11 [ 882.804138][T16580] 8021q: adding VLAN 0 to HW filter on device bond11 [ 882.811747][T16580] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 882.829168][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2745'. [ 882.877795][T16580] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 883.064212][T16591] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 883.071634][T16576] gretap2: entered promiscuous mode [ 883.093059][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 883.169817][T16576] bond11: (slave gretap2): making interface the new active one [ 883.183511][T16576] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 883.324690][T16597] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 883.505241][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 883.938739][T16612] program syz.2.2752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 884.033189][ T24] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 884.112994][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 884.205353][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 884.214636][ T24] usb 6-1: config 3 has an invalid interface number: 52 but max is 0 [ 884.235977][ T24] usb 6-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 884.335808][T16617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.358996][ T24] usb 6-1: config 3 has no interface number 0 [ 884.365306][ T24] usb 6-1: config 3 interface 52 altsetting 4 endpoint 0xE has invalid maxpacket 80, setting to 64 [ 884.394223][ T5932] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 884.434605][ T24] usb 6-1: config 3 interface 52 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 884.458085][ T24] usb 6-1: config 3 interface 52 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 884.492198][ T24] usb 6-1: config 3 interface 52 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 884.514661][ T24] usb 6-1: config 3 interface 52 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 884.536819][ T24] usb 6-1: config 3 interface 52 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 884.553171][ T24] usb 6-1: config 3 interface 52 altsetting 4 endpoint 0xA has an invalid bInterval 169, changing to 4 [ 884.566373][ T24] usb 6-1: config 3 interface 52 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 884.578503][ T24] usb 6-1: config 3 interface 52 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 884.621138][ T24] usb 6-1: config 3 interface 52 altsetting 4 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 884.702836][ T24] usb 6-1: config 3 interface 52 altsetting 4 endpoint 0x81 has invalid maxpacket 21095, setting to 64 [ 884.728923][ T24] usb 6-1: config 3 interface 52 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 884.739728][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 884.748574][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 884.764065][ T24] usb 6-1: config 3 interface 52 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 884.777697][ T24] usb 6-1: config 3 interface 52 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 884.816935][ T24] usb 6-1: config 3 interface 52 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 884.830141][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 884.847266][ T24] usb 6-1: config 3 interface 52 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 884.847281][ T5932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.847306][ T5932] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 884.880040][ T24] usb 6-1: config 3 interface 52 altsetting 4 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 884.895358][ T5932] usb 5-1: config 1 has no interface number 1 [ 884.901573][ T5932] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 884.912851][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 884.922851][ T24] usb 6-1: config 3 interface 52 has no altsetting 0 [ 884.941833][ T5932] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 884.956840][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.965415][ T24] usb 6-1: New USB device found, idVendor=19d2, idProduct=1284, bcdDevice=13.81 [ 884.977510][ T5932] usb 5-1: Product: syz [ 884.982023][ T5932] usb 5-1: Manufacturer: syz [ 884.985810][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.998389][ T5932] usb 5-1: SerialNumber: syz [ 885.006955][ T43] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 885.089962][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.107125][ T24] usb 6-1: Product: syz [ 885.153033][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 885.173266][ T24] usb 6-1: Manufacturer: syz [ 885.178072][ T43] usb 3-1: Product: syz [ 885.182333][ T24] usb 6-1: SerialNumber: syz [ 885.212974][ T43] usb 3-1: Manufacturer: syz [ 885.224440][ T43] usb 3-1: SerialNumber: syz [ 885.242393][ T43] usb 3-1: config 0 descriptor?? [ 885.271049][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 885.313748][ T3092] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 885.339317][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 885.490382][ T43] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 022 [ 885.525434][T16605] fuse: Bad value for 'fd' [ 885.540330][ T24] option 6-1:3.52: GSM modem (1-port) converter detected [ 885.563401][ T3092] usb 2-1: config 0 has no interfaces? [ 885.582849][ T3092] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 885.594909][ T3092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.610647][ T3092] usb 2-1: Product: syz [ 885.620796][ T24] usb 6-1: USB disconnect, device number 14 [ 885.627051][ T3092] usb 2-1: Manufacturer: syz [ 885.631760][ T3092] usb 2-1: SerialNumber: syz [ 885.666101][ T3092] usb 2-1: config 0 descriptor?? [ 885.687573][ T24] option 6-1:3.52: device disconnected [ 885.803438][ T6001] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 885.902572][ T3092] usb 3-1: USB disconnect, device number 22 [ 885.945648][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2755'. [ 885.955284][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2755'. [ 885.969240][ T6001] usb 4-1: device descriptor read/64, error -71 [ 886.145379][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 886.223209][ T6001] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 886.357093][ T6001] usb 4-1: device descriptor read/64, error -71 [ 886.474540][ T6001] usb usb4-port1: attempt power cycle [ 886.593045][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 886.814901][ T6001] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 887.011038][ T6001] usb 4-1: device descriptor read/8, error -71 [ 887.100391][ T5932] usb 5-1: USB disconnect, device number 69 [ 887.205052][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.302957][ T6001] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 887.324943][ T6001] usb 4-1: device descriptor read/8, error -71 [ 887.367194][ T9347] 0: reclassify loop, rule prio 0, protocol 800 [ 887.454127][ T6001] usb usb4-port1: unable to enumerate USB device [ 887.697791][T16656] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 0, id = 0 [ 888.133012][ C0] net_ratelimit: 1 callbacks suppressed [ 888.133027][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 888.412901][T16657] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 888.419467][T16657] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 888.431946][ T24] usb 2-1: USB disconnect, device number 37 [ 888.461806][T16657] vhci_hcd vhci_hcd.0: Device attached [ 888.480387][T16657] netdevsim netdevsim2: Direct firmware load for nel/config failed with error -2 [ 888.490193][T16657] netdevsim netdevsim2: Falling back to sysfs fallback for: nel/config [ 888.660730][T16658] vhci_hcd: connection closed [ 888.686312][ T9351] vhci_hcd: stop threads [ 888.727956][ T9351] vhci_hcd: release socket [ 888.758378][ T9351] vhci_hcd: disconnect device [ 888.774973][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 888.812935][ T5932] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 888.820551][ T5932] usb 37-1: enqueue for inactive port 0 [ 888.848497][T16665] program syz.3.2763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.896447][ T5932] vhci_hcd: vhci_device speed not set [ 889.029074][T16667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.152989][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 889.252335][T16663] veth7: entered allmulticast mode [ 889.580144][T16675] FAULT_INJECTION: forcing a failure. [ 889.580144][T16675] name failslab, interval 1, probability 0, space 0, times 0 [ 889.661715][T16675] CPU: 1 UID: 0 PID: 16675 Comm: syz.3.2769 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 889.661746][T16675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 889.661759][T16675] Call Trace: [ 889.661768][T16675] [ 889.661777][T16675] dump_stack_lvl+0x189/0x250 [ 889.661808][T16675] ? __pfx____ratelimit+0x10/0x10 [ 889.661840][T16675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 889.661864][T16675] ? __pfx__printk+0x10/0x10 [ 889.661890][T16675] ? __lock_acquire+0xab9/0xd20 [ 889.661927][T16675] should_fail_ex+0x414/0x560 [ 889.661962][T16675] should_failslab+0xa8/0x100 [ 889.661991][T16675] __kmalloc_noprof+0xcb/0x4f0 [ 889.662016][T16675] ? is_bpf_text_address+0x292/0x2b0 [ 889.662037][T16675] ? rds_message_alloc+0x47/0x1f0 [ 889.662056][T16675] ? is_bpf_text_address+0x26/0x2b0 [ 889.662083][T16675] rds_message_alloc+0x47/0x1f0 [ 889.662113][T16675] rds_send_probe+0x82/0x990 [ 889.662135][T16675] ? unwind_get_return_address+0x4d/0x90 [ 889.662160][T16675] ? arch_stack_walk+0xfc/0x150 [ 889.662186][T16675] ? __pfx_rds_send_probe+0x10/0x10 [ 889.662209][T16675] ? __lock_acquire+0xab9/0xd20 [ 889.662236][T16675] rds_recv_incoming+0x3ae/0x12d0 [ 889.662266][T16675] ? __pfx_rds_recv_incoming+0x10/0x10 [ 889.662286][T16675] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 889.662335][T16675] rds_loop_xmit+0xdd/0x2a0 [ 889.662366][T16675] ? __pfx_rds_loop_xmit+0x10/0x10 [ 889.662399][T16675] rds_send_xmit+0x1274/0x2630 [ 889.662462][T16675] ? __pfx_rds_send_xmit+0x10/0x10 [ 889.662486][T16675] ? rds_send_queue_rm+0x4e1/0x600 [ 889.662525][T16675] rds_sendmsg+0x18e2/0x1f00 [ 889.662550][T16675] ? __lock_acquire+0xab9/0xd20 [ 889.662587][T16675] ? __pfx_rds_sendmsg+0x10/0x10 [ 889.662611][T16675] ? aa_sk_perm+0x81e/0x950 [ 889.662647][T16675] ? __pfx_aa_sk_perm+0x10/0x10 [ 889.662676][T16675] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 889.662701][T16675] ? __fget_files+0x2a/0x420 [ 889.662734][T16675] ? aa_sock_msg_perm+0x94/0x160 [ 889.662769][T16675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 889.662803][T16675] ? __pfx_rds_sendmsg+0x10/0x10 [ 889.662830][T16675] __sock_sendmsg+0x219/0x270 [ 889.662870][T16675] __sys_sendto+0x3bd/0x520 [ 889.662900][T16675] ? __pfx___sys_sendto+0x10/0x10 [ 889.662922][T16675] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 889.662959][T16675] ? __fget_files+0x3a0/0x420 [ 889.663000][T16675] ? ksys_write+0x22a/0x250 [ 889.663028][T16675] ? __pfx_ksys_write+0x10/0x10 [ 889.663051][T16675] ? rcu_is_watching+0x15/0xb0 [ 889.663084][T16675] __x64_sys_sendto+0xde/0x100 [ 889.663121][T16675] do_syscall_64+0xfa/0x3b0 [ 889.663143][T16675] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.663176][T16675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.663198][T16675] ? clear_bhb_loop+0x60/0xb0 [ 889.663225][T16675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.663248][T16675] RIP: 0033:0x7f8b1818e929 [ 889.663267][T16675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.663288][T16675] RSP: 002b:00007f8b1906e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 889.663314][T16675] RAX: ffffffffffffffda RBX: 00007f8b183b5fa0 RCX: 00007f8b1818e929 [ 889.663331][T16675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 889.663344][T16675] RBP: 00007f8b1906e090 R08: 0000000000000000 R09: 0000000000000000 [ 889.663357][T16675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.663372][T16675] R13: 0000000000000000 R14: 00007f8b183b5fa0 R15: 00007f8b184dfa28 [ 889.663405][T16675] [ 889.953940][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 890.193005][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 890.523715][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 890.696140][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 890.696165][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 890.696183][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 890.696198][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 890.696247][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 890.696274][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.698493][ T24] usb 4-1: config 0 descriptor?? [ 891.133969][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 891.275052][T16686] xfrm1: entered allmulticast mode [ 891.285533][T16700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.285816][T16700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.293767][ T9347] 0: reclassify loop, rule prio 0, protocol 800 [ 891.383920][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 891.384030][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 891.395028][ T24] usb 4-1: USB disconnect, device number 51 [ 891.403222][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 891.565294][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.565339][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 891.565435][ T10] usb 5-1: config 1 has no interface number 0 [ 891.565476][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.565504][ T10] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 891.567743][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.567828][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.567850][ T10] usb 5-1: Product: syz [ 891.567865][ T10] usb 5-1: Manufacturer: syz [ 891.567880][ T10] usb 5-1: SerialNumber: syz [ 891.876203][T16698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.876534][T16698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.878815][T16698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.879087][T16698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.041679][T16676] tty tty1: ldisc open failed (-12), clearing slot 0 [ 892.091856][ T10] cdc_ncm 5-1:1.1: bind() failure [ 892.106989][ T10] usb 5-1: USB disconnect, device number 70 [ 892.197956][T16710] veth7: entered allmulticast mode [ 892.582992][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 892.595650][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 892.759971][ T10] usb 6-1: device descriptor read/64, error -71 [ 893.048488][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 893.183116][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 893.325630][ T10] usb 6-1: device descriptor read/64, error -71 [ 893.482058][ T10] usb usb6-port1: attempt power cycle [ 893.634779][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 893.796793][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 893.908893][T16745] netlink: 'syz.2.2786': attribute type 4 has an invalid length. [ 893.946834][T16745] netlink: 'syz.2.2786': attribute type 11 has an invalid length. [ 893.983295][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 894.014884][ T10] usb 6-1: device descriptor read/8, error -71 [ 894.202961][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 894.285385][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 894.379318][ T10] usb 6-1: device descriptor read/8, error -71 [ 894.504154][ T10] usb usb6-port1: unable to enumerate USB device [ 894.995002][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 895.083261][T16759] sit1: entered allmulticast mode [ 895.233177][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 896.562939][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 896.643920][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 896.738318][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.780208][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.826557][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 896.841049][ T9347] 0: reclassify loop, rule prio 0, protocol 800 [ 896.871451][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 896.886879][T16781] veth3: entered allmulticast mode [ 896.920787][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.972521][ T24] usb 2-1: config 0 descriptor?? [ 897.010295][T16783] loop2: detected capacity change from 0 to 524287999 [ 897.360406][T16792] program syz.2.2797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 897.363419][T16790] tipc: Started in network mode [ 897.416052][T16790] tipc: Node identity ea13ba0fdbed, cluster identity 4711 [ 897.432031][ T24] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 897.490149][T16790] tipc: Enabled bearer , priority 0 [ 897.525793][ T10] syz_tun: tun_net_xmit 86 [ 897.573317][T16794] syzkaller0: entered promiscuous mode [ 897.585833][T16794] syzkaller0: entered allmulticast mode [ 897.791814][T16790] tipc: Resetting bearer [ 897.833403][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 897.870143][T16789] tipc: Resetting bearer [ 897.983621][T16789] tipc: Disabling bearer [ 898.025165][T16811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2801'. [ 898.103427][T16813] misc userio: No port type given on /dev/userio [ 898.123707][T16813] trusted_key: encrypted_key: insufficient parameters specified [ 898.233032][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 898.705549][ C1] plantronics 0003:047F:FFFF.0057: usb_submit_urb(ctrl) failed: -1 [ 898.955392][ T9347] 0: reclassify loop, rule prio 0, protocol 800 [ 899.323222][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 899.404251][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 899.495704][ T10] usb 2-1: USB disconnect, device number 38 [ 899.635431][T16839] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2809'. [ 900.135389][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 900.148284][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 900.363201][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 900.392804][ T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 900.410351][ T10] usb 2-1: config 0 has no interface number 0 [ 900.426872][ T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 900.475183][ T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 900.673197][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 900.680131][ T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 900.699576][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.717962][ T10] usb 2-1: Product: syz [ 900.729895][ T10] usb 2-1: Manufacturer: syz [ 900.744853][ T10] usb 2-1: SerialNumber: syz [ 900.771369][ T10] usb 2-1: config 0 descriptor?? [ 900.797130][T16864] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:768 [ 901.426030][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 901.753998][T16871] netlink: 'syz.4.2818': attribute type 2 has an invalid length. [ 902.029255][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 902.398864][T16877] kvm: pic: non byte write [ 902.565823][ T10] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 902.573328][ T10] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 902.629223][ T10] usb 2-1: USB disconnect, device number 39 [ 902.864325][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 902.980128][T16890] misc userio: No port type given on /dev/userio [ 903.001335][T16890] trusted_key: encrypted_key: insufficient parameters specified [ 903.252948][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 904.012929][ T6001] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 904.052968][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 904.165095][ T6001] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 904.173696][ T6001] usb 6-1: config 201 has no interface number 0 [ 904.198055][ T6001] usb 6-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 904.226759][ T6001] usb 6-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 904.241198][ T6001] usb 6-1: config 201 interface 249 has no altsetting 0 [ 904.272960][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 904.291943][ T6001] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 904.413604][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.421731][ T6001] usb 6-1: Product: syz [ 904.426032][ T6001] usb 6-1: Manufacturer: syz [ 904.430648][ T6001] usb 6-1: SerialNumber: syz [ 904.452914][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 904.623121][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 904.635170][ T10] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 904.644039][ T10] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 904.661416][ T10] usb 4-1: config 135 has no interface number 0 [ 904.678168][ T10] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.707374][T16912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2828'. [ 904.733303][T16909] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2828'. [ 904.747201][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.763740][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.808250][ T10] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 904.833873][ T6001] ath6kl: Failed to submit usb control message: -71 [ 904.854705][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.868423][ T6001] ath6kl: unable to send the bmi data to the device: -71 [ 904.902859][ T10] usb 4-1: Product: syz [ 904.908285][ T6001] ath6kl: Unable to send get target info: -71 [ 904.914799][ T10] usb 4-1: Manufacturer: syz [ 904.928254][ T10] usb 4-1: SerialNumber: syz [ 904.934796][ T6001] ath6kl: Failed to init ath6kl core: -71 [ 904.967557][ T6001] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 904.979561][ T10] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 905.004105][ T10] usb 4-1: No valid video chain found. [ 905.026113][ T6001] usb 6-1: USB disconnect, device number 19 [ 905.116801][T16923] netlink: 'syz.1.2831': attribute type 2 has an invalid length. [ 905.154500][T16903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.155591][T12989] 0: reclassify loop, rule prio 0, protocol 800 [ 905.182044][T16924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.192207][T16903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.201021][T16924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.254536][ T10] usb 4-1: USB disconnect, device number 52 [ 905.293962][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 905.322968][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 905.452156][T16926] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 905.611364][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'. [ 905.622650][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'. [ 905.632683][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 905.713025][ T6001] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 905.794810][T16935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.804004][T16935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.873390][ T6001] usb 6-1: Using ep0 maxpacket: 16 [ 905.884658][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 905.936844][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.960531][ T6001] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 906.032296][T16943] loop2: detected capacity change from 0 to 7 [ 906.040244][T16943] Dev loop2: unable to read RDB block 7 [ 906.049068][T16943] loop2: unable to read partition table [ 906.055306][T16943] loop2: partition table beyond EOD, truncated [ 906.062911][T16943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 906.154142][ T6001] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 906.206431][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.249490][T16948] program syz.2.2838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.327215][ T6001] usb 6-1: config 0 descriptor?? [ 906.433147][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 906.433365][ T5989] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 906.525789][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 906.626636][ T5989] usb 2-1: Using ep0 maxpacket: 8 [ 906.664342][ T5989] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 906.677282][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.689876][ T5989] usb 2-1: Product: syz [ 906.696271][ T5989] usb 2-1: Manufacturer: syz [ 906.700967][ T5989] usb 2-1: SerialNumber: syz [ 906.723067][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 906.735709][ T5989] usb 2-1: config 0 descriptor?? [ 906.739855][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.761845][ T6001] hid-alps 0003:044E:120C.0058: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 906.776027][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 906.798987][ T10] usb 4-1: config 1 has no interface number 1 [ 906.809802][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 906.830727][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 906.840453][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.848543][ T10] usb 4-1: Product: syz [ 906.852897][ T10] usb 4-1: Manufacturer: syz [ 906.857567][ T10] usb 4-1: SerialNumber: syz [ 906.949835][ T6001] usb 6-1: USB disconnect, device number 20 [ 907.036389][T16956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.078129][T16956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.215132][ T5989] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 907.232303][T16953] fido_id[16953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 907.262497][ T5989] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 907.290448][ T5989] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 907.305633][ T5989] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 907.349774][ T5989] usb 2-1: USB disconnect, device number 40 [ 907.714682][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 907.774836][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 907.806163][T16962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2841'. [ 907.840285][T16958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2841'. [ 908.088227][T16968] netlink: 'syz.3.2835': attribute type 1 has an invalid length. [ 908.139895][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 908.149317][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2835'. [ 908.292977][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 908.522871][ T5989] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 908.691366][T16984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.782413][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 908.815601][ T5989] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 908.822122][T16984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.911569][T16984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.939928][T16984] netlink: 'syz.4.2844': attribute type 2 has an invalid length. [ 908.956206][ T5989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.002896][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 909.038295][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 909.089319][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 909.107606][ T43] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 909.224151][ T5989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.312954][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 909.383935][ T5989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 909.394028][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.403519][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 909.414649][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 909.435417][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 909.449749][ T43] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 909.459843][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.499206][ T43] usb 2-1: config 0 descriptor?? [ 909.708640][ T5989] usb 6-1: GET_CAPABILITIES returned 0 [ 909.725496][ T5989] usbtmc 6-1:16.0: can't read capabilities [ 909.922994][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 909.934179][ T43] a4tech 0003:09DA:001A.0059: unknown main item tag 0x0 [ 909.987649][ T43] a4tech 0003:09DA:001A.0059: unknown main item tag 0x0 [ 910.022414][ T43] a4tech 0003:09DA:001A.0059: unknown main item tag 0x0 [ 910.051196][T16965] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 910.052548][ T6001] usb 6-1: USB disconnect, device number 21 [ 910.064981][ T43] a4tech 0003:09DA:001A.0059: unknown main item tag 0x0 [ 910.072419][ T43] a4tech 0003:09DA:001A.0059: unknown main item tag 0x0 [ 910.082152][ T43] a4tech 0003:09DA:001A.0059: unknown main item tag 0x0 [ 910.098281][T16967] usb 6-1: usbtmc_ioctl_clear_out_halt returned -19 [ 910.177690][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 910.187071][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.208396][ T24] usb 3-1: Product: syz [ 910.217391][ T43] a4tech 0003:09DA:001A.0059: unknown main item tag 0x0 [ 910.236298][ T24] usb 3-1: Manufacturer: syz [ 910.257881][ T24] usb 3-1: SerialNumber: syz [ 910.268737][ T43] a4tech 0003:09DA:001A.0059: hidraw0: USB HID v80.04 Device [HID 09da:001a] on usb-dummy_hcd.1-1/input0 [ 910.286868][ T24] usb 3-1: config 0 descriptor?? [ 910.352975][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 910.360368][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 910.493292][ T3092] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 910.536902][ T10] usb 4-1: USB disconnect, device number 53 [ 910.560849][ T24] hso 3-1:0.0: Failed to find BULK IN ep [ 910.633355][ T3092] usb 5-1: device descriptor read/64, error -71 [ 910.670222][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.762807][ T6001] usb 3-1: USB disconnect, device number 24 [ 910.903002][ T3092] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 910.917860][ T9347] 0: reclassify loop, rule prio 0, protocol 800 [ 910.945996][T17004] loop2: detected capacity change from 0 to 7 [ 910.961082][ T7944] Dev loop2: unable to read RDB block 7 [ 910.970622][ T7944] loop2: unable to read partition table [ 910.977800][ T7944] loop2: partition table beyond EOD, truncated [ 910.985725][T17004] Dev loop2: unable to read RDB block 7 [ 910.991792][T17004] loop2: unable to read partition table [ 911.000620][T17004] loop2: partition table beyond EOD, truncated [ 911.008808][T17004] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 911.123285][ T3092] usb 5-1: device descriptor read/64, error -71 [ 911.243436][ T3092] usb usb5-port1: attempt power cycle [ 911.403159][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 911.503435][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 911.589237][ T3092] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 911.605654][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.661706][ T10] usb 2-1: USB disconnect, device number 41 [ 911.708317][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.718798][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 911.732397][ T3092] usb 5-1: device descriptor read/8, error -71 [ 911.738947][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 911.748287][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.759420][ T24] usb 4-1: config 0 descriptor?? [ 911.836422][T17020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.867949][T17020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.951867][T17021] syz.1.2852: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 911.977737][ T3092] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 911.989546][T17021] CPU: 1 UID: 0 PID: 17021 Comm: syz.1.2852 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 911.989576][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 911.989591][T17021] Call Trace: [ 911.989601][T17021] [ 911.989612][T17021] dump_stack_lvl+0x189/0x250 [ 911.989662][T17021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.989689][T17021] ? __pfx__printk+0x10/0x10 [ 911.989719][T17021] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 911.989748][T17021] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 911.989787][T17021] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 911.989820][T17021] warn_alloc+0x214/0x310 [ 911.989856][T17021] ? __pfx_warn_alloc+0x10/0x10 [ 911.989895][T17021] ? __get_vm_area_node+0x28f/0x300 [ 911.989923][T17021] ? vb2_vmalloc_alloc+0xef/0x340 [ 911.989955][T17021] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 911.990015][T17021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 911.990069][T17021] ? __kasan_kmalloc+0x93/0xb0 [ 911.990100][T17021] vmalloc_user_noprof+0xad/0xf0 [ 911.990130][T17021] ? vb2_vmalloc_alloc+0xef/0x340 [ 911.990159][T17021] vb2_vmalloc_alloc+0xef/0x340 [ 911.990187][T17021] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 911.990216][T17021] __vb2_queue_alloc+0x9bf/0x15a0 [ 911.990269][T17021] vb2_core_reqbufs+0xc31/0x1420 [ 911.990315][T17021] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 911.990340][T17021] ? vb2_verify_memory_type+0x1fc/0x570 [ 911.990368][T17021] ? vb2_reqbufs+0x3a9/0x630 [ 911.990402][T17021] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 911.990438][T17021] __video_do_ioctl+0xc9b/0xdb0 [ 911.990477][T17021] ? __pfx___video_do_ioctl+0x10/0x10 [ 911.990522][T17021] video_usercopy+0x86e/0x14f0 [ 911.990561][T17021] ? __pfx___video_do_ioctl+0x10/0x10 [ 911.990590][T17021] ? __pfx_video_usercopy+0x10/0x10 [ 911.990631][T17021] ? __fget_files+0x2a/0x420 [ 911.990665][T17021] ? __fget_files+0x2a/0x420 [ 911.990693][T17021] ? __fget_files+0x3a0/0x420 [ 911.990727][T17021] v4l2_ioctl+0x18a/0x1e0 [ 911.990762][T17021] ? __pfx_v4l2_ioctl+0x10/0x10 [ 911.990789][T17021] __se_sys_ioctl+0xfc/0x170 [ 911.990816][T17021] do_syscall_64+0xfa/0x3b0 [ 911.990837][T17021] ? lockdep_hardirqs_on+0x9c/0x150 [ 911.990871][T17021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.990894][T17021] ? clear_bhb_loop+0x60/0xb0 [ 911.990921][T17021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.990943][T17021] RIP: 0033:0x7f1edf78e929 [ 911.990964][T17021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.990983][T17021] RSP: 002b:00007f1ee0539038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.991007][T17021] RAX: ffffffffffffffda RBX: 00007f1edf9b6160 RCX: 00007f1edf78e929 [ 911.991024][T17021] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000009 [ 911.991039][T17021] RBP: 00007f1edf810b39 R08: 0000000000000000 R09: 0000000000000000 [ 911.991053][T17021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.991066][T17021] R13: 0000000000000000 R14: 00007f1edf9b6160 R15: 00007f1edfadfa28 [ 911.991100][T17021] [ 911.992115][T17021] Mem-Info: [ 912.308426][ T24] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x6 [ 912.328521][ T3092] usb 5-1: device descriptor read/8, error -71 [ 912.348225][ T24] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 912.372983][T17021] active_anon:21105 inactive_anon:0 isolated_anon:0 [ 912.372983][T17021] active_file:20066 inactive_file:41765 isolated_file:0 [ 912.372983][T17021] unevictable:768 dirty:198 writeback:0 [ 912.372983][T17021] slab_reclaimable:8306 slab_unreclaimable:114190 [ 912.372983][T17021] mapped:38950 shmem:15542 pagetables:1587 [ 912.372983][T17021] sec_pagetables:0 bounce:0 [ 912.372983][T17021] kernel_misc_reclaimable:0 [ 912.372983][T17021] free:1260257 free_pcp:12815 free_cma:0 [ 912.564427][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 912.630909][T17021] Node 0 active_anon:85420kB inactive_anon:0kB active_file:80264kB inactive_file:166856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135300kB dirty:792kB writeback:0kB shmem:60632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14964kB pagetables:6228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 912.669988][ T3092] usb usb5-port1: unable to enumerate USB device [ 912.720566][ T6001] usb 4-1: USB disconnect, device number 54 [ 912.755951][T17021] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 912.803868][T17021] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.834578][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 912.887385][T17021] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 912.913851][T17021] Node 0 DMA32 free:1119796kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81888kB inactive_anon:0kB active_file:80264kB inactive_file:165280kB unevictable:1536kB writepending:792kB present:3129332kB managed:2558408kB mlocked:0kB bounce:0kB free_pcp:37700kB local_pcp:18972kB free_cma:0kB [ 912.930511][T17024] fido_id[17024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 913.067051][T17021] lowmem_reserve[]: 0 0 1 1 1 [ 913.072493][T17021] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 913.120076][T17021] lowmem_reserve[]: 0 0 0 0 0 [ 913.127645][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 913.150709][T17021] Node 1 Normal free:3905704kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16356kB local_pcp:7652kB free_cma:0kB [ 913.256015][T17021] lowmem_reserve[]: 0 0 0 0 0 [ 913.260799][T17021] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 913.332896][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 913.414221][T17031] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2854'. [ 913.433948][T17021] Node 0 DMA32: 1363*4kB (UM) 789*8kB (UME) 492*16kB (UME) 372*32kB (UME) 99*64kB (UME) 49*128kB (ME) 50*256kB (UME) 5*512kB (UM) 12*1024kB (UM) 7*2048kB (UME) 253*4096kB (M) = 1122420kB [ 913.566570][T17028] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2854'. [ 913.652888][T17021] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 913.687498][T17021] Node 1 Normal: 192*4kB (UE) 59*8kB (UME) 11*16kB (UME) 109*32kB (UME) 38*64kB (UME) 8*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 950*4096kB (ME) = 3905704kB [ 913.715674][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 913.715691][ T30] audit: type=1326 audit(1752112476.530:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 913.763955][T17021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.775385][ T30] audit: type=1326 audit(1752112476.530:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 913.798218][T17021] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 913.811785][ T30] audit: type=1326 audit(1752112476.530:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 913.835046][T17021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.848169][ T30] audit: type=1326 audit(1752112476.530:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb470f8e963 code=0x7ffc0000 [ 913.879867][T17021] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 913.893525][ T30] audit: type=1326 audit(1752112476.530:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 913.918188][T17021] 76338 total pagecache pages [ 913.923464][T17021] 0 pages in swap cache [ 913.927827][T17021] Free swap = 124996kB [ 913.932106][T17021] Total swap = 124996kB [ 913.936937][ T30] audit: type=1326 audit(1752112476.530:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 913.972305][T17021] 2097051 pages RAM [ 914.112822][T17021] 0 pages HighMem/MovableOnly [ 914.117574][T17021] 425407 pages reserved [ 914.121740][T17021] 0 pages cma reserved [ 914.182894][ T30] audit: type=1326 audit(1752112476.530:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 914.209184][ T30] audit: type=1326 audit(1752112476.530:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 914.355496][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 914.473992][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 914.859055][ T30] audit: type=1326 audit(1752112476.530:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 914.883163][ T30] audit: type=1326 audit(1752112476.580:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17032 comm="syz.4.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb470f8e929 code=0x7ffc0000 [ 915.017306][T17048] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 915.393058][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 915.802815][ T10] usb 2-1: device descriptor read/64, error -71 [ 916.113445][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 916.297727][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 916.307187][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.325835][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 916.346949][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 916.387945][ T10] usb 2-1: config 1 has no interface number 1 [ 916.402953][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 916.426651][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 916.447049][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.460121][ T10] usb 2-1: Product: syz [ 916.470016][ T10] usb 2-1: Manufacturer: syz [ 916.480153][ T10] usb 2-1: SerialNumber: syz [ 916.680189][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 916.703658][T17049] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 916.755052][T17049] 8021q: adding VLAN 0 to HW filter on device bond18 [ 916.763087][ T24] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 916.914557][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 916.914593][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 916.914620][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 916.914661][ T24] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 916.914684][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.917980][ T24] usb 6-1: config 0 descriptor?? [ 916.918650][T17056] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 916.942895][ T3092] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 916.997126][T17072] pim6reg1: entered promiscuous mode [ 916.997169][T17072] pim6reg1: entered allmulticast mode [ 917.375703][T17056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.376171][T17056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.398202][ T3092] usb 4-1: config 0 has no interfaces? [ 917.398243][ T3092] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 917.398271][ T3092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.400900][ T24] aureal 0003:0755:2626.005B: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 917.402030][ T24] aureal 0003:0755:2626.005B: unknown main item tag 0x6 [ 917.402064][ T24] aureal 0003:0755:2626.005B: report_id 29495 is invalid [ 917.402083][ T24] aureal 0003:0755:2626.005B: item 0 2 1 8 parsing failed [ 917.405390][ T3092] usb 4-1: config 0 descriptor?? [ 917.405745][ T24] aureal 0003:0755:2626.005B: probe with driver aureal failed with error -22 [ 917.445162][ T6001] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 917.517378][ T9362] 0: reclassify loop, rule prio 0, protocol 800 [ 917.604993][ T6001] usb 3-1: Using ep0 maxpacket: 8 [ 917.626598][T15511] usb 6-1: USB disconnect, device number 22 [ 917.644677][ T6001] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 917.644791][ T6001] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.644813][ T6001] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 917.644836][ T6001] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 917.644859][ T6001] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.644898][ T6001] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 917.644941][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.707264][T17060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.970986][T17060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.972425][ T6001] usb 3-1: GET_CAPABILITIES returned 0 [ 917.972469][ T6001] usbtmc 3-1:16.0: can't read capabilities [ 917.979808][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 918.091445][ T10] usb 2-1: USB disconnect, device number 43 [ 918.163829][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.250678][T17072] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 918.251133][T17074] usb 3-1: usbtmc_ioctl_clear_out_halt returned -71 [ 918.254779][T17060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.255166][T17060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.272052][ T24] usb 3-1: USB disconnect, device number 25 [ 918.373124][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 918.784950][ T9351] 0: reclassify loop, rule prio 0, protocol 800 [ 918.945251][T17096] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2867'. [ 919.393009][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 919.509349][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2868'. [ 920.432986][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 920.857893][ T10] usb 4-1: USB disconnect, device number 55 [ 920.972716][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 921.109419][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2872'. [ 921.163219][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 921.185015][ T31] Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 [ 921.203200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 921.221834][ T31] task:kworker/0:0 state:D stack:20264 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 921.248773][ T31] Workqueue: usb_hub_wq hub_event [ 921.257033][ T31] Call Trace: [ 921.260505][ T31] [ 921.265912][ T31] __schedule+0x16f5/0x4d00 [ 921.270651][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 921.279070][ T31] ? schedule+0x165/0x360 [ 921.285626][ T31] ? __pfx___schedule+0x10/0x10 [ 921.290780][ T31] ? schedule+0x91/0x360 [ 921.325748][ T31] schedule+0x165/0x360 [ 921.337012][ T31] schedule_preempt_disabled+0x13/0x30 [ 921.342700][ T31] __mutex_lock+0x724/0xe80 [ 921.349708][ T31] ? __mutex_lock+0x51b/0xe80 [ 921.356804][ T31] ? hub_event+0x21cb/0x4a00 [ 921.361633][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 921.371933][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 921.380310][ T31] hub_event+0x21cb/0x4a00 [ 921.387703][ T31] ? do_raw_spin_lock+0x121/0x290 [ 921.395685][ T31] ? __pfx_hub_event+0x10/0x10 [ 921.400636][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 921.411943][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 921.418305][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 921.427441][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 921.437885][ T31] process_scheduled_works+0xae1/0x17b0 [ 921.446044][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 921.452306][ T31] worker_thread+0x8a0/0xda0 [ 921.459708][ T31] kthread+0x70e/0x8a0 [ 921.466143][ T31] ? __pfx_worker_thread+0x10/0x10 [ 921.471454][ T31] ? __pfx_kthread+0x10/0x10 [ 921.479183][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 921.487300][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 921.492698][ T31] ? __pfx_kthread+0x10/0x10 [ 921.500388][ T31] ret_from_fork+0x3f9/0x770 [ 921.507505][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 921.516692][ T31] ? __switch_to_asm+0x39/0x70 [ 921.522478][ T31] ? __switch_to_asm+0x33/0x70 [ 921.529911][ T31] ? __pfx_kthread+0x10/0x10 [ 921.535424][ T31] ret_from_fork_asm+0x1a/0x30 [ 921.540863][ T31] [ 921.549984][ T31] [ 921.549984][ T31] Showing all locks held in the system: [ 921.559711][ T31] 5 locks held by kworker/0:0/9: [ 921.569123][ T31] #0: ffff888022288548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 921.581892][ T31] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 921.586080][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 921.599518][ T31] #2: ffff888029415198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 921.614250][ T31] #3: ffff8880294d0510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 921.662829][ T31] #4: ffff888026a1df68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 921.679075][ T31] 6 locks held by kworker/0:1/10: [ 921.684517][ T31] #0: ffff888022288548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 921.700255][ T31] #1: ffffc900000f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 921.724607][ T31] #2: ffff88814432c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 921.738359][ T31] #3: ffff88814432f510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 921.751431][ T31] #4: ffff888143fec668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 921.768388][ T31] #5: ffffffff99cc6010 (&obj_hash[i].lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 921.779861][ T31] 1 lock held by khungtaskd/31: [ 921.785571][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 921.795596][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 921.804550][ T31] 2 locks held by getty/5610: [ 921.805441][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.809397][ T31] #0: ffff888030fa60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 921.822827][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 921.854403][ T10] usb 3-1: config 1 has no interface number 1 [ 921.865013][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 921.902105][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 921.905354][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.921976][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.932352][ T10] usb 3-1: Product: syz [ 921.936852][ T10] usb 3-1: Manufacturer: syz [ 921.941501][ T10] usb 3-1: SerialNumber: syz [ 921.946004][ T31] 5 locks held by kworker/1:6/7170: [ 921.961838][ T31] #0: ffff888022288548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 921.999241][ T31] #1: ffffc900047cfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 922.020601][ T31] #2: ffff888029401198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 922.040735][ T31] #3: ffff888029404510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 922.050976][ T31] #4: ffff888026a1df68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 922.078125][ T31] 3 locks held by kworker/u8:8/9345: [ 922.087478][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 922.116751][ T31] #1: ffffc9000c047bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 922.139721][ T31] #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 922.149378][ T31] 3 locks held by syz.1.2873/17110: [ 922.154872][ T9364] 0: reclassify loop, rule prio 0, protocol 800 [ 922.163006][ T31] #0: ffffffff8eca4d60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 922.177525][T17117] netlink: 'syz.2.2875': attribute type 1 has an invalid length. [ 922.192137][ T31] #1: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 922.219648][ T31] #2: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 922.237899][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 922.246897][T17121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 922.268615][ T31] 1 lock held by syz.3.2872/17111: [ 922.279951][ T31] #0: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 922.306982][ T31] 1 lock held by syz.3.2872/17112: [ 922.319210][ T31] #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: tc_new_tfilter+0x4b5/0x15b0 [ 922.341902][ T31] 1 lock held by syz.3.2872/17115: [ 922.347263][ T31] #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xeee/0x2d00 [ 922.359357][ T31] 1 lock held by syz.5.2874/17118: [ 922.367389][ T31] 2 locks held by syz.2.2875/17117: [ 922.376513][ T31] #0: ffffffff8fa226c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 922.409387][ T31] #1: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 922.426972][ T31] 2 locks held by syz.2.2875/17121: [ 922.434099][ T3513] 0: reclassify loop, rule prio 0, protocol 800 [ 922.451996][ T31] #0: ffffffff8fa390e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 922.469222][ T31] #1: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 922.478553][ T31] [ 922.508463][ T31] ============================================= [ 922.508463][ T31] [ 922.602268][T17117] 8021q: adding VLAN 0 to HW filter on device bond14 [ 922.628845][ T31] NMI backtrace for cpu 1 [ 922.628862][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 922.628887][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 922.628899][ T31] Call Trace: [ 922.628918][ T31] [ 922.628926][ T31] dump_stack_lvl+0x189/0x250 [ 922.628953][ T31] ? __wake_up_klogd+0xd9/0x110 [ 922.628983][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 922.629007][ T31] ? __pfx__printk+0x10/0x10 [ 922.629044][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 922.629073][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 922.629096][ T31] ? _printk+0xcf/0x120 [ 922.629126][ T31] ? __pfx__printk+0x10/0x10 [ 922.629153][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 922.629174][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 922.629201][ T31] watchdog+0xfee/0x1030 [ 922.629221][ T31] ? watchdog+0x1de/0x1030 [ 922.629245][ T31] kthread+0x70e/0x8a0 [ 922.629276][ T31] ? __pfx_watchdog+0x10/0x10 [ 922.629292][ T31] ? __pfx_kthread+0x10/0x10 [ 922.629320][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 922.629348][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 922.629375][ T31] ? __pfx_kthread+0x10/0x10 [ 922.629402][ T31] ret_from_fork+0x3f9/0x770 [ 922.629428][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 922.629454][ T31] ? __switch_to_asm+0x39/0x70 [ 922.629478][ T31] ? __switch_to_asm+0x33/0x70 [ 922.629501][ T31] ? __pfx_kthread+0x10/0x10 [ 922.629528][ T31] ret_from_fork_asm+0x1a/0x30 [ 922.629567][ T31] [ 922.629596][ T31] Sending NMI from CPU 1 to CPUs 0: [ 922.789374][ C0] NMI backtrace for cpu 0 [ 922.789390][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 922.789410][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 922.789421][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 922.789451][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 2d 19 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 922.789466][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 922.789483][ C0] RAX: a199a00623ce1c00 RBX: ffffffff81975c78 RCX: a199a00623ce1c00 [ 922.789496][ C0] RDX: 0000000000000001 RSI: ffffffff8d998685 RDI: ffffffff8be29dc0 [ 922.789508][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 922.789520][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1eff0 [ 922.789533][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 922.789544][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 922.789558][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 922.789569][ C0] CR2: 00002000003a7030 CR3: 000000007e48a000 CR4: 00000000003526f0 [ 922.789584][ C0] Call Trace: [ 922.789591][ C0] [ 922.789597][ C0] default_idle+0x13/0x20 [ 922.789616][ C0] default_idle_call+0x74/0xb0 [ 922.789636][ C0] do_idle+0x1e8/0x510 [ 922.789657][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 922.789675][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 922.789701][ C0] ? __pfx_do_idle+0x10/0x10 [ 922.789725][ C0] ? do_idle+0x5/0x510 [ 922.789745][ C0] cpu_startup_entry+0x44/0x60 [ 922.789764][ C0] rest_init+0x2de/0x300 [ 922.789782][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 922.789801][ C0] start_kernel+0x47d/0x500 [ 922.789826][ C0] x86_64_start_reservations+0x24/0x30 [ 922.789842][ C0] x86_64_start_kernel+0x143/0x1c0 [ 922.789868][ C0] common_startup_64+0x13e/0x147 [ 922.789900][ C0] [ 922.992599][ T10] usb 3-1: USB disconnect, device number 26 [ 923.039744][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 923.046649][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 923.058505][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 923.068590][ T31] Call Trace: [ 923.071893][ T31] [ 923.074840][ T31] dump_stack_lvl+0x99/0x250 [ 923.079456][ T31] ? __asan_memcpy+0x40/0x70 [ 923.084075][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.089291][ T31] ? __pfx__printk+0x10/0x10 [ 923.093898][ T31] panic+0x2db/0x790 [ 923.097817][ T31] ? __pfx_panic+0x10/0x10 [ 923.102233][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 923.107028][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 923.112849][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 923.118221][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 923.124385][ T31] watchdog+0x102d/0x1030 [ 923.128722][ T31] ? watchdog+0x1de/0x1030 [ 923.133146][ T31] kthread+0x70e/0x8a0 [ 923.137231][ T31] ? __pfx_watchdog+0x10/0x10 [ 923.141914][ T31] ? __pfx_kthread+0x10/0x10 [ 923.146523][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.151742][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.156969][ T31] ? __pfx_kthread+0x10/0x10 [ 923.161581][ T31] ret_from_fork+0x3f9/0x770 [ 923.166179][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 923.171332][ T31] ? __switch_to_asm+0x39/0x70 [ 923.176104][ T31] ? __switch_to_asm+0x33/0x70 [ 923.180874][ T31] ? __pfx_kthread+0x10/0x10 [ 923.185475][ T31] ret_from_fork_asm+0x1a/0x30 [ 923.190257][ T31] [ 923.193640][ T31] Kernel Offset: disabled [ 923.197967][ T31] Rebooting in 86400 seconds..