last executing test programs: 10.826620857s ago: executing program 1 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r2 = socket$inet6(0xa, 0x2, 0x0) fremovexattr(r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) sendmsg$inet6(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000000002900000005"], 0x28}, 0x4000841) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) r3 = epoll_create1(0x80000) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_usb_connect$midi(0x5, 0x65, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x89, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x2, 0x20, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x3, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x3}, @midi_out_jack={0x9, 0x24, 0x3, 0x2, 0xd, 0x1, [{0x2, 0x1}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x5}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0xa, 0x4e, {0xa, 0x25, 0x1, 0x6, "ec56af5d9c60"}}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x5, 0x6, {0x10, 0x25, 0x1, 0xc, "926ba233e328d07cfdb9bd12"}}}]}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0xfd, 0xd7, 0x9, 0x40, 0xb}, 0xf3, &(0x7f0000000400)={0x5, 0xf, 0xf3, 0x6, [@generic={0xc3, 0x10, 0x4, "4395f7e6fee61df92c5e98251670093cb18b8ba1c664303766a31d853812cd479fae08db6d19b37e9586919efb9f6ea249e066de5291da1e27fe0505ad7e065c9ba481d15470a363b4a72a024ad3456db8e2bb8325be06426d254480d7f9eba88e11a1b2d99712e668d91d59f8267f2668183bfde4913b55e540cee55c059bd43a6ed085c239398eb53dc5199efb281a3f08d3bc3e6541578d3eb86ad417cab505d834498e91b072dadc595b8bddf6d733435db96cc86465ebef6bac818b49e9"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0xc0, 0xf00, 0xfff1, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x3, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x9, 0x9, 0x4, 0xb}]}, 0x5, [{0x7b, &(0x7f0000000700)=@string={0x7b, 0x3, "01ca58277f8e2efe55c704f49f5e9e1a83012a3e4b3e271fe0139b994f54bef6341b4ae03dc4dbb2dea40fcd015d0c67817cdf7a20dcba679e0a81aa6383e189e526c8f5694104a82526dc66d9065d7bd55080ece05a82ba3ae07a2162b44ff81853df20e355824ad30bfb3c16c4d4899bfd74ee8c416b5f24"}}, {0x21, &(0x7f0000000780)=@string={0x21, 0x3, "91d9cafd9fee3a595c2e605253710b752c0d0836ccf846366f1765de2569b2"}}, {0x91, &(0x7f00000007c0)=@string={0x91, 0x3, "7b23942b9aaf7dd61814c89d8eafaf62e8119915f3cc66adaf5b2759bb7cbfed16081149143dab83c37e2029f2f813b9beb9dd2fcab4789f073a5d6b2f96a679da31da231898282d40188dccbd4b7126dbbb06484ca0103fd59c4becf8db82ad6b887b00feac52a8f695df99cf2c33a473ff841639a654d5ceccd9d439b7683c3bc29795e83cad7475d2e938c17831"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2409}}]}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0003000016712c0dc7a9b4cbd27bb9b14a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fanotify_mark(0xffffffffffffffff, 0x422, 0x22, 0xffffffffffffffff, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x3, {0x2, 0xf0, 0x1}, 0xff}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r6) epoll_pwait2(r3, &(0x7f0000000540)=[{}], 0x1, &(0x7f00000005c0)={0x0, 0x3938700}, &(0x7f0000000600), 0x8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r8, 0xcb995000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000180000000000000000000", @ANYRES32=0x0, @ANYBLOB="30080000000000001c00128009000100626f6e64000000000c0002800000070001000000"], 0x3c}, 0x1, 0xba01}, 0x4000010) 8.936918179s ago: executing program 4 (id=1295): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000400)={0xffffffff, 0xfffffff8, 0xffffffff, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r2, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x103fa, 0x1, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x4000000000000], 0x10000, 0x40c282}) 8.26729138s ago: executing program 1 (id=1300): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x3, 0x0, 0x1000, 0x0, 0x37b, 0x9, 0x4, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00"}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r7 = gettid() syz_open_procfs$userns(r7, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000280)=[0xffff, 0x5, 0xf], &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0, &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', 0x0, &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', 0x0]}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', 0x0]}) 7.830469348s ago: executing program 2 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x17e8}}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000002c0)={0x800}) (async) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004040}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x22d6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x2040000) 7.38268538s ago: executing program 2 (id=1304): socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030cffe5000904000000010300000a"], 0x0) creat(0x0, 0x13) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0xf8, 0xfeffffff, 0xf8, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2000025a, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0) io_uring_enter(r4, 0x7437, 0xa526, 0x41, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r3, 0x3, 0x80000}) 7.352485466s ago: executing program 4 (id=1306): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x50, 0x4f, 0x46, 0x4f, 0x43, 0x43]}, 0x3b) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 7.35053077s ago: executing program 1 (id=1307): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f00001d2000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r2, &(0x7f0000001200), 0x0, 0x3f, 0x6a76) 6.916726185s ago: executing program 0 (id=1309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x200, 0xffffffff9673e35d]}}) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00198008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r9, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x6) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r9], &(0x7f0000000200), &(0x7f00000000c0)=[r10], &(0x7f0000000040), 0x0, 0x300}) r11 = syz_open_dev$sndpcmc(&(0x7f0000005280), 0x0, 0x0) readv(r11, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/225, 0xe1}, {0x0}], 0x2) socket(0x2a, 0x2, 0x0) 6.378180349s ago: executing program 4 (id=1310): syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@multicast1, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in=@remote}, @mark={0xc, 0x15, {0x4}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c"], 0x50}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6"], 0x9) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r5}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.188741309s ago: executing program 1 (id=1312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) r4 = dup(r1) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250f00000005002a000000000008003b00e6c5116c0800320000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x400c0c1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f00000000c0)={0x3}, 0x0) close(0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.892606094s ago: executing program 3 (id=1314): socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001a80)="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", 0x2a8}, {&(0x7f0000000140)}, {&(0x7f00000001c0)="dae5aed0b7bd7c895cb84ff6ba0bebd02e8e90297401cb42371d337194eaaf91dafcf8881cafe5b3f9b686f2bf3d1d0d74bd88121c711ecb65fa864c82e7698ac5726dfa239ec5fea18872002b78a5ce2af8813f74c784eaa2455f082e3fb27371bcc07d85da1b1c1a4b05040d8ef4eef0406155adf9ffa37f4c3a3daa10f7c8721599e6300dd9175e1e95", 0x8b}, {&(0x7f0000000540)="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", 0x14f}], 0x4, 0x0, 0x0, 0x4845}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000500)="b5098e839db47651c2a7f74b88fd64dcda97408c07f2b1065e19ce14a8216b33f94dae90e2dd7f38d5c54acf39", 0x2d}, {&(0x7f0000002980)="7b431428e3bac90d89decb731c4e2087aed7f19cb781d4b0437e63bd075a165bc92bcc64d25dbc49f4ed12f546364bfcca2d5af85c95b64b1128b29da38adfe7fe1159d84814df16608d39d9d15c215f5a55a909149d3510445977560792d4f4aa903de145b8c8a4310a5de21fc6e436d665f2df37ef4449a2d0bd5755154fc7da1798ac10c3b02ac27e18a19fa27f25c671c44f27b0fa3f931e8598251e0eac40b0c51ec00e0b5a782f3c47b5c9605fd52232e39cc167d12a9524c5117e048ff25091c48f898f3a66a0aad3aade5cf55ba085e9ed00b661b614c18ccf50989357ad8acdf7653860f30707ff7ac8afd74e9757bd12e20ece21a91ed3223716592339af043ddbdc23b72100877a497796b391ddfb58f094e06ca8738ec6f7c65f4fb2d687dfb78d27677d137666635dccc5ec01633164212a2b21e6bb6165682315d63ce7b855eea28505878de17df3884b36871334e785e84fa13f59b3405463841c6eb642a3f0d4b368e2f13261f99b925d71e5c867bedf92b5704971b7f6a32f689704c3fab1ad01fdb25db5e19b8d9d74ec3ea7b9fc38784c64fb8f36c321d860e6cdbea291861d8f940dd7f7366d75b402b86c0af1c89554624c4085d3b25692f8b0cc007a8d877634583fe90d6205560b48ce83ff44ac54fd6a9b44cae80ad9107867a4361d985880d4aeab62bac84cfa970d10a64a69c928e6b048c2d512a9176a3f2f13ec6cf4fc5ebaa4b5a962d5acc775acdc83473f49f77ae5dfa5aea25c3fecbb051f30f74c4a818a247c69dd35743c560950cf5ec99c74ca40386406790856e36a7f43fa368fdccc986171c4661ec4388dc368cfd5c00dafbe6ecc605e6bcdfef50fc61a145ba7d3c8023a75b92537165333521625ea4c48bcc3c75ec1444284b0b2cda5abb67fbdb4c0d08a60f3997946c2d5b39b56e795c89a9ef64d345287cf5cc6b1253558b0961e768169fa6af4b2d6e094e69c9facebe0fdb296487035af22d3f236821225bca917487130a0114a1c5d45cd896e8eb0e77a9e031b0c7fadc2c3c4f59c0c1a6a915acf29382961e4ca3c1ef0a6f3bd57a36b8d6bbaa6186b1f79a511deaf10a798f7448cb32ba7003d8290b90eddbf34a8f9f39a3c5105e74323f113f4d5d6da3a45348c4a40a31dbc34f2841c9b191d7b29f4ab2dd974b6fc58d65e436424a28ed0bcc48beb64b18c2962ce58c6f226bb9b21c8a3faa05b44e468564f0a85457100a95bb65c61de61b739a9da526e3317b410fd99dcc53ebab1668d8c4daa1582b0c9c2f3a864aedcd4b4600c1ce8e1c9970d711948871ccbc85c407cd4db1d14d02609821cd76f1ffe060bd876ac131a3be438ac9d5bc8663ec28618fd99477e3d6f975eaf2e1541d7433ba83909c8eb11ae4d342a51be4b1a10a2836b0a1c4e5c66dcaad408b8260f28c085d3d03b42f1409ce7dabae80159d12bc89d2a2acc576d45d7c597e10073dcf2516382c2fd2af0f559b4a63488b4b7e9f9f7ea213aff043c68c0514a9398215cae38a0bfe51455adf3ee76c1b614b4c733c8fdd3e6c8248bb83d7fbe1fc680bc0e8b27f9b538e72603bbfe511d8025c189fd7c9c899147e83e50d723a3842e5fd134e92af4145ce9487262810f5903842a6576eb9cf5ea843aefe5160d187a0201578de37a8829d119d613e4f2d70b433dd9b449528dfd2c3651d54b849b9d1d4e2b924ae9742f91d68011e7353a1261b3ac3eaf4e90f4096fc2f18f1b7d64acd361ba5c0fddffb3dae260e1e2e782faba65eeca997672a2e6ae701494ffb5678a1834a4ba44a99a2e31a4657ed8355e183569eeb1c45b3b06db8d90c896406dcb74890a277eedb5b50d74b9b5f3a95e0576202bda469c20966bfec392cd82405788a7d29bd8022048e76e130d588ebe68c9a33119b43d8ed654d341fdd4045abaf01fa03f7333de32d0a99e38c5d85e6b1e32bff1f9c59b52abbb3bd3ae3a339e483124957d2b843a44371b4795982235a80f247029a0a629ec901eb501dd201f4383f21490a0175eaea5e26ee477bd6725f91cb3364cb5bc7d879f0d55a5640a300070e57356a126d7ad1a2fecf2ed28d471044a93cfe6ee385e729e6fe3edb422df56635f8e8de63501ac40820af0fa7d773c0dd8a0f25b3e913db696478e17a346b761a6e88ceb6eca3cdcf140313b65364875e14e2bb706a1c46385e30ed4c449832996fd07d962a4f3cf8b1d586a64bc084897164b65e422b691f92e51980e3f0b3d8993d04ae72a4adda37005ac62a4f52e01b5adf5519f9423361813913904e6235a512568903cd59aceffccf8e41aecf7acb90ba4cab2a91114b729c2ede130eae1ef1f4ff8e043f08a97332b88696c239aba94448b8fcbb369f1465ad567f539c6d69495a0ad46336ac910e81d1769bb381c5855dd6dc5a9eea085498e1eaf549b5c5070bbcfa51f33162e6186cc8a012c5c95f2fefb509f5d4cc32112ff6618a77c185850b96ecca2f30d522b0d7c4b4ee4c87dcc4b0fc5ba840b478761f1c536aab9c96f228414c1da8468cbec98455fd31edec1b94fd77a0e8f5dcdaf20bca47325abc8eed7fe75e796ba137398141ea06dcacbf1c0703338f0b925c1cbe5484af02dc5c6059d13f4e9b686d9d882b02b7a7fbbfcbe49920bfa1ee0065f3ad79ce4de99b61e6d58943149fb27b6ab7f965801f621056bda3bca4182ef416ae5626e191983679cbb73bca0e219bb768601858a4ebc731172cbefbcd35a054525ba027cb29f9d2341275910fe0781a97654ade869e1ab1a38c4840008bd56ddef174f29fe7ca58b814d0ca47c4e10a81a36affb2bf7a2535967b47793ab61072db096d9291942e5377f816b31366f90b94ea504e86f6e6fa9c31251d61e220cec65427623afb9f33c78ec3141a3142712ec6736500e30d9ba25e4b4683cd20c9b01faf58bdce93cca673763ced1fab38c8b615d0a3b8c46e1639bb8996ad7f7a2ac86a2cb7731427a24326e3162cea4853ba62fbf027c9be5a20b8cfd3e3b7f6a3c16e84af8d8af8ac3476055287c40880353eb805e19a4506669f6937f514da88670baa5e9f1908833a62ffd8a38d88030c8533cd01561cb0c0bcbdfee574409574b6db49899168178775260c98907fad2af541c46c2d33c55b89215e42bdcfb9cbd3e253e7b791904bd681af4b50396fbbc19dca88dba42ab0ff985ac38f1983985a8db6fe72deb8d923de1ffcefbc1c2f52268f5ccabd77eda56d3266f35664ee346b22ea2d839baab2f693fd95b2945bb20e4e859a893c1c27b50f0f8af84625c2205f62d64efe8866b81f23efe6830f3f8f0dc7b47888d89496234eaa130a4e3b21678082e39efb6c7c516b625db6a2953edda3cecc7866cb9cf2227054e3e04155143173e766a0ad77995839b53881ad8a199d052be1920151075e521b3adaf1cd9575c8f8be7217c692b936fed15513bab665a25c979edccf0c86f8023715e8d19416e2855b5c391a5b870077083d6076972e22b227c975858bf0360a3deb1490a3ab31b676d9eb3bacc8faa72539db35f2aa956b5e4463f585c5f9a660514d69d4445492eff4bf2134122bff21dc3d3644e805af9db496598e645f4b5c43ea7c105180ed3308ed95e54d0e68914364c275d49db9dbdbab4edbf1cc972786fba9c8a74daf59f653ec9609912e6335e8819a84987cba45f1a16e2fa6cafff0a1d1133c2b2c709f8ba80d1c5a4efd5a9cc2285e8b1f14c408ce5e722a28b1de14c02a7cd7865b3b7ae5de34a39f1b5755423821cd1635a1f73134ba21f9c4d7ea6b48bd59abaf57cefe70a2871ac150bb958659d3df326a0bbe74122351b74b81cb3dda8d449fbe71e2ebe6cf5bbcaa01d9096dd53cb6142c0d0e137db43876c20ff41226cef69dcec80d5008c64f7c931a724df0481d06331320b193831e30d439d51bb32895c1343c99035e0ca2e5850a6b2a5115639cb2be06a852c163e8a786cfd6501d3712daa2e21ed3fc765185aee84d855638bc3a4bd8931cb8346525c8ba3d762e05b26d5a8a2c3b2c42f914b622a45b6860599ebeb0251314c6bdc3af801d635155de1401ae5debc2ea4217312dedf9931a160cce1f0062cf2d31c5cfbc55e226b9d7ca9cbbf424be7473dc6355b50613a272e089f5593cf9c4ed77b4b51e60cbaeac5a066524a0a508f466f822fd25d27433fdf24d1ac581690c721326094d72ca9ee66d19d67fda045c7a6f7efc96f5bb6b5b74156c4bb34bfe0f261a8d453bdd638bc56547c8b635d5f0eb9cf94e086107eed6265f6b33a1314a38903b46aeba24dcd5cc67b064d821eb9a9f77684ac7628030b3911595129bc729214dafbc619cb71e35171f5b0ed45f3eb4e29877e6bc9866a3182911e79ae2395a29f40c3023f7e704d33a41f20fab28735fa8d47269a7e31073d2ab7d8062e8fa77373b6d1f7ac2c0ec1434f103f4089795cd0115fc27a275fda94806c4ce3782bedb2cac07bbe20b1d69040292043ba44a0fbdf26516969e888b5c45701da50a9364500a066f86839687903fad7f12495d9b1b11a04dc8260befa0a5bac58a345e2996720febfb0e9769c2ebf5de9a71b1286236d35d34ef33ff31b8291ca4dc4682f221364129b8c90b670aa1403747d7937addc4a4b08f87318d9e20313998f694fd5030065f88bd7a2c945cd6c082640a7918c5d340f7ffb967a059fd29651ccc07f949557c2782fcc23f1464c086f68a65c09da9b521b2cb57d1c0e44350dbb19f15a584a5b6abee689e8ab554874a6211126347289898665872c649703426783ea5a69640f67e708581029ace035b9c9ac82fcd817b23ad882d988ab3eee7b2f413e09f09b159fa1f999c73a675180503e8e643948527d5ad79286abe791a7805705fbf90c2d9b4ce555a264049560bc4b9a8c51fab96ab4e5df34d0f3facaee0e925b1fc1611cec9f2ccebf3782de133bc7ecdfafb715696f4a1c58ae053d7d239f160092903f273b5948c6269d26a356511b04682e5b2c0548255f555b8a3422737db09d5303c4a81f5186436bec919215e22437a4e3ed33906700cd9dfd6d507ff22ed1767d9cdc41ab96c160c12776354bd6ad8733648c03e3a7f4ddc2267d94c631efcea69012dc2ac814caed422a6f48bab0521ef8fa9d8b3458fcde92c35ef49138048fd4e7a6e50e8e79c614fa135e749e20c038311482bbc1bb3080e378f3e02989a8ebc6c7cd73fa6876f99a0bc574221ea7bd1aa7bd5cdc069243537e0cd4867bf69c7ad1450de0e11fefa6f1832d0149575225eb84320c7808178e4247b860bcfdb9c4241fbe494fcadc4ed10d827e9cf59d59eb0f47ea2435a9d3b6860d9186485593908ed69d4e011da4750980e91b46037f3c3398705ce32643bd49833dd0a85e27dc3a49f52e0d3b4e275000105c4d0d1f5578f5cb250453b291d4930ead4012ad907a0e1cdf2321da86524022116a981e6d0cf95b2a8fe33adb48e6623e3da30ea10758256e147003c7e0ce2963e77f7216efc3577e19c3452bd4404588f5e73ec70a945a99a36f1e21930310349b0ad986787c5f5a3946a8906a21edcdece42a78618b2a2a628c89be1345fb563e2507d40c0281b6816753f35520dee00430a6c5fc05d18228a36a88f1955d0de07dc9df69494f4864094a0f569294e852b0634e986567c541b5998b1b5e6a9b957f934dd05eacc47e0c1a57c1a8981e3dee36212577986b75743737efce5f0ee01fe8193b756845cf58229f6f16ad84682c5921a1382ed0192ec1cf0f433da8858d", 0x1000}, {&(0x7f0000001540)="2d44bf1d1cceaa4612612c48ec3aee14af78aa393f1b9e70844a2316b05dc9e928145a5d47c0f187e5d16239a5f26734329781cde63456dfb015be6a42ec33015db4b0a337e480777e222d288f9fc49d322e440facd8274f0be529752878a5c8d7315806f4ee1150647a8dd1774c851d3adc2082b07bf46618a9203179e80e1f5668ed50df2150ef0314a2e65101319c20cd6ef8acd79cad0672fdd9ffce31fa5501b015eb025f192a9aede1c8", 0xad}, {&(0x7f0000001600)="f7c2165c5f1da984f4b3552183c4e60a5a209845252d8d6b45e713865b4760c1cac623bd1917e0cce3c73fdb5896f37e017e2bafc8f3430c764a56ab5bf12e261c568734754aa6cd706005d78e17dd54adb036e7a77108886f003b624ab25d1af67c0f9b6beddb2dc5ae57caa2d84935ffd3ad530df6a2ac010b9279a940eca08777157701bdca7170011865b8e226ffa48f7ba811a37dda1c81bd1d921f267df68cc1ecf25f348087da6f3b47e517b969583397c13dadba5eb9253c23b9f2b4e4b75579e17a41517276e426f0e5587f78646c04bc8bc3dac956e6c43f1af06745c57d5e53a6011e1867fb2259", 0xed}, {&(0x7f0000001700)="f39ee7323dd7abdcf38e68e517c7d9c654eea51f340d95622a5f36f7bb4f9c2b4d52fc5d05ef88ca71c19f394cfb267135848225cee341d2679b25388e3053634280488b110c6d01abc4cc6f821e93f84f84a6ce1951e4d969832ad3743b5a777665bb917e85a0396259b2b53addb042bc72f2eb81328c67f30a95bbf59782bcc7bbfb1bb6c3ae84c5e3eb4600c3fdc0ce6a49228a45e5700c10ecb262c37c6208cc476e99a02ce11ff46944bfda835e2d75a8a969e1b2c117c4064b5aefcc54c2b6aaddba9ca547e1b4235c7535fac731139273b360ae320582d0d69aeca21bc93e149d3ad2012722d5b08a1957198b17fa325239", 0xf5}], 0x5, &(0x7f0000001900)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r0, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r0, r0, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x3c, 0x1, 0x1, [r2, r3, r3, r1, r1, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x160, 0x10}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001e40)="a86ee4c576552cae58d99c0e823c6984cf08b92feea85ab015bcda21d1d4733d61e83f7c18b58ef7964a4b603c7f138e40a5", 0x32}], 0x1, &(0x7f0000009700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}], 0x108, 0x4000}}, {{&(0x7f0000004b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005e00)=[{&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000005c00)="dfc2af2dd393d7e6ff8b68aeb5c440061be1cf3374367c3b50b2e263cc0c0fa077afece8923b107b6b0112efa825b905039b51ac71ffdee50b77b22a96bb5aa83da9000dd38a44427b72d2b0f2ab86787a6c69eced0d1520220283ba4e9569cbd71bad5c6fc2bd5e5fa513f2d52242d5eddc6018df423bd254edf3e5a6d8dd007ce22bfe53881cb2eba6e1021aba9e4d56cb82e1ae410b33387eacbf151486ab235cb96ceeed307d65923ba0c0356365b0e1079cc5044fa8f3b0b25ca45297dc319b2d", 0xc3}, {&(0x7f0000005d00)="b2094a6331ccc6bb754468ae5cbfdaafc746ce50b1aa3e4d129f7b92d11b77b7e1860b78003adb5718b58de7a96de5cae10843596534c932eac7ad8ea12ef39813221958415efb2584eba77f076804724c21594b89f91b3cf38b295059da09425205a174c35d04d7619c3c9e6823637521253c7088c6a8382fb1840ef2f12e4c59c474a650ebab87291fd80e41738c6821e484fc06d35a7b03aa254e9aeb6f644c2c42589b581da37feef7bab8002d96cedc6237e91b80ab6ac2f76ef24505760ef257b60a67df9bfd1bf8ddf8b063b68d29e1acc17b1be857fd2fe9857a2506d7be1b0696040002a0c4c5e22204c576e99b5325aeb5a0", 0xf7}], 0x3, &(0x7f0000005e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x40, 0x9}}, {{&(0x7f0000005e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007180)=[{&(0x7f0000005f00)="66e434ca8b464b918b5ded450453b8074359f6874f6377f2d2fdb352b9be637d8bd56991405bbfe46a9115937c9d3020c59439cd1c082e4b09e1883c1507634f2070ecabbc979b821e8bf5810e21eba09ddf24bb68652c43f69ee4a34a3c3d1139de752691413ab16e5d481b6445e45c1a6909e1a02339443bc5f9eacb3ba8f9089cb35db327a260", 0x88}, {&(0x7f0000005fc0)="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", 0x1000}, {&(0x7f0000006fc0)="52ab018fbd49ed3a5eab1e21a4bcf2819dc8273114c52b445220e12da37ad891949f03a12cdeff1cdd1c64c5e8bad72fa8675bf74ba8f350481d12fbc4267deff49e2458bc20b11e5b74918e736df69a5887e49366d0e07ea723fb839f4f259f51da5460f4520b03722c3b75998bedc7cf2c8c99c9a690697dcc40eb8b9ed55d82acac39a0d59edc4599b2ba36b4ca0525966dc261a42232cc57976b02b240e6df6e157d13b873073addbaa2", 0xac}, {&(0x7f0000007080)="13cb3e0e959d2703020b9bfaf525cb63f4df268fbec549552b7b8a09bc6eac63798f45f4add72a16f6d1401e3b63d5a513ea85b172331df3ea148a256070de616d1afd5db978b4864f5afc11347432bc90a9af59c002a152f772937bb7db457b9708bd04d78db885", 0x68}, {&(0x7f0000007100)="c1f815b02aa45a5c0a4df2dd68f2aebdae360ee9c41a6df4acaca3906781ea8f32ad444b9f123aa602b27ad790831c20afbf7fa985e493327cef34f93c39ef30922d", 0x42}], 0x5, &(0x7f0000007300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x98, 0x4004008}}], 0x5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r6, &(0x7f00000000c0)=0x5, 0x12) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="f7ffffff1d00010125ad7000fcffffff07f3000078ffad97e0bbf86e6e8a0e1e6158b1c55ec2ed76b74273fd22aa1576b9b8f10ffa8a27fdd734cda695a30963cab83931116b1a23cd82097caac1c16b7f52e0b88c7ae3665be5fbc2de6a5e8c99321e7c3f74a0028c5bf58537d685dfeab4708e87d31d89842e3bee44a73f031ebc1f4f8d7b0c2afbb28f5d5e8db703675642bdf6ddf588f11e3d88ce8b938641501029e58a873545e57f41e821765de49078d1521d0da90d0cfbb94692b82d5d29e73bd483f46ec3fea513f7239964f87d074df8d8fc06dca1125c6f54dc1eecf367306225e5d7cd"], 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) 5.861157233s ago: executing program 1 (id=1315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3, 0xff}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@empty, 0x8000}, {@private}]}]}}}}}}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x90) fchdir(r3) open(&(0x7f0000000100)='./bus\x00', 0x1031c2, 0x20) set_mempolicy(0x1, &(0x7f0000001880)=0x8, 0xff) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_clone3(0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x50, 0x7f, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7f, 0xe6, 0x4, 0x8, 0x9}, 0xc2, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4, [{0x50, &(0x7f0000000100)=ANY=[@ANYBLOB="50039d11d8bf688a824de8505a744b0567f4c5ea7920c34e4156a71ffee5234e201adc70567ae1d2b7cff8d6d44cb96202c6bbe5b502fec7ff0c0b62"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x457}}, {0xcc, &(0x7f00000005c0)=@string={0xcc, 0x3, "7c093f5488dedd7eb4d72a6c0caccc0cfc55b2543d428bfe0f93ca0212787467cb185804c4df743c047aa4266ba9ee5576ee1cd3a80393b910865491d9a5696765f71ebca0ee3b1319987e98ede286bf110c6e0f3777aced1b91e7f82af99811766665467678dcce4b8c08b1bd2e265f7ace771aec82c835b7e1f1b6045b784d95955246baac781cc06c0a29f41e42b98f4d5eaa0de35a1671a75a95d54f6941c713510319943b1278f804fcf2d2b860bd106170c79c99d3a63fd3f3fe43ceb5e4dc3429159af3e649af"}}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r8, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xe}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x4001) 5.756145165s ago: executing program 3 (id=1316): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast1}, &(0x7f00000002c0)=0xc) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff6b, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$radio(0x0, 0x2, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1}) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x7}, {0x1, @svalue=0x7ffc}, {0x1, @svalue=0xfffffffffffffffe}]}, 0x4}, {0x2, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x31, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {}, {0x3, @uvalue=0x3}, {0x0, @svalue=0x50}]}, 0xe6}]}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 5.752817338s ago: executing program 0 (id=1317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) (async) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f021}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f021}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000040)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@\xe7\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbe\xf7\xa7N\xf5L.d9\xc3t\x8b]YA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\xfe\x0e1\x9f\xd2\xb2\x81?\x04\x0e\x9a]\x85z\xf4\x7f\x92\xb8\xef\x97a\x86\x17JG2e\x81\x8e\t:\x10\xaf{\xd6b\xceX\xaeb\xf4\x92\xc4m\x02\xef\xe8\'.0h\xcd\xdb\xee\x10\\\xdb\xa8\x86\x83~j\xabTy\xfe\x90a\xae \xe5\xa63\x12\x10\xfdu\x8ey\x9a\x0e\xcd\xf5\xe8y\xd4\xc5\x99\xf6\x93\x1f\x19\x16w\b9\x0fq\xa6 \x0f\xa5{c\x18\x15\x973', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b6f, 0x30, r4, 0xffffe000) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) r8 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000500, r9, &(0x7f0000000580)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x8040600) ioctl$KVM_RUN(r7, 0xae80, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, 0x0) socket$key(0xf, 0x3, 0x2) 5.58660584s ago: executing program 4 (id=1318): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "521299a432289bea0a363e238732fea53f5db534deca9d0418026c1f265e"}, 0x29) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000000006", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 5.329870433s ago: executing program 4 (id=1319): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0xe74, 0x0, 0x6, 0x200000000002, 0x4000000006, 0x8, 0x5}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r4, 0x0, 0x0, 0x78f2a36b) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 4.489487316s ago: executing program 0 (id=1320): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000000000000000800010001000000bed581239ddb7b59b6006b96692ca4ac075f0000000000c22bcc889a71712c58c5c7daeb4b4383f06d304b44105208f4e271b294949b31e831f90798c86316a5763392d61512dc1d0d52944e199d47b0955a69f19217537c328bad327e354475367ef42cdd729219884106eef63d7541a4ed2ea1b990dba493950599796e40aaca4deed25528087336f78be9fbe13568f2cdb6ca0e7459b8c3ca2cf501000100f11fa66bd3c4964a01924b071d9dfcec1335ddd18579800e32cb6d472f7436b0445748a8fdfd4d6d296b0510d6c6b112dc363f13b4e86253d088f34e64aa85368c"], 0x20}}, 0x4000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xfffffffffffffffa, 0x4, 0x0, 0x80008, 0xffffffff}, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e1f, @multicast2}, 0x10) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000240)=0x120000, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000440)='encrypted\x00', &(0x7f00000001c0), &(0x7f0000000400)="c3f23e032043d6970aacc9923498bdf7e2f91107", 0x14, 0xfffffffffffffffe) getpgid(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x800}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "ffffffffffffffff", "c52eee4199babfc0f8fc09b69a8d0f00005e35dca46a0ca7096be938ffc600", "715d70a4", "a66abe38fdd95990"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 4.274112076s ago: executing program 2 (id=1321): ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40c100, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40c100, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048aec8, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x2, 0x5, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x4, 0x3, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) 3.98612986s ago: executing program 2 (id=1322): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f00001d2000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r2, &(0x7f0000001200), 0x0, 0x3f, 0x6a76) 3.358799838s ago: executing program 4 (id=1323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xd4, 0x7, 0xcd, '\x00', 0x25}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f20"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 3.02255461s ago: executing program 0 (id=1324): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000004006201801000000000001090224000100000000090400000103000000092100000001220700090581"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) (async, rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) (async, rerun: 64) pipe2$9p(0x0, 0x4000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = dup(r5) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r7, 0x200004) (async) sendfile(r6, r7, 0x0, 0x80001d00c0d1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.979907233s ago: executing program 2 (id=1325): r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000674000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_setup(0x7676, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1800001, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r5, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r7 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) sendfile(r7, r7, 0x0, 0xffffffff) ioctl$KVM_CAP_HYPERV_SEND_IPI(r7, 0x4068aea3, &(0x7f0000000200)) r8 = syz_pidfd_open(0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) process_madvise(r8, &(0x7f00000007c0)=[{&(0x7f0000000480)="ab1d3c56054b1efc90bf54d80859b679851088dbc17787ed192898b3fe5e5d3effecfd3b5fc248f1bb62f468b468681b1c1197a91cf9e9601b5cc8477a9a1609359d4a6c717ef0848ed05f85a4447d08b880e1a61c30a4caafe8994d258052eae56b6afd", 0x64}, {&(0x7f0000000640)}, {0x0}, {0x0}, {&(0x7f00000001c0)="e86dbd7e1761e27592d1d2d21ef9764887cc1c22945802067181775dcca407071083ddbee2", 0x25}], 0x5, 0xc, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0xfc63060b85f2d3c1}, 0x0) 2.715924273s ago: executing program 3 (id=1326): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) close(0x3) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="9de8dac4a100", 'ip6gre0\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xc0, 0x0, 0xfffffffffffffffc, [{{0x3, 0x0, 0x80000000, 0x8000000000000001, 0x0, 0x6, {0x0, 0xa, 0x8, 0xed6, 0xfa91, 0x7fffffff, 0x8, 0x4, 0x8, 0xc000, 0x7, r4, r5, 0xbf83, 0x7}}, {0x1, 0x10, 0x13, 0x0, 'cgroup.controllers\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'lo\x00'}}, 0x1e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0x4}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) close(r1) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0xffffffffffffffb9, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000000000000000009f000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400800000054400000700000008000a4000000000090002007379000000080005400000000d08000640ffffff02080003400000000c2c1bca0e15977f578809863473b1d5a44ee119a1b681e48d711009000000000000001f60669a82f9fc6113774839628439e03daaacf6c4880283afe1f64fd8a32b4265b01152595b96a16e41fa2f4e17d819d3c99a6f0aa05843365be88ff9e2df6738d3fdad"], 0xc0}}, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) read$char_usb(r12, 0x0, 0x0) 1.656276221s ago: executing program 0 (id=1327): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x17, r1, 0x1, 0x40, 0x6, @broadcast}, 0x14) syz_clone3(&(0x7f0000000540)={0x20000, &(0x7f0000000080), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x3e}, &(0x7f0000000300)=""/239, 0xef, &(0x7f0000000400)=""/216, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x61) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x5, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x402, 0x80, 0x0, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.655545652s ago: executing program 1 (id=1328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1056) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x12, '\x00', @data=0x80, 0x4}, {0x2, '\x00', @st={0x4, [{0x2, @uvalue=0x101}, {0x1, @uvalue=0x40}, {0x1, @uvalue=0x2}, {0x0, @svalue=0x7}]}, 0x9}, {0x22, '\x00', @st={0x4, [{0x2, @svalue=0x4}, {0x0, @uvalue=0xffffffffffffffff}, {0x0, @uvalue=0x3}, {0x1, @uvalue=0x4}]}, 0xe6}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x2324e5) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) 1.371735196s ago: executing program 3 (id=1329): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "521299a432289bea0a363e238732fea53f5db534deca9d0418026c1f265e"}, 0x29) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000000007", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 930.173329ms ago: executing program 3 (id=1330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x4, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c211513e897c3aa100", '\x00', "00000000000000000100"]}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000002480), 0x0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 928.215687ms ago: executing program 2 (id=1331): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x88c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000007a3100000000050004000000000011637a117a6173683a6e65742c6e65740000000005000500020000000400010006000000"], 0x4c}}, 0x4000000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) r3 = io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r5}}, 0x30) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r6, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r8 = dup3(r3, r0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@jmp={0x5, 0x1, 0x8, 0x3, 0x3, 0x80, 0x4}, @map_fd={0x18, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x40, 0x17, &(0x7f0000000500)=""/23, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x1, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r8], &(0x7f0000000680)=[{0x0, 0x5, 0xb, 0x2}, {0x5, 0x3, 0x7, 0x2}, {0x5, 0x4, 0x9, 0x2}, {0x5, 0x2, 0x0, 0xa}, {0x0, 0x4, 0xa, 0x3}, {0x4, 0x3, 0xc, 0x3}], 0x10, 0x7}, 0x94) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=@fragment={0x0, 0x0, 0x3c, 0x0, 0x0, 0xd, 0x66}, 0x8) close_range(r7, 0xffffffffffffffff, 0x0) 550.988167ms ago: executing program 0 (id=1332): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) writev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="a1", 0x1}], 0x1) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x1000000000000000) fcntl$setpipe(r2, 0x407, 0x100000) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4083, 0xff3}], 0x1}, 0xfffffff7}], 0x1, 0x102, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000380)) 0s ago: executing program 3 (id=1333): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0xe74, 0x0, 0x6, 0x200000000002, 0x4000000006, 0x8, 0x5}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r4, 0x0, 0x0, 0x78f2a36b) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.0.814'. [ 253.930991][ T9004] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 254.905255][ T5928] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 255.057423][ T5928] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 255.066894][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.100851][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.143623][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.169200][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.178514][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.190585][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.202849][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.227557][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.242083][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.256729][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.269752][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.283755][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.291746][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.300927][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.312052][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.626239][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.641197][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.659757][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.666213][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.672712][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.682462][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.701060][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.781715][ T5878] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 255.801240][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.872397][ T1209] usb 1-1: string descriptor 0 read error: -71 [ 255.918502][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.969495][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.988193][ T1209] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 256.049332][ T1209] usb 1-1: USB disconnect, device number 45 [ 256.055378][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.065285][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 256.167625][ T5878] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 256.178721][ T5878] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 256.191072][ T5928] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 256.202302][ T5928] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 256.211255][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 256.221346][ T5928] usb 2-1: Product: syz [ 256.230552][ T5878] usb 3-1: config 1 has no interface number 0 [ 256.232116][ T9027] loop8: detected capacity change from 0 to 7 [ 256.236810][ T5928] usb 2-1: Manufacturer: syz [ 256.247798][ T5824] Dev loop8: unable to read RDB block 7 [ 256.253463][ T5824] loop8: unable to read partition table [ 256.266920][ T5824] loop8: partition table beyond EOD, truncated [ 256.273675][ T5878] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.286769][ T9027] Dev loop8: unable to read RDB block 7 [ 256.292362][ T9027] loop8: unable to read partition table [ 256.298243][ T5928] usb 2-1: SerialNumber: syz [ 256.305503][ T9027] loop8: partition table beyond EOD, truncated [ 256.315242][ T5878] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 256.315633][ T9027] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 256.354638][ T5928] usb 2-1: config 0 descriptor?? [ 256.382427][ T5928] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 256.396353][ T5878] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 256.449760][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.533370][ T5878] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 256.655469][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 256.660809][ T5907] usb 2-1: USB disconnect, device number 46 [ 256.679827][ T5907] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 256.836712][ T5878] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 256.859466][ T9008] netlink: 48 bytes leftover after parsing attributes in process `syz.1.826'. [ 257.001293][ T9029] syzkaller0: entered promiscuous mode [ 257.020002][ T9029] syzkaller0: entered allmulticast mode [ 257.065461][ T796] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 257.200672][ T796] usb 1-1: device descriptor read/64, error -71 [ 257.252941][ T91] usb 3-1: USB disconnect, device number 51 [ 257.260218][ T91] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 257.432350][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 257.460940][ T796] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 257.506812][ T9043] delete_channel: no stack [ 257.655751][ T796] usb 1-1: device descriptor read/64, error -71 [ 257.815621][ T796] usb usb1-port1: attempt power cycle [ 258.175290][ T796] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 258.218046][ T796] usb 1-1: device descriptor read/8, error -71 [ 258.493213][ T796] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 258.501041][ T91] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 258.579437][ T796] usb 1-1: device descriptor read/8, error -71 [ 258.682497][ T91] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 258.690699][ T91] usb 3-1: config 1 has no interface number 0 [ 258.702978][ T91] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 258.715427][ T796] usb usb1-port1: unable to enumerate USB device [ 258.724386][ T91] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 258.734858][ T91] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.763974][ T91] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 258.782432][ T91] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.790848][ T91] usb 3-1: Product: syz [ 258.795038][ T91] usb 3-1: Manufacturer: syz [ 258.800208][ T91] usb 3-1: SerialNumber: syz [ 258.834650][ T9053] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 258.853652][ T91] usb 3-1: Expected 3 endpoints, found: 2 [ 259.140660][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.150924][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.121358][ T9067] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.287168][ T9051] tipc: Enabling of bearer rejected, failed to enable media [ 260.374907][ T9072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.382119][ T9074] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.392738][ T9074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.400069][ T9074] IPv6: NLM_F_CREATE should be set when creating new route [ 260.403470][ T9067] bond2: option ad_select: invalid value (253) [ 260.415807][ T9067] bond2 (unregistering): Released all slaves [ 260.573169][ T9080] loop2: detected capacity change from 0 to 7 [ 260.587372][ T9080] Dev loop2: unable to read RDB block 7 [ 260.593174][ T9080] loop2: unable to read partition table [ 260.600452][ T9080] loop2: partition table beyond EOD, truncated [ 260.607354][ T9080] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 260.765521][ T5878] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 260.895263][ T5878] usb 2-1: device descriptor read/64, error -71 [ 261.065335][ T796] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 261.069171][ T5928] usb 3-1: USB disconnect, device number 52 [ 261.135313][ T5878] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 261.275265][ T5878] usb 2-1: device descriptor read/64, error -71 [ 261.281251][ T796] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.305914][ T796] usb 5-1: config 13 has an invalid interface number: 50 but max is 3 [ 261.319178][ T796] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 261.344091][ T796] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 261.364379][ T796] usb 5-1: config 13 has no interface number 0 [ 261.379169][ T796] usb 5-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 261.396433][ T5878] usb usb2-port1: attempt power cycle [ 261.412008][ T796] usb 5-1: config 13 interface 50 has no altsetting 0 [ 261.442968][ T796] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 261.452846][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.473183][ T796] usb 5-1: Product: syz [ 261.492687][ T796] usb 5-1: Manufacturer: syz [ 261.502801][ T796] usb 5-1: SerialNumber: syz [ 261.566483][ T9090] loop8: detected capacity change from 0 to 7 [ 261.583912][ T9090] Dev loop8: unable to read RDB block 7 [ 261.600168][ T9090] loop8: unable to read partition table [ 261.710035][ T9090] loop8: partition table beyond EOD, truncated [ 261.718237][ T9090] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 261.933364][ T9092] syzkaller0: entered promiscuous mode [ 261.939906][ T9092] syzkaller0: entered allmulticast mode [ 261.964297][ T9092] tipc: Started in network mode [ 261.969830][ T9092] tipc: Node identity 06b7bf51a035, cluster identity 4711 [ 261.980076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.989288][ T9092] tipc: Enabled bearer , priority 0 [ 261.998833][ T9091] tipc: Resetting bearer [ 262.015252][ T5878] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 262.054678][ T9091] tipc: Disabling bearer [ 262.056005][ T5878] usb 2-1: device descriptor read/8, error -71 [ 262.363792][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.374802][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.385830][ T5878] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 262.436492][ T5878] usb 2-1: device descriptor read/8, error -71 [ 262.545499][ T5878] usb usb2-port1: unable to enumerate USB device [ 262.721162][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.854'. [ 262.761267][ T9103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.854'. [ 262.776641][ T9103] syzkaller0: entered promiscuous mode [ 262.782383][ T9103] syzkaller0: entered allmulticast mode [ 263.543300][ T9109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.711918][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 263.882378][ T6671] usb 5-1: Failed to submit usb control message: -71 [ 263.890316][ T796] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 263.924930][ T6671] usb 5-1: unable to send the bmi data to the device: -71 [ 263.950944][ T6671] usb 5-1: unable to get target info from device [ 264.008194][ T796] usb 5-1: USB disconnect, device number 43 [ 264.014724][ T9125] netlink: 'syz.2.860': attribute type 3 has an invalid length. [ 264.025855][ T6671] usb 5-1: could not get target info (-71) [ 264.042347][ T6671] usb 5-1: could not probe fw (-71) [ 264.075649][ T9127] loop8: detected capacity change from 0 to 7 [ 264.096748][ T9127] Dev loop8: unable to read RDB block 7 [ 264.106879][ T9127] loop8: unable to read partition table [ 264.134559][ T9127] loop8: partition table beyond EOD, truncated [ 264.149954][ T9127] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 264.249592][ T9131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.256891][ T9131] IPv6: NLM_F_CREATE should be set when creating new route [ 264.349285][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.860'. [ 264.395323][ T5907] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 264.566121][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 264.572739][ T5907] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 264.581624][ T5907] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 264.590508][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 264.599655][ T5907] usb 1-1: config 1 has no interface number 0 [ 264.611024][ T5907] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.622018][ T5907] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 264.636110][ T5907] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 264.645974][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=228 [ 264.654156][ T5907] usb 1-1: SerialNumber: syz [ 264.666858][ T5907] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 264.715340][ T796] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 264.886692][ T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.897025][ T796] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 264.906106][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.917049][ T796] usb 3-1: config 0 descriptor?? [ 264.924399][ T796] pwc: Askey VC010 type 2 USB webcam detected. [ 265.230913][ T5907] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 265.297120][ T9148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.304412][ T9148] IPv6: NLM_F_CREATE should be set when creating new route [ 265.335205][ T796] pwc: recv_control_msg error -32 req 02 val 2b00 [ 265.355255][ T796] pwc: recv_control_msg error -32 req 02 val 2700 [ 265.366983][ T796] pwc: recv_control_msg error -32 req 02 val 2c00 [ 265.374857][ T796] pwc: recv_control_msg error -32 req 04 val 1000 [ 265.386425][ T796] pwc: recv_control_msg error -32 req 04 val 1300 [ 265.466870][ T9155] misc userio: No port type given on /dev/userio [ 265.615559][ T5878] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 265.631940][ T796] pwc: recv_control_msg error -71 req 04 val 1400 [ 265.642820][ T796] pwc: recv_control_msg error -71 req 02 val 2000 [ 265.650910][ T796] pwc: recv_control_msg error -71 req 02 val 2100 [ 265.662459][ T796] pwc: recv_control_msg error -71 req 04 val 1500 [ 265.675657][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 265.693379][ T796] pwc: recv_control_msg error -71 req 02 val 2500 [ 265.701380][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 265.710724][ T9129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.726501][ T796] pwc: recv_control_msg error -71 req 02 val 2400 [ 265.733537][ T796] pwc: recv_control_msg error -71 req 02 val 2600 [ 265.741756][ T796] pwc: recv_control_msg error -71 req 02 val 2900 [ 265.749932][ T796] pwc: recv_control_msg error -71 req 02 val 2800 [ 265.770714][ T796] pwc: recv_control_msg error -71 req 04 val 1100 [ 265.780890][ T796] pwc: recv_control_msg error -71 req 04 val 1200 [ 265.790743][ T796] pwc: Registered as video103. [ 265.805888][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 265.806622][ T796] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 265.811188][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.873758][ T5878] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 265.880666][ T796] usb 3-1: USB disconnect, device number 53 [ 265.891570][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.912537][ T5878] usb 5-1: Product: syz [ 265.921631][ T5878] usb 5-1: Manufacturer: syz [ 265.921960][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.935373][ T5821] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 265.943856][ T5878] usb 5-1: SerialNumber: syz [ 265.972040][ T5878] usb 5-1: config 0 descriptor?? [ 266.106232][ T91] usb 1-1: USB disconnect, device number 50 [ 266.106376][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 266.113835][ T91] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 266.128747][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.148292][ T5821] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 266.159679][ T5821] usb 2-1: New USB device found, idVendor=0df6, idProduct=003d, bcdDevice=65.d5 [ 266.168999][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.185278][ T5821] usb 2-1: Product: syz [ 266.195102][ T5821] usb 2-1: SerialNumber: syz [ 266.201620][ T5878] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 266.234970][ T5821] usb 2-1: config 0 descriptor?? [ 266.456466][ T5821] usb 2-1: USB disconnect, device number 51 [ 266.598475][ T9168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.605771][ T9168] IPv6: NLM_F_CREATE should be set when creating new route [ 266.617420][ T9167] loop8: detected capacity change from 0 to 7 [ 266.624301][ T9167] Dev loop8: unable to read RDB block 7 [ 266.630429][ T9167] loop8: unable to read partition table [ 266.636510][ T9167] loop8: partition table beyond EOD, truncated [ 266.666935][ T9167] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 266.997260][ T5878] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 267.015107][ T5878] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 267.038703][ T5878] usb 5-1: USB disconnect, device number 44 [ 267.065021][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.875'. [ 267.076594][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.875'. [ 267.088519][ T9176] syzkaller0: entered promiscuous mode [ 267.094005][ T9176] syzkaller0: entered allmulticast mode [ 267.555228][ T796] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 267.578637][ T9194] loop8: detected capacity change from 0 to 7 [ 267.586413][ T5824] Dev loop8: unable to read RDB block 7 [ 267.592072][ T5824] loop8: unable to read partition table [ 267.600107][ T5824] loop8: partition table beyond EOD, truncated [ 267.608836][ T9194] Dev loop8: unable to read RDB block 7 [ 267.614455][ T9194] loop8: unable to read partition table [ 267.620680][ T9194] loop8: partition table beyond EOD, truncated [ 267.634486][ T9194] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 267.725246][ T796] usb 2-1: device descriptor read/64, error -71 [ 267.839300][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.856082][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.035286][ T796] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 268.251537][ T5892] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 268.295229][ T5821] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 268.315214][ T796] usb 2-1: device descriptor read/64, error -71 [ 268.449848][ T796] usb usb2-port1: attempt power cycle [ 268.457357][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 268.463979][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.465232][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 268.485411][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.503600][ T9207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.511236][ T5892] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 268.516612][ T5821] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 268.520655][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.568181][ T5821] usb 1-1: can't read configurations, error -61 [ 268.583501][ T5892] usb 3-1: config 0 descriptor?? [ 268.618299][ T5892] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 268.745324][ T5821] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 268.815746][ T796] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 268.846845][ T796] usb 2-1: device descriptor read/8, error -71 [ 268.865391][ T9215] loop8: detected capacity change from 0 to 7 [ 268.875022][ T9215] Dev loop8: unable to read RDB block 7 [ 268.881427][ T9215] loop8: unable to read partition table [ 268.888660][ T9215] loop8: partition table beyond EOD, truncated [ 268.894970][ T9215] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 268.929024][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 268.964136][ T5821] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 269.040113][ T5821] usb 1-1: can't read configurations, error -61 [ 269.067776][ T5821] usb usb1-port1: attempt power cycle [ 269.105899][ T796] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 269.206518][ T796] usb 2-1: device descriptor read/8, error -71 [ 269.365588][ T796] usb usb2-port1: unable to enumerate USB device [ 269.445263][ T5821] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 269.465990][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 269.473011][ T5821] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 269.483649][ T9222] netlink: 148 bytes leftover after parsing attributes in process `syz.4.888'. [ 269.507807][ T5821] usb 1-1: can't read configurations, error -61 [ 269.655291][ T5821] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 269.687825][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 269.820311][ T5821] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 269.868714][ T5821] usb 1-1: can't read configurations, error -61 [ 269.877161][ T5821] usb usb1-port1: unable to enumerate USB device [ 270.225953][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 270.225971][ T29] audit: type=1326 audit(1775446811.156:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9224 comm="syz.1.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa42059c819 code=0x0 [ 270.762682][ T9228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.769970][ T9228] IPv6: NLM_F_CREATE should be set when creating new route [ 271.001750][ T5892] usb 3-1: USB disconnect, device number 54 [ 271.296607][ T9246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.303877][ T9246] IPv6: NLM_F_CREATE should be set when creating new route [ 271.465231][ T796] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 271.585230][ T91] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 271.647136][ T796] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 271.657309][ T796] usb 2-1: config 0 has no interface number 0 [ 271.669218][ T796] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 271.769222][ T91] usb 3-1: Using ep0 maxpacket: 32 [ 271.820413][ T91] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 271.829704][ T796] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.843212][ T91] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.864220][ T796] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 271.927948][ T91] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 271.940953][ T796] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 271.956854][ T796] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 271.965655][ T796] usb 2-1: Product: syz [ 271.970105][ T796] usb 2-1: SerialNumber: syz [ 272.011185][ T796] usb 2-1: config 0 descriptor?? [ 272.028803][ T796] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 272.045354][ T796] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input25 [ 272.307181][ T9264] binder: BINDER_SET_CONTEXT_MGR already set [ 272.314421][ T9264] binder: 9242:9264 ioctl 4018620d 200000000040 returned -16 [ 272.646418][ T91] gspca_nw80x: reg_r err -110 [ 272.652451][ T91] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 272.959678][ T5821] usb 3-1: USB disconnect, device number 55 [ 272.973732][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.983752][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.035345][ T91] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 273.195269][ T91] usb 5-1: Using ep0 maxpacket: 32 [ 273.205646][ T91] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 273.225692][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 273.247611][ T91] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 273.270406][ T91] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 273.286064][ T91] usb 5-1: Product: syz [ 273.293615][ T91] usb 5-1: Manufacturer: syz [ 273.302148][ T91] usb 5-1: SerialNumber: syz [ 273.312867][ T91] usb 5-1: config 0 descriptor?? [ 273.343362][ T91] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 273.531578][ T5821] usb 5-1: USB disconnect, device number 45 [ 273.542712][ T6671] usb 5-1: Failed to submit usb control message: -71 [ 273.583343][ T6671] usb 5-1: unable to send the bmi data to the device: -71 [ 273.685618][ T6671] usb 5-1: unable to get target info from device [ 273.692082][ T6671] usb 5-1: could not get target info (-71) [ 273.707339][ T6671] usb 5-1: could not probe fw (-71) [ 273.971687][ T9278] binder: 9275:9278 ioctl c0306201 0 returned -14 [ 274.177290][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 274.177713][ T5821] usb 2-1: USB disconnect, device number 56 [ 274.184516][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 274.240433][ T5821] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 274.595767][ T5878] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 274.718288][ T9289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.747088][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.764314][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.785341][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.800972][ T5878] usb 5-1: config 0 descriptor?? [ 274.814174][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 274.864710][ T9291] syzkaller1: entered promiscuous mode [ 274.893475][ T9291] syzkaller1: entered allmulticast mode [ 274.913970][ T9291] Invalid option length (0) for dns_resolver key [ 274.940077][ T9291] netlink: 51 bytes leftover after parsing attributes in process `syz.0.909'. [ 275.138474][ T9299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.912'. [ 275.214444][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 275.225601][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 275.233362][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 275.240961][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 275.249093][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 275.271158][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 275.278173][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 275.285078][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 275.302507][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 275.320189][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 275.335369][ T91] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 275.351117][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 275.369842][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 275.381478][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 275.389734][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 275.398826][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 275.406307][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 275.413577][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 275.426688][ T5878] pwc: Registered as video103. [ 275.507025][ T91] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.555450][ T91] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.575683][ T91] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 275.584768][ T91] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.656323][ T91] usb 3-1: config 0 descriptor?? [ 275.687204][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 275.886205][ T9309] netlink: 'syz.0.913': attribute type 2 has an invalid length. [ 275.938875][ T5878] usb 5-1: USB disconnect, device number 46 [ 276.115665][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.160780][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.363119][ T91] usbhid 3-1:0.0: can't add hid device: -71 [ 276.369435][ T91] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.398679][ T91] usb 3-1: USB disconnect, device number 56 [ 276.552707][ T9310] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.914' resets device [ 276.896748][ T9328] loop8: detected capacity change from 0 to 7 [ 276.926074][ T9328] Dev loop8: unable to read RDB block 7 [ 276.931699][ T9328] loop8: unable to read partition table [ 276.971469][ T9328] loop8: partition table beyond EOD, truncated [ 276.991575][ T9328] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 277.025248][ T796] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 277.105814][ T9338] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 277.151201][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 277.215399][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 277.225389][ T796] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 277.242224][ T796] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 277.246560][ T1209] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 277.265740][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.272451][ T796] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b23, bcdDevice= 0.00 [ 277.289720][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.301853][ T9344] loop2: detected capacity change from 0 to 7 [ 277.309656][ T796] usb 2-1: config 0 descriptor?? [ 277.315545][ T5824] Dev loop2: unable to read RDB block 7 [ 277.323961][ T5824] loop2: unable to read partition table [ 277.330476][ T5824] loop2: partition table beyond EOD, truncated [ 277.337843][ T9344] Dev loop2: unable to read RDB block 7 [ 277.343745][ T9344] loop2: unable to read partition table [ 277.350130][ T9344] loop2: partition table beyond EOD, truncated [ 277.357110][ T9344] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.435231][ T1209] usb 3-1: Using ep0 maxpacket: 8 [ 277.442137][ T1209] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.452653][ T1209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.464078][ T1209] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.474244][ T1209] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.487509][ T1209] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.496681][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.713431][ T1209] usb 3-1: GET_CAPABILITIES returned 0 [ 277.760940][ T1209] usbtmc 3-1:16.0: can't read capabilities [ 277.760954][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 277.761302][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 277.816783][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 277.823002][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 278.111367][ T796] usb 2-1: USB disconnect, device number 57 [ 278.198859][ T5907] usb 3-1: USB disconnect, device number 57 [ 278.239881][ T9363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.410414][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 279.366088][ T9401] syzkaller0: entered promiscuous mode [ 279.385290][ T9401] syzkaller0: entered allmulticast mode [ 279.497772][ T5821] IPVS: starting estimator thread 0... [ 279.616489][ T9410] IPVS: using max 28 ests per chain, 67200 per kthread [ 280.245249][ T1209] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 280.397356][ T1209] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 280.413156][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.444108][ T1209] usb 1-1: config 0 descriptor?? [ 280.460817][ T1209] cp210x 1-1:0.0: cp210x converter detected [ 280.785485][ T796] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 280.864542][ T1209] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 280.880454][ T1209] usb 1-1: cp210x converter now attached to ttyUSB0 [ 280.968720][ T796] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 280.977996][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.986056][ T796] usb 2-1: Product: syz [ 280.990392][ T796] usb 2-1: Manufacturer: syz [ 280.995046][ T796] usb 2-1: SerialNumber: syz [ 281.001921][ T796] usb 2-1: config 0 descriptor?? [ 281.080204][ T5878] usb 1-1: USB disconnect, device number 55 [ 281.090415][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 281.100530][ T5878] cp210x 1-1:0.0: device disconnected [ 281.165516][ T1209] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 281.327126][ T1209] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 281.335674][ T1209] usb 5-1: config 150 has no interface number 0 [ 281.342115][ T1209] usb 5-1: config 150 interface 204 has no altsetting 0 [ 281.351373][ T1209] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 281.361468][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.369591][ T1209] usb 5-1: Product: syz [ 281.373773][ T1209] usb 5-1: Manufacturer: syz [ 281.378498][ T1209] usb 5-1: SerialNumber: syz [ 281.412721][ T796] usb 2-1: Firmware: major: 0, minor: 49, hardware type: UNKNOWN (208) [ 281.576296][ T9452] warning: `syz.3.946' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 281.621426][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.636074][ T9452] tipc: Failed to remove unknown binding: 66,1,1/0:805117841/805117843 [ 281.712067][ T1209] xr_serial 5-1:150.204: xr_serial converter detected [ 281.724578][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.742434][ T1209] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 281.773838][ T1209] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 281.824612][ T1209] usb 5-1: USB disconnect, device number 47 [ 281.850079][ T1209] xr_serial 5-1:150.204: device disconnected [ 281.871791][ T796] usb 2-1: failed to fetch extended address, random address set [ 281.884079][ T796] usb 2-1: atusb_probe: initialization failed, error = -524 [ 281.909406][ T796] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 281.942176][ T796] usb 2-1: USB disconnect, device number 58 [ 282.337125][ T796] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 282.586084][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 282.602039][ T796] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 282.647282][ T796] usb 2-1: config 139 has no interface number 0 [ 282.657483][ T796] usb 2-1: config 139 interface 49 has no altsetting 0 [ 282.687469][ T796] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 282.706521][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.828919][ T796] usb 2-1: Product: syz [ 282.833144][ T796] usb 2-1: Manufacturer: syz [ 282.851495][ T796] usb 2-1: SerialNumber: syz [ 282.895224][ T9472] netlink: 52 bytes leftover after parsing attributes in process `syz.2.951'. [ 283.555682][ T9484] netlink: zone id is out of range [ 283.584146][ T9484] netlink: 'syz.0.954': attribute type 8 has an invalid length. [ 283.757788][ T9488] fuse: Bad value for 'fd' [ 283.812035][ T9489] random: crng reseeded on system resumption [ 284.530432][ T29] audit: type=1800 audit(1775446825.466:329): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.958" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 285.002341][ T9502] syz.0.960 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 285.197074][ T796] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 285.234778][ T796] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 285.345500][ T796] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 285.389651][ T796] usb 2-1: USB disconnect, device number 59 [ 285.584545][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 285.622380][ T9520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.963'. [ 285.944106][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 286.070051][ T9523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.079345][ T9523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.110620][ T91] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 286.119020][ T29] audit: type=1800 audit(1775446827.026:330): pid=9519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.962" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 286.305224][ T91] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 286.315833][ T91] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 286.331312][ T91] usb 5-1: config 220 interface 0 has no altsetting 0 [ 286.372219][ T91] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 286.381803][ T91] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.400031][ T91] usb 5-1: Product: syz [ 286.406846][ T91] usb 5-1: Manufacturer: syz [ 286.415547][ T91] usb 5-1: SerialNumber: syz [ 286.689053][ T91] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22 [ 286.726767][ T91] usb 5-1: USB disconnect, device number 48 [ 287.225697][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 287.656431][ T1209] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 287.815267][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 287.823974][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.835334][ T91] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 287.836509][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 287.854436][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.870656][ T1209] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 287.880536][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.899730][ T1209] usb 5-1: config 0 descriptor?? [ 287.913427][ T9549] raw_sendmsg: syz.0.972 forgot to set AF_INET. Fix it! [ 287.946647][ T9537] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.992495][ T1209] hub 5-1:0.0: USB hub found [ 288.056467][ T91] usb 2-1: Using ep0 maxpacket: 16 [ 288.070923][ T91] usb 2-1: New USB device found, idVendor=0d06, idProduct=7010, bcdDevice= c.90 [ 288.082569][ T91] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.095431][ T91] usb 2-1: Product: syz [ 288.100949][ T91] usb 2-1: Manufacturer: syz [ 288.106884][ T91] usb 2-1: SerialNumber: syz [ 288.123426][ T91] usb 2-1: config 0 descriptor?? [ 288.220035][ T1209] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 288.433942][ T1209] usbhid 5-1:0.0: can't add hid device: -71 [ 288.440098][ T1209] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.466873][ T1209] usb 5-1: USB disconnect, device number 49 [ 289.425438][ T1209] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 289.474986][ T9584] loop8: detected capacity change from 0 to 7 [ 289.490836][ T5824] Dev loop8: unable to read RDB block 7 [ 289.507592][ T5824] loop8: unable to read partition table [ 289.513464][ T5824] loop8: partition table beyond EOD, truncated [ 289.533304][ T9584] Dev loop8: unable to read RDB block 7 [ 289.539522][ T9584] loop8: unable to read partition table [ 289.553087][ T9584] loop8: partition table beyond EOD, truncated [ 289.579626][ T9584] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 289.612732][ T1209] usb 5-1: device descriptor read/64, error -71 [ 289.675891][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'. [ 289.677533][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.698502][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.905297][ T1209] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 290.045614][ T1209] usb 5-1: device descriptor read/64, error -71 [ 290.176207][ T1209] usb usb5-port1: attempt power cycle [ 290.322871][ T6667] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.355255][ T6667] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.383262][ T6667] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.415333][ T6667] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.449604][ T9609] loop8: detected capacity change from 0 to 7 [ 290.466656][ T9609] Dev loop8: unable to read RDB block 7 [ 290.473575][ T9611] fuse: Bad value for 'fd' [ 290.484082][ T9609] loop8: unable to read partition table [ 290.499774][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.507086][ T9609] loop8: partition table beyond EOD, truncated [ 290.512832][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.525989][ T1209] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 290.526121][ T91] usb 2-1: USB disconnect, device number 60 [ 290.539804][ T9609] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 290.567370][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.589906][ T1209] usb 5-1: device descriptor read/8, error -71 [ 290.595700][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.955787][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 290.966437][ T1209] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 290.992037][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 291.016135][ T1209] usb 5-1: device descriptor read/8, error -71 [ 291.103678][ T9630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.321360][ T1209] usb usb5-port1: unable to enumerate USB device [ 291.350444][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.372216][ T9638] loop8: detected capacity change from 0 to 7 [ 291.384359][ T9638] Dev loop8: unable to read RDB block 7 [ 291.403299][ T9638] loop8: unable to read partition table [ 291.413285][ T9638] loop8: partition table beyond EOD, truncated [ 291.421454][ T9638] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 291.504353][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 291.624825][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.996'. [ 291.643803][ T9646] netlink: 148 bytes leftover after parsing attributes in process `syz.3.996'. [ 291.727173][ T5144] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 291.858849][ T9659] loop2: detected capacity change from 0 to 7 [ 291.876114][ T9659] Dev loop2: unable to read RDB block 7 [ 291.882169][ T9659] loop2: unable to read partition table [ 291.892432][ T9659] loop2: partition table beyond EOD, truncated [ 291.900254][ T9659] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 291.955230][ T5899] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 292.117144][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 292.127633][ T5899] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 292.139053][ T5899] usb 3-1: config 0 has no interface number 0 [ 292.156637][ T5899] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.185444][ T5899] usb 3-1: config 0 interface 85 has no altsetting 0 [ 292.338569][ T9641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.355916][ T5899] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 292.367604][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.375831][ T5899] usb 3-1: Product: syz [ 292.381944][ T5899] usb 3-1: Manufacturer: syz [ 292.388078][ T5899] usb 3-1: SerialNumber: syz [ 292.398363][ T5899] usb 3-1: config 0 descriptor?? [ 292.605243][ T91] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 292.615972][ T9668] loop8: detected capacity change from 0 to 7 [ 292.617777][ T5899] appletouch 3-1:0.85: Failed to read mode from device. [ 292.649865][ T5899] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 292.658781][ T9668] Dev loop8: unable to read RDB block 7 [ 292.664372][ T9668] loop8: unable to read partition table [ 292.686433][ T9668] loop8: partition table beyond EOD, truncated [ 292.694488][ T9668] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 292.785265][ T91] usb 5-1: Using ep0 maxpacket: 16 [ 292.822795][ T91] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.857415][ T91] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.884911][ T91] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.899057][ T91] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 292.908563][ T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.935366][ T9677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.030765][ T5899] usb 3-1: USB disconnect, device number 58 [ 293.033346][ T91] usb 5-1: config 0 descriptor?? [ 293.493584][ T9680] binder: BINDER_SET_CONTEXT_MGR already set [ 293.499735][ T9680] binder: 9679:9680 ioctl 4018620d 200000004a80 returned -16 [ 293.545749][ T9680] binder: 9679:9680 ioctl c0306201 200000000600 returned -14 [ 293.644704][ T91] usbhid 5-1:0.0: can't add hid device: -71 [ 293.651083][ T91] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 293.663249][ T91] usb 5-1: USB disconnect, device number 54 [ 293.825415][ T9687] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1011'. [ 293.838644][ T9687] random: crng reseeded on system resumption [ 294.114933][ T9694] fuse: Bad value for 'fd' [ 294.135699][ T9694] ipip0: entered promiscuous mode [ 294.140964][ T9694] ipip0: entered allmulticast mode [ 294.515219][ T5947] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 294.735382][ T1209] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 294.762329][ T5947] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 294.854577][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.881943][ T9709] loop8: detected capacity change from 0 to 7 [ 294.889891][ T5947] usb 1-1: Product: syz [ 294.902450][ T5947] usb 1-1: Manufacturer: syz [ 294.913552][ T5947] usb 1-1: SerialNumber: syz [ 294.913789][ T9709] Dev loop8: unable to read RDB block 7 [ 294.927417][ T9709] loop8: unable to read partition table [ 294.934363][ T1209] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 294.934871][ T5947] usb 1-1: config 0 descriptor?? [ 294.943060][ T1209] usb 5-1: config 1 has no interface number 0 [ 294.948167][ T9709] loop8: partition table beyond EOD, truncated [ 294.967757][ T1209] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 294.993582][ T1209] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1023 [ 295.004120][ T9709] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 295.024095][ T1209] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.053111][ T5947] hub 1-1:0.0: bad descriptor, ignoring hub [ 295.054236][ T1209] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 295.088135][ T5947] hub 1-1:0.0: probe with driver hub failed with error -5 [ 295.095207][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.113650][ T1209] usb 5-1: Product: syz [ 295.118381][ T1209] usb 5-1: Manufacturer: syz [ 295.126435][ T1209] usb 5-1: SerialNumber: syz [ 295.147634][ T9701] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 295.296750][ T5947] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 295.311403][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.343120][ T5947] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 295.366539][ T9701] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 295.404130][ T1209] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 295.441564][ T5899] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 295.443453][ T5947] usb 1-1: media controller created [ 295.503644][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.609266][ T1209] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 295.632707][ T1209] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 295.641913][ T5899] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 295.651481][ T5899] usb 3-1: config 179 has no interface number 0 [ 295.661036][ T1209] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 295.677448][ T5899] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 295.698065][ T1209] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 295.718118][ T5899] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 295.741288][ T1209] usb 5-1: USB disconnect, device number 55 [ 295.752301][ T5947] DVB: Unable to find symbol dib7000p_attach() [ 295.758222][ T5899] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 64 [ 295.765199][ T5947] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 295.770804][ T1209] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 295.794703][ T5899] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 295.808848][ T5899] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 295.844913][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.867234][ T9707] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 295.888731][ T1209] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 295.892296][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 295.906596][ T5899] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 295.909185][ T5947] rc_core: IR keymap rc-dib0700-rc5 not found [ 295.920217][ T5899] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 295.926705][ T5947] Registered IR keymap rc-empty [ 295.941862][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 295.955423][ T5947] dvb-usb: could not initialize remote control. [ 295.961713][ T5947] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 295.988150][ T9720] 8021q: VLANs not supported on gre0 [ 296.072442][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.091055][ T1209] usb 3-1: USB disconnect, device number 59 [ 296.135481][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.251594][ T9728] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 296.264598][ T5144] Bluetooth: hci2: unexpected event 0x10 length: 11 > 1 [ 296.266363][ T5819] Bluetooth: hci2: hardware error 0xff [ 296.555289][ T5947] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 296.706314][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 296.726690][ T5947] usb 2-1: config 0 has an invalid interface number: 87 but max is 0 [ 296.758275][ T5947] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 296.776882][ T5947] usb 2-1: config 0 has no interface number 0 [ 296.783227][ T5947] usb 2-1: config 0 interface 87 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 296.811786][ T5947] usb 2-1: config 0 interface 87 has no altsetting 0 [ 296.829230][ T5947] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 296.856415][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.888239][ T5947] usb 2-1: Product: syz [ 296.897224][ T5947] usb 2-1: Manufacturer: syz [ 296.909829][ T5947] usb 2-1: SerialNumber: syz [ 296.928595][ T5947] usb 2-1: config 0 descriptor?? [ 297.034384][ T9748] random: crng reseeded on system resumption [ 297.271591][ T9597] usb 1-1: USB disconnect, device number 56 [ 297.373508][ T9597] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 297.995414][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 298.008285][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1038'. [ 298.365503][ T5819] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 298.428047][ T9786] netlink: 'syz.3.1040': attribute type 2 has an invalid length. [ 298.467856][ T9786] !: entered promiscuous mode [ 298.515275][ T9786] netlink: 'syz.3.1040': attribute type 2 has an invalid length. [ 298.537754][ T9786] !: left promiscuous mode [ 298.664364][ T9790] could not allocate digest TFM handle sm3-generic [ 298.913229][ T9800] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 299.255804][ T5947] usb 2-1: USB disconnect, device number 61 [ 299.315418][ T9812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1047'. [ 299.345564][ T9597] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 299.406737][ T9815] --map-set only usable from mangle table [ 299.448965][ T9809] "syz.2.1046" (9809) uses obsolete ecb(arc4) skcipher [ 299.486144][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.508552][ T9597] usb 5-1: Using ep0 maxpacket: 16 [ 299.512426][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.533177][ T9597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.556185][ T9597] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.583280][ T9597] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.596472][ T9597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.606308][ T9597] usb 5-1: Product: syz [ 299.611255][ T9597] usb 5-1: Manufacturer: syz [ 299.617909][ T9597] usb 5-1: SerialNumber: syz [ 299.786224][ T5947] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 299.882878][ T9834] syzkaller0: entered promiscuous mode [ 299.889523][ T9834] syzkaller0: entered allmulticast mode [ 299.935812][ T5947] usb 1-1: device descriptor read/64, error -71 [ 300.218239][ T5947] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 300.385828][ T5947] usb 1-1: device descriptor read/64, error -71 [ 300.507412][ T5947] usb usb1-port1: attempt power cycle [ 300.875321][ T5947] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 300.898351][ T5947] usb 1-1: device descriptor read/8, error -71 [ 301.015436][ T5899] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 301.137587][ T5947] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 301.155641][ T5899] usb 3-1: device descriptor read/64, error -71 [ 301.190972][ T9862] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1061'. [ 301.275513][ T5947] usb 1-1: device descriptor read/8, error -71 [ 301.409863][ T5947] usb usb1-port1: unable to enumerate USB device [ 301.445244][ T5899] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 301.594080][ T5899] usb 3-1: device descriptor read/64, error -71 [ 301.705583][ T5899] usb usb3-port1: attempt power cycle [ 302.031207][ T9870] loop8: detected capacity change from 0 to 7 [ 302.046922][ T5899] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 302.069136][ T9597] usb 5-1: 0:2 : does not exist [ 302.079578][ T9870] Dev loop8: unable to read RDB block 7 [ 302.086834][ T9870] loop8: unable to read partition table [ 302.093067][ T9597] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 302.105289][ T5899] usb 3-1: device descriptor read/8, error -71 [ 302.105934][ T9870] loop8: partition table beyond EOD, truncated [ 302.151964][ T9870] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 302.192674][ T9597] usb 5-1: USB disconnect, device number 56 [ 302.366505][ T5899] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 302.386813][ T5899] usb 3-1: device descriptor read/8, error -71 [ 302.495749][ T5899] usb usb3-port1: unable to enumerate USB device [ 302.635266][ T9597] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 302.642908][ T796] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 302.795250][ T9597] usb 5-1: Using ep0 maxpacket: 32 [ 302.800529][ T796] usb 2-1: Invalid ep0 maxpacket: 32 [ 302.807658][ T9597] usb 5-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 302.816655][ T9597] usb 5-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 302.826040][ T9597] usb 5-1: config 157 has no interface number 0 [ 302.832373][ T9597] usb 5-1: config 157 interface 224 has no altsetting 0 [ 302.841832][ T9597] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 302.845412][ T9602] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 302.877944][ T9597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.886481][ T9597] usb 5-1: Product: syz [ 302.890654][ T9597] usb 5-1: Manufacturer: syz [ 302.895332][ T9597] usb 5-1: SerialNumber: syz [ 302.945258][ T796] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 303.005330][ T9602] usb 1-1: Using ep0 maxpacket: 16 [ 303.012598][ T9602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 303.024983][ T9602] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.034245][ T9602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.042336][ T9602] usb 1-1: Product: syz [ 303.046700][ T9602] usb 1-1: Manufacturer: syz [ 303.051313][ T9602] usb 1-1: SerialNumber: syz [ 303.059145][ T9602] usb 1-1: config 0 descriptor?? [ 303.067977][ T9602] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 303.077290][ T9602] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 303.105941][ T796] usb 2-1: Invalid ep0 maxpacket: 32 [ 303.115360][ T9597] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 303.129337][ T796] usb usb2-port1: attempt power cycle [ 303.328612][ T9602] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 303.342623][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 303.353119][ T9889] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1069'. [ 303.399843][ T9602] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 303.408407][ T9602] em28xx 1-1:0.0: board has no eeprom [ 303.477736][ T9602] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 303.485212][ T796] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 303.486576][ T9602] em28xx 1-1:0.0: dvb set to bulk mode. [ 303.498965][ T5899] em28xx 1-1:0.0: Binding DVB extension [ 303.507220][ T796] usb 2-1: Invalid ep0 maxpacket: 32 [ 303.520010][ T9602] usb 1-1: USB disconnect, device number 61 [ 303.535980][ T9602] em28xx 1-1:0.0: Disconnecting em28xx [ 303.561801][ T5899] em28xx 1-1:0.0: Registering input extension [ 303.572669][ T9602] em28xx 1-1:0.0: Closing input extension [ 303.610131][ T9602] em28xx 1-1:0.0: Freeing device [ 303.645719][ T796] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 303.686188][ T796] usb 2-1: Invalid ep0 maxpacket: 32 [ 303.698318][ T796] usb usb2-port1: unable to enumerate USB device [ 303.776634][ T9597] usb 5-1: reset high-speed USB device number 57 using dummy_hcd [ 304.155050][ T9597] usb 5-1: failed to restore interface 224 altsetting 169 (error=-71) [ 304.179504][ T9597] ueagle-atm 5-1:157.224: usbatm_usb_probe: bind failed: -19! [ 304.191506][ T9597] usb 5-1: USB disconnect, device number 57 [ 304.215209][ T9602] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 304.368115][ T9602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.381638][ T9602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.391825][ T9602] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 304.439814][ T9602] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 304.455876][ T9602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.468387][ T9602] usb 1-1: config 0 descriptor?? [ 304.838490][ T9916] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1075'. [ 304.850922][ T9918] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1075'. [ 304.979921][ T9602] hid_parser_main: 28 callbacks suppressed [ 304.979952][ T9602] steelseries 0003:1038:1410.0012: unknown main item tag 0x1 [ 304.996040][ T9602] steelseries 0003:1038:1410.0012: item 0 2 0 9 parsing failed [ 305.043400][ T9602] steelseries 0003:1038:1410.0012: parse failed [ 305.049954][ T9602] steelseries 0003:1038:1410.0012: probe with driver steelseries failed with error -22 [ 305.076973][ T9922] loop8: detected capacity change from 0 to 7 [ 305.083850][ T9922] Dev loop8: unable to read RDB block 7 [ 305.089583][ T9922] loop8: unable to read partition table [ 305.096228][ T9922] loop8: partition table beyond EOD, truncated [ 305.102398][ T9922] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 305.166085][ T5899] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 305.315447][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 305.322614][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.337395][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 305.352917][ T5899] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 305.362766][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.376400][ T5899] usb 3-1: config 0 descriptor?? [ 305.400826][ T5899] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 305.415571][ T9597] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 305.577500][ T9597] usb 5-1: unable to get BOS descriptor or descriptor too short [ 305.586284][ T9597] usb 5-1: not running at top speed; connect to a high speed hub [ 305.600131][ T9597] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 305.630339][ T9597] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.651784][ T9597] usb 5-1: config 1 interface 0 has no altsetting 0 [ 305.662570][ T9597] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 305.672540][ T9597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.056123][ T9943] netlink: 'syz.1.1082': attribute type 2 has an invalid length. [ 306.265320][ T9597] usb 5-1: Product: syz [ 306.268889][ T9602] usb 1-1: USB disconnect, device number 62 [ 306.269647][ T9597] usb 5-1: Manufacturer: syz [ 306.280788][ T9597] usb 5-1: SerialNumber: syz [ 306.310344][ T9924] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 306.597639][ T9597] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input31 [ 306.621090][ T5177] bcm5974 5-1:1.0: could not read from device [ 306.633949][ T5177] bcm5974 5-1:1.0: could not read from device [ 306.649538][ T9597] usb 5-1: USB disconnect, device number 58 [ 306.664830][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 306.685716][ T5177] bcm5974 5-1:1.0: could not read from device [ 307.050606][ T9956] loop8: detected capacity change from 0 to 7 [ 307.068826][ T9956] Dev loop8: unable to read RDB block 7 [ 307.082651][ T9956] loop8: unable to read partition table [ 307.135968][ T9956] loop8: partition table beyond EOD, truncated [ 307.347243][ T9956] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 308.566793][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.595722][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.708289][ T796] usb 3-1: USB disconnect, device number 64 [ 309.315999][ T796] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 309.369172][ T9982] netlink: 'syz.0.1093': attribute type 2 has an invalid length. [ 309.457286][ T9994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.478812][ T9994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.499288][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 309.506848][ T796] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 309.519374][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 309.540117][ T796] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 309.549301][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.558801][ T796] usb 3-1: Product: syz [ 309.573347][ T796] usb 3-1: Manufacturer: syz [ 309.601064][ T796] usb 3-1: SerialNumber: syz [ 309.677081][ T796] usb 3-1: config 0 descriptor?? [ 309.825232][ T796] rc_core: IR keymap rc-streamzap not found [ 309.831282][ T796] Registered IR keymap rc-empty [ 309.838482][ T796] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 309.858800][ T796] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 309.905002][ T796] usb 3-1: USB disconnect, device number 65 [ 310.232724][T10007] loop8: detected capacity change from 0 to 7 [ 310.261273][T10007] Dev loop8: unable to read RDB block 7 [ 310.268393][T10007] loop8: unable to read partition table [ 310.274468][T10007] loop8: partition table beyond EOD, truncated [ 310.281818][T10007] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 310.512744][T10011] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1103'. [ 310.925419][ T9602] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 311.085723][ T9602] usb 3-1: Using ep0 maxpacket: 16 [ 311.092950][ T9602] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 311.106422][ T9602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.147586][ T9602] usb 3-1: config 0 descriptor?? [ 311.161377][ T9602] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 311.565902][ T5928] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 311.741366][ T5928] usb 1-1: device descriptor read/64, error -71 [ 311.942098][ T9602] gspca_sonixj: reg_w1 err -71 [ 311.947557][ T9602] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 311.957803][ T9602] usb 3-1: USB disconnect, device number 66 [ 312.026265][ T5928] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 312.070322][T10034] netlink: 'syz.1.1111': attribute type 13 has an invalid length. [ 312.092859][T10034] syzkaller0: entered promiscuous mode [ 312.112043][T10034] syzkaller0: entered allmulticast mode [ 312.165477][ T5928] usb 1-1: device descriptor read/64, error -71 [ 312.204498][T10036] loop2: detected capacity change from 0 to 7 [ 312.215529][T10036] Dev loop2: unable to read RDB block 7 [ 312.221127][T10036] loop2: unable to read partition table [ 312.234168][T10036] loop2: partition table beyond EOD, truncated [ 312.248098][T10036] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 312.285643][ T5928] usb usb1-port1: attempt power cycle [ 312.527510][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.543361][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.655227][ T9604] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 312.665009][ T5928] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 312.686241][ T5928] usb 1-1: device descriptor read/8, error -71 [ 312.925421][ T5928] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 312.965203][ T9604] usb 2-1: Using ep0 maxpacket: 32 [ 312.975396][ T9604] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 312.985235][ T5928] usb 1-1: device descriptor read/8, error -71 [ 312.992665][ T9604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.025703][ T9604] usb 2-1: Product: syz [ 313.031509][ T9604] usb 2-1: Manufacturer: syz [ 313.042572][ T9604] usb 2-1: SerialNumber: syz [ 313.061727][ T9604] usb 2-1: config 0 descriptor?? [ 313.079071][ T9604] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 313.121984][ T5928] usb usb1-port1: unable to enumerate USB device [ 313.789830][T10067] netlink: 'syz.2.1120': attribute type 13 has an invalid length. [ 314.625148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 314.734099][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.746921][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.585712][ T9604] gspca_ov534_9: reg_r err -71 [ 315.845251][ T9604] gspca_ov534_9: Unknown sensor 0000 [ 315.845345][ T9604] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 315.940008][ T9604] usb 2-1: USB disconnect, device number 66 [ 316.145239][ T9597] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 316.215991][ T9602] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 316.444154][ T9602] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.453557][ T9602] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.463959][ T9602] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.487212][ T9602] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.544857][ T9602] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.554346][ T9602] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.563721][ T9602] usb 3-1: Product: syz [ 317.136502][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.142843][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.175305][ T9602] usb 3-1: Manufacturer: syz [ 317.222609][ T9602] cdc_wdm 3-1:1.0: skipping garbage [ 317.254565][ T9602] cdc_wdm 3-1:1.0: skipping garbage [ 317.289477][ T9602] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 317.315348][ T9602] cdc_wdm 3-1:1.0: Unknown control protocol [ 317.433641][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.448841][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.546221][T10094] lo: Caught tx_queue_len zero misconfig [ 317.775844][ T9597] usb 5-1: device descriptor read/64, error -71 [ 318.026197][ T9597] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 318.058460][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1137'. [ 318.077877][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1137'. [ 318.305244][ T9597] usb 5-1: Using ep0 maxpacket: 8 [ 318.488131][ T9597] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 318.522454][ T9597] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 318.563612][ T9597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.777122][ T9597] usb 5-1: Product: syz [ 318.858147][ T9597] usb 5-1: Manufacturer: syz [ 319.035212][ T9597] usb 5-1: SerialNumber: syz [ 319.110752][ T9597] usb 5-1: config 0 descriptor?? [ 319.308505][ T9597] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 319.317270][ T9597] usb 5-1: setting power ON [ 319.355272][ T9597] dvb-usb: bulk message failed: -22 (2/0) [ 319.416820][ T9597] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.434835][ T9597] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 319.444391][ T9597] usb 5-1: media controller created [ 319.463874][ T9597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.531273][ T9597] usb 5-1: selecting invalid altsetting 6 [ 319.540869][ T9597] usb 5-1: digital interface selection failed (-22) [ 319.548015][ T9597] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 319.558105][ T9597] usb 5-1: setting power OFF [ 319.563076][ T9597] dvb-usb: bulk message failed: -22 (2/0) [ 319.575322][ T9597] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 319.584657][ T9597] (NULL device *): no alternate interface [ 319.666673][ T9597] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 319.787519][ T9602] usb 5-1: USB disconnect, device number 60 [ 319.978824][T10151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1140'. [ 320.294575][T10156] random: crng reseeded on system resumption [ 320.421015][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.429696][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.861251][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 321.256173][T10169] syzkaller1: entered promiscuous mode [ 321.294562][T10169] syzkaller1: entered allmulticast mode [ 321.807383][T10179] kvm: pic: non byte write [ 321.931323][T10180] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 321.942062][T10180] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.945217][ T91] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 321.994246][T10184] netlink: 'syz.4.1150': attribute type 3 has an invalid length. [ 322.045260][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'. [ 322.245190][ T91] usb 2-1: Using ep0 maxpacket: 8 [ 322.252762][ T91] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.264264][ T91] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.360489][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1150'. [ 322.369550][T10189] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 322.457432][ T91] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 322.492269][ T91] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 322.509924][ T91] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.563786][ T91] usb 2-1: config 0 descriptor?? [ 322.638992][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 323.295424][ T91] usbhid 2-1:0.0: can't add hid device: -71 [ 323.301923][ T91] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 323.310693][T10199] fuse: Bad value for 'fd' [ 323.377630][ T91] usb 2-1: USB disconnect, device number 67 [ 323.391245][T10206] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1153'. [ 323.679061][T10201] ipip0: entered promiscuous mode [ 323.684215][T10201] ipip0: entered allmulticast mode [ 323.696973][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.706115][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.955836][T10199] netlink: 'syz.2.1152': attribute type 1 has an invalid length. [ 324.112197][T10215] fuse: Bad value for 'fd' [ 324.337639][T10217] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 324.408335][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 324.417664][T10219] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1158'. [ 324.452910][T10220] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 324.501501][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.528678][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.539799][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.552216][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.563029][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 324.591743][T10217] team0: Port device dummy0 added [ 324.697896][T10219] vlan2: entered promiscuous mode [ 324.703127][T10219] syz_tun: entered promiscuous mode [ 324.769625][T10220] team0: Port device dummy0 removed [ 324.835960][ T91] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 325.052693][T10220] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 325.297964][ T91] usb 2-1: config 0 has an invalid interface number: 87 but max is 0 [ 325.307359][ T91] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 325.317893][ T91] usb 2-1: config 0 has no interface number 0 [ 325.325835][ T91] usb 2-1: config 0 interface 87 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 325.365535][ T91] usb 2-1: config 0 interface 87 has no altsetting 0 [ 325.387370][ T91] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.396755][ T91] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.404792][ T91] usb 2-1: Product: syz [ 325.409179][ T91] usb 2-1: Manufacturer: syz [ 325.415200][ T91] usb 2-1: SerialNumber: syz [ 325.445878][ T91] usb 2-1: config 0 descriptor?? [ 325.565354][ T5928] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 325.715217][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 325.729748][ T5928] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.765196][ T5928] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.785441][ T5928] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 325.880931][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.328840][ T5928] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 326.388054][T10244] random: crng reseeded on system resumption [ 326.579130][ T5907] usb 1-1: USB disconnect, device number 67 [ 326.884317][T10256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.935736][T10256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.953524][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.011394][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.065354][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.080545][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.235496][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.271511][T10267] loop8: detected capacity change from 0 to 7 [ 327.279090][T10267] Dev loop8: unable to read RDB block 7 [ 327.285082][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.291661][ T91] usb 2-1: USB disconnect, device number 68 [ 327.294575][T10267] loop8: unable to read partition table [ 327.315191][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1170'. [ 327.324365][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 327.345645][T10267] loop8: partition table beyond EOD, truncated [ 327.352524][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.384853][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.395264][T10267] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 327.430746][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.457162][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.854601][T10278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1174'. [ 327.865291][ T9602] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 327.875319][T10278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1174'. [ 327.925204][ T29] audit: type=1400 audit(1775446868.766:331): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=10273 comm="syz.1.1174" [ 327.968362][ T29] audit: type=1804 audit(1775446868.836:332): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1172" name="/newroot/225/file1" dev="tmpfs" ino=1191 res=1 errno=0 [ 328.045552][ T9602] usb 1-1: Using ep0 maxpacket: 16 [ 328.053626][ T9602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.075442][ T9602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.090988][ T9602] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.130654][ T9602] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.140337][ T9602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.155003][ T9602] usb 1-1: config 0 descriptor?? [ 328.193678][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.217077][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.229703][T10289] fuse: Bad value for 'fd' [ 328.230118][T10290] fuse: Bad value for 'fd' [ 328.516642][T10292] netlink: 'syz.0.1173': attribute type 10 has an invalid length. [ 328.543030][T10292] team0: Device xfrm0 is of different type [ 329.121233][T10303] syz_tun: entered allmulticast mode [ 329.142614][T10302] syz_tun: left allmulticast mode [ 329.202670][T10307] loop8: detected capacity change from 0 to 7 [ 329.209688][T10307] Dev loop8: unable to read RDB block 7 [ 329.215345][T10307] loop8: unable to read partition table [ 329.215952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 329.221147][T10307] loop8: partition table beyond EOD, truncated [ 329.259095][T10307] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 329.338103][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 329.542346][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 329.611227][T10319] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 329.619554][T10319] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 329.725297][ T91] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 329.836658][T10322] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 329.852704][T10322] pic_ioport_write: 79 callbacks suppressed [ 329.852743][T10322] kvm: pic: level sensitive irq not supported [ 329.859828][T10322] picdev_read: 79 callbacks suppressed [ 329.859843][T10322] kvm: pic: non byte read [ 329.878045][ T91] usb 5-1: config 0 interface 0 has no altsetting 0 [ 329.889077][ T91] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 329.899674][T10322] kvm: pic: level sensitive irq not supported [ 329.899798][T10322] kvm: pic: non byte read [ 329.910689][ T91] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 329.919262][ T91] usb 5-1: Product: syz [ 329.924617][ T91] usb 5-1: Manufacturer: syz [ 329.929794][T10322] kvm: pic: level sensitive irq not supported [ 329.929858][T10322] kvm: pic: non byte read [ 329.940826][ T91] usb 5-1: SerialNumber: syz [ 329.948135][T10322] kvm: pic: level sensitive irq not supported [ 329.948200][T10322] kvm: pic: non byte read [ 329.960141][ T91] usb 5-1: config 0 descriptor?? [ 329.978136][T10322] kvm: pic: level sensitive irq not supported [ 329.978217][T10322] kvm: pic: non byte read [ 329.990877][T10322] kvm: pic: level sensitive irq not supported [ 329.991000][T10322] kvm: pic: non byte read [ 330.008019][T10322] kvm: pic: level sensitive irq not supported [ 330.008144][T10322] kvm: pic: non byte read [ 330.053159][T10322] kvm: pic: level sensitive irq not supported [ 330.053239][T10322] kvm: pic: non byte read [ 330.066180][T10322] kvm: pic: level sensitive irq not supported [ 330.066246][T10322] kvm: pic: non byte read [ 330.078654][T10322] kvm: pic: level sensitive irq not supported [ 330.078802][T10322] kvm: pic: non byte read [ 330.081363][T10326] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1191'. [ 330.173510][ T91] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 330.383016][ T91] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 330.401980][ T91] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 330.422690][T10338] loop8: detected capacity change from 0 to 7 [ 330.429162][ T91] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 330.447174][T10338] Dev loop8: unable to read RDB block 7 [ 330.459588][T10338] loop8: unable to read partition table [ 330.470222][T10338] loop8: partition table beyond EOD, truncated [ 330.482071][T10338] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 330.497135][ T91] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 330.596238][ T91] usb 5-1: USB disconnect, device number 61 [ 330.606059][T10342] netlink: 'syz.2.1197': attribute type 6 has an invalid length. [ 330.616778][T10347] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 330.682394][ T9602] usbhid 1-1:0.0: can't add hid device: -71 [ 330.697720][ T9602] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 330.734899][ T9602] usb 1-1: USB disconnect, device number 68 [ 330.773502][ T29] audit: type=1800 audit(1775446871.706:333): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1200" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 330.892626][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.921310][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.214529][T10376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1207'. [ 331.275425][ T91] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 331.461240][ T91] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 331.480273][ T91] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 331.494050][ T91] usb 1-1: config 0 has no interface number 0 [ 331.503972][ T91] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 331.514445][ T91] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.530413][T10387] sit0: entered promiscuous mode [ 331.536086][T10387] netlink: 'syz.3.1210': attribute type 1 has an invalid length. [ 331.543835][T10387] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1210'. [ 331.556742][ T5907] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 331.567323][ T91] usb 1-1: Product: syz [ 331.570667][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 331.571633][ T91] usb 1-1: Manufacturer: syz [ 331.587223][ T91] usb 1-1: SerialNumber: syz [ 331.595863][ T91] usb 1-1: config 0 descriptor?? [ 331.605930][ T91] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 331.650437][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.668194][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.680949][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.689851][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.725250][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 331.731757][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.742951][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.754788][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.765247][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.778461][ T9602] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 331.778529][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.808975][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.828374][ T9597] usb 1-1: USB disconnect, device number 69 [ 331.967486][ T9602] usb 2-1: Using ep0 maxpacket: 32 [ 331.974408][ T9602] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 331.995323][ T9602] usb 2-1: config 0 has no interface number 0 [ 332.001484][ T9602] usb 2-1: config 0 interface 184 has no altsetting 0 [ 332.011891][T10402] netlink: 'syz.3.1216': attribute type 3 has an invalid length. [ 332.024515][T10402] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1216'. [ 332.025474][ T9602] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 332.055191][ T9602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.063244][ T9602] usb 2-1: Product: syz [ 332.072500][ T5907] usb 5-1: usb_control_msg returned -71 [ 332.085219][ T9602] usb 2-1: Manufacturer: syz [ 332.087532][ T5907] usbtmc 5-1:16.0: can't read capabilities [ 332.089862][ T9602] usb 2-1: SerialNumber: syz [ 332.096083][ T9602] usb 2-1: config 0 descriptor?? [ 332.113221][ T5907] usb 5-1: USB disconnect, device number 62 [ 332.611107][T10420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.687855][T10420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.715975][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 332.842046][ T9602] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 332.856034][ T9602] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 333.693314][T10435] vlan0: entered promiscuous mode [ 333.703089][T10435] vlan0: entered allmulticast mode [ 333.713164][T10435] hsr_slave_1: entered allmulticast mode [ 333.731049][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 334.228923][T10442] netlink: 'syz.4.1226': attribute type 29 has an invalid length. [ 334.277792][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 334.923485][ T9602] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 334.962883][ T9602] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 334.982212][T10454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 334.988769][T10454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 335.010798][ T9602] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 335.014056][T10454] vhci_hcd vhci_hcd.0: Device attached [ 335.062114][ T9602] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 335.084530][T10455] vhci_hcd: connection closed [ 335.084726][ T6681] vhci_hcd vhci_hcd.0: stop threads [ 335.098317][ T6681] vhci_hcd vhci_hcd.0: release socket [ 335.108618][ T9602] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 335.121492][ T6681] vhci_hcd vhci_hcd.0: disconnect device [ 335.151707][ T9602] usb 2-1: USB disconnect, device number 69 [ 335.295243][ T9597] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 335.446787][ T9597] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 335.462797][ T9597] usb 5-1: config 1 has no interface number 0 [ 335.472901][ T9597] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 335.488091][ T9597] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 335.498576][ T9597] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.512473][ T9597] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 335.522066][ T9597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.530972][ T9597] usb 5-1: Product: syz [ 335.535599][ T9597] usb 5-1: Manufacturer: syz [ 335.540217][ T9597] usb 5-1: SerialNumber: syz [ 335.547890][T10458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 335.560064][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 335.760087][T10458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 335.824658][ T9597] usb 5-1: Incompatible driver and firmware versions [ 335.869795][ T9597] usb 5-1: USB disconnect, device number 63 [ 335.898292][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 335.908880][ T9602] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 335.944597][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.965975][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.065251][ T9602] usb 1-1: Using ep0 maxpacket: 16 [ 336.079406][ T9602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.091603][T10477] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 336.109641][ T9602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.120989][ T9602] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.139234][ T9602] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 336.149220][ T9602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.159325][ T9602] usb 1-1: config 0 descriptor?? [ 336.179657][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 336.201579][T10477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1235'. [ 336.580173][ T9602] microsoft 0003:045E:07DA.0014: reserved main item tag 0xd [ 336.592609][ T9602] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 336.624481][ T9602] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 336.636776][ T9602] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 336.651410][ T9602] microsoft 0003:045E:07DA.0014: no inputs found [ 336.666630][ T9602] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 336.848794][ T29] audit: type=1326 audit(1775446877.716:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 336.876428][T10464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.889315][T10464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.912060][ T9602] usb 1-1: USB disconnect, device number 70 [ 336.966249][ T29] audit: type=1326 audit(1775446877.716:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.007505][ T29] audit: type=1326 audit(1775446877.716:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.033936][ T29] audit: type=1326 audit(1775446877.716:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.057546][ T29] audit: type=1326 audit(1775446877.716:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.081782][ T29] audit: type=1326 audit(1775446877.726:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.424325][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1239'. [ 337.437819][ T29] audit: type=1326 audit(1775446877.726:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.552787][ T29] audit: type=1326 audit(1775446877.726:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.579800][ T29] audit: type=1326 audit(1775446877.726:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.658419][ T29] audit: type=1326 audit(1775446877.726:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e12b9c819 code=0x7ffc0000 [ 337.690515][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.700237][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.726482][T10499] loop3: detected capacity change from 0 to 7 [ 337.785804][ T5824] Dev loop3: unable to read RDB block 7 [ 337.791583][ T5824] loop3: unable to read partition table [ 337.798310][ T5824] loop3: partition table beyond EOD, truncated [ 337.831373][T10499] Dev loop3: unable to read RDB block 7 [ 337.859304][T10499] loop3: unable to read partition table [ 337.879465][T10499] loop3: partition table beyond EOD, truncated [ 337.892857][T10499] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 338.076848][T10516] bond1: (slave bond_slave_1): Device is not our slave [ 338.085175][T10516] bond1: option active_slave: invalid value (bond_slave_1) [ 338.094305][T10516] bond1 (unregistering): Released all slaves [ 338.113201][T10521] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1245'. [ 339.035497][ T91] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 339.256382][ T91] usb 2-1: Using ep0 maxpacket: 32 [ 339.459173][ T91] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 339.469130][ T91] usb 2-1: config 0 has no interface number 0 [ 339.476775][ T91] usb 2-1: config 0 interface 196 altsetting 1 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 339.498709][ T91] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x8E has invalid maxpacket 528 [ 339.561739][ T91] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.670318][ T91] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 339.697121][ T91] usb 2-1: config 0 interface 196 has no altsetting 0 [ 339.727529][ T91] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 339.736978][ T91] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.745076][ T91] usb 2-1: Product: syz [ 339.750604][ T91] usb 2-1: Manufacturer: syz [ 339.758658][ T91] usb 2-1: SerialNumber: syz [ 339.777793][ T91] usb 2-1: config 0 descriptor?? [ 339.794392][T10530] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 340.825444][T10569] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1256'. [ 341.993816][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.045876][ T9602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.118113][T10593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.156496][ T91] ipheth 2-1:0.196: Unable to find endpoints [ 342.180715][ T91] usb 2-1: USB disconnect, device number 70 [ 342.312914][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.321895][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.348463][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.394417][T10593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.414272][T10593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.728990][T10608] pim6reg: entered allmulticast mode [ 342.747085][ T9602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.876179][ T9602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.655057][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 344.655669][ T91] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 344.687700][T10635] bond2: entered promiscuous mode [ 344.696800][T10635] bond2: entered allmulticast mode [ 344.702300][T10635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.720204][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 344.734215][T10635] macsec2: entered promiscuous mode [ 344.740287][T10635] macsec2: entered allmulticast mode [ 344.874370][ T91] usb 1-1: Using ep0 maxpacket: 16 [ 344.882784][ T91] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 344.893998][ T91] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 344.911089][ T91] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 344.921370][ T91] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.956763][T10644] loop7: detected capacity change from 0 to 16384 [ 344.995177][ T91] usb 1-1: Product: syz [ 344.999561][ T91] usb 1-1: Manufacturer: syz [ 345.004169][ T91] usb 1-1: SerialNumber: syz [ 345.172684][T10652] FAULT_INJECTION: forcing a failure. [ 345.172684][T10652] name failslab, interval 1, probability 0, space 0, times 0 [ 345.186543][T10652] CPU: 0 UID: 0 PID: 10652 Comm: syz.4.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.186573][T10652] Tainted: [L]=SOFTLOCKUP [ 345.186579][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 345.186594][T10652] Call Trace: [ 345.186602][T10652] [ 345.186609][T10652] dump_stack_lvl+0xe8/0x150 [ 345.186639][T10652] should_fail_ex+0x412/0x560 [ 345.186668][T10652] should_failslab+0xa8/0x100 [ 345.186692][T10652] __kmalloc_noprof+0xe8/0x760 [ 345.186711][T10652] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 345.186733][T10652] tomoyo_realpath_from_path+0xe3/0x5d0 [ 345.186759][T10652] ? tomoyo_path_number_perm+0x219/0x630 [ 345.186783][T10652] tomoyo_path_number_perm+0x246/0x630 [ 345.186809][T10652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 345.186836][T10652] ? __lock_acquire+0x6b5/0x2cf0 [ 345.186869][T10652] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 345.186913][T10652] ? __fget_files+0x2a/0x420 [ 345.186931][T10652] ? __fget_files+0x2a/0x420 [ 345.186945][T10652] ? __fget_files+0x3a0/0x420 [ 345.186960][T10652] ? __fget_files+0x2a/0x420 [ 345.186977][T10652] security_file_ioctl+0xc3/0x2a0 [ 345.187001][T10652] __se_sys_ioctl+0x47/0x170 [ 345.187024][T10652] do_syscall_64+0x14d/0xf80 [ 345.187046][T10652] ? trace_irq_disable+0x3b/0x150 [ 345.187061][T10652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.187080][T10652] ? clear_bhb_loop+0x40/0x90 [ 345.187098][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.187120][T10652] RIP: 0033:0x7fe8f519c819 [ 345.187137][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.187152][T10652] RSP: 002b:00007fe8f6036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.187171][T10652] RAX: ffffffffffffffda RBX: 00007fe8f5416180 RCX: 00007fe8f519c819 [ 345.187183][T10652] RDX: 0000200000000080 RSI: 0000000040182103 RDI: 0000000000000004 [ 345.187195][T10652] RBP: 00007fe8f6036090 R08: 0000000000000000 R09: 0000000000000000 [ 345.187205][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.187214][T10652] R13: 00007fe8f5416218 R14: 00007fe8f5416180 R15: 00007fe8f553fa48 [ 345.187242][T10652] [ 345.187250][T10652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 345.465794][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.491245][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 345.491261][ T29] audit: type=1400 audit(1775446886.426:426): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10643 comm="syz.1.1275" [ 345.536598][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.611815][T10625] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 345.699374][T10625] bond3: entered promiscuous mode [ 345.704688][T10625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.856294][T10625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.864552][T10625] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 345.890110][T10646] loop7: detected capacity change from 16384 to 0 [ 345.899227][ C0] I/O error, dev loop7, sector 11520 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 345.911127][ C0] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 345.916242][T10625] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 346.016472][T10625] bond3: (slave vti0): making interface the new active one [ 346.043337][T10625] vti0: entered promiscuous mode [ 346.054222][T10625] bond3: (slave vti0): Enslaving as an active interface with an up link [ 346.077647][ T5907] usb 1-1: USB disconnect, device number 71 [ 346.316184][T10669] tun0: tun_chr_ioctl cmd 2148553947 [ 346.967735][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.975410][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.165520][ T5907] net_ratelimit: 614 callbacks suppressed [ 347.165537][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.302080][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.323761][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.516020][ T9604] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 347.574194][ T6667] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.645996][ T6667] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.654974][ T6667] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.671838][ T9604] usb 2-1: Using ep0 maxpacket: 32 [ 347.685639][ T6667] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.704822][ T9604] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 347.739555][ T9604] usb 2-1: config 0 has no interface number 0 [ 347.769464][ T9604] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.787844][ T9604] usb 2-1: config 0 interface 89 has no altsetting 0 [ 347.825197][ T91] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 347.843805][ T9604] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 347.862440][ T9604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.885896][ T9604] usb 2-1: Product: syz [ 347.890314][ T9604] usb 2-1: Manufacturer: syz [ 347.895239][ T9604] usb 2-1: SerialNumber: syz [ 347.907831][ T9604] usb 2-1: config 0 descriptor?? [ 347.920346][ T9604] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 347.931063][ T9604] em28xx 2-1:0.89: Video interface 89 found: [ 347.985205][ T91] usb 5-1: Using ep0 maxpacket: 16 [ 347.996330][ T91] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.025220][ T91] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 348.034997][ T91] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 348.065151][ T91] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 348.094904][ T91] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 348.104957][ T91] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 348.115293][ T9602] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 348.120328][ T91] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.138179][ T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 348.146282][ T91] usb 5-1: SerialNumber: syz [ 348.155003][T10699] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 348.163240][T10699] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 348.205693][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.275259][ T9602] usb 1-1: Using ep0 maxpacket: 16 [ 348.282108][ T9602] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 348.290470][ T9602] usb 1-1: config 0 has no interface number 0 [ 348.297679][ T9602] usb 1-1: too many endpoints for config 0 interface 133 altsetting 181: 145, using maximum allowed: 30 [ 348.309104][ T9602] usb 1-1: config 0 interface 133 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 348.322858][ T9602] usb 1-1: config 0 interface 133 has no altsetting 0 [ 348.345626][ T9602] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 348.354723][ T9602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.375190][ T9602] usb 1-1: Product: syz [ 348.379417][ T9602] usb 1-1: Manufacturer: syz [ 348.384006][ T9602] usb 1-1: SerialNumber: syz [ 348.394695][ T91] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 348.395609][ T9602] usb 1-1: config 0 descriptor?? [ 348.428267][T10717] fuse: Unknown parameter '00000000000000000008 ' [ 348.458379][ T91] usb 5-1: USB disconnect, device number 64 [ 348.535223][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.544458][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.567034][ T9604] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 348.688216][ T9602] dvb_usb_dtv5100 1-1:0.133: probe with driver dvb_usb_dtv5100 failed with error -71 [ 348.745261][ T9602] usb 1-1: USB disconnect, device number 72 [ 349.071724][ T9604] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 349.092197][ T9604] em28xx 2-1:0.89: board has no eeprom [ 349.179373][ T9604] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 349.186686][ T9604] em28xx 2-1:0.89: analog set to bulk mode. [ 349.194002][ T9602] em28xx 2-1:0.89: Registering V4L2 extension [ 349.250395][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.270114][ T9604] usb 2-1: USB disconnect, device number 71 [ 349.284406][ T9604] em28xx 2-1:0.89: Disconnecting em28xx [ 349.308867][ T9602] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 349.329347][ T9602] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 349.360412][ T9602] em28xx 2-1:0.89: No AC97 audio processor [ 349.376731][ T9602] usb 2-1: Decoder not found [ 349.383182][ T9602] em28xx 2-1:0.89: failed to create media graph [ 349.392263][ T9602] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 349.422272][ T9602] em28xx 2-1:0.89: Registering snapshot button... [ 349.494224][ T9602] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input33 [ 349.532698][ T9602] em28xx 2-1:0.89: Remote control support is not available for this card. [ 349.553245][ T9604] em28xx 2-1:0.89: Closing input extension [ 349.560298][ T9604] em28xx 2-1:0.89: Deregistering snapshot button [ 349.667324][ T9604] em28xx 2-1:0.89: Freeing device [ 349.724699][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.757269][T10736] loop8: detected capacity change from 0 to 7 [ 349.764375][T10736] Dev loop8: unable to read RDB block 7 [ 349.770199][T10736] loop8: unable to read partition table [ 349.777537][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.786943][T10736] loop8: partition table beyond EOD, truncated [ 349.793207][T10736] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 349.805401][ T9602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.146110][T10754] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1302'. [ 350.264344][T10754] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1302'. [ 350.387640][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.654060][T10760] loop8: detected capacity change from 0 to 7 [ 350.708645][ T29] audit: type=1326 audit(1775446891.646:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.4.1306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8f519c819 code=0x0 [ 350.711375][T10760] Dev loop8: unable to read RDB block 7 [ 350.765954][T10766] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 350.784431][T10766] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.793204][T10766] bond0: (slave team0): Enslaving as an active interface with an up link [ 350.805310][T10760] loop8: unable to read partition table [ 350.822692][T10760] loop8: partition table beyond EOD, truncated [ 350.839999][T10760] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 350.976641][T10770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.007240][T10770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.207722][T10774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.416056][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.754444][T10776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.253360][T10797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.273690][T10797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.289421][ T9604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.451402][T10807] loop8: detected capacity change from 0 to 7 [ 352.458105][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.467193][T10807] Dev loop8: unable to read RDB block 7 [ 352.474013][T10807] loop8: unable to read partition table [ 352.482936][T10807] loop8: partition table beyond EOD, truncated [ 352.591958][T10807] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 352.665214][ T91] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 352.838993][ T91] usb 2-1: config 0 interface 0 has no altsetting 0 [ 352.845559][ T9602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.879619][ T91] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 352.912764][ T91] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.926796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.951865][ T91] usb 2-1: config 0 descriptor?? [ 353.299507][T10800] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 353.318686][T10800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.337043][T10800] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 353.485404][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.929012][T10823] trusted_key: encrypted_key: master key parameter 'CÖ— [ 353.929012][T10823] ¬É’4˜½÷âù' is invalid [ 354.000399][T10800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.010249][T10800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.315782][ T91] video4linux radio48: keene_cmd_main failed (-110) [ 354.322920][ T91] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 354.525575][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.809771][T10831] fuse: Bad value for 'fd' [ 354.829707][T10831] ipip0: entered promiscuous mode [ 354.834832][T10831] ipip0: entered allmulticast mode [ 355.115263][ T9602] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 355.263362][T10841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.273580][ T91] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 355.292815][T10841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.309807][T10842] netlink: 'syz.2.1325': attribute type 4 has an invalid length. [ 355.506770][ T91] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.518041][ T91] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 355.529784][ T91] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.548465][ T9602] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 355.557787][ T9602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.577869][ T91] usb 1-1: config 0 descriptor?? [ 355.585618][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.598410][ T9602] usb 5-1: Product: syz [ 355.603141][ T9602] usb 5-1: Manufacturer: syz [ 355.608271][ T91] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 355.619143][T10841] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1326'. [ 355.709029][T10845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.719219][T10845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.729160][ T9602] usb 5-1: SerialNumber: syz [ 355.744952][ T9602] usb 5-1: config 0 descriptor?? [ 355.955894][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.048852][ T9602] hub 5-1:0.0: bad descriptor, ignoring hub [ 356.054802][ T9602] hub 5-1:0.0: probe with driver hub failed with error -5 [ 356.139292][ T9602] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 356.190770][ T9602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.219901][ T5899] usb 2-1: USB disconnect, device number 72 [ 356.237693][ T5907] usb 1-1: USB disconnect, device number 73 [ 356.241103][ T9602] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 356.301363][ T9602] usb 5-1: media controller created [ 356.360947][ T9602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.543852][ T9602] DVB: Unable to find symbol dib7000p_attach() [ 356.543870][ T9602] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 356.615348][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.667189][ T9602] rc_core: IR keymap rc-dib0700-rc5 not found [ 356.667204][ T9602] Registered IR keymap rc-empty [ 356.667358][ T9602] dvb-usb: could not initialize remote control. [ 356.667364][ T9602] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 356.700007][T10860] loop8: detected capacity change from 0 to 7 [ 356.704454][T10860] Dev loop8: unable to read RDB block 7 [ 356.704500][T10860] loop8: unable to read partition table [ 356.704645][T10860] loop8: partition table beyond EOD, truncated [ 356.704660][T10860] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 356.730349][ T5899] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 356.896298][ T5899] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 356.896327][ T5899] usb 2-1: config 0 has no interface number 0 [ 356.896365][ T5899] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 356.896390][ T5899] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 356.896422][ T5899] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 356.916374][ T5899] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 356.916406][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 356.916435][ T5899] usb 2-1: Product: syz [ 356.916447][ T5899] usb 2-1: SerialNumber: syz [ 357.109822][ T5899] usb 2-1: config 0 descriptor?? [ 357.119263][ T5899] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 357.121739][ T5899] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input35 [ 357.261509][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 357.382988][T10869] binder: BINDER_SET_CONTEXT_MGR already set [ 357.389142][T10869] binder: 10850:10869 ioctl 4018620d 200000000040 returned -16 [ 357.645316][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.826280][T10866] netlink: 'syz.2.1331': attribute type 11 has an invalid length. [ 357.834277][T10866] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1331'. [ 357.845593][T10866] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1331'. [ 357.859147][ T29] audit: type=1326 audit(1775446898.796:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.2.1331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e12b9c819 code=0x0 [ 358.056207][ T30] INFO: task kworker/1:3:5885 blocked for more than 143 seconds. [ 358.064995][ T30] Tainted: G L syzkaller #0 [ 358.071938][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.085451][ T30] task:kworker/1:3 state:D stack:21480 pid:5885 tgid:5885 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 358.110398][ T30] Workqueue: usb_hub_wq hub_event [ 358.118419][ T30] Call Trace: [ 358.121794][ T30] [ 358.125488][ T30] __schedule+0x15dd/0x52d0 [ 358.130495][ T30] ? check_path+0x21/0x40 [ 358.134897][ T30] ? __pfx___schedule+0x10/0x10 [ 358.141619][ T30] ? schedule+0x90/0x360 [ 358.146331][ T30] schedule+0x164/0x360 [ 358.150574][ T30] schedule_timeout+0xc3/0x2c0 [ 358.156929][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 358.162497][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.175191][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.180502][ T30] ? wait_for_completion+0x274/0x5e0 [ 358.186218][ T30] wait_for_completion+0x2cc/0x5e0 [ 358.191426][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 358.197507][ T30] i2c_del_adapter+0x5c0/0x790 [ 358.203354][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.209949][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 358.217143][ T30] ? dvb_usbv2_exit+0x935/0xb60 [ 358.222106][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 358.229718][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 358.236122][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 358.242070][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 358.277509][ T30] usb_probe_interface+0x668/0xc90 [ 358.316202][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 358.361317][ T30] really_probe+0x267/0xaf0 [ 358.384190][ T30] __driver_probe_device+0x18c/0x320 [ 358.402218][ T30] driver_probe_device+0x4f/0x240 [ 358.415320][ T30] __device_attach_driver+0x279/0x430 [ 358.421045][ T796] usb 5-1: USB disconnect, device number 65 [ 358.444046][ T30] bus_for_each_drv+0x258/0x2f0 [ 358.459333][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 358.477830][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 358.494842][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.511438][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 358.515526][ T796] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 358.527415][ T30] __device_attach+0x2c5/0x450 [ 358.540101][ T30] ? __pfx___device_attach+0x10/0x10 [ 358.565351][ T30] ? _raw_spin_unlock+0x28/0x50 [ 358.578082][ T30] device_initial_probe+0xa1/0xd0 [ 358.591593][ T30] bus_probe_device+0x12a/0x220 [ 358.602829][ T30] ? device_add+0x726/0xb70 [ 358.613465][ T30] device_add+0x7b6/0xb70 [ 358.623551][ T30] usb_set_configuration+0x1a87/0x2110 [ 358.630362][ T30] usb_generic_driver_probe+0x8d/0x150 [ 358.642582][ T30] usb_probe_device+0x1c4/0x3b0 [ 358.653822][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 358.670291][ T30] really_probe+0x267/0xaf0 [ 358.681801][ T30] __driver_probe_device+0x18c/0x320 [ 358.685401][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.702464][ T30] driver_probe_device+0x4f/0x240 [ 358.713586][ T30] __device_attach_driver+0x279/0x430 [ 358.724834][ T30] bus_for_each_drv+0x258/0x2f0 [ 358.729898][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 358.735886][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 358.741539][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.746900][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 358.752740][ T30] __device_attach+0x2c5/0x450 [ 358.757583][ T30] ? __pfx___device_attach+0x10/0x10 [ 358.762916][ T30] ? _raw_spin_unlock+0x28/0x50 [ 358.768207][ T30] device_initial_probe+0xa1/0xd0 [ 358.773293][ T30] bus_probe_device+0x12a/0x220 [ 358.778224][ T30] ? device_add+0x726/0xb70 [ 358.782850][ T30] device_add+0x7b6/0xb70 [ 358.787432][ T30] usb_new_device+0xa08/0x16f0 [ 358.792270][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 358.797585][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.802816][ T30] hub_event+0x2a1c/0x4f30 [ 358.807445][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 358.812746][ T30] ? __pfx_hub_event+0x10/0x10 [ 358.817620][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 358.823389][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 358.834677][ T30] process_scheduled_works+0xb6e/0x18c0 [ 358.840738][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.847065][ T30] ? assign_work+0x3d5/0x5e0 [ 358.851947][ T30] worker_thread+0xa53/0xfc0 [ 358.856686][ T30] kthread+0x388/0x470 [ 358.860984][ T30] ? __pfx_worker_thread+0x10/0x10 [ 358.866254][ T30] ? __pfx_kthread+0x10/0x10 [ 358.872162][ T30] ret_from_fork+0x51e/0xb90 [ 358.876867][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 358.882179][ T30] ? __switch_to+0xc7d/0x1450 [ 358.888980][ T30] ? __pfx_kthread+0x10/0x10 [ 358.894467][ T30] ret_from_fork_asm+0x1a/0x30 [ 358.901169][ T30] [ 358.904528][ T30] [ 358.904528][ T30] Showing all locks held in the system: [ 358.912621][ T30] 1 lock held by khungtaskd/30: [ 358.920741][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 358.938975][ T30] 2 locks held by kworker/u8:5/93: [ 358.944218][ T30] 2 locks held by getty/5582: [ 358.949140][ T30] #0: ffff8880378c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 358.959046][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 358.969417][ T30] 5 locks held by kworker/1:3/5885: [ 358.974887][ T30] #0: ffff888021e86948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 358.986527][ T30] #1: ffffc90004db7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 358.998429][ T30] #2: ffff88802ab2b1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 359.007692][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.015181][ T30] #3: ffff88803700a1e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 359.025278][ T30] #4: ffff888057ee11a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 359.034716][ T30] 4 locks held by udevd/6583: [ 359.039962][ T30] #0: ffff888033ba4418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 359.048855][ T30] #1: ffff888056034888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 359.058462][ T30] #2: ffff888033c55b48 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 359.068020][ T30] #3: ffff88803700a1e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 359.078737][ T30] 4 locks held by kworker/u8:17/6674: [ 359.084220][ T30] #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 359.095313][ T30] #1: ffffc9000567fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 359.106169][ T30] #2: ffffffff8fbc2150 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 359.115741][ T30] #3: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 359.126748][ T30] [ 359.129307][ T30] ============================================= [ 359.129307][ T30] [ 359.157321][ T30] NMI backtrace for cpu 1 [ 359.157344][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 359.157367][ T30] Tainted: [L]=SOFTLOCKUP [ 359.157374][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 359.157384][ T30] Call Trace: [ 359.157390][ T30] [ 359.157398][ T30] dump_stack_lvl+0xe8/0x150 [ 359.157426][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 359.157445][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.157468][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 359.157485][ T30] sys_info+0x135/0x170 [ 359.157508][ T30] watchdog+0xfd9/0x1030 [ 359.157527][ T30] ? watchdog+0x21a/0x1030 [ 359.157550][ T30] kthread+0x388/0x470 [ 359.157567][ T30] ? __pfx_watchdog+0x10/0x10 [ 359.157580][ T30] ? __pfx_kthread+0x10/0x10 [ 359.157597][ T30] ret_from_fork+0x51e/0xb90 [ 359.157620][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 359.157639][ T30] ? __switch_to+0xc7d/0x1450 [ 359.157661][ T30] ? __pfx_kthread+0x10/0x10 [ 359.157678][ T30] ret_from_fork_asm+0x1a/0x30 [ 359.157712][ T30] [ 359.157718][ T30] Sending NMI from CPU 1 to CPUs 0: [ 359.274249][ C0] NMI backtrace for cpu 0 [ 359.274273][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.274292][ C0] Tainted: [L]=SOFTLOCKUP [ 359.274297][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 359.274306][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 359.274330][ C0] Code: 8e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 a2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 359.274346][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 359.274359][ C0] RAX: 000000000084865f RBX: ffffffff819aa1fa RCX: 0000000080000001 [ 359.274369][ C0] RDX: 0000000000000001 RSI: ffffffff8defb8da RDI: ffffffff8c27d500 [ 359.274379][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733 [ 359.274389][ C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000 [ 359.274399][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 359.274408][ C0] FS: 0000000000000000(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 359.274420][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.274430][ C0] CR2: 000020000000c000 CR3: 00000000768e2000 CR4: 00000000003526f0 [ 359.274443][ C0] Call Trace: [ 359.274450][ C0] [ 359.274456][ C0] default_idle+0x9/0x20 [ 359.274476][ C0] default_idle_call+0x72/0xb0 [ 359.274497][ C0] do_idle+0x36a/0x5f0 [ 359.274520][ C0] ? __pfx_do_idle+0x10/0x10 [ 359.274542][ C0] cpu_startup_entry+0x43/0x60 [ 359.274560][ C0] rest_init+0x2de/0x300 [ 359.274574][ C0] start_kernel+0x385/0x3d0 [ 359.274590][ C0] x86_64_start_reservations+0x24/0x30 [ 359.274608][ C0] x86_64_start_kernel+0x143/0x1c0 [ 359.274625][ C0] common_startup_64+0x13e/0x147 [ 359.274646][ C0] [ 359.275496][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 359.275522][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 359.275545][ T30] Tainted: [L]=SOFTLOCKUP [ 359.275552][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 359.275563][ T30] Call Trace: [ 359.275570][ T30] [ 359.275577][ T30] vpanic+0x56c/0xa60 [ 359.275605][ T30] ? __pfx___schedule+0x10/0x10 [ 359.275626][ T30] ? __pfx_vpanic+0x10/0x10 [ 359.275656][ T30] panic+0xc5/0xd0 [ 359.275678][ T30] ? __pfx_panic+0x10/0x10 [ 359.275701][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 359.275725][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 359.275747][ T30] watchdog+0x1023/0x1030 [ 359.275769][ T30] ? watchdog+0x21a/0x1030 [ 359.275791][ T30] kthread+0x388/0x470 [ 359.275809][ T30] ? __pfx_watchdog+0x10/0x10 [ 359.275823][ T30] ? __pfx_kthread+0x10/0x10 [ 359.275841][ T30] ret_from_fork+0x51e/0xb90 [ 359.275867][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 359.275888][ T30] ? __switch_to+0xc7d/0x1450 [ 359.275910][ T30] ? __pfx_kthread+0x10/0x10 [ 359.275928][ T30] ret_from_fork_asm+0x1a/0x30 [ 359.275964][ T30] [ 359.573437][ T30] Kernel Offset: disabled [ 359.577749][ T30] Rebooting in 86400 seconds..